last executing test programs: 4.41431874s ago: executing program 4 (id=1292): close(0xffffffffffffffff) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a6c000000060a010400000000000000000a0000050900020073797a3200000000400004802c0001800b0001006e756d67656e00001c000280080002400000000908000140240000120800034000000000100001800b00010064796e73657400000900010073797a31"], 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000002000000000000000000000000000000005ca415410ac3e50d49562572057dec8488f6e7412ba600ebd6bc8aa191757a42fa16cde6bb39ce809529d786824282995291a4142e5cf3a96a045f5a09465b85ed43aa9eb40d7200"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010028bd7000fddbdf250900020073797a321000000e0800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) 3.620983488s ago: executing program 4 (id=1297): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40050) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)}, 0x10002) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x10044885) socketpair(0x18, 0x800, 0x2, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) 3.258733108s ago: executing program 4 (id=1303): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x104101, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8930, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00h \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) fstat(r1, &(0x7f0000000d40)) fstat(r2, &(0x7f0000000dc0)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000b00), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r6}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x1a, &(0x7f00000005c0)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @jmp={0x5, 0x0, 0x1, 0xb, 0x8, 0x1, 0x8}, @generic={0x5, 0x0, 0x5, 0x5, 0x4}, @alu={0x4, 0x0, 0x7, 0x5, 0x0, 0x4}, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000100)='GPL\x00', 0x6, 0xc7, &(0x7f0000000840)=""/199, 0x41100, 0x10, '\x00', r8, @fallback=0x28, r9, 0x8, &(0x7f0000000700)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x6, 0x0, 0x9}, 0x10, 0xffffffffffffffff, r3, 0x2, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000000a00)=[{0x5, 0x3, 0x6, 0x9}, {0x4, 0x5, 0xb, 0x6}]}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x3a) close(r9) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96, 0x0, 0x3}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xd7, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 2.895205053s ago: executing program 0 (id=1308): close(0xffffffffffffffff) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a6c000000060a010400000000000000000a0000050900020073797a3200000000400004802c0001800b0001006e756d67656e00001c000280080002400000000908000140240000120800034000000000100001800b00010064796e73657400000900010073797a31"], 0x94}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000002000000000000000000000000000000005ca415410ac3e50d49562572057dec8488f6e7412ba600ebd6bc8aa191757a42fa16cde6bb39ce809529d786824282995291a4142e5cf3a96a045f5a09465b85ed43aa9eb40d720000"], 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010028bd7000fddbdf250900020073797a321000000e0800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) 2.671482563s ago: executing program 1 (id=1309): socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0x10) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xce4c) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x80000003, 0x2df6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x38, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@typed={0x4, 0xd9}, @nested={0x4, 0xc7}, @nested={0x4, 0x77}, @nested={0x4, 0xc7}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x4, 0x0, 0x1, [@generic]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8024, 0x2, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f", 0x7}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9", 0x15}], 0x2}, 0x4000000) recvmsg(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x8141) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) 2.358502013s ago: executing program 0 (id=1310): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0x1fff}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0xfffffffd, 0x1}, 0x0, 0x100000001, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x4800c, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1e108, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 2.176945063s ago: executing program 3 (id=1311): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x2216fc8c, 0x75, &(0x7f0000000300)=""/117, 0x41000, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0xc000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.981447885s ago: executing program 2 (id=1312): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in=@private=0xa010100, @in=@broadcast, 0x0, 0x5, 0x3, 0xffff, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xfffeffffffffffff}, {0xffffffffffffffff, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @alu={0x7, 0x1, 0x1, 0x6, 0x8, 0x4, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2216fc8c, 0x75, &(0x7f0000000300)=""/117, 0x41000, 0x21, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x2, 0x2, 0xcf2, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{0x1, 0x2, 0x7, 0x2}, {0x4, 0x3, 0xb, 0xb}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.889155358s ago: executing program 3 (id=1313): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40050) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)}, 0x10002) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x10044885) socketpair(0x18, 0x800, 0x2, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) 1.800881731s ago: executing program 4 (id=1314): socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x33, &(0x7f0000000500), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003000010000000000000000000500000a0c000000030a0fdb00000000000000000a00000a8547e8494cae0fcf000000000c0002400000000000007424ef6520e00002140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x5}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20408000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, 0x1, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb79}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0xb4}}, 0x10000010) 1.793198071s ago: executing program 0 (id=1315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 1.650871157s ago: executing program 2 (id=1316): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1cc3ff001000010700020100000000000a0000000600010016"], 0x1c}}, 0x0) 1.588809407s ago: executing program 1 (id=1317): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015000106"], 0xb8}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) openat$cgroup_devices(r1, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000013fc0)={0x0, 0x0, &(0x7f0000013f80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2400000007060102000000000000000005000005050001000700000008000640"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x1c0c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x16cc, 0x3, 0x0, 0x1, [{0x570, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xdb, 0x6, 0x1, 0x0, "9860082742c46a0be5bd2d24ababd3411fbe47944ea6bf95985bb83d406abd7a1e41cb172e226add3e4d72d9ff4a64f706a9ea3caecab07e8bccd1715911ec0dcab370891dda4916163b2ba110f6bca9fd09cb38941605e0e41a65642e9beb2a616ba4a05c4be61cda6cd2e966c5eda3f712311fe9e98164578a6aa570b9d2560733c43930bb68f961efd4c35ea1de4454ced8ed12ed0032edf142021a2c624a5fa6b6dc73848f2ac4b5aa72f70b9c7cd0f629a5846bd08b23941669bfd74c59821acdb37659bc50342b1c532a95b15bdddeeff1dcd007"}, @NFTA_SET_ELEM_DATA={0x224, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x23, 0x1, "dd20ebe24a727ea03da86447830e0b60a3213128bb053c61d835657ef0ddbb"}, @NFTA_DATA_VALUE={0x1f, 0x1, "6bde8e2a87c69613e92fcc91f3649c7e5add3b147c92db7a723fb0"}, @NFTA_DATA_VALUE={0xbc, 0x1, "ebe75e16bc50d4725c0cc0e0686c7b20c0db79cfa0a6cad64199fd1fda003653e7426a8ba3ad328b092f92a8ce34a9e3b64935bfdb78c63ed58d3ce7a63538d0e754dbb472b878b6860645d952a3f88fce2ce879fde5330f28c5244b322903f90d5283102736c49f40e145f88fd55fdf79f67fb859463718b208c6bb4d266d560eb2bc219b79c4fc955f7e8812a4980689d536e6b8c2c852b18e09a73a71c688a0ed75751b85b8b9cc02120177deca67ad024fb28bd84f97"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x8a, 0x1, "811fff7e877798a897eb5cb20ec3e0eb4c398d1eac54ac8caf9c767d5b86ad4738effde3acdff43db040e36217e1a92190960c1b0a2e7904fc63417fb699e81a6cd3237fd5f1b4f2dfe684f891a43f04097b6be19556d2dd1bb4a13003b40e9d2f2b78ce96d75206f88f8a11ef293b3518f63c04747ec12e44b09a174f97082319aab1e8b2bb"}]}, @NFTA_SET_ELEM_KEY={0x184, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x47, 0x1, "209fbd54896b06ffb08ce1d3724a4fe3fd59c5107c7773c4a89aa5230a67f02d255845003f19ce228cd95f5bf9f9981a245b0b02bf046ceb6df54dd08301ea0ca44db2"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x47, 0x1, "8ca038e9f4ccce27047542b1367f7cc5de59af68856934bad9728e9addb5513ad8b674b12943743eda0f9cc9c5e82c854cb7b2a73a8056cf575b7ee54911fbfda4152d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x53, 0x1, "f2c99151699cb2d738d0032401b869a2d11bfbe12fc89694afb352742e798f61c1a118bb75e555ffd72ef3f8fbde0071c0ecfb1fa96479863f7bdef579cb6059f0904ac70dbe768ca7f9699d5fd383"}, @NFTA_DATA_VALUE={0x12, 0x1, "b9859f8d0e2bab062e9f560f0235"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8001}, @NFTA_SET_ELEM_KEY_END={0xd0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x9e, 0x1, "0c2efd4a8530c2fbe3f60a5c1d6b7fb5abfe3df3230a497fd4003cddf31c3f838f708745b5c71d572ae569841e303c861972988b4b673f880ef2a11e3a58d8ab598e737168bec894cefc31f0ad6ad46bc722de28d98fdf3458536a55b0c610f01e7949fa6da7818f3ef2ff2cff987635a4681f5d35cb4fe9d4e4941490b09b5b47eacd39bdc849cb88ea6e2001ba64f279360606e7fd9afd94ff"}, @NFTA_DATA_VALUE={0x8, 0x1, "d49aa97d"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x618, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x2c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "56458ee267ad723a948769b39b278147b7d3ec0a0cbcfaf46e5194b2625cb4b149621ce2095a95ae67e889c2ee141702bc941b9fd0f70f7e0b71fb709ccd46dfd58646a428561c7bd2925885d123f51da9f169b7d184db0f55ffdac10d8d5e860ba31f554d0bf546e68bfe6be0be66b9761e88dee70f09633226defaa9a36a2aa811c9ab41f4912c485bd476215867e607790b3b646dd4a66dc94f82e75a3f7b6d92fe0e36f15172b501df618d"}, @NFTA_DATA_VALUE={0x77, 0x1, "4384fcde49624ca1d49d253e70b7438f0e3046047eb1a14327ff8fa0dc5d53e7a0436c4d958b6e521d12b2144c522480234221c0e949a5f01ffa23ce3336ca9e07c78c76faab6c02ea3f054e77d1fab6003e4f6514c2e2c276486c21533bcab6f7a12f424036c677171d6f92496995fbc599ec"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x92, 