last executing test programs: 10.648616483s ago: executing program 0 (id=1237): recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@hci, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)=""/222, 0xde}], 0x1, &(0x7f0000000440)=""/61, 0x3d}, 0x2100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x48) socket$kcm(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, 0x0, &(0x7f0000000400)=""/198}, 0x20) 10.076715754s ago: executing program 0 (id=1240): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$rds(0x15, 0x5, 0x0) recvmsg(r4, 0x0, 0x40) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x3}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000010000009c0011000a0101010000000000000000000000007f00000100000000000000000000000020010000000000000000000000000000fc0200000000000000000000000000013c030000000000000a0002000a0101010000000000000000000000007f00000100000000000000000000000000000000000000000000000000000000ac1e01010000000000000000000000003c040000020000000a"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r9, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x40, 0xe}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x9, 0x5, 0x9, 0x1, 0xffffffff, 0x2}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 9.552899552s ago: executing program 0 (id=1243): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001580)=ANY=[@ANYBLOB="240000005e00010000000000000000000c0000000100000000000080050002"], 0x24}], 0x1}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) 9.153566319s ago: executing program 0 (id=1245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3a84821, &(0x7f0000000a40)=ANY=[@ANYBLOB="3d000000f8"]) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0x1}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0x5, 0xa, 0x5, 0x10, 0xff, 0xd, 0x9, 0x8, 0xc, 0x5, 0xc, 0xd, 0x9, 0x4, 0x3, 0xd], 0x1, [0x1ff, 0xc, 0x101, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x8, 0x2e, 0x5, 0x3, 0xfffc, 0x6, 0x6, 0xba], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0xe14, 0x3, 0x3, 0x48a2, 0xffff, 0x7, 0x5, 0x1, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000040000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x7e}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000040)={0x10, 0x1b, 0x800, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x40064}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r5], 0x9a) close(0x3) 8.873995054s ago: executing program 0 (id=1248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1bc, 0xa, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xe5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xd09}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x73b1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xf3d}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x10001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x6, 0x1a, '*\x00'}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_ADT={0xac, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4f}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x10}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vxcan1\x00'}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9cb}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x1bc}}, 0x40801) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000280), 0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x15, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_val={0x18, 0xa, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @ldst={0x1, 0x3, 0x0, 0x5, 0x4, 0x50}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0xffff5d66, 0xd8, &(0x7f00000003c0)=""/216, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xb, 0x8, 0x76}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x0, 0x3, 0x8, 0x1}], 0x10, 0x271e}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0, 0xb0, &(0x7f0000000740)=[{}, {}], 0x10, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) (async) r3 = perf_event_open(&(0x7f0000000980)={0x0, 0x80, 0xb, 0x99, 0x4, 0xb1, 0x0, 0x6, 0x1000, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x6, 0x7fff}, 0x20, 0x5, 0x7ff, 0x5, 0x0, 0x3d6, 0xde31, 0x0, 0xf77, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000a00)) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000001dc0)={&(0x7f0000000a40)=@qipcrtr, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000ac0)=""/251, 0xfb}, {&(0x7f0000000bc0)=""/75, 0x4b}, {&(0x7f0000000c40)=""/172, 0xac}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/4096, 0x1000}], 0x5}, 0x2) socket$packet(0x11, 0x3, 0x300) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001e00)={0xffffffffffffffff}) r6 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000002240)={&(0x7f0000001e40)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-asm\x00'}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001ec0)}, {&(0x7f0000001f00)="5974eb1ab599bd675ce3bd1ba7a887d90dbcb2d243d44f3e434f49d682880db3b5e0e8b75fe1c6c0c856cc3c357ae176568bb52d95c5fd73c5ed83e4fbac5775d9f025dad2d2179091d205416064b41c160d3f7e7329bc8c7b34a7b22be08ebc397349ca149815593203a9eaee4cc98e2b96428975c4173818f7a068f373695a6afcbee220cd3ebf284e2b763e59b72f07562515661bc9cd7b8b65ac9bc6", 0x9e}, {&(0x7f0000001fc0)="c40ce96d320936ba0ba1b7ed1f448db85368c92a2f73e3150cd99e", 0x1b}], 0x3, &(0x7f0000002040)=[{0xd8, 0x0, 0x0, "03f163bdada25494bf998d37646fc13e3ca8cc26d0f373dd5d46ff5d6632f24fb6986bc8becabafe74c4fc19b5e387a08c078e96b2d0b1d5e3e3e86b2313079da61f944dbd7188f8103739ba463a7797b37adaa2f6cdf9be1528715b1284386e2225598ce9c8d3269a60c26d5075ffb0ee6e19c47ac8a476a91a84133256edf634df69bc43f002385a1cc40b305ef94b9294b43f76c1bfc39fad120a21a63e9cc12bf208ca3aaeee0fb29791847ad7f8c2a369744fa6dcabfb0d8d3129d4893fea8aa49ebeb601"}, {0x50, 0xf9ed9fb9d192a304, 0x20a, "01113393243c62c6e37b19607fc5f97733a4f3dd9a751b2f90463ff416d058ea491fd8049073cc7afadb0363b96e351ea83bfc6f35476e1b5d"}, {0x38, 0x116, 0x7, "7b000cccb3b1a777e643225b6255cbb5762a201fa829248d04e6a2e2727517e3153b"}, {0x68, 0x116, 0xe, "9c9697a9e4c9e9c452cbba2698fd62e02c771efc94a770dfe88d5ec1863dc414c160b8271954ca1c2a8c744672da67b965675642952ca9b5ee50478b15b554d6e897adda2c3ccf7a701939e28e2507f4a8b2d5a192"}], 0x1c8}, 0x400c001) socket$caif_stream(0x25, 0x1, 0x0) (async) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000002280)) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002300)=@generic={&(0x7f00000022c0)='./file0\x00', 0x0, 0x415c200471177e6e}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000035c0)={0x11, 0x1e, &(0x7f0000002340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x22}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800}, @map_fd={0x18, 0x8, 0x1, 0x0, r7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000002440)='GPL\x00', 0x8, 0x1000, &(0x7f0000002480)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000003480)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000034c0)={0x2, 0xc, 0x10, 0xab52}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000003500)=[r7, r7, r7, r7, 0xffffffffffffffff, r7, r7, r7, r6], &(0x7f0000003540)=[{0x0, 0x2, 0x6, 0x3}, {0x4, 0x4, 0x0, 0x2}, {0x5, 0x5, 0xe, 0x4}, {0x4, 0x5, 0x1, 0xb}, {0x0, 0x3, 0xf, 0x7}], 0x10, 0xcc81}, 0x94) (async, rerun: 64) fstat(r6, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) sendmsg$nl_netfilter(r0, &(0x7f0000003880)={&(0x7f0000003680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000003840)={&(0x7f0000003740)={0xd4, 0x1, 0x4, 0x101, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x5}, [@nested={0x10, 0x9c, 0x0, 0x1, [@nested={0x4, 0xd2}, @nested={0x4, 0xb2}, @nested={0x4, 0x9c}]}, @typed={0x8, 0x6b, 0x0, 0x0, @uid=r8}, @typed={0xa7, 0x8a, 0x0, 0x0, @binary="b9e01221a88db58cbfac6e1782e7b96c51b515992f6159f31b0266182363030126aaf7e4dc34fd9d004c1449c9b549d17141001da8c0206ab2104f7e61af139e12ba663cff4e6040eb8567ffb242701a5125d9b63b9460300fa5f983a47c7136966cea1789ead9e577bd69123b2a084f45787b7a53ea8bd6a00da9897c9d12eb488ce8ae9db7da99c19d3fa64361a8d82d548da42d917cb5f1323a4ea897da3c2f5673"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x400c844) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = gettid() sendmsg$nl_generic(r9, &(0x7f0000005ac0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a80)={&(0x7f0000003900)={0x216c, 0x2a, 0x4, 0x70bd29, 0x25dfdbfb, {0x1d}, [@nested={0x1c, 0x13c, 0x0, 0x1, [@nested={0x4, 0xda}, @typed={0x10, 0x131, 0x0, 0x0, @binary="4bc8435c34d49dbd5815b40b"}, @nested={0x4, 0x6d}]}, @generic="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", @generic="452f7d2360a7dd440288baa1745b7ccf4b277585208d29e04fe1000f0f834c882cba65155aa47b07f9845e5ed1a5194a2656950b3a163a28ada1c0e6099d661c27def1c97175c04bd11ae4fe82a45f9736390c126dc3e27515dd5a7c5db782f03900ec3554818fd8a9175c2b", @typed={0x8, 0x130, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x10bf, 0x82, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @ipv4=@loopback}, @generic="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", @nested={0x4, 0x79}, @generic="9b68f3dbc8a0de26dbffa4506cbb859641d5b4f4f5a96620300b46bf16e7240add9104b3cdfa360cfcb415c574b347a4241cbc7e3182e9d2d2a11a464c5fc252c4337210dacc765886af20c2086d3842a955467d91d03448620986e3f5db9fd4cd6ba3b55ee4ee854b29fd556431d6d2ce5dc994615e414c9f2ccb1dc19a09dfe67ac4f5f49e44f778c7c7359e52fb4191179ee852706c", @typed={0x8, 0xd1, 0x0, 0x0, @pid=r10}, @typed={0x4, 0x21}, @typed={0xc, 0xf2, 0x0, 0x0, @u64=0x5}]}]}, 0x216c}, 0x1, 0x0, 0x0, 0x40040}, 0x20040815) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000005b40)=@generic={&(0x7f0000005b00)='./file0\x00', r1}, 0x18) (async) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000005b80)={r5}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000005bc0)={r1, r7}, 0xc) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000005cc0)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005c80)={&(0x7f0000005c40)={0x30, 0x1, 0x7, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFACCT_FILTER={0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x24000040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000005d00)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r11, &(0x7f0000007180)={0x0, 0x0, &(0x7f0000007080)=[{&(0x7f0000005d40)=""/108, 0x6c}, {&(0x7f0000005dc0)=""/81, 0x51}, {&(0x7f0000005e40)=""/85, 0x55}, {&(0x7f0000005ec0)=""/167, 0xa7}, {&(0x7f0000005f80)=""/49, 0x31}, {&(0x7f0000005fc0)=""/109, 0x6d}, {&(0x7f0000006040)=""/4096, 0x1000}, {&(0x7f0000007040)=""/50, 0x32}], 0x8, &(0x7f0000007100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x6e0f565e04eb973a) bpf$MAP_CREATE(0x0, &(0x7f00000071c0)=@bloom_filter={0x1e, 0x7, 0x6, 0x1000, 0x8001, r12, 0x9, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x1, 0xe, @value=r12}, 0x50) 8.644616136s ago: executing program 0 (id=1249): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x101984, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5593a547, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d00)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000300000000000000000000030000000002000000020000000400000601000000000000110200000008000000005f00fe588a1bca0626df7b36d0e859d8243511dedb9179fd909a7fb93422c2d8646b344c9f76111b8bc8383a2533b7a32685e1ec2c925b9e53cf44c12a3d79ce8538756d78038dc7b8d49b9a555a5a817d42e58b23"], 0x0, 0x43, 0x0, 0x1}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0x2) r3 = perf_event_open(0x0, 0x0, 0x80100000009, 0xffffffffffffffff, 0xb) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000009c0)={0xffffffffffffffff, &(0x7f00000001c0)="bc376eca9cff8e10769ba8cd47f33388931c677046eef900fc12b4a95b79a49ade82568f988ad010bb4141f7be7c6669e150c41356a3cb621b71056afe20dd7bd69afd37b6c1ebcf3a579f531c843a6853a5533af0ab59dc67495f6a24a00fc832495b90bc7171428c01464bb01c0b4ec5a7be1a4bf17bdc60c1be89b1618228b856d95f", &(0x7f0000000280)=""/265}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="0600"}) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5ae) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004025a9fff0000002e0000001126078f39b52d89f6fa0b83ff40c17ef57cec2d0f76a8c1829bec8355c379c44c32e54f8fe7ca6b82e3c3d34cd6daa3ebed", @ANYRES32, @ANYBLOB="8700"/17, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2100, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES8=r6], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x9) 4.373150387s ago: executing program 3 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1d1641, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x5, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_TTY_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x3f8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x48800}, 0x40) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004080) syz_clone(0xa49a4080, 0x0, 0x5f, 0x0, 0x0, 0xfffffffffffffffc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020e000000000000000000000538050fb6ea193d352fa1657dd9c100a07d7c00005176cce652209c076bcb951a3ec39656c8ad74e12d7b7f06746ebaa24da61bc95ba9fb18a516c2a93a6718812a67ab3a1ca31254a0951bcd00d1e6006e6195e9588c55479400ab1a9bd7ac52a90ee51d5efaadc8a734a4a112796b784884c8c2277c7678a00bfedd872379751c207a229bd42260cf8bfa007f"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)='%ps \x00'}, 0x20) 4.254829943s ago: executing program 4 (id=1273): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) r2 = socket$kcm(0x1e, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=r6, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20044004) sendmsg$nl_generic(r7, 0x0, 0x4008094) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$TUNGETVNETLE(r8, 0x8953, 0x0) sendmsg$kcm(r2, 0x0, 0x10) socket$kcm(0x1e, 0x4, 0x0) 3.489745953s ago: executing program 1 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1d1641, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="378303076844268cb89e14f008004ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x3f8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x48800}, 0x40) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004080) syz_clone(0xa49a4080, 0x0, 0x5f, 0x0, 0x0, 0xfffffffffffffffc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020e000000000000000000000538050fb6ea193d352fa1657dd9c100a07d7c00005176cce652209c076bcb951a3ec39656c8ad74e12d7b7f06746ebaa24da61bc95ba9fb18a516c2a93a6718812a67ab3a1ca31254a0951bcd00d1e6006e6195e9588c55479400ab1a9bd7ac52a90ee51d5efaadc8a734a4a112796b784884c8c2277c7678a00bfedd872379751c207a229bd42260cf8bfa007f"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)='%ps \x00'}, 0x20) 3.44714427s ago: executing program 3 (id=1277): r0 = socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042720920101001201ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) 2.634218827s ago: executing program 4 (id=1278): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe8000000000000087"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3}, {}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010001009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x37, 0x37, 0x6, [@datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x10001, 0x4d25}, {0x2, 0x3, 0x7}], "1a62ff"}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x35, 0x4}]}, {0x0, [0x5f, 0x0, 0x61, 0x30]}}, &(0x7f00000006c0)=""/254, 0x56, 0xfe, 0x1, 0x5}, 0x28) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 2.618969982s ago: executing program 2 (id=1279): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002500010324bd7006fdfaf5e567"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(r3, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x5, @mcast2, 0x9}, 0x80, 0x0}, 0x20000000) close(0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x100, 0xc, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYRESDEC=r5, @ANYBLOB="56181b7c51618828bf3fdabacec08a523b414985519257d926ee43e97346e9256dcd9b70917d26f19bd0b502788edc7245c4bbfeff6f3d867ce967b86bf539a5218ecc1731b0b8b7ee1e7bc69586371e9b5ca3dbc8d010f03b45a95e97f080b6ff1588dd0e9250551dd15c5c09960e4a6d91", @ANYRESOCT, @ANYBLOB="3662572b23862b42a0941eb5b6a3931d8936be34a7c1d414c316ee9c9c56d54bf12c96959a6ef32d57ab32d0039f478c8a5c0477388dacd163baf30e34f252b81b8c8a4d4dc8af38e17ae06e393dce005beaed9c6a0e33011b543cb17c092f0f56e4dc5db460c756e45331473c8dd753a9e3ba9c8174c1c0a4b44b1584dc38e95572d743b504a272c1b28f74132ee4a162dfdd67be5e7f219288feb775dfd53795136dd9c7c35444769c583537262102dee1f34c9fe9cc2edc67816f4d47eed4dc52fd426ff4f370", @ANYRESDEC=r6, @ANYBLOB="11943c2222aeeff2b386ab993ee767cc8ebe9cc5b59a4cbe9b2dedd9eb37489c5415ce8ace2c2e2b3c9164043e6d27be0b68961911a5a8183599bc54cd1b39221da558e515d2c388cbf4b8cedc67cd5c531dfc025aff0a8e1e8125d4a01970667d0aa75f5a1453194500651e83f14999d43faf0e6c173f3a972c19570ba2c24bdf1ce7746292c983df477d8e059a219adc3dc55d74008b4f04982b4b73917e06fe8b9b468ca6652f1983dc1629b915cd655c5d1e1b"], 0xfffffffffffffe16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x110c230041) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) gettid() socket$nl_route(0x10, 0x3, 0x0) 2.570543912s ago: executing program 3 (id=1280): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe8000000000000087"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3}, {}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010001009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x37, 0x37, 0x6, [@datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x10001, 0x4d25}, {0x2, 0x3, 0x7}], "1a62ff"}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x35, 0x4}]}, {0x0, [0x5f, 0x0, 0x61, 0x30]}}, &(0x7f00000006c0)=""/254, 0x56, 0xfe, 0x1, 0x5}, 0x28) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 2.4067787s ago: executing program 1 (id=1281): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe8000000000000087"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3}, {}, {}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000010001009112d9000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x37, 0x37, 0x6, [@datasec={0x6, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x10001, 0x4d25}, {0x2, 0x3, 0x7}], "1a62ff"}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x6c, 0x0, 0x35, 0x4}]}, {0x0, [0x5f, 0x0, 0x61, 0x30]}}, &(0x7f00000006c0)=""/254, 0x56, 0xfe, 0x1, 0x5}, 0x28) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 2.15805006s ago: executing program 3 (id=1282): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1200000007000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e7ffffffffffffff00"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x0}}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r3, {0x1, 0xd}, {0xffff, 0xffff}, {0x5, 0xc}}}, 0x24}}, 0x4000010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f6873"], 0xe8}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, @perf_bp={0x0, 0xc}, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x9ae9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x284402, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x1) close(r7) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="200000000102"}) 2.06609771s ago: executing program 4 (id=1283): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x5}, 0xa38, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffd, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x6, 0xcb, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c97ffffffffffffff00000007"], 0x30}, 0x40880) 1.731486722s ago: executing program 1 (id=1284): socket$kcm(0x10, 0x400000002, 0x0) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="03000000040012000037dfb43eb16331278fc49754ddcc4ca10f855bff3bd99480318e9fd44c4359e8e67a34bb7e8abda39726e63caa4d8cf979457f62c52ca44917a1ab261419137f78f2b39eee8180408c77198aa37fd0b8249d82e079421eec545bf211d4477db8bad2b5de25eb99f131dd101bf07593f85af3970cbd62bf711a0c300e6bed11876b164b383197c56ef34fc10c7439779414c8", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES64=r0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x101, 0x1add, 0x0, 0x20a0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x8}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@bloom_filter={0x1e, 0x101, 0x1add, 0x0, 0x20a0, 0x1, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x102, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x4000}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x4000}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x40, 0x0, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x2010, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000005c0)=""/258, 0x1a, 0x102, 0x1}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000100)='j', 0x1}], 0x1}, 0x40041) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_config_ext={0x2, 