last executing test programs: 9m20.016126593s ago: executing program 1 (id=3747): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x5f, 0xfe, 0x7, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110300, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a00000080000000064242"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='-@^\\]-/#[-:\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe6e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x5, 0x5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000d00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x2, 0x4, 0x80008, 0xc, 0x414}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9m19.503634368s ago: executing program 1 (id=3753): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000280), 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000380)={&(0x7f0000002540)=ANY=[@ANYBLOB="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"], 0xe00}, 0x1, 0x7}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x48c4) bpf$PROG_LOAD(0x5, &(0x7f0000001ec0)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002040)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_SET_USERDATA={0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x88, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6e}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf2ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x591}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}}, @NFT_MSG_NEWRULE={0xf8, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8884}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xa7, 0x7, 0x1, 0x0, "23fc5f1a08ae4d8e304c824eb0d1339844a0fe7bafee04f22a396e74346921403779e71170dde089d1a30b4f6e39b88e73dcdb9bff01458eb6373ef678f5cff96eb119d913a6ca9e9a3fdc54aaa34b5b8738dc7ed6209b33a654b2ce379610db2f70dca9d7b548c861c6b4a42d1d4007e56a6e720816e23b6fd7f3477d43589709e2f847b83b8162a1ac4701e134629e24fc52177d5db1ff9085d9c73267d11bb19396"}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x240}, 0x1, 0x0, 0x0, 0xc0}, 0x80c4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000022c0)={'wlan0\x00', 0x200}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000002380)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1577}, {0xc}, {0xe, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0xfffffffb, 0xf8b87a133db13eca, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x5c}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000002400)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114244, 0x6, 0xafe8, 0x2, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 9m18.574095931s ago: executing program 1 (id=3763): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x9, 0x4, 0x17, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4008874}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000580)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="980000002600010125bd7000fcffc76d3100000008000300"], 0x98}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a"], 0x40}}, 0x8000) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x12040) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x200000000000000) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40034) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x13, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18080000000010000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800fffdb50a00000000000085000000060000009500000000000000"], &(0x7f0000000b80)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000bc0)=""/222, 0x0, 0x8}, 0x78) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB], 0x90}}, 0x4) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 9m18.264555564s ago: executing program 1 (id=3769): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000008c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r2, &(0x7f0000000a40), &(0x7f0000000a80)=""/77}, 0x20) 9m18.075650469s ago: executing program 1 (id=3772): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x1, 0x20000007, 0x0, 0x1}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)={0x14, 0x18, 0x301, 0x70bd2a, 0x25dfdbfa, {0x45}}, 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x40000) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r1, 0x5, 0xe, 0x0, &(0x7f0000000940)="259a00f271a7f74588a80a3888a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9m15.36374908s ago: executing program 1 (id=3784): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000", @ANYRES32=r2, @ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001a80)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x7}, 0x8, 0x0, 0x0, 0x5, 0x9, 0x6, 0x20, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r3 = getpid() r4 = perf_event_open(&(0x7f0000001b00)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x5, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x2000c000) r7 = perf_event_open(&(0x7f0000001d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x80000000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x11b9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=@newtaction={0x29c, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x288, 0x1, [@m_xt={0x124, 0xe, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x61}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x38, 0x6, {0xa0, 'mangle\x00', 0x2, 0x9, "56cf8534b0b46d85347389c20f41"}}]}, {0x73, 0x6, "c8474d2cf7310011fed551c1d7f4a6fe2f9fe55d00d07c1e0de8bd89f312365d8dacefbb84c4c958bd467458d8d592efa3fb37d34c9f999f710a682b9ff9f1fd135db9ce2c8b0a9339e9f759334bec21f0ec16d73c266cd54808f7f5e7cef0fa72ef191d6b7f85510a67879a1a0ea4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x160, 0x14, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "2b0b7948a184ad86b1d401278f974eee"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "da776a81825ec30156642aff00"}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x26e736b4, 0x3, 0x1, 0x3}}, @TCA_CT_ZONE={0x6, 0x4, 0x3}]}, {0xee, 0x6, "719c08a0fe3e0e752606026f424d2450be508b720e70df80cb81be67d3d72b27bcf01128de0d32b0a8a1b6073d6ce16864394b8b824f103f8fc18a80407fdd117111216890ede7047e982e2475fc1407e46d6f8cd61d95ac780249b28c13102fc28aa563bd1319229da306341c5da4e04388708f5cc7ded45ab1c782b188bc9cc51654775b345d6b030db0eac6185cd96c1739a5890c0bb40d54bc84e0f2eaffa0e3bc85ab8843a3aece6ef06754fa67ea089afb0649cf87f69e6873c5509d7d51157e637b7de7e97a38df1ce8388e0d98f77e1d7669c078ee5df676a621ed7c458a6185c9e3890cafcd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x29c}}, 0x0) perf_event_open(&(0x7f0000002100)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffffff7}, 0x4008, 0x7ffffffc, 0x0, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, r3, 0x7fffffffffffffff, r7, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=@newtaction={0x78, 0x30, 0xb, 0x80002000, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8, 0x1}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x4, 0x4, 0x0, 0x22f1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m14.824764907s ago: executing program 32 (id=3784): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x0, 0x0, 0x18}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000440)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000300), &(0x7f0000000340)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f0000000540)=ANY=[@ANYBLOB="1808000000000000", @ANYRES32=r2, @ANYBLOB], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000001a80)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x7}, 0x8, 0x0, 0x0, 0x5, 0x9, 0x6, 0x20, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r3 = getpid() r4 = perf_event_open(&(0x7f0000001b00)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x5, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r6, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x2000c000) r7 = perf_event_open(&(0x7f0000001d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x80000000}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x11b9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)=@newtaction={0x29c, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0x288, 0x1, [@m_xt={0x124, 0xe, 0x0, 0x0, {{0x7}, {0x8c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x61}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TARG={0x38, 0x6, {0xa0, 'mangle\x00', 0x2, 0x9, "56cf8534b0b46d85347389c20f41"}}]}, {0x73, 0x6, "c8474d2cf7310011fed551c1d7f4a6fe2f9fe55d00d07c1e0de8bd89f312365d8dacefbb84c4c958bd467458d8d592efa3fb37d34c9f999f710a682b9ff9f1fd135db9ce2c8b0a9339e9f759334bec21f0ec16d73c266cd54808f7f5e7cef0fa72ef191d6b7f85510a67879a1a0ea4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ct={0x160, 0x14, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "2b0b7948a184ad86b1d401278f974eee"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "da776a81825ec30156642aff00"}, @TCA_CT_PARMS={0x18, 0x1, {0x9, 0x26e736b4, 0x3, 0x1, 0x3}}, @TCA_CT_ZONE={0x6, 0x4, 0x3}]}, {0xee, 0x6, "719c08a0fe3e0e752606026f424d2450be508b720e70df80cb81be67d3d72b27bcf01128de0d32b0a8a1b6073d6ce16864394b8b824f103f8fc18a80407fdd117111216890ede7047e982e2475fc1407e46d6f8cd61d95ac780249b28c13102fc28aa563bd1319229da306341c5da4e04388708f5cc7ded45ab1c782b188bc9cc51654775b345d6b030db0eac6185cd96c1739a5890c0bb40d54bc84e0f2eaffa0e3bc85ab8843a3aece6ef06754fa67ea089afb0649cf87f69e6873c5509d7d51157e637b7de7e97a38df1ce8388e0d98f77e1d7669c078ee5df676a621ed7c458a6185c9e3890cafcd"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x29c}}, 0x0) perf_event_open(&(0x7f0000002100)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffffff7}, 0x4008, 0x7ffffffc, 0x0, 0x4, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, r3, 0x7fffffffffffffff, r7, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=@newtaction={0x78, 0x30, 0xb, 0x80002000, 0x0, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8, 0x1}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x4, 0x4, 0x0, 0x22f1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m19.008243858s ago: executing program 3 (id=4237): r0 = getpid() socket$kcm(0x29, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x110244, 0x0, 0xafe8, 0x4, 0x7ffe, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x0, 0x10, &(0x7f0000001240)}, 0x42) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 8m18.511985341s ago: executing program 3 (id=4241): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8001c000831cf64e59a180081064e81f782db44fd56170d", 0x18}], 0x1}, 0x8040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={0xffffffffffffffff, r1}) 8m18.362302346s ago: executing program 3 (id=4242): r0 = perf_event_open(&(0x7f0000000c00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x2030, 0x3, 0x0, 0x0, 0x24, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000f40)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000000000005d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffff7fffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x8004080}, 0x8084) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8m18.25357016s ago: executing program 3 (id=4243): r0 = getpid() socket$kcm(0x29, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x110244, 0x0, 0xafe8, 0x4, 0x7ffe, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f00000011c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x0, 0x10, &(0x7f0000001240)}, 0x42) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x11, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x94}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, 'H\x00\x00\x00\x00\x00\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf0}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 8m17.44994601s ago: executing program 3 (id=4245): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x1, 0x20000007, 0x0, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000180"], &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x5, 0xe, 0x0, &(0x7f0000000940)="259a00f271a7f74588a80a3888a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8m13.23019761s ago: executing program 3 (id=4263): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x9, 0x4, 0x17, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4008874}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000580)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="980000002600010125bd7000fcffc76d3100000008000300"], 0x98}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a3100000000090001"], 0x40}}, 0x8000) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x12040) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x200000000000000) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40034) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x13, 0x0, &(0x7f0000000b80)='GPL\x00', 0xa, 0xde, &(0x7f0000000bc0)=""/222, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100"], 0x90}}, 0x4) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 8m12.762547408s ago: executing program 33 (id=4263): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x1, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x9, 0x4, 0x17, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0xa) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4008874}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000500), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000540)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000580)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="980000002600010125bd7000fcffc76d3100000008000300"], 0x98}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a3100000000090001"], 0x40}}, 0x8000) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x12040) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x5421, 0x200000000000000) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x40034) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x13, 0x0, &(0x7f0000000b80)='GPL\x00', 0xa, 0xde, &(0x7f0000000bc0)=""/222, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000120a01040000000000000000020000000900010073797a30000000000900020073797a31000000000800034000000008130004800f000100"], 0x90}}, 0x4) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) 6m12.936215148s ago: executing program 5 (id=5431): r0 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xffdb, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000080)=[{0x0}, {&(0x7f00000000c0)="9acb2d866a3f0c", 0x7}], 0x2}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x100, 0x1}, 0x100022, 0x8004, 0x3, 0x3, 0x2, 0xfffff274, 0xffff, 0x0, 0x0, 0x0, 0x400000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB='\x00'/13, @ANYRES32], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000600), 0x43) r6 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000a00), 0x43) sendmsg$kcm(r6, &(0x7f0000000a40)={&(0x7f0000000a80)=@tipc, 0x80, 0x0}, 0x0) 6m12.059658552s ago: executing program 5 (id=5439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xb, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0, 0x2}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x0, 0x7}, 0x10200, 0x1, 0x2, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xac, 0x6, 0x4, 0x38, 0x0, 0xe54, 0x8d84, 0x16, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd93a, 0x2, @perf_config_ext={0x3, 0x2}, 0x1040, 0xfff, 0x2, 0x2, 0x906b, 0x5, 0xb, 0x0, 0x10000, 0x0, 0x5}, r4, 0x9, r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000800000001"], 0x50) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 6m10.977331187s ago: executing program 5 (id=5446): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0), 0x8}, 0x94) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x1}, 0x404c, 0x1ff, 0x4, 0x4, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) close(r0) 6m10.686628239s ago: executing program 5 (id=5451): mkdir(&(0x7f0000000000)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f00000001c0)='./file0/../file0\x00', 0x190) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a389, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xb, 0x7}, 0x0, 0x8000000000005, 0x0, 0x4, 0x6, 0x80000006, 0x0, 0x0, 0x0, 0x0, 0x400200000000003f}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='.\x00', 0x0, 0x8b7840, 0x0) r1 = gettid() r2 = perf_event_open$cgroup(&(0x7f00000005c0)={0x3, 0x80, 0x13, 0x8, 0xf9, 0xb4, 0x0, 0x7, 0x810c0, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x200, 0x1, @perf_bp={&(0x7f0000000580), 0x8}, 0x4000, 0x0, 0x9, 0x3, 0x2, 0x40, 0x1, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x3, r0, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r1, r2, 0x0, 0x1, &(0x7f0000000640)='\x00'}, 0x30) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) sendmsg$xdp(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="cc8bb9a93b1405f1098d7de8f4acfab0b867d4b77a54150c8b3b05e5499cf3572f9eb26530db90ef27da79cb328abb3eeec1236cdcf2a7046512e8314a667834881b56a70e8c386cc83f17d1f8c8e408fbb80f98c8bae56f9ac81ba26bd1c7bf77204a4c688929f89f7642113bfa4974b9c2d079059812c96e026946383b79cb048d2cf9c2bad135cc00cf8ce5c0d2859e8b4e82b015ef1fe48aabfa05440f17b6a513a7fd90d41d4a624c8e0ee46767662518e6a3522310daa1a9ae81f0", 0xbe}], 0x1}, 0x800) openat$cgroup_subtree(r3, &(0x7f00000006c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4060080}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newtfilter={0x68, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x2, 0xb}, {0xfff3, 0xffff}, {0x3, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) sendmsg$NFT_BATCH(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a31000000002800048024000180090001006d6574610000000014000280080003400000000008000240000000020900020073797a32"], 0x7c}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) recvmsg$unix(r3, &(0x7f00000004c0)={&(0x7f0000000340), 0x6e, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/92, 0x5c}], 0x1, &(0x7f0000000480)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x40) 6m10.236800704s ago: executing program 5 (id=5454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x30}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000a40)={&(0x7f0000000a80)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000b00)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6m9.614842685s ago: executing program 5 (id=5458): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socket$kcm(0x23, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000340)={'wlan1\x00', @remote}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 6m9.290473722s ago: executing program 34 (id=5458): bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/time\x00') socket$kcm(0x23, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$kcm(0x2, 0x5, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2545, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r1) socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000340)={'wlan1\x00', @remote}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) 4m15.403118478s ago: executing program 0 (id=6268): r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x44, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xf7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000824d0095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x0, 0x4, &(0x7f0000001c40)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x19}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x0, 