0x1, "759cdeb551919fca7df1c7fb0d4850d257107d54808a2df010569a88a7ab79cafc9232649044940631552bbd922673a2a7d89fff0e464cbeb3912694667aa2bb36c4b5acfc47c870223c562d0182db27420907b492ccb989527144e9b923456cfe168b190425023e9db0493ae4d11c23935a9eff9c27be00117a9f5b2cd21ea5d58db5c4a13a6280efb23b9f5d7d"}, @NFTA_DATA_VALUE={0x8, 0x1, "b2212845"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ELEM_USERDATA={0xaf, 0x6, 0x1, 0x0, "53c4a536366caa76bec379d569cdd306ae355a6574b68a8f1c39902c7c94cca95a50ec516d75dd51b8c4abe61eb2022e71f021889e901a011be480d3588527b1dfabb62ccff34d80c17ccd423fba040daf61f0c1a2180faf0fb5db953d972b92123cdc8468783fa5b6cc3986e39ade3f5f50638278c51c5873cfe5dde12dcf019546cf248aea61678a23db47947464aa4eb1fdd87ac11bd3aa45bf3546e9b38598011d50b418dd062f2998"}, @NFTA_SET_ELEM_EXPRESSIONS={0x288, 0xb, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xffffd57d}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x5}]}}}, {0x88, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x70, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}, {0xfc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xec, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x80, 0x3, "a4e711bd130ae5633d0454f0fe02a9c968e69183fce2e06ff3c721b67be6dd4398f0d3a4ef723614783405fe2043b2030903e654810199889ce59a41233aac10d6e42a977df9768b3fe52ad02cbebf6285cd1b2065dd6674567e6641fa34dfd3a145b7a88321f19468275dbbe9f508cab06fdb2c807a4e832ab90ec5"}, @NFTA_MATCH_NAME={0x7, 0x1, 'hl\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0x11, 0x3, "1efb34cd378bdcee9f38b09d68"}, @NFTA_MATCH_NAME={0xb, 0x1, 'length\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xd, 0x1, 'addrtype\x00'}, @NFTA_MATCH_NAME={0x9, 0x1, 'ipvs\x00'}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x278, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}]}}}]}, @NFTA_SET_ELEM_DATA={0xb0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x1a, 0x1, "76d1343211fcec1148dc2dee1ccc55e2e268d0a56b79"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4d, 0x1, "3c93afe51c67376f4ab630646aade06d68abe7db962a37dd4007d29ba458bcb131a0d3fe2be7dbe1601790d203c28aa36e58e2bcfe41f674b8ccf7fea14516666ea92870584c5f4133"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, {0x58, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_OSF_TTL={0x5, 0x2, 0x7}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_TTL={0x5}]}}}, {0x50, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc7}]}}}, {0x2c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x36}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x21}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}]}]}, {0x8ac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x60, 0x7, 0x0, 0x1, @osf={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x4}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_OSF_TTL={0x5}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_KEY_END={0x2f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa9, 0x1, "c32709cb4ecbf114dd14a0c32c38e647f919153bdb2cbc0a1cd045c3c34b6466ab681b1b562351a845e82a0740bf000b12a0d0d355a804a8c1f82f0e251f929839ffa301aa997a91b800ecf8f5133d6d7d43b9214a42205d67eeb83075516764abd50fe277534fb2e9b39785c82fd43560f80d4f970d6b18a308835e35f7c1aeb8fe545f05cdd5a616fc5d31ffa2d7073a448ae380568f8e5631f40798cafe918f1e4892a3"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb2, 0x1, "507a1af87a529f069f78560cea4c43792ce7c9e2558266df28c390f3955b17db810e2a0b2a328504832fcd6e38f65cb4788ba53bcf2ff4530a2fdcda660f87d95abc466212c9c905054c464d7a55b77d521a813a6e25683942e8c44f182dfe592e64d5911e954701256fae1564bf22e59d4d53fdb775423b8b1c3057a7c5034688206eacaf2ab0062312982bf2631fe1f5a070b21b76b9830bcfa3de0a5752e14ca858f3ce1d7a5062eafb951cf8"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "26fee47fc308fc790a6c625f5ac8ecf851bc9a1d3552b14eee906661e4c2286677239416e548be54d88cc9ee34683f67dacb160568c3037751c0da3f21b4dc78c97f7073ca6f76ffd65a7f3b3719f118f804a1c1c3cbcfaff0aa282636f5ad00b5c74d8976817d"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x1a}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf9}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_USERDATA={0x16, 0x6, 0x1, 0x0, "043775300aaa2083f09cb4c17c224d3c6982"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY={0x1bc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x34, 0x1, "7f152a3fd0af4320ec842cff024ac5c6b72b3da272bc8f96c2be670aee279def00beb6d41d02d759fbaa705ee5f3c1be"}, @NFTA_DATA_VALUE={0x85, 0x1, "376b983fc8bffa50d1f1cda36467e83f43ffa4130e15da01cfc07840929571d5a2efab35f0bc6e7e3f798949a41054e5bfd823b98d787a6b013252d9d8300a2847720f913317aed190a7f4188eee56272b9374af834bacf29775d03dee2612487ebc8bc75db7ed339942b1a51cd87e73355bd708784351e818b273fdef2b13adba"}]}, @NFTA_SET_ELEM_KEY_END={0x224, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x30, 0x1, "37e1884fe74daecefce90dc3f3ef1d16fbf48e3f51493ee0574d7e2078cf302ba6f8dfe0fa86250cbf80b4f4"}, @NFTA_DATA_VALUE={0x3e, 0x1, "315d13f0c0dbe000f9815a89b64d8326835e6357aaf3692738628f568ae883e7ff778e4d8b0e8b963da9ca4ba71bc4608945f99a96fd9b88b886"}, @NFTA_DATA_VALUE={0xe9, 0x1, "5c4f7780c6fa91b9f98377eea02eb6dd5a045b2dde0d7f589e2fce68157c42870903b495d148e52ba3723e1572b8a941ee3bbc7c4257230cc0a6f36f84346a2801f09981544607c9e1fd6d231405d522490a868a35d4d85de20947c6dfc17f23de14b58bcd8e964a60fb65f26a8a04f3aa0b6192a351164445335744842c5db89b5f397ba2810ee42bc1f7e6050cf91743596071afc3a6ae5d5a10469af4fb5601bd9585b836a7961e092c0ade5fa980694e500e3a936e2f1ed4d9cc306e8ce4db8969146e02fbc3d73f00eacf87bf62ad2a82aad213cde2394577acf581d06a4acd95e192"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_USERDATA={0xf7, 0x6, 0x1, 0x0, "f93842fba591653fb0431fb8e674739d08d686c6431ddc2903c6c344af3ec5dba252115e13da2f0b083d4769e4d3213195a31c693e6235c732c6d5bbba7fe4e6b890433d9c3d756f022b0d96e2e095260046c4fd6475cad8675458adc21201e74cc1bc50271bf0fc47165c1c0255d79c5508150c5e36811905055254ee65f57c84b219c74b3bcab84ad92e3cfee21841bbd6fbbb877d3d852fdf25eee2fae82a7482d8dc2a86b0cf1442ea67acc5f669ced09b66b4d96d3fe1212935c2030630649d0a08c87bf045b603bec88e2db121b7fcd1776b84cd5f86d309e5f59a6f6c20a32fc950a7cd02319d146a53ee6bb51d726b"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8001}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4f8, 0x3, 0x0, 0x1, [{0x4f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x340, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe6, 0x1, "db5480ed02045e28e3517e2d5109353b815388b67efc48cc86bcc8e70adbd6974a5b63b7168b724d470a5810e4401de6464cacf0f173e7beb2d30f67e2fc1b3f2fae18dbd0d4d92c6359b9321a44af8fa3cfce5a3a24f3ce0391371a1bf678a0a6cf956eecf12994f618c289c5e0216e6f414d5a1267100fe7089a89c03e5e262beff118579ad24954076e7e750f77a5768c0dd57eeb360127bb8ac49ab0afa594869140b4e0120610e561f817687dd632199974005522842065d7a25a108ebd7d9d7034915ca747a24f5affae532d485732027c1d1092accb326b17b8e4a3830748"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "b8d005e26a928b87c22ccb710ea4d6f77fe1d5f52d70d991c0c1ee8c0829216ac9d58365174fb7d27a5625c2d9fb6519849d4e6cdf88295689e7d0c5a36f3b1c5fb578d1a12b9e34e21d3246804d44e1eecf7195321d3492512b09653468c54c1ca2b49fd4045f08c939b0ddd714b251f939f9f18d415ce409001a8aa3523ea2de4be7a0241c0ec657092e29280fc27602f9c097355425a03b842d"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xae, 0x1, "ae7857f7ade50a591754ea64ffedd442337cbafaad6aa6c0d1e1866bbb1a286adf3672c12c9fa1a281fd14194fd280da2140043d9f797ffc6ed1ee480f976c097f381139a61ffcca310ca937d585b0d0b0f98f436836d463a92aeafd2f34c64a7c833a76d285ea015a20f69283c767731f54c2ee8ba2df32c63ce2cefa8f190d0073d94e009c780949c7193f67777772fcbd65fd948eedd75a35a2eb81da19e197482d16cca88c83561d"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x8c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x72, 0x1, "ccf221b0c69c5e31da0285225f593762b924b4720e46ff9d2ee1099d530b6eb282153525da1a2e94fbaf973bd9f00a3e2bd543f6dc95fc24b7b45a74362decf45ddf6e8d354b87f1b994def99c21407efaa53a2042cf9891ecc965d2ee7856b37d70892a646d0d2ee7e69a78830d"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x104, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x79, 0x1, "741f34aca21eafa505d5c81edf4c660ccbcac81b65a1f77f33785588e4afd0cca8881a0f0a2e567e07ca9cea973440f7e415252a48399669978b24fd49679201164efc08dbdf758dfb774369428b094209a70aa419c56923b9ab42143adff20950eca369280a812d010426a17c951bf56514342bba"}, @NFTA_DATA_VALUE={0x81, 0x1, "6e411d467f363fe1e11454b3613ff5134be6652db5365efd2fdbd001904f13a6227edc2465167d11d2d88217794b7bc374fdfd65a2cdcd124d12e3a28e5207c4a1812df768f10368fe2624bc2eb7e27b12d9cd5d677b0e8a021aa9ff13c8cc542ec4ea9c023a7b72a33efef48b16c9d1b21a75263086ed79e202b29bff"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1c34}, 0x1, 0x0, 0x0, 0x40090}, 0x8000) 1.588041703s ago: executing program 0 (id=1318): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe9842, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c1000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x46000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x832d}, 0x204, 0x2, 0xfffffffe, 0x0, 0x3c9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x0, 0x7, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000003, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x138f67536d80380e, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0xa, 0x3, 0x87) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0xe, 0x9}, 0x118d2a, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dffff000000000000a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.573478275s ago: executing program 2 (id=1319): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x3, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000080000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000001d8500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x4, 0x8, &(0x7f00000002c0)="b80a0005", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.361339629s ago: executing program 3 (id=1320): r0 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x328}}, 0x84) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x20) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x10) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xce4c) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xfd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x0, 0x4, 0x8, 0x3fe, 0x80000003, 0x2df6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x282, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)={0x38, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@typed={0x4, 0xd9}, @nested={0x4, 0xc7}, @nested={0x4, 0x77}, @nested={0x4, 0xc7}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}, @nested={0x4, 0x4, 0x0, 