last executing test programs: 16m10.993912766s ago: executing program 4 (id=45): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x49}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r5, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x49d7}, 0x20000004) recvmsg(0xffffffffffffffff, 0x0, 0x40010000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x18, 0x2f, 0xb, 0x0, 0x0, {0x2}, [@nested={0x4, 0x1}]}, 0x18}}, 0x8000) syz_clone(0x10c00, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000340), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000060010000f00000008"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x3000000}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 16m10.260678517s ago: executing program 4 (id=51): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x79, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0xb}, 0x0, 0x0, 0x2000, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xffdff036}, {0x6}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0x25, 0x44, 0x93}]}) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, &(0x7f0000000280), 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34}, 0x28) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r6, 0x58, &(0x7f0000000300)}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x49553, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x80000000}, 0x1defa, 0x4, 0x98, 0x3, 0x6, 0xd, 0x8, 0x0, 0xe149, 0x0, 0x20}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 16m2.666350496s ago: executing program 4 (id=69): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c}, 0x94) socket$inet6(0xa, 0xa, 0x3) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x10000}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f00000002c0)={0x8, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) getpid() fstat(0xffffffffffffffff, &(0x7f0000000580)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x51) socket$can_j1939(0x1d, 0x2, 0x7) socket$phonet(0x23, 0x2, 0x1) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000680)=[{0x0}], 0x1, &(0x7f00000006c0), 0x0, 0x58001}, 0x20004803) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002340)=@newtfilter={0x44, 0x2c, 0x405, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x10}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x44}}, 0x0) 16m0.87054935s ago: executing program 4 (id=75): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000d080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a94", 0x84}], 0x1}, 0xff0f000020000080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffb, 0x0, @perf_config_ext={0xd09e, 0xd}, 0x2200, 0x0, 0x0, 0x0, 0x3fe}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r2}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r2, &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={0x1, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x1a, &(0x7f0000000700)=ANY=[], &(0x7f0000000640)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000ac0)=""/4096, 0x41100, 0x52, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001bc0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001c00)={0x3, 0xd, 0xffffff80}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001c40)=[0xffffffffffffffff, r4], &(0x7f0000001c80)=[{0x1, 0x5, 0x3, 0x2}, {0x3, 0x5, 0xf}, {0x2, 0x2, 0x4, 0x5}], 0x10, 0xd8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0xe}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x334) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x94) 16m0.365100192s ago: executing program 4 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x3, "0000000000007fffffff00"}}}]}, 0x48}}, 0x0) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x4e7c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='{\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b80)={0x2c, 0x41, 0x1, 0x5fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str='{\x00'}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x300f000, 0x7, 0x0, &(0x7f0000000080)="0069c2704ade28", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000380)="5c00000013006bcd9e3fe3dc4e48aa31086b87030f0000001f03000000010000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f6", 0x42}, {&(0x7f0000000280)}], 0x2, 0x0, 0x0, 0x1f000801}, 0x4000) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 15m59.776415316s ago: executing program 4 (id=82): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x5}, 0x1224, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44ebfe24}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c000300ebee551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6e60c0000000000000a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$kcm(0xa, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0xffffffff}, {0xd, 0xfffffffe}, {0x10}, {0x1, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, 0xb, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x12}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x97}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x53}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x40}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa2}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_MAKE_EQUIV(r3, 0x0, 0x8000) socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)) 15m44.350248067s ago: executing program 32 (id=82): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x5}, 0x1224, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44ebfe24}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c000300ebee551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6e60c0000000000000a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) socket$kcm(0xa, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x2, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x4, 0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0xffffffff}, {0xd, 0xfffffffe}, {0x10}, {0x1, 0x100003}]}]}}, 0x0, 0x6a, 0x0, 0x0, 0x1}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x98, 0xb, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x12}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x97}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x53}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x7}}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x40}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xa2}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x4000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_MAKE_EQUIV(r3, 0x0, 0x8000) socketpair(0x2a, 0x2, 0x2, &(0x7f0000000000)) 14.192790196s ago: executing program 3 (id=4648): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000000000006910790000000000ce080000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x8, 0x70bd2c, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x22c580, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916320000000000bf67000000000000a406000007ffd7ff6706000002000000070600000ee60000bf050000000000002e650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x9, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xb, 0xffffffffffffffff, 0x8) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x4000801}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000a000000000000000900000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf090000000000005509010041000000950000000000000018190000", @ANYRES32=r8, @ANYBLOB="00000000000000002d00000000000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x27}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r10, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newqdisc={0xc94, 0x24, 0xf0b, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x12, r11, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc68, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffb, 0xd0, 0x4, 0xf03e, 0x401, 0x3, 0x8, 0x0, 0x3, 0x6, 0x7b, 0x19, 0x101, 0xf82, 0x7c9d, 0x800, 0x8, 0xc, 0x5, 0x9, 0x9, 0x40a5a2ce, 0x1a2b, 0x7, 0xb, 0x7, 0x9, 0x0, 0x40, 0xfffffff0, 0x8, 0x8001, 0x0, 0x1c9, 0x5, 0x3, 0x7, 0x3, 0x804, 0xd4, 0x2, 0x8004001, 0xe2, 0x40, 0x2, 0xec, 0x7, 0x10000, 0x1, 0x9, 0x6, 0x5, 0xd1b, 0x2, 0x3, 0x3, 0x1000, 0x5, 0xe69, 0x7, 0xcf9, 0x80000000, 0x0, 0x9, 0x40, 0x40000b, 0x1, 0x9, 0xfffffffb, 0x6, 0x40000000, 0x3, 0x8, 0x9, 0xff, 0x4f, 0x686b, 0x4, 0x2, 0x8001, 0x2e, 0x8000, 0x0, 0x0, 0xfff, 0x8, 0x2d, 0xd407, 0x5e14c693, 0xffffff67, 0x2000000, 0x9, 0x80000001, 0x2, 0xf02, 0x2, 0x80000001, 0x80000001, 0x8, 0xff, 0x1, 0x101, 0x9e1, 0x0, 0x76, 0x7f, 0x6, 0x6, 0x6866, 0x106, 0x3, 0x3dc9, 0xa, 0x47fa, 0x80, 0x8001, 0xe88, 0x9, 0x7, 0x2, 0x4, 0x653, 0x3, 0x10, 0x7fffffff, 0x2, 0x8, 0x0, 0x10, 0x5, 0xde5, 0x80000, 0x4, 0x5, 0x5, 0x100, 0x8001, 0x7, 0x5, 0x9, 0x8200080, 0x7ffe, 0x2, 0x8b, 0x8003, 0x2cedb46c, 0x5, 0x7, 0x1, 0xf26e, 0x81b, 0x6, 0x7d6, 0x4, 0x10001, 0x6, 0x10001, 0x3e, 0x1ff, 0x4095f, 0x9, 0xc, 0x200, 0x100, 0x9, 0x1, 0xc4d, 0x8, 0x4, 0x7, 0x1, 0x7, 0x5, 0x3, 0x5, 0x20000e1, 0x0, 0xf, 0x7, 0x6, 0x9, 0x101, 0x800, 0xfffff7be, 0x5, 0x401, 0x3, 0x6, 0x85, 0x4, 0x152, 0x5, 0x2, 0xffff, 0x10, 0x1, 0x2, 0x6, 0x6, 0x2, 0x806, 0x4, 0x5, 0xef, 0x8000, 0x6, 0x60000000, 0x9c, 0x5, 0xfffffffe, 0x5, 0xffffffff, 0x80000000, 0xc, 0x7ffffffe, 0x25d, 0x18, 0x7, 0x2f2, 0x0, 0x400, 0xea, 0x2, 0x9, 0x0, 0x5, 0x5, 0x7, 0xab, 0xa, 0xb, 0xff, 0x8, 0x5, 0x5, 0x8, 0x6, 0x6, 0x1ff, 0x2, 0x5, 0x57b373bc, 0x2b, 0x9, 0x3, 0x7, 0x4, 0xb5f, 0x7ff, 0x6, 0x20000000, 0x10, 0x3, 0x3, 0xff]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x80, 0x5, 0x1, 0x8}, {0x8, 0x0, 0x0, 0x1d27, 0xd, 0x800}, 0x4, 0x4, 0x209b}}, @TCA_TBF_BURST={0x8, 0x6, 0x8972}, @TCA_TBF_RTAB={0x404, 0x2, [0x10, 0xa, 0xff5b, 0x7, 0x80c, 0xa, 0x6, 0x3177, 0x2, 0x8, 0x10000, 0x6, 0x5, 0x6, 0x4, 0x3, 0x2, 0xfffff801, 0x93da, 0x6, 0x7ff, 0x40000009, 0x2769, 0xfffffffe, 0x1, 0xd, 0x0, 0x8, 0xce44, 0x4d60, 0xffffff80, 0x6, 0x8, 0x1c01, 0xf4d4, 0x0, 0x6, 0xffffffff, 0x7, 0x1c000000, 0xdde, 0x6, 0x8, 0x5, 0xffffffff, 0x7fffffff, 0x400, 0x32, 0xff, 0x80, 0x8, 0x400, 0x6, 0x3, 0xaf, 0x5, 0x4, 0x7, 0x4, 0x1, 0x5, 0xaf99, 0xffffffff, 0x40, 0x7, 0xfffffffb, 0xe273, 0x0, 0x7, 0x1, 0x40, 0x9, 0x6, 0x6, 0x58, 0x6, 0x1, 0x7, 0x80, 0x6, 0x6, 0x7, 0xa, 0x3, 0x5, 0xff, 0x7, 0x584d, 0x3, 0x29, 0x1, 0x9, 0x40, 0x198638a6, 0x5, 0x8, 0x8, 0x8, 0xf, 0xcebe, 0x824b, 0x8, 0x0, 0x3, 0x3, 0x5, 0x28000000, 0x9, 0x3, 0x5, 0xffff, 0x6, 0x8, 0x6, 0x9, 0x4, 0x0, 0x96f2, 0x5, 0x7fff, 0x7, 0xad6f, 0x0, 0x17, 0x9, 0xb2, 0xe, 0x6, 0x3, 0x2741, 0x5, 0x9, 0xfffffffd, 0xfff, 0x2, 0x5, 0x0, 0x40, 0x7, 0xbce2, 0x6aef, 0xb94, 0x1f, 0x6ed6, 0xb421, 0x88d5, 0xd0, 0x0, 0x80, 0x6, 0x18, 0x7f, 0xc, 0x2, 0xd, 0xb, 0x5, 0x34b, 0x8, 0x4, 0x0, 0x4, 0x1, 0xfffffff8, 0x8, 0xf, 0x6, 0xfffffffe, 0x3c, 0x3, 0x34000000, 0x0, 0x101, 0x0, 0x9, 0x8, 0x9, 0x8, 0x5, 0x7fffffff, 0xe6, 0xffffffff, 0xecc5, 0x3, 0x3, 0xfffff1a9, 0x6, 0x6, 0x9de, 0x6, 0x1, 0xd462, 0xfffffffe, 0x2, 0x0, 0x0, 0x4a41, 0x8000, 0x4, 0xff, 0x2, 0x1000, 0x6, 0x5, 0x8, 0x8001, 0x0, 0x0, 0x2, 0x7, 0xc9, 0x6, 0x200, 0x5, 0x4, 0xffffff83, 0x2, 0x37, 0x0, 0xf73c, 0x6, 0x97, 0x6, 0x8, 0x6, 0x0, 0x8, 0x7fff, 0x400, 0x2, 0x8, 0x5, 0x8, 0x1ff, 0x9, 0x400, 0x0, 0x7, 0x7, 0x0, 0x7, 0x3, 0x8, 0x401, 0x3, 0x5, 0x5, 0x800, 0x5cc, 0x80000000, 0x1000, 0x5, 0xfffffa46, 0x8, 0x2, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x80, 0x2, 0x3, 0x2, 0x100, 0x3}, {0xff, 0x0, 0x8001, 0x7, 0xffff, 0x8}, 0x0, 0x4, 0x4ec}}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x6, 0xfffffffe, 0x8, 0x7fffffff, 0x0, 0x3, 0x1, 0x6, 0x101, 0x2, 0x8000, 0x0, 0x6, 0x4, 0x10000003, 0x6, 0x6, 0x1, 0x435, 0x0, 0x48, 0x3, 0x6, 0x10000, 0xf6f8, 0x8000, 0xfffffff9, 0x7, 0xc, 0x9, 0x80000000, 0x10, 0x7, 0x9, 0xcf, 0x3, 0x0, 0x7, 0xfb88, 0x28b, 0x401, 0xc, 0xffff, 0x6, 0x4, 0x1, 0x0, 0xc8, 0x7, 0x6, 0x10000, 0x10001, 0x80, 0x10, 0x2, 0x628, 0x2, 0x7fffffff, 0x1, 0xfffffd27, 0x2, 0x10000, 0x4, 0x401, 0x4, 0xa, 0x8, 0x5, 0x6, 0x1, 0x8, 0x2, 0x5, 0x7, 0x841a, 0x8, 0x7ff, 0xfb3, 0xfffffffd, 0x4, 0x7fffffff, 0xc8, 0x6, 0xb4, 0x6, 0x100, 0x6, 0x0, 0x9, 0x67dc, 0x2, 0x6, 0x8, 0x1, 0x8001, 0x2270, 0x4, 0x7, 0x1, 0x3, 0x7, 0x40000, 0x8d6, 0x1, 0x755, 0x9, 0xe, 0xe, 0x9, 0x2, 0x7, 0x9, 0xa, 0x0, 0x80000001, 0x0, 0x8, 0x1, 0x14540000, 0x1, 0x7fff, 0x40, 0x7a3, 0x7fff, 0x911, 0x1, 0xd, 0x7, 0x0, 0x0, 0xfffffff9, 0x60, 0xffff, 0x0, 0x10001, 0x101, 0x9f, 0x7f, 0x6, 0x6, 0x10, 0x2, 0x401, 0x1ff, 0x0, 0xb, 0xfffffff9, 0xfffff435, 0x7ff, 0xea8, 0xffffffff, 0x4, 0x3, 0x8, 0x4, 0xdb, 0x2, 0x73e, 0x200, 0x6, 0xfff, 0x1, 0x509d, 0x4, 0x5, 0xcb0, 0xfff, 0x80000000, 0x0, 0x2, 0x7, 0x1, 0xc, 0x9, 0x6ff, 0x8, 0x3, 0x50, 0x800, 0x4, 0x0, 0xac43, 0x7, 0xd, 0x55cc831e, 0x7a, 0x2, 0x3cc, 0x0, 0x101, 0x3, 0xfffffffa, 0xd, 0xc, 0x2, 0x6, 0x6, 0x101, 0xfffffffd, 0xe, 0x6ce9, 0x6, 0x20, 0x7, 0x6, 0x2, 0x6, 0x2, 0x4, 0xc, 0x1, 0x1, 0x7ff, 0x7, 0x8, 0xfffffffc, 0x7, 0x7, 0x6, 0x1, 0x2, 0x6, 0x10000, 0xd2, 0x6, 0x682, 0x0, 0x3ce0, 0x6, 0x4, 0x9, 0xcdf, 0x4, 0x6, 0x2, 0x400, 0x296a, 0x81, 0x39d5, 0x0, 0x5, 0x1c, 0x4, 0x2, 0x7fff, 0xd8, 0x77b, 0x9, 0x2, 0x8, 0x7, 0x400, 0x3, 0xf, 0x8001]}]}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x4040}, 0x4000010) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r12, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$can_raw(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x1d, r13}, 0x10, &(0x7f0000000300)={0x0}}, 0x4004001) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x3, [@typedef={0xd, 0x0, 0x0, 0x8, 0x2}, @ptr={0xb, 0x0, 0x0, 0x2, 0x3}, @datasec={0x8, 0x4, 0x0, 0xf, 0x1, [{0x4, 0x2, 0x40}, {0x1, 0x8, 0x7}, {0x4, 0x6, 0x6}, {0x2, 0x1}], "ac"}]}, {0x0, [0x0]}}, &(0x7f0000000440)=""/232, 0x73, 0xe8, 0x1, 0x1ff}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x15, &(0x7f0000000240)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x61ca, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5eb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000300)='GPL\x00', 0x8, 0x67, &(0x7f0000000340)=""/103, 0x41100, 0x40, '\x00', r13, 0x0, r14, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xdfe, r0, 0xa, 0x0, &(0x7f00000005c0)=[{0x4, 0x3, 0x6, 0x2}, {0x4, 0x3, 0x4}, {0x4, 0x1, 0xf}, {0x0, 0x4, 0xf, 0x4}, {0x1, 0x3, 0xc, 0x2}, {0x2, 0x2, 0x6, 0xa}, {0x1, 0x3, 0x9, 0xc}, {0x5, 0x4, 0x0, 0x3}, {0x1, 0x1, 0x10, 0x7}, {0x4, 0x1, 0x3, 0x8}], 0x10, 0x791d}, 0x94) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'virt_wifi0\x00', 0x2000}) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) 12.444024435s ago: executing program 3 (id=4655): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000002480)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) 12.253040851s ago: executing program 3 (id=4658): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) r1 = syz_clone(0x1102b80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xc509, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x116da, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7ff7, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x1b, 0x12, &(0x7f00000006c0)=ANY=[@ANYBLOB="1817", @ANYRES32, @ANYRES32, @ANYBLOB="000000000400000018120000", @ANYRES32, @ANYBLOB="00000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018000000cd0f00000000000005000000"], &(0x7f0000000780)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000a00)={0x1, 0x9, 0x11fd, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000015c0)=[r0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='+cpu'], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="2d6370752022dfd7ba0e715e19a89beb454a768f1b33e50ebeb9ffb1d4df3f139778d305"], 0x5) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000703000400000000000000030000e508000540000000020c000640000000000000006e0900010073797a3100000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) close(r8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f7879000014000280080003400000001408000140000000000900010073797a30"], 0xf8}}, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x9, 0xff, 0x7, 0x0, 0x62, 0xdb71b, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x6, 0x8}, 0x14001, 0x0, 0x3, 0x0, 0x200000000081, 0x8, 0x7fff, 0x0, 0x2cb, 0x0, 0x101}, 0x0, 0x40000400e, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x4d31, 0x80008, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000010000004000000023"], 0x50) 11.600825073s ago: executing program 3 (id=4663): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600f9fff7ffffffffffffff200000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x8015}, 0x0) (fail_nth: 6) 11.076657325s ago: executing program 3 (id=4667): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4082, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r1) mkdir(&(0x7f0000000440)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r3 = openat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="110000000000000009e2e4da00000000", @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2819b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x828, 0x96, 0x0, 0x9, 0xffff, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x989046, 0x0) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/../file0/../file0/file0/../file0\x00') ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000480)={r0}) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x21}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @ldst={0x2, 0x0, 0x4, 0x3, 0x7, 0xe, 0x10}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, @jmp={0x5, 0x0, 0x9, 0x3, 0xb, 0x100, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) 10.77353026s ago: executing program 3 (id=4669): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002600f9fff7ffffffffffffff200000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x8015}, 0x0) 2.94067586s ago: executing program 0 (id=4723): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x574, 0xbc97, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f0000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socket$kcm(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="c9", 0x1}], 0x1}, 0x20000800) close(r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xd, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000bc000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r7, 0x0, &(0x7f0000000000)=""/95, 0x2}, 0x20) sendmsg$inet(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002340)=[{0x0}, {&(0x7f00000005c0)}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="a0b1f81a7bbd2b012fe636dd9bff108d2ecdfbca6c2ec694b6f15253bdc079677404658699bfb85368e984333566dc653a78d64b0c0d38e405f4c6d6e71ed2e4c15c4c9b1455879a90ae0dc95f4d407ba1b3e2c08e2a219f769b2c0df48cae552d8753b76a6c678d460d9424f841ccc1a18ec80fe33bedb4fb14cefc9a8c47b3ac986ef74f2c9c6d60a8d633f5c2f4b12dda4ff0ba7bc1a0dcd86971581102720628067ce0c4561edee90ac6a56a6c4db0bd824938aa4dd93517707e58ad0c4758cee212817fcfe26edb0ebf7131c7c9333c9822dc694633a9d89eb5451006d095", 0xe1}, {0x0}, {&(0x7f00000022c0)="455478705d11b373b6891684513026f987cdd891036a8779e7151b8cf5567710f34dda7d7cc2e7fe775f9dc346b49258abec719ca10fe623919ea6c140144a4033e28ce76b4bef5a44a224da72edc8de1af549c1", 0x54}], 0x6, &(0x7f00000023c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x42}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xbb, [@loopback, @empty, @empty, @local, @loopback, @local, @multicast2]}, @timestamp={0x44, 0x1c, 0x39, 0x0, 0x5, [0xea9, 0x7, 0xffff0000, 0x8, 0x80, 0x7ff]}, @noop, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14}}], 0xb8}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000390007012cbd7000fedbdf25047c00000c00018008000100", @ANYRES32, @ANYBLOB="323251a39e23a242d57bb406163a891a4ec5541d2486a3d01eecae3070aa600994c31e3bd9b617e89d91c69e929b012ed3d4df4fb8aaca264ab2667dfc0f11eca423091de68b6c334fb0bd5441c4fb7954c7e69504d1ade0bd56fc3a7393e7986ac3529e23b78e052e234e53d385a9fb769dff368f9212104a1c8c78800c374a4cf808343a3c0bd247993722509efbcfc7d1b09fff0e0878cf"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.696057646s ago: executing program 0 (id=4725): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, &(0x7f0000000440), 0x3d) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="19a1ba18120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x3c, &(0x7f0000000200)=""/60, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xb, 0xff, 0x2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000340)=[{0x4, 0x1, 0x4, 0x8}, {0x4, 0x5, 0x3}, {0x3, 0x4, 0x2, 0xb}, {0x2, 0x2, 0xa, 0xb}, {0x0, 0x1, 0x6, 0x8}, {0x2, 0x3, 0xb, 0x8}, {0x2, 0x4, 0xb, 0x1}], 0x10, 0x8001}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r2, 0x0, 0x48000) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xdffffffb}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="cdaa00000000000071101b0000000000950008"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80000000a}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1b1, 0xffffffffffffffff}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0x4}, {0xc, 0x3}, {0xfffffffffffffe00}}}]}]}, 0xf0}}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000b80)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0x0, 0x13}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000bc0)="2705000059feff000600002fb96dbcf7babe05000700810000f5080613008100accb", 0x22}, {&(0x7f00000002c0)="88", 0x1}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a84", 0xee}], 0x3}, 0x8884) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001900000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) 2.639810766s ago: executing program 2 (id=4726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2c, 0x40000200, {0x0, 0x0, 0x12, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x2, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x7}, {0xfffffffffffffed6, 0x2, {{0x853, 0x1ff, 0x3ff, 0x1, 0x8005}, 0x0, 0x10000000, 0x2, 0x5, 0x6, 0x19, 0x13, 0x2a, 0x0, 0xffffdffe, {0x4, 0x521, 0xff, 0x9, 0x81, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4048810}, 0x2404c040) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x118, 0x118, 0x5, [@enum64={0x3, 0x2, 0x0, 0x13, 0x1, 0x0, [{0xe, 0x4, 0x4}, {0xb, 0x3, 0x6}]}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0xf, 0x5}, {0x9, 0x5}, {0xa, 0x2}, {0xd, 0x1}, {0x2, 0x5}]}, @var={0x8, 0x0, 0x0, 0xe, 0x4, 0x1}, @union={0x3, 0x9, 0x0, 0x5, 0x1, 0xf6, [{0x2, 0x5, 0x100}, {0x10, 0x2, 0x10000}, {0x3, 0x1, 0x2}, {0x2, 0x0, 0xf}, {0x3, 0x4, 0xf}, {0xd, 0x2, 0x6b7d}, {0x1, 0x5, 0x3ff}, {0xd, 0x2, 0x5}, {0xc, 0x4, 0xffffff52}]}, @struct={0xb, 0x2, 0x0, 0x4, 0x1, 0xa, [{0xa, 0x2, 0x4}, {0x9, 0x1, 0x5ab}]}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x30, 0x30]}}, &(0x7f0000000a00)=""/97, 0x135, 0x61, 0x1, 0x7}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe9, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xe, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async, rerun: 64) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, @perf_bp={0x0, 0xc}, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x98e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) (rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1c, 0x6, 0x9, 0x91c, 0x2204, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r8, r9}, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x150, 0x17, 0xa, 0x801, 0x0, 0x0, {0xb, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x10c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x40101) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)=r7}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0x1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000e4ffffff000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r12, &(0x7f0000000080), 0x0}, 0x20) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000400000008dbf2c6bf9c0000008000"/31, @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r13}, 0x4) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%+9llu \x00'}, 0x20) (async, rerun: 64) r16 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1b, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @map_idx={0x18, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x2, '\x00', r11, 0x25, r6, 0x8, &(0x7f0000000400)={0x1ff, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0xc, 0x4, 0x8000}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000740)=[r12, 0x1, r13, r14, r5, r15, r16], &(0x7f0000000840)=[{0x1, 0x3, 0x3, 0x5}], 0x10, 0xf73}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c40)={@ifindex=r11, 0x32, 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0]}, 0x40) sendmsg$inet(r0, &(0x7f0000000880)={&(0x7f0000000140)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000280)="37bc42091d82961987c31bbb5251de1be42bd4fea3bbd036a29de2f537c89c24ffc184153f4f9a468dfd9e7271cd235617e5d68bd01528de08be53dfd1e491eaaf39f72830bb369ccdd3cbd0519573b6e7e547a544b9e6", 0x57}, {&(0x7f0000000300)="09634373a4e41faa9c4125014e5dd0afd5935ad7d0599da93ba309feb58d42e65f7e5394948f6170b21767828f4311bc7d806022d8b6ce9fde4fddec2f5bff1f778f72c83a31d4ea6c5df564f02f6c5e7dcde8377033040ab7070ec7dbea7ecbafb3b90fe53bb4294fd00112592693eb90b01ef2a432e6390ce9d16e135bf828eca42a", 