0xc, &(0x7f0000001d80)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000001dc0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000001e40), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001e80)={0x7, 0xc, &(0x7f0000001f40)=ANY=[], &(0x7f0000001f80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) close(0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "46c8"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvmsg$unix(r2, &(0x7f0000001b40)={&(0x7f00000000c0), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000140)=""/225, 0xe1}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f0000000600)=""/151, 0x97}, {&(0x7f00000006c0)=""/121, 0x79}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/18, 0x12}, {&(0x7f0000001780)=""/201, 0xc9}, {&(0x7f0000001880)=""/185, 0xb9}], 0x9, &(0x7f0000001a00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x120}, 0x40002001) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, 0x44, 0x109, 0x70bd2d, 0x25dfdbfe, {0x5, 0x7c}, [@nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r10 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x85, 0x12) 4m14.804218966s ago: executing program 0 (id=6272): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000300)) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettaction={0x1c, 0x32, 0x20, 0x70bd26, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = gettid() r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f00000002c0)="1957ab7e4e", 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e"], &(0x7f0000000800)='GPL\x00', 0x4, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940), 0x10}, 0x94) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0xec, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x114905, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f00000019c0)={0x0, 0xfdff, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x7f, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {0x0, 0x400000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff, 0x3}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x4, 0x0, 0x80, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x9}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x7}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x81}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x55b3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x8e46, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x0, 0x40, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x6c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0xe6, 0x0, 0xfffffffd}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x8, 0x1b5532b}, {0x0, 0x0, 0x10000, 0xf, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x1}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x341e0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m14.167775411s ago: executing program 0 (id=6279): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0, 0x2}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x0, 0x7}, 0x10200, 0x1, 0x2, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x12, &(0x7f0000000200)=r1, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 4m13.707621355s ago: executing program 0 (id=6281): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x2, 0x2, 0x0, 0x4, 0x0, 0xf83, [{0x1, 0x5, 0x2}, {0x10, 0x1, 0x5}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000680)=""/41, 0x40, 0x29, 0x1, 0x6949}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000280)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000300)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x989046, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000005c0), 0x4) mount$bpf(0x200000000000, &(0x7f0000000380)='.\x00', 0x0, 0x8b7848, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0xbab7d76e06dff460}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1ac, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x48}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x180}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x20}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x21}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8001}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb50}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x840}]}, @CTA_TUPLE_MASTER={0xe4, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x44010}, 0x80) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0, 0x5}, 0x82, 0x1, 0x0, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x7, &(0x7f00000004c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd4, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x35}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x100224}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x4004814}, 0x0) 4m12.692331571s ago: executing program 0 (id=6288): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000300)) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@gettaction={0x1c, 0x32, 0x20, 0x70bd26, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4810) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xfffffffffffffffd, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = gettid() r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f00000002c0)="1957ab7e4e", 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e"], &(0x7f0000000800)='GPL\x00', 0x4, 0xc3, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940), 0x10}, 0x94) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x8, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) perf_event_open(&(0x7f0000001940)={0x2, 0x80, 0xec, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x114905, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f00000019c0)={0x0, 0xfdff, &(0x7f0000001a00)={&(0x7f0000001a40)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x7f, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {0x0, 0x400000}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff, 0x3}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x4, 0x0, 0x80, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x5, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x9}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {0x0, 0x7}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x81}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x55b3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x8e46, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x0, 0x40, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x6c}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x10000, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0xe6, 0x0, 0xfffffffd}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x8, 0x1b5532b}, {0x0, 0x0, 0x10000, 0xf, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x1}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x341e0}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m12.462974972s ago: executing program 0 (id=6292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xb, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0, 0x2}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x0, 0x7}, 0x10200, 0x1, 0x2, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xac, 0x6, 0x4, 0x38, 0x0, 0xe54, 0x8d84, 0x16, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd93a, 0x2, @perf_config_ext={0x3, 0x2}, 0x1040, 0xfff, 0x2, 0x2, 0x906b, 0x5, 0xb, 0x0, 0x10000, 0x0, 0x5}, r2, 0x9, r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000016000d002cbd7000bedbdf25317c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000800000001"], 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 4m11.922087162s ago: executing program 35 (id=6292): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xb, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000800)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0, 0x2}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x0, 0x7}, 0x10200, 0x1, 0x2, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0xac, 0x6, 0x4, 0x38, 0x0, 0xe54, 0x8d84, 0x16, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd93a, 0x2, @perf_config_ext={0x3, 0x2}, 0x1040, 0xfff, 0x2, 0x2, 0x906b, 0x5, 0xb, 0x0, 0x10000, 0x0, 0x5}, r2, 0x9, r1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000016000d002cbd7000bedbdf25317c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20048891}, 0x8010) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000800000001"], 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 6.055992243s ago: executing program 2 (id=7980): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000006880)=@bpf_lsm={0x6, 0x3, &(0x7f0000006940)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000006980)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000069c0)={r0, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4.519518537s ago: executing program 2 (id=7986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005ec0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x3c, 0x3, 0x1, 0x10cc772671b1322d, 0x0, 0x0, {0x15, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xa}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3c02}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x14}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa0}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200408c0}, 0x8008040) 4.420594904s ago: executing program 2 (id=7990): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f000000bb40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x13, 0x8, 0x0, 0xe, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e20, @broadcast}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e24, @local}}]}, 0x70}}, 0x10) 4.420324651s ago: executing program 8 (id=7991): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0xfe, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, &(0x7f0000000540)=@framed={{}, [@generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.388040421s ago: executing program 2 (id=7992): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x5, 0x4, 0x8, 0x100, 0x0, 0x1, 0x3ada, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x1, 0xc, &(0x7f0000000ec0)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f80), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000001100)={'syzkaller0\x00', @multicast}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000001140)=r1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) syz_clone(0x4aa29480, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000001180)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.285486525s ago: executing program 8 (id=7996): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000004840)={0x3, 0x0, &(0x7f0000004880)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x8, 0x2, 0xffff}, 0x10}, 0x1, 0x7}, 0x0) 4.167018813s ago: executing program 8 (id=8000): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f0000000040)={'veth0_virt_wifi\x00', @random="5d2ce4d120e3"}) 4.033303812s ago: executing program 4 (id=8002): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000140)='GPL\x00'}, 0x94) 4.032932413s ago: executing program 6 (id=8003): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001900010000ad380000000100e00000020000000000000000000000000000000000fffffffffffffff000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000000000000000000001000000010000000000000000000000000000000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200000000000000000fffffffffffffffffe"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000100010000a"], 0xb8}}, 0x2c000010) 4.020087062s ago: executing program 6 (id=8005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="9000000000020104000000000000000002000000040001803c0003800c00028005000100840000002c00018014000300fe80000000000000000000000000002a07000400ff0100000000000000000000000000013c0002802c000180"], 0x90}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) 3.871951863s ago: executing program 6 (id=8006): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=@newtfilter={0x34, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 3.871616023s ago: executing program 4 (id=8007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb704000000000000850000000200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x3e, 0x0, &(0x7f00000005c0)="00000000d4070000000000000000622b951b5ecd6ea23e7f71914844c93adf72bfeebf356d50c7f706cf4a1b0ba200"/62, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffeffb}, 0x48) 3.81719441s ago: executing program 4 (id=8008): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x84, 0x30, 0x1, 0xe501, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x0, 0x1}, {}, 0x8001}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 1.675117352s ago: executing program 7 (id=8029): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000800000000000fcffffff8500000027000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 771.021807ms ago: executing program 7 (id=8030): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0f00000004000000040000000c"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0xc, 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000001d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d80)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000001e00)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 612.847673ms ago: executing program 7 (id=8031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c001}, 0x40004000) 598.497567ms ago: executing program 7 (id=8032): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000b80)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000bc0)=r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000004c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000006c0)) 315.722741ms ago: executing program 4 (id=8033): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@s, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 245.287988ms ago: executing program 6 (id=8034): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newsa={0xf0, 0x18, 0x1, 0x70bd28, 0x100, {{@in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x5, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc841}, 0x0) 245.009057ms ago: executing program 8 (id=8035): bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0xd, 0x4, &(0x7f0000000e40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00, 0x64}}, &(0x7f0000000e80)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000ec0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0), 0x1f2, 0x10, &(0x7f0000001000), 0xfffffe51}, 0x48) 237.688616ms ago: executing program 2 (id=8036): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 201.416817ms ago: executing program 8 (id=8037): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x2, {{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0xc0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x4d2, 0x6c}, @in=@local, {0x0, 0xec2, 0x0, 0x0, 0x7e8, 0xfffffffffffffffc, 0x800000003}, {0x0, 0x3ff, 0x2, 0xfffbfffffffffffe}, {0x7fffffff, 0x0, 0x796}, 0x0, 0x4, 0x0, 0x3, 0x15, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 149.287339ms ago: executing program 7 (id=8038): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001fc0)={0x1f, 0xc, &(0x7f0000002080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000002100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002140)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2000000, 0x46, 0x0, 0x0, 0x0, 0x3}, 0xe) 148.85669ms ago: executing program 6 (id=8039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xc, 0x4, 0x4, 0x100, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x1d, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000880)={r3}, 0xc) 144.47211ms ago: executing program 4 (id=8040): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x38, 0x2c, 0xc05, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @binary="37d7483164b967c6c6fbf4f74ab8a5aa"}]}]}, 0x38}], 0x1}, 0x0) 76.524092ms ago: executing program 6 (id=8041): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 31.251651ms ago: executing program 8 (id=8042): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/2356], &(0x7f0000000a80)='syzkaller\x00'}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0x7, &(0x7f0000000b80)=ANY=[@ANYBLOB="7911a800000000005501020000000000b70000000000000095000000000000008500000089000000b70000000000000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000c80)="b9ff03076044238cb89e36e9080047e0ffff00004000632f77fb8035140cac14140c", 0x0, 0x100fe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.987253ms ago: executing program 2 (id=8043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3800000001010103000000000000000002000000180001800700018008000100ffffffff08000200e00000010c0019800800010004"], 0x38}}, 0x0) 29.923334ms ago: executing program 7 (id=8044): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newqdisc={0x58, 0x14, 0xb0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5}, {0xb, 0x1}, {0xfff4, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xf, '\x00', 0x2, 0x9, 0x1, 0xc}}}}, @qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 0s ago: executing program 4 (id=8045): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x4, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f00000038c0)='GPL\x00', 0x5, 0xc3, &(0x7f0000003900)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000003a00), 0x8, 0x10, &(0x7f0000003a40), 0x10}, 0x47) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003ac0)=ANY=[@ANYRES32, @ANYRES32=r0], 0x14) kernel console output (not intermixed with test programs): 000000000000246 R12: 0000000000000001 [ 936.882763][T27104] R13: 00007f4eebe26128 R14: 00007f4eebe26090 R15: 00007ffdc2d528c8 [ 936.882795][T27104] [ 937.143634][T23589] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.335441][T27103] netlink: 'syz.2.7006': attribute type 10 has an invalid length. [ 937.446308][T23589] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.493059][T27110] netlink: 'syz.8.7009': attribute type 27 has an invalid length. [ 937.493103][T27110] netlink: 152 bytes leftover after parsing attributes in process `syz.8.7009'. [ 937.647174][T23589] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 937.648017][T23589] bridge0: port 3(netdevsim1) entered disabled state [ 937.728997][T23589] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.032610][T23589] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.099481][T27127] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7013'. [ 938.213077][T27121] netlink: 'syz.8.7014': attribute type 10 has an invalid length. [ 938.299561][T27123] netlink: 'syz.7.7015': attribute type 10 has an invalid length. [ 938.592579][T27132] FAULT_INJECTION: forcing a failure. [ 938.592579][T27132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.592625][T27132] CPU: 1 UID: 0 PID: 27132 Comm: syz.6.7016 Not tainted syzkaller #0 PREEMPT(full) [ 938.592648][T27132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 938.592660][T27132] Call Trace: [ 938.592669][T27132] [ 938.592678][T27132] dump_stack_lvl+0xe8/0x150 [ 938.592711][T27132] should_fail_ex+0x3eb/0x540 [ 938.592735][T27132] _copy_from_user+0x2d/0xb0 [ 938.592766][T27132] __sys_bpf+0x2e7/0xe00 [ 938.592792][T27132] ? __pfx___sys_bpf+0x10/0x10 [ 938.592819][T27132] ? __fget_files+0x2a/0x420 [ 938.592858][T27132] ? ksys_write+0x242/0x270 [ 938.592884][T27132] ? __pfx_ksys_write+0x10/0x10 [ 938.592912][T27132] __x64_sys_bpf+0xba/0xd0 [ 938.592940][T27132] do_syscall_64+0x166/0x520 [ 938.592958][T27132] ? trace_irq_disable+0x3b/0x140 [ 938.592981][T27132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.592998][T27132] ? clear_bhb_loop+0x70/0xc0 [ 938.593020][T27132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.593037][T27132] RIP: 0033:0x7f9bdd99f559 [ 938.593053][T27132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 938.593067][T27132] RSP: 002b:00007f9bde90c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 938.593085][T27132] RAX: ffffffffffffffda RBX: 00007f9bddc25fa0 RCX: 00007f9bdd99f559 [ 938.593097][T27132] RDX: 0000000000000048 RSI: 0000200000000300 RDI: 000000000000000a [ 938.593108][T27132] RBP: 00007f9bde90c090 R08: 0000000000000000 R09: 0000000000000000 [ 938.593119][T27132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.593129][T27132] R13: 00007f9bddc26038 R14: 00007f9bddc25fa0 R15: 00007fff878dec98 [ 938.593159][T27132] [ 938.866933][T23589] bridge_slave_1: left allmulticast mode [ 938.866962][T23589] bridge_slave_1: left promiscuous mode [ 938.867248][T23589] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.988950][T23589] bridge_slave_0: left allmulticast mode [ 938.988977][T23589] bridge_slave_0: left promiscuous mode [ 938.989213][T23589] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.017193][T27174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7022'. [ 940.176212][T27177] netlink: 'syz.6.7024': attribute type 27 has an invalid length. [ 940.176251][T27177] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7024'. [ 940.292663][T23589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.295955][T23589] bond0 (unregistering): Released all slaves [ 940.332202][T27186] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7025'. [ 940.335292][T27186] netlink: 15 bytes leftover after parsing attributes in process `syz.7.7025'. [ 940.579144][ T5302] 8021q: adding VLAN 0 to HW filter on device eth13 [ 940.669436][T27196] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7028'. [ 940.750599][T27198] FAULT_INJECTION: forcing a failure. [ 940.750599][T27198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.750665][T27198] CPU: 0 UID: 0 PID: 27198 Comm: syz.7.7029 Not tainted syzkaller #0 PREEMPT(full) [ 940.750691][T27198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 940.750704][T27198] Call Trace: [ 940.750712][T27198] [ 940.750721][T27198] dump_stack_lvl+0xe8/0x150 [ 940.750761][T27198] should_fail_ex+0x3eb/0x540 [ 940.750789][T27198] _copy_from_user+0x2d/0xb0 [ 940.750814][T27198] ___sys_sendmsg+0x1c6/0x360 [ 940.750845][T27198] ? __lock_acquire+0x747/0x2de0 [ 940.750878][T27198] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.750949][T27198] ? __fget_files+0x3a2/0x420 [ 940.750974][T27198] ? __fget_files+0x2a/0x420 [ 940.751009][T27198] __x64_sys_sendmsg+0x1b1/0x290 [ 940.751051][T27198] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.751106][T27198] do_syscall_64+0x166/0x520 [ 940.751128][T27198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.751149][T27198] ? clear_bhb_loop+0x70/0xc0 [ 940.751175][T27198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.751196][T27198] RIP: 0033:0x7f8a1bd9f559 [ 940.751215][T27198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.751233][T27198] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.751255][T27198] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 940.751270][T27198] RDX: 0000000000008094 RSI: 0000200000000640 RDI: 0000000000000006 [ 940.751285][T27198] RBP: 00007f8a19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 940.751298][T27198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.751311][T27198] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 940.751345][T27198] [ 942.172954][T27225] netlink: 'syz.4.7036': attribute type 4 has an invalid length. [ 942.544621][T27236] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7039'. [ 942.544663][T27236] netlink: 1 bytes leftover after parsing attributes in process `syz.7.7039'. [ 942.587684][T27243] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7040'. [ 942.601011][T27243] netlink: 15 bytes leftover after parsing attributes in process `syz.8.7040'. [ 942.618927][T27240] netlink: 'syz.2.7038': attribute type 27 has an invalid length. [ 942.618952][T27240] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7038'. [ 943.121887][ T5302] 8021q: adding VLAN 0 to HW filter on device eth14 [ 943.287280][T23589] hsr_slave_0: left promiscuous mode [ 943.289792][T23589] hsr_slave_1: left promiscuous mode [ 943.305275][T23589] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.305298][T23589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.318871][T23589] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.318893][T23589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.357633][T27262] FAULT_INJECTION: forcing a failure. [ 943.357633][T27262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 943.357680][T27262] CPU: 0 UID: 0 PID: 27262 Comm: syz.8.7047 Not tainted syzkaller #0 PREEMPT(full) [ 943.357707][T27262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 943.357718][T27262] Call Trace: [ 943.357727][T27262] [ 943.357736][T27262] dump_stack_lvl+0xe8/0x150 [ 943.357782][T27262] should_fail_ex+0x3eb/0x540 [ 943.357810][T27262] _copy_from_user+0x2d/0xb0 [ 943.357841][T27262] ___sys_sendmsg+0x1c6/0x360 [ 943.357872][T27262] ? __lock_acquire+0x747/0x2de0 [ 943.357904][T27262] ? __pfx____sys_sendmsg+0x10/0x10 [ 943.357968][T27262] ? __fget_files+0x3a2/0x420 [ 943.357993][T27262] ? __fget_files+0x2a/0x420 [ 943.358027][T27262] __x64_sys_sendmsg+0x1b1/0x290 [ 943.358058][T27262] ? perf_trace_preemptirq_template+0x270/0x350 [ 943.358091][T27262] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 943.358141][T27262] do_syscall_64+0x166/0x520 [ 943.358164][T27262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.358186][T27262] ? clear_bhb_loop+0x70/0xc0 [ 943.358212][T27262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.358233][T27262] RIP: 0033:0x7f1292f9f559 [ 943.358252][T27262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.358271][T27262] RSP: 002b:00007f1293f1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.358293][T27262] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9f559 [ 943.358308][T27262] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000005 [ 943.358321][T27262] RBP: 00007f1293f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 943.358334][T27262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.358346][T27262] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffc32a3b328 [ 943.358378][T27262] [ 943.432415][T23589] veth1_macvtap: left promiscuous mode [ 943.432452][T23589] veth0_macvtap: left promiscuous mode [ 943.936258][T27282] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7050'. [ 944.010017][T27282] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7050'. [ 944.368369][T27282] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7050'. [ 944.499600][T23589] team0 (unregistering): Port device team_slave_1 removed [ 944.575581][T23589] team0 (unregistering): Port device team_slave_0 removed [ 944.877539][T27258] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7045'. [ 944.892687][ T5302] 8021q: adding VLAN 0 to HW filter on device eth15 [ 945.285615][T27316] FAULT_INJECTION: forcing a failure. [ 945.285615][T27316] name failslab, interval 1, probability 0, space 0, times 0 [ 945.285653][T27316] CPU: 0 UID: 0 PID: 27316 Comm: syz.8.7055 Not tainted syzkaller #0 PREEMPT(full) [ 945.285675][T27316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 945.285687][T27316] Call Trace: [ 945.285695][T27316] [ 945.285704][T27316] dump_stack_lvl+0xe8/0x150 [ 945.285743][T27316] should_fail_ex+0x3eb/0x540 [ 945.285770][T27316] should_failslab+0xa8/0x100 [ 945.285822][T27316] __kmalloc_noprof+0xf9/0x710 [ 945.285848][T27316] ? unregister_netdevice_many_notify+0x89a/0x1d80 [ 945.285876][T27316] ? unregister_netdevice_many_notify+0x89a/0x1d80 [ 945.285911][T27316] unregister_netdevice_many_notify+0x89a/0x1d80 [ 945.285939][T27316] ? __pfx___mutex_trylock_common+0x10/0x10 [ 945.285994][T27316] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 945.286017][T27316] ? __mutex_lock+0x305/0x15a0 [ 945.286039][T27316] ? ima_file_free+0x16c/0x5d0 [ 945.286065][T27316] ? __pfx_ima_file_free+0x10/0x10 [ 945.286085][T27316] ? __asan_memset+0x22/0x50 [ 945.286108][T27316] ? __fsnotify_parent+0x267/0x620 [ 945.286244][T27316] unregister_netdevice_queue+0x2f5/0x340 [ 945.286270][T27316] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 945.286304][T27316] ppp_release+0xec/0x130 [ 945.286385][T27316] ? __pfx_ppp_release+0x10/0x10 [ 945.286403][T27316] __fput+0x408/0xa40 [ 945.286433][T27316] fput_close_sync+0x11f/0x240 [ 945.286454][T27316] ? __pfx_fput_close_sync+0x10/0x10 [ 945.286477][T27316] ? do_raw_spin_unlock+0xf5/0x200 [ 945.286505][T27316] __se_sys_close+0xa2/0x160 [ 945.286546][T27316] do_syscall_64+0x166/0x520 [ 945.286584][T27316] ? trace_irq_disable+0x3b/0x140 [ 945.286613][T27316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.286659][T27316] ? clear_bhb_loop+0x70/0xc0 [ 945.286686][T27316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.286706][T27316] RIP: 0033:0x7f1292f9f559 [ 945.286726][T27316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.286745][T27316] RSP: 002b:00007f1293f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 945.286768][T27316] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9f559 [ 945.286784][T27316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 945.286796][T27316] RBP: 00007f1293f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 945.286810][T27316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.286823][T27316] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffc32a3b328 [ 945.286857][T27316] [ 945.772775][T27321] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7057'. [ 947.013200][ T5302] 8021q: adding VLAN 0 to HW filter on device eth16 [ 947.162503][T27374] FAULT_INJECTION: forcing a failure. [ 947.162503][T27374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.162536][T27374] CPU: 1 UID: 0 PID: 27374 Comm: syz.4.7069 Not tainted syzkaller #0 PREEMPT(full) [ 947.162558][T27374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 947.162570][T27374] Call Trace: [ 947.162578][T27374] [ 947.162587][T27374] dump_stack_lvl+0xe8/0x150 [ 947.162625][T27374] should_fail_ex+0x3eb/0x540 [ 947.162652][T27374] _copy_from_user+0x2d/0xb0 [ 947.162676][T27374] ___sys_sendmsg+0x1c6/0x360 [ 947.162706][T27374] ? __lock_acquire+0x747/0x2de0 [ 947.162736][T27374] ? __pfx____sys_sendmsg+0x10/0x10 [ 947.162803][T27374] ? __fget_files+0x3a2/0x420 [ 947.162827][T27374] ? __fget_files+0x2a/0x420 [ 947.162871][T27374] __x64_sys_sendmsg+0x1b1/0x290 [ 947.162901][T27374] ? perf_trace_preemptirq_template+0x270/0x350 [ 947.162933][T27374] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 947.162985][T27374] do_syscall_64+0x166/0x520 [ 947.163005][T27374] ? trace_irq_disable+0x3b/0x140 [ 947.163031][T27374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.163051][T27374] ? clear_bhb_loop+0x70/0xc0 [ 947.163075][T27374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.163096][T27374] RIP: 0033:0x7f4eebb9f559 [ 947.163114][T27374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.163132][T27374] RSP: 002b:00007f4eecb46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.163154][T27374] RAX: ffffffffffffffda RBX: 00007f4eebe25fa0 RCX: 00007f4eebb9f559 [ 947.163169][T27374] RDX: 0000000004004080 RSI: 0000200000000240 RDI: 0000000000000003 [ 947.163182][T27374] RBP: 00007f4eecb46090 R08: 0000000000000000 R09: 0000000000000000 [ 947.163195][T27374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.163206][T27374] R13: 00007f4eebe26038 R14: 00007f4eebe25fa0 R15: 00007ffdc2d528c8 [ 947.163238][T27374] [ 947.950928][T27394] __nla_validate_parse: 5 callbacks suppressed [ 947.950951][T27394] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7075'. [ 947.962817][T27394] netlink: 15 bytes leftover after parsing attributes in process `syz.7.7075'. [ 948.609331][T27418] FAULT_INJECTION: forcing a failure. [ 948.609331][T27418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.609364][T27418] CPU: 1 UID: 0 PID: 27418 Comm: syz.7.7081 Not tainted syzkaller #0 PREEMPT(full) [ 948.609388][T27418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 948.609402][T27418] Call Trace: [ 948.609414][T27418] [ 948.609426][T27418] dump_stack_lvl+0xe8/0x150 [ 948.609475][T27418] should_fail_ex+0x3eb/0x540 [ 948.609521][T27418] _copy_from_user+0x2d/0xb0 [ 948.609555][T27418] ___sys_sendmsg+0x1c6/0x360 [ 948.609596][T27418] ? perf_trace_run_bpf_submit+0xee/0x170 [ 948.609642][T27418] ? __pfx____sys_sendmsg+0x10/0x10 [ 948.609758][T27418] ? __fget_files+0x2a/0x420 [ 948.609832][T27418] ? __fget_files+0x3a2/0x420 [ 948.609861][T27418] ? __fget_files+0x2a/0x420 [ 948.609923][T27418] __x64_sys_sendmsg+0x1b1/0x290 [ 948.609975][T27418] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 948.610084][T27418] do_syscall_64+0x166/0x520 [ 948.610110][T27418] ? trace_irq_disable+0x3b/0x140 [ 948.610154][T27418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.610179][T27418] ? clear_bhb_loop+0x70/0xc0 [ 948.610216][T27418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.610240][T27418] RIP: 0033:0x7f8a1bd9f559 [ 948.610267][T27418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 948.610285][T27418] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 948.610308][T27418] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 948.610323][T27418] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 948.610337][T27418] RBP: 00007f8a19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 948.610350][T27418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.610362][T27418] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 948.610431][T27418] [ 948.956508][T27421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7082'. [ 949.058188][T27421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7082'. [ 949.070655][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 949.217825][T27426] netlink: 10 bytes leftover after parsing attributes in process `syz.8.7083'. [ 949.446666][T27421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7082'. [ 950.052600][T27463] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7092'. [ 950.095398][T27463] netlink: 15 bytes leftover after parsing attributes in process `syz.6.7092'. [ 950.338983][T27473] netlink: 'syz.7.7091': attribute type 10 has an invalid length. [ 951.105787][T27483] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7093'. [ 954.617446][T27496] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7096'. [ 954.848604][T27522] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7102'. [ 954.857787][T27523] FAULT_INJECTION: forcing a failure. [ 954.857787][T27523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 954.857911][T27523] CPU: 0 UID: 0 PID: 27523 Comm: syz.7.7104 Not tainted syzkaller #0 PREEMPT(full) [ 954.857973][T27523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 954.858022][T27523] Call Trace: [ 954.858052][T27523] [ 954.858074][T27523] dump_stack_lvl+0xe8/0x150 [ 954.858194][T27523] should_fail_ex+0x3eb/0x540 [ 954.858275][T27523] _copy_from_user+0x2d/0xb0 [ 954.858356][T27523] __sys_bpf+0x2e7/0xe00 [ 954.858432][T27523] ? __pfx___sys_bpf+0x10/0x10 [ 954.858561][T27523] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 954.858639][T27523] ? ksys_write+0x242/0x270 [ 954.858726][T27523] ? __pfx_ksys_write+0x10/0x10 [ 954.858806][T27523] __x64_sys_bpf+0xba/0xd0 [ 954.858891][T27523] do_syscall_64+0x166/0x520 [ 954.858948][T27523] ? trace_irq_disable+0x3b/0x140 [ 954.859024][T27523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.859082][T27523] ? clear_bhb_loop+0x70/0xc0 [ 954.859154][T27523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.859203][T27523] RIP: 0033:0x7f8a1bd9f559 [ 954.859251][T27523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.859297][T27523] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 954.859355][T27523] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 954.859388][T27523] RDX: 0000000000000050 RSI: 00002000000008c0 RDI: 000000000000000a [ 954.859425][T27523] RBP: 00007f8a19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 954.859456][T27523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.859491][T27523] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 954.859580][T27523] [ 955.272417][T27532] can: request_module (can-proto-3) failed. [ 955.680589][T27568] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7113'. [ 955.705799][T27568] netlink: 15 bytes leftover after parsing attributes in process `syz.4.7113'. [ 955.871828][T27573] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7114'. [ 958.374370][T27621] FAULT_INJECTION: forcing a failure. [ 958.374370][T27621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.374403][T27621] CPU: 1 UID: 0 PID: 27621 Comm: syz.6.7120 Not tainted syzkaller #0 PREEMPT(full) [ 958.374427][T27621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 958.374440][T27621] Call Trace: [ 958.374448][T27621] [ 958.374457][T27621] dump_stack_lvl+0xe8/0x150 [ 958.374496][T27621] should_fail_ex+0x3eb/0x540 [ 958.374525][T27621] _copy_from_user+0x2d/0xb0 [ 958.374550][T27621] ___sys_sendmsg+0x1c6/0x360 [ 958.374582][T27621] ? __lock_acquire+0x747/0x2de0 [ 958.374614][T27621] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.374698][T27621] ? __fget_files+0x3a2/0x420 [ 958.374724][T27621] ? __fget_files+0x2a/0x420 [ 958.374759][T27621] __x64_sys_sendmsg+0x1b1/0x290 [ 958.374791][T27621] ? perf_trace_preemptirq_template+0x270/0x350 [ 958.374830][T27621] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 958.374914][T27621] do_syscall_64+0x166/0x520 [ 958.374938][T27621] ? trace_irq_disable+0x3b/0x140 [ 958.374969][T27621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.374994][T27621] ? clear_bhb_loop+0x70/0xc0 [ 958.375022][T27621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.375045][T27621] RIP: 0033:0x7f9bdd99f559 [ 958.375067][T27621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.375087][T27621] RSP: 002b:00007f9bde90c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.375111][T27621] RAX: ffffffffffffffda RBX: 00007f9bddc25fa0 RCX: 00007f9bdd99f559 [ 958.375128][T27621] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 958.375142][T27621] RBP: 00007f9bde90c090 R08: 0000000000000000 R09: 0000000000000000 [ 958.375157][T27621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.375170][T27621] R13: 00007f9bddc26038 R14: 00007f9bddc25fa0 R15: 00007fff878dec98 [ 958.375208][T27621] [ 958.698256][T27628] : renamed from bridge_slave_1 (while UP) [ 958.719119][T27622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7121'. [ 960.847498][T27664] netlink: 'syz.6.7132': attribute type 27 has an invalid length. [ 960.847538][T27664] netlink: 152 bytes leftover after parsing attributes in process `syz.6.7132'. [ 961.134524][T27679] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7139'. [ 961.208641][T27679] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7139'. [ 