0x1, [@generic]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0xa, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8024, 0x2, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f", 0x7}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9", 0x15}], 0x2}, 0x4000000) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) recvmsg(r9, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x8141) sendmsg$key(r7, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100090a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x200c405a) 1.223729222s ago: executing program 2 (id=1321): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xd1d4}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x200, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b0000", 0x17}], 0x1, 0x0, 0x0, 0xc9e}, 0x404c840) 1.200794319s ago: executing program 4 (id=1322): bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x14eeb880ebc62204}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4050000000000006114195fc4a281ddfd10a100000000001f0100"/36], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000000206010800000000000000000000fffd140007800800114000000008050015000a0900000500010006000000050005000a00000005000400000000000900020073797a300000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x80) 1.023926147s ago: executing program 2 (id=1323): socketpair(0xa, 0x80000, 0x4a8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x3000c085) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8001, 0x0, 0xc265, 0xe3df, 0x9, 0x22, 0x800, 0x9, 0x8, 0x10, 0x40, 0x3ff, 0xfff, 0x6, 0x4, 0x7f, 0x2, 0x2135, 0xffff8001, 0x0, 0x3, 0x3, 0x8, 0xb, 0x9, 0x9fbd, 0x0, 0x1, 0x40, 0x8, 0xe, 0x7, 0x200, 0x3, 0x8, 0x7a, 0x5, 0x3, 0xd6bc, 0x3, 0x831a, 0x2, 0x9, 0x2, 0x30, 0x5, 0x87ff, 0xfff, 0x6, 0xa7, 0x7, 0x3, 0xff, 0x1400, 0x7, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0xfffff896, 0x2, 0x8, 0x79, 0x0, 0x80, 0x3, 0x57, 0x8, 0x7fff, 0xf, 0x4, 0x8, 0x200a0, 0xfffffffd, 0x85, 0x3, 0x1ff, 0x3, 0x85bd, 0x4, 0x865, 0x6, 0xa, 0xfffffff8, 0x2, 0xfffffffa, 0xb7f, 0x8b, 0x80000000, 0x80000000, 0x8, 0x100, 0x2, 0x400, 0x2, 0x3, 0x3, 0x400, 0x5, 0x1, 0x101, 0xd4e, 0x65ad, 0xfffffffc, 0x5, 0x7, 0x32, 0x5, 0xad8, 0x3, 0x4, 0x8, 0x4, 0x1, 0x6, 0x0, 0x5, 0x0, 0x6, 0xa0, 0x8, 0x6, 0x100, 0x100, 0x200, 0x0, 0x0, 0xffff, 0x3, 0x1, 0x2, 0x4, 0x29, 0x2, 0x6, 0x200, 0x3, 0x47, 0x0, 0xa32a, 0xfffffff8, 0x8, 0x7f, 0x87ca, 0x1, 0x80000001, 0x4, 0x8, 0x401, 0xffff0000, 0xed1, 0x9, 0xfffffff8, 0xfffffffb, 0xfffffffb, 0x3, 0x2, 0x0, 0x2, 0x1, 0xffffff89, 0xfff, 0x0, 0x8, 0x7, 0x5, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x44, 0x5, 0x0, 0x8000, 0x2, 0x0, 0x8, 0x3ff, 0x5, 0x6, 0xb, 0xca43, 0x3, 0x3, 0x6, 0x9, 0x9, 0x3, 0x7, 0x8001, 0xf0000000, 0x73f3, 0x0, 0x4, 0x7, 0x7f, 0x5, 0x4, 0xd, 0xffffffff, 0x8, 0x7f, 0x9, 0x7, 0x8, 0x7, 0xffff, 0x1d, 0xc5, 0x9, 0x0, 0x1, 0x5, 0x9, 0x3, 0x1, 0x5, 0x2, 0x2, 0x9, 0x7, 0x40, 0x3, 0x400, 0x8, 0x2, 0xc, 0x6, 0x2, 0x8001, 0x1ff, 0x2706, 0x2, 0x8001, 0x1, 0x2, 0x400, 0x7e, 0xc806, 0xb, 0x1, 0x1, 0x7, 0x3, 0x5, 0x8, 0x2, 0x2, 0x3, 0x41, 0x3, 0x200, 0xc8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x3, 0x7, 0x40, {0xb, 0x0, 0x3, 0x7, 0x6, 0x8}, {0x40, 0x2, 0x3, 0x435b, 0x5a44}, 0x8c79, 0x5, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x490}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x20000) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x710, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x7ff}, 0x5, 0x5, 0x8d, 0x7, 0x6, 'syz0\x00', "79dcb7d3dca9309c76fa698ec69859fbceadfa98a4f2aeb8503754a9b3f9f7fb", "16a96cbc9b4c13e05cc88f3490febac13569d5b09c012cc507c2f973e6c687ba", [{0x6, 0x8, {0x2, 0x6}}, {0x72, 0x4, {0x1}}, {0xc, 0x9, {0x2, 0xfa0}}, {0x400, 0x7, {0x2, 0x9}}, {0x2, 0x73, {0x3, 0x516}}, {0x3, 0x6, {0x2, 0xfffffffc}}, {0xbee2, 0x4, {0x3, 0x9}}, {0x0, 0xff, {0x1, 0xd39}}, {0x0, 0x9, {0x0, 0x8001}}, {0x4, 0xffff, {0x0, 0x8f11}}, {0x400, 0x0, {0x3, 0x14a}}, {0x1ff, 0x1, {0x3, 0x4}}, {0x0, 0x7, {0x2, 0x6}}, {0x5, 0x625, {0x3, 0xfffffffd}}, {0x1928, 0x6, {0x2, 0x2}}, {0x0, 0x3, {0x3, 0x40}}, {0x4, 0x2, {0x3, 0xc}}, {0x8, 0x200, {0x2, 0xd64}}, {0x0, 0x2, {0x1, 0x1}}, {0x7, 0x800, {0x2, 0x9}}, {0xcdf, 0x3, {0x2, 0x8}}, {0x4, 0x6, {0x0, 0x3}}, {0x3, 0x1, {0x2, 0x7}}, {0x81, 0x7, {0x1, 0x2}}, {0x9, 0x4, {0x3, 0x1}}, {0x7, 0x8, {0x1, 0xffffff7f}}, {0x8, 0x4, {0x2, 0x1397fdfb}}, {0x4, 0x1, {0x1, 0x400}}, {0x1000, 0x6, {0x3, 0x1}}, {0xfff, 0x1, {0x2, 0x80000001}}, {0x5c3, 0xed, {0x1, 0x6}}, {0x8, 0x3ff, {0x2, 0x4}}, {0x9, 0x2558, {0x1, 0x6}}, {0x6, 0x5, {0x1, 0x40}}, {0x7, 0x8, {0x3, 0x1}}, {0x8, 0x86, {0x2, 0x5}}, {0x9, 0x7, {0x3, 0xffff}}, {0x3, 0x0, {0x3, 0x401}}, {0xfb, 0x1, {0x1, 0x4}}, {0xc1, 0x6, {0x1, 0xf167}}]}}}, {{0x254, 0x1, {{0x2, 0x8000}, 0x6, 0x7, 0xbab, 0x3, 0x20, 'syz0\x00', "9426ce0954a43a7b8a2656cae489798bdc2ddb219857dcc8d6e097515159da0b", "50d7512372de658fd736cee6cd08a06ebbc805d74c722f9becc03125623361da", [{0x7, 0x101, {0x0, 0x10}}, {0xee9d, 0x7, {0x1, 0x8}}, {0x1, 0xfff7, {0x0, 0x401}}, {0xf, 0x1000, {0x0, 0xfffffffa}}, {0x3, 0xf800, {0x2, 0x8}}, {0xbb17, 0x1000, {0x3, 0x6}}, {0x4, 0xff, {0x0, 0x3eff}}, {0x5, 0x800, {0x2, 0xf}}, {0x89a, 0x4, {0x3, 0x6}}, {0xfffc, 0x73, {0x1, 0x80}}, {0x6, 0x0, {0xb0a61793e9f961c3, 0xb}}, {0xd3, 0x2, {0x2, 0x1}}, {0x6, 0xfff7, {0x3, 0x7fffffff}}, {0xb174, 0x4, {0x2, 0x654dc637}}, {0x1, 0x4, {0x3, 0xff}}, {0x3, 0x7fff, {0x1, 0x6}}, {0xfff4, 0x2, {0x1, 0x1}}, {0x6, 0x6}, {0x4, 0xc9, {0x0, 0x6}}, {0x9, 0x4, {0x3}}, {0x401, 0x406, {0x3, 0x2}}, {0x7, 0x6, {0x1, 0x7f}}, {0x6, 0x0, {0x2, 0x401}}, {0x2, 0x2, {0x0, 0x2}}, {0x0, 0x6, {0x2, 0x5}}, {0xfff8, 0x7f, {0x3, 0x9}}, {0x3ff, 0x7, {0x0, 0x1}}, {0xd2, 0x6d50, {0x1}}, {0x2, 0x100, {0x3, 0x5}}, {0x0, 0x6, {0x1, 0xfffffffd}}, {0x4, 0xfffc, {0x1, 0x33a9a7a6}}, {0x101, 0x4a, {0x1, 0x100}}, {0xc, 0x70dd, {0x1, 0x400}}, {0x4, 0x6, {0x3, 0x1}}, {0x5e, 0xfff8, {0x1, 0xa}}, {0x7, 0x9, {0x1, 0xfffffffe}}, {0x9, 0x2, {0x0, 0x9}}, {0x8, 0x2, {0x2, 0xae54}}, {0x1000, 0x5, {0x2, 0x1ff}}, {0xf, 0x17df, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x7f, 0x63, 0x8, 0x1ff, 0x1b, 'syz0\x00', "6f310209c3ff2c06699b515f101f13d41e52748b774278b2a738ebff95701250", "bb283c91e1e19494790a9a0ba376c4805c02c75c8f1d8d83198466f0cc394798", [{0x0, 0x8001, {0x1, 0x11b15a21}}, {0x0, 0x4, {0x3, 0xd35}}, {0x4, 0x9, {0x0, 0x7}}, {0xff, 0x7ad8, {0x0, 0x80000000}}, {0xe, 0x2, {0x1, 0x100}}, {0x7, 0x2, {0x2, 0x9}}, {0x722, 0x2, {0x1, 0x7}}, {0x56e, 0x4, {0x3, 0x7}}, {0x7, 0x8, {0x1}}, {0x2, 0x7, {0x1, 0xf}}, {0x7, 0x3, {0x1, 0x9c8}}, {0x40, 0x4, {0x1, 0x80000001}}, {0x4, 0x7fff, {0x1, 0x8}}, {0x3, 0x401, {0x1, 0xcf}}, {0x5, 0x4, {0x2, 0x4}}, {0x5, 0x6, {0x1, 0x1}}, {0x7, 0x2, {0x3, 0x9}}, {0xfff7, 0xd, {0x3, 0x8}}, {0x0, 0x10}, {0x800, 0x5, {0x0, 0x9}}, {0x7ff, 0x3, {0x2, 0x80000001}}, {0x7, 0xc139, {0x2, 0x962}}, {0x6, 0x21, {0x0, 0x8}}, {0x1, 0x7, {0x0, 0x1000}}, {0x7, 0x4, {0x0, 0xe0b}}, {0x80, 0x8001, {0x3, 0xc}}, {0xf, 0x0, {0x2, 0x8}}, {0x190a, 0x4, {0x0, 0x7}}, {0x1, 0x7, {0x2, 0x7}}, {0x9, 0xfffa, {0x3, 0x5}}, {0xfff7, 0x3807, {0x0, 0x7}}, {0x342, 0x4, {0x3, 0x7ff}}, {0xb49d, 0x2, {0x0, 0xded0}}, {0x9, 0x8, {0x1, 0xdcbc}}, {0xdda, 0x9, {0xadcc8522b5db9a03, 0x1}}, {0x9, 0x4, {0x2, 0x6}}, {0x1000, 0x9, {0x0, 0x9}}, {0x7, 0xc6, {0x0, 0x9}}, {0x2, 0x3, {0x1, 0xe9}}, {0x4, 0xc, {0x0, 0x1}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x10}, 0x4000800) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff09, 0x0) close(r0) 610.557958ms ago: executing program 1 (id=1324): socketpair(0x2, 0x2, 0x73, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x33, &(0x7f0000000500), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000003000010000000000000000000500000a0c000000030a0fdb00000000000000000a00000a8547e8494cae0fcf000000000c0002400000000000007424ef6520e00002140000001100010000000000000000000100000a"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r2 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x5}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20408000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, 0x1, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFCTH_TUPLE={0x5c, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x20, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xb79}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}]}, 0xb4}}, 0x10000010) 549.670028ms ago: executing program 0 (id=1325): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000080)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], 0x0, 0xfff, 0xd2, &(0x7f0000000200)=""/210, 0x41000, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x0, 0xc, 0xf9, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@map=0x1, 0xf, 0x0, 0x9, &(0x7f0000000540)=[0x0], 0x1, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x93, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b00)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="1e00000020000000", @ANYRES32, @ANYBLOB="7f300d8f46e1194a06e5bf29b3f73a8e2dac6a6772a80c699ee392bea706787b10a453f6e254676306885b567861ca1c0efe72f0d32b8012386385951cd0c0216ec3904bcdb519147bf1b70310e9c82b9e54b6cdad579770960e9289719f741478077ecbff4bf48b9d5be9b66583ff65d9ddac087ed9d60698c2505792dc066cbc651ff91d69ea5f5a6e4494ac92ef0458b57bbcd5def807a0c95f407fa92032856a0dfb", @ANYRES32=r5, @ANYRES64=r4], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@map=r0, r1, 0x3d, 0x0, 0x0, @void, @value, @void, @void, r4}, 0x20) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000600000004000000010000060400000001000000080000000061a93d5f"], 0x0, 0x32, 0x0, 0x8}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c02000001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 437.237418ms ago: executing program 2 (id=1326): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x11, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_config_ext={0x8, 0x7ef}, 0x100000, 0xca, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x60000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000400)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x5, 0xb, &(0x7f0000000600)=@framed={{0x18, 0x8}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007600"], 0xfe33) close(r1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='gpio_direction\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1da}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000900020073797a320000000005000400000000001400078005001500200000000800114000000002050005000a000000050001000600000010000300686173683a69702c6d6163"], 0x5c}}, 0x84000) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3e050b"], 0x9a) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfaaf, 