0x1946}, 0x100800, 0x0, 0x0, 0x8, 0x7fff, 0x13f, 0x0, 0x0, 0x0, 0x0, 0x2000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000700)=r2}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r9) (async) close(r9) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random}) (async) ioctl$SIOCSIFHWADDR(r9, 0x8b14, &(0x7f0000000000)={'virt_wifi0\x00', @random}) bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x1c, 0x8, &(0x7f0000002940)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000002980)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x2c, r6, 0x8, &(0x7f0000002a00)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002a40)={0x1, 0x1, 0x7fff, 0x1}, 0x10, 0x0, r2, 0x6, &(0x7f0000002a80)=[r2, r4], &(0x7f0000002ac0)=[{0x4, 0x4, 0xd, 0x3}, {0x5, 0x1, 0x5, 0xc}, {0x1, 0x4, 0x4, 0x9}, {0x1, 0x2, 0xb, 0x7}, {0x1, 0x2, 0x0, 0x3}, {0x3, 0x2, 0x6, 0xa}], 0x10, 0x6}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002b40)={0x1c, 0x8, &(0x7f0000002940)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000002980)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x2c, r6, 0x8, &(0x7f0000002a00)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000002a40)={0x1, 0x1, 0x7fff, 0x1}, 0x10, 0x0, r2, 0x6, &(0x7f0000002a80)=[r2, r4], &(0x7f0000002ac0)=[{0x4, 0x4, 0xd, 0x3}, {0x5, 0x1, 0x5, 0xc}, {0x1, 0x4, 0x4, 0x9}, {0x1, 0x2, 0xb, 0x7}, {0x1, 0x2, 0x0, 0x3}, {0x3, 0x2, 0x6, 0xa}], 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x4, 0xd, &(0x7f0000000a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x4}]}, &(0x7f0000000b00)='GPL\x00', 0x81, 0x1000, &(0x7f00000018c0)=""/4096, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2e, r9, 0x8, &(0x7f00000028c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000002900)={0x1, 0xb, 0x9, 0x6}, 0x10, 0x0, r10, 0x0, &(0x7f0000002c00)=[r3, r2, r4, r2], 0x0, 0x10, 0x4}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x48804}, 0x4000000) bpf$MAP_LOOKUP_ELEM(0x1d, 0x0, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1d, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, 0x0) 1.636812525s ago: executing program 2 (id=1285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000000a0900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240fffffffa16000300686173683a6e65742c706f72742c6e6574000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x24004010}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x2, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'wlan1\x00', @random="2b0100004ec6"}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, 0xffffffffffffffff, 0x15b4}, 0x50) socketpair(0x24, 0x5, 0x800, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0xffffffbd, 0x0, 0x80000000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu~20\t&&') socketpair(0x2, 0xa, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00', @random="d22d8f281735"}) 1.346180589s ago: executing program 1 (id=1286): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r1}) setsockopt$sock_attach_bpf(r0, 0x107, 0x2000, 0x0, 0xfffffff0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000040d20100fcff07000400000001000000040048800c000180080010800400068008000200", @ANYRES32, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$key(0xf, 0x3, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109005000118049005300c9a7befe6f6d645a1a11b81b2c4b101c7510e19fee6bb49f6cc7a2c50fd57c06db1a75df432aa833928a0772ff8f5e9ed3103bc77d35b296674f1fe35663c0d236fd88d7ba0000001f010580", @ANYBLOB="002ce64889"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df250800010000000000090002"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1C\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') 1.344828118s ago: executing program 4 (id=1287): socket$kcm(0xa, 0x1, 0x106) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x41000, 0x34}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (rerun: 32) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (rerun: 32) r3 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, r4, 0x0) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040004000000002000000000000000000000300000000030000000200000000000000000000000000000105000000200000000000000000000003000000000228000002000000"], 0x0, 0x5a}, 0x28) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40086602, &(0x7f0000000180)=0x20) (async, rerun: 64) bpf$ITER_CREATE(0x21, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a7e6dc9ab1e7b00ff000000007110bf00000000009500"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) (async) recvmsg$unix(r5, 0x0, 0x81) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) (async, rerun: 32) socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.19450255s ago: executing program 2 (id=1288): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x161) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001800010324bd70c6695752af3d"], 0x14}}, 0x8000) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}, 0x1, 0x0, 0x0, 0x4040854}, 0x40) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x1, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) 1.171620018s ago: executing program 3 (id=1289): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) r2 = socket$kcm(0x1e, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6) recvmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=r6, 0x120) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x9, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, 0x3, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20044004) sendmsg$nl_generic(r7, 0x0, 0x4008094) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r9, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) ioctl$TUNGETVNETLE(r8, 0x8953, 0x0) sendmsg$kcm(r2, 0x0, 0x10) socket$kcm(0x1e, 0x4, 0x0) 1.026179412s ago: executing program 1 (id=1290): socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x8}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x8}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x0, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d30, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x7988}, 0x1000, 0x800, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r4, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x1000005, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x28}, 0x922bac8576bdadce) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x3a, 0x0, 0x0, 0x3, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="f9", 0x1}], 0x1, 0x0, 0x3d, 0xa6820000}, 0xff00) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="d40a00002000000061118b000000000085000000cc00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8927, &(0x7f0000000040)='\xd0\xb4\'') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.025787879s ago: executing program 4 (id=1291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1d1641, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c03406910927c6b0b55b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfe79578e51bc53099e90f4580d760551b5b342f7cbdb9cd38bdb2209c676b2ac2deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f132020000002cbe7bc04b82d2789cb1b2b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c41146dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a42b359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780c70014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e506d1387b63112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece08ac772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2ef0ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a3f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099bdae7ed04935c2c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adeb988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ffa3c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe4a3ced846891180604b6dd2499d16d7d9158ffffff069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb0814040000007874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dbae3428d2129ecfce1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296c6a298c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f050000000000000026049fe86e09623524f390bf79b441b75fc790c58e273cd905deb28c13c1ed1c0d9cae846b03008cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc48f97496079654f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b4749c28eb5167e9936ed327fb237a56224e49d9ea956d1798571b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecf743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be182724d95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd0403a099f32468f1561f058960d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b656dc0e32384f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bbe3e8ef76f57a2d0e69115d33394e86e4b83c0f3c2a34635f3eee4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cd082027c641ec4355eb4acff90756d1a1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8cc3fe28bc3586844f5fecb92aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a5906002fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128ab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0afd9ae134400f70b5e6aefb7eee403502732df858a2ea033b6c91c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80ffb8f386bb79f5589829b6b0679b5d65a00000000000000e6ff00000000000000000000faff0000bab50bc8508a9644d3e7c328b0ff22035c8073f8c1f0e3da7339fc81d4ab3ef2857ef70a81d8a1628da28c942571880e22df7cabae56d5ff5e483c9c1f5a258b8f1f34cc300312f76a374a6e9b3f9dbd7f538a80b00f97e47895b3201c5126feca0888956a7d768198d9c2109ac508a47ebb99c539ef45af7d87b308117a9e321a3861bc42cf41942c31268a4020221d7b1622585094eddd83c7f4acdd7f5c23d8b730bf03118261edada8b8487a3b1b7548a4687a91f12bf70bb1df3bfe7d4b92ad6fcbf401efd6eb004cf20016ad8d1dad136dd856ffca238b39482811f9c8524bf182f1956a3d044423927df28880bbd11c06407220df8e1d1d483d947d990dc175803d765ca14a915a0040b641959ad3e776b4bb4852fea12983dc18b7404914a6137dc4a78f1e0d331c60a9019c21698cd18753491df962f496f2395563e9c3d7b1228d0e488cf7e50a29541aa757f2e2ee9ff4433d65db0de5a123d569e39dce481156cbec584c9a32a8e3b032fa003192c891d83119bc950abac9147b9fcb0acd9a207b5ceb7e8ed1d91c000000000000000000000000000000141258373281153fa27e586ea82650f070d8851ac9e7ac07b37a6479d4017b5b5af3ff4c91235df4f657d77e386a329aec4d766369c86b62b01ceb028c6fcf206883633cb143016b9f5351a45a8cb4ea110ba700000000000000883416b6eff6a793c71deb7d780c4f51d86ece127c0714144916f397d398ad2fe72b710b932c15c2369cb5d2d2f6ae420672c4a626195a891ac51825077fbc286aa3866bbf18a4a8b836ea8c90af0d5f0aff55b50bc18c27875ed2628b91224b7fa9fd10ccd7c1b1a92bac529df981a6d30100e68555553625c0e91a51000000000000000000fe030f85b294f3ea1fce314a9dcefbe3b64e83c35c5e95734786ca78315793cc0e6e776d2ec07c55cd89541ec25e074e840287011cab538d79e1569df321282071d49a4dc5fb2d7da1d05249d0e153fd04aca2", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="378303076844268cb89e14f008004ee0ff", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r5 = socket$netlink(0x10, 0x3, 0xc) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x3f8, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x48800}, 0x40) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x2c, 0x13, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20004080) syz_clone(0xa49a4080, 0x0, 0x5f, 0x0, 0x0, 0xfffffffffffffffc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000020e000000000000000000000538050fb6ea193d352fa1657dd9c100a07d7c00005176cce652209c076bcb951a3ec39656c8ad74e12d7b7f06746ebaa24da61bc95ba9fb18a516c2a93a6718812a67ab3a1ca31254a0951bcd00d1e6006e6195e9588c55479400ab1a9bd7ac52a90ee51d5efaadc8a734a4a112796b784884c8c2277c7678a00bfedd872379751c207a229bd42260cf8bfa007f"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)='%ps \x00'}, 0x20) 950.262968ms ago: executing program 2 (id=1292): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYRES32=0x0], 0x48) socket$kcm(0xa, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r1, 0x0, &(0x7f0000000400)=""/198}, 0x20) 573.839616ms ago: executing program 2 (id=1293): r0 = socket$kcm(0xa, 0x1, 0x106) (async) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x1949}, 0x202, 0x0, 0xfffffffd, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async) r4 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2a, 0x4e23, @broadcast}, 0x10, 0x0}, 0x0) close(r4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114d01, 0x4, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r1], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) (async) close(r3) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f00000000c0), &(0x7f00000002c0)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r5}, &(0x7f00000014c0), &(0x7f0000000000)=r3}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x94102, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r7 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700eaff030000009800000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)="1621d417c559263a27ca605fb73174c39a887fa32e0ecee4f6e4feec22adc7645667b3eaa6d462926f58824b6ba412c8f5372d2e52b9b0e040c787d51e52dcd9af5856315ca0745886b641e49eb3c22d07c5784445be260a7fe64fea2f46af8e26d4c438d576398f105f66a50629ea39f6a5bab65bbba9bbb2b63d368cc0656f4e8c59c75ed9596b98dd642bead23b47d03633aec905aee157ad56666efd0b62", 0xa0}], 0x1}, 0x40000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000002c0007012bbd7000ffdbdf25067c0000080001800900000014000380100001"], 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000014c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001480)={&(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x434}, 0x1, 0x0, 0x0, 0x8000}, 0x30008020) (async) ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r10) 423.449518ms ago: executing program 4 (id=1294): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c00000007060109000000007fffffff00000ec00500010006"], 0x1c}}, 0x4000044) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x2a, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20004}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0xfb, 0x0, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x401}, 0x0, 0x0, 0x0, 0x8, 0x7f7f, 0x4, 0x6, 0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket(0x5, 0x1, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffff34, 0x5129bc59}, 0x0, 0xc8}, 0x0, 0x2000000000, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8100058700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x8907, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x8, 0x5, 0x3, 0x0, 0x2, 0x80000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8000000000000005, 0x9}, 0x102, 0x4, 0x2, 0x9, 0x7ff, 0x2, 0x5, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r6, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x87b9) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xa, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000cd34e0fff0ffffff9500000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x9f, &(0x7f00000002c0)=""/159, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x0, 0x4, 0xa, 0x682d742456e17f7d}, {0x1, 0x5, 0x3, 0x9}, {0x2, 0x3, 0xc, 0x5}], 0x10, 0x7}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 330.657342ms ago: executing program 2 (id=1295): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002500010324bd7006fdfaf5e567"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(r3, &(0x7f0000000440)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x5, @mcast2, 0x9}, 0x80, 0x0}, 0x20000000) close(0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x100, 0xc, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0x13, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYRESDEC=r5, @ANYBLOB="56181b7c51618828bf3fdabacec08a523b414985519257d926ee43e97346e9256dcd9b70917d26f19bd0b502788edc7245c4bbfeff6f3d867ce967b86bf539a5218ecc1731b0b8b7ee1e7bc69586371e9b5ca3dbc8d010f03b45a95e97f080b6ff1588dd0e9250551dd15c5c09960e4a6d91", @ANYRESOCT, @ANYBLOB="3662572b23862b42a0941eb5b6a3931d8936be34a7c1d414c316ee9c9c56d54bf12c96959a6ef32d57ab32d0039f478c8a5c0477388dacd163baf30e34f252b81b8c8a4d4dc8af38e17ae06e393dce005beaed9c6a0e33011b543cb17c092f0f56e4dc5db460c756e45331473c8dd753a9e3ba9c8174c1c0a4b44b1584dc38e95572d743b504a272c1b28f74132ee4a162dfdd67be5e7f219288feb775dfd53795136dd9c7c35444769c583537262102dee1f34c9fe9cc2edc67816f4d47eed4dc52fd426ff4f370", @ANYRESDEC=r6, @ANYBLOB="11943c2222aeeff2b386ab993ee767cc8ebe9cc5b59a4cbe9b2dedd9eb37489c5415ce8ace2c2e2b3c9164043e6d27be0b68961911a5a8183599bc54cd1b39221da558e515d2c388cbf4b8cedc67cd5c531dfc025aff0a8e1e8125d4a01970667d0aa75f5a1453194500651e83f14999d43faf0e6c173f3a972c19570ba2c24bdf1ce7746292c983df477d8e059a219adc3dc55d74008b4f04982b4b73917e06fe8b9b468ca6652f1983dc1629b915cd655c5d1e1b"], 0xfffffffffffffe16) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x110c230041) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xc) gettid() socket$nl_route(0x10, 0x3, 0x0) 271.953449ms ago: executing program 1 (id=1296): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x1000}) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b704"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x7fffffff) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000030000000000000e03000000000000000400000000000008040000000000000000000004040000000000000000000002020000000000006161"], 0x0, 0x52, 0x0, 0x1, 0x80000000}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0xc, "e8"}], 0x18}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r10, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12"], 0x25}, 0x8000) close(r2) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xc}, {0x1d}, {0x28, 0x0, 0x81, 0x1}, {0xb1, 0xfe, 0x28, 0x7}, {0x16, 0xfc, 0x5, 0xffffffff}]}) 0s ago: executing program 3 (id=1297): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x801) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_devices(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='k\x00\x00\x00\x00\x00\x00\x00'], 0x8) recvmsg$unix(r2, 0x0, 0x40002000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x2000c082) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf251c7c00000c000180080002"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r8 = socket$kcm(0x10, 0x3, 0x10) r9 = socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x100001, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r9, 0x0, 0x80) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): im2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.985909][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.995376][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.014171][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.030014][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.039443][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.059582][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.069298][ T5839] veth1_vlan: entered promiscuous mode [ 93.119108][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.147430][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.175713][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.189124][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.217134][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.250673][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.263474][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.315286][ T5839] veth0_macvtap: entered promiscuous mode [ 93.425071][ T5839] veth1_macvtap: entered promiscuous mode [ 93.461037][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.487227][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.511801][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.587017][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.606442][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.626307][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.699741][ T5952] : entered promiscuous mode [ 93.754124][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.802417][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.829547][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.880821][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.904970][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.962954][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.980308][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.454317][ T5970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.491568][ T5834] Bluetooth: hci3: command tx timeout [ 94.531372][ T5972] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.562102][ T5972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.577463][ T5834] Bluetooth: hci2: command tx timeout [ 94.583968][ T5834] Bluetooth: hci1: command tx timeout [ 94.590540][ T5844] Bluetooth: hci0: command tx timeout [ 94.660045][ T5834] Bluetooth: hci4: command tx timeout [ 94.743942][ T5967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.292718][ T5980] netlink: 'syz.0.7': attribute type 62 has an invalid length. [ 95.455396][ T5982] veth0_macvtap: left promiscuous mode [ 95.952608][ T5987] netlink: 'syz.3.10': attribute type 6 has an invalid length. [ 95.977854][ T5987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 96.016713][ T5982] syz.2.9 (5982) used greatest stack depth: 19008 bytes left [ 96.048686][ T1000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.073647][ T1000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.227448][ T1340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.273639][ T1340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.387922][ T5998] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.11'. [ 96.438715][ T5996] netlink: 'syz.2.12': attribute type 4 has an invalid length. [ 98.614566][ T6008] netlink: 128 bytes leftover after parsing attributes in process `syz.3.15'. [ 98.654189][ T6008] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 98.753154][ T6019] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.16'. [ 98.836026][ T5492] veth0_macvtap: entered promiscuous mode [ 99.248894][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 99.451210][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 99.478669][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 99.494101][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 99.506524][ T6035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.20'. [ 99.913192][ T6040] netlink: 763 bytes leftover after parsing attributes in process `syz.4.5'. [ 99.958159][ T6044] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21'. [ 100.396962][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 101.643146][ T6074] Zero length message leads to an empty skb [ 102.629426][ T6074] netlink: 'syz.3.27': attribute type 29 has an invalid length. [ 102.667080][ T6087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.835349][ T6074] netlink: 'syz.3.27': attribute type 29 has an invalid length. [ 102.845406][ T6094] netlink: 'syz.4.32': attribute type 1 has an invalid length. [ 104.936630][ T6089] syz.3.27 (6089) used greatest stack depth: 16768 bytes left [ 105.317541][ T6107] __nla_validate_parse: 1 callbacks suppressed [ 105.317597][ T6107] netlink: 84 bytes leftover after parsing attributes in process `syz.4.37'. [ 105.382479][ T6108] netlink: 'syz.3.36': attribute type 62 has an invalid length. [ 105.488656][ T6109] netlink: 'syz.4.37': attribute type 1 has an invalid length. [ 105.925615][ T6119] netlink: 28 bytes leftover after parsing attributes in process `syz.0.39'. [ 106.064955][ T6123] warning: `syz.3.