0x83}, {&(0x7f00000003c0)="7e19", 0x2}], 0x1000000000000048, &(0x7f0000000ec0)=[@ip_pktinfo={{0x0, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_retopts={{0x20, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xb, 0x9e, [@loopback, @rand_addr=0x64010100]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_retopts={{0x88, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x7e, [@local, @remote, @private=0xa010100, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, @loopback]}, @noop, @rr={0x7, 0x3, 0x77}, @timestamp={0x44, 0x10, 0xfa, 0x0, 0x3, [0xfffffffe, 0x1800000, 0x0]}, @noop, @timestamp={0x44, 0x8, 0x23, 0x0, 0x0, [0x100]}, @generic={0x44, 0xe, "fd41d1236ac54c1fc4e08457"}, @generic={0x82, 0x2}, @timestamp_prespec={0x44, 0x2c, 0xac, 0x3, 0x5, [{@local, 0xfffffff5}, {@rand_addr=0x64010106, 0x2}, {@remote, 0xe}, {@local, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @rand_addr=0x64010101}}}, @ip_retopts={{0x10}}], 0x140}, 0x54) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x80, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x89}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x100}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x80}}, 0x0) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0x4000) (rerun: 32) 2.54051737s ago: executing program 2 (id=4727): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7ffffffe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9a}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2.462572112s ago: executing program 2 (id=4728): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x14647, 0x0, 0xafe8, 0x4, 0x10001, 0xffffffff}, 0x0, 0xf, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18, 0x3}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000002) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdbff, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x20040000) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x22}, 0x201, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690028000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000500)=""/115, 0x73}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000200)=""/24, 0x18}], 0x6}, 0x12000) recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000600000000000000000000008500000041000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x9) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1, 0x4}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r9, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020c31a00ffa1000000bfa10000000000000701000007000000b702000008000000b703000000000000850000002200000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.264405795s ago: executing program 0 (id=4731): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000780)="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", 0x14f}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004"], 0x50) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000190001202600000000001c0080"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20048800) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='t', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) openat$cgroup(0xffffffffffffffff, &(0x7f0000000bc0)='syz1\x00', 0x200002, 0x0) 1.888508122s ago: executing program 1 (id=4735): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x574, 0xbc97, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f0000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socket$kcm(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="c9", 0x1}], 0x1}, 0x20000800) close(r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xd, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000bc000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r7, 0x0, &(0x7f0000000000)=""/95, 0x2}, 0x20) sendmsg$inet(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002340)=[{0x0}, {&(0x7f00000005c0)}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="a0b1f81a7bbd2b012fe636dd9bff108d2ecdfbca6c2ec694b6f15253bdc079677404658699bfb85368e984333566dc653a78d64b0c0d38e405f4c6d6e71ed2e4c15c4c9b1455879a90ae0dc95f4d407ba1b3e2c08e2a219f769b2c0df48cae552d8753b76a6c678d460d9424f841ccc1a18ec80fe33bedb4fb14cefc9a8c47b3ac986ef74f2c9c6d60a8d633f5c2f4b12dda4ff0ba7bc1a0dcd86971581102720628067ce0c4561edee90ac6a56a6c4db0bd824938aa4dd93517707e58ad0c4758cee212817fcfe26edb0ebf7131c7c9333c9822dc694633a9d89eb5451006d095", 0xe1}, {0x0}, {&(0x7f00000022c0)="455478705d11b373b6891684513026f987cdd891036a8779e7151b8cf5567710f34dda7d7cc2e7fe775f9dc346b49258abec719ca10fe623919ea6c140144a4033e28ce76b4bef5a44a224da72edc8de1af549c1", 0x54}], 0x6, &(0x7f00000023c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x42}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xbb, [@loopback, @empty, @empty, @local, @loopback, @local, @multicast2]}, @timestamp={0x44, 0x1c, 0x39, 0x0, 0x5, [0xea9, 0x7, 0xffff0000, 0x8, 0x80, 0x7ff]}, @noop, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14}}], 0xb8}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000390007012cbd7000fedbdf25047c00000c00018008000100", @ANYRES32, @ANYBLOB="323251a39e23a242d57bb406163a891a4ec5541d2486a3d01eecae3070aa600994c31e3bd9b617e89d91c69e929b012ed3d4df4fb8aaca264ab2667dfc0f11eca423091de68b6c334fb0bd5441c4fb7954c7e69504d1ade0bd56fc3a7393e7986ac3529e23b78e052e234e53d385a9fb769dff368f9212104a1c8c78800c374a4cf808343a3c0bd247993722509efbcfc7d1b09fff0e0878cf"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.768929344s ago: executing program 5 (id=4736): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x404d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x100000001, 0x3c}, 0x101740, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x10000000000000a, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc00}, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0xb, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000240)={'team0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}) syz_clone(0x80000000, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x3, 0x0, 0x0, 0x9, 0x880000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 1.578361448s ago: executing program 1 (id=4737): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2d, 0x2, 0x0) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509f8ff00000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) 1.559941274s ago: executing program 5 (id=4738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x50}}, 0x0) 1.408753607s ago: executing program 2 (id=4739): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa4100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x11c266, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x4, 0x0, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x7}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x401c5820, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004891) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x34068096) 1.402861298s ago: executing program 5 (id=4740): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="1400000010f5010000000000000000000700000a50000000060a010400000000000000000200ffff24000480200001800e000100627974656f726465720001407379"], 0x78}}, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000001d00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x18, 0x14, &(0x7f0000000900)=@raw=[@generic={0xbf, 0x6, 0x1}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x1, 0x6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xe, 0x0, &(0x7f0000002280)="0011223344550011223344560800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0xc8, 0x0, 0x0, 0x6, 0x8, 0xffff}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000080000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a3000000000090002"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)={0x1c, 0x26, 0x1, 0x270bd1d, 0x25dfdbfb, {0xb}, [@typed={0x5, 0x167, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.282674957s ago: executing program 0 (id=4741): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8902, &(0x7f0000000540)={'vlan1\x00', @random="00009e0c1100"}) 1.211319667s ago: executing program 2 (id=4742): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000002400)={&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000002140)=[{&(0x7f0000000040)=""/102, 0x66}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/120, 0x78}], 0x4, &(0x7f0000002340)=[@rdma_args={0x48, 0x114, 0x1, {{0x7, 0xfffffffe}, {&(0x7f0000002180)=""/154, 0x9a}, &(0x7f0000002280)=[{&(0x7f0000002240)=""/64, 0x40}], 0x1, 0x24, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x2, 0x3ff}, &(0x7f00000022c0)=0x3, &(0x7f0000002300)=0x1, 0x5, 0xc, 0x9c38, 0x4, 0x4, 0x8000}}], 0xa0, 0x8051}, 0x4080) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r1, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x10, 0x3e8, 0x200, 0x70bd27, 0x25dfdbfe, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40010}, 0x20040085) r2 = perf_event_open$cgroup(&(0x7f0000002580)={0x1, 0x80, 0x8, 0xf0, 0x8, 0x13, 0x0, 0x7fffffff, 0x8000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000002540), 0x2}, 0x12016, 0x1, 0x2, 0x5, 0x800, 0x8b45, 0x2, 0x0, 0xfffffff7, 0x0, 0x40}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000002600), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000002b00)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002680)={0x424, 0x3f4, 0x10, 0x70bd25, 0x25dfdbfe, {0x4, 0x1, 0x29, [0x5, 0x3, 0x9, 0x5dc, 0x7, 0xad5d, 0x3, 0x101, 0x2, 0x9, 0x9c8, 0xffff, 0xfffffff8, 0x40, 0x3, 0x200, 0x7, 0x7fffffff, 0x7f, 0x5, 0x3, 0x3, 0xffffffff, 0x37d, 0x2, 0xffff0000, 0x81, 0xd, 0xac, 0x40, 0xad, 0x200, 0xfffffffd, 0xfff, 0x200, 0xc, 0x2400000, 0xfffffffd, 0x92, 0x3, 0x4, 0x1ff, 0x6, 0xd, 0x9, 0x2, 0x19a, 0x7, 0x80000001, 0x8, 0x3, 0x2, 0x8, 0x6, 0x9, 0x3ff, 0x8000, 0x1, 0x9, 0xd, 0xb, 0xffffff51, 0x1, 0xfffffc92], [0xb, 0xa, 0xfff, 0x2, 0x5, 0xb, 0x1, 0x1, 0x0, 0xaf, 0x8001, 0x1, 0x1, 0x3, 0x7, 0x459a0b1d, 0x5, 0xfff, 0x86, 0x967, 0x3, 0x2933, 0x3d, 0x81, 0x0, 0x23, 0x6, 0x4, 0x8000, 0x4, 0x8, 0x3, 0x97cc, 0xf, 0x8, 0x5, 0x24, 0x7, 0x7ff, 0x80000000, 0x5, 0xffffffde, 0x6, 0x0, 0x401, 0x7fffffff, 0xfffffffa, 0x4, 0x7, 0x101, 0x8, 0x8, 0x0, 0x7, 0x6, 0x101, 0x6dca, 0x80000000, 0x1800000, 0xc, 0x9, 0x3, 0x1c, 0x3], [0x8, 0x1, 0x6, 0x1, 0x9, 0xff, 0x6, 0xd1, 0x8, 0x7f, 0x6, 0x5, 0x0, 0x2, 0x562, 0x8, 0xa, 0xfffffffa, 0xe07d, 0x3, 0x6, 0x10, 0x4, 0x4, 0x1ff, 0x0, 0x3, 0x2, 0x5, 0xc3, 0x1000, 0x101, 0x1, 0x9, 0x1, 0x5, 0x8, 0x2, 0x6, 0x4, 0xfffffffc, 0x3, 0x2, 0x8, 0xf27e, 0x1, 0x200, 0x7, 0xfffffff1, 0xc, 0xaaaa, 0x3, 0xfffffffb, 0xce23, 0xfffffffc, 0x7c, 0x9, 0x4, 0x6, 0xfffffff8, 0xfff, 0x10001, 0x8, 0x6], [0x7, 0x1, 0xb26, 0xa, 0x401, 0x120, 0x8, 0x3fe, 0x44, 0x0, 0x401, 0x7, 0x1, 0x7, 0x8, 0x5, 0x7, 0xe4, 0xec19ba1, 0x7ff, 0x5, 0x6, 0x5, 0xc, 0x6, 0x9, 0x4, 0xe, 0xfffffe01, 0x0, 0x8, 0x4, 0x5, 0x1, 0x4, 0x4, 0x4, 0x7, 0x3, 0x6425, 0x0, 0x3, 0x81, 0x3ff, 0x5, 0x8, 0xcbeb, 0xe6, 0x401, 0xfffffff7, 0x9, 0x4c4, 0xea, 0x5, 0x6d, 0x6, 0x6, 0xc, 0x5, 0x1, 0x9, 0x6, 0x8], 0x4, [',:\x00', '\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x24000000}, 0x44010) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000002c00)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x18, 0x3f9, 0x1, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002c40)={r0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002f80)={r3, 0xe0, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002cc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000002d00)=[0x0, 0x0, 0x0], &(0x7f0000002d40)=[0x0], 0x0, 0x28, &(0x7f0000002d80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000002dc0), &(0x7f0000002e00), 0x8, 0xce, 0x8, 0x8, &(0x7f0000002e40)}}, 0x10) sendmsg$nl_route_sched_retired(r4, &(0x7f0000003040)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)=@delchain={0x24, 0x65, 0x10, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xffff}, {0xffe0, 0x8}, {0xf, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48001) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f00000031c0)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003180)={&(0x7f00000030c0)={0xb0, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'tunl0\x00'}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x48c0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000003380)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003340)={&(0x7f0000003240)={0xf8, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x5}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xf}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2f}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x1}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7fffffff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x800}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x814) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000003880)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003840)={&(0x7f0000003400)={0x438, 0x3f4, 0x200, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0xe, [0xffffff2c, 0x7, 0x50, 0x674, 0x5, 0x4, 0xfffffffb, 0xfffffa6f, 0xff, 0x9, 0x40, 0x10, 0x3, 0x3, 0x6, 0x81, 0x7fff, 0x0, 0xf97, 0x0, 0x5, 0x8, 0x9, 0x9, 0xfffffffa, 0xffffffff, 0xc, 0x80, 0x6e, 0x9d, 0x400, 0xffffff16, 0xc, 0x8001, 0x0, 0x3, 0x2, 0x2af, 0x100, 0x8000, 0x2, 0x3, 0xfffffff9, 0x4, 0x7ff, 0x5, 0x1, 0x3, 0x8, 0x7, 0x6, 0x6, 0x9, 0x7a, 0x74b, 0x3, 0x8190, 0x8, 0x1, 0x5, 0x9, 0x0, 0xfffffffd, 0x3], [0xfffff800, 0xe5, 0x7fff, 0x2, 0x7, 0x200, 0x0, 0x1000, 0x80, 0xf, 0x7, 0xf, 0x4, 0xfffffc00, 0x1, 0xfffffff7, 0x3, 0x4, 0x3ff, 0x81, 0x1, 0x7fff, 0x8001, 0x8, 0x1, 0x5, 0x83c, 0x1, 0x1, 0x1, 0x36, 0x101, 0x7, 0x80000001, 0x8001, 0x7, 0x4, 0xffff, 0xd2, 0x0, 0xffffffff, 0x800, 0x26, 0x1, 0x4, 0x6, 0x7, 0x2, 0x7, 0x400, 0x9, 0x5, 0x4, 0x7, 0x8, 0x6, 0x0, 0xc1f, 0x7, 0x3, 0x0, 0x4, 0x0, 0x5], [0x18, 0x1, 0x200, 0x5, 0x6c, 0x9b5, 0x18, 0x5, 0x8, 0x6, 0x7, 0x80, 0x9, 0x5, 0x5, 0x5, 0x5, 0x3, 0xfffffff9, 0x5f6, 0x5, 0x3ff, 0x7, 0xae1, 0x19e, 0x915, 0xfffffffc, 0x1e8, 0x7, 0x7fffffff, 0x8, 0x6, 0xa825, 0x0, 0x8a, 0xffffffff, 0x81, 0x9, 0x0, 0x8, 0x8, 0xa, 0x8, 0xfffffffb, 0x3, 0x3ff, 0x0, 0x8, 0x7ff, 0x4, 0x1, 0x1, 0xc046, 0x2, 0x4, 0x2, 0x7, 0xfffffffe, 0x872d, 0x200, 0x7fff, 0xa, 0x16, 0x2], [0x6, 0xffff1fd8, 0xbe6, 0x673, 0x7fffffff, 0x1, 0x9, 0x1, 0x1, 0x6, 0x3, 0x1, 0xa9b6, 0x0, 0xfffffff7, 0x9, 0x4, 0x1, 0x4, 0xa, 0x85d14b1, 0x81, 0x10, 0x0, 0x3, 0x5, 0x0, 0x5, 0x1, 0x8, 0xc, 0x216, 0x6, 0x1ff, 0x9, 0x4, 0xfffeffff, 0xa, 0x2, 0x3, 0x1, 0x0, 0x6, 0x31, 0x7, 0x5, 0x80000000, 0x3, 0x4, 0x4, 0x7, 0x9405, 0x800, 0xec, 0x0, 0x80000000, 0xad, 0x0, 0x8, 0xca1e, 0x4, 0x8, 0x4], 0x15, ['gretap0\x00', '\x00', '', 'route\x00', 'route\x00']}, ["", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x20048840}, 0x880) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000003980)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x30, 0x453, 0x10, 0x70bd2b, 0x25dfdbfe, "9f7bd62eaa890e59ab9825b67ff0bc450a814adf103430819eb0496a60745944", ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x24000050) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003c80)={r3, 0xe0, &(0x7f0000003b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000039c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000003a00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003a40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x80, &(0x7f0000003a80)=[{}, {}], 0x10, 0x10, &(0x7f0000003ac0), &(0x7f0000003b00), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000003b40)}}, 0x10) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000003d80)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003d40)={&(0x7f0000003d00)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x4840) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000003e80)={&(0x7f0000003dc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003e40)={&(0x7f0000003e00)={0x1c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000001) r6 = syz_clone(0x40050000, &(0x7f0000005140)="255cc2485b8646", 0x7, &(0x7f0000005180), &(0x7f00000051c0), &(0x7f0000005200)="4282c666cca0bd838b8441e68c46a8a436b94b74bb0cae0903f9b8565c98f32e95f3accfe71fb24988fe9b09d6983facd52a57694e998d87202dd92d31c8a885009f") fstat(r1, &(0x7f0000005280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000005300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f00000053c0)={0x0, 0x0, &(0x7f0000005100)=[{&(0x7f0000003ec0)="f385ebcd53be11506cefca180d46fdf3641dd4e716b248fba2027fe5d286c262c876610b917f8b7760153faae2c3bd6b750d4513e5bf6304ce26a4dead0b21b4a0aa5e37754d0a1d541477", 0x4b}, {&(0x7f0000003f40)="f09752ae5ea40b293063bbaa0680e620504a05e03c397c8341b6a29aab879b7e39642e36268d4635b97e3715a74dbb253f53e2d95827ff4fcf25765f4fa02411a7cf97cda28a84339530524f844dd16230d3933996b2d82db3356b3191004781fe0c579b144bbe04f4ebd0e0fb370306fab9a9aa65958a500430bafd629f4a107fec6645f065", 0x86}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000)="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", 0xfa}], 0x4, &(0x7f0000005380)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}], 0x20, 0x24000050}, 0x800) sendmsg$IPCTNL_MSG_CT_GET_DYING(r4, &(0x7f00000054c0)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000005480)={&(0x7f0000005440)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x20040000) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f00000055c0)={&(0x7f0000005500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000005580)={&(0x7f0000005540)={0x34, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x55ed2fd5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8001}]}, 0x34}}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000008240)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000008200)={&(0x7f0000005640)={0x2b9c, 0xd, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1644, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x1604, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x274, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xbe, 0x1, "35ab523ec0aac9b77c61fc70ee4d75d1b8c995d3a492d5cbeeae463347879a0cdb53bca55914300cc72b9ac636b8e33dd0a5502b655ff43a34934856fd3ed37247c14c9ddaa833fa3af41099d5bfaf3186a9e2b52b24f76d18fb9c1c76cd0d2fcb50b554e29aebebb7f18ff9ca9ce5415a2330ee2d63cb03ed089d2f8d2e33d6bb6c49e0e50e6e8b39e679b4cd6af3405df33f13393271dadc21be47b0c858c4f67f22a233715fb61d0e80bc3245f116f880a812e0dd938a2266"}, @NFTA_DATA_VALUE={0x40, 0x1, "9739194194744b8e31b10fac67b9b323458a2e23d97f2bdb02dae95b7e4b213225a2874a95a8b4b4c438e351b7d9d0bd09cf3a3a52f2bf574a591569"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xf3, 0x1, "a4906003bc8c5a3850d8a93a29a2b6f6fad258704b483ddc7761d5334841431790a42dccf0c6e1965bcad6913cfc9bccaed6c1bed80353701803e9d1097aa094460f9da05fc14cdcb5b590e60f02f2c0f9be6f16f2e19faf86547a1512bb4557393c960eb39a28961ba762e2a491ac82b969ecaf4f63a267dd075462d3d129d7efab9004d4233e471650583f40738a60e0a9e5520c4f515e69fe079de8753e12ea2c3e36f6ec692f3734258a889cf0dbd09a33c22c001772fec16d87d84ea83931fda684aae02526de96a1a9ebf76d70d09fe64bdf8063d93422f252f0f7e5761597ca5b993b674e001ed277da17b7"}, @NFTA_DATA_VALUE={0x3d, 0x1, "1fd8902aed8e4ee522748891211b538015c771524b68921342366072965aaa51e042ff50f1d8a13e24939916bbb521784279769119cc00c670"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0xac, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1c, 0x1, "90d855e728c41f5424813135f4ca22f090cc1a60065e9c15"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x10bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "cec3defa8411f23eb556e03903b950a96d95b96d8f0a9a1d6c0e9e8faa1f09cea5530f4ce717b263b29006061ad9ebb120ca3a5de7f56155a3045b15facdf659a6fdc57d84d10b1d022bdb331f8a45c5bfb943ffb620f62d3bc9fd1db8a041181ffeb9a417a4c16d7350cf47e42c8c3c8faff6140516addf65a3e5709aa7a916ea2af41f68ba41dbdb0251dba38b537296d1339e8bf8622fcc7369e3efa0b2e6f66059e902495e26ff33d87e24"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY_END={0x218, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "b851a909e51d99d1ad4cd6420d5aee211166712660b440331fc42238e13bd83682ebbef58ed1e6c54db7c36a77e910b138e6cbd5cc87eef6f449014af0158ba3034b13ec76d4749efafa0be706d1f703cd0296b39df2267a5a67e096de47c08e159e8c86f177efa4b1860420e32738622891e4a7fb36618e006c6fd16c0bcc37218929730467e59eb4e2ea66084703335f7753f35381600fcca90c8bb521ac28e3b74dc93337d55ecdac273cbb7f131af27d2ce6a5490fa3daac763f07386e7f8c64e1c568bddbcfaa05fd0e43f1c7f68f80fd36fb4bff3398"}, @NFTA_DATA_VALUE={0x101, 0x1, "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"}]}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @counter={{0xc}, @void}}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1528, 0x3, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x37, 0x1, "15a217f89c23076850b226534e2a852a53b5832c82af8126e71f3837d99ecc71588776dcf0f649a67e4cbab225de54ef5b717d"}]}, @NFTA_SET_ELEM_USERDATA={0xa7, 0x6, 0x1, 0x0, "ca68a46bce0270a964cde65296caac117b89930a395c7ef1d2563f35ec3218c6468530e7cc9b092b5b0247158f01d8b7a97c7451e0639eb473eeddf273677561b3b1e6445c3538f3d275093407666f9d0ee5dd81bdf637314f55e0b6a6cebcc4de584270fa0bb5a84f625a087cb7f606e02bca9cfd28e7adf8d3c56cd83f42a7c943b2c27f88b2f19e730451f065ac2f1da6cbb1051aba8bfe3ff665c0089db219dcde"}]}, {0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x140c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x85, 0x1, "8f3d3b6db99310cbf2e7297e15d5b06a9ac35fc84d3b86993d9382cb1f9addcea40c19d9400c0c41eef7dd86bf49afc86dbd074bdcaf9a2093fac1b73e11f86880775a395fee4431718ff653db5011d44031abe013dc9a1be6fab35b8e1e5ac4676ebdede870c26b4e913ba453458e047ed65e598a9bc3309f1dab806db26717b9"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0xd4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x33, 0x1, "471623b06648a1b5b65b7d992a6eba715cc342218d346bf7c763aadfd73f82480799459cfefc08d5fccc8eb3d6ad6d"}, @NFTA_DATA_VALUE={0x1f, 0x1, "ad0a06f6197fc25f2e05ee23a1167ac4f45bbaa32760fc69f8b9ab"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x1e0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa5, 0x1, "114e68dfbba109458e55dd261f496137bfeac31a3036854d2454aa133dc1a2858e791dfdffec191eecf3b8c6aaca523dc46db41978622891b31db47e7cc4ec5b656d17645edb78abce7e560e65489dd196dd0ab33599ff4fbf9270aa81053f1a23fbfe9be51d0e7978c72eef544e93b9fe7f877f3a6b22b6ff358cce6229eac34c2cf93dc400d9ce6d22cc04c9aa39c84682e2504f0b73b03473ec8754598c3572"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x53, 0x1, "71d54b63786e761f6af6a93c33659c69228bca76d4dc8822bb6d1b3d86f83c72d09a8e00685723dd6d03bc8a45165e6896ea326138591546aa0dcaf8a4425570315aae5d549c4645b72ef6676c9079"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x52, 0x1, "a1530de4e3198f2338496f4e5b16102e065fae50f49c83f091de1c3a1cf2073653aa2c1c4f66bdc9ef9acf7be5f7ee4a851f735d20949c5554e9dea7af440e25a6546161d99f1132c9d7527da290"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10a8, 0xb, 0x0, 