0x2}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000000a14000426bd7000fedbdf250800150004000000080001008000000008000100026fd98ed130e8798808fb00"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x20, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r11], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1da}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000003e0007010100400002000000037c00000400fb28d8cff100", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) 377.886945ms ago: executing program 3 (id=1327): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@acquire={0x128, 0x17, 0x3, 0x70bd2c, 0x25dfdbfe, {{@in6=@private2, 0x4d2, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, 0x4e20, 0x100, 0x4e20, 0x3c62, 0xa, 0xa0}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@local, 0x4e24, 0x4, 0x4e23, 0x5, 0x2, 0x20, 0x20, 0x3c}, {0x1, 0x0, 0xe1d5b02, 0x2, 0x2, 0x4, 0xe, 0x8000000000000000}, {0x800000000000300, 0x37, 0x7270ad6e, 0x175}, 0xfffffff8, 0x6e6bb8, 0x0, 0x1, 0x3}, 0x8, 0x2000, 0x2, 0x70bd25}}, 0x128}}, 0x0) 175.608513ms ago: executing program 1 (id=1328): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) 106.503512ms ago: executing program 3 (id=1329): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f00000001c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20000000) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1b, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffc67, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd81, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[], 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a80)=ANY=[@ANYBLOB="38010000100001000000000000000000fc0000000000000000000000000000016401010000000000000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bb00000000000000004000000000000000000000000000000000000000000000000000000000000000f60100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000063500000a0001004000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/240], 0x138}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)=ANY=[], 0x20) socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1b, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x800, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r4, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000009000000050000000000000700000000001e2e615f61"], 0x0, 0x2d, 0x0, 0x1}, 0x28) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b117600000000008510000002000000850000000500000095003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) 15.499511ms ago: executing program 1 (id=1330): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40050) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)}, 0x10002) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b32, &(0x7f0000000000)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400d0}, 0x10044885) socketpair(0x18, 0x800, 0x2, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) 0s ago: executing program 4 (id=1331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080600000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xe00, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): ook 44221 ns [ 111.536814][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.553619][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.601960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.609862][ T5869] Bluetooth: hci1: command tx timeout [ 111.626272][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.645074][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.684363][ T5869] Bluetooth: hci0: command tx timeout [ 111.686362][ T51] Bluetooth: hci2: command tx timeout [ 111.689840][ T5869] Bluetooth: hci3: command tx timeout [ 111.765430][ T5869] Bluetooth: hci4: command tx timeout [ 111.767695][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.799123][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.812118][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.099618][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.154598][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.367682][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.402267][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.584549][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.638039][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.808416][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.878073][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.911673][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.921165][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.725949][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 113.818044][ T6004] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 113.912993][ T6005] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2'. [ 113.994994][ T6004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.114256][ T6013] Zero length message leads to an empty skb [ 114.731494][ T6023] netlink: 148 bytes leftover after parsing attributes in process `syz.0.12'. [ 114.775566][ T6026] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13'. [ 114.829284][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 114.895695][ T6023] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 114.903683][ T6023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 115.011545][ T6023] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12'. [ 115.266364][ T6038] netlink: 'syz.4.18': attribute type 23 has an invalid length. [ 115.384188][ T6041] syz.4.18 uses obsolete (PF_INET,SOCK_PACKET) [ 115.396083][ T6040] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 115.605316][ T6046] netlink: 'syz.2.23': attribute type 23 has an invalid length. [ 115.877184][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22'. [ 115.940554][ T6050] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 115.967362][ T6050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.055976][ T6052] netlink: 168 bytes leftover after parsing attributes in process `syz.1.22'. [ 116.295212][ T6059] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.487521][ T6061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26'. [ 116.600281][ T6065] FAULT_INJECTION: forcing a failure. [ 116.600281][ T6065] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.674006][ T6065] CPU: 0 UID: 0 PID: 6065 Comm: syz.1.28 Not tainted syzkaller #0 PREEMPT(full) [ 116.674039][ T6065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 116.674060][ T6065] Call Trace: [ 116.674074][ T6065] [ 116.674092][ T6065] dump_stack_lvl+0x189/0x250 [ 116.674145][ T6065] ? __pfx____ratelimit+0x10/0x10 [ 116.674179][ T6065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.674203][ T6065] ? __pfx__printk+0x10/0x10 [ 116.674231][ T6065] ? __might_fault+0xb0/0x130 [ 116.674265][ T6065] should_fail_ex+0x414/0x560 [ 116.674296][ T6065] _copy_from_user+0x2d/0xb0 [ 116.674318][ T6065] ___sys_sendmsg+0x158/0x2a0 [ 116.674362][ T6065] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.674434][ T6065] ? __fget_files+0x2a/0x420 [ 116.674457][ T6065] ? __fget_files+0x3a0/0x420 [ 116.674491][ T6065] __x64_sys_sendmsg+0x19b/0x260 [ 116.674524][ T6065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.674565][ T6065] ? __pfx_ksys_write+0x10/0x10 [ 116.674586][ T6065] ? rcu_is_watching+0x15/0xb0 [ 116.674615][ T6065] ? do_syscall_64+0xbe/0x3b0 [ 116.674652][ T6065] do_syscall_64+0xfa/0x3b0 [ 116.674677][ T6065] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.674702][ T6065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.674723][ T6065] ? clear_bhb_loop+0x60/0xb0 [ 116.674748][ T6065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.674768][ T6065] RIP: 0033:0x7f3ba498eec9 [ 116.674795][ T6065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.674816][ T6065] RSP: 002b:00007f3ba577b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.674843][ T6065] RAX: ffffffffffffffda RBX: 00007f3ba4be5fa0 RCX: 00007f3ba498eec9 [ 116.674861][ T6065] RDX: 0000000024000810 RSI: 0000200000002800 RDI: 0000000000000003 [ 116.674879][ T6065] RBP: 00007f3ba577b090 R08: 0000000000000000 R09: 0000000000000000 [ 116.674892][ T6065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.674903][ T6065] R13: 00007f3ba4be6038 R14: 00007f3ba4be5fa0 R15: 00007ffdcbd48098 [ 116.674934][ T6065] [ 116.737124][ T30] audit: type=1107 audit(1758922899.972:2): pid=6066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 116.926125][ T6071] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.27'. [ 117.396168][ T6081] netlink: 'syz.4.33': attribute type 1 has an invalid length. [ 118.375696][ T6097] netlink: 'syz.4.38': attribute type 10 has an invalid length. [ 118.454375][ T6097] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 118.507852][ T6097] veth0_vlan: entered allmulticast mode [ 118.653337][ T6104] netlink: 'syz.2.39': attribute type 23 has an invalid length. [ 118.754962][ T6097] veth0_vlan: left promiscuous mode [ 118.870444][ T6097] veth0_vlan: entered promiscuous mode [ 118.962886][ T6097] team0: Device veth0_vlan failed to register rx_handler [ 119.568027][ T6119] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 120.100679][ T6127] __nla_validate_parse: 2 callbacks suppressed [ 120.100755][ T6127] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.48'. [ 120.175021][ T6131] netlink: 2740 bytes leftover after parsing attributes in process `syz.3.48'. [ 120.241490][ T6139] netlink: 'syz.1.52': attribute type 23 has an invalid length. [ 120.930999][ T6149] lo speed is unknown, defaulting to 1000 [ 120.946892][ T6149] lo speed is unknown, defaulting to 1000 [ 121.001488][ T6154] netlink: 'syz.0.57': attribute type 3 has an invalid length. [ 121.024644][ T6149] lo speed is unknown, defaulting to 1000 [ 121.058943][ T6149] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.235067][ T6149] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 121.569026][ T6149] lo speed is unknown, defaulting to 1000 [ 121.630329][ T6149] lo speed is unknown, defaulting to 1000 [ 121.685513][ T6149] lo speed is unknown, defaulting to 1000 [ 121.739271][ T6149] lo speed is unknown, defaulting to 1000 [ 121.785630][ T6149] lo speed is unknown, defaulting to 1000 [ 122.002406][ T6180] FAULT_INJECTION: forcing a failure. [ 122.002406][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 122.023466][ T6182] netlink: 'syz.0.68': attribute type 23 has an invalid length. [ 122.046948][ T6180] CPU: 0 UID: 0 PID: 6180 Comm: syz.4.69 Not tainted syzkaller #0 PREEMPT(full) [ 122.046981][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.046995][ T6180] Call Trace: [ 122.047004][ T6180] [ 122.047014][ T6180] dump_stack_lvl+0x189/0x250 [ 122.047049][ T6180] ? __pfx____ratelimit+0x10/0x10 [ 122.047075][ T6180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.047099][ T6180] ? __pfx__printk+0x10/0x10 [ 122.047134][ T6180] ? __pfx___might_resched+0x10/0x10 [ 122.047160][ T6180] should_fail_ex+0x414/0x560 [ 122.047188][ T6180] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 122.047215][ T6180] should_failslab+0xa8/0x100 [ 122.047240][ T6180] __kvmalloc_node_noprof+0x161/0x5f0 [ 122.047263][ T6180] ? bpf_test_run_xdp_live+0x1b5/0x1b10 [ 122.047295][ T6180] bpf_test_run_xdp_live+0x1b5/0x1b10 [ 122.047322][ T6180] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 122.047353][ T6180] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 122.047390][ T6180] ? synchronize_rcu+0x11a/0x310 [ 122.047412][ T6180] ? __pfx_synchronize_rcu+0x10/0x10 [ 122.047438][ T6180] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 122.047466][ T6180] ? 