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.335121][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.43'. [ 106.414913][ T6117] netlink: 76 bytes leftover after parsing attributes in process `syz.3.38'. [ 106.680406][ T6135] netlink: 'syz.0.43': attribute type 29 has an invalid length. [ 107.398366][ T6147] netlink: 'syz.2.47': attribute type 10 has an invalid length. [ 107.437001][ T6147] geneve0: entered promiscuous mode [ 107.541494][ T6147] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 107.564422][ T6152] netlink: 'syz.2.47': attribute type 25 has an invalid length. [ 107.595556][ T6152] netlink: 'syz.2.47': attribute type 28 has an invalid length. [ 111.024885][ T6174] netlink: 184 bytes leftover after parsing attributes in process `syz.1.55'. [ 111.242646][ T6182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.58'. [ 111.713659][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 111.749551][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 111.757898][ T6194] netlink: 188 bytes leftover after parsing attributes in process `syz.1.64'. [ 111.771921][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.63'. [ 112.004988][ T6195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.63'. [ 112.684769][ T6205] netlink: 'syz.0.67': attribute type 4 has an invalid length. [ 112.908419][ T6214] netlink: zone id is out of range [ 112.922053][ T6214] netlink: set zone limit has 4 unknown bytes [ 115.903722][ T6253] netlink: 763 bytes leftover after parsing attributes in process `syz.0.76'. [ 116.449970][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz.0.83'. [ 116.497539][ T6283] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 116.537137][ T6282] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 116.593495][ T6282] netlink: 'syz.3.82': attribute type 1 has an invalid length. [ 116.710170][ T6282] netlink: 'syz.3.82': attribute type 2 has an invalid length. [ 116.998926][ T6295] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.86'. [ 117.225056][ T6298] netlink: 'syz.2.88': attribute type 29 has an invalid length. [ 119.078460][ T6326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.91'. [ 119.122423][ T6298] netlink: 'syz.2.88': attribute type 29 has an invalid length. [ 120.484501][ T6336] Driver unsupported XDP return value 0 on prog (id 132) dev N/A, expect packet loss! [ 121.603110][ T6355] netlink: 'syz.2.99': attribute type 62 has an invalid length. [ 123.398382][ T6366] netlink: 'syz.4.101': attribute type 4 has an invalid length. [ 123.422731][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.102'. [ 123.586988][ T5834] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 123.654015][ T6378] netlink: 'syz.3.104': attribute type 23 has an invalid length. [ 124.007674][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.106'. [ 124.062920][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.106'. [ 124.167985][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.106'. [ 124.269811][ T6381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.106'. [ 125.099169][ T6394] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 125.216152][ T6398] netlink: 'syz.1.110': attribute type 29 has an invalid length. [ 125.574034][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 125.588007][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 125.608197][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 125.617388][ T6407] netlink: 28 bytes leftover after parsing attributes in process `syz.0.113'. [ 125.650318][ T6396] netlink: 'syz.3.109': attribute type 29 has an invalid length. [ 126.261155][ T6420] netlink: 'syz.3.109': attribute type 29 has an invalid length. [ 126.292019][ T6422] netlink: 128 bytes leftover after parsing attributes in process `syz.0.116'. [ 126.320202][ T6416] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 126.356580][ T6416] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 126.397304][ T6416] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 126.413548][ T6416] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.437174][ T6416] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.844963][ T6436] netlink: 'syz.3.120': attribute type 39 has an invalid length. [ 126.861027][ T6437] netlink: 'syz.1.118': attribute type 4 has an invalid length. [ 127.630519][ T6451] netlink: 'syz.2.123': attribute type 39 has an invalid length. [ 127.867430][ T6458] netlink: 'syz.4.124': attribute type 39 has an invalid length. [ 128.743722][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 128.762714][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 128.772009][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 128.785343][ T6468] netlink: 28 bytes leftover after parsing attributes in process `syz.1.126'. [ 128.964641][ T6472] FAULT_INJECTION: forcing a failure. [ 128.964641][ T6472] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.985994][ T6472] CPU: 0 UID: 0 PID: 6472 Comm: syz.2.128 Not tainted syzkaller #0 PREEMPT(full) [ 128.986024][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.986045][ T6472] Call Trace: [ 128.986057][ T6472] [ 128.986067][ T6472] dump_stack_lvl+0xe8/0x150 [ 128.986122][ T6472] should_fail_ex+0x412/0x560 [ 128.986158][ T6472] _copy_from_user+0x2d/0xb0 [ 128.986193][ T6472] __sys_bpf+0x229/0x950 [ 128.986224][ T6472] ? __pfx___sys_bpf+0x10/0x10 [ 128.986270][ T6472] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 128.986299][ T6472] ? ksys_write+0x242/0x270 [ 128.986325][ T6472] ? __pfx_ksys_write+0x10/0x10 [ 128.986354][ T6472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.986377][ T6472] __x64_sys_bpf+0x7c/0x90 [ 128.986402][ T6472] do_syscall_64+0x15f/0xf80 [ 128.986430][ T6472] ? trace_irq_disable+0x3b/0x140 [ 128.986456][ T6472] ? clear_bhb_loop+0x40/0x90 [ 128.986482][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.986509][ T6472] RIP: 0033:0x7f07c8f9cdd9 [ 128.986536][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.986553][ T6472] RSP: 002b:00007f07c9dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 128.986583][ T6472] RAX: ffffffffffffffda RBX: 00007f07c9215fa0 RCX: 00007f07c8f9cdd9 [ 128.986599][ T6472] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 128.986612][ T6472] RBP: 00007f07c9dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 128.986625][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.986637][ T6472] R13: 00007f07c9216038 R14: 00007f07c9215fa0 R15: 00007ffcf200aa48 [ 128.986672][ T6472] [ 130.032610][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 130.054338][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 130.067478][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 130.124527][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.139'. [ 130.154231][ T6500] netlink: 'syz.0.138': attribute type 39 has an invalid length. [ 131.016706][ T6492] netlink: 'syz.1.136': attribute type 1 has an invalid length. [ 132.369995][ T6534] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 132.643840][ T6545] netlink: 'syz.1.153': attribute type 39 has an invalid length. [ 132.916266][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.924373][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.341461][ T6580] netlink: 'syz.2.162': attribute type 21 has an invalid length. [ 135.476298][ T6592] netlink: 'syz.4.165': attribute type 2 has an invalid length. [ 135.495615][ T6592] netlink: 'syz.4.165': attribute type 2 has an invalid length. [ 136.631367][ T6615] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 137.348580][ T6642] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.179'. [ 138.089915][ T6648] rdma_rxe: rxe_newlink: failed to add tunl0 [ 138.137525][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.0.182'. [ 138.205543][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 138.380003][ T6668] netlink: 996 bytes leftover after parsing attributes in process `syz.4.187'. [ 138.481042][ T6658] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 138.492359][ T6658] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.184'. [ 138.596269][ T6662] netlink: 'syz.2.186': attribute type 7 has an invalid length. [ 138.763876][ T6676] netlink: 48 bytes leftover after parsing attributes in process `syz.0.189'. [ 138.811264][ T6676] netlink: 148 bytes leftover after parsing attributes in process `syz.0.189'. [ 138.997613][ T6684] netlink: 132 bytes leftover after parsing attributes in process `syz.0.189'. [ 139.016571][ T6685] netlink: 48 bytes leftover after parsing attributes in process `syz.0.189'. [ 139.965343][ T6699] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.194'. [ 141.301795][ T6740] netlink: 'syz.3.209': attribute type 3 has an invalid length. [ 142.381766][ T6764] netlink: 'syz.0.213': attribute type 4 has an invalid length. [ 144.070318][ T6819] __nla_validate_parse: 9 callbacks suppressed [ 144.070338][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.221'. [ 145.039848][ T6844] netlink: 'syz.3.227': attribute type 4 has an invalid length. [ 145.517750][ T6850] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.229'. [ 145.948133][ T6869] : renamed from bond_slave_0 (while UP) [ 146.132753][ T6874] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 146.154144][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 146.163969][ T6878] netlink: 'syz.2.239': attribute type 21 has an invalid length. [ 146.174453][ T6878] netlink: 'syz.2.239': attribute type 7 has an invalid length. [ 146.182724][ T6875] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 146.196759][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 146.217527][ T6878] netlink: 'syz.2.239': attribute type 1 has an invalid length. [ 146.456334][ T6884] netlink: 'syz.3.240': attribute type 4 has an invalid length. [ 146.467381][ T6889] netlink: 'syz.4.241': attribute type 13 has an invalid length. [ 146.513585][ T6889] netlink: 68 bytes leftover after parsing attributes in process `syz.4.241'. [ 146.605287][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 146.647204][ T6896] netlink: 28 bytes leftover after parsing attributes in process `syz.0.245'. [ 146.721535][ T6898] netlink: 124 bytes leftover after parsing attributes in process `syz.4.241'. [ 146.811558][ T6901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.245'. [ 148.419445][ T6962] netlink: 'syz.3.254': attribute type 39 has an invalid length. [ 149.062891][ T6976] netlink: 'syz.4.256': attribute type 4 has an invalid length. [ 149.413338][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.262'. [ 149.711970][ T7001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 149.760645][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 149.774997][ T7000] netlink: 'syz.1.264': attribute type 4 has an invalid length. [ 151.446103][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.270'. [ 151.689125][ T7029] netlink: 'syz.1.273': attribute type 4 has an invalid length. [ 151.989357][ T7034] netlink: 40 bytes leftover after parsing attributes in process `syz.3.274'. [ 152.609510][ T7046] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 152.609510][ T7046] Please contact the netfilter-devel mailing list or update your nftables rules. [ 152.656052][ T7049] netlink: 'syz.3.280': attribute type 1 has an invalid length. [ 152.824858][ T7055] netlink: 'syz.4.282': attribute type 10 has an invalid length. [ 153.519815][ T7080] netlink: 156 bytes leftover after parsing attributes in process `syz.1.291'. [ 153.591406][ T7085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.292'. [ 153.618405][ T7081] netlink: 'syz.4.289': attribute type 4 has an invalid length. [ 153.675325][ T7085] netlink: 20 bytes leftover after parsing attributes in process `syz.3.292'. [ 153.987236][ T7096] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.294'. [ 154.539163][ T7117] netlink: 68 bytes leftover after parsing attributes in process `syz.0.300'. [ 156.304732][ T7145] netlink: 'syz.0.307': attribute type 4 has an invalid length. [ 156.533491][ T7160] ======================================================= [ 156.533491][ T7160] WARNING: The mand mount option has been deprecated and [ 156.533491][ T7160] and is ignored by this kernel. Remove the mand [ 156.533491][ T7160] option from the mount to silence this warning. [ 156.533491][ T7160] ======================================================= [ 156.762073][ T7160] netlink: 'syz.1.310': attribute type 64 has an invalid length. [ 158.069096][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 158.690093][ T7209] netlink: 'syz.1.328': attribute type 29 has an invalid length. [ 158.829014][ T7209] netlink: 'syz.1.328': attribute type 9 has an invalid length. [ 159.034284][ T7215] FAULT_INJECTION: forcing a failure. [ 159.034284][ T7215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.052351][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.4.329 Not tainted syzkaller #0 PREEMPT(full) [ 159.052380][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 159.052393][ T7215] Call Trace: [ 159.052403][ T7215] [ 159.052412][ T7215] dump_stack_lvl+0xe8/0x150 [ 159.052453][ T7215] should_fail_ex+0x412/0x560 [ 159.052491][ T7215] _copy_from_iter+0x1d3/0x1670 [ 159.052529][ T7215] ? rcu_is_watching+0x15/0xb0 [ 159.052562][ T7215] ? __pfx__copy_from_iter+0x10/0x10 [ 159.052605][ T7215] ? netlink_sendmsg+0x650/0xb40 [ 159.052626][ T7215] ? skb_put+0x11b/0x210 [ 159.052654][ T7215] netlink_sendmsg+0x6c0/0xb40 [ 159.052690][ T7215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.052718][ T7215] ? aa_sock_msg_perm+0xf1/0x1b0 [ 159.052751][ T7215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.052783][ T7215] ____sys_sendmsg+0x972/0x9f0 [ 159.052821][ T7215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.052860][ T7215] ? import_iovec+0x73/0xa0 [ 159.052899][ T7215] ___sys_sendmsg+0x2a5/0x360 [ 159.052923][ T7215] ? __lock_acquire+0x6b5/0x2cf0 [ 159.052963][ T7215] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.053020][ T7215] ? __fget_files+0x2a/0x420 [ 159.053069][ T7215] ? __fget_files+0x2a/0x420 [ 159.053100][ T7215] ? __fget_files+0x3a0/0x420 [ 159.053155][ T7215] __x64_sys_sendmsg+0x1bd/0x2a0 [ 159.053184][ T7215] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.053223][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.053258][ T7215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.053282][ T7215] do_syscall_64+0x15f/0xf80 [ 159.053314][ T7215] ? clear_bhb_loop+0x40/0x90 [ 159.053342][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.053363][ T7215] RIP: 0033:0x7f391cb9cdd9 [ 159.053384][ T7215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.053401][ T7215] RSP: 002b:00007f391daa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.053424][ T7215] RAX: ffffffffffffffda RBX: 00007f391ce15fa0 RCX: 00007f391cb9cdd9 [ 159.053439][ T7215] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 159.053453][ T7215] RBP: 00007f391daa5090 R08: 0000000000000000 R09: 0000000000000000 [ 159.053465][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.053477][ T7215] R13: 00007f391ce16038 R14: 00007f391ce15fa0 R15: 00007ffd745c0b98 [ 159.053517][ T7215] [ 159.673558][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'. [ 159.754488][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.4.332'. [ 160.038294][ T7231] netlink: 'syz.0.336': attribute type 4 has an invalid length. [ 160.185342][ T7238] netlink: 'syz.1.340': attribute type 62 has an invalid length. [ 161.358012][ T7252] netlink: 'syz.4.344': attribute type 29 has an invalid length. [ 161.439601][ T7253] netlink: 'syz.4.344': attribute type 29 has an invalid length. [ 161.493944][ T7255] netlink: 'syz.3.345': attribute type 163 has an invalid length. [ 161.793876][ T7263] netlink: 28 bytes leftover after parsing attributes in process `syz.0.348'. [ 161.929700][ T7269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.350'. [ 162.116400][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 162.188072][ T7270] netlink: 44 bytes leftover after parsing attributes in process `syz.4.349'. [ 163.042798][ T7275] netlink: 'syz.3.351': attribute type 62 has an invalid length. [ 163.089158][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 163.117219][ T7280] netlink: 'syz.2.354': attribute type 62 has an invalid length. [ 163.300494][ T7282] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.353'. [ 164.360685][ T7303] netlink: 'syz.3.358': attribute type 4 has an invalid length. [ 164.710684][ T7297] netlink: 'syz.0.360': attribute type 39 has an invalid length. [ 165.125372][ T7311] netlink: 28 bytes leftover after parsing attributes in process `syz.4.363'. [ 165.294969][ T7317] netlink: 'syz.1.366': attribute type 62 has an invalid length. [ 165.527515][ T7321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.368'. [ 166.400295][ T7353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 166.456539][ T5834] Bluetooth: hci1: ISO packet for unknown connection handle 20 [ 166.924917][ T7360] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 166.958038][ T7360] netlink: 2704 bytes leftover after parsing attributes in process `syz.4.378'. [ 167.235951][ T7366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.380'. [ 167.608469][ T7375] IPv6: Can't replace route, no match found [ 168.558698][ T7403] netlink: 84 bytes leftover after parsing attributes in process `syz.2.395'. [ 168.587970][ T7405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.396'. [ 168.726825][ T7406] netlink: 'syz.2.395': attribute type 21 has an invalid length. [ 169.423885][ T7414] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.397'. [ 169.595387][ T5834] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 169.699740][ T7424] set match