961.209819][T27687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7141'. [ 961.473799][T27685] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7140'. [ 961.534455][T27679] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7139'. [ 961.733785][T27706] netlink: 64 bytes leftover after parsing attributes in process `syz.7.7144'. [ 961.923057][T27719] netlink: 10 bytes leftover after parsing attributes in process `syz.8.7147'. [ 962.083735][T27725] netlink: 'syz.4.7148': attribute type 27 has an invalid length. [ 962.083791][T27725] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7148'. [ 962.957293][T27744] FAULT_INJECTION: forcing a failure. [ 962.957293][T27744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.957342][T27744] CPU: 0 UID: 0 PID: 27744 Comm: syz.2.7151 Not tainted syzkaller #0 PREEMPT(full) [ 962.957366][T27744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 962.957379][T27744] Call Trace: [ 962.957388][T27744] [ 962.957398][T27744] dump_stack_lvl+0xe8/0x150 [ 962.957437][T27744] should_fail_ex+0x3eb/0x540 [ 962.957466][T27744] _copy_from_user+0x2d/0xb0 [ 962.957491][T27744] perf_copy_attr+0x167/0xcc0 [ 962.957524][T27744] __se_sys_perf_event_open+0x122/0x1ee0 [ 962.957557][T27744] ? __pfx_clockevents_program_event+0x10/0x10 [ 962.957588][T27744] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 962.957647][T27744] ? __x64_sys_perf_event_open+0x20/0xc0 [ 962.957678][T27744] do_syscall_64+0x166/0x520 [ 962.957701][T27744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.957723][T27744] ? clear_bhb_loop+0x70/0xc0 [ 962.957749][T27744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.957770][T27744] RIP: 0033:0x7fc6f2f9f559 [ 962.957789][T27744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.957807][T27744] RSP: 002b:00007fc6f11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 962.957830][T27744] RAX: ffffffffffffffda RBX: 00007fc6f3225fa0 RCX: 00007fc6f2f9f559 [ 962.957845][T27744] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000b40 [ 962.957859][T27744] RBP: 00007fc6f11f6090 R08: 0000000000000005 R09: 0000000000000000 [ 962.957872][T27744] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 962.957886][T27744] R13: 00007fc6f3226038 R14: 00007fc6f3225fa0 R15: 00007ffdda5b9c68 [ 962.957920][T27744] [ 963.179576][T27749] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7152'. [ 963.504933][T27765] FAULT_INJECTION: forcing a failure. [ 963.504933][T27765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.505000][T27765] CPU: 0 UID: 0 PID: 27765 Comm: syz.8.7157 Not tainted syzkaller #0 PREEMPT(full) [ 963.505024][T27765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 963.505038][T27765] Call Trace: [ 963.505046][T27765] [ 963.505056][T27765] dump_stack_lvl+0xe8/0x150 [ 963.505107][T27765] should_fail_ex+0x3eb/0x540 [ 963.505135][T27765] _copy_from_user+0x2d/0xb0 [ 963.505159][T27765] __sys_bpf+0x2e7/0xe00 [ 963.505188][T27765] ? __pfx___sys_bpf+0x10/0x10 [ 963.505245][T27765] ? ksys_write+0x242/0x270 [ 963.505274][T27765] ? __pfx_ksys_write+0x10/0x10 [ 963.505306][T27765] __x64_sys_bpf+0xba/0xd0 [ 963.505338][T27765] do_syscall_64+0x166/0x520 [ 963.505360][T27765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.505381][T27765] ? clear_bhb_loop+0x70/0xc0 [ 963.505406][T27765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.505426][T27765] RIP: 0033:0x7f1292f9f559 [ 963.505445][T27765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.505462][T27765] RSP: 002b:00007f1293f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 963.505483][T27765] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9f559 [ 963.505498][T27765] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 963.505511][T27765] RBP: 00007f1293f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 963.505523][T27765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.505534][T27765] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffc32a3b328 [ 963.505566][T27765] [ 963.880131][T27780] netlink: 'syz.7.7163': attribute type 27 has an invalid length. [ 964.056132][T27789] FAULT_INJECTION: forcing a failure. [ 964.056132][T27789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.056183][T27789] CPU: 0 UID: 0 PID: 27789 Comm: syz.4.7168 Not tainted syzkaller #0 PREEMPT(full) [ 964.056206][T27789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 964.056218][T27789] Call Trace: [ 964.056225][T27789] [ 964.056235][T27789] dump_stack_lvl+0xe8/0x150 [ 964.056271][T27789] should_fail_ex+0x3eb/0x540 [ 964.056299][T27789] _copy_from_user+0x2d/0xb0 [ 964.056323][T27789] ___sys_sendmsg+0x1c6/0x360 [ 964.056352][T27789] ? __lock_acquire+0x747/0x2de0 [ 964.056383][T27789] ? __pfx____sys_sendmsg+0x10/0x10 [ 964.056448][T27789] ? __fget_files+0x3a2/0x420 [ 964.056472][T27789] ? __fget_files+0x2a/0x420 [ 964.056504][T27789] __x64_sys_sendmsg+0x1b1/0x290 [ 964.056537][T27789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 964.056595][T27789] do_syscall_64+0x166/0x520 [ 964.056616][T27789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.056636][T27789] ? clear_bhb_loop+0x70/0xc0 [ 964.056660][T27789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.056679][T27789] RIP: 0033:0x7f4eebb9f559 [ 964.056697][T27789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 964.056714][T27789] RSP: 002b:00007f4eecb46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 964.056736][T27789] RAX: ffffffffffffffda RBX: 00007f4eebe25fa0 RCX: 00007f4eebb9f559 [ 964.056750][T27789] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 964.056763][T27789] RBP: 00007f4eecb46090 R08: 0000000000000000 R09: 0000000000000000 [ 964.056775][T27789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.056787][T27789] R13: 00007f4eebe26038 R14: 00007f4eebe25fa0 R15: 00007ffdc2d528c8 [ 964.056818][T27789] [ 964.436763][ T5638] Bluetooth: hci0: command 0x0406 tx timeout [ 965.095448][T27820] netlink: 'syz.4.7176': attribute type 21 has an invalid length. [ 965.369380][T27842] xt_cgroup: invalid path, errno=-2 [ 965.910665][T27853] xt_cgroup: invalid path, errno=-2 [ 965.997773][ T30] audit: type=1107 audit(1793612825.961:4): pid=27854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 966.448877][T27872] __nla_validate_parse: 11 callbacks suppressed [ 966.448923][T27872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7196'. [ 966.727738][T27872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7196'. [ 966.800227][T27882] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7199'. [ 966.999612][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 967.008162][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 967.010787][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 967.028279][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 967.029190][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 967.444079][T27892] netlink: 'syz.7.7202': attribute type 20 has an invalid length. [ 967.787402][T27902] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7204'. [ 967.842347][T27905] FAULT_INJECTION: forcing a failure. [ 967.842347][T27905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.842379][T27905] CPU: 0 UID: 0 PID: 27905 Comm: syz.8.7205 Not tainted syzkaller #0 PREEMPT(full) [ 967.842402][T27905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 967.842414][T27905] Call Trace: [ 967.842422][T27905] [ 967.842432][T27905] dump_stack_lvl+0xe8/0x150 [ 967.842471][T27905] should_fail_ex+0x3eb/0x540 [ 967.842499][T27905] _copy_from_user+0x2d/0xb0 [ 967.842524][T27905] __sys_bpf+0x2e7/0xe00 [ 967.842554][T27905] ? __pfx___sys_bpf+0x10/0x10 [ 967.842587][T27905] ? __fget_files+0x2a/0x420 [ 967.842638][T27905] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 967.842668][T27905] ? ksys_write+0x242/0x270 [ 967.842698][T27905] ? __pfx_ksys_write+0x10/0x10 [ 967.842731][T27905] __x64_sys_bpf+0xba/0xd0 [ 967.842765][T27905] do_syscall_64+0x166/0x520 [ 967.842786][T27905] ? trace_irq_disable+0x3b/0x140 [ 967.842814][T27905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.842836][T27905] ? clear_bhb_loop+0x70/0xc0 [ 967.842861][T27905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.842882][T27905] RIP: 0033:0x7f1292f9f559 [ 967.842901][T27905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.842919][T27905] RSP: 002b:00007f1293f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 967.842942][T27905] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9f559 [ 967.842958][T27905] RDX: 000000000000000c RSI: 0000200000000940 RDI: 000000000000000a [ 967.842971][T27905] RBP: 00007f1293f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 967.842985][T27905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.842997][T27905] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffc32a3b328 [ 967.843031][T27905] [ 968.629011][ T1503] team0: Port device . removed [ 968.704793][T27884] rxe_eth0 speed is unknown, defaulting to 1000 [ 968.829872][T27942] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7216'. [ 968.956282][T27939] FAULT_INJECTION: forcing a failure. [ 968.956282][T27939] name failslab, interval 1, probability 0, space 0, times 0 [ 968.956333][T27939] CPU: 0 UID: 0 PID: 27939 Comm: syz.8.7215 Not tainted syzkaller #0 PREEMPT(full) [ 968.956356][T27939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 968.956369][T27939] Call Trace: [ 968.956378][T27939] [ 968.956388][T27939] dump_stack_lvl+0xe8/0x150 [ 968.956427][T27939] should_fail_ex+0x3eb/0x540 [ 968.956458][T27939] should_failslab+0xa8/0x100 [ 968.956490][T27939] __kmalloc_noprof+0xf9/0x710 [ 968.956513][T27939] ? rcu_is_watching+0x16/0xb0 [ 968.956550][T27939] ? tomoyo_realpath_from_path+0xef/0x640 [ 968.956581][T27939] ? tomoyo_realpath_from_path+0xef/0x640 [ 968.956621][T27939] tomoyo_realpath_from_path+0xef/0x640 [ 968.956666][T27939] ? tomoyo_path_number_perm+0x219/0x5f0 [ 968.956694][T27939] tomoyo_path_number_perm+0x246/0x5f0 [ 968.956725][T27939] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 968.956749][T27939] ? __lock_acquire+0x747/0x2de0 [ 968.956779][T27939] ? __pfx_perf_trace_lock+0x10/0x10 [ 968.956851][T27939] ? __fget_files+0x2a/0x420 [ 968.956880][T27939] ? __fget_files+0x2a/0x420 [ 968.956905][T27939] ? __fget_files+0x2a/0x420 [ 968.956937][T27939] security_file_ioctl+0xc3/0x2a0 [ 968.956966][T27939] __se_sys_ioctl+0x47/0x170 [ 968.957001][T27939] do_syscall_64+0x166/0x520 [ 968.957023][T27939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.957045][T27939] ? clear_bhb_loop+0x70/0xc0 [ 968.957071][T27939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.957092][T27939] RIP: 0033:0x7f1292f9f559 [ 968.957111][T27939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 968.957128][T27939] RSP: 002b:00007f1293f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.957150][T27939] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9f559 [ 968.957164][T27939] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000036 [ 968.957177][T27939] RBP: 00007f1293f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 968.957189][T27939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 968.957201][T27939] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffc32a3b328 [ 968.957241][T27939] [ 968.974727][T27939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 969.070878][T18359] Bluetooth: hci4: command tx timeout [ 969.618248][ T1503] bridge_slave_1: left allmulticast mode [ 969.618274][ T1503] bridge_slave_1: left promiscuous mode [ 969.618469][ T1503] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.679258][ T1503] bridge_slave_0: left allmulticast mode [ 969.679287][ T1503] bridge_slave_0: left promiscuous mode [ 969.690585][ T1503] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.053150][ T1503] team0: Port device geneve1 removed [ 970.068756][T27964] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7222'. [ 970.084461][T27964] netlink: 15 bytes leftover after parsing attributes in process `syz.2.7222'. [ 970.123228][ T1503] team0: Port device bond0 removed [ 970.128097][ T1503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.154223][ T1503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.156814][ T1503] bond0 (unregistering): Released all slaves [ 970.185353][T27952] netlink: 10 bytes leftover after parsing attributes in process `syz.8.7218'. [ 970.949772][T27884] lo speed is unknown, defaulting to 1000 [ 971.118659][T27978] netlink: 6024 bytes leftover after parsing attributes in process `syz.8.7226'. [ 971.130471][T27978] netlink: 'syz.8.7226': attribute type 39 has an invalid length. [ 971.141152][T18359] Bluetooth: hci4: command tx timeout [ 971.268600][ T30] audit: type=1107 audit(1793612831.231:5): pid=27982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 971.320797][T27995] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7229'. [ 972.682240][T27884] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.682478][T27884] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.682643][T27884] bridge_slave_0: entered allmulticast mode [ 972.684986][T27884] bridge_slave_0: entered promiscuous mode [ 972.692947][T27884] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.693193][T27884] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.693348][T27884] bridge_slave_1: entered allmulticast mode [ 972.698367][T27884] bridge_slave_1: entered promiscuous mode [ 972.809248][ T1503] hsr_slave_0: left promiscuous mode [ 972.818903][ T1503] hsr_slave_1: left promiscuous mode [ 973.223117][ T1503] team0 (unregistering): Port device team_slave_1 removed [ 973.233682][T18359] Bluetooth: hci4: command tx timeout [ 973.270643][ T1503] team0 (unregistering): Port device team_slave_0 removed [ 973.484295][T28032] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7232'. [ 973.533698][T27884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.551760][T27884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.616663][T27884] team0: Port device team_slave_0 added [ 973.630703][T27884] team0: Port device team_slave_1 added [ 973.652395][T28051] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7238'. [ 973.663737][T28051] netlink: 15 bytes leftover after parsing attributes in process `syz.8.7238'. [ 973.704612][T27884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.704628][T27884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.704654][T27884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.706659][T27884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.706674][T27884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.706700][T27884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.956494][T27884] hsr_slave_0: entered promiscuous mode [ 973.970206][T27884] hsr_slave_1: entered promiscuous mode [ 973.989366][T27884] debugfs: 'hsr0' already exists in 'hsr' [ 973.989388][T27884] Cannot create hsr debugfs directory [ 974.229619][T28061] IPv6: pim6reg1: Disabled Multicast RS [ 974.301925][T28063] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7241'. [ 974.819479][T28090] FAULT_INJECTION: forcing a failure. [ 974.819479][T28090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 974.819512][T28090] CPU: 1 UID: 0 PID: 28090 Comm: syz.7.7248 Not tainted syzkaller #0 PREEMPT(full) [ 974.819539][T28090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 974.819555][T28090] Call Trace: [ 974.819573][T28090] [ 974.819592][T28090] dump_stack_lvl+0xe8/0x150 [ 974.819672][T28090] should_fail_ex+0x3eb/0x540 [ 974.819772][T28090] _copy_from_user+0x2d/0xb0 [ 974.819833][T28090] ___sys_sendmsg+0x1c6/0x360 [ 974.819894][T28090] ? perf_trace_run_bpf_submit+0xee/0x170 [ 974.819986][T28090] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.820269][T28090] ? __fget_files+0x2a/0x420 [ 974.820449][T28090] ? __fget_files+0x3a2/0x420 [ 974.820492][T28090] ? __fget_files+0x2a/0x420 [ 974.820644][T28090] __x64_sys_sendmsg+0x1b1/0x290 [ 974.820735][T28090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.821011][T28090] do_syscall_64+0x166/0x520 [ 974.821049][T28090] ? trace_irq_disable+0x3b/0x140 [ 974.821087][T28090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.821127][T28090] ? clear_bhb_loop+0x70/0xc0 [ 974.821205][T28090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.821241][T28090] RIP: 0033:0x7f8a1bd9f559 [ 974.821286][T28090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.821307][T28090] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.821336][T28090] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 974.821355][T28090] RDX: 0000000000004040 RSI: 0000200000001ec0 RDI: 0000000000000004 [ 974.821372][T28090] RBP: 00007f8a19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 974.821389][T28090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.821405][T28090] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 974.821611][T28090] [ 975.194945][ T5302] 8021q: adding VLAN 0 to HW filter on device eth17 [ 975.317153][T28099] netlink: 'syz.2.7250': attribute type 1 has an invalid length. [ 975.319587][ T5638] Bluetooth: hci4: command tx timeout [ 975.696654][T28112] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7251'. [ 975.992270][T28117] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7252'. [ 976.079893][T28120] netlink: 15 bytes leftover after parsing attributes in process `syz.4.7252'. [ 976.350812][T27884] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 976.397106][T27884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 976.409399][T27884] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 976.451915][T27884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 976.460135][T27884] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 976.530561][T27884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 976.537603][T27884] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 976.609787][T27884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 977.097741][T27884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.152199][T27884] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.174379][T14840] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.174502][T14840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.208080][ T1503] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.208182][ T1503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.466426][T28158] FAULT_INJECTION: forcing a failure. [ 978.466426][T28158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.466459][T28158] CPU: 1 UID: 0 PID: 28158 Comm: syz.2.7255 Not tainted syzkaller #0 PREEMPT(full) [ 978.466483][T28158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 978.466496][T28158] Call Trace: [ 978.466504][T28158] [ 978.466514][T28158] dump_stack_lvl+0xe8/0x150 [ 978.466553][T28158] should_fail_ex+0x3eb/0x540 [ 978.466583][T28158] _copy_from_user+0x2d/0xb0 [ 978.466608][T28158] ___sys_sendmsg+0x1c6/0x360 [ 978.466639][T28158] ? __lock_acquire+0x747/0x2de0 [ 978.466671][T28158] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.466741][T28158] ? __fget_files+0x3a2/0x420 [ 978.466765][T28158] ? __fget_files+0x2a/0x420 [ 978.466801][T28158] __x64_sys_sendmsg+0x1b1/0x290 [ 978.466836][T28158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 978.466890][T28158] do_syscall_64+0x166/0x520 [ 978.466911][T28158] ? trace_irq_disable+0x3b/0x140 [ 978.466940][T28158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.466962][T28158] ? clear_bhb_loop+0x70/0xc0 [ 978.466988][T28158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.467009][T28158] RIP: 0033:0x7fc6f2f9f559 [ 978.467028][T28158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.467054][T28158] RSP: 002b:00007fc6f11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.467076][T28158] RAX: ffffffffffffffda RBX: 00007fc6f3225fa0 RCX: 00007fc6f2f9f559 [ 978.467092][T28158] RDX: 0000000000000000 RSI: 0000200000000f00 RDI: 0000000000000003 [ 978.467105][T28158] RBP: 00007fc6f11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 978.467118][T28158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.467131][T28158] R13: 00007fc6f3226038 R14: 00007fc6f3225fa0 R15: 00007ffdda5b9c68 [ 978.467165][T28158] [ 978.761879][T28159] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7254'. [ 978.975151][T27884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.936349][T28181] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !(€h\E3�~‘§˜Àϱøoˆõ£R!Fo¹?£¥Ð< [ 980.055637][T28182] netlink: 'syz.2.7260': attribute type 20 has an invalid length. [ 980.324426][ T30] audit: type=1107 audit(1793612840.291:6): pid=28189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 980.928520][T27884] veth0_vlan: entered promiscuous mode [ 980.951216][T27884] veth1_vlan: entered promiscuous mode [ 981.124778][T27884] veth0_macvtap: entered promiscuous mode [ 981.157801][T27884] veth1_macvtap: entered promiscuous mode [ 981.214965][T27884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.243900][T27884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.322651][T28220] netlink: 'syz.2.7264': attribute type 2 has an invalid length. [ 981.639658][T28225] netlink: 'syz.4.7265': attribute type 21 has an invalid length. [ 981.639684][T28225] netlink: 'syz.4.7265': attribute type 11 has an invalid length. [ 983.064376][T28220] !;: entered promiscuous mode [ 983.071421][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.071772][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.072100][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.072545][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.487254][T26064] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.487279][T26064] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.573760][ T1503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 983.573784][ T1503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.588321][T28231] FAULT_INJECTION: forcing a failure. [ 983.588321][T28231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 983.592699][T28231] CPU: 0 UID: 0 PID: 28231 Comm: syz.8.7267 Not tainted syzkaller #0 PREEMPT(full) [ 983.592771][T28231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 983.592799][T28231] Call Trace: [ 983.592824][T28231] [ 983.592844][T28231] dump_stack_lvl+0xe8/0x150 [ 983.592943][T28231] should_fail_ex+0x3eb/0x540 [ 983.593015][T28231] _copy_from_user+0x2d/0xb0 [ 983.593083][T28231] __sys_bpf+0x2e7/0xe00 [ 983.593163][T28231] ? __pfx___sys_bpf+0x10/0x10 [ 983.593244][T28231] ? __fget_files+0x2a/0x420 [ 983.593365][T28231] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 983.593444][T28231] ? ksys_write+0x242/0x270 [ 983.593523][T28231] ? __pfx_ksys_write+0x10/0x10 [ 983.593623][T28231] __x64_sys_bpf+0xba/0xd0 [ 983.593710][T28231] do_syscall_64+0x166/0x520 [ 983.593759][T28231] ? trace_irq_disable+0x3b/0x140 [ 983.593820][T28231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.593873][T28231] ? clear_bhb_loop+0x70/0xc0 [ 983.593939][T28231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.593986][T28231] RIP: 0033:0x7f1292f9f559 [ 983.594045][T28231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.594078][T28231] RSP: 002b:00007f1293f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 983.594134][T28231] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9f559 [ 983.594176][T28231] RDX: 0000000000000094 RSI: 0000200000001d00 RDI: 0000000000000005 [ 983.594206][T28231] RBP: 00007f1293f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 983.594240][T28231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 983.594269][T28231] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffc32a3b328 [ 983.594359][T28231] [ 985.059621][T28264] rdma_rxe: rxe_newlink: failed to add wg2 [ 985.207881][T28266] netlink: 'syz.6.7279': attribute type 10 has an invalid length. [ 985.321456][T28271] FAULT_INJECTION: forcing a failure. [ 985.321456][T28271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 985.321492][T28271] CPU: 0 UID: 0 PID: 28271 Comm: syz.7.7281 Not tainted syzkaller #0 PREEMPT(full) [ 985.321518][T28271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 985.321533][T28271] Call Trace: [ 985.321547][T28271] [ 985.321563][T28271] dump_stack_lvl+0xe8/0x150 [ 985.321625][T28271] should_fail_ex+0x3eb/0x540 [ 985.321710][T28271] _copy_from_user+0x2d/0xb0 [ 985.321778][T28271] ___sys_sendmsg+0x1c6/0x360 [ 985.321884][T28271] ? __pfx____sys_sendmsg+0x10/0x10 [ 985.322082][T28271] ? __fget_files+0x2a/0x420 [ 985.322216][T28271] ? __fget_files+0x3a2/0x420 [ 985.322275][T28271] ? __fget_files+0x2a/0x420 [ 985.322382][T28271] __x64_sys_sendmsg+0x1b1/0x290 [ 985.322456][T28271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 985.322652][T28271] do_syscall_64+0x166/0x520 [ 985.322685][T28271] ? trace_irq_disable+0x3b/0x140 [ 985.322726][T28271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.322768][T28271] ? clear_bhb_loop+0x70/0xc0 [ 985.322829][T28271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.322862][T28271] RIP: 0033:0x7f8a1bd9f559 [ 985.322899][T28271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 985.322923][T28271] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.322952][T28271] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 985.322972][T28271] RDX: 0000000004000000 RSI: 0000200000000940 RDI: 0000000000000005 [ 985.322989][T28271] RBP: 00007f8a19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 985.323007][T28271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.323024][T28271] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 985.323162][T28271] [ 986.083282][T28284] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7287'. [ 988.155469][T28321] netlink: 'syz.8.7298': attribute type 1 has an invalid length. [ 988.244224][T28325] FAULT_INJECTION: forcing a failure. [ 988.244224][T28325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.244254][T28325] CPU: 1 UID: 0 PID: 28325 Comm: syz.6.7299 Not tainted syzkaller #0 PREEMPT(full) [ 988.244275][T28325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 988.244288][T28325] Call Trace: [ 988.244296][T28325] [ 988.244305][T28325] dump_stack_lvl+0xe8/0x150 [ 988.244341][T28325] should_fail_ex+0x3eb/0x540 [ 988.244369][T28325] _copy_from_user+0x2d/0xb0 [ 988.244393][T28325] ___sys_sendmsg+0x1c6/0x360 [ 988.244422][T28325] ? __lock_acquire+0x747/0x2de0 [ 988.244462][T28325] ? __pfx____sys_sendmsg+0x10/0x10 [ 988.244528][T28325] ? __fget_files+0x3a2/0x420 [ 988.244551][T28325] ? __fget_files+0x2a/0x420 [ 988.244584][T28325] __x64_sys_sendmsg+0x1b1/0x290 [ 988.244617][T28325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 988.244668][T28325] do_syscall_64+0x166/0x520 [ 988.244689][T28325] ? trace_irq_disable+0x3b/0x140 [ 988.244715][T28325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.244735][T28325] ? clear_bhb_loop+0x70/0xc0 [ 988.244760][T28325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.244779][T28325] RIP: 0033:0x7fbd0d39f559 [ 988.244797][T28325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 988.244814][T28325] RSP: 002b:00007fbd0e21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 988.244838][T28325] RAX: ffffffffffffffda RBX: 00007fbd0d625fa0 RCX: 00007fbd0d39f559 [ 988.244852][T28325] RDX: 0000000004004080 RSI: 0000200000000240 RDI: 0000000000000003 [ 988.244866][T28325] RBP: 00007fbd0e21b090 R08: 0000000000000000 R09: 0000000000000000 [ 988.244878][T28325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.244890][T28325] R13: 00007fbd0d626038 R14: 00007fbd0d625fa0 R15: 00007ffece591348 [ 988.244922][T28325] [ 988.646291][T28334] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7300'. [ 989.110966][T28354] FAULT_INJECTION: forcing a failure. [ 989.110966][T28354] name failslab, interval 1, probability 0, space 0, times 0 [ 989.110996][T28354] CPU: 0 UID: 0 PID: 28354 Comm: syz.7.7309 Not tainted syzkaller #0 PREEMPT(full) [ 989.111018][T28354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 989.111030][T28354] Call Trace: [ 989.111050][T28354] [ 989.111058][T28354] dump_stack_lvl+0xe8/0x150 [ 989.111092][T28354] should_fail_ex+0x3eb/0x540 [ 989.111117][T28354] should_failslab+0xa8/0x100 [ 989.111148][T28354] __kmalloc_noprof+0xf9/0x710 [ 989.111171][T28354] ? rcu_is_watching+0x16/0xb0 [ 989.111203][T28354] ? tomoyo_realpath_from_path+0xef/0x640 [ 989.111234][T28354] ? tomoyo_realpath_from_path+0xef/0x640 [ 989.111275][T28354] tomoyo_realpath_from_path+0xef/0x640 [ 989.111320][T28354] ? tomoyo_path_number_perm+0x219/0x5f0 [ 989.111346][T28354] tomoyo_path_number_perm+0x246/0x5f0 [ 989.111380][T28354] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 989.111406][T28354] ? __lock_acquire+0x747/0x2de0 [ 989.111478][T28354] ? __fget_files+0x2a/0x420 [ 989.111508][T28354] ? __fget_files+0x2a/0x420 [ 989.111535][T28354] ? __fget_files+0x2a/0x420 [ 989.111567][T28354] security_file_ioctl+0xc3/0x2a0 [ 989.111596][T28354] __se_sys_ioctl+0x47/0x170 [ 989.111631][T28354] do_syscall_64+0x166/0x520 [ 989.111654][T28354] ? trace_irq_disable+0x3b/0x140 [ 989.111683][T28354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.111708][T28354] ? clear_bhb_loop+0x70/0xc0 [ 989.111735][T28354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.111757][T28354] RIP: 0033:0x7f8a1bd9f559 [ 989.111777][T28354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.111796][T28354] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 989.111819][T28354] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 989.111833][T28354] RDX: 0000200000001cc0 RSI: 00000000401054d5 RDI: 0000000000000003 [ 989.111853][T28354] RBP: 00007f8a19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 989.111866][T28354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.111876][T28354] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 989.111911][T28354] [ 989.111930][T28354] ERROR: Out of memory at tomoyo_realpath_from_path. [ 989.425846][T28359] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7311'. [ 989.454641][T28359] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7311'. [ 989.481113][T28360] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7311'. [ 989.481879][T28360] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7311'. [ 989.540607][T28362] FAULT_INJECTION: forcing a failure. [ 989.540607][T28362] name failslab, interval 1, probability 0, space 0, times 0 [ 989.540636][T28362] CPU: 0 UID: 0 PID: 28362 Comm: syz.4.7312 Not tainted syzkaller #0 PREEMPT(full) [ 989.540659][T28362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 989.540671][T28362] Call Trace: [ 989.540680][T28362] [ 989.540689][T28362] dump_stack_lvl+0xe8/0x150 [ 989.540728][T28362] should_fail_ex+0x3eb/0x540 [ 989.540758][T28362] should_failslab+0xa8/0x100 [ 989.540790][T28362] __kmalloc_noprof+0xf9/0x710 [ 989.540822][T28362] ? rcu_is_watching+0x16/0xb0 [ 989.540850][T28362] ? tomoyo_realpath_from_path+0xef/0x640 [ 989.540881][T28362] ? tomoyo_realpath_from_path+0xef/0x640 [ 989.540920][T28362] tomoyo_realpath_from_path+0xef/0x640 [ 989.540966][T28362] ? tomoyo_path_number_perm+0x219/0x5f0 [ 989.540993][T28362] tomoyo_path_number_perm+0x246/0x5f0 [ 989.541025][T28362] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 989.541049][T28362] ? __lock_acquire+0x747/0x2de0 [ 989.541126][T28362] ? __fget_files+0x2a/0x420 [ 989.541156][T28362] ? __fget_files+0x2a/0x420 [ 989.541181][T28362] ? __fget_files+0x2a/0x420 [ 989.541213][T28362] security_file_ioctl+0xc3/0x2a0 [ 989.541242][T28362] __se_sys_ioctl+0x47/0x170 [ 989.541277][T28362] do_syscall_64+0x166/0x520 [ 989.541297][T28362] ? trace_irq_disable+0x3b/0x140 [ 989.541328][T28362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.541349][T28362] ? clear_bhb_loop+0x70/0xc0 [ 989.541376][T28362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.541396][T28362] RIP: 0033:0x7f4eebb9f559 [ 989.541415][T28362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.541432][T28362] RSP: 002b:00007f4eecb46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 989.541452][T28362] RAX: ffffffffffffffda RBX: 00007f4eebe25fa0 RCX: 00007f4eebb9f559 [ 989.541466][T28362] RDX: 0000000000000006 RSI: 0000000040042408 RDI: 0000000000000005 [ 989.541479][T28362] RBP: 00007f4eecb46090 R08: 0000000000000000 R09: 0000000000000000 [ 989.541491][T28362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.541502][T28362] R13: 00007f4eebe26038 R14: 00007f4eebe25fa0 R15: 00007ffdc2d528c8 [ 989.541543][T28362] [ 989.542276][T28362] ERROR: Out of memory at tomoyo_realpath_from_path. [ 990.144658][T28368] netlink: 'syz.6.7314': attribute type 10 has an invalid length. [ 990.198896][T28368] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 990.223929][T28368] team0: Port device netdevsim1 added [ 990.708305][T28389] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7322'. [ 990.844061][T28394] FAULT_INJECTION: forcing a failure. [ 990.844061][T28394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.844092][T28394] CPU: 1 UID: 0 PID: 28394 Comm: syz.8.7324 Not tainted syzkaller #0 PREEMPT(full) [ 990.844114][T28394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 990.844126][T28394] Call Trace: [ 990.844134][T28394] [ 990.844143][T28394] dump_stack_lvl+0xe8/0x150 [ 990.844188][T28394] should_fail_ex+0x3eb/0x540 [ 990.844215][T28394] _copy_from_user+0x2d/0xb0 [ 990.844239][T28394] __sys_bpf+0x2e7/0xe00 [ 990.844267][T28394] ? __pfx___sys_bpf+0x10/0x10 [ 990.844298][T28394] ? __fget_files+0x2a/0x420 [ 990.844336][T28394] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 990.844364][T28394] ? ksys_write+0x242/0x270 [ 990.844392][T28394] ? __pfx_ksys_write+0x10/0x10 [ 990.844424][T28394] __x64_sys_bpf+0xba/0xd0 [ 990.844455][T28394] do_syscall_64+0x166/0x520 [ 990.844475][T28394] ? trace_irq_disable+0x3b/0x140 [ 990.844501][T28394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.844521][T28394] ? clear_bhb_loop+0x70/0xc0 [ 990.844546][T28394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.844565][T28394] RIP: 0033:0x7f1292f9f559 [ 990.844583][T28394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.844600][T28394] RSP: 002b:00007f1293f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 990.844622][T28394] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9f559 [ 990.844636][T28394] RDX: 000000000000000f RSI: 00002000000006c0 RDI: 000000000000001d [ 990.844649][T28394] RBP: 00007f1293f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 990.844661][T28394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.844673][T28394] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffc32a3b328 [ 990.844704][T28394] [ 990.908218][T28395] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7323'. [ 991.288647][T28403] netlink: 'syz.4.7328': attribute type 17 has an invalid length. [ 991.413361][T28403] veth0_vlan: left promiscuous mode [ 991.415841][T28403] veth0_vlan: entered promiscuous mode [ 991.603920][T28412] FAULT_INJECTION: forcing a failure. [ 991.603920][T28412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 991.603949][T28412] CPU: 0 UID: 0 PID: 28412 Comm: syz.6.7330 Not tainted syzkaller #0 PREEMPT(full) [ 991.603973][T28412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 991.603986][T28412] Call Trace: [ 991.603994][T28412] [ 991.604003][T28412] dump_stack_lvl+0xe8/0x150 [ 991.604040][T28412] should_fail_ex+0x3eb/0x540 [ 991.604069][T28412] _copy_from_user+0x2d/0xb0 [ 991.604094][T28412] ___sys_sendmsg+0x1c6/0x360 [ 991.604124][T28412] ? __lock_acquire+0x747/0x2de0 [ 991.604156][T28412] ? __pfx____sys_sendmsg+0x10/0x10 [ 991.604222][T28412] ? __fget_files+0x3a2/0x420 [ 991.604247][T28412] ? __fget_files+0x2a/0x420 [ 991.604280][T28412] __x64_sys_sendmsg+0x1b1/0x290 [ 991.604314][T28412] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 991.604365][T28412] do_syscall_64+0x166/0x520 [ 991.604386][T28412] ? trace_irq_disable+0x3b/0x140 [ 991.604413][T28412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.604433][T28412] ? clear_bhb_loop+0x70/0xc0 [ 991.604458][T28412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.604478][T28412] RIP: 0033:0x7fbd0d39f559 [ 991.604496][T28412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.604514][T28412] RSP: 002b:00007fbd0e21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 991.604535][T28412] RAX: ffffffffffffffda RBX: 00007fbd0d625fa0 RCX: 00007fbd0d39f559 [ 991.604550][T28412] RDX: 00000000000040f4 RSI: 0000200000000380 RDI: 0000000000000003 [ 991.604564][T28412] RBP: 00007fbd0e21b090 R08: 0000000000000000 R09: 0000000000000000 [ 991.604577][T28412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.604596][T28412] R13: 00007fbd0d626038 R14: 00007fbd0d625fa0 R15: 00007ffece591348 [ 991.604627][T28412] [ 992.136744][T28429] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7337'. [ 992.177570][T28433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7339'. [ 992.177607][T28433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7339'. [ 992.523176][T28446] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7343'. [ 992.567335][T28448] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7344'. [ 992.714894][T28455] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7347'. [ 992.776791][T28455] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7347'. [ 992.871040][T28460] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7348'. [ 992.910017][T28455] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7347'. [ 993.074305][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.074364][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.499284][T28478] rdma_rxe: rxe_newlink: failed to add wg2 [ 993.541657][T28482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7354'. [ 994.084859][T28490] FAULT_INJECTION: forcing a failure. [ 994.084859][T28490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.084890][T28490] CPU: 1 UID: 0 PID: 28490 Comm: syz.2.7358 Not tainted syzkaller #0 PREEMPT(full) [ 994.084914][T28490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 994.084927][T28490] Call Trace: [ 994.084936][T28490] [ 994.084945][T28490] dump_stack_lvl+0xe8/0x150 [ 994.084989][T28490] should_fail_ex+0x3eb/0x540 [ 994.085019][T28490] _copy_from_user+0x2d/0xb0 [ 994.085044][T28490] __sys_bpf+0x2e7/0xe00 [ 994.085075][T28490] ? __pfx___sys_bpf+0x10/0x10 [ 994.085108][T28490] ? __fget_files+0x2a/0x420 [ 994.085154][T28490] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 994.085186][T28490] ? ksys_write+0x242/0x270 [ 994.085218][T28490] ? __pfx_ksys_write+0x10/0x10 [ 994.085252][T28490] __x64_sys_bpf+0xba/0xd0 [ 994.085288][T28490] do_syscall_64+0x166/0x520 [ 994.085310][T28490] ? trace_irq_disable+0x3b/0x140 [ 