0x1, [{0x10a4, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1094, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x1088, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "582c59cd103733d5e2a1689d1c1cc3c8f623e56ec9673403542e00a26c8fec0a893181032b8f60bcb9b76cbf5cc55da28e57d497f9e7a70c1112e3eaf3ec438202899d3f5c0c2a325246123a5ee035911d8a23ca79b1ecca0c9eadc9434a9b8be0b741d19a085b52a0922562b36d7e5595db1b27db5845b540ba1dac6c104765545ff35f933192d5c2bc8ee512fe57900809ec762dbc5d9aba8f14c601d53ab8abdd8a3462f6c7cafc0cb436fa2389ab66c31513c29e693894f5f97a8680213aa168c7ab54ca6aaac2e4bbab1ea7b5b61359c183f5beeaeecc314aae048264d21dfda9745dddc40242399f5a785765bfad362a9823345c9aa2795b421cdfc73ad33114e8488b1d9dc3dd1f5a2b0adcad5bb2dbb721ad7d788d1197d00aac95e81b9d2fc1a9ab9b4c4b59594d46c6cc813b1a4a19af129e20b8ef768f02432f19095429a42e28f4e23d61551c02c8995c9f0ef750e4b9d2cd9b04481012331e93ccc1014c3a0f5202514ce1ab01301f4e901ff775cce9aaae6084753ff1d6a5c8c4e43731380a5fa46491aeb9305ca225828e7ce566ca853d01df0bf5a3dceef15f84efe46578417c0e17b0a96256292496538dcf43889c1c2b5ee553472dec61fde366a512f6fcd30635ee598d79e8fadaa76fc4cb44d8735d850286f1bd22b9b2b376230a1e93a9afebde4f68d1126ef6b1e6362e54468191f66e1f42de26e1b4c5d852de288a7c80e579e45b15ccd30f07df85d63300e1ef74e103d292ac60237a302b2bf10fb718ffe2b49873a707c719262ffd893267d0674ab97793a3681ed2d627516d4715c071c73ff8d48076fb91655cad8542c4389ee81da33ff2f289f8dc0787178fb56e04a1652cd5fb15b7b130cbb36e12a63051ef4d3bee3aa97f122322052ca56366cc43d1054e783420997b3019e01770b7477ca1a573dfa4ae20ced8f291fcd883141969d5d86e0b7c834f699651424d1abce0f3f4fee109dbd72528d79edb3dae51c099c1c682823c190b42fe58ac3d8d23e25b6ad4df3c59ce0603f65e1a9b2feb6b1585494e2ac39f2aa3df68b94d39c4b1df24a289be4c81e5492df51f428e462d6942cc898ca5c9d99bf048611e71795f00657c506d3bd7b3334f41ddc3c5aa20ffab8848c0bae4fd26e915dfdbe963ade737fc45c405708d840cc28c75a070c1c210dc52509e486bfa5bad07ea8e1cb3e31ebf0e53a80f7aade8ca2206a158f814287fec4da564affeb504901cc606d4ab12c1be17b2e672d9764ebb5dff8a9f3514077075c4c92cd335a34d5e53dd5c461435688288493ea9580dc254d20d647e6a3fd07eb3a570b291c45f98dccc242c9cf46c3acd7dcf8978e853939afc68e224134c7228d24df111824d3bc12391b26f678f4766734b444d5dfd10cf3bdc12b70cf961cbd6b46dcd7b9b1c7a3ae10ef1733badafb2838f1b21e4c765e96d14364ec62012da5029d1c9114aa1749a74962e2e86700b6eec91ed1b67545fd3ec794d762a14ab9b7e7828b43b48c83111bdcd41fb73300808447dbf8fc6c7b215b94a6b3c75eba6bcd853431d6b0f8f04a037be0616779b4a23e52a87cf08000ef9eb921e5b879451e1e8ab117b825bcaa6d4e010c8d590dbefc4bca91ba8ba6c1fb9c98530d8157063a9b58cc54a4316c8b8708e489af17e407db80dcf1a1c541a95ab6313eda5eb2e9bd2fbf2ba2a07be5c325a778fadf7ca2179ce9c7e315001980923ebfd4983f88b8f84e58949a3d15ebdcc854bf5521db7e5b40805f59600e79bafe0e1a4652564ceb5574bdd828597b1a88199afa6ffca541e3094a4b7e7607eb730fe1b1ae05d6fff8346dd61121857a2f7370328c7ad07c09b610d5b3b19b06aa07c4d6c453d2ba88a36ba3dc1588ad0f91baf91dc93c3e326b4ddb65b0bf8059a9dd3e770fdcaf85378a7d7b84209b8bd5b34d3b1f896d2639878d2d12ac463d0f0128c9284049b002f09658b4958cef50ebbe492bfab71bc9b810753ef949af4c6fc79f1ce9fa50cc990f269657dcef6be5c2232ef1f56fd870c54f31a090fd7b4944c2c4767472983fe3b1329e854728e9b8db551a17353ebcf5286aaaad7bf278d62fc5a3d3fd471294312c0b0bb095ed7c0d2b3e98f0f84be5dab41d48196b21f2bf66b153991644b09cc696924f91e8afd72e7b8a0c2bbca47c25615644ef24c416b5e6330ea54c040ab539a4c350088940334f009fbeb2901755f8b8075442915aa15e8c8e42c137cc3ca6016deebc19bca424efbe46748724ababa56a7ad887c0d78af3e1e08c2cf2996b9a7b71e2cee0955c530e2c18ddd257f621b930e84069dc3423746fd0d0f00ffb0356e3edca37aaeeb58fbd41b83b302746d7a918d340d47faf439edad3fd594ea08cafdcf40f6b05d666dbfdf493cd5a1f2ba9d7a3575760c8b668c8cad8bb1211f8672feb73256ce37502992f726a64744db07df7d7661631df5afb6752767ba72ad4f027c27b80359e88fde48fcdb46e0941fce3a69883faed9529b87151cd01c1c87305fa8af78e554aeb9669f77cc7d129e09b99845e3ab5bedc388a4f4b08cf4fce91762e52cffae1ca4c2d9b47786497e83801f92b8d692448ffa60332b11cc6b9747cc90c9f1cdd9c314645e7a41f78350e6ff98f7a646c1eacd09fc633cef565488466196dfd2c2bfa92fa84ee9a5d3390d4b78544976bf239ff67d225a5396374cb3a584dd9954594929b16a51b1bcab21e1a557768eb612dddb3dd36e8929226ac7d12b21a817a4084acd9985a69de53f3ec1a9b1df1496988c458e5f4eee712c2d0b487024de5e5dd75014f11098ff913c37f2cf66598f1d417f753c5297ec713c22d220b877b70965bc01af38a9c8f44bc75d1023798148ad7aaa3c9ff142002989de3c36e6a78ea11f2ba7d1b0d45ca610f6a16852e9cd8f87cc3e0bad2cbf0a3ab836962a3f4a334ecb6fb3815fe571a0250171d85fb782897080e5203e55330821c75a51a23a3c34b4c1c3eb968db2e1ca5b5619e38f7dcd82735f8280c3cdb738b9611108ac241f60b12e3c98c0e6aa92813493036afccaf583ea2d673c413c824f359fc198fe81fd979f7cabe2619c6d680aadd01c1489c7493c725776642fa13bded6295d9896937a1b12a530e2760f49296be7ce9e037551a3d38cee9504f18b726cf2bc17ef61216dd2f50ff070438f6e32ee5f5d88858330ec3c793f288feda482dc4220b5edefcddfcbf9b937170c0e65b78c9e4fc5cbac07eabfa4a92dcacf02c2be1d4f6d64da1927b877351444c9c293333fc33fb219cf6806b3754847cbfb491074d7cba746ea2ba2206d57aee54ca067b1eec178beb6fe869e75f90e9050215c93c86a05a0b45ba8de73b7fb1af5d8b8560c51d048f34a3f3c2ac71e090f7f82074a4a9411693b1808b16294a62599aca0d4ac55ae1753faa513aa419dd956dd1f73503e026dad87cefa121593c49a21cb2a92ca0336c377732a8d3b41cec2347b8ecbbfcc8d58560e5bd5e8fcc8a43359fbd283d1709aec927956e20ce9141677eded1a25dce0d866e94d684a950ce8393a49b5b7a41ea8b4744edce3c77b1710c7d93640dc0e1d1f979e1da4b65fb880f3237618f04a92cae458c024b26e015a38d46b69914729814d5a0ddf659a4f03abaebb534b4655c3bfa63923281f6b8354b44f4b1961a43da545aea05b198b90e9131e3f325c68c5f38e0f269c550524b29dfa2287aa494dfb861c871298cfd63d0509f6e3b48432bcb0ede1c1847ad782b322811d50f15033cc3070f3dd0f0ad38855423e284652c1e7f8bee66fcdfa6b4360d60dfdc59aca151b1afd90d86690f4365f41c3e18ff0c26d6636ffd75680eb55b599c375593d86e355255d4002fe012b414c51260e471537f90474c852baad00bf6931809625fa8b760f5311e16c70d7488d182215e83882080b2e0a6937d2e83263867f4422dd5889b4e48fa1d81116a99752724dc0d27df4cd13f74e146d3f89be212c09d92e822b0b810d05cf89783ef67fdc2d73d9cd79d122b23e65cd1c8d485a36c5074e146b11887cf308d7e53b8792a1cccd93e9317d9d39407ed8e1fe0a2b159fdc009c75dd29f354e97e4a010d464ff27bc6551f4ad0b61f43a2df231e9b2cba47017aaf75f5c43e1634cdf2e9230366997b982bba0451e6d57bce406ee149b4a970cd455e4e20bbbce40217d5939b3b94d8a56b3b5924a1d19695eabbeaa15446ebdc633fee55e3a751344900d900a0205b90f3d5a7658a4d9312947d645ad771dbbc5c93b1149dff0f5b181263d69440669864ccec738532ab7245f614e71d28fdcc47a22dfa34fc01d51ff5dbf9aad25d1e264ce95f1e6c97dda402ee61ce22a8ce4599006cf320973eb023abb4a660bc3a6b4022f8faf2eaaf551fcee6c67bdb236386b95bec881a85c0acf10eab13e332dce6299844cc3f17c14aa5b1386beb379f91351e2c64f4f1d2489cf5f9f79c244ee3df832c2955e7dc4936c89d4d88a6bbba99d462cdfef52a69735feb608025a2cee07818f3657fe6548e61a8ab481bf34445943afaf4ba019cd6a63c42b9966a9b6372d359b60789c11ee197c1b160b7030b2f61a7da8d789f3f1c5e0534cd9ee7bac6d897cad2519af12a346c51cc83d0e4b23813a2d551bdc3b71bbf6a9aa3cc60ac80e15fe66815d8fea1a95c8195f5a553047a680bb409d7a4d7df9564034679837b2051b76fe26b343731b5b244848ceb5d1f97d929f528fda8e35aa2d3ba625327a02057a7e1a442d9a0eb324abf5104656ac9323c6e41e3cffffee32f92902393be714ce8472c3630886b6de7c176ca7155e3e9af14bcf2720ae8df04b38884329aa47eb0f474a6cf2879c730cff0e453b5a193de5c26643b761b0277dd6dd8392fe98c3e85a038663a75eb372a4bd481efd8a10779f55b2e3b947999907d861213dcf2c52cb175823dde2e74938fb85c51a3b714d011115c5e16d1aa88ba2a730386feab13cbf963607fe34393abf8dc0d65bdbc759d57c3af057c878821cb87b4e1e344320677618b8caff8f1ec1c6865e376bbfcb113937a4fc8bdef1946249a0f52c69eaa2cebc3bcf8a3f19c5d2bcc559bb748e30c5592c1a987ece91638f1322b568e4f006e849fb63584cfff5236fb386a0bb83883403950fe3732d63610dd0f2950555e0ccdcc45865d8cc51f95949042c341d7088ea792bad0219436083287eb9d758a151ad92e7905207ba4cad854a15ca81a068c62e50753c8ead63d64f6b2ac42eddf169a7e8831395a6054b4aa3930944b4b4a6d52d260c390a1c1079aebac2b2dc61973340acfafaaeb0705af3a6122ab6d1f622c125317bbe1b13980014b98ae5fe404d18b435c1cf872f9b1671e73b65ae48522b2240cc3eb428d4c114bd646030bcbf8c0cd1d5cc67c6fe37f1ad943ba1a22f74a5c64bf751e6c6d38dadd48d445da06ccc81e7bedff2788f206ba09321f905be05eb774f4f69fa635a8731879a75f45796c9e222adbc683e81a466abfd81e428296314fe1b21c644e420a59e1dfc1cf46a48a37509f1c911801f52d3da131cf8cffe007e6714c0373aef87808be41eb1646bc7fb4cee25c7c149b1e6e6fbdace8db58471cc5228036459e81bbf2beaca459572d55a06fa164f49012ecdef9ca111954cc19d2a19df16666c5d4b7b85413492a34e584aab6aea89f9d38aff977e79353e1449085b6a3af08f2d3e7e792fc02376a71834517dc28b0d3247ae77baef91c954be1ff37360857d9f1cfd0bc4dfdf88eb3c4e394"}]}, @NFTA_RANGE_OP={0x8}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, 0x2b9c}}, 0x10) syz_clone(0x2000200, &(0x7f0000008280)="fa9ad5c1285d0cd43b0c034c57bb4e0bc967c8d7005df570e6fa39ebcc1409a20e25f231b7dbaa7e17fe8c8cee7e22c2f542bde4d7308d3e33af98f1ba529cdfb82380279dde7361ad63e460323d6f537b4a722534de613d180b96542433b4b811dd727c080ff8ac1de427124bca0e7e36cceee5c5ed0ea7d67af8c41f1590eabff96face8537deaff8c3867cb54a3235e22a21c108d994fba5ecf41f0346d1ff5cc8f3338e93f377651a99632ddfd7be2c55be9a295f6724a99d8cdd6f74b1eaabca2c8eba2eb04782565f10f745a03efd3b4f8fb4f41d60ea6c5a7f21903429377e4b3eaf8fda246ef3e258f324cc2", 0xf0, &(0x7f0000008380), &(0x7f00000083c0), &(0x7f0000008400)="2f28b7223261b23d482ae2ad377447dddbd8aff9e9e3e8ebcc60ff81557a33789d520273e242acbf6f34f56a0ee135752287d13769e3543237d4e1c151a8896207bd5d9a7b4dcf9647600283c488616e0e812c5ac5c79ae6e7903e1187af7f08a5c5e5adb0d79359ab462e946760b8e1b4922f207588aaef42a22375bec64ed54f2bbece9d1b6db1cd86003de370483df243af1777deec55") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000084c0)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000008500), 0x9) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000008a00)={&(0x7f0000008540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000089c0)={&(0x7f0000008580)={0x414, 0x7, 0x7, 0x301, 0x70bd28, 0x25dfdbff, {0x5, 0x0, 0x4}, [@nested={0x20, 0x150, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @pid=r6}, @typed={0xc, 0x25, 0x0, 0x0, @u64=0x5}, @typed={0x4, 0x62}, @nested={0x4, 0xc0}]}, @generic="9cf993904220d2e6da2d2169d985173cfcbd828573dc4c25341b91aa0282e94c1edfe11e3df58ac8c7d88ad8e649d8dd157a00f2b1fd2e4ea8b610955d3f6016d724782a5a6154bff8e5b04868ef7e2a80cd42bc5a2a09ebd3907b42fac74778ca31765eb068993ef211ba9264", @nested={0x29d, 0x66, 0x0, 0x1, [@generic="a4a44ed86acaa9838c2a90c631ab94457efa8beabb327fc64bb4e53e4023aca2e7b0515b874c30b5dcf4b02694160e94dbc075d353ee616bed583d1727c1eb0cc44c75c831408ad9bd6489e45b01ba179266582c390c4751def1ba11304db36795aa6898724280cc8bdb667147a2ea9699d29bfab19c2574d37312bd9415430c25e5b74d4055cce32e527b77f12faf39ca2afd05c6756a3e4082cf68af04339d45653b4d1e4665b3dfb4e62619944f17c9c91e495fc425cdd9ca0226e05728c759e0521ac1752f17ede2345dbd9e839d211f7793b5839da85be20dae938b94daa601f1f1", @generic="dd68be0a2ac0514cd5143fcb5c3655f9f78c3b264a4f81cf30224241e4b94e2d5ac3ca8a04575c236b780b0507ba1e5cd8a401b33ab6734db7ba3dc0dabf0b5d3e94e9cf52ef0ea9ade0cb209a987a8fdfcd53d39c7bc6187c7865cafed4085bb1f78ad6dce5b7ea46e87782610f77b4a8d32f7101c4e96ed730ff1a7bb3533a170f0be613af55ff97c90b6cc6b97f48fa84ed5167eff1beb19cbf3d36df3289f27883cf7f057d7b6de0d0066a3dca58d29dd1bd47c4e9cb4a02c32a200de0de0b4fbb813f1e9bb718a9f435e8d77887a742832591c591836510fc901883ce1f727aa450a30fea", @typed={0x8, 0xda, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x8a}, @generic="438087082e4e436963db9a564ff56ddd7f16c1b5a85435db16ca31b11217595a08098b1ac1cec82d4c74c7b852ff123301d64a661d9142d403fe6307faae59fe00222c3f043fd8a0fbef13d93ec39f25f0da92681263ab053e7ebc6cdb6ed7d30edd167366491e7564688887b9239b8eeb3750ec2bb8fb40d363f5a3ac592eedd1bbe9d6ad331986ccf44927365cf7e6481b66f312ea3524ee3513e57dfd869a7112939125409e764bb59af641f18a3fba559937aac8", @nested={0x4, 0x3d}, @typed={0x8, 0xed, 0x0, 0x0, @pid=r6}]}, @nested={0xd0, 0xbd, 0x0, 0x1, [@typed={0x14, 0x120, 0x0, 0x0, @ipv6=@private1}, @generic="78c1696b8fbdb30806b2e4c80bff1b7fcda54f9302221e4901b4eb9f0c37a69d602179ce220ea619f012083bdeb33a5b244d8ff0e6b61081d28456d59d3452796affeabb399eb710acf6938e89ff00f1147fc6ec1c415e051ad42b8a98b364bc37c9bd0c5b384164c80cedaa9ef91550c1d0c193a4e13fee6cdfe3dc8f1499f13e0a0b87919f41869eab17fa11e92a9295a9e10b71ae6f9c473936e00ad8b169b5ff6da1c90278c2d18fac957afeff3c11679980", @nested={0x4, 0x134}]}]}, 0x414}, 0x1, 0x0, 0x0, 0x20008080}, 0x16) 1.116289844s ago: executing program 5 (id=4743): close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000090000000000000001000000850000000e00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000cc00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000800)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000880)={&(0x7f0000000440)="77f84737c0a81fcee59b8cc89ee9d982db65f87b0544ccd211cac607c841b76e782e7a1565c752edd2f006ede9b4ac9dc760fb12bbd51f44a7f4ac8c55fb80931bd9af6e26ff3e7724a9662f481440bf19821cf172a3afc74a81b3bda2b7446b4b9e72224d13657c19795f7e2984975e6739ec8cf9d3f1496cde02cfce04f2e2e48ce4fb36d23ece5a501acb54b316d5910a060a4713907134a2d8f2365598f395971779c91eded0367cf85303b3764978b51842fd3cbccf6f651c425fb98f1b9e6bb43da3301403cb50e63db95943b70b7c", &(0x7f0000000600)=""/76, &(0x7f0000000680)="4c479c02c46b5b4d5aa71081fe5eab5412c4554e09344e957be0faaca00fdaad73b4800f15f6b0894e69057232f3f3d2dcc47c86634bf689f353858f24b8a95a854af14fde68845391fbc01ae7b8d1d23948f7c33bc607c372b36a2620049535318b07a90fc8681d21c032bfa7200c98bf099ca2040d1caa590eeebde757ed25931774d7d279583c244a7039697f76f3308adf2b7f488b7adce52e2853d5faceec86ed5319c584c2cd4ae097f1c0d7965fb72af6852cbb93d3e5c428be16415fa225c35acc3c987d5f60ceff37c29a844a0ee6db85d70de00165", &(0x7f0000000780)="03d09cae37d4a6204b4d1cb5c33c3a3b459608440a", 0x48, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x2, 0x9, 0x85, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_TUPLE={0x4}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x546a}}, @NFCTH_STATUS={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x44001) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc082003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xfffffffffffffe9f, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 1.115698626s ago: executing program 0 (id=4744): socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x37, 0x301, 0x70bd27, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="020440090a0000002dbd7000fcdbcf2502000b00fbff0000dce70500000000000000040000000300"], 0x50}}, 0x2000) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a8c000000060a030400000000000000000a0000050900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c200800024000000000080001004c4f47000900020073797a3200000000140005800800024000000002080001000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c0000001000010700000003000000000a0000000600010027"], 0x1c}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1190022fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}, {&(0x7f0000000080)="f0ac18cbdeb1f71a5c0f6cee1fcfe39d6ec29674aab266918132a326483f256379fb7e85e80d5f30d2598b16264b3918f25776e7389914d175f333cee91b166e6a016305f254424a069f5d2e06b772", 0x4f}], 0x2}, 0x80c0) 1.027880501s ago: executing program 1 (id=4745): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8a, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7f, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0xf, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @limit={{0xa}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r0, &(0x7f0000000040), 0x0}, 0x20) 860.90101ms ago: executing program 2 (id=4746): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc0c5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x10520, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000000)={r3}) recvmsg(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x0) r5 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) syz_clone(0x201000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x50, 0x30, 0x9, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_vlan={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfdff}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x60880, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYRES64=r6], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@generic={0x5, 0x9, 0x4, 0xfb, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000000e00)=""/4101, 0x0, 0xc}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/uts\x00') 844.704649ms ago: executing program 0 (id=4747): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000780)="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", 0x14f}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004"], 0x50) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000190001202600000000001c0080"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20048800) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="600100001000130726bd70000000000064010101000000000000000000000000ac1414130100000000000000000000004e2200004e23b203020000003a008000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000065001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80000008000"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 792.419955ms ago: executing program 5 (id=4748): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fcffffb702000005000000b703000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x574, 0xbc97, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f0000"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) socket$kcm(0xf, 0x3, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)="c9", 0x1}], 0x1}, 0x20000800) close(r3) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r1, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0xd, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x97, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000bc000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001100)={r7, 0x0, &(0x7f0000000000)=""/95, 0x2}, 0x20) sendmsg$inet(r6, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002340)=[{0x0}, {&(0x7f00000005c0)}, {&(0x7f0000001140)="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", 0x1000}, {&(0x7f0000002140)="a0b1f81a7bbd2b012fe636dd9bff108d2ecdfbca6c2ec694b6f15253bdc079677404658699bfb85368e984333566dc653a78d64b0c0d38e405f4c6d6e71ed2e4c15c4c9b1455879a90ae0dc95f4d407ba1b3e2c08e2a219f769b2c0df48cae552d8753b76a6c678d460d9424f841ccc1a18ec80fe33bedb4fb14cefc9a8c47b3ac986ef74f2c9c6d60a8d633f5c2f4b12dda4ff0ba7bc1a0dcd86971581102720628067ce0c4561edee90ac6a56a6c4db0bd824938aa4dd93517707e58ad0c4758cee212817fcfe26edb0ebf7131c7c9333c9822dc694633a9d89eb5451006d095", 0xe1}, {0x0}, {&(0x7f00000022c0)="455478705d11b373b6891684513026f987cdd891036a8779e7151b8cf5567710f34dda7d7cc2e7fe775f9dc346b49258abec719ca10fe623919ea6c140144a4033e28ce76b4bef5a44a224da72edc8de1af549c1", 0x54}], 0x6, &(0x7f00000023c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x42}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_retopts={{0x54, 0x0, 0x7, {[@ssrr={0x89, 0x1f, 0xbb, [@loopback, @empty, @empty, @local, @loopback, @local, @multicast2]}, @timestamp={0x44, 0x1c, 0x39, 0x0, 0x5, [0xea9, 0x7, 0xffff0000, 0x8, 0x80, 0x7ff]}, @noop, @noop, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14}}], 0xb8}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000390007012cbd7000fedbdf25047c00000c00018008000100", @ANYRES32, @ANYBLOB="323251a39e23a242d57bb406163a891a4ec5541d2486a3d01eecae3070aa600994c31e3bd9b617e89d91c69e929b012ed3d4df4fb8aaca264ab2667dfc0f11eca423091de68b6c334fb0bd5441c4fb7954c7e69504d1ade0bd56fc3a7393e7986ac3529e23b78e052e234e53d385a9fb769dff368f9212104a1c8c78800c374a4cf808343a3c0bd247993722509efbcfc7d1b09fff0e0878cf"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x4c814) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 785.035903ms ago: executing program 1 (id=4749): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc082003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (fail_nth: 7) close(0x3) 188.307528ms ago: executing program 1 (id=4750): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x90, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x2000, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 152.829798ms ago: executing program 5 (id=4751): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000780)="0000000000000000000000000000fce8c8f41e70f18f5f6f3c2e42cbc05409e1ece5cdc7e05365a2d3ff95328b4752bce01710d131eca64090e11110b2d7301ddcb04ae9a8265e9a5cbb3fe75a84e99b94ce816c66fc5e958bcf2ce2196a1c79746dd3436715a8d928b713463a052aecaba341f67299f07446bb4ed7ad380fd3d5e40de3150f0b5aef94e1a48d3ea7446358c53968a1d093806086f0889518375ad10600000098f42d0955fc10c559be841fd3bd86c4a41413730635ae9dc1fd03adcaf970cad732d552df8b578f7281e4bd0d0935cd33539872cbbdb583762c53759b20cc9d9c84131be4d59d02ec8cbff5fcab3de7328ead0000000000000000302a93e6647babf9aeef70da8b541afe94aa69a076b34032638429616a8c4dc7edaa74357aa26fb02c48cbb0f05ef8b87fafbde7baf89a74d691763dfd884cf38bf64d52d365801922fbfc257cce", 0x14f}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004"], 0x50) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000190001202600000000001c0080"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20048800) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)='t', 0x1}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) openat$cgroup(0xffffffffffffffff, &(0x7f0000000bc0)='syz1\x00', 0x200002, 0x0) 0s ago: executing program 1 (id=4752): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa4100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x11c266, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x4, 0x0, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x7}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000080002007910000000000000d31030001001000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004891) write$cgroup_devices(r1, &(0x7f00000005c0)=ANY=[], 0xfffffeff) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, 0x0}, 0x34068096) kernel console output (not intermixed with test programs): _works+0xa88/0x14c0 [ 947.611533][T14547] ? __pfx_process_scheduled_works+0x10/0x10 [ 947.611569][T14547] ? assign_work+0x3cf/0x5d0 [ 947.611601][T14547] worker_thread+0xa47/0xfb0 [ 947.611646][T14547] ? __kthread_parkme+0x71/0x1f0 [ 947.611686][T14547] kthread+0x38b/0x480 [ 947.611720][T14547] ? __pfx_worker_thread+0x10/0x10 [ 947.611746][T14547] ? __pfx_kthread+0x10/0x10 [ 947.611781][T14547] ret_from_fork+0x514/0xb70 [ 947.611815][T14547] ? __pfx_ret_from_fork+0x10/0x10 [ 947.611849][T14547] ? __switch_to+0xc89/0x1420 [ 947.611884][T14547] ? __pfx_kthread+0x10/0x10 [ 947.611919][T14547] ret_from_fork_asm+0x1a/0x30 [ 947.611972][T14547] [ 947.612020][T14547] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 947.614847][T14370] Bluetooth: hci1: command 0x0406 tx timeout [ 947.628706][T14547] Bluetooth: hci4: failed to register connection device [ 947.774301][T14370] Bluetooth: hci2: command 0x0406 tx timeout [ 947.778684][T14547] Bluetooth: hci3: command 0x0406 tx timeout [ 948.023018][T14547] Bluetooth: hci4: command 0x0406 tx timeout [ 948.063617][T21090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4084'. [ 948.921816][T21104] validate_nla: 8 callbacks suppressed [ 948.921854][T21104] netlink: 'syz.2.4089': attribute type 13 has an invalid length. [ 948.993841][T21102] netlink: 'syz.1.4088': attribute type 2 has an invalid length. [ 949.022168][T21102] netlink: 'syz.1.4088': attribute type 8 has an invalid length. [ 949.073537][T21107] netlink: 'syz.5.4090': attribute type 39 has an invalid length. [ 949.695439][T14547] Bluetooth: hci1: command 0x0406 tx timeout [ 949.852738][T14236] Bluetooth: hci2: command 0x0406 tx timeout [ 949.933221][T14236] Bluetooth: hci3: command 0x0406 tx timeout [ 950.093196][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 951.160263][T21142] __nla_validate_parse: 9 callbacks suppressed [ 951.160328][T21142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4098'. [ 951.241626][T21146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4098'. [ 951.596881][T21152] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4102'. [ 951.935930][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 952.011453][T21152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4102'. [ 952.033157][T20708] Bluetooth: hci3: command 0x0406 tx timeout [ 952.173974][T20708] Bluetooth: hci4: command 0x0406 tx timeout [ 952.259879][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4104'. [ 952.387509][T21161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4104'. [ 952.703465][T21167] netlink: 'syz.0.4105': attribute type 2 has an invalid length. [ 952.728269][T21167] netlink: 'syz.0.4105': attribute type 8 has an invalid length. [ 952.758722][T21167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4105'. [ 953.003582][T21180] netlink: 'syz.3.4109': attribute type 13 has an invalid length. [ 953.050172][ T51] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 953.300368][ T51] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 953.477623][T21193] netlink: 'syz.1.4112': attribute type 2 has an invalid length. [ 953.486717][T21193] netlink: 'syz.1.4112': attribute type 8 has an invalid length. [ 953.495631][T21193] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4112'. [ 953.730596][T21201] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4115'. [ 953.760744][T21198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4114'. [ 953.843306][T21198] netlink: 'syz.2.4114': attribute type 39 has an invalid length. [ 953.861824][ T51] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 954.022693][T14236] Bluetooth: hci2: command 0x0406 tx timeout [ 954.098941][T21208] netlink: 'syz.5.4117': attribute type 13 has an invalid length. [ 954.275528][T14236] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 954.374063][T21213] netlink: 'syz.2.4118': attribute type 39 has an invalid length. [ 954.620446][T21218] netlink: 'syz.3.4121': attribute type 2 has an invalid length. [ 954.629418][T21218] netlink: 'syz.3.4121': attribute type 8 has an invalid length. [ 954.735035][T14236] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 954.745520][T14236] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 954.756679][T14236] CPU: 0 UID: 0 PID: 14236 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 954.756713][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.756729][T14236] Workqueue: hci5 hci_rx_work [ 954.756760][T14236] Call Trace: [ 954.756769][T14236] [ 954.756778][T14236] dump_stack_lvl+0xe8/0x150 [ 954.756814][T14236] sysfs_create_dir_ns+0x271/0x2a0 [ 954.756853][T14236] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 954.756892][T14236] ? do_raw_spin_unlock+0xf5/0x200 [ 954.756945][T14236] kobject_add_internal+0x622/0xcd0 [ 954.756988][T14236] kobject_add+0x163/0x240 [ 954.757025][T14236] ? __pfx_kobject_add+0x10/0x10 [ 954.757063][T14236] ? get_device_parent+0x366/0x3a0 [ 