dimension is over the limit! [ 170.427110][ T7437] FAULT_INJECTION: forcing a failure. [ 170.427110][ T7437] name failslab, interval 1, probability 0, space 0, times 1 [ 170.447269][ T7437] CPU: 0 UID: 0 PID: 7437 Comm: syz.1.406 Not tainted syzkaller #0 PREEMPT(full) [ 170.447299][ T7437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.447311][ T7437] Call Trace: [ 170.447319][ T7437] [ 170.447327][ T7437] dump_stack_lvl+0xe8/0x150 [ 170.447367][ T7437] should_fail_ex+0x412/0x560 [ 170.447403][ T7437] should_failslab+0xa8/0x100 [ 170.447434][ T7437] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 170.447458][ T7437] ? __kasan_kmalloc+0x93/0xb0 [ 170.447484][ T7437] ? __request_module+0x2ec/0x630 [ 170.447504][ T7437] ? __kmalloc_cache_noprof+0x31c/0x660 [ 170.447536][ T7437] kstrdup+0x42/0x100 [ 170.447567][ T7437] __request_module+0x2ec/0x630 [ 170.447598][ T7437] ? __pfx___request_module+0x10/0x10 [ 170.447632][ T7437] ? __pfx___up_read+0x10/0x10 [ 170.447681][ T7437] crypto_alg_mod_lookup+0xeb/0x5f0 [ 170.447716][ T7437] crypto_add_alg+0x235/0x3b0 [ 170.447748][ T7437] ? __pfx_crypto_add_alg+0x10/0x10 [ 170.447778][ T7437] crypto_user_rcv_msg+0x537/0x640 [ 170.447819][ T7437] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 170.447880][ T7437] ? __pfx___mutex_trylock_common+0x10/0x10 [ 170.447910][ T7437] ? rcu_is_watching+0x15/0xb0 [ 170.447940][ T7437] ? trace_contention_end+0x3d/0x140 [ 170.447969][ T7437] ? __mutex_lock+0x319/0x1550 [ 170.448011][ T7437] netlink_rcv_skb+0x232/0x4b0 [ 170.448049][ T7437] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 170.448084][ T7437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.448146][ T7437] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.448168][ T7437] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.448196][ T7437] crypto_netlink_rcv+0x2a/0x40 [ 170.448226][ T7437] netlink_unicast+0x75c/0x8e0 [ 170.448275][ T7437] netlink_sendmsg+0x813/0xb40 [ 170.448311][ T7437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.448339][ T7437] ? aa_sock_msg_perm+0xf1/0x1b0 [ 170.448372][ T7437] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.448405][ T7437] ____sys_sendmsg+0x972/0x9f0 [ 170.448429][ T7437] ? __pfx_perf_trace_lock+0x10/0x10 [ 170.448463][ T7437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.448502][ T7437] ? import_iovec+0x73/0xa0 [ 170.448542][ T7437] ___sys_sendmsg+0x2a5/0x360 [ 170.448565][ T7437] ? __lock_acquire+0x6b5/0x2cf0 [ 170.448605][ T7437] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.448664][ T7437] ? __fget_files+0x2a/0x420 [ 170.448714][ T7437] ? __fget_files+0x2a/0x420 [ 170.448746][ T7437] ? __fget_files+0x3a0/0x420 [ 170.448793][ T7437] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.448823][ T7437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.448863][ T7437] ? __pfx_ksys_write+0x10/0x10 [ 170.448902][ T7437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.448927][ T7437] do_syscall_64+0x15f/0xf80 [ 170.448955][ T7437] ? trace_irq_disable+0x3b/0x140 [ 170.448984][ T7437] ? clear_bhb_loop+0x40/0x90 [ 170.449013][ T7437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.449035][ T7437] RIP: 0033:0x7ff50cf9cdd9 [ 170.449055][ T7437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.449072][ T7437] RSP: 002b:00007ff50ddc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.449094][ T7437] RAX: ffffffffffffffda RBX: 00007ff50d216090 RCX: 00007ff50cf9cdd9 [ 170.449109][ T7437] RDX: 0000000004040840 RSI: 00002000000001c0 RDI: 0000000000000004 [ 170.449131][ T7437] RBP: 00007ff50ddc9090 R08: 0000000000000000 R09: 0000000000000000 [ 170.449143][ T7437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.449155][ T7437] R13: 00007ff50d216128 R14: 00007ff50d216090 R15: 00007fff78f2b558 [ 170.449195][ T7437] [ 171.079824][ T7444] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 171.344926][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.411'. [ 172.091943][ T7464] FAULT_INJECTION: forcing a failure. [ 172.091943][ T7464] name failslab, interval 1, probability 0, space 0, times 0 [ 172.142593][ T7464] CPU: 0 UID: 0 PID: 7464 Comm: syz.0.416 Not tainted syzkaller #0 PREEMPT(full) [ 172.142622][ T7464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.142635][ T7464] Call Trace: [ 172.142643][ T7464] [ 172.142652][ T7464] dump_stack_lvl+0xe8/0x150 [ 172.142692][ T7464] should_fail_ex+0x412/0x560 [ 172.142727][ T7464] should_failslab+0xa8/0x100 [ 172.142757][ T7464] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 172.142783][ T7464] ? __alloc_skb+0x186/0x7d0 [ 172.142801][ T7464] ? __alloc_skb+0x1d0/0x7d0 [ 172.142817][ T7464] ? __local_bh_enable_ip+0xd0/0x130 [ 172.142855][ T7464] __alloc_skb+0x1d0/0x7d0 [ 172.142880][ T7464] netlink_sendmsg+0x5d4/0xb40 [ 172.142913][ T7464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.142938][ T7464] ? aa_sock_msg_perm+0xf1/0x1b0 [ 172.142970][ T7464] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.143000][ T7464] ____sys_sendmsg+0x972/0x9f0 [ 172.143023][ T7464] ? __might_fault+0xaf/0x130 [ 172.143051][ T7464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.143085][ T7464] ? import_iovec+0x73/0xa0 [ 172.143122][ T7464] ___sys_sendmsg+0x2a5/0x360 [ 172.143145][ T7464] ? __lock_acquire+0x6b5/0x2cf0 [ 172.143181][ T7464] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.143208][ T7464] ? lock_acquire+0x106/0x350 [ 172.143271][ T7464] ? __fget_files+0x2a/0x420 [ 172.143303][ T7464] ? __fget_files+0x3a0/0x420 [ 172.143347][ T7464] __x64_sys_sendmsg+0x1bd/0x2a0 [ 172.143382][ T7464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.143417][ T7464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.143448][ T7464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.143471][ T7464] do_syscall_64+0x15f/0xf80 [ 172.143502][ T7464] ? clear_bhb_loop+0x40/0x90 [ 172.143528][ T7464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.143550][ T7464] RIP: 0033:0x7fc9d299cdd9 [ 172.143569][ T7464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.143587][ T7464] RSP: 002b:00007fc9d38ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.143609][ T7464] RAX: ffffffffffffffda RBX: 00007fc9d2c15fa0 RCX: 00007fc9d299cdd9 [ 172.143624][ T7464] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 172.143638][ T7464] RBP: 00007fc9d38ef090 R08: 0000000000000000 R09: 0000000000000000 [ 172.143651][ T7464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.143663][ T7464] R13: 00007fc9d2c16038 R14: 00007fc9d2c15fa0 R15: 00007ffc33f5c5a8 [ 172.143699][ T7464] [ 172.264015][ T7470] netlink: 76 bytes leftover after parsing attributes in process `syz.2.414'. [ 172.829113][ T7487] netlink: 168 bytes leftover after parsing attributes in process `syz.4.423'. [ 172.880931][ T7483] syzkaller0: entered promiscuous mode [ 172.890324][ T7483] syzkaller0: entered allmulticast mode [ 173.224746][ T7497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.425'. [ 173.550330][ T7503] netlink: 32 bytes leftover after parsing attributes in process `syz.0.427'. [ 173.900881][ T7514] netlink: 'syz.1.429': attribute type 4 has an invalid length. [ 177.808292][ T7508] netlink: 152 bytes leftover after parsing attributes in process `syz.4.430'. [ 177.817319][ T7508] netlink: 6 bytes leftover after parsing attributes in process `syz.4.430'. [ 178.042901][ T7523] netlink: 'syz.4.432': attribute type 10 has an invalid length. [ 178.125303][ T7531] netlink: 'syz.3.434': attribute type 62 has an invalid length. [ 178.287528][ T7536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.437'. [ 178.346794][ T7523] team0: Port device geneve1 added [ 178.584517][ T7545] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'. [ 178.784091][ T7550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.051904][ T7556] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 179.051904][ T7556] 3ìUH†5rºBnœæ [ 179.115914][ T7561] netlink: 132 bytes leftover after parsing attributes in process `syz.4.447'. [ 179.183285][ T7564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.448'. [ 179.196879][ T7566] netlink: 'syz.0.446': attribute type 1 has an invalid length. [ 179.417826][ T7572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 179.480257][ T7575] netlink: 'syz.1.451': attribute type 6 has an invalid length. [ 179.500480][ T7575] netlink: 'syz.1.451': attribute type 6 has an invalid length. [ 179.526001][ T7576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.571531][ T7575] @ÿ: renamed from sit0 (while UP) [ 179.741707][ T7586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.456'. [ 179.786612][ T7587] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.453'. [ 179.919078][ T7592] syz.2.458 uses obsolete (PF_INET,SOCK_PACKET) [ 179.947121][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 180.609958][ T7616] netlink: 'syz.3.467': attribute type 10 has an invalid length. [ 180.640834][ T7616] team0: Port device geneve1 added [ 181.272793][ T7635] netlink: 'syz.3.473': attribute type 4 has an invalid length. [ 182.957237][ T7663] netlink: 'syz.1.480': attribute type 4 has an invalid length. [ 184.484773][ T7680] __nla_validate_parse: 6 callbacks suppressed [ 184.484792][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.486'. [ 184.521558][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.486'. [ 184.562138][ T7680] netlink: 60 bytes leftover after parsing attributes in process `syz.1.486'. [ 184.592903][ T7684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.485'. [ 185.106199][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.484'. [ 185.188952][ T7678] netlink: 140 bytes leftover after parsing attributes in process `syz.0.484'. [ 185.366532][ T7713] netlink: 774 bytes leftover after parsing attributes in process `syz.4.496'. [ 185.405290][ T7713] netlink: 'syz.4.496': attribute type 29 has an invalid length. [ 185.433798][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.492'. [ 185.499050][ T7704] netlink: 40 bytes leftover after parsing attributes in process `syz.2.492'. [ 185.556634][ T7718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.492'. [ 185.583802][ T7713] netlink: 'syz.4.496': attribute type 29 has an invalid length. [ 185.798537][ T7720] netlink: 'syz.0.497': attribute type 39 has an invalid length. [ 186.792607][ T7754] FAULT_INJECTION: forcing a failure. [ 186.792607][ T7754] name failslab, interval 1, probability 0, space 0, times 0 [ 186.845691][ T7754] CPU: 1 UID: 0 PID: 7754 Comm: syz.2.509 Not tainted syzkaller #0 PREEMPT(full) [ 186.845723][ T7754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.845736][ T7754] Call Trace: [ 186.845745][ T7754] [ 186.845755][ T7754] dump_stack_lvl+0xe8/0x150 [ 186.845800][ T7754] should_fail_ex+0x412/0x560 [ 186.845840][ T7754] should_failslab+0xa8/0x100 [ 186.845875][ T7754] __kmalloc_noprof+0xe8/0x760 [ 186.845904][ T7754] ? bpf_test_init+0x9f/0x150 [ 186.845939][ T7754] ? perf_trace_lock+0xff/0x410 [ 186.845969][ T7754] bpf_test_init+0x9f/0x150 [ 186.846012][ T7754] bpf_prog_test_run_skb+0x392/0x2260 [ 186.846056][ T7754] ? bpf_prog_test_run_skb+0x1e1/0x2260 [ 186.846091][ T7754] ? __fget_files+0x2a/0x420 [ 186.846145][ T7754] ? __fget_files+0x3a0/0x420 [ 186.846179][ T7754] ? __fget_files+0x2a/0x420 [ 186.846222][ T7754] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 186.846261][ T7754] bpf_prog_test_run+0x2c7/0x340 [ 186.846300][ T7754] __sys_bpf+0x643/0x950 [ 186.846335][ T7754] ? __pfx___sys_bpf+0x10/0x10 [ 186.846398][ T7754] ? ksys_write+0x242/0x270 [ 186.846429][ T7754] ? __pfx_ksys_write+0x10/0x10 [ 186.846462][ T7754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.846489][ T7754] __x64_sys_bpf+0x7c/0x90 [ 186.846518][ T7754] do_syscall_64+0x15f/0xf80 [ 186.846547][ T7754] ? trace_irq_disable+0x3b/0x140 [ 186.846577][ T7754] ? clear_bhb_loop+0x40/0x90 [ 186.846607][ T7754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.846634][ T7754] RIP: 0033:0x7f07c8f9cdd9 [ 186.846655][ T7754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.846672][ T7754] RSP: 002b:00007f07c9dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.846700][ T7754] RAX: ffffffffffffffda RBX: 00007f07c9215fa0 RCX: 00007f07c8f9cdd9 [ 186.846717][ T7754] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 186.846730][ T7754] RBP: 00007f07c9dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 186.846743][ T7754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.846755][ T7754] R13: 00007f07c9216038 R14: 00007f07c9215fa0 R15: 00007ffcf200aa48 [ 186.846797][ T7754] [ 187.410751][ T7751] tc_dump_action: action bad kind [ 187.747249][ T7767] netlink: 'syz.0.512': attribute type 39 has an invalid length. [ 189.105174][ T7795] bridge_slave_1: left allmulticast mode [ 189.117741][ T7795] bridge_slave_1: left promiscuous mode [ 189.134053][ T7795] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.221232][ T7795] bridge_slave_0: left allmulticast mode [ 189.243700][ T7795] bridge_slave_0: left promiscuous mode [ 189.251695][ T7795] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.386386][ T7803] netlink: 'syz.4.524': attribute type 39 has an invalid length. [ 189.581765][ T7802] __nla_validate_parse: 4 callbacks suppressed [ 189.581791][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 189.639831][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 189.648840][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 189.692048][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 191.150046][ T7831] netlink: 186748 bytes leftover after parsing attributes in process `syz.4.533'. [ 191.159474][ T7831] netlink: Unknown conntrack attr (type=12922, max=9) [ 191.289457][ T7837] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.531'. [ 192.097181][ T7849] netlink: 'syz.0.536': attribute type 39 has an invalid length. [ 192.180665][ T7850] netlink: 76 bytes leftover after parsing attributes in process `syz.3.537'. [ 192.557375][ T7859] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 192.574836][ T7859] netlink: 'syz.1.538': attribute type 2 has an invalid length. [ 192.663210][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 192.694199][ T7853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.538'. [ 193.222857][ T7873] FAULT_INJECTION: forcing a failure. [ 193.222857][ T7873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.267405][ T7873] CPU: 1 UID: 0 PID: 7873 Comm: syz.1.545 Not tainted syzkaller #0 PREEMPT(full) [ 193.267434][ T7873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.267447][ T7873] Call Trace: [ 193.267455][ T7873] [ 193.267464][ T7873] dump_stack_lvl+0xe8/0x150 [ 193.267504][ T7873] should_fail_ex+0x412/0x560 [ 193.267539][ T7873] _copy_from_user+0x2d/0xb0 [ 193.267573][ T7873] ___sys_sendmsg+0x1c6/0x360 [ 193.267597][ T7873] ? __lock_acquire+0x6b5/0x2cf0 [ 193.267637][ T7873] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.267706][ T7873] ? __fget_files+0x2a/0x420 [ 193.267739][ T7873] ? __fget_files+0x3a0/0x420 [ 193.267782][ T7873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 193.267809][ T7873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 193.267844][ T7873] ? __pfx_ksys_write+0x10/0x10 [ 193.267877][ T7873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.267900][ T7873] do_syscall_64+0x15f/0xf80 [ 193.267929][ T7873] ? trace_irq_disable+0x3b/0x140 [ 193.267957][ T7873] ? clear_bhb_loop+0x40/0x90 [ 193.267984][ T7873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.268005][ T7873] RIP: 0033:0x7ff50cf9cdd9 [ 193.268025][ T7873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.268042][ T7873] RSP: 002b:00007ff50ddc9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.268065][ T7873] RAX: ffffffffffffffda RBX: 00007ff50d216090 RCX: 00007ff50cf9cdd9 [ 193.268080][ T7873] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 193.268093][ T7873] RBP: 00007ff50ddc9090 R08: 0000000000000000 R09: 0000000000000000 [ 193.268106][ T7873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.268118][ T7873] R13: 00007ff50d216128 R14: 00007ff50d216090 R15: 00007fff78f2b558 [ 193.268152][ T7873] [ 193.922603][ T7881] netlink: 'syz.3.547': attribute type 27 has an invalid length. [ 193.940941][ T7881] netlink: 152 bytes leftover after parsing attributes in process `syz.3.547'. [ 193.961849][ T7881] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.083564][ T7885] netlink: 'syz.2.550': attribute type 28 has an invalid length. [ 194.364987][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.377324][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.538575][ T7898] netlink: 'syz.4.554': attribute type 29 has an invalid length. [ 194.558184][ T7898] netlink: 'syz.4.554': attribute type 29 has an invalid length. [ 194.974709][ T7909] __nla_validate_parse: 1 callbacks suppressed [ 194.974733][ T7909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.556'. [ 195.112721][ T7915] netlink: 76 bytes leftover after parsing attributes in process `syz.0.557'. [ 195.130214][ T7904] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 195.166015][ T7904] netlink: 'syz.1.555': attribute type 29 has an invalid length. [ 196.060498][ T7933] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 196.371420][ T7950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.570'. [ 196.389784][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.3.569'. [ 196.399559][ T7944] netlink: 'syz.2.568': attribute type 29 has an invalid length. [ 196.620320][ T7950] netlink: 80 bytes leftover after parsing attributes in process `syz.4.570'. [ 197.009865][ T7965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.576'. [ 197.030180][ T7965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.576'. [ 197.122857][ T7967] netlink: 10 bytes leftover after parsing attributes in process `syz.1.577'. [ 197.174322][ T7967] FAULT_INJECTION: forcing a failure. [ 197.174322][ T7967] name failslab, interval 1, probability 0, space 0, times 0 [ 197.206110][ T7967] CPU: 1 UID: 0 PID: 7967 Comm: syz.1.577 Not tainted syzkaller #0 PREEMPT(full) [ 197.206139][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 197.206152][ T7967] Call Trace: [ 197.206163][ T7967] [ 197.206175][ T7967] dump_stack_lvl+0xe8/0x150 [ 197.206226][ T7967] should_fail_ex+0x412/0x560 [ 197.206281][ T7967] should_failslab+0xa8/0x100 [ 197.206315][ T7967] ? skb_clone+0x212/0x3a0 [ 197.206346][ T7967] kmem_cache_alloc_noprof+0x87/0x650 [ 197.206370][ T7967] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 197.206437][ T7967] skb_clone+0x212/0x3a0 [ 197.206484][ T7967] __netlink_deliver_tap+0x404/0x850 [ 197.206556][ T7967] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.206591][ T7967] netlink_deliver_tap+0x19c/0x1b0 [ 197.206623][ T7967] netlink_sendskb+0x68/0x140 [ 197.206672][ T7967] netlink_rcv_skb+0x2b6/0x4b0 [ 197.206717][ T7967] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 197.206762][ T7967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.206848][ T7967] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.206873][ T7967] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.206922][ T7967] netlink_unicast+0x75c/0x8e0 [ 197.207007][ T7967] netlink_sendmsg+0x813/0xb40 [ 197.207064][ T7967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.207108][ T7967] ? aa_sock_msg_perm+0xf1/0x1b0 [ 197.207150][ T7967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.207192][ T7967] ____sys_sendmsg+0x972/0x9f0 [ 197.207221][ T7967] ? __might_fault+0xaf/0x130 [ 197.207271][ T7967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.207334][ T7967] ? import_iovec+0x73/0xa0 [ 197.207387][ T7967] ___sys_sendmsg+0x2a5/0x360 [ 197.207413][ T7967] ? __lock_acquire+0x6b5/0x2cf0 [ 197.207473][ T7967] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.207650][ T7967] ? __fget_files+0x2a/0x420 [ 197.207689][ T7967] ? __fget_files+0x3a0/0x420 [ 197.207767][ T7967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 197.207810][ T7967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.207876][ T7967] ? __pfx_ksys_write+0x10/0x10 [ 197.207942][ T7967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.207974][ T7967] do_syscall_64+0x15f/0xf80 [ 197.208005][ T7967] ? trace_irq_disable+0x3b/0x140 [ 197.208051][ T7967] ? clear_bhb_loop+0x40/0x90 [ 197.208091][ T7967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.208116][ T7967] RIP: 0033:0x7ff50cf9cdd9 [ 197.208142][ T7967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.208159][ T7967] RSP: 002b:00007ff50ddea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.208181][ T7967] RAX: ffffffffffffffda RBX: 00007ff50d215fa0 RCX: 00007ff50cf9cdd9 [ 197.208196][ T7967] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 197.208208][ T7967] RBP: 00007ff50ddea090 R08: 0000000000000000 R09: 0000000000000000 [ 197.208221][ T7967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.208232][ T7967] R13: 00007ff50d216038 R14: 00007ff50d215fa0 R15: 00007fff78f2b558 [ 197.208313][ T7967] [ 197.709594][ T7979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.582'. [ 197.993079][ T7987] netlink: 60 bytes leftover after parsing attributes in process `syz.1.584'. [ 198.945890][ T8025] validate_nla: 1 callbacks suppressed [ 198.945931][ T8025] netlink: 'syz.1.594': attribute type 62 has an invalid length. [ 199.594977][ T8043] sit0: entered allmulticast mode [ 200.153489][ T8059] __nla_validate_parse: 4 callbacks suppressed [ 200.153526][ T8059] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.603'. [ 200.921748][ T8086] netlink: 'syz.4.609': attribute type 62 has an invalid length. [ 200.937944][ T8086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.609'. [ 201.672857][ T8097] netlink: 152532 bytes leftover after parsing attributes in process `syz.4.612'. [ 201.801342][ T8102] netlink: 2100 bytes leftover after parsing attributes in process `syz.3.614'. [ 202.180011][ T8114] netlink: 80 bytes leftover after parsing attributes in process `syz.0.617'. [ 202.222578][ T8111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.618'. [ 202.460806][ T8117] : renamed from bond_slave_0 (while UP) [ 202.482998][ T8122] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 202.717245][ T8124] netlink: 'syz.3.622': attribute type 62 has an invalid length. [ 202.725107][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 202.855820][ T8126] netlink: 'syz.0.623': attribute type 39 has an invalid length. [ 203.273371][ T8136] FAULT_INJECTION: forcing a failure. [ 203.273371][ T8136] name failslab, interval 1, probability 0, space 0, times 0 [ 203.286097][ T8136] CPU: 1 UID: 0 PID: 8136 Comm: syz.4.626 Not tainted syzkaller #0 PREEMPT(full) [ 203.286124][ T8136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.286138][ T8136] Call Trace: [ 203.286151][ T8136] [ 203.286164][ T8136] dump_stack_lvl+0xe8/0x150 [ 203.286225][ T8136] should_fail_ex+0x412/0x560 [ 203.286296][ T8136] should_failslab+0xa8/0x100 [ 203.286333][ T8136] ? security_inode_alloc+0x39/0x310 [ 203.286376][ T8136] kmem_cache_alloc_noprof+0x87/0x650 [ 203.286460][ T8136] security_inode_alloc+0x39/0x310 [ 203.286516][ T8136] inode_init_always_gfp+0x9c8/0xda0 [ 203.286592][ T8136] ? __pfx_sock_alloc_inode+0x10/0x10 [ 203.286628][ T8136] alloc_inode+0x82/0x1b0 [ 203.286682][ T8136] __sock_create+0x12d/0x9d0 [ 203.286778][ T8136] __sys_socket+0xd6/0x1b0 [ 203.286830][ T8136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.286868][ T8136] __x64_sys_socket+0x7a/0x90 [ 203.286920][ T8136] do_syscall_64+0x15f/0xf80 [ 203.286967][ T8136] ? clear_bhb_loop+0x40/0x90 [ 203.287018][ T8136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.287054][ T8136] RIP: 0033:0x7f391cb9cdd9 [ 203.287086][ T8136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.287104][ T8136] RSP: 002b:00007f391daa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 203.287127][ T8136] RAX: ffffffffffffffda RBX: 00007f391ce15fa0 RCX: 00007f391cb9cdd9 [ 203.287142][ T8136] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000010 [ 203.287155][ T8136] RBP: 00007f391daa5090 R08: 0000000000000000 R09: 0000000000000000 [ 203.287168][ T8136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.287180][ T8136] R13: 00007f391ce16038 R14: 00007f391ce15fa0 R15: 00007ffd745c0b98 [ 203.287293][ T8136] [ 203.287364][ T8136] socket: no more sockets [ 203.906248][ T8144] netlink: 'syz.1.628': attribute type 3 has an invalid length. [ 203.928544][ T8152] netlink: 'syz.4.633': attribute type 7 has an invalid length. [ 203.947066][ T8152] netlink: 14 bytes leftover after parsing attributes in process `syz.4.633'. [ 203.960332][ T8152] hsr_slave_0: left promiscuous mode [ 204.001747][ T8152] hsr_slave_1: left promiscuous mode [ 204.662414][ T8171] netlink: 40 bytes leftover after parsing attributes in process `syz.0.639'. [ 204.684365][ T8170] netlink: 'syz.4.640': attribute type 1 has an invalid length. [ 204.698511][ T8170] netlink: 'syz.4.640': attribute type 4 has an invalid length. [ 204.704586][ T8171] netlink: 'syz.0.639': attribute type 1 has an invalid length. [ 204.706735][ T8170] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.640'. [ 204.781408][ T8174] sctp: [Deprecated]: syz.0.639 (pid 8174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.781408][ T8174] Use struct sctp_sack_info instead [ 204.846597][ T8167] syzkaller0: entered promiscuous mode [ 204.858086][ T8167] syzkaller0: entered allmulticast mode [ 205.362358][ T5834] Bluetooth: hci2: ISO packet for unknown connection handle 21 [ 205.427334][ T8196] __nla_validate_parse: 2 callbacks suppressed [ 205.427361][ T8196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.646'. [ 206.552082][ T8211] netlink: 68 bytes leftover after parsing attributes in process `syz.0.650'. [ 207.222080][ T8217] netlink: 76 bytes leftover after parsing attributes in process `syz.3.652'. [ 207.558920][ T8226] netlink: 'syz.3.654': attribute type 62 has an invalid length. [ 207.567395][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 207.943638][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 208.293936][ T8229] netlink: 56 bytes leftover after parsing attributes in process `syz.1.655'. [ 208.592146][ T8241] netlink: 'syz.0.660': attribute type 62 has an invalid length. [ 208.615991][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'. [ 209.022454][ T8231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.345070][ T8262] netlink: 68 bytes leftover after parsing attributes in process `syz.2.667'. [ 209.357090][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.1.664'. [ 210.202297][ T8271] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 210.396595][ T8277] netlink: 'syz.2.670': attribute type 4 has an invalid length. [ 210.412001][ T8271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.454870][ T8286] netlink: 'syz.3.673': attribute type 62 has an invalid length. [ 210.463458][ T8271] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 210.526565][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 211.071380][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.681'. [ 211.075501][ T8309] netlink: 'syz.1.680': attribute type 39 has an invalid length. [ 211.572339][ T8326] netlink: 'syz.4.687': attribute type 62 has an invalid length. [ 211.580130][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.687'. [ 211.746657][ T8333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.688'. [ 211.770425][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.777404][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 211.783892][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 211.791360][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 211.793089][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 211.898184][ T8337] FAULT_INJECTION: forcing a failure. [ 211.898184][ T8337] name failslab, interval 1, probability 0, space 0, times 0 [ 211.910866][ T8337] CPU: 1 UID: 0 PID: 8337 Comm: syz.4.690 Not tainted syzkaller #0 PREEMPT(full) [ 211.910893][ T8337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.910906][ T8337] Call Trace: [ 211.910915][ T8337] [ 211.910923][ T8337] dump_stack_lvl+0xe8/0x150 [ 211.910962][ T8337] should_fail_ex+0x412/0x560 [ 211.910996][ T8337] should_failslab+0xa8/0x100 [ 211.911023][ T8337] ? skb_clone+0x212/0x3a0 [ 211.911047][ T8337] kmem_cache_alloc_noprof+0x87/0x650 [ 211.911071][ T8337] ? __netlink_lookup+0xc6/0x8b0 [ 211.911098][ T8337] skb_clone+0x212/0x3a0 [ 211.911126][ T8337] __netlink_deliver_tap+0x404/0x850 [ 211.911159][ T8337] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.911182][ T8337] netlink_deliver_tap+0x19c/0x1b0 [ 211.911205][ T8337] netlink_unicast+0x730/0x8e0 [ 211.911247][ T8337] netlink_sendmsg+0x813/0xb40 [ 211.911279][ T8337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.911304][ T8337] ? aa_sock_msg_perm+0xf1/0x1b0 [ 211.911336][ T8337] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.911365][ T8337] ____sys_sendmsg+0x972/0x9f0 [ 211.911389][ T8337] ? __might_fault+0xaf/0x130 [ 211.911417][ T8337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.911451][ T8337] ? import_iovec+0x73/0xa0 [ 211.911488][ T8337] ___sys_sendmsg+0x2a5/0x360 [ 211.911519][ T8337] ? __lock_acquire+0x6b5/0x2cf0 [ 211.911557][ T8337] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.911619][ T8337] ? __fget_files+0x2a/0x420 [ 211.911651][ T8337] ? __fget_files+0x3a0/0x420 [ 211.911695][ T8337] __x64_sys_sendmsg+0x1bd/0x2a0 [ 211.911722][ T8337] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.911743][ T8337] ? perf_trace_preemptirq_template+0xb2/0x350 [ 211.911785][ T8337] ? __pfx_ksys_write+0x10/0x10 [ 211.911819][ T8337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.911843][ T8337] do_syscall_64+0x15f/0xf80 [ 211.911872][ T8337] ? trace_irq_disable+0x3b/0x140 [ 211.911898][ T8337] ? clear_bhb_loop+0x40/0x90 [ 211.911924][ T8337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.911946][ T8337] RIP: 0033:0x7f391cb9cdd9 [ 211.911966][ T8337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.911982][ T8337] RSP: 002b:00007f391daa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.912003][ T8337] RAX: ffffffffffffffda RBX: 00007f391ce15fa0 RCX: 00007f391cb9cdd9 [ 211.912018][ T8337] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 211.912031][ T8337] RBP: 00007f391daa5090 R08: 0000000000000000 R09: 0000000000000000 [ 211.912043][ T8337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.912055][ T8337] R13: 00007f391ce16038 R14: 00007f391ce15fa0 R15: 00007ffd745c0b98 [ 211.912086][ T8337] [ 212.352055][ T8345] netlink: 'syz.2.694': attribute type 75 has an invalid length. [ 212.389489][ T8343] netlink: 'syz.1.692': attribute type 29 has an invalid length. [ 212.399932][ T8343] netlink: 'syz.1.692': attribute type 29 has an invalid length. [ 212.952710][ T8362] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.696'. [ 213.588332][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'. [ 213.728246][ T8387] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.886633][ T8391] netlink: 'syz.0.709': attribute type 39 has an invalid length. [ 213.911620][ T8389] netlink: 'syz.1.708': attribute type 2 has an invalid length. [ 213.997165][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 214.382656][ T8389] ‚#{6c: entered promiscuous mode [ 214.674378][ T8405] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.714'. [ 214.833846][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 214.925996][ T8410] netlink: 14 bytes leftover after parsing attributes in process `syz.0.716'. [ 214.993333][ T8410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.066190][ T8410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.105347][ T8410] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 215.152988][ T8410] bond0 (unregistering): Released all slaves [ 215.210630][ T8422] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.644365][ T8437] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 215.834587][ T8445] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 215.854565][ T8445] __nla_validate_parse: 2 callbacks suppressed [ 215.854586][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.730'. [ 215.894412][ T8446] netlink: 'syz.1.728': attribute type 10 has an invalid length. [ 215.896897][ T8444] netlink: 'syz.3.729': attribute type 2 has an invalid length. [ 215.919147][ T8446] netlink: 40 bytes leftover after parsing attributes in process `syz.1.728'. [ 215.928797][ T1340] wlan1: Trigger new scan to find an IBSS to join [ 215.957466][ T8444] netlink: 1 bytes leftover after parsing attributes in process `syz.3.729'. [ 215.975000][ T8446] batadv0: entered promiscuous mode [ 215.986903][ T8446] batadv0: entered allmulticast mode [ 216.015300][ T8446] bridge0: port 3(batadv0) entered blocking state [ 216.034016][ T8449] FAULT_INJECTION: forcing a failure. [ 216.034016][ T8449] name failslab, interval 1, probability 0, space 0, times 0 [ 216.049655][ T8446] bridge0: port 3(batadv0) entered disabled state [ 216.065738][ T8449] CPU: 0 UID: 0 PID: 8449 Comm: syz.0.731 Not tainted syzkaller #0 PREEMPT(full) [ 216.065767][ T8449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.065782][ T8449] Call Trace: [ 216.065794][ T8449] [ 216.065808][ T8449] dump_stack_lvl+0xe8/0x150 [ 216.065871][ T8449] should_fail_ex+0x412/0x560 [ 216.065951][ T8449] should_failslab+0xa8/0x100 [ 216.066005][ T8449] __kmalloc_cache_noprof+0x88/0x660 [ 216.066042][ T8449] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 216.066078][ T8449] ? sctp_add_bind_addr+0x8c/0x370 [ 216.066153][ T8449] sctp_add_bind_addr+0x8c/0x370 [ 216.066225][ T8449] sctp_copy_local_addr_list+0x314/0x4f0 [ 216.066289][ T8449] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 216.066334][ T8449] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 216.066404][ T8449] ? sctp_v4_is_any+0x35/0x60 [ 216.066441][ T8449] ? sctp_copy_one_addr+0x93/0x360 [ 216.066525][ T8449] sctp_bind_addr_copy+0xb3/0x3c0 [ 216.066587][ T8449] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 216.066656][ T8449] sctp_connect_new_asoc+0x2ff/0x6b0 [ 216.066725][ T8449] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 216.066814][ T8449] ? __local_bh_enable_ip+0xd0/0x130 [ 216.066850][ T8449] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 216.066883][ T8449] ? security_sctp_bind_connect+0x7e/0x2c0 [ 216.066939][ T8449] sctp_sendmsg+0x1528/0x2c10 [ 216.066975][ T8449] ? trace_irq_disable+0x3b/0x140 [ 216.067105][ T8449] ? __pfx_sctp_sendmsg+0x10/0x10 [ 216.067159][ T8449] ? aa_sk_perm+0x675/0x900 [ 216.067204][ T8449] ? aa_sk_perm+0x6d5/0x900 [ 216.067303][ T8449] ? __pfx_aa_sk_perm+0x10/0x10 [ 216.067373][ T8449] ? sock_rps_record_flow+0x19/0x350 [ 216.067431][ T8449] ? inet_sendmsg+0x2f4/0x370 [ 216.067494][ T8449] ____sys_sendmsg+0x80a/0x9f0 [ 216.067605][ T8449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.067705][ T8449] ? import_iovec+0x73/0xa0 [ 216.067781][ T8449] ___sys_sendmsg+0x2a5/0x360 [ 216.067865][ T8449] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.068057][ T8449] ? __fget_files+0x2a/0x420 [ 216.068174][ T8449] ? __fget_files+0x2a/0x420 [ 216.068214][ T8449] ? __fget_files+0x3a0/0x420 [ 216.068329][ T8449] __x64_sys_sendmsg+0x1bd/0x2a0 [ 216.068389][ T8449] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.068489][ T8449] ? __pfx_ksys_write+0x10/0x10 [ 216.068594][ T8449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.068636][ T8449] do_syscall_64+0x15f/0xf80 [ 216.068672][ T8449] ? trace_irq_disable+0x3b/0x140 [ 216.068714][ T8449] ? clear_bhb_loop+0x40/0x90 [ 216.068769][ T8449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.068795][ T8449] RIP: 0033:0x7fc9d299cdd9 [ 216.068828][ T8449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.068846][ T8449] RSP: 002b:00007fc9d38ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.068868][ T8449] RAX: ffffffffffffffda RBX: 00007fc9d2c15fa0 RCX: 00007fc9d299cdd9 [ 216.068884][ T8449] RDX: 0000000000008054 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 216.068897][ T8449] RBP: 00007fc9d38ef090 R08: 0000000000000000 R09: 0000000000000000 [ 216.068909][ T8449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.068921][ T8449] R13: 00007fc9d2c16038 R14: 00007fc9d2c15fa0 R15: 00007ffc33f5c5a8 [ 216.069052][ T8449] [ 216.244422][ T8446] bridge0: port 3(batadv0) entered blocking state [ 216.400317][ T8446] bridge0: port 3(batadv0) entered forwarding state [ 216.434948][ T6807] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 216.444767][ T6807] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 216.588762][ T8452] netlink: 60 bytes leftover after parsing attributes in process `syz.4.732'. [ 216.751881][ T8454] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.733'. [ 216.915351][ T8463] sch_fq: defrate 181 ignored. [ 217.324273][ T8486] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.743'. [ 217.942897][ T8515] sctp: [Deprecated]: syz.4.747 (pid 8515) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.942897][ T8515] Use struct sctp_sack_info instead [ 218.471178][ T5492] veth0_vlan: left promiscuous mode [ 218.514296][ T8530] netlink: 72 bytes leftover after parsing attributes in process `syz.1.752'. [ 218.531371][ T5492] veth0_vlan: entered promiscuous mode [ 218.628075][ T5841] Bluetooth: hci4: unexpected subevent 0x10 length: 150 > 2 [ 219.161750][ T8543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'. [ 219.257823][ T8548] netlink: 'syz.2.755': attribute type 13 has an invalid length. [ 219.318685][ T8548] netlink: 152 bytes leftover after parsing attributes in process `syz.2.755'. [ 219.736051][ T8551] netlink: 'syz.0.757': attribute type 3 has an invalid length. [ 219.938224][ T136] wlan1: Trigger new scan to find an IBSS to join [ 219.990438][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 221.622375][ T1340] wlan1: Creating new IBSS network, BSSID 62:17:d0:b0:e6:e0 [ 222.063960][ T8594] netlink: 'syz.0.766': attribute type 4 has an invalid length. [ 222.120067][ T8596] netlink: 'syz.3.767': attribute type 62 has an invalid length. [ 222.156872][ T8596] __nla_validate_parse: 1 callbacks suppressed [ 222.156911][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 222.368037][ T8607] FAULT_INJECTION: forcing a failure. [ 222.368037][ T8607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.381173][ T8607] CPU: 0 UID: 0 PID: 8607 Comm: syz.4.769 Not tainted syzkaller #0 PREEMPT(full) [ 222.381203][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.381217][ T8607] Call Trace: [ 222.381226][ T8607] [ 222.381235][ T8607] dump_stack_lvl+0xe8/0x150 [ 222.381280][ T8607] should_fail_ex+0x412/0x560 [ 222.381321][ T8607] _copy_from_iter+0x1d3/0x1670 [ 222.381361][ T8607] ? rcu_is_watching+0x15/0xb0 [ 222.381396][ T8607] ? __pfx__copy_from_iter+0x10/0x10 [ 222.381441][ T8607] ? netlink_sendmsg+0x650/0xb40 [ 222.381462][ T8607] ? skb_put+0x11b/0x210 [ 222.381492][ T8607] netlink_sendmsg+0x6c0/0xb40 [ 222.381531][ T8607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.381562][ T8607] ? aa_sock_msg_perm+0xf1/0x1b0 [ 222.381597][ T8607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.381630][ T8607] ____sys_sendmsg+0x972/0x9f0 [ 222.381655][ T8607] ? __pfx_perf_trace_lock+0x10/0x10 [ 222.381691][ T8607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.381732][ T8607] ? import_iovec+0x73/0xa0 [ 222.381774][ T8607] ___sys_sendmsg+0x2a5/0x360 [ 222.381798][ T8607] ? __lock_acquire+0x6b5/0x2cf0 [ 222.381839][ T8607] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.381905][ T8607] ? __fget_files+0x2a/0x420 [ 222.381959][ T8607] ? __fget_files+0x2a/0x420 [ 222.381991][ T8607] ? __fget_files+0x3a0/0x420 [ 222.382045][ T8607] __x64_sys_sendmsg+0x1bd/0x2a0 [ 222.382083][ T8607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.382106][ T8607] ? perf_trace_preemptirq_template+0xb2/0x350 [ 222.382154][ T8607] ? __pfx_ksys_write+0x10/0x10 [ 222.382196][ T8607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.382223][ T8607] do_syscall_64+0x15f/0xf80 [ 222.382255][ T8607] ? clear_bhb_loop+0x40/0x90 [ 222.382285][ T8607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.382307][ T8607] RIP: 0033:0x7f391cb9cdd9 [ 222.382328][ T8607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.382345][ T8607] RSP: 002b:00007f391daa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.382368][ T8607] RAX: ffffffffffffffda RBX: 00007f391ce15fa0 RCX: 00007f391cb9cdd9 [ 222.382383][ T8607] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 222.382397][ T8607] RBP: 00007f391daa5090 R08: 0000000000000000 R09: 0000000000000000 [ 222.382410][ T8607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.382422][ T8607] R13: 00007f391ce16038 R14: 00007f391ce15fa0 R15: 00007ffd745c0b98 [ 222.382469][ T8607] [ 223.034162][ T8613] netlink: 'syz.4.773': attribute type 2 has an invalid length. [ 223.062383][ T8613] tipc: Started in network mode [ 223.067328][ T8613] tipc: Node identity 8, cluster identity 4711 [ 223.073526][ T8613] tipc: Node number set to 8 [ 223.239222][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 