994.085347][T28490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.085369][T28490] ? clear_bhb_loop+0x70/0xc0 [ 994.085396][T28490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.085418][T28490] RIP: 0033:0x7fc6f2f9f559 [ 994.085437][T28490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.085456][T28490] RSP: 002b:00007fc6f11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 994.085479][T28490] RAX: ffffffffffffffda RBX: 00007fc6f3225fa0 RCX: 00007fc6f2f9f559 [ 994.085494][T28490] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 994.085507][T28490] RBP: 00007fc6f11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 994.085520][T28490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.085533][T28490] R13: 00007fc6f3226038 R14: 00007fc6f3225fa0 R15: 00007ffdda5b9c68 [ 994.085568][T28490] [ 994.545662][T28499] netlink: 'syz.2.7362': attribute type 39 has an invalid length. [ 994.577616][T28499] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 994.605946][T28499] netlink: 'syz.2.7362': attribute type 10 has an invalid length. [ 994.623350][T28499] team0: Port device . removed [ 994.638729][T28499] 8021q: adding VLAN 0 to HW filter on device . [ 994.649406][T28499] bond0: (slave .): Enslaving as an active interface with an up link [ 995.066404][T28512] FAULT_INJECTION: forcing a failure. [ 995.066404][T28512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 995.066435][T28512] CPU: 0 UID: 0 PID: 28512 Comm: syz.7.7368 Not tainted syzkaller #0 PREEMPT(full) [ 995.066460][T28512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 995.066474][T28512] Call Trace: [ 995.066487][T28512] [ 995.066501][T28512] dump_stack_lvl+0xe8/0x150 [ 995.066556][T28512] should_fail_ex+0x3eb/0x540 [ 995.066616][T28512] _copy_from_user+0x2d/0xb0 [ 995.066657][T28512] ___sys_sendmsg+0x1c6/0x360 [ 995.066733][T28512] ? __pfx____sys_sendmsg+0x10/0x10 [ 995.066895][T28512] ? __fget_files+0x2a/0x420 [ 995.066994][T28512] ? __fget_files+0x3a2/0x420 [ 995.067025][T28512] ? __fget_files+0x2a/0x420 [ 995.067112][T28512] __x64_sys_sendmsg+0x1b1/0x290 [ 995.067171][T28512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 995.067345][T28512] do_syscall_64+0x166/0x520 [ 995.067375][T28512] ? trace_irq_disable+0x3b/0x140 [ 995.067410][T28512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.067460][T28512] ? clear_bhb_loop+0x70/0xc0 [ 995.067552][T28512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.067584][T28512] RIP: 0033:0x7f8a1bd9f559 [ 995.067618][T28512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.067641][T28512] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 995.067669][T28512] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 995.067702][T28512] RDX: 00000000000480f0 RSI: 0000200000000980 RDI: 0000000000000005 [ 995.067748][T28512] RBP: 00007f8a19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 995.067771][T28512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 995.067787][T28512] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 995.067917][T28512] [ 995.676230][T28532] netlink: 'syz.7.7371': attribute type 10 has an invalid length. [ 996.089981][T28544] FAULT_INJECTION: forcing a failure. [ 996.089981][T28544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.090012][T28544] CPU: 1 UID: 0 PID: 28544 Comm: syz.7.7376 Not tainted syzkaller #0 PREEMPT(full) [ 996.090035][T28544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 996.090047][T28544] Call Trace: [ 996.090054][T28544] [ 996.090064][T28544] dump_stack_lvl+0xe8/0x150 [ 996.090102][T28544] should_fail_ex+0x3eb/0x540 [ 996.090142][T28544] _copy_from_user+0x2d/0xb0 [ 996.090167][T28544] do_tcp_setsockopt+0x504/0x1f80 [ 996.090297][T28544] ? __lock_acquire+0x747/0x2de0 [ 996.090327][T28544] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 996.090354][T28544] ? __pfx___mutex_lock+0x10/0x10 [ 996.090386][T28544] ? aa_sk_perm+0x6ff/0x8f0 [ 996.090413][T28544] ? sock_common_setsockopt+0x36/0xc0 [ 996.090438][T28544] ? tcp_setsockopt+0x3d/0xe0 [ 996.090463][T28544] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 996.090490][T28544] smc_setsockopt+0x232/0xb40 [ 996.090526][T28544] ? __pfx_smc_setsockopt+0x10/0x10 [ 996.090560][T28544] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 996.090586][T28544] ? __pfx_smc_setsockopt+0x10/0x10 [ 996.090626][T28544] do_sock_setsockopt+0x17c/0x1b0 [ 996.090660][T28544] __x64_sys_setsockopt+0x13d/0x1b0 [ 996.090694][T28544] do_syscall_64+0x166/0x520 [ 996.090714][T28544] ? trace_irq_disable+0x3b/0x140 [ 996.090739][T28544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.090760][T28544] ? clear_bhb_loop+0x70/0xc0 [ 996.090784][T28544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.090803][T28544] RIP: 0033:0x7f8a1bd9f559 [ 996.090820][T28544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 996.090837][T28544] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 996.090858][T28544] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 996.090872][T28544] RDX: 000000000000001e RSI: 0000000000000006 RDI: 0000000000000003 [ 996.090884][T28544] RBP: 00007f8a19ff6090 R08: 0000000000000004 R09: 0000000000000000 [ 996.090896][T28544] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 996.090909][T28544] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 996.090941][T28544] [ 996.515420][T28558] netlink: 'syz.2.7383': attribute type 10 has an invalid length. [ 996.626336][T28558] mac80211_hwsim hwsim43 wlan0: entered allmulticast mode [ 996.663024][T28558] team0: Port device wlan0 added [ 996.945947][T28568] netlink: 'syz.4.7386': attribute type 10 has an invalid length. [ 997.188605][T28573] FAULT_INJECTION: forcing a failure. [ 997.188605][T28573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 997.188637][T28573] CPU: 0 UID: 0 PID: 28573 Comm: syz.4.7389 Not tainted syzkaller #0 PREEMPT(full) [ 997.188659][T28573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 997.188672][T28573] Call Trace: [ 997.188680][T28573] [ 997.188688][T28573] dump_stack_lvl+0xe8/0x150 [ 997.188725][T28573] should_fail_ex+0x3eb/0x540 [ 997.188752][T28573] _copy_from_user+0x2d/0xb0 [ 997.188775][T28573] __sys_bpf+0x2e7/0xe00 [ 997.188802][T28573] ? __pfx___sys_bpf+0x10/0x10 [ 997.188831][T28573] ? __fget_files+0x2a/0x420 [ 997.188871][T28573] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 997.188900][T28573] ? ksys_write+0x242/0x270 [ 997.188929][T28573] ? __pfx_ksys_write+0x10/0x10 [ 997.188961][T28573] __x64_sys_bpf+0xba/0xd0 [ 997.188992][T28573] do_syscall_64+0x166/0x520 [ 997.189012][T28573] ? trace_irq_disable+0x3b/0x140 [ 997.189038][T28573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.189058][T28573] ? clear_bhb_loop+0x70/0xc0 [ 997.189082][T28573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 997.189109][T28573] RIP: 0033:0x7f4eebb9f559 [ 997.189127][T28573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 997.189144][T28573] RSP: 002b:00007f4eecb46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 997.189165][T28573] RAX: ffffffffffffffda RBX: 00007f4eebe25fa0 RCX: 00007f4eebb9f559 [ 997.189180][T28573] RDX: 0000000000000020 RSI: 0000200000000a00 RDI: 0000000000000004 [ 997.189193][T28573] RBP: 00007f4eecb46090 R08: 0000000000000000 R09: 0000000000000000 [ 997.189206][T28573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 997.189217][T28573] R13: 00007f4eebe26038 R14: 00007f4eebe25fa0 R15: 00007ffdc2d528c8 [ 997.189249][T28573] [ 997.621108][T28577] netlink: 'syz.8.7390': attribute type 10 has an invalid length. [ 997.915305][T28587] __nla_validate_parse: 15 callbacks suppressed [ 997.915328][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7391'. [ 997.948659][T28586] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7394'. [ 998.529865][T28590] netlink: 'syz.7.7395': attribute type 10 has an invalid length. [ 998.545605][T28590] batman_adv: batadv0: Adding interface: vlan0 [ 998.545625][T28590] batman_adv: batadv0: The MTU of interface vlan0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.545675][T28590] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 998.617044][T28592] FAULT_INJECTION: forcing a failure. [ 998.617044][T28592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 998.617073][T28592] CPU: 1 UID: 0 PID: 28592 Comm: syz.4.7396 Not tainted syzkaller #0 PREEMPT(full) [ 998.617096][T28592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 998.617110][T28592] Call Trace: [ 998.617119][T28592] [ 998.617128][T28592] dump_stack_lvl+0xe8/0x150 [ 998.617168][T28592] should_fail_ex+0x3eb/0x540 [ 998.617196][T28592] _copy_from_user+0x2d/0xb0 [ 998.617221][T28592] ___sys_sendmsg+0x1c6/0x360 [ 998.617252][T28592] ? __lock_acquire+0x747/0x2de0 [ 998.617284][T28592] ? __pfx____sys_sendmsg+0x10/0x10 [ 998.617367][T28592] ? __fget_files+0x3a2/0x420 [ 998.617390][T28592] ? __fget_files+0x2a/0x420 [ 998.617423][T28592] __x64_sys_sendmsg+0x1b1/0x290 [ 998.617456][T28592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 998.617514][T28592] do_syscall_64+0x166/0x520 [ 998.617534][T28592] ? trace_irq_disable+0x3b/0x140 [ 998.617560][T28592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.617580][T28592] ? clear_bhb_loop+0x70/0xc0 [ 998.617604][T28592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.617624][T28592] RIP: 0033:0x7f4eebb9f559 [ 998.617642][T28592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 998.617661][T28592] RSP: 002b:00007f4eecb46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 998.617682][T28592] RAX: ffffffffffffffda RBX: 00007f4eebe25fa0 RCX: 00007f4eebb9f559 [ 998.617697][T28592] RDX: 0000000004004084 RSI: 0000200000001140 RDI: 0000000000000003 [ 998.617710][T28592] RBP: 00007f4eecb46090 R08: 0000000000000000 R09: 0000000000000000 [ 998.617723][T28592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.617735][T28592] R13: 00007f4eebe26038 R14: 00007f4eebe25fa0 R15: 00007ffdc2d528c8 [ 998.617766][T28592] [ 999.112193][T28606] netlink: 'syz.2.7399': attribute type 10 has an invalid length. [ 999.258007][T28616] rdma_rxe: rxe_newlink: failed to add wg2 [ 999.276407][T28606] bond0: (slave .): Releasing backup interface [ 999.277350][T28611] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7402'. [ 999.348118][T28606] 8021q: adding VLAN 0 to HW filter on device . [ 999.380164][T28606] team0: Port device . added [ 999.641520][T28620] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7403'. [ 999.972807][T28632] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7409'. [ 1000.229506][T28640] FAULT_INJECTION: forcing a failure. [ 1000.229506][T28640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.229536][T28640] CPU: 0 UID: 0 PID: 28640 Comm: syz.8.7413 Not tainted syzkaller #0 PREEMPT(full) [ 1000.229560][T28640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1000.229573][T28640] Call Trace: [ 1000.229581][T28640] [ 1000.229590][T28640] dump_stack_lvl+0xe8/0x150 [ 1000.229629][T28640] should_fail_ex+0x3eb/0x540 [ 1000.229673][T28640] _copy_from_user+0x2d/0xb0 [ 1000.229699][T28640] __sys_bpf+0x2e7/0xe00 [ 1000.229728][T28640] ? __pfx___sys_bpf+0x10/0x10 [ 1000.229763][T28640] ? __fget_files+0x2a/0x420 [ 1000.229807][T28640] ? ksys_write+0x242/0x270 [ 1000.229838][T28640] ? __pfx_ksys_write+0x10/0x10 [ 1000.229871][T28640] __x64_sys_bpf+0xba/0xd0 [ 1000.229904][T28640] do_syscall_64+0x166/0x520 [ 1000.229926][T28640] ? trace_irq_disable+0x3b/0x140 [ 1000.229954][T28640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.229975][T28640] ? clear_bhb_loop+0x70/0xc0 [ 1000.230000][T28640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.230021][T28640] RIP: 0033:0x7f1292f9f559 [ 1000.230041][T28640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.230059][T28640] RSP: 002b:00007f1293f1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1000.230081][T28640] RAX: ffffffffffffffda RBX: 00007f1293225fa0 RCX: 00007f1292f9f559 [ 1000.230098][T28640] RDX: 0000000000000050 RSI: 0000200000000980 RDI: 000000000000000a [ 1000.230111][T28640] RBP: 00007f1293f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.230124][T28640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.230137][T28640] R13: 00007f1293226038 R14: 00007f1293225fa0 R15: 00007ffc32a3b328 [ 1000.230171][T28640] [ 1000.285405][T28641] FAULT_INJECTION: forcing a failure. [ 1000.285405][T28641] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.287604][T28641] CPU: 1 UID: 0 PID: 28641 Comm: syz.6.7412 Not tainted syzkaller #0 PREEMPT(full) [ 1000.287666][T28641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1000.287702][T28641] Call Trace: [ 1000.287730][T28641] [ 1000.287766][T28641] dump_stack_lvl+0xe8/0x150 [ 1000.287884][T28641] should_fail_ex+0x3eb/0x540 [ 1000.287998][T28641] should_failslab+0xa8/0x100 [ 1000.288104][T28641] __kmalloc_noprof+0xf9/0x710 [ 1000.288169][T28641] ? rcu_is_watching+0x16/0xb0 [ 1000.288286][T28641] ? tomoyo_realpath_from_path+0xef/0x640 [ 1000.288377][T28641] ? tomoyo_realpath_from_path+0xef/0x640 [ 1000.288546][T28641] tomoyo_realpath_from_path+0xef/0x640 [ 1000.288718][T28641] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1000.288803][T28641] tomoyo_path_number_perm+0x246/0x5f0 [ 1000.288921][T28641] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1000.289021][T28641] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1000.289431][T28641] ? __fget_files+0x2a/0x420 [ 1000.289546][T28641] ? __fget_files+0x2a/0x420 [ 1000.289640][T28641] ? __fget_files+0x2a/0x420 [ 1000.289690][T28641] security_file_ioctl+0xc3/0x2a0 [ 1000.289748][T28641] __se_sys_ioctl+0x47/0x170 [ 1000.289898][T28641] do_syscall_64+0x166/0x520 [ 1000.289966][T28641] ? trace_irq_disable+0x3b/0x140 [ 1000.290049][T28641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.290115][T28641] ? clear_bhb_loop+0x70/0xc0 [ 1000.290268][T28641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.290332][T28641] RIP: 0033:0x7fbd0d39f559 [ 1000.290397][T28641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.290444][T28641] RSP: 002b:00007fbd0e21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1000.290503][T28641] RAX: ffffffffffffffda RBX: 00007fbd0d625fa0 RCX: 00007fbd0d39f559 [ 1000.290547][T28641] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000007 [ 1000.290585][T28641] RBP: 00007fbd0e21b090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.290621][T28641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.290653][T28641] R13: 00007fbd0d626038 R14: 00007fbd0d625fa0 R15: 00007ffece591348 [ 1000.290857][T28641] [ 1000.309904][T28641] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1002.202740][T28652] netlink: 'syz.7.7415': attribute type 10 has an invalid length. [ 1003.183271][T28654] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7416'. [ 1003.269467][T28656] netlink: 10 bytes leftover after parsing attributes in process `syz.6.7417'. [ 1003.415027][T28667] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7421'. [ 1003.491904][T28667] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7421'. [ 1003.646297][T28667] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7421'. [ 1003.798534][T28682] netlink: 'syz.6.7422': attribute type 21 has an invalid length. [ 1003.817699][T28682] netlink: 'syz.6.7422': attribute type 1 has an invalid length. [ 1003.827773][T28682] netlink: 132 bytes leftover after parsing attributes in process `syz.6.7422'. [ 1006.685669][T28698] netlink: 'syz.2.7429': attribute type 2 has an invalid length. [ 1006.685708][T28698] netlink: 'syz.2.7429': attribute type 2 has an invalid length. [ 1006.738461][T28700] netlink: 'syz.4.7430': attribute type 10 has an invalid length. [ 1006.815467][T28704] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7431'. [ 1006.866311][T28707] netlink: 'syz.6.7433': attribute type 2 has an invalid length. [ 1006.866351][T28707] netlink: 'syz.6.7433': attribute type 2 has an invalid length. [ 1006.937635][T28709] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7432'. [ 1007.205306][T28722] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.7436'. [ 1007.693122][T28731] netlink: 'syz.6.7447': attribute type 10 has an invalid length. [ 1007.751807][T28735] netlink: 'syz.8.7438': attribute type 10 has an invalid length. [ 1007.793149][T28739] netlink: 'syz.7.7440': attribute type 10 has an invalid length. [ 1007.815486][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7439'. [ 1008.018686][T28735] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 1008.069537][T28739] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 1008.388424][T28737] __nla_validate_parse: 2 callbacks suppressed [ 1008.388466][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7439'. [ 1009.047469][T28765] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7445'. [ 1009.418248][T28782] netlink: 'syz.6.7452': attribute type 10 has an invalid length. [ 1010.945930][T28800] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7458'. [ 1011.014610][T28802] netlink: 15 bytes leftover after parsing attributes in process `syz.4.7458'. [ 1011.120195][T28803] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7459'. [ 1011.264394][T28811] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7461'. [ 1011.264555][T28811] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7461'. [ 1012.031853][T28821] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7464'. [ 1012.200479][T28823] FAULT_INJECTION: forcing a failure. [ 1012.200479][T28823] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.200511][T28823] CPU: 0 UID: 0 PID: 28823 Comm: syz.6.7465 Not tainted syzkaller #0 PREEMPT(full) [ 1012.200548][T28823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1012.200560][T28823] Call Trace: [ 1012.200568][T28823] [ 1012.200576][T28823] dump_stack_lvl+0xe8/0x150 [ 1012.200614][T28823] should_fail_ex+0x3eb/0x540 [ 1012.200643][T28823] should_failslab+0xa8/0x100 [ 1012.200674][T28823] __kmalloc_noprof+0xf9/0x710 [ 1012.200696][T28823] ? rcu_is_watching+0x16/0xb0 [ 1012.200726][T28823] ? tomoyo_realpath_from_path+0xef/0x640 [ 1012.200756][T28823] ? tomoyo_realpath_from_path+0xef/0x640 [ 1012.200794][T28823] tomoyo_realpath_from_path+0xef/0x640 [ 1012.200834][T28823] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1012.200860][T28823] tomoyo_path_number_perm+0x246/0x5f0 [ 1012.200897][T28823] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1012.200921][T28823] ? __lock_acquire+0x747/0x2de0 [ 1012.200985][T28823] ? __fget_files+0x2a/0x420 [ 1012.201012][T28823] ? __fget_files+0x2a/0x420 [ 1012.201036][T28823] ? __fget_files+0x2a/0x420 [ 1012.201065][T28823] security_file_ioctl+0xc3/0x2a0 [ 1012.201092][T28823] __se_sys_ioctl+0x47/0x170 [ 1012.201125][T28823] do_syscall_64+0x166/0x520 [ 1012.201145][T28823] ? trace_irq_disable+0x3b/0x140 [ 1012.201171][T28823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.201191][T28823] ? clear_bhb_loop+0x70/0xc0 [ 1012.201215][T28823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.201235][T28823] RIP: 0033:0x7fbd0d39f559 [ 1012.201252][T28823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.201273][T28823] RSP: 002b:00007fbd0e21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.201293][T28823] RAX: ffffffffffffffda RBX: 00007fbd0d625fa0 RCX: 00007fbd0d39f559 [ 1012.201308][T28823] RDX: 0000200000000180 RSI: 00000000000089e3 RDI: 0000000000000003 [ 1012.201320][T28823] RBP: 