954.757103][T14236] device_add+0x3fa/0xb80 [ 954.757139][T14236] hci_conn_add_sysfs+0xd5/0x210 [ 954.757168][T14236] le_conn_complete_evt+0xfb7/0x1690 [ 954.757206][T14236] ? le_conn_complete_evt+0x190/0x1690 [ 954.757241][T14236] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 954.757275][T14236] ? __mutex_unlock_slowpath+0x731/0x900 [ 954.757309][T14236] ? skb_pull_data+0xf0/0x200 [ 954.757340][T14236] hci_le_conn_complete_evt+0x187/0x470 [ 954.757379][T14236] hci_event_packet+0x67a/0xf10 [ 954.757413][T14236] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 954.757441][T14236] ? __pfx_hci_event_packet+0x10/0x10 [ 954.757481][T14236] ? prune_tree_thread+0xa0/0x260 [ 954.757512][T14236] ? hci_send_to_monitor+0xe2/0x590 [ 954.757552][T14236] hci_rx_work+0x3ee/0x1020 [ 954.757587][T14236] ? process_scheduled_works+0xa1a/0x14c0 [ 954.757615][T14236] process_scheduled_works+0xa88/0x14c0 [ 954.757674][T14236] ? __pfx_process_scheduled_works+0x10/0x10 [ 954.757708][T14236] ? assign_work+0x3cf/0x5d0 [ 954.757741][T14236] worker_thread+0xa47/0xfb0 [ 954.757800][T14236] kthread+0x38b/0x480 [ 954.757834][T14236] ? __pfx_worker_thread+0x10/0x10 [ 954.757860][T14236] ? __pfx_kthread+0x10/0x10 [ 954.757895][T14236] ret_from_fork+0x514/0xb70 [ 954.757932][T14236] ? __pfx_ret_from_fork+0x10/0x10 [ 954.757966][T14236] ? __switch_to+0xc89/0x1420 [ 954.757998][T14236] ? __pfx_kthread+0x10/0x10 [ 954.758033][T14236] ret_from_fork_asm+0x1a/0x30 [ 954.758086][T14236] [ 954.758117][T14236] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 954.989843][T14236] Bluetooth: hci5: failed to register connection device [ 955.071023][T14236] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 955.079038][T14236] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 955.088519][T14236] CPU: 0 UID: 0 PID: 14236 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 955.088550][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.088566][T14236] Workqueue: hci2 hci_rx_work [ 955.088613][T14236] Call Trace: [ 955.088622][T14236] [ 955.088632][T14236] dump_stack_lvl+0xe8/0x150 [ 955.088669][T14236] sysfs_create_dir_ns+0x271/0x2a0 [ 955.088710][T14236] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 955.088750][T14236] ? do_raw_spin_unlock+0xf5/0x200 [ 955.088784][T14236] kobject_add_internal+0x622/0xcd0 [ 955.088826][T14236] kobject_add+0x163/0x240 [ 955.088865][T14236] ? __pfx_kobject_add+0x10/0x10 [ 955.088904][T14236] ? get_device_parent+0x366/0x3a0 [ 955.088945][T14236] device_add+0x3fa/0xb80 [ 955.088983][T14236] hci_conn_add_sysfs+0xd5/0x210 [ 955.089011][T14236] le_conn_complete_evt+0xfb7/0x1690 [ 955.089050][T14236] ? le_conn_complete_evt+0x190/0x1690 [ 955.089085][T14236] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 955.089119][T14236] ? __mutex_unlock_slowpath+0x731/0x900 [ 955.089152][T14236] ? skb_pull_data+0xf0/0x200 [ 955.089182][T14236] hci_le_conn_complete_evt+0x187/0x470 [ 955.089221][T14236] hci_event_packet+0x67a/0xf10 [ 955.089245][T14236] ? kcov_remote_start+0x4ab/0x7c0 [ 955.089282][T14236] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 955.089310][T14236] ? __pfx_hci_event_packet+0x10/0x10 [ 955.089342][T14236] ? prune_tree_thread+0xa0/0x260 [ 955.089372][T14236] ? hci_send_to_monitor+0xe2/0x590 [ 955.089409][T14236] hci_rx_work+0x3ee/0x1020 [ 955.089453][T14236] ? process_scheduled_works+0xa1a/0x14c0 [ 955.089480][T14236] process_scheduled_works+0xa88/0x14c0 [ 955.089541][T14236] ? __pfx_process_scheduled_works+0x10/0x10 [ 955.089576][T14236] ? assign_work+0x3cf/0x5d0 [ 955.089609][T14236] worker_thread+0xa47/0xfb0 [ 955.089668][T14236] kthread+0x38b/0x480 [ 955.089702][T14236] ? __pfx_worker_thread+0x10/0x10 [ 955.089728][T14236] ? __pfx_kthread+0x10/0x10 [ 955.089762][T14236] ret_from_fork+0x514/0xb70 [ 955.089799][T14236] ? __pfx_ret_from_fork+0x10/0x10 [ 955.089832][T14236] ? __switch_to+0xc89/0x1420 [ 955.089864][T14236] ? __pfx_kthread+0x10/0x10 [ 955.089899][T14236] ret_from_fork_asm+0x1a/0x30 [ 955.089954][T14236] [ 955.089990][T14236] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 955.143151][T20708] Bluetooth: hci4: command 0x0406 tx timeout [ 955.149298][T14236] Bluetooth: hci2: failed to register connection device [ 955.373209][T14236] Bluetooth: hci5: command 0x0406 tx timeout [ 955.398147][T21225] netlink: 'syz.1.4123': attribute type 2 has an invalid length. [ 955.423368][T21225] netlink: 'syz.1.4123': attribute type 8 has an invalid length. [ 955.478292][T21237] netlink: 'syz.0.4127': attribute type 13 has an invalid length. [ 955.720991][T14236] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 955.729122][T14236] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 955.740815][T14236] CPU: 0 UID: 0 PID: 14236 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 955.740847][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 955.740863][T14236] Workqueue: hci1 hci_rx_work [ 955.740893][T14236] Call Trace: [ 955.740902][T14236] [ 955.740911][T14236] dump_stack_lvl+0xe8/0x150 [ 955.740947][T14236] sysfs_create_dir_ns+0x271/0x2a0 [ 955.740986][T14236] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 955.741023][T14236] ? do_raw_spin_unlock+0xf5/0x200 [ 955.741058][T14236] kobject_add_internal+0x622/0xcd0 [ 955.741099][T14236] kobject_add+0x163/0x240 [ 955.741136][T14236] ? __pfx_kobject_add+0x10/0x10 [ 955.741174][T14236] ? get_device_parent+0x366/0x3a0 [ 955.741211][T14236] device_add+0x3fa/0xb80 [ 955.741247][T14236] hci_conn_add_sysfs+0xd5/0x210 [ 955.741276][T14236] le_conn_complete_evt+0xfb7/0x1690 [ 955.741314][T14236] ? le_conn_complete_evt+0x190/0x1690 [ 955.741347][T14236] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 955.741389][T14236] ? __mutex_unlock_slowpath+0x731/0x900 [ 955.741421][T14236] ? skb_pull_data+0xf0/0x200 [ 955.741450][T14236] hci_le_conn_complete_evt+0x187/0x470 [ 955.741489][T14236] hci_event_packet+0x67a/0xf10 [ 955.741514][T14236] ? kcov_remote_start+0x4ab/0x7c0 [ 955.741548][T14236] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 955.741576][T14236] ? __pfx_hci_event_packet+0x10/0x10 [ 955.741607][T14236] ? prune_tree_thread+0xa0/0x260 [ 955.741638][T14236] ? hci_send_to_monitor+0xe2/0x590 [ 955.741676][T14236] hci_rx_work+0x3ee/0x1020 [ 955.741709][T14236] ? process_scheduled_works+0xa1a/0x14c0 [ 955.741736][T14236] process_scheduled_works+0xa88/0x14c0 [ 955.741793][T14236] ? __pfx_process_scheduled_works+0x10/0x10 [ 955.741826][T14236] ? assign_work+0x3cf/0x5d0 [ 955.741857][T14236] worker_thread+0xa47/0xfb0 [ 955.741914][T14236] kthread+0x38b/0x480 [ 955.741947][T14236] ? __pfx_worker_thread+0x10/0x10 [ 955.741973][T14236] ? __pfx_kthread+0x10/0x10 [ 955.742006][T14236] ret_from_fork+0x514/0xb70 [ 955.742042][T14236] ? __pfx_ret_from_fork+0x10/0x10 [ 955.742075][T14236] ? __switch_to+0xc89/0x1420 [ 955.742106][T14236] ? __pfx_kthread+0x10/0x10 [ 955.742139][T14236] ret_from_fork_asm+0x1a/0x30 [ 955.742192][T14236] [ 955.742222][T14236] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 955.884754][T21247] netlink: 'syz.2.4129': attribute type 13 has an invalid length. [ 955.893687][T14236] Bluetooth: hci1: failed to register connection device [ 956.093992][T14236] Bluetooth: hci2: command 0x0406 tx timeout [ 956.276716][T14236] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 956.305803][T21251] netlink: 'syz.1.4131': attribute type 13 has an invalid length. [ 956.332762][T14236] Bluetooth: hci1: command 0x0406 tx timeout [ 956.391594][T14236] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 956.419217][T21256] __nla_validate_parse: 8 callbacks suppressed [ 956.419257][T21256] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4133'. [ 956.664330][T21264] netlink: 'syz.0.4135': attribute type 13 has an invalid length. [ 956.935244][T14236] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 956.945881][T14236] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 956.956097][T14236] CPU: 0 UID: 0 PID: 14236 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 956.956128][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.956144][T14236] Workqueue: hci3 hci_rx_work [ 956.956173][T14236] Call Trace: [ 956.956182][T14236] [ 956.956192][T14236] dump_stack_lvl+0xe8/0x150 [ 956.956229][T14236] sysfs_create_dir_ns+0x271/0x2a0 [ 956.956281][T14236] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 956.956322][T14236] ? do_raw_spin_unlock+0xf5/0x200 [ 956.956357][T14236] kobject_add_internal+0x622/0xcd0 [ 956.956400][T14236] kobject_add+0x163/0x240 [ 956.956438][T14236] ? __pfx_kobject_add+0x10/0x10 [ 956.956475][T14236] ? get_device_parent+0x366/0x3a0 [ 956.956515][T14236] device_add+0x3fa/0xb80 [ 956.956551][T14236] hci_conn_add_sysfs+0xd5/0x210 [ 956.956579][T14236] le_conn_complete_evt+0xfb7/0x1690 [ 956.956619][T14236] ? le_conn_complete_evt+0x190/0x1690 [ 956.956654][T14236] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 956.956688][T14236] ? __mutex_unlock_slowpath+0x731/0x900 [ 956.956721][T14236] ? skb_pull_data+0xf0/0x200 [ 956.956771][T14236] hci_le_conn_complete_evt+0x187/0x470 [ 956.956810][T14236] hci_event_packet+0x67a/0xf10 [ 956.956835][T14236] ? kcov_remote_start+0x4ab/0x7c0 [ 956.956871][T14236] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 956.956900][T14236] ? __pfx_hci_event_packet+0x10/0x10 [ 956.956932][T14236] ? prune_tree_thread+0xa0/0x260 [ 956.956963][T14236] ? hci_send_to_monitor+0xe2/0x590 [ 956.957005][T14236] hci_rx_work+0x3ee/0x1020 [ 956.957039][T14236] ? process_scheduled_works+0xa1a/0x14c0 [ 956.957065][T14236] process_scheduled_works+0xa88/0x14c0 [ 956.957116][T14236] ? __pfx_process_scheduled_works+0x10/0x10 [ 956.957145][T14236] ? assign_work+0x3cf/0x5d0 [ 956.957173][T14236] worker_thread+0xa47/0xfb0 [ 956.957230][T14236] kthread+0x38b/0x480 [ 956.957273][T14236] ? __pfx_worker_thread+0x10/0x10 [ 956.957299][T14236] ? __pfx_kthread+0x10/0x10 [ 956.957334][T14236] ret_from_fork+0x514/0xb70 [ 956.957371][T14236] ? __pfx_ret_from_fork+0x10/0x10 [ 956.957404][T14236] ? __switch_to+0xc89/0x1420 [ 956.957436][T14236] ? __pfx_kthread+0x10/0x10 [ 956.957471][T14236] ret_from_fork_asm+0x1a/0x30 [ 956.957526][T14236] [ 956.957575][T14236] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 957.201387][T14236] Bluetooth: hci3: failed to register connection device [ 957.213692][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 957.372701][T14236] Bluetooth: hci4: command 0x0406 tx timeout [ 957.413597][T21271] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4138'. [ 957.452903][T20708] Bluetooth: hci5: command 0x0406 tx timeout [ 957.544108][T20708] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 957.552125][T20708] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 957.561866][T20708] CPU: 1 UID: 0 PID: 20708 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 957.561896][T20708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 957.561912][T20708] Workqueue: hci1 hci_rx_work [ 957.561941][T20708] Call Trace: [ 957.561950][T20708] [ 957.561959][T20708] dump_stack_lvl+0xe8/0x150 [ 957.561997][T20708] sysfs_create_dir_ns+0x271/0x2a0 [ 957.562039][T20708] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 957.562080][T20708] ? do_raw_spin_unlock+0xf5/0x200 [ 957.562115][T20708] kobject_add_internal+0x622/0xcd0 [ 957.562159][T20708] kobject_add+0x163/0x240 [ 957.562199][T20708] ? __pfx_kobject_add+0x10/0x10 [ 957.562240][T20708] ? get_device_parent+0x366/0x3a0 [ 957.562280][T20708] device_add+0x3fa/0xb80 [ 957.562317][T20708] hci_conn_add_sysfs+0xd5/0x210 [ 957.562346][T20708] le_conn_complete_evt+0xfb7/0x1690 [ 957.562386][T20708] ? le_conn_complete_evt+0x190/0x1690 [ 957.562425][T20708] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 957.562459][T20708] ? __mutex_unlock_slowpath+0x731/0x900 [ 957.562495][T20708] ? skb_pull_data+0xf0/0x200 [ 957.562529][T20708] hci_le_conn_complete_evt+0x187/0x470 [ 957.562571][T20708] hci_event_packet+0x67a/0xf10 [ 957.562609][T20708] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 957.562637][T20708] ? __pfx_hci_event_packet+0x10/0x10 [ 957.562671][T20708] ? prune_tree_thread+0xa0/0x260 [ 957.562713][T20708] ? hci_send_to_monitor+0xe2/0x590 [ 957.562754][T20708] hci_rx_work+0x3ee/0x1020 [ 957.562793][T20708] ? process_scheduled_works+0xa1a/0x14c0 [ 957.562821][T20708] process_scheduled_works+0xa88/0x14c0 [ 957.562890][T20708] ? __pfx_process_scheduled_works+0x10/0x10 [ 957.562928][T20708] ? assign_work+0x3cf/0x5d0 [ 957.562963][T20708] worker_thread+0xa47/0xfb0 [ 957.562995][T20708] ? __kthread_parkme+0xb9/0x1f0 [ 957.563039][T20708] ? __kthread_parkme+0x71/0x1f0 [ 957.563085][T20708] kthread+0x38b/0x480 [ 957.563120][T20708] ? __pfx_worker_thread+0x10/0x10 [ 957.563144][T20708] ? __pfx_kthread+0x10/0x10 [ 957.563181][T20708] ret_from_fork+0x514/0xb70 [ 957.563219][T20708] ? __pfx_ret_from_fork+0x10/0x10 [ 957.563252][T20708] ? __switch_to+0xc89/0x1420 [ 957.563286][T20708] ? __pfx_kthread+0x10/0x10 [ 957.563322][T20708] ret_from_fork_asm+0x1a/0x30 [ 957.563382][T20708] [ 957.600454][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4138'. [ 957.683424][T20708] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 957.683476][T20708] Bluetooth: hci1: failed to register connection device [ 957.857830][T21275] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4139'. [ 958.071640][T21279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4140'. [ 958.146340][T21275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4139'. [ 958.173178][T20708] Bluetooth: hci2: command 0x0406 tx timeout [ 958.288105][T20708] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 958.439206][T20708] Bluetooth: hci3: command 0x0406 tx timeout [ 958.445947][T20708] Bluetooth: hci1: command 0x0406 tx timeout [ 958.846629][T21294] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4144'. [ 958.875112][T21296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4145'. [ 959.023843][T21296] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4145'. [ 959.209566][T20708] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 959.218312][T20708] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 959.227862][T20708] CPU: 1 UID: 0 PID: 20708 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 959.227895][T20708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.227912][T20708] Workqueue: hci3 hci_rx_work [ 959.227942][T20708] Call Trace: [ 959.227952][T20708] [ 959.227962][T20708] dump_stack_lvl+0xe8/0x150 [ 959.228003][T20708] sysfs_create_dir_ns+0x271/0x2a0 [ 959.228047][T20708] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 959.228091][T20708] ? do_raw_spin_unlock+0xf5/0x200 [ 959.228137][T20708] kobject_add_internal+0x622/0xcd0 [ 959.228183][T20708] kobject_add+0x163/0x240 [ 959.228226][T20708] ? __pfx_kobject_add+0x10/0x10 [ 959.228268][T20708] ? get_device_parent+0x366/0x3a0 [ 959.228309][T20708] device_add+0x3fa/0xb80 [ 959.228347][T20708] hci_conn_add_sysfs+0xd5/0x210 [ 959.228379][T20708] le_conn_complete_evt+0xfb7/0x1690 [ 959.228419][T20708] ? le_conn_complete_evt+0x190/0x1690 [ 959.228455][T20708] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 959.228489][T20708] ? __mutex_unlock_slowpath+0x731/0x900 [ 959.228524][T20708] ? skb_pull_data+0xf0/0x200 [ 959.228557][T20708] hci_le_conn_complete_evt+0x187/0x470 [ 959.228599][T20708] hci_event_packet+0x67a/0xf10 [ 959.228637][T20708] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 959.228667][T20708] ? __pfx_hci_event_packet+0x10/0x10 [ 959.228701][T20708] ? prune_tree_thread+0xa0/0x260 [ 959.228736][T20708] ? hci_send_to_monitor+0xe2/0x590 [ 959.228777][T20708] hci_rx_work+0x3ee/0x1020 [ 959.228817][T20708] ? process_scheduled_works+0xa1a/0x14c0 [ 959.228846][T20708] process_scheduled_works+0xa88/0x14c0 [ 959.228916][T20708] ? __pfx_process_scheduled_works+0x10/0x10 [ 959.228956][T20708] ? assign_work+0x3cf/0x5d0 [ 959.228992][T20708] worker_thread+0xa47/0xfb0 [ 959.229024][T20708] ? __kthread_parkme+0xb9/0x1f0 [ 959.229070][T20708] ? __kthread_parkme+0x71/0x1f0 [ 959.229116][T20708] kthread+0x38b/0x480 [ 959.229161][T20708] ? __pfx_worker_thread+0x10/0x10 [ 959.229187][T20708] ? __pfx_kthread+0x10/0x10 [ 959.229222][T20708] ret_from_fork+0x514/0xb70 [ 959.229261][T20708] ? __pfx_ret_from_fork+0x10/0x10 [ 959.229294][T20708] ? __switch_to+0xc89/0x1420 [ 959.229328][T20708] ? __pfx_kthread+0x10/0x10 [ 959.229364][T20708] ret_from_fork_asm+0x1a/0x30 [ 959.229424][T20708] [ 959.229459][T20708] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 959.436093][T21293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4144'. [ 959.441402][T20708] Bluetooth: hci3: failed to register connection device [ 959.532850][T20708] Bluetooth: hci5: command 0x0406 tx timeout [ 959.625044][T20708] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 959.999009][T20708] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 960.197309][T21318] netlink: 'syz.0.4151': attribute type 2 has an invalid length. [ 960.266691][T20708] Bluetooth: hci2: command 0x0406 tx timeout [ 960.273640][T21318] netlink: 'syz.0.4151': attribute type 8 has an invalid length. [ 960.502534][T20708] Bluetooth: hci3: command 0x0406 tx timeout [ 960.508737][T20708] Bluetooth: hci1: command 0x0406 tx timeout [ 960.849737][T21329] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 960.858532][T21329] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 960.868389][T21329] CPU: 0 UID: 0 PID: 21329 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 960.868421][T21329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 960.868436][T21329] Workqueue: hci4 hci_rx_work [ 960.868486][T21329] Call Trace: [ 960.868495][T21329] [ 960.868505][T21329] dump_stack_lvl+0xe8/0x150 [ 960.868546][T21329] sysfs_create_dir_ns+0x271/0x2a0 [ 960.868589][T21329] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 960.868631][T21329] ? do_raw_spin_unlock+0xf5/0x200 [ 960.868668][T21329] kobject_add_internal+0x622/0xcd0 [ 960.868712][T21329] kobject_add+0x163/0x240 [ 960.868753][T21329] ? __pfx_kobject_add+0x10/0x10 [ 960.868794][T21329] ? get_device_parent+0x366/0x3a0 [ 960.868836][T21329] device_add+0x3fa/0xb80 [ 960.868876][T21329] hci_conn_add_sysfs+0xd5/0x210 [ 960.868906][T21329] le_conn_complete_evt+0xfb7/0x1690 [ 960.868947][T21329] ? le_conn_complete_evt+0x190/0x1690 [ 960.868983][T21329] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 960.869028][T21329] ? __mutex_unlock_slowpath+0x731/0x900 [ 960.869063][T21329] ? skb_pull_data+0xf0/0x200 [ 960.869096][T21329] hci_le_conn_complete_evt+0x187/0x470 [ 960.869138][T21329] hci_event_packet+0x67a/0xf10 [ 960.869174][T21329] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 960.869204][T21329] ? __pfx_hci_event_packet+0x10/0x10 [ 960.869237][T21329] ? prune_tree_thread+0xa0/0x260 [ 960.869271][T21329] ? hci_send_to_monitor+0xe2/0x590 [ 960.869311][T21329] hci_rx_work+0x3ee/0x1020 [ 960.869351][T21329] ? process_scheduled_works+0xa1a/0x14c0 [ 960.869379][T21329] process_scheduled_works+0xa88/0x14c0 [ 960.869450][T21329] ? __pfx_process_scheduled_works+0x10/0x10 [ 960.869489][T21329] ? assign_work+0x3cf/0x5d0 [ 960.869524][T21329] worker_thread+0xa47/0xfb0 [ 960.869555][T21329] ? __kthread_parkme+0xb9/0x1f0 [ 960.869598][T21329] ? __kthread_parkme+0x71/0x1f0 [ 960.869635][T21329] kthread+0x38b/0x480 [ 960.869663][T21329] ? __pfx_worker_thread+0x10/0x10 [ 960.869684][T21329] ? __pfx_kthread+0x10/0x10 [ 960.869714][T21329] ret_from_fork+0x514/0xb70 [ 960.869745][T21329] ? __pfx_ret_from_fork+0x10/0x10 [ 960.869778][T21329] ? __switch_to+0xc89/0x1420 [ 960.869809][T21329] ? __pfx_kthread+0x10/0x10 [ 960.869842][T21329] ret_from_fork_asm+0x1a/0x30 [ 960.869904][T21329] [ 960.869955][T21329] kobject: kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 961.110534][T21329] Bluetooth: hci4: failed to register connection device [ 961.151847][T21332] netlink: 'syz.1.4156': attribute type 13 has an invalid length. [ 961.157276][T21329] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 961.612633][T21329] Bluetooth: hci5: command 0x0406 tx timeout [ 961.695603][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 962.025216][T21358] netlink: 'syz.0.4163': attribute type 2 has an invalid length. [ 962.048361][T21358] netlink: 'syz.0.4163': attribute type 8 has an invalid length. [ 962.071369][T21365] __nla_validate_parse: 3 callbacks suppressed [ 962.071394][T21365] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4164'. [ 962.089285][T21358] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4163'. [ 962.335697][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 962.337267][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 962.386423][T21365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4164'. [ 962.412008][T21370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4165'. [ 962.563241][T21370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4165'. [ 962.572897][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 962.572995][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 962.683207][T21375] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4166'. [ 962.700316][T21370] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4165'. [ 962.752786][T21377] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4167'. [ 962.819674][T21375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4166'. [ 962.820963][T21379] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4168'. [ 963.695980][ T5614] Bluetooth: hci5: command 0x0406 tx timeout [ 963.792121][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 963.961483][T21329] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 963.970041][T21329] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 963.980231][T21329] CPU: 0 UID: 0 PID: 21329 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 963.980260][T21329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 963.980276][T21329] Workqueue: hci3 hci_rx_work [ 963.980304][T21329] Call Trace: [ 963.980313][T21329] [ 963.980323][T21329] dump_stack_lvl+0xe8/0x150 [ 963.980360][T21329] sysfs_create_dir_ns+0x271/0x2a0 [ 963.980403][T21329] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 963.980447][T21329] ? do_raw_spin_unlock+0xf5/0x200 [ 963.980483][T21329] kobject_add_internal+0x622/0xcd0 [ 963.980527][T21329] kobject_add+0x163/0x240 [ 963.980567][T21329] ? __pfx_kobject_add+0x10/0x10 [ 963.980608][T21329] ? get_device_parent+0x366/0x3a0 [ 963.980651][T21329] device_add+0x3fa/0xb80 [ 963.980699][T21329] hci_conn_add_sysfs+0xd5/0x210 [ 963.980730][T21329] le_conn_complete_evt+0xfb7/0x1690 [ 963.980771][T21329] ? le_conn_complete_evt+0x190/0x1690 [ 963.980807][T21329] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 963.980843][T21329] ? __mutex_unlock_slowpath+0x731/0x900 [ 963.980880][T21329] ? skb_pull_data+0xf0/0x200 [ 963.980914][T21329] hci_le_conn_complete_evt+0x187/0x470 [ 963.980958][T21329] hci_event_packet+0x67a/0xf10 [ 963.980990][T21329] ? kcov_remote_start+0x4ab/0x7c0 [ 963.981029][T21329] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 963.981058][T21329] ? __pfx_hci_event_packet+0x10/0x10 [ 963.981091][T21329] ? prune_tree_thread+0xa0/0x260 [ 963.981123][T21329] ? hci_send_to_monitor+0xe2/0x590 [ 963.981161][T21329] hci_rx_work+0x3ee/0x1020 [ 963.981200][T21329] ? process_scheduled_works+0xa1a/0x14c0 [ 963.981229][T21329] process_scheduled_works+0xa88/0x14c0 [ 963.981299][T21329] ? __pfx_process_scheduled_works+0x10/0x10 [ 963.981337][T21329] ? assign_work+0x3cf/0x5d0 [ 963.981374][T21329] worker_thread+0xa47/0xfb0 [ 963.981406][T21329] ? __kthread_parkme+0xb9/0x1f0 [ 963.981451][T21329] ? __kthread_parkme+0x71/0x1f0 [ 963.981497][T21329] kthread+0x38b/0x480 [ 963.981533][T21329] ? __pfx_worker_thread+0x10/0x10 [ 963.981559][T21329] ? __pfx_kthread+0x10/0x10 [ 963.981596][T21329] ret_from_fork+0x514/0xb70 [ 963.981635][T21329] ? __pfx_ret_from_fork+0x10/0x10 [ 963.981671][T21329] ? __switch_to+0xc89/0x1420 [ 963.981714][T21329] ? __pfx_kthread+0x10/0x10 [ 963.981751][T21329] ret_from_fork_asm+0x1a/0x30 [ 963.981811][T21329] [ 963.981876][T21329] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 964.229669][T21329] Bluetooth: hci3: failed to register connection device [ 964.413773][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 964.652965][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 964.655362][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 964.909811][ T5614] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 965.772842][ T5614] Bluetooth: hci5: command 0x0406 tx timeout [ 965.852635][ T5614] Bluetooth: hci4: command 0x0406 tx timeout [ 966.512163][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 966.732840][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 966.736731][T21329] Bluetooth: hci3: command 0x0406 tx timeout [ 967.932717][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 967.976517][T21479] __nla_validate_parse: 6 callbacks suppressed [ 967.976537][T21479] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4195'. [ 968.144590][T21483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4195'. [ 968.573294][T14236] Bluetooth: hci2: command 0x0406 tx timeout [ 968.812910][T14236] Bluetooth: hci3: command 0x0406 tx timeout [ 968.819198][T14547] Bluetooth: hci1: command 0x0406 tx timeout [ 969.325423][T21492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4198'. [ 970.012891][T14370] Bluetooth: hci4: command 0x0406 tx timeout [ 970.320223][T21509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4201'. [ 970.334762][T21512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4203'. [ 970.420372][T21514] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4204'. [ 970.654593][T21329] Bluetooth: hci2: command 0x0406 tx timeout [ 970.893369][T21329] Bluetooth: hci1: command 0x0406 tx timeout [ 970.899497][T14370] Bluetooth: hci3: command 0x0406 tx timeout [ 970.936850][T21527] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4206'. [ 971.283819][T21527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4206'. [ 971.467718][T21538] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4209'. [ 971.708420][T21542] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4210'. [ 972.011482][T21546] netlink: 'syz.3.4212': attribute type 13 has an invalid length. [ 972.093450][T21329] Bluetooth: hci4: command 0x0406 tx timeout [ 972.973304][T21329] Bluetooth: hci3: command 0x0406 tx timeout [ 975.052518][T21329] Bluetooth: hci3: command 0x0406 tx timeout [ 977.075468][T21608] __nla_validate_parse: 2 callbacks suppressed [ 977.075494][T21608] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4228'. [ 977.132679][T21329] Bluetooth: hci3: command 0x0406 tx timeout [ 977.174602][T21608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4228'. [ 977.448654][T21613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4229'. [ 978.125610][T21622] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4232'. [ 978.252386][T21626] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4233'. [ 980.420572][T21654] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4242'. [ 980.558177][T21654] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4242'. [ 980.828240][T21664] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4245'. [ 980.941150][T21664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4245'. [ 981.060179][T21669] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4246'. [ 982.083648][T21679] sctp: [Deprecated]: syz.2.4250 (pid 21679) Use of int in maxseg socket option. [ 982.083648][T21679] Use struct sctp_assoc_value instead [ 982.629706][T21685] __nla_validate_parse: 2 callbacks suppressed [ 982.629758][T21685] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4252'. [ 983.384395][T21693] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4254'. [ 983.604343][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4254'. [ 987.002365][T21740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4266'. [ 988.955194][T21761] sctp: [Deprecated]: syz.3.4270 (pid 21761) Use of int in maxseg socket option. [ 988.955194][T21761] Use struct sctp_assoc_value instead [ 989.209059][T21753] Set syz0 is full, maxelem 65536 reached [ 989.389168][T21772] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4273'. [ 990.610007][T21801] sctp: [Deprecated]: syz.1.4280 (pid 21801) Use of int in maxseg socket option. [ 990.610007][T21801] Use struct sctp_assoc_value instead [ 991.273426][T21824] sctp: [Deprecated]: syz.1.4286 (pid 21824) Use of int in maxseg socket option. [ 991.273426][T21824] Use struct sctp_assoc_value instead [ 991.389150][T21820] sctp: [Deprecated]: syz.5.4285 (pid 21820) Use of int in maxseg socket option. [ 991.389150][T21820] Use struct sctp_assoc_value instead [ 992.316366][T21329] Bluetooth: hci1: unexpected event 0x1c length: 151 > 5 [ 992.386124][T21818] Set syz0 is full, maxelem 65536 reached [ 992.566352][T21840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4292'. [ 993.060138][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.067793][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.209830][T21881] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4300'. [ 995.828709][T21329] Bluetooth: hci2: unexpected event 0x1c length: 151 > 5 [ 997.478686][T21913] sctp: [Deprecated]: syz.2.4309 (pid 21913) Use of int in maxseg socket option. [ 997.478686][T21913] Use struct sctp_assoc_value instead [ 997.598485][T21908] Set syz0 is full, maxelem 65536 reached [ 998.843730][T21923] Set syz0 is full, maxelem 65536 reached [ 998.978199][T21935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4314'. [ 998.998780][T21935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4314'. [ 999.092593][T21329] Bluetooth: hci1: unexpected event 0x1c length: 151 > 5 [ 999.664091][T21953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4319'. [ 1000.268683][T21329] Bluetooth: hci1: unexpected subevent 0x1a length: 150 > 6 [ 1000.466792][T21963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4324'. [ 1000.822527][T21944] Set syz0 is full, maxelem 65536 reached [ 1001.076616][T21973] netlink: 'syz.1.4325': attribute type 2 has an invalid length. [ 1001.100489][T21973] netlink: 'syz.1.4325': attribute type 8 has an invalid length. [ 1001.126286][T21973] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4325'. [ 1003.198611][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4333'. [ 1003.306566][T22007] netlink: 'syz.1.4334': attribute type 13 has an invalid length. [ 1003.910947][T21990] Set syz0 is full, maxelem 65536 reached [ 1005.161967][T22036] sctp: [Deprecated]: syz.0.4341 (pid 22036) Use of int in maxseg socket option. [ 1005.161967][T22036] Use struct sctp_assoc_value instead [ 1007.504629][T22065] netlink: 'syz.5.4348': attribute type 13 has an invalid length. [ 1008.344757][T22076] netlink: 'syz.0.4350': attribute type 13 has an invalid length. [ 1008.608149][T22083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4352'. [ 1010.351471][T21329] Bluetooth: hci4: unexpected subevent 0x1a length: 150 > 6 [ 1012.022310][T22117] Set syz0 is full, maxelem 65536 reached [ 1012.406493][T22126] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4364'. [ 1012.832241][T21329] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 1013.610990][T22142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4368'. [ 1014.918429][T22162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4373'. [ 1015.065249][T22165] netlink: 'syz.1.4374': attribute type 13 has an invalid length. [ 1015.654931][T22175] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4378'. [ 1017.987515][T22233] FAULT_INJECTION: forcing a failure. [ 1017.987515][T22233] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1018.008278][T22232] netlink: 'syz.5.4389': attribute type 13 has an invalid length. [ 1018.017049][T22233] CPU: 1 UID: 0 PID: 22233 Comm: syz.3.4392 Not tainted syzkaller #0 PREEMPT(full) [ 1018.017078][T22233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1018.017093][T22233] Call Trace: [ 1018.017102][T22233] [ 1018.017112][T22233] dump_stack_lvl+0xe8/0x150 [ 1018.017149][T22233] should_fail_ex+0x410/0x560 [ 1018.017294][T22233] _copy_from_user+0x2d/0xb0 [ 1018.017354][T22233] __sys_bpf+0x2e7/0xd90 [ 1018.017395][T22233] ? __pfx___sys_bpf+0x10/0x10 [ 1018.017437][T22233] ? __fget_files+0x2a/0x420 [ 1018.017483][T22233] ? ksys_write+0x242/0x270 [ 1018.017520][T22233] ? __pfx_ksys_write+0x10/0x10 [ 1018.017557][T22233] __x64_sys_bpf+0xba/0xd0 [ 1018.017588][T22233] do_syscall_64+0x166/0x520 [ 1018.017666][T22233] ? trace_irq_disable+0x3b/0x140 [ 1018.017694][T22233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.017716][T22233] ? clear_bhb_loop+0x70/0xc0 [ 1018.017743][T22233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.017766][T22233] RIP: 0033:0x7fdd7d59e0d9 [ 1018.017793][T22233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.017812][T22233] RSP: 002b:00007fdd7e47f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1018.017836][T22233] RAX: ffffffffffffffda RBX: 00007fdd7d825fa0 RCX: 00007fdd7d59e0d9 [ 1018.017852][T22233] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 1018.017867][T22233] RBP: 00007fdd7e47f090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.017887][T22233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.017901][T22233] R13: 00007fdd7d826038 R14: 00007fdd7d825fa0 R15: 00007ffd79545bb8 [ 1018.017934][T22233] [ 1018.220817][T22234] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4390'. [ 1018.268059][T22241] netlink: 'syz.3.4394': attribute type 13 has an invalid length. [ 1018.842742][T22249] Set syz0 is full, maxelem 65536 reached [ 1019.395848][T22265] netlink: 'syz.5.4403': attribute type 1 has an invalid length. [ 1019.616133][T22276] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4407'. [ 1019.651598][T22278] netlink: 'syz.1.4402': attribute type 7 has an invalid length. [ 1019.675429][T22278] netlink: 'syz.1.4402': attribute type 8 has an invalid length. [ 1019.889292][T22284] FAULT_INJECTION: forcing a failure. [ 1019.889292][T22284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.915442][T22284] CPU: 1 UID: 0 PID: 22284 Comm: syz.2.4410 Not tainted syzkaller #0 PREEMPT(full) [ 1019.915475][T22284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1019.915490][T22284] Call Trace: [ 1019.915500][T22284] [ 1019.915510][T22284] dump_stack_lvl+0xe8/0x150 [ 1019.915549][T22284] should_fail_ex+0x410/0x560 [ 1019.915591][T22284] _copy_from_user+0x2d/0xb0 [ 1019.915618][T22284] ___sys_sendmsg+0x1c6/0x360 [ 1019.915736][T22284] ? __lock_acquire+0x683/0x2cf0 [ 1019.915775][T22284] ? __pfx____sys_sendmsg+0x10/0x10 [ 1019.915858][T22284] ? __fget_files+0x2a/0x420 [ 1019.915888][T22284] ? __fget_files+0x3a2/0x420 [ 1019.915933][T22284] __x64_sys_sendmsg+0x1b1/0x290 [ 1019.915973][T22284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1019.916036][T22284] do_syscall_64+0x166/0x520 [ 1019.916063][T22284] ? trace_irq_disable+0x3b/0x140 [ 1019.916092][T22284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.916116][T22284] ? clear_bhb_loop+0x70/0xc0 [ 1019.916145][T22284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.916176][T22284] RIP: 0033:0x7f60fcb9e0d9 [ 1019.916198][T22284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.916218][T22284] RSP: 002b:00007f60fd9c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.916241][T22284] RAX: ffffffffffffffda RBX: 00007f60fce25fa0 RCX: 00007f60fcb9e0d9 [ 1019.916258][T22284] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1019.916272][T22284] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.916287][T22284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.916300][T22284] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1019.916340][T22284] [ 1020.107683][T22295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.115634][T22295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.124014][T22295] bridge0: entered allmulticast mode [ 1020.258896][T22298] FAULT_INJECTION: forcing a failure. [ 1020.258896][T22298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.323820][T22298] CPU: 0 UID: 0 PID: 22298 Comm: syz.2.4413 Not tainted syzkaller #0 PREEMPT(full) [ 1020.323853][T22298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1020.323868][T22298] Call Trace: [ 1020.323877][T22298] [ 1020.323887][T22298] dump_stack_lvl+0xe8/0x150 [ 1020.323924][T22298] should_fail_ex+0x410/0x560 [ 1020.323963][T22298] _copy_from_user+0x2d/0xb0 [ 1020.323989][T22298] ___sys_sendmsg+0x1c6/0x360 [ 1020.324026][T22298] ? __lock_acquire+0x683/0x2cf0 [ 1020.324064][T22298] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.324143][T22298] ? __fget_files+0x2a/0x420 [ 1020.324173][T22298] ? __fget_files+0x3a2/0x420 [ 1020.324213][T22298] __x64_sys_sendmsg+0x1b1/0x290 [ 1020.324251][T22298] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1020.324308][T22298] do_syscall_64+0x166/0x520 [ 1020.324335][T22298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.324358][T22298] ? clear_bhb_loop+0x70/0xc0 [ 1020.324386][T22298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.324409][T22298] RIP: 0033:0x7f60fcb9e0d9 [ 1020.324431][T22298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1020.324451][T22298] RSP: 002b:00007f60fd9c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1020.324474][T22298] RAX: ffffffffffffffda RBX: 00007f60fce25fa0 RCX: 00007f60fcb9e0d9 [ 1020.324491][T22298] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 1020.324506][T22298] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.324520][T22298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.324534][T22298] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1020.324569][T22298] [ 1020.394442][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4415'. [ 1020.548583][T22303] netlink: 59 bytes leftover after parsing attributes in process `syz.5.4415'. [ 1020.589021][T22301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4415'. [ 1020.629192][T22301] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4415'. [ 1021.213595][T22321] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4421'. [ 1021.364111][T22325] netlink: 'syz.3.4420': attribute type 2 has an invalid length. [ 1021.371966][T22325] netlink: 'syz.3.4420': attribute type 8 has an invalid length. [ 1021.379764][T22325] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4420'. [ 1021.450450][T22329] FAULT_INJECTION: forcing a failure. [ 1021.450450][T22329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1021.492769][T22329] CPU: 0 UID: 0 PID: 22329 Comm: syz.5.4424 Not tainted syzkaller #0 PREEMPT(full) [ 1021.492802][T22329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1021.492816][T22329] Call Trace: [ 1021.492826][T22329] [ 1021.492836][T22329] dump_stack_lvl+0xe8/0x150 [ 1021.492874][T22329] should_fail_ex+0x410/0x560 [ 1021.492914][T22329] _copy_from_user+0x2d/0xb0 [ 1021.492938][T22329] __sys_bpf+0x2e7/0xd90 [ 1021.492977][T22329] ? __pfx___sys_bpf+0x10/0x10 [ 1021.493019][T22329] ? __fget_files+0x2a/0x420 [ 1021.493065][T22329] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1021.493091][T22329] ? ksys_write+0x242/0x270 [ 1021.493121][T22329] ? __pfx_ksys_write+0x10/0x10 [ 1021.493154][T22329] __x64_sys_bpf+0xba/0xd0 [ 1021.493181][T22329] do_syscall_64+0x166/0x520 [ 1021.493204][T22329] ? trace_irq_disable+0x3b/0x140 [ 1021.493227][T22329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.493247][T22329] ? clear_bhb_loop+0x70/0xc0 [ 1021.493273][T22329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.493294][T22329] RIP: 0033:0x7f2ab839e0d9 [ 1021.493315][T22329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.493332][T22329] RSP: 002b:00007f2ab91a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1021.493354][T22329] RAX: ffffffffffffffda RBX: 00007f2ab8625fa0 RCX: 00007f2ab839e0d9 [ 1021.493370][T22329] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 1021.493383][T22329] RBP: 00007f2ab91a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.493396][T22329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.493410][T22329] R13: 00007f2ab8626038 R14: 00007f2ab8625fa0 R15: 00007ffffbd34548 [ 1021.493442][T22329] [ 1021.877729][T22339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4427'. [ 1022.802088][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4430'. [ 1022.886525][T22349] netlink: 'syz.1.4432': attribute type 2 has an invalid length. [ 1022.898961][T22349] netlink: 'syz.1.4432': attribute type 8 has an invalid length. [ 1022.908354][T22349] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4432'. [ 1024.080211][T22380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4439'. [ 1024.290138][T22386] FAULT_INJECTION: forcing a failure. [ 1024.290138][T22386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1024.303649][T22386] CPU: 0 UID: 0 PID: 22386 Comm: syz.2.4442 Not tainted syzkaller #0 PREEMPT(full) [ 1024.303679][T22386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1024.303693][T22386] Call Trace: [ 1024.303703][T22386] [ 1024.303712][T22386] dump_stack_lvl+0xe8/0x150 [ 1024.303749][T22386] should_fail_ex+0x410/0x560 [ 1024.303787][T22386] _copy_from_user+0x2d/0xb0 [ 1024.303812][T22386] __sys_bpf+0x2e7/0xd90 [ 1024.303853][T22386] ? __pfx___sys_bpf+0x10/0x10 [ 1024.303915][T22386] ? __fget_files+0x2a/0x420 [ 1024.303965][T22386] ? ksys_write+0x242/0x270 [ 1024.304001][T22386] ? __pfx_ksys_write+0x10/0x10 [ 1024.304041][T22386] __x64_sys_bpf+0xba/0xd0 [ 1024.304074][T22386] do_syscall_64+0x166/0x520 [ 1024.304099][T22386] ? trace_irq_disable+0x3b/0x140 [ 1024.304128][T22386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.304151][T22386] ? clear_bhb_loop+0x70/0xc0 [ 1024.304179][T22386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.304202][T22386] RIP: 0033:0x7f60fcb9e0d9 [ 1024.304224][T22386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1024.304243][T22386] RSP: 002b:00007f60fd9c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1024.304268][T22386] RAX: ffffffffffffffda RBX: 00007f60fce25fa0 RCX: 00007f60fcb9e0d9 [ 1024.304292][T22386] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 000000000000000a [ 1024.304307][T22386] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.304321][T22386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.304335][T22386] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1024.304371][T22386] [ 1025.328052][T22402] netlink: 'syz.5.4448': attribute type 28 has an invalid length. [ 1025.336050][T22402] netlink: 'syz.5.4448': attribute type 3 has an invalid length. [ 1026.593047][T22424] FAULT_INJECTION: forcing a failure. [ 1026.593047][T22424] name failslab, interval 1, probability 0, space 0, times 1 [ 1026.624489][T22424] CPU: 0 UID: 0 PID: 22424 Comm: syz.3.4452 Not tainted syzkaller #0 PREEMPT(full) [ 1026.624525][T22424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1026.624540][T22424] Call Trace: [ 1026.624549][T22424] [ 1026.624567][T22424] dump_stack_lvl+0xe8/0x150 [ 1026.624606][T22424] should_fail_ex+0x410/0x560 [ 1026.624645][T22424] should_failslab+0xa8/0x100 [ 1026.624679][T22424] __kmalloc_noprof+0xfe/0x720 [ 1026.624706][T22424] ? vfs_write+0x22b/0xba0 [ 1026.624739][T22424] ? kernfs_fop_write_iter+0x157/0x540 [ 1026.624765][T22424] ? kernfs_fop_write_iter+0x157/0x540 [ 1026.624801][T22424] kernfs_fop_write_iter+0x157/0x540 [ 1026.624837][T22424] vfs_write+0x612/0xba0 [ 1026.624879][T22424] ? __pfx_vfs_write+0x10/0x10 [ 1026.624923][T22424] ? __fget_files+0x2a/0x420 [ 1026.624964][T22424] ksys_write+0x150/0x270 [ 1026.625000][T22424] ? __pfx_ksys_write+0x10/0x10 [ 1026.625046][T22424] do_syscall_64+0x166/0x520 [ 1026.625073][T22424] ? trace_irq_disable+0x3b/0x140 [ 1026.625101][T22424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.625123][T22424] ? clear_bhb_loop+0x70/0xc0 [ 1026.625149][T22424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.625170][T22424] RIP: 0033:0x7fdd7d59e0d9 [ 1026.625191][T22424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.625211][T22424] RSP: 002b:00007fdd7e47f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1026.625246][T22424] RAX: ffffffffffffffda RBX: 00007fdd7d825fa0 RCX: 00007fdd7d59e0d9 [ 1026.625263][T22424] RDX: 000000000000000a RSI: 00002000000004c0 RDI: 0000000000000004 [ 1026.625295][T22424] RBP: 00007fdd7e47f090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.625309][T22424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.625323][T22424] R13: 00007fdd7d826038 R14: 00007fdd7d825fa0 R15: 00007ffd79545bb8 [ 1026.625357][T22424] [ 1026.664523][T22428] __nla_validate_parse: 2 callbacks suppressed [ 1026.664570][T22428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1026.884176][T22428] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1027.054439][T22435] FAULT_INJECTION: forcing a failure. [ 1027.054439][T22435] name failslab, interval 1, probability 0, space 0, times 0 [ 1027.113897][T22440] FAULT_INJECTION: forcing a failure. [ 1027.113897][T22440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.135861][T22435] CPU: 0 UID: 0 PID: 22435 Comm: syz.0.4455 Not tainted syzkaller #0 PREEMPT(full) [ 1027.135894][T22435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1027.135908][T22435] Call Trace: [ 1027.135919][T22435] [ 1027.135931][T22435] dump_stack_lvl+0xe8/0x150 [ 1027.135978][T22435] should_fail_ex+0x410/0x560 [ 1027.136038][T22435] should_failslab+0xa8/0x100 [ 1027.136083][T22435] __kmalloc_noprof+0xfe/0x720 [ 1027.136115][T22435] ? rcu_is_watching+0x16/0xb0 [ 1027.136143][T22435] ? tomoyo_realpath_from_path+0xef/0x640 [ 1027.136255][T22435] ? tomoyo_realpath_from_path+0xef/0x640 [ 1027.136310][T22435] tomoyo_realpath_from_path+0xef/0x640 [ 1027.136374][T22435] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1027.136442][T22435] tomoyo_path_number_perm+0x246/0x5f0 [ 1027.136499][T22435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1027.136540][T22435] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1027.136629][T22435] ? hook_file_ioctl+0x1f0/0x5f0 [ 1027.136802][T22435] ? __fget_files+0x2a/0x420 [ 1027.136847][T22435] ? __fget_files+0x2a/0x420 [ 1027.136879][T22435] ? __fget_files+0x3a2/0x420 [ 1027.136911][T22435] ? __fget_files+0x2a/0x420 [ 1027.136979][T22435] security_file_ioctl+0xc3/0x2a0 [ 1027.137079][T22435] __se_sys_ioctl+0x47/0x170 [ 1027.137120][T22435] do_syscall_64+0x166/0x520 [ 1027.137149][T22435] ? trace_irq_disable+0x3b/0x140 [ 1027.137180][T22435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.137208][T22435] ? clear_bhb_loop+0x70/0xc0 [ 1027.137249][T22435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.137275][T22435] RIP: 0033:0x7f1d2439e0d9 [ 1027.137302][T22435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.137322][T22435] RSP: 002b:00007f1d25349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1027.137345][T22435] RAX: ffffffffffffffda RBX: 00007f1d24625fa0 RCX: 00007f1d2439e0d9 [ 1027.137362][T22435] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000005 [ 1027.137376][T22435] RBP: 00007f1d25349090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.137391][T22435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.137403][T22435] R13: 00007f1d24626038 R14: 00007f1d24625fa0 R15: 00007ffde55769c8 [ 1027.137488][T22435] [ 1027.138181][T22435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1027.240277][T22440] CPU: 1 UID: 0 PID: 22440 Comm: syz.2.4457 Not tainted syzkaller #0 PREEMPT(full) [ 1027.240308][T22440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1027.240323][T22440] Call Trace: [ 1027.240333][T22440] [ 1027.240343][T22440] dump_stack_lvl+0xe8/0x150 [ 1027.240381][T22440] should_fail_ex+0x410/0x560 [ 1027.240423][T22440] _copy_from_user+0x2d/0xb0 [ 1027.240451][T22440] ___sys_sendmsg+0x1c6/0x360 [ 1027.240486][T22440] ? __lock_acquire+0x683/0x2cf0 [ 1027.240526][T22440] ? __pfx____sys_sendmsg+0x10/0x10 [ 1027.240593][T22440] ? __fget_files+0x2a/0x420 [ 1027.240641][T22440] ? __fget_files+0x2a/0x420 [ 1027.240671][T22440] ? __fget_files+0x3a2/0x420 [ 1027.240718][T22440] __x64_sys_sendmsg+0x1b1/0x290 [ 1027.240758][T22440] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1027.240823][T22440] do_syscall_64+0x166/0x520 [ 1027.240849][T22440] ? trace_irq_disable+0x3b/0x140 [ 1027.240880][T22440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.240905][T22440] ? clear_bhb_loop+0x70/0xc0 [ 1027.240935][T22440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.240959][T22440] RIP: 0033:0x7f60fcb9e0d9 [ 1027.240988][T22440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.241009][T22440] RSP: 002b:00007f60fd9c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1027.241033][T22440] RAX: ffffffffffffffda RBX: 00007f60fce25fa0 RCX: 00007f60fcb9e0d9 [ 1027.241050][T22440] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1027.241065][T22440] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.241080][T22440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1027.241094][T22440] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1027.241134][T22440] [ 1027.825141][T22442] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4456'. [ 1027.841088][T22438] netlink: 'syz.5.4458': attribute type 21 has an invalid length. [ 1027.904900][T22425] Set syz0 is full, maxelem 65536 reached [ 1028.005593][T22454] FAULT_INJECTION: forcing a failure. [ 1028.005593][T22454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.057115][T22454] CPU: 1 UID: 0 PID: 22454 Comm: syz.0.4460 Not tainted syzkaller #0 