0xffffffffa02057c0 [ 122.047504][ T6180] ? 0xffffffffa02019e4 [ 122.047550][ T6180] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 122.047604][ T6180] ? _copy_from_user+0x94/0xb0 [ 122.047624][ T6180] ? bpf_test_init+0x113/0x150 [ 122.047652][ T6180] ? xdp_convert_md_to_buff+0x5b/0x330 [ 122.047681][ T6180] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 122.047726][ T6180] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 122.047758][ T6180] ? __fget_files+0x2a/0x420 [ 122.047787][ T6180] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 122.047815][ T6180] bpf_prog_test_run+0x2c7/0x340 [ 122.047855][ T6180] __sys_bpf+0x562/0x860 [ 122.047885][ T6180] ? __pfx___sys_bpf+0x10/0x10 [ 122.047930][ T6180] ? ksys_write+0x22a/0x250 [ 122.047952][ T6180] ? __pfx_ksys_write+0x10/0x10 [ 122.047974][ T6180] ? rcu_is_watching+0x15/0xb0 [ 122.048002][ T6180] __x64_sys_bpf+0x7c/0x90 [ 122.048028][ T6180] do_syscall_64+0xfa/0x3b0 [ 122.048054][ T6180] ? lockdep_hardirqs_on+0x9c/0x150 [ 122.048079][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.048100][ T6180] ? clear_bhb_loop+0x60/0xb0 [ 122.048125][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.048144][ T6180] RIP: 0033:0x7ff1ded8eec9 [ 122.048162][ T6180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.048179][ T6180] RSP: 002b:00007ff1dfce1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 122.048200][ T6180] RAX: ffffffffffffffda RBX: 00007ff1defe5fa0 RCX: 00007ff1ded8eec9 [ 122.048214][ T6180] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 122.048226][ T6180] RBP: 00007ff1dfce1090 R08: 0000000000000000 R09: 0000000000000000 [ 122.048237][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.048249][ T6180] R13: 00007ff1defe6038 R14: 00007ff1defe5fa0 R15: 00007ffc30d86de8 [ 122.048280][ T6180] [ 122.652361][ T6191] netlink: 14 bytes leftover after parsing attributes in process `syz.1.72'. [ 123.258019][ T6191] hsr_slave_0: left promiscuous mode [ 123.337001][ T6191] hsr_slave_1: left promiscuous mode [ 123.705069][ T6204] siw: device registration error -23 [ 124.251529][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.81'. [ 124.306724][ T6215] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 124.395048][ T6215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.408722][ T6217] netlink: 168 bytes leftover after parsing attributes in process `syz.2.81'. [ 125.037732][ T6225] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 125.085933][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 126.763592][ T6245] netlink: 'syz.3.88': attribute type 23 has an invalid length. [ 130.153449][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 130.166238][ T6266] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 130.189880][ T6266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.253389][ T6266] netlink: 168 bytes leftover after parsing attributes in process `syz.2.94'. [ 130.346289][ T6267] syzkaller0: entered promiscuous mode [ 130.352014][ T6267] syzkaller0: entered allmulticast mode [ 130.382377][ T6273] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 130.860611][ T6285] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.98'. [ 130.912734][ T6278] netlink: 2740 bytes leftover after parsing attributes in process `syz.4.98'. [ 131.800817][ T6297] netlink: 'syz.2.107': attribute type 23 has an invalid length. [ 131.837562][ T6301] netlink: 'syz.3.109': attribute type 23 has an invalid length. [ 132.342261][ T6317] netlink: 184 bytes leftover after parsing attributes in process `syz.1.115'. [ 133.132729][ T6331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.120'. [ 133.173535][ T6331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.120'. [ 133.239610][ T6338] netlink: 132 bytes leftover after parsing attributes in process `syz.2.122'. [ 133.909711][ T6342] netlink: 'syz.1.124': attribute type 2 has an invalid length. [ 134.474820][ T6358] netlink: 80 bytes leftover after parsing attributes in process `syz.2.129'. [ 134.700528][ T6353] warning: `syz.4.127' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 135.207183][ T6375] netlink: 'syz.3.135': attribute type 23 has an invalid length. [ 136.460991][ T6396] netlink: 'syz.3.142': attribute type 23 has an invalid length. [ 136.490340][ T6398] ======================================================= [ 136.490340][ T6398] WARNING: The mand mount option has been deprecated and [ 136.490340][ T6398] and is ignored by this kernel. Remove the mand [ 136.490340][ T6398] option from the mount to silence this warning. [ 136.490340][ T6398] ======================================================= [ 136.585275][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.143'. [ 136.611805][ T6403] netlink: 'syz.4.143': attribute type 2 has an invalid length. [ 136.672794][ T6403] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 136.687012][ T6403] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 138.623618][ T6399] syzkaller0: entered promiscuous mode [ 138.633348][ T6399] syzkaller0: entered allmulticast mode [ 138.834691][ T6428] netlink: 'syz.0.149': attribute type 23 has an invalid length. [ 139.569313][ T6443] netlink: 'syz.4.155': attribute type 6 has an invalid length. [ 139.582500][ T6443] netlink: 140 bytes leftover after parsing attributes in process `syz.4.155'. [ 139.601605][ T6443] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 139.987737][ T6445] netlink: 'syz.2.158': attribute type 6 has an invalid length. [ 140.029350][ T6450] netlink: 'syz.2.158': attribute type 1 has an invalid length. [ 140.073885][ T6445] netlink: 140 bytes leftover after parsing attributes in process `syz.2.158'. [ 140.436802][ T6461] netlink: 'syz.2.163': attribute type 3 has an invalid length. [ 140.447388][ T6462] netlink: 2740 bytes leftover after parsing attributes in process `syz.0.161'. [ 140.464030][ T6461] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.163'. [ 140.493667][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.500773][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.028436][ T6457] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.161'. [ 142.142158][ T6480] netlink: 'syz.0.167': attribute type 23 has an invalid length. [ 142.591343][ T6496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 143.310333][ T6504] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.393390][ T6504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 143.475097][ T6504] netlink: 180 bytes leftover after parsing attributes in process `syz.0.175'. [ 143.533396][ T6504] netlink: 14 bytes leftover after parsing attributes in process `syz.0.175'. [ 144.278999][ T6504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.295414][ T6504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.307223][ T6504] bond0 (unregistering): Released all slaves [ 145.182420][ T6551] netlink: 'syz.1.187': attribute type 11 has an invalid length. [ 145.192308][ T6551] netlink: 147436 bytes leftover after parsing attributes in process `syz.1.187'. [ 146.440830][ T6536] syzkaller0: entered promiscuous mode [ 146.446552][ T6536] syzkaller0: entered allmulticast mode [ 146.867894][ T6565] netlink: 80 bytes leftover after parsing attributes in process `syz.4.195'. [ 150.284937][ T6597] syzkaller0: entered promiscuous mode [ 150.308108][ T6597] syzkaller0: entered allmulticast mode [ 151.335310][ T6617] netlink: 'syz.0.209': attribute type 23 has an invalid length. [ 152.413159][ T6637] netlink: 132 bytes leftover after parsing attributes in process `syz.1.217'. [ 152.469047][ T6640] sctp: [Deprecated]: syz.0.218 (pid 6640) Use of int in max_burst socket option deprecated. [ 152.469047][ T6640] Use struct sctp_assoc_value instead [ 152.674435][ T6644] netlink: 184 bytes leftover after parsing attributes in process `syz.3.219'. [ 153.134352][ T6657] syzkaller0: entered promiscuous mode [ 153.204175][ T6657] syzkaller0: entered allmulticast mode [ 154.295239][ T6680] netlink: 184 bytes leftover after parsing attributes in process `syz.0.234'. [ 155.105211][ T6687] netlink: 44 bytes leftover after parsing attributes in process `syz.0.237'. [ 156.329319][ T6716] syzkaller0: entered promiscuous mode [ 156.360199][ T6716] syzkaller0: entered allmulticast mode [ 156.408453][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.1.246'. [ 157.017998][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.252'. [ 157.041686][ T6727] openvswitch: netlink: nsh attribute has 65520 unknown bytes. [ 157.057695][ T6727] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.093215][ T6727] netlink: 168 bytes leftover after parsing attributes in process `syz.2.252'. [ 157.345518][ T6736] netlink: 184 bytes leftover after parsing attributes in process `syz.4.255'. [ 157.611598][ T6743] netlink: 2740 bytes leftover after parsing attributes in process `syz.3.256'. [ 158.103074][ T6751] netlink: 'syz.1.261': attribute type 6 has an invalid length. [ 158.120736][ T6751] netlink: 140 bytes leftover after parsing attributes in process `syz.1.261'. [ 158.210407][ T6752] netlink: 'syz.1.261': attribute type 1 has an invalid length. [ 158.421662][ T6739] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.256'. [ 158.873170][ T6759] netlink: 156 bytes leftover after parsing attributes in process `syz.3.263'. [ 158.997876][ T6763] netlink: 'syz.2.265': attribute type 3 has an invalid length. [ 159.034079][ T6763] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.265'. [ 159.264971][ T6773] syzkaller0: entered promiscuous mode [ 159.270704][ T6773] syzkaller0: entered allmulticast mode [ 159.652784][ T6779] netlink: 184 bytes leftover after parsing attributes in process `syz.2.270'. [ 159.973097][ T6795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.276'. [ 160.014351][ T6792] netlink: 60 bytes leftover after parsing attributes in process `syz.2.276'. [ 160.055413][ T6795] netlink: 60 bytes leftover after parsing attributes in process `syz.2.276'. [ 160.119566][ T6800] netlink: 2 bytes leftover after parsing attributes in process `syz.3.275'. [ 160.181740][ T6800] batadv_slave_1: entered promiscuous mode [ 160.227372][ T6805] netlink: 'syz.4.279': attribute type 23 has an invalid length. [ 160.811609][ T6822] : entered promiscuous mode [ 160.902292][ T6831] netlink: 'syz.4.285': attribute type 10 has an invalid length. [ 160.938960][ T6831] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 161.095555][ T6824] syzkaller0: entered promiscuous mode [ 161.101285][ T6824] syzkaller0: entered allmulticast mode [ 161.149186][ T6822] sock: sock_timestamping_bind_phc: sock not bind to device [ 161.608871][ T6850] netlink: 'syz.3.296': attribute type 23 has an invalid length. [ 161.969724][ T6856] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 161.996379][ T6856] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 162.006861][ T6856] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 162.017357][ T6856] netlink: 'syz.1.297': attribute type 29 has an invalid length. [ 162.745241][ T6874] __nla_validate_parse: 8 callbacks suppressed [ 162.745274][ T6874] netlink: 64 bytes leftover after parsing attributes in process `syz.4.305'. [ 162.889814][ T6882] netlink: 140 bytes leftover after parsing attributes in process `syz.0.309'. [ 162.939024][ T6884] netlink: 64 bytes leftover after parsing attributes in process `syz.2.308'. [ 163.349031][ T6885] syzkaller0: entered promiscuous mode [ 163.370133][ T6885] syzkaller0: entered allmulticast mode [ 163.480929][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 164.116374][ T6924] validate_nla: 2 callbacks suppressed [ 164.116418][ T6924] netlink: 'syz.2.323': attribute type 6 has an invalid length. [ 164.138640][ T6924] netlink: 140 bytes leftover after parsing attributes in process `syz.2.323'. [ 164.149430][ T6924] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 164.224092][ T6922] netlink: 60 bytes leftover after parsing attributes in process `syz.4.322'. [ 164.243429][ T6922] netlink: 60 bytes leftover after parsing attributes in process `syz.4.322'. [ 164.302180][ T6922] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.365125][ T6929] netlink: 196 bytes leftover after parsing attributes in process `syz.0.324'. [ 165.096839][ T6944] netlink: 184 bytes leftover after parsing attributes in process `syz.4.329'. [ 165.326256][ T6948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 165.367330][ T6948] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 165.384498][ T6948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.875768][ T6986] netlink: 'syz.4.345': attribute type 21 has an invalid length. [ 170.883622][ T6986] __nla_validate_parse: 2 callbacks suppressed [ 170.883646][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 171.292984][ T6990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.346'. [ 171.390259][ T6990] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 171.484444][ T6994] netlink: 168 bytes leftover after parsing attributes in process `syz.2.346'. [ 171.495308][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 171.531699][ T6990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.199387][ T7009] netlink: 80 bytes leftover after parsing attributes in process `syz.0.353'. [ 172.947230][ T7031] netlink: 148 bytes leftover after parsing attributes in process `syz.1.362'. [ 172.995668][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 173.016954][ T7033] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 173.028050][ T7033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.056269][ T7031] netlink: 168 bytes leftover after parsing attributes in process `syz.1.362'. [ 173.487975][ T7044] netlink: 80 bytes leftover after parsing attributes in process `syz.4.367'. [ 173.581070][ T7048] netlink: 196 bytes leftover after parsing attributes in process `syz.2.369'. [ 174.790000][ T7072] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 174.809155][ T7072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.233475][ T7086] netlink: 'syz.4.384': attribute type 29 has an invalid length. [ 175.263328][ T7086] netlink: 'syz.4.384': attribute type 29 has an invalid length. [ 176.806107][ T7112] __nla_validate_parse: 4 callbacks suppressed [ 176.806166][ T7112] netlink: 148 bytes leftover after parsing attributes in process `syz.1.394'. [ 176.867651][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 176.917558][ T7112] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 176.942668][ T7117] netlink: 168 bytes leftover after parsing attributes in process `syz.1.394'. [ 176.964842][ T7118] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 177.100196][ T7112] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.438048][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 177.450610][ T7130] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 177.462882][ T7130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.551468][ T7127] netlink: 168 bytes leftover after parsing attributes in process `syz.3.400'. [ 178.005702][ T7141] netlink: 'syz.1.406': attribute type 6 has an invalid length. [ 178.038837][ T7141] netlink: 140 bytes leftover after parsing attributes in process `syz.1.406'. [ 178.053413][ T7141] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 178.250932][ T7148] netlink: 'syz.1.409': attribute type 1 has an invalid length. [ 178.418878][ T7155] netlink: 572 bytes leftover after parsing attributes in process `syz.4.411'. [ 178.459135][ T7155] netlink: 572 bytes leftover after parsing attributes in process `syz.4.411'. [ 178.504751][ T7150] syzkaller0: entered promiscuous mode [ 178.546130][ T7150] syzkaller0: entered allmulticast mode [ 178.585567][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'. [ 178.617263][ T7162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 178.917613][ T7171] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 178.941340][ T7171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.988455][ T7175] FAULT_INJECTION: forcing a failure. [ 178.988455][ T7175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.013438][ T7175] CPU: 1 UID: 0 PID: 7175 Comm: syz.3.419 Not tainted syzkaller #0 PREEMPT(full) [ 179.013466][ T7175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.013478][ T7175] Call Trace: [ 179.013487][ T7175] [ 179.013497][ T7175] dump_stack_lvl+0x189/0x250 [ 179.013572][ T7175] ? __pfx____ratelimit+0x10/0x10 [ 179.013623][ T7175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.013647][ T7175] ? __pfx__printk+0x10/0x10 [ 179.013690][ T7175] ? __might_fault+0xb0/0x130 [ 179.013731][ T7175] should_fail_ex+0x414/0x560 [ 179.013783][ T7175] _copy_to_user+0x31/0xb0 [ 179.013810][ T7175] simple_read_from_buffer+0xe1/0x170 [ 179.013843][ T7175] proc_fail_nth_read+0x1b3/0x220 [ 179.013884][ T7175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.013914][ T7175] ? rw_verify_area+0x2a6/0x4d0 [ 179.013948][ T7175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 179.013977][ T7175] vfs_read+0x1fd/0xa30 [ 179.014005][ T7175] ? fdget_pos+0x247/0x320 [ 179.014032][ T7175] ? __pfx___mutex_lock+0x10/0x10 [ 179.014070][ T7175] ? __pfx_vfs_read+0x10/0x10 [ 179.014103][ T7175] ? __fget_files+0x2a/0x420 [ 179.014128][ T7175] ? __fget_files+0x3a0/0x420 [ 179.014147][ T7175] ? __fget_files+0x2a/0x420 [ 179.014179][ T7175] ksys_read+0x145/0x250 [ 179.014199][ T7175] ? __pfx_ksys_read+0x10/0x10 [ 179.014213][ T7175] ? rcu_is_watching+0x15/0xb0 [ 179.014278][ T7175] ? do_syscall_64+0xbe/0x3b0 [ 179.014311][ T7175] do_syscall_64+0xfa/0x3b0 [ 179.014336][ T7175] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.014360][ T7175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.014387][ T7175] ? clear_bhb_loop+0x60/0xb0 [ 179.014418][ T7175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.014437][ T7175] RIP: 0033:0x7fb0d238d8dc [ 179.014469][ T7175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 179.014486][ T7175] RSP: 002b:00007fb0d05f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 179.014514][ T7175] RAX: ffffffffffffffda RBX: 00007fb0d25e5fa0 RCX: 00007fb0d238d8dc [ 179.014529][ T7175] RDX: 000000000000000f RSI: 00007fb0d05f60a0 RDI: 0000000000000004 [ 179.014541][ T7175] RBP: 00007fb0d05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 179.014553][ T7175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.014564][ T7175] R13: 00007fb0d25e6038 R14: 00007fb0d25e5fa0 R15: 00007ffe3a384f18 [ 179.014598][ T7175] [ 179.373002][ T7180] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 179.476960][ T7184] netlink: 'syz.0.425': attribute type 3 has an invalid length. [ 179.571287][ T7189] netlink: 'syz.1.424': attribute type 5 has an invalid length. [ 180.814671][ T7225] FAULT_INJECTION: forcing a failure. [ 180.814671][ T7225] name failslab, interval 1, probability 0, space 0, times 0 [ 180.873895][ T7225] CPU: 0 UID: 0 PID: 7225 Comm: syz.0.438 Not tainted syzkaller #0 PREEMPT(full) [ 180.873927][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.873940][ T7225] Call Trace: [ 180.873950][ T7225] [ 180.873961][ T7225] dump_stack_lvl+0x189/0x250 [ 180.873997][ T7225] ? __pfx____ratelimit+0x10/0x10 [ 180.874026][ T7225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.874052][ T7225] ? __pfx__printk+0x10/0x10 [ 180.874117][ T7225] ? __pfx___might_resched+0x10/0x10 [ 180.874151][ T7225] ? fs_reclaim_acquire+0x7d/0x100 [ 180.874182][ T7225] should_fail_ex+0x414/0x560 [ 180.874213][ T7225] ? nf_hook_entries_grow+0x27c/0x710 [ 180.874275][ T7225] should_failslab+0xa8/0x100 [ 180.874305][ T7225] __kvmalloc_node_noprof+0x161/0x5f0 [ 180.874329][ T7225] ? nf_hook_entries_grow+0x27c/0x710 [ 180.874363][ T7225] nf_hook_entries_grow+0x27c/0x710 [ 180.874409][ T7225] __nf_register_net_hook+0x2c9/0x930 [ 180.874450][ T7225] nf_register_net_hook+0xb2/0x190 [ 180.874482][ T7225] nf_register_net_hooks+0x44/0x1b0 [ 180.874514][ T7225] nf_ct_netns_do_get+0x3bf/0x5a0 [ 180.874550][ T7225] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 180.874584][ T7225] ? nft_validate_register_store+0x188/0x1d0 [ 180.874623][ T7225] ? nft_parse_register_store+0x239/0x2c0 [ 180.874656][ T7225] nft_ct_get_init+0x5a4/0x8c0 [ 180.874699][ T7225] nf_tables_newrule+0x178c/0x2890 [ 180.874751][ T7225] ? __pfx_nf_tables_newrule+0x10/0x10 [ 180.874785][ T7225] ? nfnl_pernet+0x23/0x240 [ 180.874820][ T7225] ? __nla_parse+0x40/0x60 [ 180.874852][ T7225] nfnetlink_rcv+0x112f/0x2520 [ 180.874915][ T7225] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 180.874959][ T7225] ? ref_tracker_free+0x63a/0x7d0 [ 180.875021][ T7225] ? __netlink_deliver_tap+0x807/0x850 [ 180.875054][ T7225] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.875103][ T7225] netlink_unicast+0x82c/0x9e0 [ 180.875139][ T7225] ? __pfx_netlink_unicast+0x10/0x10 [ 180.875178][ T7225] ? netlink_sendmsg+0x642/0xb30 [ 180.875203][ T7225] ? skb_put+0x11b/0x210 [ 180.875249][ T7225] netlink_sendmsg+0x805/0xb30 [ 180.875289][ T7225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.875321][ T7225] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.875361][ T7225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.875394][ T7225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.875422][ T7225] __sock_sendmsg+0x219/0x270 [ 180.875452][ T7225] ____sys_sendmsg+0x505/0x830 [ 180.875499][ T7225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.875541][ T7225] ? import_iovec+0x74/0xa0 [ 180.875579][ T7225] ___sys_sendmsg+0x21f/0x2a0 [ 180.875614][ T7225] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.875689][ T7225] ? __fget_files+0x2a/0x420 [ 180.875713][ T7225] ? __fget_files+0x3a0/0x420 [ 180.875749][ T7225] __x64_sys_sendmsg+0x19b/0x260 [ 180.875784][ T7225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.875828][ T7225] ? __pfx_ksys_write+0x10/0x10 [ 180.875845][ T7225] ? rcu_is_watching+0x15/0xb0 [ 180.875874][ T7225] ? do_syscall_64+0xbe/0x3b0 [ 180.875907][ T7225] do_syscall_64+0xfa/0x3b0 [ 180.875933][ T7225] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.875958][ T7225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.875979][ T7225] ? clear_bhb_loop+0x60/0xb0 [ 180.876005][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.876025][ T7225] RIP: 0033:0x7fa44218eec9 [ 180.876045][ T7225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.876063][ T7225] RSP: 002b:00007fa44301b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.876086][ T7225] RAX: ffffffffffffffda RBX: 00007fa4423e5fa0 RCX: 00007fa44218eec9 [ 180.876102][ T7225] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 180.876114][ T7225] RBP: 00007fa44301b090 R08: 0000000000000000 R09: 0000000000000000 [ 180.876127][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 180.876138][ T7225] R13: 00007fa4423e6038 R14: 00007fa4423e5fa0 R15: 00007ffdfa76e3d8 [ 180.876173][ T7225] [ 181.430573][ T7231] netlink: 'syz.4.440': attribute type 10 has an invalid length. [ 181.510305][ T7231] batadv_slave_1: entered promiscuous mode [ 181.522428][ T7231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.550450][ T7231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.817788][ T7231] bridge0: port 3(batadv_slave_1) entered blocking state [ 181.830685][ T7231] bridge0: port 3(batadv_slave_1) entered disabled state [ 181.838618][ T7231] batadv_slave_1: entered allmulticast mode [ 181.992312][ T7231] bridge0: port 3(batadv_slave_1) entered blocking state [ 182.000169][ T7231] bridge0: port 3(batadv_slave_1) entered forwarding state [ 182.303494][ T7248] __nla_validate_parse: 8 callbacks suppressed [ 182.303520][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 182.862029][ T7262] netlink: 168 bytes leftover after parsing attributes in process `syz.1.450'. [ 183.050179][ T7263] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.451'. [ 183.062781][ T7268] netlink: 40 bytes leftover after parsing attributes in process `syz.2.452'. [ 183.105313][ T7263] netlink: 2740 bytes leftover after parsing attributes in process `syz.3.451'. [ 184.468928][ T7299] netlink: 'syz.0.465': attribute type 10 has an invalid length. [ 184.499593][ T7296] netlink: 168 bytes leftover after parsing attributes in process `syz.4.464'. [ 184.989905][ T7318] netlink: 132 bytes leftover after parsing attributes in process `syz.4.469'. [ 185.349046][ T7326] netlink: 80 bytes leftover after parsing attributes in process `syz.0.474'. [ 186.192021][ T7340] netlink: 168 bytes leftover after parsing attributes in process `syz.3.479'. [ 186.605667][ T7351] FAULT_INJECTION: forcing a failure. [ 186.605667][ T7351] name failslab, interval 1, probability 0, space 0, times 0 [ 186.622219][ T7351] CPU: 1 UID: 0 PID: 7351 Comm: syz.4.484 Not tainted syzkaller #0 PREEMPT(full) [ 186.622252][ T7351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.622265][ T7351] Call Trace: [ 186.622274][ T7351] [ 186.622284][ T7351] dump_stack_lvl+0x189/0x250 [ 186.622319][ T7351] ? __pfx____ratelimit+0x10/0x10 [ 186.622348][ T7351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.622372][ T7351] ? __pfx__printk+0x10/0x10 [ 186.622408][ T7351] ? __pfx___might_resched+0x10/0x10 [ 186.622427][ T7351] ? fs_reclaim_acquire+0x7d/0x100 [ 186.622457][ T7351] should_fail_ex+0x414/0x560 [ 186.622486][ T7351] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 186.622513][ T7351] should_failslab+0xa8/0x100 [ 186.622537][ T7351] __kvmalloc_node_noprof+0x161/0x5f0 [ 186.622558][ T7351] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 186.622593][ T7351] rhashtable_init_noprof+0x4ee/0xbb0 [ 186.622629][ T7351] nft_rhash_init+0x10b/0x3a0 [ 186.622663][ T7351] ? __pfx_nft_rhash_init+0x10/0x10 [ 186.622689][ T7351] ? __pfx_nft_rhash_key+0x10/0x10 [ 186.622725][ T7351] ? __pfx_nft_rhash_obj+0x10/0x10 [ 186.622750][ T7351] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 186.622787][ T7351] ? nf_tables_newset+0x1396/0x2530 [ 186.622817][ T7351] ? kfree+0x18e/0x440 [ 186.622853][ T7351] nf_tables_newset+0x1c04/0x2530 [ 186.622900][ T7351] ? __pfx_nf_tables_newset+0x10/0x10 [ 186.622956][ T7351] ? __nla_parse+0x40/0x60 [ 186.622987][ T7351] nfnetlink_rcv+0x112f/0x2520 [ 186.623047][ T7351] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 186.623088][ T7351] ? ref_tracker_free+0x63a/0x7d0 [ 186.623145][ T7351] ? __netlink_deliver_tap+0x807/0x850 [ 186.623172][ T7351] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.623219][ T7351] netlink_unicast+0x82c/0x9e0 [ 186.623258][ T7351] ? __pfx_netlink_unicast+0x10/0x10 [ 186.623283][ T7351] ? netlink_sendmsg+0x642/0xb30 [ 186.623307][ T7351] ? skb_put+0x11b/0x210 [ 186.623340][ T7351] netlink_sendmsg+0x805/0xb30 [ 186.623378][ T7351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.623408][ T7351] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.623443][ T7351] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.623471][ T7351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.623498][ T7351] __sock_sendmsg+0x219/0x270 [ 186.623527][ T7351] ____sys_sendmsg+0x505/0x830 [ 186.623564][ T7351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.623604][ T7351] ? import_iovec+0x74/0xa0 [ 186.623640][ T7351] ___sys_sendmsg+0x21f/0x2a0 [ 186.623672][ T7351] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.623738][ T7351] ? __fget_files+0x2a/0x420 [ 186.623768][ T7351] ? __fget_files+0x3a0/0x420 [ 186.623800][ T7351] __x64_sys_sendmsg+0x19b/0x260 [ 186.623831][ T7351] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.623869][ T7351] ? __pfx_ksys_write+0x10/0x10 [ 186.623884][ T7351] ? rcu_is_watching+0x15/0xb0 [ 186.623909][ T7351] ? do_syscall_64+0xbe/0x3b0 [ 186.623940][ T7351] do_syscall_64+0xfa/0x3b0 [ 186.623963][ T7351] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.623986][ T7351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.624005][ T7351] ? clear_bhb_loop+0x60/0xb0 [ 186.624030][ T7351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.624048][ T7351] RIP: 0033:0x7ff1ded8eec9 [ 186.624067][ T7351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.624083][ T7351] RSP: 002b:00007ff1dfce1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.624106][ T7351] RAX: ffffffffffffffda RBX: 00007ff1defe5fa0 RCX: 00007ff1ded8eec9 [ 186.624120][ T7351] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 186.624133][ T7351] RBP: 00007ff1dfce1090 R08: 0000000000000000 R09: 0000000000000000 [ 186.624145][ T7351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.624157][ T7351] R13: 00007ff1defe6038 R14: 00007ff1defe5fa0 R15: 00007ffc30d86de8 [ 186.624190][ T7351] [ 186.852791][ T7356] syzkaller0: entered promiscuous mode [ 187.023554][ T7356] syzkaller0: entered allmulticast mode [ 187.140840][ T7362] netlink: 'syz.4.487': attribute type 10 has an invalid length. [ 187.196302][ T7364] netlink: 132 bytes leftover after parsing attributes in process `syz.3.488'. [ 187.211030][ T7362] bridge0: port 4(macsec0) entered blocking state [ 187.220269][ T7362] bridge0: port 4(macsec0) entered disabled state [ 187.227904][ T7362] macsec0: entered allmulticast mode [ 187.233394][ T7362] veth1_macvtap: entered allmulticast mode [ 187.242381][ T7362] macsec0: entered promiscuous mode [ 187.251978][ T7362] bridge0: port 4(macsec0) entered blocking state [ 187.258718][ T7362] bridge0: port 4(macsec0) entered forwarding state [ 189.595779][ T7401] netlink: 'syz.3.500': attribute type 39 has an invalid length. [ 189.715138][ T7404] netlink: 'syz.1.501': attribute type 6 has an invalid length. [ 189.735871][ T7404] netlink: 140 bytes leftover after parsing attributes in process `syz.1.501'. [ 189.755276][ T7406] netlink: 72 bytes leftover after parsing attributes in process `syz.0.502'. [ 189.767321][ T7407] netlink: 'syz.1.501': attribute type 1 has an invalid length. [ 190.401329][ T7417] netlink: 'syz.0.506': attribute type 10 has an invalid length. [ 190.802265][ T7430] netlink: 'syz.2.511': attribute type 23 has an invalid length. [ 190.812324][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.512'. [ 190.840594][ T7432] openvswitch: netlink: Flow actions attr not present in new flow. [ 190.913313][ T7434] netlink: 'syz.4.513': attribute type 23 has an invalid length. [ 190.943986][ T7437] netlink: 'syz.1.514': attribute type 10 has an invalid length. [ 190.988336][ T7441] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 191.013024][ T7441] netlink: 2 bytes leftover after parsing attributes in process `syz.0.515'. [ 191.025411][ T7437] bond0: (slave bond_slave_0): Releasing backup interface [ 191.053465][ T7441] batadv_slave_1: entered promiscuous mode [ 191.070499][ T7441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.099803][ T7441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.168533][ T7441] bridge0: port 3(batadv_slave_1) entered blocking state [ 191.186453][ T7441] bridge0: port 3(batadv_slave_1) entered disabled state [ 191.212907][ T7441] batadv_slave_1: entered allmulticast mode [ 191.247697][ T7441] bridge0: port 3(batadv_slave_1) entered blocking