00007fbd0e21b090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.201332][T28823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.201344][T28823] R13: 00007fbd0d626038 R14: 00007fbd0d625fa0 R15: 00007ffece591348 [ 1012.201376][T28823] [ 1012.201394][T28823] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1012.664223][T28829] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7469'. [ 1013.429466][T28835] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7470'. [ 1013.554979][T28838] FAULT_INJECTION: forcing a failure. [ 1013.554979][T28838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.555011][T28838] CPU: 0 UID: 0 PID: 28838 Comm: syz.7.7471 Not tainted syzkaller #0 PREEMPT(full) [ 1013.555033][T28838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1013.555046][T28838] Call Trace: [ 1013.555055][T28838] [ 1013.555064][T28838] dump_stack_lvl+0xe8/0x150 [ 1013.555104][T28838] should_fail_ex+0x3eb/0x540 [ 1013.555135][T28838] _copy_from_user+0x2d/0xb0 [ 1013.555178][T28838] ___sys_sendmsg+0x1c6/0x360 [ 1013.555212][T28838] ? __lock_acquire+0x747/0x2de0 [ 1013.555248][T28838] ? __pfx____sys_sendmsg+0x10/0x10 [ 1013.555314][T28838] ? __fget_files+0x2a/0x420 [ 1013.555360][T28838] ? __fget_files+0x3a2/0x420 [ 1013.555385][T28838] ? __fget_files+0x2a/0x420 [ 1013.555426][T28838] __x64_sys_sendmsg+0x1b1/0x290 [ 1013.555465][T28838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1013.555530][T28838] do_syscall_64+0x166/0x520 [ 1013.555553][T28838] ? trace_irq_disable+0x3b/0x140 [ 1013.555584][T28838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.555607][T28838] ? clear_bhb_loop+0x70/0xc0 [ 1013.555635][T28838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.555658][T28838] RIP: 0033:0x7f8a1bd9f559 [ 1013.555680][T28838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1013.555699][T28838] RSP: 002b:00007f8a19fd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1013.555723][T28838] RAX: ffffffffffffffda RBX: 00007f8a1c026090 RCX: 00007f8a1bd9f559 [ 1013.555745][T28838] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1013.555759][T28838] RBP: 00007f8a19fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.555772][T28838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.555786][T28838] R13: 00007f8a1c026128 R14: 00007f8a1c026090 R15: 00007fffe9e74538 [ 1013.555827][T28838] [ 1014.172469][T28847] netlink: 'syz.6.7475': attribute type 10 has an invalid length. [ 1014.209760][T28854] IPv6: NLM_F_CREATE should be specified when creating new route [ 1014.219206][T28855] IPv6: NLM_F_CREATE should be specified when creating new route [ 1014.359846][T28856] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7477'. [ 1014.794689][T28867] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1015.083016][T28876] netlink: 'syz.7.7483': attribute type 20 has an invalid length. [ 1016.222537][T28887] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7486'. [ 1016.537478][T28897] netlink: 'syz.4.7489': attribute type 10 has an invalid length. [ 1016.595667][T28893] netlink: 'syz.2.7488': attribute type 20 has an invalid length. [ 1017.090591][T28907] FAULT_INJECTION: forcing a failure. [ 1017.090591][T28907] name failslab, interval 1, probability 0, space 0, times 0 [ 1017.090621][T28907] CPU: 1 UID: 0 PID: 28907 Comm: syz.6.7492 Not tainted syzkaller #0 PREEMPT(full) [ 1017.090642][T28907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1017.090654][T28907] Call Trace: [ 1017.090662][T28907] [ 1017.090671][T28907] dump_stack_lvl+0xe8/0x150 [ 1017.090709][T28907] should_fail_ex+0x3eb/0x540 [ 1017.090736][T28907] ? __alloc_skb+0x1db/0x7a0 [ 1017.090765][T28907] should_failslab+0xa8/0x100 [ 1017.090797][T28907] ? __alloc_skb+0x1db/0x7a0 [ 1017.090821][T28907] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1017.090854][T28907] ? __alloc_skb+0x1db/0x7a0 [ 1017.090906][T28907] __alloc_skb+0x1db/0x7a0 [ 1017.090941][T28907] tcp_stream_alloc_skb+0x3f/0x580 [ 1017.090972][T28907] tcp_sendmsg_locked+0x140c/0x53c0 [ 1017.091009][T28907] ? __lock_acquire+0x747/0x2de0 [ 1017.091067][T28907] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1017.091122][T28907] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1017.091156][T28907] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1017.091192][T28907] ? __local_bh_enable_ip+0xd6/0x140 [ 1017.091229][T28907] tcp_sendmsg+0x2f/0x50 [ 1017.091254][T28907] ? __pfx_inet6_sendmsg+0x10/0x10 [ 1017.091362][T28907] sock_sendmsg_nosec+0x90/0x190 [ 1017.091394][T28907] ____sys_sendmsg+0x54e/0x850 [ 1017.091437][T28907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1017.091485][T28907] ? import_iovec+0x73/0xa0 [ 1017.091517][T28907] ___sys_sendmsg+0x2a5/0x360 [ 1017.091558][T28907] ? __lock_acquire+0x747/0x2de0 [ 1017.091591][T28907] ? __pfx____sys_sendmsg+0x10/0x10 [ 1017.091671][T28907] ? __fget_files+0x3a2/0x420 [ 1017.091696][T28907] ? __fget_files+0x2a/0x420 [ 1017.091734][T28907] __x64_sys_sendmsg+0x1b1/0x290 [ 1017.091788][T28907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1017.091872][T28907] do_syscall_64+0x166/0x520 [ 1017.091895][T28907] ? trace_irq_disable+0x3b/0x140 [ 1017.091924][T28907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.091945][T28907] ? clear_bhb_loop+0x70/0xc0 [ 1017.091972][T28907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.091993][T28907] RIP: 0033:0x7fbd0d39f559 [ 1017.092013][T28907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1017.092030][T28907] RSP: 002b:00007fbd0e21b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1017.092053][T28907] RAX: ffffffffffffffda RBX: 00007fbd0d625fa0 RCX: 00007fbd0d39f559 [ 1017.092069][T28907] RDX: 0000000000040020 RSI: 0000200000000280 RDI: 0000000000000005 [ 1017.092081][T28907] RBP: 00007fbd0e21b090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.092094][T28907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1017.092106][T28907] R13: 00007fbd0d626038 R14: 00007fbd0d625fa0 R15: 00007ffece591348 [ 1017.092143][T28907] [ 1017.183489][T28911] netlink: 'syz.6.7492': attribute type 10 has an invalid length. [ 1017.296234][T28906] netlink: 'syz.7.7491': attribute type 2 has an invalid length. [ 1017.541246][T28919] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1017.633233][T28922] netlink: 15 bytes leftover after parsing attributes in process `syz.4.7493'. [ 1017.653419][T28921] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7494'. [ 1018.297593][T28929] netlink: 'syz.2.7497': attribute type 20 has an invalid length. [ 1019.267986][T28936] FAULT_INJECTION: forcing a failure. [ 1019.267986][T28936] name failslab, interval 1, probability 0, space 0, times 0 [ 1019.268021][T28936] CPU: 1 UID: 0 PID: 28936 Comm: syz.7.7498 Not tainted syzkaller #0 PREEMPT(full) [ 1019.268045][T28936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1019.268058][T28936] Call Trace: [ 1019.268070][T28936] [ 1019.268082][T28936] dump_stack_lvl+0xe8/0x150 [ 1019.268132][T28936] should_fail_ex+0x3eb/0x540 [ 1019.268181][T28936] should_failslab+0xa8/0x100 [ 1019.268216][T28936] ? alloc_empty_file+0x5b/0x1d0 [ 1019.268242][T28936] kmem_cache_alloc_noprof+0x9c/0x600 [ 1019.268280][T28936] ? alloc_empty_file+0x5b/0x1d0 [ 1019.268329][T28936] alloc_empty_file+0x5b/0x1d0 [ 1019.268364][T28936] dentry_open+0x44/0xa0 [ 1019.268394][T28936] pidfs_alloc_file+0x188/0x280 [ 1019.268435][T28936] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 1019.268506][T28936] pidfd_prepare+0xfd/0x170 [ 1019.268553][T28936] scm_pidfd_recv+0x1a3/0x2e0 [ 1019.268598][T28936] ? __pfx_scm_pidfd_recv+0x10/0x10 [ 1019.268632][T28936] ? lockdep_hardirqs_on+0x7b/0x110 [ 1019.268683][T28936] ? scm_recv_unix+0xbe/0x280 [ 1019.268734][T28936] scm_recv_unix+0x136/0x280 [ 1019.268777][T28936] unix_stream_read_generic+0x22ae/0x25e0 [ 1019.269058][T28936] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 1019.269103][T28936] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1019.269252][T28936] unix_stream_recvmsg+0x16b/0x1d0 [ 1019.269311][T28936] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1019.269352][T28936] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 1019.269402][T28936] ? aa_sock_msg_perm+0x129/0x210 [ 1019.269465][T28936] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1019.269499][T28936] ? security_socket_recvmsg+0x7e/0x2c0 [ 1019.269535][T28936] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 1019.269581][T28936] sock_recvmsg+0x196/0x1e0 [ 1019.269644][T28936] ____sys_recvmsg+0x1f8/0x530 [ 1019.269718][T28936] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1019.269820][T28936] ? import_iovec+0x73/0xa0 [ 1019.269875][T28936] ___sys_recvmsg+0x213/0x5a0 [ 1019.269908][T28936] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 1019.269967][T28936] ? __pfx____sys_recvmsg+0x10/0x10 [ 1019.270097][T28936] ? __fget_files+0x2a/0x420 [ 1019.270133][T28936] ? __fget_files+0x3a2/0x420 [ 1019.270167][T28936] ? __fget_files+0x2a/0x420 [ 1019.270245][T28936] __x64_sys_recvmsg+0x1ae/0x290 [ 1019.270304][T28936] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1019.270427][T28936] do_syscall_64+0x166/0x520 [ 1019.270456][T28936] ? trace_irq_disable+0x3b/0x140 [ 1019.270503][T28936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.270531][T28936] ? clear_bhb_loop+0x70/0xc0 [ 1019.270576][T28936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.270603][T28936] RIP: 0033:0x7f8a1bd9f559 [ 1019.270639][T28936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.270661][T28936] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1019.270686][T28936] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 1019.270704][T28936] RDX: 0000000040002000 RSI: 0000200000000d00 RDI: 0000000000000005 [ 1019.270719][T28936] RBP: 00007f8a19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.270734][T28936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1019.270749][T28936] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 1019.270836][T28936] [ 1019.911134][T28942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7500'. [ 1020.035635][T28942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7500'. [ 1020.313934][T28942] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7500'. [ 1020.895458][T28952] netlink: 'syz.7.7503': attribute type 10 has an invalid length. [ 1020.939180][T28958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7502'. [ 1021.365776][T28968] netlink: 'syz.8.7505': attribute type 29 has an invalid length. [ 1021.411303][T28958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7502'. [ 1021.907531][T28974] netlink: 10 bytes leftover after parsing attributes in process `syz.7.7507'. [ 1022.068086][T28980] FAULT_INJECTION: forcing a failure. [ 1022.068086][T28980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.068134][T28980] CPU: 0 UID: 0 PID: 28980 Comm: syz.6.7508 Not tainted syzkaller #0 PREEMPT(full) [ 1022.068158][T28980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1022.068170][T28980] Call Trace: [ 1022.068180][T28980] [ 1022.068189][T28980] dump_stack_lvl+0xe8/0x150 [ 1022.068228][T28980] should_fail_ex+0x3eb/0x540 [ 1022.068258][T28980] strncpy_from_user+0x36/0x2c0 [ 1022.068286][T28980] bpf_prog_load+0xf5b/0x1c60 [ 1022.068322][T28980] ? __pfx_bpf_prog_load+0x10/0x10 [ 1022.068372][T28980] ? __sys_bpf+0x5c2/0xe00 [ 1022.068401][T28980] __sys_bpf+0xd86/0xe00 [ 1022.068431][T28980] ? __pfx___sys_bpf+0x10/0x10 [ 1022.068448][T28980] ? lock_acquire+0x115/0x350 [ 1022.068487][T28980] ? ktime_get+0x45/0x220 [ 1022.068537][T28980] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1022.068569][T28980] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1022.068595][T28980] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 1022.068626][T28980] __x64_sys_bpf+0xba/0xd0 [ 1022.068660][T28980] do_syscall_64+0x166/0x520 [ 1022.068689][T28980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.068709][T28980] ? clear_bhb_loop+0x70/0xc0 [ 1022.068735][T28980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.068755][T28980] RIP: 0033:0x7fbd0d39f559 [ 1022.068774][T28980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.068791][T28980] RSP: 002b:00007fbd0e1fa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1022.068812][T28980] RAX: ffffffffffffffda RBX: 00007fbd0d626090 RCX: 00007fbd0d39f559 [ 1022.068827][T28980] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1022.068840][T28980] RBP: 00007fbd0e1fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.068852][T28980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1022.068863][T28980] R13: 00007fbd0d626128 R14: 00007fbd0d626090 R15: 00007ffece591348 [ 1022.068901][T28980] [ 1022.674552][T28990] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7513'. [ 1022.715795][T28996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7514'. [ 1022.792422][T29001] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7515'. [ 1022.798611][T29001] netlink: 15 bytes leftover after parsing attributes in process `syz.8.7515'. [ 1023.371448][T29017] netlink: 'syz.7.7518': attribute type 20 has an invalid length. [ 1025.125198][T29050] rdma_rxe: rxe_newlink: failed to add wg2 [ 1025.434676][T29058] __nla_validate_parse: 3 callbacks suppressed [ 1025.434700][T29058] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7530'. [ 1025.501314][T29060] netlink: 15 bytes leftover after parsing attributes in process `syz.6.7530'. [ 1025.980128][T29066] FAULT_INJECTION: forcing a failure. [ 1025.980128][T29066] name failslab, interval 1, probability 0, space 0, times 0 [ 1025.980159][T29066] CPU: 0 UID: 0 PID: 29066 Comm: syz.2.7533 Not tainted syzkaller #0 PREEMPT(full) [ 1025.980180][T29066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1025.980193][T29066] Call Trace: [ 1025.980201][T29066] [ 1025.980212][T29066] dump_stack_lvl+0xe8/0x150 [ 1025.980249][T29066] should_fail_ex+0x3eb/0x540 [ 1025.980276][T29066] should_failslab+0xa8/0x100 [ 1025.980304][T29066] ? skb_clone+0x212/0x3a0 [ 1025.980325][T29066] kmem_cache_alloc_noprof+0x9c/0x600 [ 1025.980350][T29066] ? skb_clone+0x212/0x3a0 [ 1025.980375][T29066] skb_clone+0x212/0x3a0 [ 1025.980405][T29066] __netlink_deliver_tap+0x355/0x6e0 [ 1025.980443][T29066] ? netlink_deliver_tap+0x2e/0x1b0 [ 1025.980470][T29066] netlink_deliver_tap+0x19c/0x1b0 [ 1025.980497][T29066] netlink_unicast+0x8c1/0xa80 [ 1025.980536][T29066] netlink_sendmsg+0x7f0/0xb20 [ 1025.980569][T29066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.980599][T29066] ? aa_sock_msg_perm+0x144/0x210 [ 1025.980632][T29066] ? apparmor_socket_sendmsg+0x98/0x360 [ 1025.980660][T29066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1025.980685][T29066] sock_sendmsg_nosec+0x14e/0x190 [ 1025.980712][T29066] ____sys_sendmsg+0x54e/0x850 [ 1025.980747][T29066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1025.980786][T29066] ? import_iovec+0x73/0xa0 [ 1025.980812][T29066] ___sys_sendmsg+0x2a5/0x360 [ 1025.980840][T29066] ? __lock_acquire+0x747/0x2de0 [ 1025.980871][T29066] ? __pfx____sys_sendmsg+0x10/0x10 [ 1025.980937][T29066] ? __fget_files+0x3a2/0x420 [ 1025.980960][T29066] ? __fget_files+0x2a/0x420 [ 1025.980993][T29066] __x64_sys_sendmsg+0x1b1/0x290 [ 1025.981035][T29066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1025.981086][T29066] do_syscall_64+0x166/0x520 [ 1025.981105][T29066] ? trace_irq_disable+0x3b/0x140 [ 1025.981132][T29066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.981153][T29066] ? clear_bhb_loop+0x70/0xc0 [ 1025.981177][T29066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1025.981196][T29066] RIP: 0033:0x7fc6f2f9f559 [ 1025.981214][T29066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1025.981230][T29066] RSP: 002b:00007fc6f11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1025.981251][T29066] RAX: ffffffffffffffda RBX: 00007fc6f3225fa0 RCX: 00007fc6f2f9f559 [ 1025.981266][T29066] RDX: 0000000004000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 1025.981278][T29066] RBP: 00007fc6f11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1025.981290][T29066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1025.981301][T29066] R13: 00007fc6f3226038 R14: 00007fc6f3225fa0 R15: 00007ffdda5b9c68 [ 1025.981332][T29066] [ 1026.645717][T29080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7538'. [ 1026.659342][T29078] netlink: 'syz.7.7537': attribute type 20 has an invalid length. [ 1026.816608][T29075] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7538'. [ 1026.837673][T29075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1026.916238][T29090] FAULT_INJECTION: forcing a failure. [ 1026.916238][T29090] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.916266][T29090] CPU: 0 UID: 0 PID: 29090 Comm: syz.8.7541 Not tainted syzkaller #0 PREEMPT(full) [ 1026.916286][T29090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1026.916307][T29090] Call Trace: [ 1026.916314][T29090] [ 1026.916322][T29090] dump_stack_lvl+0xe8/0x150 [ 1026.916356][T29090] should_fail_ex+0x3eb/0x540 [ 1026.916380][T29090] ? __alloc_skb+0x1db/0x7a0 [ 1026.916408][T29090] should_failslab+0xa8/0x100 [ 1026.916440][T29090] ? __alloc_skb+0x1db/0x7a0 [ 1026.916465][T29090] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1026.916492][T29090] ? __alloc_skb+0x1db/0x7a0 [ 1026.916528][T29090] __alloc_skb+0x1db/0x7a0 [ 1026.916559][T29090] netlink_sendmsg+0x5cd/0xb20 [ 1026.916593][T29090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.916624][T29090] ? aa_sock_msg_perm+0x144/0x210 [ 1026.916659][T29090] ? apparmor_socket_sendmsg+0x98/0x360 [ 1026.916689][T29090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.916714][T29090] sock_sendmsg_nosec+0x14e/0x190 [ 1026.916743][T29090] ____sys_sendmsg+0x54e/0x850 [ 1026.916781][T29090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1026.916824][T29090] ? import_iovec+0x73/0xa0 [ 1026.916853][T29090] ___sys_sendmsg+0x2a5/0x360 [ 1026.916881][T29090] ? __lock_acquire+0x747/0x2de0 [ 1026.916914][T29090] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.916993][T29090] ? __fget_files+0x3a2/0x420 [ 1026.917018][T29090] ? __fget_files+0x2a/0x420 [ 1026.917055][T29090] __x64_sys_sendmsg+0x1b1/0x290 [ 1026.917091][T29090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1026.917150][T29090] do_syscall_64+0x166/0x520 [ 1026.917171][T29090] ? trace_irq_disable+0x3b/0x140 [ 1026.917198][T29090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.917220][T29090] ? clear_bhb_loop+0x70/0xc0 [ 1026.917249][T29090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.917270][T29090] RIP: 0033:0x7f1292f9f559 [ 1026.917289][T29090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1026.917313][T29090] RSP: 002b:00007f1293efe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.917335][T29090] RAX: ffffffffffffffda RBX: 00007f1293226090 RCX: 00007f1292f9f559 [ 1026.917350][T29090] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 000000000000000d [ 1026.917363][T29090] RBP: 00007f1293efe090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.917376][T29090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.917388][T29090] R13: 00007f1293226128 R14: 00007f1293226090 R15: 00007ffc32a3b328 [ 1026.917425][T29090] [ 1027.388312][T29088] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7541'. [ 