223.472869][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 223.986805][ T8620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 224.933110][ T8640] openvswitch: netlink: IP tunnel dst address not specified [ 224.964764][ T8638] netlink: 76 bytes leftover after parsing attributes in process `syz.3.779'. [ 226.878898][ T8663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.786'. [ 227.217772][ T8659] netlink: 9 bytes leftover after parsing attributes in process `syz.1.786'. [ 227.272143][ T8659] netlink: 9 bytes leftover after parsing attributes in process `syz.1.786'. [ 227.350265][ T8670] netlink: 132 bytes leftover after parsing attributes in process `syz.3.789'. [ 227.779326][ T8675] syzkaller0: entered promiscuous mode [ 227.796644][ T8677] netlink: 'syz.4.792': attribute type 4 has an invalid length. [ 227.810011][ T8675] syzkaller0: entered allmulticast mode [ 228.060360][ T5841] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 228.079630][ T8692] netlink: 'syz.3.795': attribute type 62 has an invalid length. [ 228.105370][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 229.699488][ T8712] netlink: 'syz.2.801': attribute type 4 has an invalid length. [ 230.420229][ T8704] netlink: 'syz.1.800': attribute type 29 has an invalid length. [ 230.654948][ T8722] FAULT_INJECTION: forcing a failure. [ 230.654948][ T8722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.691445][ T8722] CPU: 0 UID: 0 PID: 8722 Comm: syz.1.804 Not tainted syzkaller #0 PREEMPT(full) [ 230.691474][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.691487][ T8722] Call Trace: [ 230.691495][ T8722] [ 230.691504][ T8722] dump_stack_lvl+0xe8/0x150 [ 230.691544][ T8722] should_fail_ex+0x412/0x560 [ 230.691580][ T8722] _copy_from_iter+0x1d3/0x1670 [ 230.691614][ T8722] ? rcu_is_watching+0x15/0xb0 [ 230.691643][ T8722] ? __pfx__copy_from_iter+0x10/0x10 [ 230.691684][ T8722] ? netlink_sendmsg+0x650/0xb40 [ 230.691704][ T8722] ? skb_put+0x11b/0x210 [ 230.691729][ T8722] netlink_sendmsg+0x6c0/0xb40 [ 230.691771][ T8722] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.691797][ T8722] ? aa_sock_msg_perm+0xf1/0x1b0 [ 230.691828][ T8722] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 230.691857][ T8722] ____sys_sendmsg+0x972/0x9f0 [ 230.691880][ T8722] ? __might_fault+0xaf/0x130 [ 230.691910][ T8722] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.691943][ T8722] ? import_iovec+0x73/0xa0 [ 230.691978][ T8722] ___sys_sendmsg+0x2a5/0x360 [ 230.692000][ T8722] ? __lock_acquire+0x6b5/0x2cf0 [ 230.692037][ T8722] ? __pfx____sys_sendmsg+0x10/0x10 [ 230.692099][ T8722] ? __fget_files+0x2a/0x420 [ 230.692129][ T8722] ? __fget_files+0x3a0/0x420 [ 230.692172][ T8722] __x64_sys_sendmsg+0x1bd/0x2a0 [ 230.692200][ T8722] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 230.692234][ T8722] ? __pfx_ksys_write+0x10/0x10 [ 230.692269][ T8722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.692292][ T8722] do_syscall_64+0x15f/0xf80 [ 230.692328][ T8722] ? trace_irq_disable+0x3b/0x140 [ 230.692356][ T8722] ? clear_bhb_loop+0x40/0x90 [ 230.692383][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.692404][ T8722] RIP: 0033:0x7ff50cf9cdd9 [ 230.692423][ T8722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.692441][ T8722] RSP: 002b:00007ff50ddea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.692464][ T8722] RAX: ffffffffffffffda RBX: 00007ff50d215fa0 RCX: 00007ff50cf9cdd9 [ 230.692479][ T8722] RDX: 0000000020000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 230.692493][ T8722] RBP: 00007ff50ddea090 R08: 0000000000000000 R09: 0000000000000000 [ 230.692505][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.692518][ T8722] R13: 00007ff50d216038 R14: 00007ff50d215fa0 R15: 00007fff78f2b558 [ 230.692552][ T8722] [ 231.296068][ T8736] netlink: 763 bytes leftover after parsing attributes in process `syz.4.808'. [ 231.310008][ T8737] set match dimension is over the limit! [ 231.352505][ T8737] netlink: 5 bytes leftover after parsing attributes in process `syz.3.809'. [ 231.374553][ T8737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.809'. [ 231.489660][ T8743] netlink: 'syz.4.813': attribute type 62 has an invalid length. [ 231.544355][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 232.667328][ T8771] netlink: 72 bytes leftover after parsing attributes in process `syz.1.821'. [ 232.724771][ T8771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.821'. [ 233.108409][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 233.122055][ T8781] netlink: 'syz.0.820': attribute type 1 has an invalid length. [ 233.211789][ T8781] netlink: 96 bytes leftover after parsing attributes in process `syz.0.820'. [ 233.381545][ T8781] netlink: 658 bytes leftover after parsing attributes in process `syz.0.820'. [ 233.508298][ T8781] netlink: 1 bytes leftover after parsing attributes in process `syz.0.820'. [ 234.143930][ T8822] netlink: 'syz.0.827': attribute type 62 has an invalid length. [ 234.170232][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 234.177153][ T8819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.824'. [ 235.152356][ T8840] netlink: 'syz.4.830': attribute type 62 has an invalid length. [ 235.184469][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.830'. [ 235.415786][ T8851] netlink: 'syz.2.833': attribute type 2 has an invalid length. [ 235.423512][ T8851] netlink: 'syz.2.833': attribute type 3 has an invalid length. [ 235.453185][ T8852] IPv6: NLM_F_CREATE should be specified when creating new route [ 235.484133][ T8851] netlink: 132 bytes leftover after parsing attributes in process `syz.2.833'. [ 235.525789][ T8852] netlink: 'syz.3.829': attribute type 1 has an invalid length. [ 237.101565][ T8887] netlink: 'syz.4.841': attribute type 2 has an invalid length. [ 237.374768][ T8892] FAULT_INJECTION: forcing a failure. [ 237.374768][ T8892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.407553][ T8892] CPU: 1 UID: 0 PID: 8892 Comm: syz.3.842 Not tainted syzkaller #0 PREEMPT(full) [ 237.407582][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 237.407606][ T8892] Call Trace: [ 237.407614][ T8892] [ 237.407623][ T8892] dump_stack_lvl+0xe8/0x150 [ 237.407663][ T8892] should_fail_ex+0x412/0x560 [ 237.407698][ T8892] _copy_from_user+0x2d/0xb0 [ 237.407733][ T8892] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 237.407774][ T8892] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 237.407802][ T8892] ? _raw_spin_unlock_irq+0x2e/0x50 [ 237.407867][ T8892] ? rcu_is_watching+0x15/0xb0 [ 237.407899][ T8892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.407923][ T8892] do_syscall_64+0x15f/0xf80 [ 237.407950][ T8892] ? trace_irq_disable+0x3b/0x140 [ 237.407978][ T8892] ? clear_bhb_loop+0x40/0x90 [ 237.408005][ T8892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.408026][ T8892] RIP: 0033:0x7f517c33e159 [ 237.408046][ T8892] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 237.408064][ T8892] RSP: 002b:00007f517d2e4a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 237.408086][ T8892] RAX: ffffffffffffffda RBX: 00007f517c615fa0 RCX: 00007f517c33e159 [ 237.408102][ T8892] RDX: 00007f517d2e4a80 RSI: 00007f517d2e4bb0 RDI: 0000000000000011 [ 237.408115][ T8892] RBP: 00007f517d2e5090 R08: 0000000000000000 R09: 0000000000000000 [ 237.408128][ T8892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 237.408140][ T8892] R13: 00007f517c616038 R14: 00007f517c615fa0 R15: 00007fffea9d4348 [ 237.408172][ T8892] [ 237.875781][ T8903] netlink: 'syz.2.846': attribute type 2 has an invalid length. [ 237.906412][ T8903] netlink: 'syz.2.846': attribute type 2 has an invalid length. [ 238.752052][ T8900] netlink: 'syz.3.847': attribute type 29 has an invalid length. [ 238.849032][ T8912] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 238.870752][ T8912] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 238.920153][ T8912] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 239.031879][ T8921] openvswitch: netlink: Invalid VLAN frame [ 239.208356][ T8926] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.610329][ T8939] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 239.655475][ T8939] netlink: 'syz.2.855': attribute type 2 has an invalid length. [ 239.667852][ T8936] __nla_validate_parse: 5 callbacks suppressed [ 239.667873][ T8936] netlink: 40 bytes leftover after parsing attributes in process `syz.4.857'. [ 240.069779][ T8946] netlink: 2588 bytes leftover after parsing attributes in process `syz.0.860'. [ 240.089973][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 240.098944][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 240.146824][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 240.156325][ T8938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.859'. [ 240.675619][ T8956] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.863'. [ 240.708720][ T8956] FAULT_INJECTION: forcing a failure. [ 240.708720][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 240.745358][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.1.863 Not tainted syzkaller #0 PREEMPT(full) [ 240.745388][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 240.745402][ T8956] Call Trace: [ 240.745415][ T8956] [ 240.745428][ T8956] dump_stack_lvl+0xe8/0x150 [ 240.745492][ T8956] should_fail_ex+0x412/0x560 [ 240.745577][ T8956] should_failslab+0xa8/0x100 [ 240.745632][ T8956] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 240.745682][ T8956] ? __alloc_skb+0x1d0/0x7d0 [ 240.745705][ T8956] ? __local_bh_enable_ip+0xd0/0x130 [ 240.745780][ T8956] __alloc_skb+0x1d0/0x7d0 [ 240.745850][ T8956] __netdev_alloc_skb+0xc1/0x810 [ 240.745931][ T8956] ovs_packet_cmd_execute+0x205/0xea0 [ 240.746031][ T8956] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 240.746092][ T8956] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 240.746125][ T8956] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 240.746213][ T8956] genl_family_rcv_msg_doit+0x22a/0x330 [ 240.746296][ T8956] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 240.746417][ T8956] ? bpf_lsm_capable+0x9/0x20 [ 240.746452][ T8956] ? security_capable+0x7e/0x2c0 [ 240.746537][ T8956] genl_rcv_msg+0x61c/0x7a0 [ 240.746623][ T8956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.746663][ T8956] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 240.746793][ T8956] netlink_rcv_skb+0x232/0x4b0 [ 240.746852][ T8956] ? __pfx_genl_rcv_msg+0x10/0x10 [ 240.746914][ T8956] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.746951][ T8956] ? genl_rcv+0x19/0x40 [ 240.747098][ T8956] ? down_read+0x270/0x2e0 [ 240.747133][ T8956] ? genl_rcv+0xd/0x40 [ 240.747189][ T8956] genl_rcv+0x28/0x40 [ 240.747224][ T8956] netlink_unicast+0x75c/0x8e0 [ 240.747343][ T8956] netlink_sendmsg+0x813/0xb40 [ 240.747439][ T8956] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.747498][ T8956] ? aa_sock_msg_perm+0xf1/0x1b0 [ 240.747554][ T8956] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 240.747612][ T8956] ____sys_sendmsg+0x972/0x9f0 [ 240.747651][ T8956] ? __pfx_perf_trace_lock+0x10/0x10 [ 240.747731][ T8956] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.747831][ T8956] ? import_iovec+0x73/0xa0 [ 240.747905][ T8956] ___sys_sendmsg+0x2a5/0x360 [ 240.747990][ T8956] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.748174][ T8956] ? __fget_files+0x2a/0x420 [ 240.748287][ T8956] ? __fget_files+0x2a/0x420 [ 240.748328][ T8956] ? __fget_files+0x3a0/0x420 [ 240.748440][ T8956] __x64_sys_sendmsg+0x1bd/0x2a0 [ 240.748500][ T8956] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 240.748527][ T8956] ? perf_trace_preemptirq_template+0xb2/0x350 [ 240.748625][ T8956] ? __pfx_ksys_write+0x10/0x10 [ 240.748722][ T8956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.748761][ T8956] do_syscall_64+0x15f/0xf80 [ 240.748796][ T8956] ? trace_irq_disable+0x3b/0x140 [ 240.748837][ T8956] ? clear_bhb_loop+0x40/0x90 [ 240.748893][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.748928][ T8956] RIP: 0033:0x7ff50cf9cdd9 [ 240.748960][ T8956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.748976][ T8956] RSP: 002b:00007ff50ddea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.748998][ T8956] RAX: ffffffffffffffda RBX: 00007ff50d215fa0 RCX: 00007ff50cf9cdd9 [ 240.749012][ T8956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 240.749025][ T8956] RBP: 00007ff50ddea090 R08: 0000000000000000 R09: 0000000000000000 [ 240.749038][ T8956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.749051][ T8956] R13: 00007ff50d216038 R14: 00007ff50d215fa0 R15: 00007fff78f2b558 [ 240.749178][ T8956] [ 241.427009][ T8964] netlink: 24 bytes leftover after parsing attributes in process `syz.2.866'. [ 242.397150][ T8989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.470515][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.875'. [ 243.380380][ T9012] netlink: 'syz.0.880': attribute type 1 has an invalid length. [ 243.407982][ T9012] netlink: 'syz.0.880': attribute type 2 has an invalid length. [ 243.574294][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.883'. [ 243.647259][ T9025] FAULT_INJECTION: forcing a failure. [ 243.647259][ T9025] name failslab, interval 1, probability 0, space 0, times 0 [ 243.702665][ T9025] CPU: 1 UID: 0 PID: 9025 Comm: syz.0.885 Not tainted syzkaller #0 PREEMPT(full) [ 243.702694][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.702706][ T9025] Call Trace: [ 243.702715][ T9025] [ 243.702724][ T9025] dump_stack_lvl+0xe8/0x150 [ 243.702762][ T9025] should_fail_ex+0x412/0x560 [ 243.702797][ T9025] should_failslab+0xa8/0x100 [ 243.702826][ T9025] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 243.702850][ T9025] ? __alloc_skb+0x186/0x7d0 [ 243.702868][ T9025] ? __alloc_skb+0x1d0/0x7d0 [ 243.702884][ T9025] ? __local_bh_enable_ip+0xd0/0x130 [ 243.702921][ T9025] __alloc_skb+0x1d0/0x7d0 [ 243.702946][ T9025] netlink_sendmsg+0x5d4/0xb40 [ 243.702978][ T9025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 243.703004][ T9025] ? aa_sock_msg_perm+0xf1/0x1b0 [ 243.703036][ T9025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 243.703072][ T9025] ____sys_sendmsg+0x972/0x9f0 [ 243.703100][ T9025] ? __might_fault+0xaf/0x130 [ 243.703129][ T9025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 243.703167][ T9025] ? import_iovec+0x73/0xa0 [ 243.703205][ T9025] ___sys_sendmsg+0x2a5/0x360 [ 243.703227][ T9025] ? __lock_acquire+0x6b5/0x2cf0 [ 243.703264][ T9025] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.703323][ T9025] ? __fget_files+0x2a/0x420 [ 243.703356][ T9025] ? __fget_files+0x3a0/0x420 [ 243.703398][ T9025] __x64_sys_sendmsg+0x1bd/0x2a0 [ 243.703425][ T9025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.703459][ T9025] ? __pfx_ksys_write+0x10/0x10 [ 243.703492][ T9025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.703516][ T9025] do_syscall_64+0x15f/0xf80 [ 243.703544][ T9025] ? trace_irq_disable+0x3b/0x140 [ 243.703573][ T9025] ? clear_bhb_loop+0x40/0x90 [ 243.703599][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.703620][ T9025] RIP: 0033:0x7fc9d299cdd9 [ 243.703640][ T9025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.703665][ T9025] RSP: 002b:00007fc9d38ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.703688][ T9025] RAX: ffffffffffffffda RBX: 00007fc9d2c15fa0 RCX: 00007fc9d299cdd9 [ 243.703703][ T9025] RDX: 0000000000008018 RSI: 00002000000000c0 RDI: 0000000000000003 [ 243.703716][ T9025] RBP: 00007fc9d38ef090 R08: 0000000000000000 R09: 0000000000000000 [ 243.703729][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.703741][ T9025] R13: 00007fc9d2c16038 R14: 00007fc9d2c15fa0 R15: 00007ffc33f5c5a8 [ 243.703775][ T9025] [ 244.296238][ T9035] netlink: 'syz.2.887': attribute type 29 has an invalid length. [ 244.373975][ T9038] netlink: 'syz.2.887': attribute type 29 has an invalid length. [ 244.536181][ T9045] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 245.691871][ T9063] netlink: 'syz.1.899': attribute type 62 has an invalid length. [ 245.772966][ T9066] __nla_validate_parse: 3 callbacks suppressed [ 245.772987][ T9066] netlink: 68 bytes leftover after parsing attributes in process `syz.2.900'. [ 245.792884][ T9068] netlink: 68 bytes leftover after parsing attributes in process `syz.0.901'. [ 245.932367][ T9074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.084863][ T9073] FAULT_INJECTION: forcing a failure. [ 246.084863][ T9073] name failslab, interval 1, probability 0, space 0, times 0 [ 246.108139][ T9073] CPU: 1 UID: 0 PID: 9073 Comm: syz.4.903 Not tainted syzkaller #0 PREEMPT(full) [ 246.108169][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.108181][ T9073] Call Trace: [ 246.108192][ T9073] [ 246.108203][ T9073] dump_stack_lvl+0xe8/0x150 [ 246.108266][ T9073] should_fail_ex+0x412/0x560 [ 246.108322][ T9073] should_failslab+0xa8/0x100 [ 246.108362][ T9073] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 246.108394][ T9073] ? __alloc_skb+0x186/0x7d0 [ 246.108418][ T9073] ? __alloc_skb+0x1d0/0x7d0 [ 246.108438][ T9073] ? __local_bh_enable_ip+0xd0/0x130 [ 246.108494][ T9073] __alloc_skb+0x1d0/0x7d0 [ 246.108541][ T9073] pfkey_sendmsg+0x212/0x1120 [ 246.108587][ T9073] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 246.108669][ T9073] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 246.108716][ T9073] ? aa_sk_perm+0x6d5/0x900 [ 246.108785][ T9073] ? __pfx_aa_sk_perm+0x10/0x10 [ 246.108815][ T9073] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 246.108889][ T9073] ? aa_sock_msg_perm+0xf1/0x1b0 [ 246.108932][ T9073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 246.108974][ T9073] ____sys_sendmsg+0x972/0x9f0 [ 246.109003][ T9073] ? __might_fault+0xaf/0x130 [ 246.109055][ T9073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 246.109119][ T9073] ? import_iovec+0x73/0xa0 [ 246.109175][ T9073] ___sys_sendmsg+0x2a5/0x360 [ 246.109201][ T9073] ? __lock_acquire+0x6b5/0x2cf0 [ 246.109262][ T9073] ? __pfx____sys_sendmsg+0x10/0x10 [ 246.109448][ T9073] ? __fget_files+0x2a/0x420 [ 246.109485][ T9073] ? __fget_files+0x3a0/0x420 [ 246.109564][ T9073] __x64_sys_sendmsg+0x1bd/0x2a0 [ 246.109606][ T9073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 246.109630][ T9073] ? perf_trace_preemptirq_template+0xb2/0x350 [ 246.109702][ T9073] ? __pfx_ksys_write+0x10/0x10 [ 246.109766][ T9073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.109797][ T9073] do_syscall_64+0x15f/0xf80 [ 246.109828][ T9073] ? trace_irq_disable+0x3b/0x140 [ 246.109861][ T9073] ? clear_bhb_loop+0x40/0x90 [ 246.109901][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.109926][ T9073] RIP: 0033:0x7f391cb9cdd9 [ 246.109952][ T9073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.109969][ T9073] RSP: 002b:00007f391daa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.109991][ T9073] RAX: ffffffffffffffda RBX: 00007f391ce15fa0 RCX: 00007f391cb9cdd9 [ 246.110006][ T9073] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 246.110019][ T9073] RBP: 00007f391daa5090 R08: 0000000000000000 R09: 0000000000000000 [ 246.110031][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.110043][ T9073] R13: 00007f391ce16038 R14: 00007f391ce15fa0 R15: 00007ffd745c0b98 [ 246.110125][ T9073] [ 246.189373][ T5841] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 246.982402][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.905'. [ 247.111398][ T9096] netlink: 'syz.4.910': attribute type 29 has an invalid length. [ 247.128449][ T9096] netlink: 'syz.4.910': attribute type 29 has an invalid length. [ 247.395027][ T9100] netlink: 'syz.1.911': attribute type 2 has an invalid length. [ 247.403741][ T9100] netlink: 1 bytes leftover after parsing attributes in process `syz.1.911'. [ 247.740928][ T9113] netlink: 'syz.3.914': attribute type 62 has an invalid length. [ 248.043514][ T9121] tmpfs: Bad value for 'gid' [ 248.071993][ T9121] tmpfs: Bad value for 'gid' [ 248.295621][ T9132] netlink: 'syz.3.919': attribute type 2 has an invalid length. [ 248.397810][ T9132] netlink: 1 bytes leftover after parsing attributes in process `syz.3.919'. [ 249.179648][ T9153] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 249.270622][ T9145] netlink: 2 bytes leftover after parsing attributes in process `syz.1.922'. [ 249.625518][ T9117] infiniband syz0: set down [ 249.630452][ T9117] infiniband syz0: added ipvlan0 [ 249.655374][ T9117] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 249.660801][ T9117] infiniband syz0: Couldn't open port 1 [ 