PREEMPT(full) [ 1028.057146][T22454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1028.057160][T22454] Call Trace: [ 1028.057187][T22454] [ 1028.057198][T22454] dump_stack_lvl+0xe8/0x150 [ 1028.057237][T22454] should_fail_ex+0x410/0x560 [ 1028.057280][T22454] _copy_from_user+0x2d/0xb0 [ 1028.057307][T22454] do_tcp_setsockopt+0x504/0x1f80 [ 1028.057467][T22454] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1028.057501][T22454] ? __pfx___mutex_lock+0x10/0x10 [ 1028.057543][T22454] ? aa_sk_perm+0x6e0/0x910 [ 1028.057622][T22454] ? sock_common_setsockopt+0x36/0xc0 [ 1028.057673][T22454] ? tcp_setsockopt+0x3d/0xe0 [ 1028.057702][T22454] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1028.057733][T22454] smc_setsockopt+0x232/0xb00 [ 1028.057796][T22454] ? __pfx_smc_setsockopt+0x10/0x10 [ 1028.057825][T22454] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1028.057847][T22454] ? __pfx_smc_setsockopt+0x10/0x10 [ 1028.057874][T22454] do_sock_setsockopt+0x17c/0x1b0 [ 1028.057924][T22454] __x64_sys_setsockopt+0x13d/0x1b0 [ 1028.057965][T22454] do_syscall_64+0x166/0x520 [ 1028.057990][T22454] ? trace_irq_disable+0x3b/0x140 [ 1028.058019][T22454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.058042][T22454] ? clear_bhb_loop+0x70/0xc0 [ 1028.058071][T22454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.058094][T22454] RIP: 0033:0x7f1d2439e0d9 [ 1028.058114][T22454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.058132][T22454] RSP: 002b:00007f1d25328028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1028.058154][T22454] RAX: ffffffffffffffda RBX: 00007f1d24626090 RCX: 00007f1d2439e0d9 [ 1028.058169][T22454] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000007 [ 1028.058182][T22454] RBP: 00007f1d25328090 R08: 0000000000000004 R09: 0000000000000000 [ 1028.058195][T22454] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1028.058209][T22454] R13: 00007f1d24626128 R14: 00007f1d24626090 R15: 00007ffde55769c8 [ 1028.058248][T22454] [ 1028.432768][T22459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4464'. [ 1028.627004][T22464] FAULT_INJECTION: forcing a failure. [ 1028.627004][T22464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.650339][T22464] CPU: 1 UID: 0 PID: 22464 Comm: syz.2.4466 Not tainted syzkaller #0 PREEMPT(full) [ 1028.650372][T22464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1028.650386][T22464] Call Trace: [ 1028.650396][T22464] [ 1028.650407][T22464] dump_stack_lvl+0xe8/0x150 [ 1028.650446][T22464] should_fail_ex+0x410/0x560 [ 1028.650489][T22464] _copy_to_user+0x31/0xb0 [ 1028.650519][T22464] simple_read_from_buffer+0xe1/0x170 [ 1028.650559][T22464] proc_fail_nth_read+0x1bb/0x230 [ 1028.650600][T22464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1028.650641][T22464] ? rw_verify_area+0x24a/0x4c0 [ 1028.650678][T22464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1028.650714][T22464] vfs_read+0x213/0xa80 [ 1028.650761][T22464] ? __pfx___mutex_lock+0x10/0x10 [ 1028.650790][T22464] ? __pfx_vfs_read+0x10/0x10 [ 1028.650826][T22464] ? __fget_files+0x2a/0x420 [ 1028.650864][T22464] ? __fget_files+0x3a2/0x420 [ 1028.650894][T22464] ? __fget_files+0x2a/0x420 [ 1028.650938][T22464] ksys_read+0x150/0x270 [ 1028.650976][T22464] ? __pfx_ksys_read+0x10/0x10 [ 1028.651027][T22464] do_syscall_64+0x166/0x520 [ 1028.651053][T22464] ? trace_irq_disable+0x3b/0x140 [ 1028.651083][T22464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.651107][T22464] ? clear_bhb_loop+0x70/0xc0 [ 1028.651137][T22464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.651160][T22464] RIP: 0033:0x7f60fcb5e90e [ 1028.651183][T22464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1028.651203][T22464] RSP: 002b:00007f60fd9bffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1028.651227][T22464] RAX: ffffffffffffffda RBX: 00007f60fd9c06c0 RCX: 00007f60fcb5e90e [ 1028.651244][T22464] RDX: 000000000000000f RSI: 00007f60fd9c00a0 RDI: 0000000000000004 [ 1028.651258][T22464] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.651273][T22464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.651287][T22464] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1028.651337][T22464] [ 1029.212037][T22473] FAULT_INJECTION: forcing a failure. [ 1029.212037][T22473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1029.369559][T22473] CPU: 0 UID: 0 PID: 22473 Comm: syz.2.4469 Not tainted syzkaller #0 PREEMPT(full) [ 1029.369593][T22473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1029.369608][T22473] Call Trace: [ 1029.369618][T22473] [ 1029.369629][T22473] dump_stack_lvl+0xe8/0x150 [ 1029.369668][T22473] should_fail_ex+0x410/0x560 [ 1029.369711][T22473] _copy_to_user+0x31/0xb0 [ 1029.369740][T22473] bpf_prog_test_run_raw_tp+0x604/0x840 [ 1029.369903][T22473] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1029.369943][T22473] ? __fget_files+0x2a/0x420 [ 1029.369980][T22473] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 1029.370018][T22473] bpf_prog_test_run+0x2c5/0x340 [ 1029.370058][T22473] __sys_bpf+0xa22/0xd90 [ 1029.370102][T22473] ? __pfx___sys_bpf+0x10/0x10 [ 1029.370138][T22473] ? __pfx_trace_call_bpf+0x10/0x10 [ 1029.370196][T22473] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1029.370226][T22473] ? ksys_write+0x242/0x270 [ 1029.370299][T22473] ? __pfx_ksys_write+0x10/0x10 [ 1029.370346][T22473] __x64_sys_bpf+0xba/0xd0 [ 1029.370409][T22473] do_syscall_64+0x166/0x520 [ 1029.370442][T22473] ? trace_irq_disable+0x3b/0x140 [ 1029.370479][T22473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.370503][T22473] ? clear_bhb_loop+0x70/0xc0 [ 1029.370540][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.370563][T22473] RIP: 0033:0x7f60fcb9e0d9 [ 1029.370585][T22473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.370605][T22473] RSP: 002b:00007f60fd9c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1029.370628][T22473] RAX: ffffffffffffffda RBX: 00007f60fce25fa0 RCX: 00007f60fcb9e0d9 [ 1029.370645][T22473] RDX: 000000000000000c RSI: 0000200000000380 RDI: 000000000000000a [ 1029.370659][T22473] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.370673][T22473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.370687][T22473] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1029.370727][T22473] [ 1030.194773][T22492] FAULT_INJECTION: forcing a failure. [ 1030.194773][T22492] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.225499][T22492] CPU: 0 UID: 0 PID: 22492 Comm: syz.1.4475 Not tainted syzkaller #0 PREEMPT(full) [ 1030.225530][T22492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1030.225544][T22492] Call Trace: [ 1030.225554][T22492] [ 1030.225565][T22492] dump_stack_lvl+0xe8/0x150 [ 1030.225603][T22492] should_fail_ex+0x410/0x560 [ 1030.225646][T22492] should_failslab+0xa8/0x100 [ 1030.225682][T22492] __kmalloc_noprof+0xfe/0x720 [ 1030.225720][T22492] ? tomoyo_encode+0x2ad/0x570 [ 1030.225742][T22492] ? tomoyo_encode+0x2ad/0x570 [ 1030.225776][T22492] tomoyo_encode+0x2ad/0x570 [ 1030.225809][T22492] tomoyo_realpath_from_path+0x5fa/0x640 [ 1030.225848][T22492] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1030.225882][T22492] tomoyo_path_number_perm+0x246/0x5f0 [ 1030.225919][T22492] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1030.225950][T22492] ? __lock_acquire+0x683/0x2cf0 [ 1030.225989][T22492] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 1030.226039][T22492] ? hook_file_ioctl+0x1f0/0x5f0 [ 1030.226100][T22492] ? __fget_files+0x2a/0x420 [ 1030.226135][T22492] ? __fget_files+0x2a/0x420 [ 1030.226165][T22492] ? __fget_files+0x3a2/0x420 [ 1030.226194][T22492] ? __fget_files+0x2a/0x420 [ 1030.226231][T22492] security_file_ioctl+0xc3/0x2a0 [ 1030.226265][T22492] __se_sys_ioctl+0x47/0x170 [ 1030.226294][T22492] do_syscall_64+0x166/0x520 [ 1030.226322][T22492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.226346][T22492] ? clear_bhb_loop+0x70/0xc0 [ 1030.226376][T22492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.226400][T22492] RIP: 0033:0x7fce5af9e0d9 [ 1030.226422][T22492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.226442][T22492] RSP: 002b:00007fce5bf27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.226465][T22492] RAX: ffffffffffffffda RBX: 00007fce5b225fa0 RCX: 00007fce5af9e0d9 [ 1030.226482][T22492] RDX: 0000200000000940 RSI: 00000000000089e0 RDI: 0000000000000007 [ 1030.226497][T22492] RBP: 00007fce5bf27090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.226511][T22492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.226525][T22492] R13: 00007fce5b226038 R14: 00007fce5b225fa0 R15: 00007fff869ed018 [ 1030.226567][T22492] [ 1030.226870][T22492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1031.327241][T22510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4480'. [ 1031.408207][T22515] netlink: 'syz.1.4483': attribute type 16 has an invalid length. [ 1031.409674][T22512] C: renamed from veth1_to_team (while UP) [ 1031.463744][T22515] netlink: 'syz.1.4483': attribute type 17 has an invalid length. [ 1031.493075][T22512] netlink: 164 bytes leftover after parsing attributes in process `syz.5.4481'. [ 1031.520290][T22515] lo: entered promiscuous mode [ 1031.546711][T22512] netlink: 'syz.5.4481': attribute type 2 has an invalid length. [ 1031.563670][T22515] tunl0: entered promiscuous mode [ 1031.569726][T22515] gre0: entered promiscuous mode [ 1031.575664][T22515] gretap0: entered promiscuous mode [ 1031.625291][T22515] erspan0: entered promiscuous mode [ 1031.643353][T22515] ip_vti0: entered promiscuous mode [ 1031.649607][T22515] ip6_vti0: entered promiscuous mode [ 1031.655827][T22515] sit0: left allmulticast mode [ 1031.667902][T22515] ip6tnl0: entered promiscuous mode [ 1031.677057][T22515] ip6gre0: entered promiscuous mode [ 1031.683843][T22515] syz_tun: entered promiscuous mode [ 1031.690333][T22515] ip6gretap0: entered promiscuous mode [ 1031.702353][T22515] bridge0: entered promiscuous mode [ 1031.710829][T22515] vcan0: entered promiscuous mode [ 1031.723889][T22515] bond0: entered promiscuous mode [ 1031.743621][T22515] bond_slave_1: entered promiscuous mode [ 1031.764416][T22515] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1031.786318][T22515] team0: entered promiscuous mode [ 1031.796339][T22515] team_slave_0: entered promiscuous mode [ 1031.809058][T22515] team_slave_1: entered promiscuous mode [ 1031.843272][T22515] nlmon0: entered promiscuous mode [ 1031.870310][T22515] batadv0: entered promiscuous mode [ 1031.888571][T22515] veth0: entered promiscuous mode [ 1031.903577][T22515] veth1: entered promiscuous mode [ 1031.910147][T22515] wg0: entered promiscuous mode [ 1031.919438][T22515] wg2: entered promiscuous mode [ 1031.926982][T22515] veth0_to_bridge: entered promiscuous mode [ 1031.937575][T22515] veth1_to_bridge: entered promiscuous mode [ 1031.946759][T22515] veth0_to_bond: entered promiscuous mode [ 1031.957699][T22515] bond_slave_0: left allmulticast mode [ 1031.969282][T22515] veth1_to_bond: entered promiscuous mode [ 1031.981889][T22515] veth0_to_team: entered promiscuous mode [ 1031.991426][T22515] veth1_to_team: entered promiscuous mode [ 1032.009783][T22515] veth0_to_batadv: entered promiscuous mode [ 1032.027803][T22515] batadv_slave_0: entered promiscuous mode [ 1032.046304][T22515] veth1_to_batadv: entered promiscuous mode [ 1032.066259][T22515] batadv_slave_1: entered promiscuous mode [ 1032.101477][T22515] xfrm0: entered promiscuous mode [ 1032.134695][T22515] veth0_to_hsr: entered promiscuous mode [ 1032.148924][T22515] veth1_to_hsr: entered promiscuous mode [ 1032.182360][T22515] hsr0: entered promiscuous mode [ 1032.192943][T22515] veth1_virt_wifi: entered promiscuous mode [ 1032.200277][T22515] veth0_virt_wifi: entered promiscuous mode [ 1032.211285][T22515] virt_wifi0: entered promiscuous mode [ 1032.221742][T22515] veth0_vlan: left allmulticast mode [ 1032.230661][T22515] vlan0: entered promiscuous mode [ 1032.238922][T22515] vlan1: entered promiscuous mode [ 1032.248085][T22515] macvlan0: entered promiscuous mode [ 1032.257193][T22515] macvlan1: entered promiscuous mode [ 1032.264641][T22515] ipvlan0: entered promiscuous mode [ 1032.270996][T22515] ipvlan1: entered promiscuous mode [ 1032.278752][T22515] veth0_macvtap: entered promiscuous mode [ 1032.286610][T22515] macsec0: entered promiscuous mode [ 1032.293953][T22515] geneve0: entered promiscuous mode [ 1032.300587][T22515] geneve1: entered promiscuous mode [ 1032.322050][T22515] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1032.344325][T22515] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 1032.363928][T22515] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 1032.384418][T22515] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 1032.392332][T22515] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 1032.402748][T22515] ip6tnl1: entered promiscuous mode [ 1032.410881][T22515] : entered promiscuous mode [ 1032.490213][T22512] : entered promiscuous mode [ 1032.563655][T22528] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1032.736144][T22542] netlink: 'syz.3.4490': attribute type 2 has an invalid length. [ 1032.825243][T22542] netlink: 51 bytes leftover after parsing attributes in process `syz.3.4490'. [ 1032.878607][T22548] Driver unsupported XDP return value 0 on prog (id 3662) dev N/A, expect packet loss! [ 1033.224320][ T12] ip6_tunnel:  xmit: Local address not yet configured! [ 1033.254507][ T5803] ip6_tunnel:  xmit: Local address not yet configured! [ 1033.264927][ T12] ip6_tunnel:  xmit: Local address not yet configured! [ 1033.421925][T22549] netlink: 'syz.2.4493': attribute type 1 has an invalid length. [ 1033.997907][T21329] Bluetooth: hci5: ISO packet for unknown connection handle 9 [ 1034.012709][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 1034.019826][ T5803] ip6_tunnel:  xmit: Local address not yet configured! [ 1034.056931][ T5803] ip6_tunnel:  xmit: Local address not yet configured! [ 1034.094311][T22566] openvswitch: netlink: Actions may not be safe on all matching packets [ 1034.198185][T22574] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4499'. [ 1034.636625][T22582] netlink: 'syz.0.4499': attribute type 97 has an invalid length. [ 1034.688303][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'. [ 1034.707565][T22582] netlink: 'syz.0.4499': attribute type 97 has an invalid length. [ 1034.715483][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4499'. [ 1035.336234][T22602] netlink: 'syz.1.4504': attribute type 2 has an invalid length. [ 1035.552885][T22615] netlink: 'syz.2.4509': attribute type 2 has an invalid length. [ 1035.703785][T22607] syzkaller0: entered promiscuous mode [ 1035.709769][T22607] syzkaller0: entered allmulticast mode [ 1036.591342][T22640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4514'. [ 1037.622644][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1038.329308][T22630] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4510'. [ 1038.481864][T22642] netlink: 2124 bytes leftover after parsing attributes in process `syz.2.4515'. [ 1038.499815][T22644] : renamed from sit0 (while UP) [ 1038.524371][T22644] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 1038.771266][T22669] FAULT_INJECTION: forcing a failure. [ 1038.771266][T22669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1038.831937][T22669] CPU: 0 UID: 0 PID: 22669 Comm: syz.3.4521 Not tainted syzkaller #0 PREEMPT(full) [ 1038.831979][T22669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1038.831994][T22669] Call Trace: [ 1038.832004][T22669] [ 1038.832014][T22669] dump_stack_lvl+0xe8/0x150 [ 1038.832053][T22669] should_fail_ex+0x410/0x560 [ 1038.832093][T22669] _copy_from_user+0x2d/0xb0 [ 1038.832120][T22669] bpf_test_init+0xd8/0x150 [ 1038.832160][T22669] bpf_prog_test_run_skb+0x31e/0x2230 [ 1038.832218][T22669] ? __fget_files+0x3a2/0x420 [ 1038.832248][T22669] ? __fget_files+0x2a/0x420 [ 1038.832284][T22669] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1038.832322][T22669] bpf_prog_test_run+0x2c5/0x340 [ 1038.832361][T22669] __sys_bpf+0xa22/0xd90 [ 1038.832404][T22669] ? __pfx___sys_bpf+0x10/0x10 [ 1038.832467][T22669] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1038.832499][T22669] ? ksys_write+0x242/0x270 [ 1038.832535][T22669] ? __pfx_ksys_write+0x10/0x10 [ 1038.832574][T22669] __x64_sys_bpf+0xba/0xd0 [ 1038.832608][T22669] do_syscall_64+0x166/0x520 [ 1038.832634][T22669] ? trace_irq_disable+0x3b/0x140 [ 1038.832664][T22669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.832687][T22669] ? clear_bhb_loop+0x70/0xc0 [ 1038.832715][T22669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.832738][T22669] RIP: 0033:0x7fdd7d59e0d9 [ 1038.832759][T22669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.832780][T22669] RSP: 002b:00007fdd7e47f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1038.832804][T22669] RAX: ffffffffffffffda RBX: 00007fdd7d825fa0 RCX: 00007fdd7d59e0d9 [ 1038.832822][T22669] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1038.832837][T22669] RBP: 00007fdd7e47f090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.832851][T22669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.832866][T22669] R13: 00007fdd7d826038 R14: 00007fdd7d825fa0 R15: 00007ffd79545bb8 [ 1038.832902][T22669] [ 1039.135359][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1039.238382][T22675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4522'. [ 1039.294633][T22679] netlink: 'syz.3.4524': attribute type 10 has an invalid length. [ 1039.309545][T22679] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.4524'. [ 1039.680456][T22701] FAULT_INJECTION: forcing a failure. [ 1039.680456][T22701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.695200][T22701] CPU: 1 UID: 0 PID: 22701 Comm: syz.3.4527 Not tainted syzkaller #0 PREEMPT(full) [ 1039.695233][T22701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1039.695247][T22701] Call Trace: [ 1039.695256][T22701] [ 1039.695266][T22701] dump_stack_lvl+0xe8/0x150 [ 1039.695303][T22701] should_fail_ex+0x410/0x560 [ 1039.695342][T22701] _copy_from_iter+0x1d3/0x1660 [ 1039.695487][T22701] ? kmem_cache_alloc_node_noprof+0x1d1/0x620 [ 1039.695516][T22701] ? rcu_is_watching+0x16/0xb0 [ 1039.695539][T22701] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1039.695566][T22701] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 1039.695596][T22701] ? __pfx__copy_from_iter+0x10/0x10 [ 1039.695629][T22701] ? __alloc_skb+0x27a/0x7a0 [ 1039.695658][T22701] ? __alloc_skb+0x27a/0x7a0 [ 1039.695692][T22701] ? netlink_sendmsg+0x650/0xb40 [ 1039.695714][T22701] ? skb_put+0x112/0x210 [ 1039.695747][T22701] netlink_sendmsg+0x6c0/0xb40 [ 1039.695778][T22701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.695805][T22701] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1039.695847][T22701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1039.695869][T22701] sock_sendmsg_nosec+0x13a/0x180 [ 1039.695898][T22701] ____sys_sendmsg+0x54e/0x850 [ 1039.695938][T22701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1039.695981][T22701] ? import_iovec+0x73/0xa0 [ 1039.696007][T22701] ___sys_sendmsg+0x2a5/0x360 [ 1039.696040][T22701] ? __lock_acquire+0x683/0x2cf0 [ 1039.696076][T22701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1039.696144][T22701] ? __fget_files+0x2a/0x420 [ 1039.696172][T22701] ? __fget_files+0x3a2/0x420 [ 1039.696211][T22701] __x64_sys_sendmsg+0x1b1/0x290 [ 1039.696249][T22701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1039.696303][T22701] do_syscall_64+0x166/0x520 [ 1039.696328][T22701] ? trace_irq_disable+0x3b/0x140 [ 1039.696358][T22701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.696388][T22701] ? clear_bhb_loop+0x70/0xc0 [ 1039.696416][T22701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.696439][T22701] RIP: 0033:0x7fdd7d59e0d9 [ 1039.696461][T22701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.696482][T22701] RSP: 002b:00007fdd7e47f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.696506][T22701] RAX: ffffffffffffffda RBX: 00007fdd7d825fa0 RCX: 00007fdd7d59e0d9 [ 1039.696522][T22701] RDX: 0000000020000010 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1039.696538][T22701] RBP: 00007fdd7e47f090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.696552][T22701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.696565][T22701] R13: 00007fdd7d826038 R14: 00007fdd7d825fa0 R15: 00007ffd79545bb8 [ 1039.696599][T22701] [ 1040.101385][T22704] sctp: [Deprecated]: syz.0.4528 (pid 22704) Use of int in maxseg socket option. [ 1040.101385][T22704] Use struct sctp_assoc_value instead [ 1041.121688][T22733] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4534'. [ 1042.884169][T22755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1042.893232][T22755] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1043.361364][T22750] pimreg: tun_chr_ioctl cmd 1074025677 [ 1043.367355][T22750] pimreg: linktype set to 776 [ 1046.173417][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1046.259869][T22786] netlink: 'syz.1.4552': attribute type 62 has an invalid length. [ 1047.230981][T22796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4553'. [ 1048.057635][T22803] syzkaller0: entered promiscuous mode [ 1048.072719][T22803] syzkaller0: entered allmulticast mode [ 1048.117306][T22812] netlink: 'syz.3.4557': attribute type 6 has an invalid length. [ 1048.367714][T22818] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4560'. [ 1048.395070][T22818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4560'. [ 1048.429224][T22818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4560'. [ 1048.444067][T22812] syzkaller0: entered promiscuous mode [ 1048.456821][T22812] syzkaller0: entered allmulticast mode [ 1048.469154][T22822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4561'. [ 1048.476163][T22824] netlink: 'syz.2.4560': attribute type 13 has an invalid length. [ 1048.504162][T22821] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 1048.809925][T22832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4563'. [ 1049.129777][T22844] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4566'. [ 1049.144338][T22842] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4566'. [ 1049.289220][T22848] netlink: 'syz.2.4568': attribute type 2 has an invalid length. [ 1049.299387][T22848] netlink: 'syz.2.4568': attribute type 8 has an invalid length. [ 1049.308530][T22848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4568'. [ 1049.381911][T22847] netlink: 'syz.3.4567': attribute type 3 has an invalid length. [ 1049.390073][T22847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4567'. [ 1049.405677][T22847] netlink: 'syz.3.4567': attribute type 3 has an invalid length. [ 1049.642574][T22858] netlink: 'syz.2.4570': attribute type 21 has an invalid length. [ 1049.710985][T21329] Bluetooth: hci2: unexpected event 0x1c length: 151 > 5 [ 1049.905609][T22863] netlink: 'syz.3.4573': attribute type 10 has an invalid length. [ 1049.945568][T22863] batadv0: entered promiscuous mode [ 1049.951904][T22863] batadv0: entered allmulticast mode [ 1049.993048][T22863] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1050.176069][T22874] FAULT_INJECTION: forcing a failure. [ 1050.176069][T22874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1050.211548][T22876] FAULT_INJECTION: forcing a failure. [ 1050.211548][T22876] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.224234][T22876] CPU: 1 UID: 0 PID: 22876 Comm: syz.0.4579 Not tainted syzkaller #0 PREEMPT(full) [ 1050.224262][T22876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1050.224276][T22876] Call Trace: [ 1050.224285][T22876] [ 1050.224295][T22876] dump_stack_lvl+0xe8/0x150 [ 1050.224330][T22876] should_fail_ex+0x410/0x560 [ 1050.224369][T22876] should_failslab+0xa8/0x100 [ 1050.224402][T22876] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1050.224429][T22876] ? skb_clone+0x212/0x3a0 [ 1050.224448][T22876] ? skb_clone+0x212/0x3a0 [ 1050.224475][T22876] skb_clone+0x212/0x3a0 [ 1050.224499][T22876] __netlink_deliver_tap+0x413/0x860 [ 1050.224534][T22876] ? netlink_deliver_tap+0x2e/0x1b0 [ 1050.224557][T22876] netlink_deliver_tap+0x19c/0x1b0 [ 1050.224597][T22876] netlink_unicast+0x781/0x940 [ 1050.224720][T22876] netlink_sendmsg+0x813/0xb40 [ 1050.224752][T22876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1050.224779][T22876] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1050.224821][T22876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1050.224842][T22876] sock_sendmsg_nosec+0x13a/0x180 [ 1050.224883][T22876] ____sys_sendmsg+0x54e/0x850 [ 1050.224922][T22876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1050.224971][T22876] ? import_iovec+0x73/0xa0 [ 1050.224998][T22876] ___sys_sendmsg+0x2a5/0x360 [ 1050.225030][T22876] ? __lock_acquire+0x683/0x2cf0 [ 1050.225088][T22876] ? __pfx____sys_sendmsg+0x10/0x10 [ 1050.225159][T22876] ? __fget_files+0x2a/0x420 [ 1050.225189][T22876] ? __fget_files+0x3a2/0x420 [ 1050.225231][T22876] __x64_sys_sendmsg+0x1b1/0x290 [ 1050.225268][T22876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1050.225325][T22876] do_syscall_64+0x166/0x520 [ 1050.225351][T22876] ? trace_irq_disable+0x3b/0x140 [ 1050.225381][T22876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.225405][T22876] ? clear_bhb_loop+0x70/0xc0 [ 1050.225433][T22876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.225456][T22876] RIP: 0033:0x7f1d2439e0d9 [ 1050.225478][T22876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.225498][T22876] RSP: 002b:00007f1d25349028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1050.225522][T22876] RAX: ffffffffffffffda RBX: 00007f1d24625fa0 RCX: 00007f1d2439e0d9 [ 1050.225539][T22876] RDX: 0000000020040040 RSI: 0000200000000500 RDI: 0000000000000006 [ 1050.225553][T22876] RBP: 00007f1d25349090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.225568][T22876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.225581][T22876] R13: 00007f1d24626038 R14: 00007f1d24625fa0 R15: 00007ffde55769c8 [ 1050.225617][T22876] [ 1050.231731][T22874] CPU: 0 UID: 0 PID: 22874 Comm: syz.2.4578 Not tainted syzkaller #0 PREEMPT(full) [ 1050.231812][T22874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1050.231850][T22874] Call Trace: [ 1050.231872][T22874] [ 1050.231893][T22874] dump_stack_lvl+0xe8/0x150 [ 1050.231994][T22874] should_fail_ex+0x410/0x560 [ 1050.232096][T22874] _copy_from_user+0x2d/0xb0 [ 1050.232158][T22874] btf_new_fd+0x301/0xbb0 [ 1050.232256][T22874] __sys_bpf+0xd2e/0xd90 [ 1050.232361][T22874] ? __pfx___sys_bpf+0x10/0x10 [ 1050.232483][T22874] ? __fget_files+0x2a/0x420 [ 1050.232598][T22874] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1050.232698][T22874] ? ksys_write+0x242/0x270 [ 1050.232806][T22874] ? __pfx_ksys_write+0x10/0x10 [ 1050.232906][T22874] __x64_sys_bpf+0xba/0xd0 [ 1050.232979][T22874] do_syscall_64+0x166/0x520 [ 1050.233042][T22874] ? trace_irq_disable+0x3b/0x140 [ 1050.233116][T22874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.233175][T22874] ? clear_bhb_loop+0x70/0xc0 [ 1050.233245][T22874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.233298][T22874] RIP: 0033:0x7f60fcb9e0d9 [ 1050.233349][T22874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.233398][T22874] RSP: 002b:00007f60fd9c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1050.233468][T22874] RAX: ffffffffffffffda RBX: 00007f60fce25fa0 RCX: 00007f60fcb9e0d9 [ 1050.233515][T22874] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 1050.233546][T22874] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.233578][T22874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1050.233617][T22874] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1050.233699][T22874] [ 1050.784138][T22882] tunl0: Caught tx_queue_len zero misconfig [ 1050.837234][T22879] netlink: 'syz.5.4580': attribute type 2 has an invalid length. [ 1051.009233][T22893] FAULT_INJECTION: forcing a failure. [ 1051.009233][T22893] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.026705][T21329] Bluetooth: hci2: unexpected event 0x1c length: 151 > 5 [ 1051.037229][T22893] CPU: 1 UID: 0 PID: 22893 Comm: syz.2.4584 Not tainted syzkaller #0 PREEMPT(full) [ 1051.037261][T22893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1051.037275][T22893] Call Trace: [ 1051.037285][T22893] [ 1051.037295][T22893] dump_stack_lvl+0xe8/0x150 [ 1051.037333][T22893] should_fail_ex+0x410/0x560 [ 1051.037381][T22893] should_failslab+0xa8/0x100 [ 1051.037418][T22893] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1051.037447][T22893] ? rxrpc_alloc_call+0x27a/0xd90 [ 1051.037552][T22893] ? rxrpc_alloc_call+0x27a/0xd90 [ 1051.037588][T22893] ? rxrpc_alloc_call+0x79/0xd90 [ 1051.037611][T22893] rxrpc_alloc_call+0x27a/0xd90 [ 1051.037647][T22893] rxrpc_new_client_call+0x11d/0x14f0 [ 1051.037672][T22893] ? __local_bh_enable_ip+0xd6/0x140 [ 1051.037718][T22893] rxrpc_do_sendmsg+0xe8a/0x1280 [ 1051.037806][T22893] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 1051.037874][T22893] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 1051.037909][T22893] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1051.037932][T22893] sock_sendmsg_nosec+0x13a/0x180 [ 1051.037967][T22893] ____sys_sendmsg+0x54e/0x850 [ 1051.038014][T22893] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.038066][T22893] ? import_iovec+0x73/0xa0 [ 1051.038100][T22893] ___sys_sendmsg+0x2a5/0x360 [ 1051.038134][T22893] ? __lock_acquire+0x683/0x2cf0 [ 1051.038175][T22893] ? __pfx____sys_sendmsg+0x10/0x10 [ 1051.038247][T22893] ? __fget_files+0x2a/0x420 [ 1051.038296][T22893] ? __fget_files+0x2a/0x420 [ 1051.038325][T22893] ? __fget_files+0x3a2/0x420 [ 1051.038375][T22893] __x64_sys_sendmsg+0x1b1/0x290 [ 1051.038415][T22893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1051.038488][T22893] do_syscall_64+0x166/0x520 [ 1051.038514][T22893] ? trace_irq_disable+0x3b/0x140 [ 1051.038545][T22893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.038570][T22893] ? clear_bhb_loop+0x70/0xc0 [ 1051.038601][T22893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.038625][T22893] RIP: 0033:0x7f60fcb9e0d9 [ 1051.038649][T22893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.038667][T22893] RSP: 002b:00007f60fd9c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.038691][T22893] RAX: ffffffffffffffda RBX: 00007f60fce25fa0 RCX: 00007f60fcb9e0d9 [ 1051.038712][T22893] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1051.038726][T22893] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.038740][T22893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.038754][T22893] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1051.038801][T22893] [ 1051.405088][T22904] FAULT_INJECTION: forcing a failure. [ 1051.405088][T22904] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.423804][T22904] CPU: 0 UID: 0 PID: 22904 Comm: syz.2.4588 Not tainted syzkaller #0 PREEMPT(full) [ 1051.423835][T22904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1051.423849][T22904] Call Trace: [ 1051.423859][T22904] [ 1051.423869][T22904] dump_stack_lvl+0xe8/0x150 [ 1051.423908][T22904] should_fail_ex+0x410/0x560 [ 1051.423951][T22904] should_failslab+0xa8/0x100 [ 1051.423987][T22904] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1051.424016][T22904] ? skb_clone+0x212/0x3a0 [ 1051.424037][T22904] ? skb_clone+0x212/0x3a0 [ 1051.424069][T22904] skb_clone+0x212/0x3a0 [ 1051.424097][T22904] __netlink_deliver_tap+0x413/0x860 [ 1051.424138][T22904] ? netlink_deliver_tap+0x2e/0x1b0 [ 1051.424165][T22904] netlink_deliver_tap+0x19c/0x1b0 [ 1051.424192][T22904] netlink_unicast+0x781/0x940 [ 1051.424243][T22904] netlink_sendmsg+0x813/0xb40 [ 1051.424282][T22904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1051.424304][T22904] ? perf_trace_lock_acquire+0x10a/0x440 [ 1051.424352][T22904] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1051.424410][T22904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1051.424432][T22904] sock_sendmsg_nosec+0x13a/0x180 [ 1051.424463][T22904] ____sys_sendmsg+0x54e/0x850 [ 1051.424523][T22904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.424570][T22904] ? import_iovec+0x73/0xa0 [ 1051.424598][T22904] ___sys_sendmsg+0x2a5/0x360 [ 1051.424629][T22904] ? __lock_acquire+0x683/0x2cf0 [ 1051.424666][T22904] ? __pfx____sys_sendmsg+0x10/0x10 [ 1051.424752][T22904] ? __fget_files+0x2a/0x420 [ 1051.424783][T22904] ? __fget_files+0x3a2/0x420 [ 1051.424832][T22904] __x64_sys_sendmsg+0x1b1/0x290 [ 1051.424871][T22904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1051.424936][T22904] do_syscall_64+0x166/0x520 [ 1051.424961][T22904] ? trace_irq_disable+0x3b/0x140 [ 1051.424990][T22904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.425014][T22904] ? clear_bhb_loop+0x70/0xc0 [ 1051.425044][T22904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.425066][T22904] RIP: 0033:0x7f60fcb9e0d9 [ 1051.425089][T22904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.425107][T22904] RSP: 002b:00007f60fd9c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.425131][T22904] RAX: ffffffffffffffda RBX: 00007f60fce25fa0 RCX: 00007f60fcb9e0d9 [ 1051.425147][T22904] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 1051.425161][T22904] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.425176][T22904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.425190][T22904] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1051.425233][T22904] [ 1051.425424][T22904] validate_nla: 1 callbacks suppressed [ 1051.425437][T22904] netlink: 'syz.2.4588': attribute type 2 has an invalid length. [ 1051.733373][T22902] netlink: 'syz.0.4587': attribute type 2 has an invalid length. [ 1051.837260][T22917] FAULT_INJECTION: forcing a failure. [ 1051.837260][T22917] name failslab, interval 1, probability 0, space 0, times 0 [ 1051.851812][T22917] CPU: 0 UID: 0 PID: 22917 Comm: syz.1.4591 Not tainted syzkaller #0 PREEMPT(full) [ 1051.851843][T22917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1051.851857][T22917] Call Trace: [ 1051.851866][T22917] [ 1051.851875][T22917] dump_stack_lvl+0xe8/0x150 [ 1051.851913][T22917] should_fail_ex+0x410/0x560 [ 1051.851957][T22917] should_failslab+0xa8/0x100 [ 1051.851992][T22917] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1051.852021][T22917] ? skb_clone+0x212/0x3a0 [ 1051.852041][T22917] ? skb_clone+0x212/0x3a0 [ 1051.852073][T22917] skb_clone+0x212/0x3a0 [ 1051.852101][T22917] pfkey_sendmsg+0x4d6/0x11d0 [ 1051.852248][T22917] ? unwind_next_frame+0x8f/0x2550 [ 1051.852288][T22917] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1051.852350][T22917] ? __pfx_aa_sk_perm+0x10/0x10 [ 1051.852386][T22917] ? perf_trace_lock_acquire+0x10a/0x440 [ 1051.852426][T22917] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1051.852471][T22917] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1051.852503][T22917] sock_sendmsg_nosec+0x13a/0x180 [ 1051.852534][T22917] ____sys_sendmsg+0x54e/0x850 [ 1051.852589][T22917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1051.852636][T22917] ? import_iovec+0x73/0xa0 [ 1051.852664][T22917] ___sys_sendmsg+0x2a5/0x360 [ 1051.852696][T22917] ? __lock_acquire+0x683/0x2cf0 [ 1051.852734][T22917] ? __pfx____sys_sendmsg+0x10/0x10 [ 1051.852818][T22917] ? __fget_files+0x2a/0x420 [ 1051.852867][T22917] ? __fget_files+0x3a2/0x420 [ 1051.852913][T22917] __x64_sys_sendmsg+0x1b1/0x290 [ 1051.852953][T22917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1051.853020][T22917] do_syscall_64+0x166/0x520 [ 1051.853046][T22917] ? trace_irq_disable+0x3b/0x140 [ 1051.853075][T22917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.853098][T22917] ? clear_bhb_loop+0x70/0xc0 [ 1051.853128][T22917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.853151][T22917] RIP: 0033:0x7fce5af9e0d9 [ 1051.853173][T22917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1051.853193][T22917] RSP: 002b:00007fce5bf27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1051.853216][T22917] RAX: ffffffffffffffda RBX: 00007fce5b225fa0 RCX: 00007fce5af9e0d9 [ 1051.853234][T22917] RDX: 0000000000000000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 1051.853256][T22917] RBP: 00007fce5bf27090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.853271][T22917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.853285][T22917] R13: 00007fce5b226038 R14: 00007fce5b225fa0 R15: 00007fff869ed018 [ 1051.853326][T22917] [ 1052.379177][T22932] netlink: 'syz.1.4597': attribute type 2 has an invalid length. [ 1052.387524][T22920] __nla_validate_parse: 8 callbacks suppressed [ 1052.387559][T22920] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4590'. [ 1052.477875][T22920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1053.098177][T22950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4601'. [ 1053.125871][T22950] FAULT_INJECTION: forcing a failure. [ 1053.125871][T22950] name failslab, interval 1, probability 0, space 0, times 0 [ 1053.177085][T22950] CPU: 1 UID: 0 PID: 22950 Comm: syz.3.4601 Not tainted syzkaller #0 PREEMPT(full) [ 1053.177116][T22950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1053.177130][T22950] Call Trace: [ 1053.177140][T22950] [ 1053.177150][T22950] dump_stack_lvl+0xe8/0x150 [ 1053.177187][T22950] should_fail_ex+0x410/0x560 [ 1053.177226][T22950] should_failslab+0xa8/0x100 [ 1053.177259][T22950] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1053.177294][T22950] ? skb_clone+0x212/0x3a0 [ 1053.177314][T22950] ? skb_clone+0x212/0x3a0 [ 1053.177340][T22950] skb_clone+0x212/0x3a0 [ 1053.177359][T22950] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1053.177502][T22950] nfnetlink_rcv+0x4de/0x28c0 [ 1053.177544][T22950] ? __local_bh_enable_ip+0xd6/0x140 [ 1053.177573][T22950] ? lockdep_hardirqs_on+0x7b/0x110 [ 1053.177598][T22950] ? __dev_queue_xmit+0x29b/0x3820 [ 1053.177647][T22950] ? __local_bh_enable_ip+0xd6/0x140 [ 1053.177671][T22950] ? __dev_queue_xmit+0x29b/0x3820 [ 1053.177693][T22950] ? __dev_queue_xmit+0x1edc/0x3820 [ 1053.177714][T22950] ? do_syscall_64+0x166/0x520 [ 1053.177737][T22950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.177774][T22950] ? __dev_queue_xmit+0x29b/0x3820 [ 1053.177797][T22950] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1053.177848][T22950] ? ref_tracker_free+0x689/0x830 [ 1053.177902][T22950] ? __pfx_ref_tracker_free+0x10/0x10 [ 1053.177935][T22950] ? __skb_clone+0x449/0x6c0 [ 1053.177975][T22950] ? skb_clone+0x246/0x3a0 [ 1053.177999][T22950] ? __netlink_deliver_tap+0x811/0x860 [ 1053.178021][T22950] ? netlink_deliver_tap+0x2e/0x1b0 [ 1053.178049][T22950] ? netlink_deliver_tap+0x2e/0x1b0 [ 1053.178071][T22950] ? netlink_deliver_tap+0x2e/0x1b0 [ 1053.178099][T22950] netlink_unicast+0x7bd/0x940 [ 1053.178144][T22950] netlink_sendmsg+0x813/0xb40 [ 1053.178178][T22950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.178205][T22950] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1053.178246][T22950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1053.178277][T22950] sock_sendmsg_nosec+0x13a/0x180 [ 1053.178308][T22950] ____sys_sendmsg+0x54e/0x850 [ 1053.178348][T22950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1053.178391][T22950] ? import_iovec+0x73/0xa0 [ 1053.178418][T22950] ___sys_sendmsg+0x2a5/0x360 [ 1053.178450][T22950] ? __lock_acquire+0x683/0x2cf0 [ 1053.178487][T22950] ? __pfx____sys_sendmsg+0x10/0x10 [ 1053.178557][T22950] ? __fget_files+0x2a/0x420 [ 1053.178593][T22950] ? __fget_files+0x3a2/0x420 [ 1053.178633][T22950] __x64_sys_sendmsg+0x1b1/0x290 [ 1053.178670][T22950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1053.178724][T22950] do_syscall_64+0x166/0x520 [ 1053.178748][T22950] ? trace_irq_disable+0x3b/0x140 [ 1053.178776][T22950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.178799][T22950] ? clear_bhb_loop+0x70/0xc0 [ 1053.178828][T22950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.178851][T22950] RIP: 0033:0x7fdd7d59e0d9 [ 1053.178872][T22950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.178893][T22950] RSP: 002b:00007fdd7e47f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.178916][T22950] RAX: ffffffffffffffda RBX: 00007fdd7d825fa0 RCX: 00007fdd7d59e0d9 [ 1053.178934][T22950] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1053.178948][T22950] RBP: 00007fdd7e47f090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.178962][T22950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.178975][T22950] R13: 00007fdd7d826038 R14: 00007fdd7d825fa0 R15: 00007ffd79545bb8 [ 1053.179010][T22950] [ 1053.846094][T21329] Bluetooth: hci5: unexpected event 0x1c length: 151 > 5 [ 1054.494643][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.512285][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.529659][T22980] netlink: 172 bytes leftover after parsing attributes in process `syz.1.4611'. [ 1054.901264][T22978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4612'. [ 1055.169239][T22996] FAULT_INJECTION: forcing a failure. [ 1055.169239][T22996] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.205054][T22996] CPU: 0 UID: 0 PID: 22996 Comm: syz.1.4614 Not tainted syzkaller #0 PREEMPT(full) [ 1055.205085][T22996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1055.205099][T22996] Call Trace: [ 1055.205111][T22996] [ 1055.205124][T22996] dump_stack_lvl+0xe8/0x150 [ 1055.205180][T22996] should_fail_ex+0x410/0x560 [ 1055.205254][T22996] should_failslab+0xa8/0x100 [ 1055.205306][T22996] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1055.205349][T22996] ? skb_clone+0x212/0x3a0 [ 1055.205373][T22996] ? skb_clone+0x212/0x3a0 [ 1055.205439][T22996] skb_clone+0x212/0x3a0 [ 1055.205501][T22996] __netlink_deliver_tap+0x413/0x860 [ 1055.205592][T22996] ? netlink_deliver_tap+0x2e/0x1b0 [ 1055.205637][T22996] netlink_deliver_tap+0x19c/0x1b0 [ 1055.205681][T22996] netlink_unicast+0x781/0x940 [ 1055.205786][T22996] netlink_sendmsg+0x813/0xb40 [ 1055.205822][T22996] ? __pfx_trace_call_bpf+0x10/0x10 [ 1055.205893][T22996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.205950][T22996] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1055.206031][T22996] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1055.206060][T22996] sock_sendmsg_nosec+0x13a/0x180 [ 1055.206114][T22996] ____sys_sendmsg+0x54e/0x850 [ 1055.206192][T22996] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1055.206287][T22996] ? import_iovec+0x73/0xa0 [ 1055.206345][T22996] ___sys_sendmsg+0x2a5/0x360 [ 1055.206422][T22996] ? __pfx____sys_sendmsg+0x10/0x10 [ 1055.206598][T22996] ? __fget_files+0x2a/0x420 [ 1055.206696][T22996] ? __fget_files+0x2a/0x420 [ 1055.206731][T22996] ? __fget_files+0x3a2/0x420 [ 1055.206827][T22996] __x64_sys_sendmsg+0x1b1/0x290 [ 1055.206889][T22996] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1055.207063][T22996] do_syscall_64+0x166/0x520 [ 1055.207095][T22996] ? trace_irq_disable+0x3b/0x140 [ 1055.207127][T22996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.207156][T22996] ? clear_bhb_loop+0x70/0xc0 [ 1055.207206][T22996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.207235][T22996] RIP: 0033:0x7fce5af9e0d9 [ 1055.207267][T22996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.207287][T22996] RSP: 002b:00007fce5bf27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1055.207311][T22996] RAX: ffffffffffffffda RBX: 00007fce5b225fa0 RCX: 00007fce5af9e0d9 [ 1055.207328][T22996] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1055.207343][T22996] RBP: 00007fce5bf27090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.207357][T22996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.207371][T22996] R13: 00007fce5b226038 R14: 00007fce5b225fa0 R15: 00007fff869ed018 [ 1055.207493][T22996] [ 1057.482194][T21329] Bluetooth: hci2: unexpected event 0x1c length: 151 > 5 [ 1058.990205][T23049] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4628'. [ 1059.145398][T23050] netlink: 'syz.5.4628': attribute type 3 has an invalid length. [ 1059.286411][T23047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4629'. [ 1059.314498][T23050] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4628'. [ 1059.326928][T23050] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1059.974920][T23057] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4631'. [ 1060.085901][T23053] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4631'. [ 1060.405763][T23070] netlink: 'syz.0.4633': attribute type 21 has an invalid length. [ 1060.647778][T21329] Bluetooth: hci2: unexpected event 0x1c length: 151 > 5 [ 1061.549828][ T29] audit: type=1800 audit(1787657228.950:3): pid=23084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4638" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1061.578209][T23084] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1061.626644][T23084] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1061.663981][T23084] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1061.926940][T23084] syz.0.4638 (23084) used greatest stack depth: 16816 bytes left [ 1062.162984][T23112] FAULT_INJECTION: forcing a failure. [ 1062.162984][T23112] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.232152][T23112] CPU: 0 UID: 0 PID: 23112 Comm: syz.2.4646 Not tainted syzkaller #0 PREEMPT(full) [ 1062.232183][T23112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1062.232197][T23112] Call Trace: [ 1062.232206][T23112] [ 1062.232216][T23112] dump_stack_lvl+0xe8/0x150 [ 1062.232254][T23112] should_fail_ex+0x410/0x560 [ 1062.232295][T23112] should_failslab+0xa8/0x100 [ 1062.232330][T23112] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1062.232357][T23112] ? skb_clone+0x212/0x3a0 [ 1062.232377][T23112] ? skb_clone+0x212/0x3a0 [ 1062.232405][T23112] skb_clone+0x212/0x3a0 [ 1062.232431][T23112] __netlink_deliver_tap+0x413/0x860 [ 1062.232470][T23112] ? netlink_deliver_tap+0x2e/0x1b0 [ 1062.232496][T23112] netlink_deliver_tap+0x19c/0x1b0 [ 1062.232521][T23112] netlink_unicast+0x781/0x940 [ 1062.232570][T23112] netlink_sendmsg+0x813/0xb40 [ 1062.232606][T23112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.232635][T23112] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1062.232679][T23112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.232701][T23112] sock_sendmsg_nosec+0x13a/0x180 [ 1062.232732][T23112] ____sys_sendmsg+0x54e/0x850 [ 1062.232774][T23112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1062.232821][T23112] ? import_iovec+0x73/0xa0 [ 1062.232850][T23112] ___sys_sendmsg+0x2a5/0x360 [ 1062.232883][T23112] ? __lock_acquire+0x683/0x2cf0 [ 1062.232921][T23112] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.232985][T23112] ? __fget_files+0x2a/0x420 [ 1062.233034][T23112] ? __fget_files+0x2a/0x420 [ 1062.233064][T23112] ? __fget_files+0x3a2/0x420 [ 1062.233109][T23112] __x64_sys_sendmsg+0x1b1/0x290 [ 1062.233147][T23112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1062.233209][T23112] do_syscall_64+0x166/0x520 [ 1062.233236][T23112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.233259][T23112] ? clear_bhb_loop+0x70/0xc0 [ 1062.233288][T23112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.233310][T23112] RIP: 0033:0x7f60fcb9e0d9 [ 1062.233331][T23112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.233350][T23112] RSP: 002b:00007f60fd9c0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.233374][T23112] RAX: ffffffffffffffda RBX: 00007f60fce25fa0 RCX: 00007f60fcb9e0d9 [ 1062.233389][T23112] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 1062.233402][T23112] RBP: 00007f60fd9c0090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.233415][T23112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.233428][T23112] R13: 00007f60fce26038 R14: 00007f60fce25fa0 R15: 00007ffffb80f428 [ 1062.233466][T23112] [ 1062.683293][T23123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4649'. [ 1062.815905][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 1063.439694][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4651'. [ 1063.500972][T23134] netlink: 'syz.1.4651': attribute type 3 has an invalid length. [ 1063.808322][T23118] Set syz0 is full, maxelem 65536 reached [ 1063.916147][T23135] syz.1.4651 (23135) used greatest stack depth: 16544 bytes left [ 1064.048356][T23147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4654'. [ 1064.329121][T23154] netlink: 'syz.2.4656': attribute type 11 has an invalid length. [ 1064.370774][T23154] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4656'. [ 1064.556600][T23169] sctp: [Deprecated]: syz.0.4660 (pid 23169) Use of int in maxseg socket option. [ 1064.556600][T23169] Use struct sctp_assoc_value instead [ 1064.930201][T23184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4664'. [ 1065.554044][T23196] netlink: 'syz.1.4668': attribute type 3 has an invalid length. [ 1065.566666][T23196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4668'. [ 1065.575990][T23196] netlink: 'syz.1.4668': attribute type 3 has an invalid length. [ 1065.583761][T23196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4668'. [ 1065.592784][T23196] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4668'. [ 1065.712905][T23188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4666'. [ 1065.991157][T23203] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4670'. [ 1066.090857][T23199] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4670'. [ 1066.409110][T23208] netlink: 'syz.0.4674': attribute type 39 has an