1027.412874][T29088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1027.510835][ T7493] lo speed is unknown, defaulting to 1000 [ 1027.617811][T29098] netlink: 'syz.2.7542': attribute type 17 has an invalid length. [ 1027.617837][T29098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1027.617852][T29098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1027.635058][T29096] netlink: 'syz.2.7542': attribute type 17 has an invalid length. [ 1027.635113][T29096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1027.635151][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1028.374076][T29112] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7547'. [ 1028.802826][T29114] netlink: 'syz.6.7548': attribute type 10 has an invalid length. [ 1029.829556][T29142] FAULT_INJECTION: forcing a failure. [ 1029.829556][T29142] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.829703][T29142] CPU: 1 UID: 0 PID: 29142 Comm: syz.7.7554 Not tainted syzkaller #0 PREEMPT(full) [ 1029.829728][T29142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1029.829741][T29142] Call Trace: [ 1029.829750][T29142] [ 1029.829760][T29142] dump_stack_lvl+0xe8/0x150 [ 1029.829829][T29142] should_fail_ex+0x3eb/0x540 [ 1029.829857][T29142] ? __alloc_skb+0x1db/0x7a0 [ 1029.829897][T29142] should_failslab+0xa8/0x100 [ 1029.829929][T29142] ? __alloc_skb+0x1db/0x7a0 [ 1029.830003][T29142] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1029.830036][T29142] ? __alloc_skb+0x1db/0x7a0 [ 1029.830075][T29142] __alloc_skb+0x1db/0x7a0 [ 1029.830111][T29142] netlink_sendmsg+0x5cd/0xb20 [ 1029.830150][T29142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.830184][T29142] ? aa_sock_msg_perm+0x144/0x210 [ 1029.830223][T29142] ? apparmor_socket_sendmsg+0x98/0x360 [ 1029.830255][T29142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.830283][T29142] sock_sendmsg_nosec+0x14e/0x190 [ 1029.830315][T29142] ____sys_sendmsg+0x54e/0x850 [ 1029.830356][T29142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.830403][T29142] ? import_iovec+0x73/0xa0 [ 1029.830434][T29142] ___sys_sendmsg+0x2a5/0x360 [ 1029.830466][T29142] ? __pfx_clockevents_program_event+0x10/0x10 [ 1029.830498][T29142] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.830540][T29142] ? irqentry_exit+0x2a0/0x9b0 [ 1029.830579][T29142] ? __fget_files+0x2a/0x420 [ 1029.830626][T29142] ? __fget_files+0x3a2/0x420 [ 1029.830651][T29142] ? __fget_files+0x2a/0x420 [ 1029.830690][T29142] __x64_sys_sendmsg+0x1b1/0x290 [ 1029.830722][T29142] ? lockdep_hardirqs_on+0x7b/0x110 [ 1029.830748][T29142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1029.830810][T29142] do_syscall_64+0x166/0x520 [ 1029.830832][T29142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.830855][T29142] ? clear_bhb_loop+0x70/0xc0 [ 1029.830884][T29142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.830906][T29142] RIP: 0033:0x7f8a1bd9f559 [ 1029.830927][T29142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1029.830945][T29142] RSP: 002b:00007f8a19ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.830976][T29142] RAX: ffffffffffffffda RBX: 00007f8a1c025fa0 RCX: 00007f8a1bd9f559 [ 1029.830992][T29142] RDX: 0000000004000000 RSI: 0000200000000cc0 RDI: 000000000000000a [ 1029.831007][T29142] RBP: 00007f8a19ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.831021][T29142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.831034][T29142] R13: 00007f8a1c026038 R14: 00007f8a1c025fa0 R15: 00007fffe9e74538 [ 1029.831075][T29142] [ 1030.565581][T29150] netlink: 'syz.6.7555': attribute type 20 has an invalid length. [ 1032.185060][T29162] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7558'. [ 1032.216667][T29166] tc_dump_action: action bad kind [ 1032.374389][T29169] rxe_eth0 speed is unknown, defaulting to 1000 [ 1033.645677][T29178] netlink: 'syz.8.7563': attribute type 10 has an invalid length. [ 1033.824792][T29169] lo speed is unknown, defaulting to 1000 [ 1033.928387][T29188] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.7566'. [ 1034.567955][T29203] netlink: 'syz.4.7570': attribute type 20 has an invalid length. [ 1034.940326][T29213] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7573'. [ 1034.975535][T29213] netlink: 15 bytes leftover after parsing attributes in process `syz.2.7573'. [ 1035.048400][T29212] netlink: 220 bytes leftover after parsing attributes in process `syz.8.7574'. [ 1035.634565][T29218] IPv6: NLM_F_CREATE should be specified when creating new route [ 1036.168406][T29222] FAULT_INJECTION: forcing a failure. [ 1036.168406][T29222] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.168464][T29222] CPU: 1 UID: 0 PID: 29222 Comm: syz.2.7576 Not tainted syzkaller #0 PREEMPT(full) [ 1036.168489][T29222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1036.168504][T29222] Call Trace: [ 1036.168513][T29222] [ 1036.168524][T29222] dump_stack_lvl+0xe8/0x150 [ 1036.168568][T29222] should_fail_ex+0x3eb/0x540 [ 1036.168600][T29222] ? __alloc_skb+0x1db/0x7a0 [ 1036.168644][T29222] should_failslab+0xa8/0x100 [ 1036.168678][T29222] ? __alloc_skb+0x1db/0x7a0 [ 1036.168706][T29222] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1036.168736][T29222] ? __alloc_skb+0x1db/0x7a0 [ 1036.168776][T29222] __alloc_skb+0x1db/0x7a0 [ 1036.168812][T29222] netlink_sendmsg+0x5cd/0xb20 [ 1036.168852][T29222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.168886][T29222] ? aa_sock_msg_perm+0x144/0x210 [ 1036.168926][T29222] ? apparmor_socket_sendmsg+0x98/0x360 [ 1036.168959][T29222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.168986][T29222] sock_sendmsg_nosec+0x14e/0x190 [ 1036.169037][T29222] ____sys_sendmsg+0x54e/0x850 [ 1036.169082][T29222] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1036.169133][T29222] ? import_iovec+0x73/0xa0 [ 1036.169165][T29222] ___sys_sendmsg+0x2a5/0x360 [ 1036.169201][T29222] ? irqentry_exit+0x2a0/0x9b0 [ 1036.169232][T29222] ? __pfx____sys_sendmsg+0x10/0x10 [ 1036.169332][T29222] ? kasan_check_range+0x97/0x2c0 [ 1036.169383][T29222] __x64_sys_sendmsg+0x1b1/0x290 [ 1036.169424][T29222] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1036.169501][T29222] do_syscall_64+0x166/0x520 [ 1036.169524][T29222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.169553][T29222] ? clear_bhb_loop+0x70/0xc0 [ 1036.169582][T29222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.169604][T29222] RIP: 0033:0x7fc6f2f9f559 [ 1036.169624][T29222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.169643][T29222] RSP: 002b:00007fc6f11d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1036.169666][T29222] RAX: ffffffffffffffda RBX: 00007fc6f3226090 RCX: 00007fc6f2f9f559 [ 1036.169682][T29222] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000009 [ 1036.169696][T29222] RBP: 00007fc6f11d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.169710][T29222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.169723][T29222] R13: 00007fc6f3226128 R14: 00007fc6f3226090 R15: 00007ffdda5b9c68 [ 1036.169763][T29222] [ 1037.294308][T29229] netlink: 'syz.8.7578': attribute type 10 has an invalid length. [ 1038.959643][T29259] netlink: 'syz.2.7587': attribute type 20 has an invalid length. [ 1040.322881][T29292] netlink: 'syz.6.7592': attribute type 10 has an invalid length. [ 1040.395105][T29300] rdma_rxe: rxe_newlink: failed to add wg2 [ 1041.105208][T29316] netlink: 56 bytes leftover after parsing attributes in process `syz.6.7600'. [ 1041.128399][T29316] netlink: 15 bytes leftover after parsing attributes in process `syz.6.7600'. [ 1042.081996][T29329] netlink: 'syz.7.7603': attribute type 10 has an invalid length. [ 1043.153582][T29350] netlink: 'syz.7.7607': attribute type 10 has an invalid length. [ 1043.790577][T29359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7609'. [ 1044.157213][T29359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7609'. [ 1044.474589][T29366] IPv6: NLM_F_CREATE should be specified when creating new route [ 1044.663228][T29375] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.7612'. [ 1047.513347][T29419] netlink: 'syz.6.7621': attribute type 10 has an invalid length. [ 1047.652857][T29422] netlink: 'syz.2.7624': attribute type 1 has an invalid length. [ 1047.841877][T29422] netlink: 'syz.2.7624': attribute type 10 has an invalid length. [ 1048.255204][T29432] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7625'. [ 1049.204608][T29458] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7630'. [ 1049.976186][T29467] rdma_rxe: rxe_newlink: failed to add wg2 [ 1050.491485][T29480] netlink: 'syz.4.7637': attribute type 10 has an invalid length. [ 1050.535306][T29480] batman_adv: batadv0: Adding interface: vlan0 [ 1050.535331][T29480] batman_adv: batadv0: The MTU of interface vlan0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.535366][T29480] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 1050.718693][T29472] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7636'. [ 1051.689560][T29487] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7638'. [ 1051.919184][T29504] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7643'. [ 1051.979268][T29504] netlink: 15 bytes leftover after parsing attributes in process `syz.8.7643'. [ 1053.679209][T29529] netlink: 32 bytes leftover after parsing attributes in process `syz.7.7650'. [ 1053.901033][T29536] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7651'. [ 1054.266439][T29540] rdma_rxe: rxe_newlink: failed to add wg2 [ 1054.513563][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.513626][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.016364][T29555] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7657'. [ 1056.016403][T29555] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7657'. [ 1056.207989][T29555] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 1056.208058][T29555] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode [ 1056.624305][T29571] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7665'. [ 1056.683057][T29576] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7667'. [ 1056.729583][T29576] netlink: 15 bytes leftover after parsing attributes in process `syz.2.7667'. [ 1057.360582][T29588] netlink: 'syz.2.7671': attribute type 10 has an invalid length. [ 1057.551308][T29588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1057.595174][T29588] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1057.724116][T29588] IPv6: NLM_F_CREATE should be specified when creating new route [ 1057.724669][T29588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1057.724807][T29588] IPv6: NLM_F_CREATE should be set when creating new route [ 1057.724909][T29588] IPv6: NLM_F_CREATE should be set when creating new route [ 1057.829252][T29599] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7674'. [ 1058.695041][T29607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7675'. [ 1058.695069][T29607] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7675'. [ 1058.770131][T29611] mac80211_hwsim hwsim51 wlan1: entered promiscuous mode [ 1058.770163][T29611] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 1058.807707][T29619] netlink: 'syz.7.7679': attribute type 16 has an invalid length. [ 1058.807749][T29619] netlink: 'syz.7.7679': attribute type 17 has an invalid length. [ 1059.374083][T29627] netlink: 56 bytes leftover after parsing attributes in process `syz.8.7682'. [ 1059.379150][T29627] netlink: 15 bytes leftover after parsing attributes in process `syz.8.7682'. [ 1060.030991][T29642] netlink: 'syz.4.7684': attribute type 23 has an invalid length. [ 1061.558987][T29670] netlink: 'syz.2.7689': attribute type 10 has an invalid length. [ 1062.371501][T29677] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7692'. [ 1063.638278][T29689] netlink: 'syz.7.7695': attribute type 10 has an invalid length. [ 1063.717411][T29691] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1063.807458][T29692] netlink: 15 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1064.021332][T29695] netlink: 'syz.7.7697': attribute type 16 has an invalid length. [ 1064.021383][T29695] netlink: 'syz.7.7697': attribute type 17 has an invalid length. [ 1064.397725][T29702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7701'. [ 1064.686567][T29709] netlink: 'syz.8.7700': attribute type 16 has an invalid length. [ 1064.686619][T29709] netlink: 'syz.8.7700': attribute type 17 has an invalid length. [ 1064.897616][T29712] netlink: 'syz.2.7704': attribute type 16 has an invalid length. [ 1064.897663][T29712] netlink: 'syz.2.7704': attribute type 17 has an invalid length. [ 1065.016918][T29722] netlink: 'syz.7.7707': attribute type 10 has an invalid length. [ 1067.077411][T29739] netlink: 'syz.7.7711': attribute type 20 has an invalid length. [ 1067.094989][T29742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7713'. [ 1067.176736][T29740] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7712'. [ 1067.280413][T29744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7714'. [ 1067.888808][T29765] rdma_rxe: rxe_newlink: failed to add wg2 [ 1067.913609][T29767] rdma_rxe: rxe_newlink: failed to add wg2 [ 1068.057833][T29769] rdma_rxe: rxe_newlink: failed to add wg2 [ 1068.286548][T29773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7722'. [ 1068.621141][T29782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7726'. [ 1069.432617][T29814] netlink: 'syz.7.7733': attribute type 16 has an invalid length. [ 1069.432643][T29814] netlink: 'syz.7.7733': attribute type 17 has an invalid length. [ 1070.101024][T29835] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7738'. [ 1073.562092][T29859] caif0: tun_chr_ioctl cmd 1074025672 [ 1073.562121][T29859] caif0: ignored: set checksum enabled [ 1073.723778][ T30] audit: type=1107 audit(1793612933.691:7): pid=29903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1073.818821][T29908] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7762'. [ 1073.818897][T29908] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7762'. [ 1074.114647][T29923] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7771'. [ 1074.592577][T29953] netlink: 100 bytes leftover after parsing attributes in process `syz.4.7783'. [ 1075.223110][T29987] syzkaller0: entered promiscuous mode [ 1075.223140][T29987] syzkaller0: entered allmulticast mode [ 1075.889345][T30033] netlink: 'syz.8.7819': attribute type 4 has an invalid length. [ 1076.165361][T30051] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7828'. [ 1076.442500][T30061] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7833'. [ 1076.769375][T30078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7841'. [ 1079.700537][T30174] IPv6: NLM_F_CREATE should be specified when creating new route [ 1080.095292][T30202] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7901'. [ 1080.095321][T30202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7901'. [ 1080.264524][T30209] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7904'. [ 1080.703806][T30235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7917'. [ 1080.755358][T30240] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7919'. [ 1080.830606][T30243] netlink: 144 bytes leftover after parsing attributes in process `syz.8.7923'. [ 1081.750286][T30289] syzkaller0: entered promiscuous mode [ 1081.750315][T30289] syzkaller0: entered allmulticast mode [ 1081.809752][T30302] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7947'. [ 1082.334828][T30323] netlink: 'syz.8.7958': attribute type 27 has an invalid length. [ 1085.026444][T30397] syzkaller0: entered promiscuous mode [ 1085.026495][T30397] syzkaller0: entered allmulticast mode [ 1085.245703][T30420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8005'. [ 1085.245727][T30420] netlink: 40 bytes leftover after parsing attributes in process `syz.6.8005'. [ 1085.791452][T30436] netlink: 'syz.7.8012': attribute type 9 has an invalid length. [ 1085.791493][T30436] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8012'. [ 1089.243878][T30500] [ 1089.246325][T30500] ============================= [ 1089.251282][T30500] WARNING: suspicious RCU usage [ 1089.256668][T30500] syzkaller #0 Not tainted [ 1089.261177][T30500] ----------------------------- [ 1089.266116][T30500] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 1089.274768][T30500] [ 1089.274768][T30500] other info that might help us debug this: [ 1089.274768][T30500] [ 1089.285546][T30500] [ 1089.285546][T30500] rcu_scheduler_active = 2, debug_locks = 1 [ 1089.294018][T30500] locks held by syz.6.8041/30500: 1, last CPU#1: [ 1089.300660][T30500] #0: ffffffff9015a518 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 1089.311750][T30500] [ 1089.311750][T30500] stack backtrace: [ 1089.317661][T30500] CPU: 1 UID: 0 PID: 30500 Comm: syz.6.8041 Not tainted syzkaller #0 PREEMPT(full) [ 1089.327053][T30500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1089.337142][T30500] Call Trace: [ 1089.340451][T30500] [ 1089.343412][T30500] dump_stack_lvl+0xe8/0x150 [ 1089.348055][T30500] lockdep_rcu_suspicious+0x140/0x1d0 [ 1089.353470][T30500] get_callchain_entry+0x2b7/0x3c0 [ 1089.358609][T30500] get_perf_callchain+0xd5/0x880 [ 1089.363581][T30500] ? __pfx_get_perf_callchain+0x10/0x10 [ 1089.369165][T30500] ? __lock_acquire+0x747/0x2de0 [ 1089.374159][T30500] __bpf_get_stack+0x38e/0xac0 [ 1089.378991][T30500] ? __pfx___bpf_get_stack+0x10/0x10 [ 1089.384307][T30500] ? __lock_acquire+0x747/0x2de0 [ 1089.389279][T30500] ? lock_acquire+0x115/0x350 [ 1089.393985][T30500] ? bpf_prog_e8e6327ccf46c9a7+0x43/0x4b [ 1089.399643][T30500] bpf_get_stack_raw_tp+0x1a4/0x210 [ 1089.404889][T30500] bpf_prog_e8e6327ccf46c9a7+0x43/0x4b [ 1089.410386][T30500] bpf_prog_run_pin_on_cpu+0x14f/0x4c0 [ 1089.415892][T30500] bpf_prog_test_run_syscall+0x324/0x4c0 [ 1089.421579][T30500] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1089.427766][T30500] ? __fget_files+0x2a/0x420 [ 1089.432399][T30500] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 1089.438597][T30500] bpf_prog_test_run+0x2c5/0x340 [ 1089.443561][T30500] __sys_bpf+0xb1e/0xe00 [ 1089.447842][T30500] ? __pfx___sys_bpf+0x10/0x10 [ 1089.452645][T30500] ? do_futex+0x3e7/0x4e0 [ 1089.457014][T30500] ? rcu_is_watching+0x16/0xb0 [ 1089.461826][T30500] __x64_sys_bpf+0xba/0xd0 [ 1089.466269][T30500] do_syscall_64+0x166/0x520 [ 1089.470872][T30500] ? trace_irq_disable+0x3b/0x140 [ 1089.475947][T30500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.482024][T30500] ? clear_bhb_loop+0x70/0xc0 [ 1089.486714][T30500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.492639][T30500] RIP: 0033:0x7fbd0d39f559 [ 1089.497087][T30500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.516701][T30500] RSP: 002b:00007fbd0e21b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1089.525157][T30500] RAX: ffffffffffffffda RBX: 00007fbd0d625fa0 RCX: 00007fbd0d39f559 [ 1089.533140][T30500] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 1089.541124][T30500] RBP: 00007fbd0d436b50 R08: 0000000000000000 R09: 0000000000000000 [ 1089.549117][T30500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.557110][T30500] R13: 00007fbd0d626038 R14: 00007fbd0d625fa0 R15: 00007ffece591348 [ 1089.565105][T30500] [ 1092.420336][ T5638] Bluetooth: hci4: command 0x0406 tx timeout