249.676364][ T9117] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 249.692262][ T9117] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 249.709969][ T9117] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 249.783842][ T9117] RDS/IB: syz0: added [ 249.801365][ T9117] smc: adding ib device syz0 with port count 1 [ 249.808111][ T9117] smc: ib device syz0 port 1 has no pnetid [ 249.862754][ T9163] netlink: 'syz.3.925': attribute type 29 has an invalid length. [ 249.981313][ T9164] netlink: 'syz.3.925': attribute type 29 has an invalid length. [ 250.014607][ T9172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.927'. [ 250.024103][ T9172] netlink: 48 bytes leftover after parsing attributes in process `syz.1.927'. [ 250.261610][ T9178] netlink: 'syz.1.929': attribute type 62 has an invalid length. [ 250.338209][ T9180] syzkaller0: entered promiscuous mode [ 250.343764][ T9180] syzkaller0: entered allmulticast mode [ 251.691351][ T6813] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.151962][ T9183] netlink: 'syz.2.931': attribute type 2 has an invalid length. [ 252.159775][ T9183] tipc: Started in network mode [ 252.164680][ T9183] tipc: Node identity 8, cluster identity 4711 [ 252.171018][ T9183] tipc: Node number set to 8 [ 252.333296][ T9186] netlink: 'syz.1.933': attribute type 39 has an invalid length. [ 252.598178][ T9194] netlink: 80 bytes leftover after parsing attributes in process `syz.3.935'. [ 252.654339][ T9200] netlink: 'syz.0.934': attribute type 4 has an invalid length. [ 252.828478][ T30] audit: type=1107 audit(1778038549.400:2): pid=9193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 253.060402][ T9205] mac80211_hwsim hwsim4 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 253.823358][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.944'. [ 254.078718][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'. [ 254.098409][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'. [ 254.107491][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'. [ 254.116819][ T9228] netlink: 28 bytes leftover after parsing attributes in process `syz.0.946'. [ 254.129232][ T9226] netlink: 'syz.2.945': attribute type 29 has an invalid length. [ 254.194662][ T9226] netlink: 'syz.2.945': attribute type 29 has an invalid length. [ 255.788915][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.795470][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.041675][ T9240] netlink: 76 bytes leftover after parsing attributes in process `syz.2.948'. [ 256.162177][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 256.651450][ T9256] netlink: 'syz.3.956': attribute type 4 has an invalid length. [ 256.654780][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 256.898727][ T9265] netlink: 'syz.3.959': attribute type 29 has an invalid length. [ 256.943401][ T9265] netlink: 'syz.3.959': attribute type 29 has an invalid length. [ 258.672999][ T9290] netlink: 132 bytes leftover after parsing attributes in process `syz.0.966'. [ 259.000037][ T9293] netlink: 'syz.4.969': attribute type 29 has an invalid length. [ 259.016404][ T9293] netlink: 'syz.4.969': attribute type 29 has an invalid length. [ 259.047044][ T9293] netlink: 'syz.4.969': attribute type 29 has an invalid length. [ 259.123965][ T9296] netlink: 16 bytes leftover after parsing attributes in process `syz.2.967'. [ 259.226983][ T9296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.967'. [ 259.702001][ T9297] netlink: 'syz.4.969': attribute type 29 has an invalid length. [ 259.713256][ T9293] netlink: 'syz.4.969': attribute type 5 has an invalid length. [ 260.119703][ T9304] netlink: 'syz.0.970': attribute type 4 has an invalid length. [ 261.702645][ T9324] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.976'. [ 262.162894][ T9328] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.977'. [ 262.948787][ T9332] netlink: 'syz.0.978': attribute type 29 has an invalid length. [ 262.966690][ T9332] netlink: 'syz.0.978': attribute type 29 has an invalid length. [ 263.998935][ T9357] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.989'. [ 264.071506][ T9363] netlink: 'syz.4.988': attribute type 4 has an invalid length. [ 264.224338][ T9362] netlink: 'syz.0.990': attribute type 10 has an invalid length. [ 264.580914][ T9362] veth0_vlan: left promiscuous mode [ 264.588971][ T9362] veth0_vlan: entered promiscuous mode [ 264.601278][ T9362] team0: Device veth0_vlan failed to register rx_handler [ 264.864493][ T9377] netlink: 'syz.2.995': attribute type 29 has an invalid length. [ 264.954174][ T9377] netlink: 'syz.2.995': attribute type 29 has an invalid length. [ 265.049985][ T9384] syzkaller0: entered promiscuous mode [ 265.072116][ T9384] syzkaller0: entered allmulticast mode [ 265.408006][ T9395] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 265.487465][ T9400] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 265.691883][ T9405] netlink: 'syz.1.1004': attribute type 10 has an invalid length. [ 265.745305][ T9395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 265.790838][ T9395] team0: Port device netdevsim0 added [ 265.838804][ T9400] team0: Port device netdevsim0 removed [ 266.119037][ T9405] veth0_vlan: left promiscuous mode [ 266.187047][ T9405] veth0_vlan: entered promiscuous mode [ 266.225570][ T9414] netlink: 'syz.0.1006': attribute type 62 has an invalid length. [ 266.236178][ T9405] team0: Device veth0_vlan failed to register rx_handler [ 266.635874][ T9424] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1009'. [ 267.502149][ T9459] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1012'. [ 267.812160][ T30] audit: type=1107 audit(1778038564.390:3): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 268.740309][ T9488] validate_nla: 1 callbacks suppressed [ 268.740331][ T9488] netlink: 'syz.3.1021': attribute type 2 has an invalid length. [ 268.767889][ T9488] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1021'. [ 271.198724][ T9471] netlink: 'syz.2.1017': attribute type 29 has an invalid length. [ 271.250267][ T9482] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 271.263016][ T9536] netlink: 'syz.3.1026': attribute type 29 has an invalid length. [ 271.307825][ T9482] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 271.336262][ T9482] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 271.464576][ T9541] netlink: 'syz.0.1027': attribute type 2 has an invalid length. [ 271.528403][ T9541] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1027'. [ 271.573267][ T9545] block nbd0: not configured, cannot reconfigure [ 271.684895][ T9545] netlink: 'syz.3.1030': attribute type 7 has an invalid length. [ 271.731991][ T9545] netlink: 'syz.3.1030': attribute type 8 has an invalid length. [ 271.752757][ T9545] netlink: 209816 bytes leftover after parsing attributes in process `syz.3.1030'. [ 272.094251][ T9559] netlink: 'syz.0.1033': attribute type 2 has an invalid length. [ 272.135738][ T9559] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1033'. [ 272.887481][ T9580] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 273.005414][ T9580] netlink: 'syz.0.1041': attribute type 29 has an invalid length. [ 273.577017][ T9591] netlink: 'syz.3.1043': attribute type 2 has an invalid length. [ 273.601600][ T9591] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1043'. [ 275.187425][ T9610] netlink: 'syz.2.1051': attribute type 2 has an invalid length. [ 275.195247][ T9610] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1051'. [ 276.264900][ T9634] netlink: 'syz.3.1060': attribute type 29 has an invalid length. [ 276.336750][ T9634] netlink: 'syz.3.1060': attribute type 29 has an invalid length. [ 276.506830][ T9651] netlink: 'syz.4.1066': attribute type 2 has an invalid length. [ 276.539109][ T9651] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1066'. [ 277.541900][ T9667] netlink: 'syz.1.1070': attribute type 4 has an invalid length. [ 277.802195][ T9672] netlink: 'syz.2.1071': attribute type 11 has an invalid length. [ 277.841399][ T9671] netlink: 'syz.2.1071': attribute type 11 has an invalid length. [ 278.234394][ T9691] netlink: 'syz.0.1078': attribute type 2 has an invalid length. [ 278.245556][ T9688] FAULT_INJECTION: forcing a failure. [ 278.245556][ T9688] name failslab, interval 1, probability 0, space 0, times 0 [ 278.260251][ T9688] CPU: 1 UID: 0 PID: 9688 Comm: syz.2.1077 Not tainted syzkaller #0 PREEMPT(full) [ 278.260279][ T9688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.260293][ T9688] Call Trace: [ 278.260306][ T9688] [ 278.260318][ T9688] dump_stack_lvl+0xe8/0x150 [ 278.260380][ T9688] should_fail_ex+0x412/0x560 [ 278.260456][ T9688] should_failslab+0xa8/0x100 [ 278.260516][ T9688] __kmalloc_cache_noprof+0x88/0x660 [ 278.260561][ T9688] ? tcx_entry_fetch_or_create+0x234/0x370 [ 278.260629][ T9688] tcx_entry_fetch_or_create+0x234/0x370 [ 278.260685][ T9688] clsact_init+0xb8/0x530 [ 278.260738][ T9688] ? __pfx_clsact_init+0x10/0x10 [ 278.260776][ T9688] qdisc_create+0x7c4/0xf20 [ 278.260875][ T9688] tc_modify_qdisc+0x1818/0x2290 [ 278.260918][ T9688] ? rcu_is_watching+0x15/0xb0 [ 278.261035][ T9688] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 278.261255][ T9688] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 278.261298][ T9688] rtnetlink_rcv_msg+0x77e/0xbe0 [ 278.261369][ T9688] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 278.261413][ T9688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.261448][ T9688] ? ref_tracker_free+0x693/0x840 [ 278.261549][ T9688] ? perf_trace_run_bpf_submit+0xee/0x170 [ 278.261654][ T9688] netlink_rcv_skb+0x232/0x4b0 [ 278.261715][ T9688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 278.261775][ T9688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 278.261911][ T9688] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.261945][ T9688] ? netlink_deliver_tap+0x2e/0x1b0 [ 278.262016][ T9688] netlink_unicast+0x75c/0x8e0 [ 278.262131][ T9688] netlink_sendmsg+0x813/0xb40 [ 278.262225][ T9688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.262284][ T9688] ? aa_sock_msg_perm+0xf1/0x1b0 [ 278.262342][ T9688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 278.262400][ T9688] ____sys_sendmsg+0x972/0x9f0 [ 278.262438][ T9688] ? __pfx_perf_trace_lock+0x10/0x10 [ 278.262521][ T9688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 278.262617][ T9688] ? import_iovec+0x73/0xa0 [ 278.262694][ T9688] ___sys_sendmsg+0x2a5/0x360 [ 278.262731][ T9688] ? perf_trace_run_bpf_submit+0xee/0x170 [ 278.262792][ T9688] ? __pfx____sys_sendmsg+0x10/0x10 [ 278.262973][ T9688] ? __fget_files+0x2a/0x420 [ 278.263090][ T9688] ? __fget_files+0x2a/0x420 [ 278.263129][ T9688] ? __fget_files+0x3a0/0x420 [ 278.263242][ T9688] __x64_sys_sendmsg+0x1bd/0x2a0 [ 278.263300][ T9688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 278.263400][ T9688] ? __pfx_ksys_write+0x10/0x10 [ 278.263493][ T9688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.263541][ T9688] do_syscall_64+0x15f/0xf80 [ 278.263589][ T9688] ? clear_bhb_loop+0x40/0x90 [ 278.263644][ T9688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.263672][ T9688] RIP: 0033:0x7f07c8f9cdd9 [ 278.263705][ T9688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.263724][ T9688] RSP: 002b:00007f07c9dc8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.263749][ T9688] RAX: ffffffffffffffda RBX: 00007f07c9215fa0 RCX: 00007f07c8f9cdd9 [ 278.263765][ T9688] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000008 [ 278.263779][ T9688] RBP: 00007f07c9dc8090 R08: 0000000000000000 R09: 0000000000000000 [ 278.263792][ T9688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.263804][ T9688] R13: 00007f07c9216038 R14: 00007f07c9215fa0 R15: 00007ffcf200aa48 [ 278.263931][ T9688] [ 279.236975][ T9709] netlink: 'syz.3.1082': attribute type 2 has an invalid length. [ 279.244818][ T9709] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1082'. [ 280.307445][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'. [ 280.314666][ T9729] FAULT_INJECTION: forcing a failure. [ 280.314666][ T9729] name failslab, interval 1, probability 0, space 0, times 0 [ 280.329185][ T9729] CPU: 0 UID: 0 PID: 9729 Comm: syz.4.1087 Not tainted syzkaller #0 PREEMPT(full) [ 280.329214][ T9729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.329228][ T9729] Call Trace: [ 280.329237][ T9729] [ 280.329247][ T9729] dump_stack_lvl+0xe8/0x150 [ 280.329287][ T9729] should_fail_ex+0x412/0x560 [ 280.329326][ T9729] should_failslab+0xa8/0x100 [ 280.329360][ T9729] __kmalloc_cache_noprof+0x88/0x660 [ 280.329390][ T9729] ? crypto_larval_alloc+0x59/0x290 [ 280.329425][ T9729] crypto_larval_alloc+0x59/0x290 [ 280.329459][ T9729] crypto_alg_mod_lookup+0x1a4/0x5f0 [ 280.329494][ T9729] crypto_add_alg+0x235/0x3b0 [ 280.329528][ T9729] ? __pfx_crypto_add_alg+0x10/0x10 [ 280.329560][ T9729] crypto_user_rcv_msg+0x537/0x640 [ 280.329602][ T9729] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 280.329663][ T9729] ? __pfx___mutex_trylock_common+0x10/0x10 [ 280.329696][ T9729] ? rcu_is_watching+0x15/0xb0 [ 280.329720][ T9729] ? trace_contention_end+0x3d/0x140 [ 280.329748][ T9729] ? __mutex_lock+0x319/0x1550 [ 280.329786][ T9729] netlink_rcv_skb+0x232/0x4b0 [ 280.329824][ T9729] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 280.329859][ T9729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.329912][ T9729] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.329933][ T9729] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.329961][ T9729] crypto_netlink_rcv+0x2a/0x40 [ 280.329989][ T9729] netlink_unicast+0x75c/0x8e0 [ 280.330036][ T9729] netlink_sendmsg+0x813/0xb40 [ 280.330071][ T9729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.330100][ T9729] ? aa_sock_msg_perm+0xf1/0x1b0 [ 280.330144][ T9729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.330174][ T9729] ____sys_sendmsg+0x972/0x9f0 [ 280.330199][ T9729] ? __might_fault+0xaf/0x130 [ 280.330231][ T9729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.330270][ T9729] ? import_iovec+0x73/0xa0 [ 280.330311][ T9729] ___sys_sendmsg+0x2a5/0x360 [ 280.330333][ T9729] ? __lock_acquire+0x6b5/0x2cf0 [ 280.330372][ T9729] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.330453][ T9729] ? __fget_files+0x2a/0x420 [ 280.330487][ T9729] ? __fget_files+0x3a0/0x420 [ 280.330538][ T9729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 280.330568][ T9729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.330591][ T9729] ? perf_trace_preemptirq_template+0xb2/0x350 [ 280.330635][ T9729] ? __pfx_ksys_write+0x10/0x10 [ 280.330674][ T9729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.330699][ T9729] do_syscall_64+0x15f/0xf80 [ 280.330728][ T9729] ? trace_irq_disable+0x3b/0x140 [ 280.330756][ T9729] ? clear_bhb_loop+0x40/0x90 [ 280.330786][ T9729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.330809][ T9729] RIP: 0033:0x7f391cb9cdd9 [ 280.330830][ T9729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.330848][ T9729] RSP: 002b:00007f391da84028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.330871][ T9729] RAX: ffffffffffffffda RBX: 00007f391ce16090 RCX: 00007f391cb9cdd9 [ 280.330887][ T9729] RDX: 0000000004040840 RSI: 00002000000001c0 RDI: 0000000000000004 [ 280.330900][ T9729] RBP: 00007f391da84090 R08: 0000000000000000 R09: 0000000000000000 [ 280.330914][ T9729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 280.330926][ T9729] R13: 00007f391ce16128 R14: 00007f391ce16090 R15: 00007ffd745c0b98 [ 280.330967][ T9729] [ 284.263715][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1109'. [ 284.423246][ T9839] FAULT_INJECTION: forcing a failure. [ 284.423246][ T9839] name failslab, interval 1, probability 0, space 0, times 0 [ 284.467658][ T9839] CPU: 0 UID: 0 PID: 9839 Comm: syz.1.1111 Not tainted syzkaller #0 PREEMPT(full) [ 284.467690][ T9839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.467705][ T9839] Call Trace: [ 284.467713][ T9839] [ 284.467723][ T9839] dump_stack_lvl+0xe8/0x150 [ 284.467787][ T9839] should_fail_ex+0x412/0x560 [ 284.467825][ T9839] should_failslab+0xa8/0x100 [ 284.467858][ T9839] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 284.467884][ T9839] ? __alloc_skb+0x186/0x7d0 [ 284.467905][ T9839] ? __alloc_skb+0x1d0/0x7d0 [ 284.467923][ T9839] ? __local_bh_enable_ip+0xd0/0x130 [ 284.467963][ T9839] __alloc_skb+0x1d0/0x7d0 [ 284.467992][ T9839] netlink_sendmsg+0x5d4/0xb40 [ 284.468030][ T9839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.468058][ T9839] ? aa_sock_msg_perm+0xf1/0x1b0 [ 284.468103][ T9839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.468135][ T9839] ____sys_sendmsg+0x972/0x9f0 [ 284.468160][ T9839] ? __pfx_perf_trace_lock+0x10/0x10 [ 284.468193][ T9839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.468232][ T9839] ? import_iovec+0x73/0xa0 [ 284.468272][ T9839] ___sys_sendmsg+0x2a5/0x360 [ 284.468296][ T9839] ? __lock_acquire+0x6b5/0x2cf0 [ 284.468336][ T9839] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.468368][ T9839] ? trace_call_bpf+0xc2/0xb70 [ 284.468413][ T9839] ? __fget_files+0x2a/0x420 [ 284.468463][ T9839] ? __fget_files+0x2a/0x420 [ 284.468495][ T9839] ? __fget_files+0x3a0/0x420 [ 284.468544][ T9839] __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.468574][ T9839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.468614][ T9839] ? __pfx_ksys_write+0x10/0x10 [ 284.468653][ T9839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.468678][ T9839] do_syscall_64+0x15f/0xf80 [ 284.468707][ T9839] ? trace_irq_disable+0x3b/0x140 [ 284.468737][ T9839] ? clear_bhb_loop+0x40/0x90 [ 284.468766][ T9839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.468789][ T9839] RIP: 0033:0x7ff50cf9cdd9 [ 284.468810][ T9839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.468829][ T9839] RSP: 002b:00007ff50ddea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.468852][ T9839] RAX: ffffffffffffffda RBX: 00007ff50d215fa0 RCX: 00007ff50cf9cdd9 [ 284.468868][ T9839] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 284.468882][ T9839] RBP: 00007ff50ddea090 R08: 0000000000000000 R09: 0000000000000000 [ 284.468895][ T9839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.468908][ T9839] R13: 00007ff50d216038 R14: 00007ff50d215fa0 R15: 00007fff78f2b558 [ 284.468950][ T9839] [ 284.896951][ T9842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1112'. [ 285.568890][ T9858] netlink: 'syz.3.1116': attribute type 4 has an invalid length. [ 286.260558][ T9869] netlink: 'syz.1.1117': attribute type 4 has an invalid length. [ 287.510699][ T9857] syzkaller0: entered promiscuous mode [ 287.516281][ T9857] syzkaller0: entered allmulticast mode [ 288.169488][ T9885] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1121'. [ 288.323902][ T9885] netlink: 'syz.4.1121': attribute type 11 has an invalid length. [ 288.331820][ T9885] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.1121'. [ 289.029903][ T9891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1123'. [ 289.061188][ T9893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1122'. [ 289.182798][ T9895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1124'. [ 290.508746][ T9916] netlink: 'syz.3.1130': attribute type 4 has an invalid length. [ 291.542491][ T9939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1135'. [ 292.189771][ T9963] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1143'. [ 292.920515][ T9978] FAULT_INJECTION: forcing a failure. [ 292.920515][ T9978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.933651][ T9978] CPU: 0 UID: 0 PID: 9978 Comm: syz.0.1148 Not tainted syzkaller #0 PREEMPT(full) [ 292.933679][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.933694][ T9978] Call Trace: [ 292.933706][ T9978] [ 292.933719][ T9978] dump_stack_lvl+0xe8/0x150 [ 292.933780][ T9978] should_fail_ex+0x412/0x560 [ 292.933853][ T9978] fpu__restore_sig+0x233/0x1220 [ 292.933888][ T9978] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 292.933991][ T9978] ? __pfx_fpu__restore_sig+0x10/0x10 [ 292.934097][ T9978] ? __might_fault+0xaf/0x130 [ 292.934218][ T9978] __ia32_sys_rt_sigreturn+0x777/0x8e0 [ 292.934314][ T9978] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 292.934347][ T9978] ? _raw_spin_unlock_irq+0x2e/0x50 [ 292.934549][ T9978] ? rcu_is_watching+0x15/0xb0 [ 292.934635][ T9978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.934675][ T9978] do_syscall_64+0x15f/0xf80 [ 292.934709][ T9978] ? trace_irq_disable+0x3b/0x140 [ 292.934749][ T9978] ? clear_bhb_loop+0x40/0x90 [ 292.934802][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.934830][ T9978] RIP: 0033:0x7fc9d299cdd9 [ 292.934861][ T9978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.934880][ T9978] RSP: 002b:00007fc9d38ef028 EFLAGS: 00000246 [ 292.934900][ T9978] RAX: fffffffffffffffc RBX: 00007fc9d2c15fa0 RCX: 00007fc9d299cdd9 [ 292.934916][ T9978] RDX: 0000000020000080 RSI: 0000200000000840 RDI: 000000000000000a [ 292.934930][ T9978] RBP: 00007fc9d38ef090 R08: 0000000000000000 R09: 0000000000000000 [ 292.934944][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.934957][ T9978] R13: 00007fc9d2c16038 R14: 00007fc9d2c15fa0 R15: 00007ffc33f5c5a8 [ 292.935072][ T9978] [ 292.944508][ T9976] netlink: 'syz.3.1147': attribute type 4 has an invalid length. [ 293.523652][ T9999] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1157'. [ 293.731318][T10004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.842485][T10012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1162'. [ 293.962224][T10017] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1161'. [ 294.532415][T10024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1163'. [ 294.542597][T10024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1163'. [ 294.552877][T10024] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1163'. [ 295.082638][T10030] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1167'. [ 295.174159][T10030] netlink: Unknown conntrack attr (type=12922, max=9) [ 295.272801][T10036] netlink: 'syz.3.1166': attribute type 4 has an invalid length. [ 295.341126][T10033] netlink: 'syz.4.1168': attribute type 29 has an invalid length. [ 295.443805][T10042] FAULT_INJECTION: forcing a failure. [ 295.443805][T10042] name failslab, interval 1, probability 0, space 0, times 0 [ 295.457103][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1171'. [ 295.470576][T10042] CPU: 0 UID: 0 PID: 10042 Comm: syz.1.1170 Not tainted syzkaller #0 PREEMPT(full) [ 295.470605][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.470618][T10042] Call Trace: [ 295.470626][T10042] [ 295.470634][T10042] dump_stack_lvl+0xe8/0x150 [ 295.470674][T10042] should_fail_ex+0x412/0x560 [ 295.470710][T10042] should_failslab+0xa8/0x100 [ 295.470740][T10042] __kmalloc_noprof+0xe8/0x760 [ 295.470765][T10042] ? sk_prot_alloc+0xe7/0x210 [ 295.470793][T10042] sk_prot_alloc+0xe7/0x210 [ 295.470814][T10042] ? sk_alloc+0x27/0x390 [ 295.470838][T10042] sk_alloc+0x3a/0x390 [ 295.470864][T10042] bpf_prog_test_run_skb+0x415/0x2260 [ 295.470925][T10042] ? __fget_files+0x3a0/0x420 [ 295.470957][T10042] ? __fget_files+0x2a/0x420 [ 295.470994][T10042] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 295.471029][T10042] bpf_prog_test_run+0x2c7/0x340 [ 295.471064][T10042] __sys_bpf+0x643/0x950 [ 295.471095][T10042] ? __pfx___sys_bpf+0x10/0x10 [ 295.471149][T10042] ? ksys_write+0x242/0x270 [ 295.471176][T10042] ? __pfx_ksys_write+0x10/0x10 [ 295.471206][T10042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.471230][T10042] __x64_sys_bpf+0x7c/0x90 [ 295.471257][T10042] do_syscall_64+0x15f/0xf80 [ 295.471285][T10042] ? trace_irq_disable+0x3b/0x140 [ 295.471313][T10042] ? clear_bhb_loop+0x40/0x90 [ 295.471339][T10042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.471361][T10042] RIP: 0033:0x7ff50cf9cdd9 [ 295.471382][T10042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.471401][T10042] RSP: 002b:00007ff50ddea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.471424][T10042] RAX: ffffffffffffffda RBX: 00007ff50d215fa0 RCX: 00007ff50cf9cdd9 [ 295.471440][T10042] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 295.471453][T10042] RBP: 00007ff50ddea090 R08: 0000000000000000 R09: 0000000000000000 [ 295.471467][T10042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.471479][T10042] R13: 00007ff50d216038 R14: 00007ff50d215fa0 R15: 00007fff78f2b558 [ 295.471514][T10042] [ 295.985198][T10045] netlink: 'syz.4.1168': attribute type 29 has an invalid length. [ 296.006154][T10049] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 296.039936][T10049] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 296.062962][T10049] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 298.854960][T10083] __nla_validate_parse: 5 callbacks suppressed [ 298.854984][T10083] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1179'. [ 298.966328][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1180'. [ 299.242576][T10098] netlink: 'syz.3.1186': attribute type 10 has an invalid length. [ 299.260625][T10098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.270178][T10098] team0: Port device netdevsim0 added [ 299.277316][T10097] netlink: 'syz.3.1186': attribute type 10 has an invalid length. [ 299.278147][T10102] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1184'. [ 299.443504][T10103] netlink: 'syz.2.1185': attribute type 4 has an invalid length. [ 299.864732][T10115] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1190'. [ 299.926347][T10117] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1191'. [ 300.039339][T10120] bridge0: port 3(veth0_to_bridge) entered blocking state [ 300.068058][T10120] bridge0: port 3(veth0_to_bridge) entered disabled state [ 300.084264][T10120] veth0_to_bridge: entered allmulticast mode [ 300.100845][T10120] veth0_to_bridge: entered promiscuous mode [ 300.107539][T10120] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.125646][T10120] bridge0: port 3(veth0_to_bridge) entered blocking state [ 300.134352][T10120] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 300.442958][T10134] netlink: 'syz.3.1193': attribute type 10 has an invalid length. [ 300.461845][T10134] team0: Device ipvlan1 failed to register rx_handler [ 300.695948][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 300.940120][T10146] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1198'. [ 301.249680][T10158] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1202'. [ 301.274874][T10158] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1202'. [ 302.030776][T10181] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1207'. [ 302.977317][T10206] netlink: 'syz.1.1217': attribute type 2 has an invalid length. [ 302.987076][T10206] netlink: 'syz.1.1217': attribute type 8 has an invalid length. [ 304.155746][T10245] __nla_validate_parse: 3 callbacks suppressed [ 304.155767][T10245] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1228'. [ 304.352118][T10249] netlink: 'syz.4.1229': attribute type 1 has an invalid length. [ 304.375332][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1229'. [ 304.798709][T10257] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1233'. [ 304.836078][T10257] hsr_slave_0: left promiscuous mode [ 304.944810][T10257] hsr_slave_1: left promiscuous mode [ 306.529047][T10287] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1238'. [ 306.872432][T10290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1241'. [ 308.188717][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.200218][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.211891][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.225222][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.237679][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 308.340396][T10329] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1254'. [ 309.083762][T10347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1260'. [ 309.212433][T10349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1261'. [ 309.970918][T10322] chnl_net:caif_netlink_parms(): no params data found [ 310.343318][ T50] Bluetooth: hci0: command tx timeout [ 310.419939][T10322] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.539119][T10322] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.563012][T10322] bridge_slave_0: entered allmulticast mode [ 310.589339][T10322] bridge_slave_0: entered promiscuous mode [ 310.610622][T10322] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.627092][T10322] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.642926][T10322] bridge_slave_1: entered allmulticast mode [ 310.661723][T10322] bridge_slave_1: entered promiscuous mode [ 310.800005][T10322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.590858][T10322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.774837][T10322] team0: Port device team_slave_0 added [ 311.799929][T10322] team0: Port device team_slave_1 added [ 312.011121][T10322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.022546][T10322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.073751][T10395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1270'. [ 312.096874][T10322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.137555][T10322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.166119][T10322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.241798][T10322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.418491][ T50] Bluetooth: hci0: command tx timeout [ 312.535751][T10322] hsr_slave_0: entered promiscuous mode [ 312.564562][T10322] hsr_slave_1: entered promiscuous mode [ 312.597920][T10322] debugfs: 'hsr0' already exists in 'hsr' [ 312.617913][T10322] Cannot create hsr debugfs directory [ 312.698629][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1275'. [ 313.882954][T10322] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.925772][T10433] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1280'. [ 313.954208][T10429] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1278'. [ 314.082145][T10322] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.191551][T10438] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1281'. [ 314.233499][T10440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1282'. [ 314.303978][T10322] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.498013][ T50] Bluetooth: hci0: command tx timeout [ 314.543437][T10443] syzkaller0: entered promiscuous mode [ 314.567124][T10443] syzkaller0: entered allmulticast mode [ 314.643978][T10322] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.231013][T10322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.275311][T10322] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.292137][T10322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.311059][T10322] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.338915][T10322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.398196][T10322] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.441627][T10322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.477491][T10322] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.876777][T10322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.925367][T10322] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.960861][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.968936][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.022043][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.029251][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.077228][T10498] netlink: 'syz.4.1294': attribute type 4 has an invalid length. [ 316.180301][T10505] [ 316.183922][T10505] ============================= [ 316.188960][T10505] WARNING: suspicious RCU usage [ 316.193933][T10505] syzkaller #0 Not tainted [ 316.198549][T10505] ----------------------------- [ 316.203582][T10505] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 316.212272][T10505] [ 316.212272][T10505] other info that might help us debug this: [ 316.212272][T10505] [ 316.222690][T10505] [ 316.222690][T10505] rcu_scheduler_active = 2, debug_locks = 1 [ 316.231433][T10505] 1 lock held by syz.1.1296/10505: [ 316.237111][T10505] #0: ffffffff8e95ced8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 316.249060][T10505] [ 316.249060][T10505] stack backtrace: [ 316.255329][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.1.1296 Not tainted syzkaller #0 PREEMPT(full) [ 316.255360][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.255389][T10505] Call Trace: [ 316.255398][T10505] [ 316.255407][T10505] dump_stack_lvl+0xe8/0x150 [ 316.255450][T10505] lockdep_rcu_suspicious+0x13f/0x1d0 [ 316.255479][T10505] get_callchain_entry+0x2b6/0x3c0 [ 316.255506][T10505] get_perf_callchain+0xd5/0x880 [ 316.255536][T10505] ? __pfx_get_perf_callchain+0x10/0x10 [ 316.255560][T10505] ? futex_unqueue+0x22/0x240 [ 316.255594][T10505] ? futex_unqueue+0x22/0x240 [ 316.255625][T10505] ? futex_unqueue+0x22/0x240 [ 316.255676][T10505] __bpf_get_stack+0x445/0xab0 [ 316.255722][T10505] ? __pfx___bpf_get_stack+0x10/0x10 [ 316.255779][T10505] ? __lock_acquire+0x6b5/0x2cf0 [ 316.255826][T10505] bpf_get_stack+0x33/0x50 [ 316.255859][T10505] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 316.255882][T10505] bpf_get_stack_raw_tp+0x1a9/0x220 [ 316.255916][T10505] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 316.255939][T10505] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 316.255983][T10505] bpf_prog_test_run_syscall+0x318/0x4c0 [ 316.256010][T10505] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 316.256032][T10505] ? __fget_files+0x2a/0x420 [ 316.256072][T10505] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 316.256097][T10505] bpf_prog_test_run+0x2c7/0x340 [ 316.256132][T10505] __sys_bpf+0x643/0x950 [ 316.256163][T10505] ? __pfx___sys_bpf+0x10/0x10 [ 316.256208][T10505] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 316.256243][T10505] ? rcu_is_watching+0x15/0xb0 [ 316.256271][T10505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.256295][T10505] __x64_sys_bpf+0x7c/0x90 [ 316.256321][T10505] do_syscall_64+0x15f/0xf80 [ 316.256348][T10505] ? trace_irq_disable+0x3b/0x140 [ 316.256376][T10505] ? clear_bhb_loop+0x40/0x90 [ 316.256403][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.256424][T10505] RIP: 0033:0x7ff50cf9cdd9 [ 316.256444][T10505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.256463][T10505] RSP: 002b:00007ff50ddea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 316.256487][T10505] RAX: ffffffffffffffda RBX: 00007ff50d215fa0 RCX: 00007ff50cf9cdd9 [ 316.256503][T10505] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 316.256516][T10505] RBP: 00007ff50d032d69 R08: 0000000000000000 R09: 0000000000000000 [ 316.256530][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.256542][T10505] R13: 00007ff50d216038 R14: 00007ff50d215fa0 R15: 00007fff78f2b558 [ 316.256578][T10505] [ 316.590525][ T50] Bluetooth: hci0: command tx timeout [ 317.231587][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.238435][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.871560][ T5973] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.984514][ T5973] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.094728][ T5973] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.156715][ T5973] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.305278][ T5973] bridge_slave_1: left allmulticast mode [ 318.311326][ T5973] bridge_slave_1: left promiscuous mode [ 318.319559][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.333007][ T5973] bridge_slave_0: left allmulticast mode [ 318.342267][ T5973] bridge_slave_0: left promiscuous mode [ 318.351373][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.560924][ T5973] team0: Port device geneve1 removed [ 318.612027][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.626032][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.637530][ T5973] bond0 (unregistering): Released all slaves [ 318.702362][ T5973] tipc: Left network mode [ 318.928270][ T5492] 8021q: adding VLAN 0 to HW filter on device eth1 [ 319.264636][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.275646][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.306485][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.314128][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.351717][ T5973] veth1_macvtap: left promiscuous mode [ 319.357427][ T5973] veth0_macvtap: left promiscuous mode [ 319.364179][ T5973] veth1_vlan: left promiscuous mode [ 319.370068][ T5973] veth0_vlan: left promiscuous mode [ 319.570498][ T48] smc: removing ib device syz0 [ 319.694409][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 319.710555][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 319.859186][ T5492] 8021q: adding VLAN 0 to HW filter on device eth2 [ 319.913743][ T48] smbdirect: ib_dev[syz0] removed [ 320.595972][ T5492] 8021q: adding VLAN 0 to HW filter on device eth3 [ 321.286113][ T5492] 8021q: adding VLAN 0 to HW filter on device eth4 [ 321.412088][ T5973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.519143][ T5973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.596878][ T5973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.649532][ T5973] team0: Port device netdevsim0 removed [ 321.659493][ T5973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.315627][ T5973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.413906][ T5973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.505578][ T5973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.610714][ T5973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.839670][ T5973] bridge_slave_1: left allmulticast mode [ 322.845435][ T5973] bridge_slave_1: left promiscuous mode [ 322.851574][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.863482][ T5973] bridge_slave_0: left allmulticast mode [ 322.869477][ T5973] bridge_slave_0: left promiscuous mode [ 322.875252][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.897411][ T5973] bridge_slave_1: left allmulticast mode [ 322.903181][ T5973] bridge_slave_1: left promiscuous mode [ 322.909031][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.920098][ T5973] bridge_slave_0: left allmulticast mode [ 322.925773][ T5973] bridge_slave_0: left promiscuous mode [ 322.931632][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.119044][ T5973] team0: Port device geneve1 removed [ 323.135005][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.148622][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.170807][ T5973] bond0 (unregistering): Released all slaves [ 323.324786][ T5973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.337035][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.347549][ T5973] bond0 (unregistering): Released all slaves [ 323.446716][ T5973] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 323.504367][ T5973] bond0 (unregistering): (slave 30): Releasing backup interface [ 323.515701][ T5973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.526516][ T5973] bond0 (unregistering): Released all slaves [ 323.666578][ T5973] : left promiscuous mode [ 323.754582][ T5973] tipc: Left network mode [ 324.671213][ T5973] hsr_slave_0: left promiscuous mode [ 324.682396][ T5973] hsr_slave_1: left promiscuous mode [ 324.693327][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.701665][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.710140][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.717951][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.730595][ T5973] hsr_slave_0: left promiscuous mode [ 324.736768][ T5973] hsr_slave_1: left promiscuous mode [ 324.743482][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.751758][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.764284][ T5973] hsr_slave_0: left promiscuous mode [ 324.773172][ T5973] hsr_slave_1: left promiscuous mode [ 324.780354][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.791295][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.800463][ T5973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.809725][ T5973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.843074][ T5973] veth1_macvtap: left promiscuous mode [ 324.849126][ T5973] veth0_macvtap: left promiscuous mode [ 324.854762][ T5973] veth1_vlan: left promiscuous mode [ 324.860276][ T5973] veth0_vlan: left promiscuous mode [ 324.870072][ T5973] veth1_macvtap: left promiscuous mode [ 324.875704][ T5973] veth1_vlan: left promiscuous mode [ 324.881373][ T5973] veth0_vlan: left promiscuous mode [ 325.300598][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 325.316378][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 325.555644][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 325.572350][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 325.872745][ T5973] team0 (unregistering): Port device team_slave_1 removed [ 325.891480][ T5973] team0 (unregistering): Port device team_slave_0 removed [ 325.930601][ T48] smbdirect: ib_dev[syz1] removed [ 326.059221][ T802] infiniband syz1: ib_query_port failed (-19)