invalid length. [ 1066.804578][T23214] netlink: 'syz.2.4675': attribute type 3 has an invalid length. [ 1066.812375][T23214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4675'. [ 1066.841297][T23214] netlink: 'syz.2.4675': attribute type 3 has an invalid length. [ 1067.695731][T23234] netlink: 'syz.2.4682': attribute type 3 has an invalid length. [ 1067.703704][T23234] netlink: 'syz.2.4682': attribute type 3 has an invalid length. [ 1067.967521][T23249] openvswitch: netlink: Flow actions attr not present in new flow. [ 1068.558393][T21329] Bluetooth: hci4: unexpected event 0x1c length: 151 > 5 [ 1069.231638][T23270] netlink: 'syz.2.4697': attribute type 3 has an invalid length. [ 1069.282803][T23270] __nla_validate_parse: 13 callbacks suppressed [ 1069.282825][T23270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4697'. [ 1069.328275][T23274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4698'. [ 1069.348836][T23270] netlink: 'syz.2.4697': attribute type 3 has an invalid length. [ 1069.412703][T23270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4697'. [ 1069.470722][T23270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4697'. [ 1070.210632][T21329] Bluetooth: hci3: unexpected event 0x1c length: 151 > 5 [ 1071.118583][T23303] FAULT_INJECTION: forcing a failure. [ 1071.118583][T23303] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.169999][T23303] CPU: 0 UID: 0 PID: 23303 Comm: syz.0.4706 Not tainted syzkaller #0 PREEMPT(full) [ 1071.170050][T23303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1071.170064][T23303] Call Trace: [ 1071.170072][T23303] [ 1071.170082][T23303] dump_stack_lvl+0xe8/0x150 [ 1071.170119][T23303] should_fail_ex+0x410/0x560 [ 1071.170158][T23303] should_failslab+0xa8/0x100 [ 1071.170191][T23303] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1071.170218][T23303] ? skb_clone+0x212/0x3a0 [ 1071.170237][T23303] ? skb_clone+0x212/0x3a0 [ 1071.170262][T23303] skb_clone+0x212/0x3a0 [ 1071.170281][T23303] ? nfnetlink_rcv+0x4b0/0x28c0 [ 1071.170317][T23303] nfnetlink_rcv+0x4de/0x28c0 [ 1071.170351][T23303] ? __dev_queue_xmit+0x29b/0x3820 [ 1071.170377][T23303] ? __local_bh_enable_ip+0xd6/0x140 [ 1071.170404][T23303] ? lockdep_hardirqs_on+0x7b/0x110 [ 1071.170429][T23303] ? __dev_queue_xmit+0x29b/0x3820 [ 1071.170450][T23303] ? __local_bh_enable_ip+0xd6/0x140 [ 1071.170474][T23303] ? __dev_queue_xmit+0x29b/0x3820 [ 1071.170496][T23303] ? __dev_queue_xmit+0x1edc/0x3820 [ 1071.170516][T23303] ? do_syscall_64+0x166/0x520 [ 1071.170540][T23303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.170575][T23303] ? __dev_queue_xmit+0x29b/0x3820 [ 1071.170598][T23303] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1071.170647][T23303] ? ref_tracker_free+0x689/0x830 [ 1071.170671][T23303] ? __pfx_ref_tracker_free+0x10/0x10 [ 1071.170703][T23303] ? __skb_clone+0x449/0x6c0 [ 1071.170742][T23303] ? skb_clone+0x246/0x3a0 [ 1071.170766][T23303] ? __netlink_deliver_tap+0x811/0x860 [ 1071.170787][T23303] ? netlink_deliver_tap+0x2e/0x1b0 [ 1071.170816][T23303] ? netlink_deliver_tap+0x2e/0x1b0 [ 1071.170838][T23303] ? netlink_deliver_tap+0x2e/0x1b0 [ 1071.170864][T23303] netlink_unicast+0x7bd/0x940 [ 1071.170910][T23303] netlink_sendmsg+0x813/0xb40 [ 1071.170944][T23303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.170971][T23303] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1071.171012][T23303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.171040][T23303] sock_sendmsg_nosec+0x13a/0x180 [ 1071.171070][T23303] ____sys_sendmsg+0x54e/0x850 [ 1071.171110][T23303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1071.171152][T23303] ? import_iovec+0x73/0xa0 [ 1071.171180][T23303] ___sys_sendmsg+0x2a5/0x360 [ 1071.171212][T23303] ? __lock_acquire+0x683/0x2cf0 [ 1071.171249][T23303] ? __pfx____sys_sendmsg+0x10/0x10 [ 1071.171319][T23303] ? __fget_files+0x2a/0x420 [ 1071.171349][T23303] ? __fget_files+0x3a2/0x420 [ 1071.171390][T23303] __x64_sys_sendmsg+0x1b1/0x290 [ 1071.171427][T23303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1071.171481][T23303] do_syscall_64+0x166/0x520 [ 1071.171505][T23303] ? trace_irq_disable+0x3b/0x140 [ 1071.171532][T23303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.171554][T23303] ? clear_bhb_loop+0x70/0xc0 [ 1071.171580][T23303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.171601][T23303] RIP: 0033:0x7f1d2439e0d9 [ 1071.171621][T23303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.171639][T23303] RSP: 002b:00007f1d25349028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.171662][T23303] RAX: ffffffffffffffda RBX: 00007f1d24625fa0 RCX: 00007f1d2439e0d9 [ 1071.171678][T23303] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1071.171692][T23303] RBP: 00007f1d25349090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.171705][T23303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.171718][T23303] R13: 00007f1d24626038 R14: 00007f1d24625fa0 R15: 00007ffde55769c8 [ 1071.171751][T23303] [ 1071.800133][T23319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4710'. [ 1072.018887][T23321] netlink: 'syz.2.4711': attribute type 3 has an invalid length. [ 1072.060664][T23321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4711'. [ 1072.081353][T23321] netlink: 'syz.2.4711': attribute type 3 has an invalid length. [ 1072.099579][T23321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4711'. [ 1072.113130][T23321] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4711'. [ 1072.395921][T23332] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4714'. [ 1072.691607][T23338] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4715'. [ 1072.910906][T23342] netlink: 'syz.1.4717': attribute type 1 has an invalid length. [ 1073.093184][T23347] netlink: 'syz.2.4719': attribute type 21 has an invalid length. [ 1073.454326][T23363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1073.645564][T23365] bridge_slave_0: Caught tx_queue_len zero misconfig [ 1073.849335][T23369] netlink: 'syz.0.4725': attribute type 3 has an invalid length. [ 1073.857323][T23369] netlink: 'syz.0.4725': attribute type 3 has an invalid length. [ 1074.535409][T23397] __nla_validate_parse: 7 callbacks suppressed [ 1074.535447][T23397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4735'. [ 1074.584816][T23397] bond_slave_0: entered allmulticast mode [ 1074.610458][T23397] veth0_vlan: entered allmulticast mode [ 1075.225803][ T29] audit: type=1107 audit(1787657242.630:4): pid=23415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='{.Y%E [ 1075.225803][ T29] J40Ij`tY' [ 1075.283333][T23418] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1075.325201][T23418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1075.336188][T23420] netlink: 'syz.0.4744': attribute type 21 has an invalid length. [ 1075.355544][T23418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1075.581998][T23430] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4748'. [ 1075.601568][T23432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4749'. [ 1075.642278][T23432] FAULT_INJECTION: forcing a failure. [ 1075.642278][T23432] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.684517][T23432] CPU: 1 UID: 0 PID: 23432 Comm: syz.1.4749 Not tainted syzkaller #0 PREEMPT(full) [ 1075.684550][T23432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.684564][T23432] Call Trace: [ 1075.684574][T23432] [ 1075.684584][T23432] dump_stack_lvl+0xe8/0x150 [ 1075.684622][T23432] should_fail_ex+0x410/0x560 [ 1075.684663][T23432] should_failslab+0xa8/0x100 [ 1075.684697][T23432] __kmalloc_noprof+0xfe/0x720 [ 1075.684724][T23432] ? nft_pernet+0x23/0x240 [ 1075.684871][T23432] ? nft_set_elem_init+0xa8/0x7e0 [ 1075.684894][T23432] ? nft_set_elem_init+0xa8/0x7e0 [ 1075.684923][T23432] nft_set_elem_init+0xa8/0x7e0 [ 1075.684957][T23432] nf_tables_newsetelem+0x2249/0x4260 [ 1075.685033][T23432] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1075.685080][T23432] ? nla_validate_array+0xfc/0x260 [ 1075.685144][T23432] ? reacquire_held_locks+0x104/0x190 [ 1075.685169][T23432] ? __pfx___nla_validate_parse+0x10/0x10 [ 1075.685201][T23432] ? nfnetlink_rcv+0x8d1/0x28c0 [ 1075.685240][T23432] ? nfnl_pernet+0x23/0x240 [ 1075.685273][T23432] ? nfnl_pernet+0x23/0x240 [ 1075.685315][T23432] ? __nla_parse+0x40/0x60 [ 1075.685344][T23432] nfnetlink_rcv+0x1288/0x28c0 [ 1075.685414][T23432] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1075.685465][T23432] ? ref_tracker_free+0x689/0x830 [ 1075.685514][T23432] ? skb_clone+0x246/0x3a0 [ 1075.685540][T23432] ? __netlink_deliver_tap+0x811/0x860 [ 1075.685572][T23432] ? netlink_deliver_tap+0x2e/0x1b0 [ 1075.685594][T23432] ? netlink_deliver_tap+0x2e/0x1b0 [ 1075.685622][T23432] netlink_unicast+0x7bd/0x940 [ 1075.685668][T23432] netlink_sendmsg+0x813/0xb40 [ 1075.685702][T23432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.685729][T23432] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1075.685770][T23432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.685792][T23432] sock_sendmsg_nosec+0x13a/0x180 [ 1075.685822][T23432] ____sys_sendmsg+0x54e/0x850 [ 1075.685862][T23432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1075.685907][T23432] ? import_iovec+0x73/0xa0 [ 1075.685935][T23432] ___sys_sendmsg+0x2a5/0x360 [ 1075.685968][T23432] ? __lock_acquire+0x683/0x2cf0 [ 1075.686004][T23432] ? __pfx____sys_sendmsg+0x10/0x10 [ 1075.686077][T23432] ? __fget_files+0x2a/0x420 [ 1075.686137][T23432] ? __fget_files+0x3a2/0x420 [ 1075.686179][T23432] __x64_sys_sendmsg+0x1b1/0x290 [ 1075.686212][T23432] ? perf_trace_preemptirq_template+0x270/0x350 [ 1075.686247][T23432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1075.686304][T23432] do_syscall_64+0x166/0x520 [ 1075.686329][T23432] ? trace_irq_disable+0x3b/0x140 [ 1075.686358][T23432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.686381][T23432] ? clear_bhb_loop+0x70/0xc0 [ 1075.686409][T23432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.686432][T23432] RIP: 0033:0x7fce5af9e0d9 [ 1075.686454][T23432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.686474][T23432] RSP: 002b:00007fce5bf27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.686499][T23432] RAX: ffffffffffffffda RBX: 00007fce5b225fa0 RCX: 00007fce5af9e0d9 [ 1075.686515][T23432] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1075.686530][T23432] RBP: 00007fce5bf27090 R08: 0000000000000000 R09: 0000000000000000 [ 1075.686544][T23432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1075.686557][T23432] R13: 00007fce5b226038 R14: 00007fce5b225fa0 R15: 00007fff869ed018 [ 1075.686593][T23432] [ 1075.696503][T23433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'. [ 1076.568915][T23450] netlink: 'syz.2.4754': attribute type 4 has an invalid length. [ 1076.596867][T23450] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4754'. [ 1076.684899][T14370] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1076.700893][T14370] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1076.711008][T14370] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1076.719922][T14370] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1076.731589][T14370] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1077.868830][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.034941][T23475] netlink: 'syz.2.4758': attribute type 21 has an invalid length. [ 1078.074627][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.427072][ T48] bond0: (slave netdevsim1): Releasing backup interface [ 1078.510635][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.703596][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.812736][T14370] Bluetooth: hci0: command tx timeout [ 1079.076741][ T48] bridge_slave_1: left allmulticast mode [ 1079.082825][ T48] bridge_slave_1: left promiscuous mode [ 1079.091122][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.102257][ T48] bridge_slave_0: left allmulticast mode [ 1079.108514][ T48] bridge_slave_0: left promiscuous mode [ 1079.115758][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.441521][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.456447][ T48] bond0 (unregistering): Released all slaves [ 1080.161637][T23452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.169442][T23452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.177156][T23452] bridge_slave_0: entered allmulticast mode [ 1080.187185][T23452] bridge_slave_0: entered promiscuous mode [ 1080.226501][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1080.234157][T23452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.255472][T23452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.271564][T23452] bridge_slave_1: entered allmulticast mode [ 1080.296650][T23452] bridge_slave_1: entered promiscuous mode [ 1080.419103][T23452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.459362][T23452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.557533][T23452] team0: Port device team_slave_0 added [ 1080.583301][T23452] team0: Port device team_slave_1 added [ 1080.707739][T23452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.747272][T23452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.855813][T23452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.893341][T14370] Bluetooth: hci0: command tx timeout [ 1080.908985][T23452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.942463][T23452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.022479][T23452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.114144][ T48] hsr_slave_0: left promiscuous mode [ 1081.133476][ T48] hsr_slave_1: left promiscuous mode [ 1081.141047][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.170197][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.184793][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.202460][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.219082][ T48] veth1_macvtap: left promiscuous mode [ 1081.225676][ T48] veth1_vlan: left promiscuous mode [ 1081.242541][ T48] veth0_vlan: left promiscuous mode [ 1081.404079][T11987] smc: removing ib device syz [ 1081.520646][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1081.538536][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1081.672550][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1081.681637][T13417] syz: Port: 1 Link DOWN [ 1081.761215][T22539] ================================================================== [ 1081.769350][T22539] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 1081.778248][T22539] Read of size 1 at addr ffff888031852e09 by task kworker/1:0/22539 [ 1081.786256][T22539] [ 1081.788608][T22539] CPU: 1 UID: 0 PID: 22539 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 1081.788631][T22539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1081.788645][T22539] Workqueue: events smc_ib_port_event_work [ 1081.788764][T22539] Call Trace: [ 1081.788772][T22539] [ 1081.788780][T22539] dump_stack_lvl+0xe8/0x150 [ 1081.788808][T22539] print_address_description+0x55/0x1e0 [ 1081.788833][T22539] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1081.788857][T22539] print_report+0x58/0x70 [ 1081.788879][T22539] kasan_report+0x117/0x150 [ 1081.788906][T22539] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1081.788933][T22539] __ethtool_get_link_ksettings+0x230/0x250 [ 1081.788959][T22539] __ethtool_get_link_ksettings+0x11f/0x250 [ 1081.788983][T22539] ib_get_eth_speed+0x180/0x7f0 [ 1081.789071][T22539] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1081.789097][T22539] ? do_raw_spin_unlock+0xf5/0x200 [ 1081.789120][T22539] ? rxe_query_port+0x6b/0x3d0 [ 1081.789168][T22539] rxe_query_port+0x93/0x3d0 [ 1081.789191][T22539] ib_query_port+0x16e/0x830 [ 1081.789239][T22539] smc_ib_port_event_work+0x147/0x920 [ 1081.789273][T22539] ? rcu_is_watching+0x16/0xb0 [ 1081.789293][T22539] ? process_scheduled_works+0xa1a/0x14c0 [ 1081.789314][T22539] process_scheduled_works+0xa88/0x14c0 [ 1081.789348][T22539] ? __pfx_process_scheduled_works+0x10/0x10 [ 1081.789373][T22539] ? assign_work+0x3cf/0x5d0 [ 1081.789395][T22539] worker_thread+0xa47/0xfb0 [ 1081.789423][T22539] ? __kthread_parkme+0x71/0x1f0 [ 1081.789451][T22539] kthread+0x38b/0x480 [ 1081.789477][T22539] ? __pfx_worker_thread+0x10/0x10 [ 1081.789498][T22539] ? __pfx_kthread+0x10/0x10 [ 1081.789523][T22539] ret_from_fork+0x514/0xb70 [ 1081.789551][T22539] ? __pfx_ret_from_fork+0x10/0x10 [ 1081.789578][T22539] ? __switch_to+0xc89/0x1420 [ 1081.789601][T22539] ? __pfx_kthread+0x10/0x10 [ 1081.789628][T22539] ret_from_fork_asm+0x1a/0x30 [ 1081.789663][T22539] [ 1081.789670][T22539] [ 1081.978189][T22539] Allocated by task 5622: [ 1081.982536][T22539] kasan_save_track+0x3e/0x80 [ 1081.987240][T22539] __kasan_kmalloc+0x93/0xb0 [ 1081.991849][T22539] __kvmalloc_node_noprof+0x543/0x870 [ 1081.997243][T22539] alloc_netdev_mqs+0xa9/0x12a0 [ 1082.002168][T22539] rtnl_create_link+0x321/0xd70 [ 1082.007069][T22539] rtnl_newlink_create+0x258/0x7b0 [ 1082.012281][T22539] rtnl_newlink+0x166d/0x1c30 [ 1082.016995][T22539] rtnetlink_rcv_msg+0x802/0xc00 [ 1082.021960][T22539] netlink_rcv_skb+0x226/0x4a0 [ 1082.026751][T22539] netlink_unicast+0x7bd/0x940 [ 1082.031545][T22539] netlink_sendmsg+0x813/0xb40 [ 1082.036334][T22539] sock_sendmsg_nosec+0x13a/0x180 [ 1082.041393][T22539] __sys_sendto+0x408/0x5a0 [ 1082.045926][T22539] __x64_sys_sendto+0xde/0x100 [ 1082.050721][T22539] do_syscall_64+0x166/0x520 [ 1082.055344][T22539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.061257][T22539] [ 1082.063597][T22539] Freed by task 48: [ 1082.067420][T22539] kasan_save_track+0x3e/0x80 [ 1082.072141][T22539] kasan_save_free_info+0x40/0x50 [ 1082.077198][T22539] __kasan_slab_free+0x5c/0x80 [ 1082.081986][T22539] kfree+0x1c5/0x640 [ 1082.085905][T22539] device_release+0xc4/0x1f0 [ 1082.090592][T22539] kobject_put+0x222/0x550 [ 1082.095038][T22539] netdev_run_todo+0xeee/0x1060 [ 1082.099959][T22539] default_device_exit_batch+0x923/0x9a0 [ 1082.105639][T22539] ops_undo_list+0x4b4/0x8d0 [ 1082.110333][T22539] cleanup_net+0x572/0x810 [ 1082.114779][T22539] process_scheduled_works+0xa88/0x14c0 [ 1082.120345][T22539] worker_thread+0xa47/0xfb0 [ 1082.124956][T22539] kthread+0x38b/0x480 [ 1082.129068][T22539] ret_from_fork+0x514/0xb70 [ 1082.133683][T22539] ret_from_fork_asm+0x1a/0x30 [ 1082.138468][T22539] [ 1082.140804][T22539] The buggy address belongs to the object at ffff888031852000 [ 1082.140804][T22539] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1082.155147][T22539] The buggy address is located 3593 bytes inside of [ 1082.155147][T22539] freed 4096-byte region [ffff888031852000, ffff888031853000) [ 1082.169142][T22539] [ 1082.171482][T22539] The buggy address belongs to the physical page: [ 1082.177919][T22539] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31850 [ 1082.186711][T22539] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1082.195224][T22539] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1082.202795][T22539] page_type: f5(slab) [ 1082.206805][T22539] raw: 00fff00000000040 ffff88801b00b500 dead000000000100 dead000000000122 [ 1082.215402][T22539] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1082.223998][T22539] head: 00fff00000000040 ffff88801b00b500 dead000000000100 dead000000000122 [ 1082.232690][T22539] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 1082.241376][T22539] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1082.250058][T22539] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1082.258737][T22539] page dumped because: kasan: bad access detected [ 1082.265181][T22539] page_owner tracks the page as allocated [ 1082.270989][T22539] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5622, tgid 5622 (syz-executor), ts 91044425992, free_ts 59023521445 [ 1082.294118][T22539] post_alloc_hook+0x1f9/0x250 [ 1082.298906][T22539] get_page_from_freelist+0x21fe/0x2270 [ 1082.304476][T22539] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1082.310307][T22539] allocate_slab+0x79/0x5e0 [ 1082.314846][T22539] refill_objects+0x2d5/0x350 [ 1082.319547][T22539] __pcs_replace_empty_main+0x2c3/0x6b0 [ 1082.325115][T22539] __kvmalloc_node_noprof+0x66f/0x870 [ 1082.330511][T22539] alloc_netdev_mqs+0xa9/0x12a0 [ 1082.335405][T22539] rtnl_create_link+0x321/0xd70 [ 1082.340286][T22539] rtnl_newlink_create+0x258/0x7b0 [ 1082.345426][T22539] rtnl_newlink+0x166d/0x1c30 [ 1082.350144][T22539] rtnetlink_rcv_msg+0x802/0xc00 [ 1082.355108][T22539] netlink_rcv_skb+0x226/0x4a0 [ 1082.359900][T22539] netlink_unicast+0x7bd/0x940 [ 1082.364699][T22539] netlink_sendmsg+0x813/0xb40 [ 1082.369481][T22539] sock_sendmsg_nosec+0x13a/0x180 [ 1082.374531][T22539] page last free pid 5415 tgid 5415 stack trace: [ 1082.380872][T22539] __free_frozen_pages+0xc22/0xd20 [ 1082.386002][T22539] __slab_free+0x274/0x2c0 [ 1082.390448][T22539] qlist_free_all+0x99/0x100 [ 1082.395058][T22539] kasan_quarantine_reduce+0x148/0x160 [ 1082.400536][T22539] __kasan_slab_alloc+0x22/0x80 [ 1082.405404][T22539] __kvmalloc_node_noprof+0x4d1/0x870 [ 1082.410832][T22539] bpf_jit_binary_pack_alloc+0x10a/0x300 [ 1082.416483][T22539] bpf_int_jit_compile+0xa16/0x17e0 [ 1082.421702][T22539] __bpf_prog_select_runtime+0x53e/0xbf0 [ 1082.427370][T22539] bpf_prepare_filter+0x10df/0x12d0 [ 1082.432592][T22539] bpf_prog_create_from_user+0x2c6/0x440 [ 1082.438261][T22539] do_seccomp+0x793/0xdc0 [ 1082.442604][T22539] __se_sys_prctl+0x2a5/0x1910 [ 1082.447401][T22539] do_syscall_64+0x166/0x520 [ 1082.452014][T22539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.457922][T22539] [ 1082.460261][T22539] Memory state around the buggy address: [ 1082.465900][T22539] ffff888031852d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1082.473975][T22539] ffff888031852d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1082.482050][T22539] >ffff888031852e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1082.490116][T22539] ^ [ 1082.494448][T22539] ffff888031852e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1082.502523][T22539] ffff888031852f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 1082.510680][T22539] ================================================================== [ 1082.656951][T22539] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1082.664238][T22539] CPU: 1 UID: 0 PID: 22539 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 1082.673737][T22539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1082.683831][T22539] Workqueue: events smc_ib_port_event_work [ 1082.689704][T22539] Call Trace: [ 1082.693017][T22539] [ 1082.695978][T22539] vpanic+0x56d/0xa60 [ 1082.700016][T22539] ? __pfx_vpanic+0x10/0x10 [ 1082.704574][T22539] panic+0xc5/0xd0 [ 1082.708338][T22539] ? __pfx_panic+0x10/0x10 [ 1082.712802][T22539] ? preempt_schedule_thunk+0x16/0x40 [ 1082.718212][T22539] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1082.724321][T22539] ? preempt_schedule_thunk+0x16/0x40 [ 1082.729822][T22539] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1082.735936][T22539] check_panic_on_warn+0x89/0xb0 [ 1082.740926][T22539] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1082.747040][T22539] end_report+0x73/0x170 [ 1082.751324][T22539] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1082.757526][T22539] kasan_report+0x128/0x150 [ 1082.762077][T22539] ? __ethtool_get_link_ksettings+0x230/0x250 [ 1082.768185][T22539] __ethtool_get_link_ksettings+0x230/0x250 [ 1082.774113][T22539] __ethtool_get_link_ksettings+0x11f/0x250 [ 1082.780060][T22539] ib_get_eth_speed+0x180/0x7f0 [ 1082.784966][T22539] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1082.790384][T22539] ? do_raw_spin_unlock+0xf5/0x200 [ 1082.795522][T22539] ? rxe_query_port+0x6b/0x3d0 [ 1082.800307][T22539] rxe_query_port+0x93/0x3d0 [ 1082.804926][T22539] ib_query_port+0x16e/0x830 [ 1082.809559][T22539] smc_ib_port_event_work+0x147/0x920 [ 1082.815006][T22539] ? rcu_is_watching+0x16/0xb0 [ 1082.819805][T22539] ? process_scheduled_works+0xa1a/0x14c0 [ 1082.825596][T22539] process_scheduled_works+0xa88/0x14c0 [ 1082.831192][T22539] ? __pfx_process_scheduled_works+0x10/0x10 [ 1082.837214][T22539] ? assign_work+0x3cf/0x5d0 [ 1082.841845][T22539] worker_thread+0xa47/0xfb0 [ 1082.846507][T22539] ? __kthread_parkme+0x71/0x1f0 [ 1082.851470][T22539] kthread+0x38b/0x480 [ 1082.855572][T22539] ? __pfx_worker_thread+0x10/0x10 [ 1082.860736][T22539] ? __pfx_kthread+0x10/0x10 [ 1082.865367][T22539] ret_from_fork+0x514/0xb70 [ 1082.869989][T22539] ? __pfx_ret_from_fork+0x10/0x10 [ 1082.875132][T22539] ? __switch_to+0xc89/0x1420 [ 1082.879873][T22539] ? __pfx_kthread+0x10/0x10 [ 1082.884549][T22539] ret_from_fork_asm+0x1a/0x30 [ 1082.889349][T22539] [ 1082.893013][T22539] Kernel Offset: disabled [ 1082.897341][T22539] Rebooting in 86400 seconds..