state [ 191.255095][ T7441] bridge0: port 3(batadv_slave_1) entered forwarding state [ 191.483633][ T7457] netlink: 'syz.3.520': attribute type 6 has an invalid length. [ 191.492889][ T7457] netlink: 140 bytes leftover after parsing attributes in process `syz.3.520'. [ 191.515812][ T7457] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 191.656384][ T7462] FAULT_INJECTION: forcing a failure. [ 191.656384][ T7462] name failslab, interval 1, probability 0, space 0, times 0 [ 191.669349][ T7462] CPU: 1 UID: 0 PID: 7462 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT(full) [ 191.669380][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 191.669392][ T7462] Call Trace: [ 191.669401][ T7462] [ 191.669410][ T7462] dump_stack_lvl+0x189/0x250 [ 191.669451][ T7462] ? __pfx____ratelimit+0x10/0x10 [ 191.669479][ T7462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.669504][ T7462] ? __pfx__printk+0x10/0x10 [ 191.669540][ T7462] ? __pfx___might_resched+0x10/0x10 [ 191.669567][ T7462] should_fail_ex+0x414/0x560 [ 191.669598][ T7462] should_failslab+0xa8/0x100 [ 191.669623][ T7462] __kmalloc_cache_noprof+0x70/0x3d0 [ 191.669643][ T7462] ? nf_flow_offload_xdp_setup+0x7e/0x690 [ 191.669672][ T7462] ? kasan_save_track+0x4f/0x80 [ 191.669708][ T7462] nf_flow_offload_xdp_setup+0x7e/0x690 [ 191.669744][ T7462] nf_flow_table_offload_setup+0xe4/0x630 [ 191.669795][ T7462] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 191.669842][ T7462] ? nft_pernet+0x23/0x240 [ 191.669870][ T7462] ? nft_pernet+0x23/0x240 [ 191.669888][ T7462] ? nft_pernet+0x23/0x240 [ 191.669904][ T7462] ? nft_pernet+0x23/0x240 [ 191.669924][ T7462] ? __pfx_nf_flow_table_offload_setup+0x10/0x10 [ 191.669954][ T7462] nft_register_flowtable_net_hooks+0x34e/0x800 [ 191.669984][ T7462] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 191.670019][ T7462] nf_tables_newflowtable+0x1b35/0x2390 [ 191.670060][ T7462] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 191.670102][ T7462] ? __nla_parse+0x40/0x60 [ 191.670139][ T7462] nfnetlink_rcv+0x112f/0x2520 [ 191.670199][ T7462] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 191.670242][ T7462] ? ref_tracker_free+0x63a/0x7d0 [ 191.670298][ T7462] ? __netlink_deliver_tap+0x807/0x850 [ 191.670326][ T7462] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.670372][ T7462] netlink_unicast+0x82c/0x9e0 [ 191.670406][ T7462] ? __pfx_netlink_unicast+0x10/0x10 [ 191.670439][ T7462] ? netlink_sendmsg+0x642/0xb30 [ 191.670464][ T7462] ? skb_put+0x11b/0x210 [ 191.670498][ T7462] netlink_sendmsg+0x805/0xb30 [ 191.670540][ T7462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.670572][ T7462] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.670602][ T7462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.670631][ T7462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.670659][ T7462] __sock_sendmsg+0x219/0x270 [ 191.670687][ T7462] ____sys_sendmsg+0x505/0x830 [ 191.670725][ T7462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.670766][ T7462] ? import_iovec+0x74/0xa0 [ 191.670803][ T7462] ___sys_sendmsg+0x21f/0x2a0 [ 191.670836][ T7462] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.670909][ T7462] ? __fget_files+0x2a/0x420 [ 191.670932][ T7462] ? __fget_files+0x3a0/0x420 [ 191.670967][ T7462] __x64_sys_sendmsg+0x19b/0x260 [ 191.670996][ T7462] ? perf_trace_run_bpf_submit+0x100/0x170 [ 191.671027][ T7462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.671068][ T7462] ? __pfx_ksys_write+0x10/0x10 [ 191.671094][ T7462] ? do_syscall_64+0xbe/0x3b0 [ 191.671126][ T7462] do_syscall_64+0xfa/0x3b0 [ 191.671154][ T7462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.671172][ T7462] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.671192][ T7462] ? clear_bhb_loop+0x60/0xb0 [ 191.671217][ T7462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.671237][ T7462] RIP: 0033:0x7fb0d238eec9 [ 191.671257][ T7462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.671281][ T7462] RSP: 002b:00007fb0d05f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.671304][ T7462] RAX: ffffffffffffffda RBX: 00007fb0d25e5fa0 RCX: 00007fb0d238eec9 [ 191.671319][ T7462] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 191.671332][ T7462] RBP: 00007fb0d05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 191.671344][ T7462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 191.671356][ T7462] R13: 00007fb0d25e6038 R14: 00007fb0d25e5fa0 R15: 00007ffe3a384f18 [ 191.671390][ T7462] [ 192.191316][ T7464] syzkaller0: entered promiscuous mode [ 192.199468][ T7464] syzkaller0: entered allmulticast mode [ 192.441515][ T7470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.615107][ T7470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.956213][ T7470] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 193.015889][ T7482] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.530'. [ 193.087325][ T7470] syz.3.528 (7470) used greatest stack depth: 17256 bytes left [ 193.449484][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.530'. [ 193.662391][ T7495] netlink: 140 bytes leftover after parsing attributes in process `syz.0.534'. [ 194.053241][ T7505] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.536'. [ 194.209251][ T7508] netlink: 2740 bytes leftover after parsing attributes in process `syz.1.536'. [ 194.602778][ T7513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.592554][ T7533] __nla_validate_parse: 1 callbacks suppressed [ 195.603355][ T7533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.546'. [ 195.708237][ T7539] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.548'. [ 195.774914][ T7539] netlink: 2740 bytes leftover after parsing attributes in process `syz.0.548'. [ 195.809565][ T7541] validate_nla: 8 callbacks suppressed [ 195.809589][ T7541] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 195.843131][ T7541] netlink: 2 bytes leftover after parsing attributes in process `syz.3.549'. [ 195.879901][ T7541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.890119][ T7541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.917452][ T7541] bridge0: port 3(batadv_slave_1) entered blocking state [ 195.931643][ T7541] bridge0: port 3(batadv_slave_1) entered disabled state [ 195.943391][ T7541] batadv_slave_1: entered allmulticast mode [ 195.961919][ T7541] bridge0: port 3(batadv_slave_1) entered blocking state [ 195.969567][ T7541] bridge0: port 3(batadv_slave_1) entered forwarding state [ 196.112489][ T7550] netlink: 'syz.2.552': attribute type 6 has an invalid length. [ 196.124048][ T7550] netlink: 140 bytes leftover after parsing attributes in process `syz.2.552'. [ 196.151784][ T7550] netlink: 'syz.2.552': attribute type 1 has an invalid length. [ 196.366681][ T7559] FAULT_INJECTION: forcing a failure. [ 196.366681][ T7559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.380222][ T7559] CPU: 1 UID: 0 PID: 7559 Comm: syz.1.557 Not tainted syzkaller #0 PREEMPT(full) [ 196.380250][ T7559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.380262][ T7559] Call Trace: [ 196.380272][ T7559] [ 196.380280][ T7559] dump_stack_lvl+0x189/0x250 [ 196.380315][ T7559] ? __pfx____ratelimit+0x10/0x10 [ 196.380342][ T7559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.380365][ T7559] ? __pfx__printk+0x10/0x10 [ 196.380393][ T7559] ? __might_fault+0xb0/0x130 [ 196.380425][ T7559] should_fail_ex+0x414/0x560 [ 196.380453][ T7559] _copy_from_iter+0x1de/0x1790 [ 196.380489][ T7559] ? _copy_from_iter+0x24f/0x1790 [ 196.380521][ T7559] ? __pfx__copy_from_iter+0x10/0x10 [ 196.380544][ T7559] ? sock_alloc_send_pskb+0x875/0x990 [ 196.380571][ T7559] ? __pfx__copy_from_iter+0x10/0x10 [ 196.380600][ T7559] ? page_copy_sane+0x16a/0x280 [ 196.380629][ T7559] copy_page_from_iter+0xdd/0x170 [ 196.380661][ T7559] skb_copy_datagram_from_iter+0x306/0x720 [ 196.380694][ T7559] tun_get_user+0x1691/0x3e20 [ 196.380769][ T7559] ? aa_file_perm+0x44d/0x1550 [ 196.380796][ T7559] ? __pfx_tun_get_user+0x10/0x10 [ 196.380828][ T7559] ? _parse_integer_limit+0x1ae/0x1f0 [ 196.380863][ T7559] ? __lock_acquire+0xab9/0xd20 [ 196.380900][ T7559] ? ref_tracker_alloc+0x318/0x460 [ 196.380932][ T7559] ? __lock_acquire+0xab9/0xd20 [ 196.380961][ T7559] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 196.380990][ T7559] ? tun_get+0x1c/0x2f0 [ 196.381022][ T7559] ? tun_get+0x1c/0x2f0 [ 196.381048][ T7559] ? tun_get+0x1c/0x2f0 [ 196.381078][ T7559] tun_chr_write_iter+0x113/0x200 [ 196.381106][ T7559] vfs_write+0x5c9/0xb30 [ 196.381141][ T7559] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 196.381168][ T7559] ? __pfx_vfs_write+0x10/0x10 [ 196.381208][ T7559] ? __fget_files+0x2a/0x420 [ 196.381240][ T7559] ksys_write+0x145/0x250 [ 196.381261][ T7559] ? __pfx_ksys_write+0x10/0x10 [ 196.381276][ T7559] ? rcu_is_watching+0x15/0xb0 [ 196.381303][ T7559] ? do_syscall_64+0xbe/0x3b0 [ 196.381333][ T7559] do_syscall_64+0xfa/0x3b0 [ 196.381360][ T7559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.381378][ T7559] ? asm_sysvec_call_function_single+0x1a/0x20 [ 196.381397][ T7559] ? clear_bhb_loop+0x60/0xb0 [ 196.381421][ T7559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.381439][ T7559] RIP: 0033:0x7f3ba498eec9 [ 196.381458][ T7559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.381474][ T7559] RSP: 002b:00007f3ba577b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 196.381495][ T7559] RAX: ffffffffffffffda RBX: 00007f3ba4be5fa0 RCX: 00007f3ba498eec9 [ 196.381509][ T7559] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 196.381522][ T7559] RBP: 00007f3ba577b090 R08: 0000000000000000 R09: 0000000000000000 [ 196.381533][ T7559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.381544][ T7559] R13: 00007f3ba4be6038 R14: 00007f3ba4be5fa0 R15: 00007ffdcbd48098 [ 196.381576][ T7559] [ 196.953596][ T7575] FAULT_INJECTION: forcing a failure. [ 196.953596][ T7575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.970559][ T7575] CPU: 1 UID: 0 PID: 7575 Comm: syz.0.563 Not tainted syzkaller #0 PREEMPT(full) [ 196.970591][ T7575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.970605][ T7575] Call Trace: [ 196.970616][ T7575] [ 196.970627][ T7575] dump_stack_lvl+0x189/0x250 [ 196.970666][ T7575] ? __pfx____ratelimit+0x10/0x10 [ 196.970700][ T7575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.970729][ T7575] ? __pfx__printk+0x10/0x10 [ 196.970775][ T7575] ? __might_fault+0xb0/0x130 [ 196.970819][ T7575] should_fail_ex+0x414/0x560 [ 196.970863][ T7575] _copy_to_user+0x31/0xb0 [ 196.970894][ T7575] simple_read_from_buffer+0xe1/0x170 [ 196.970943][ T7575] proc_fail_nth_read+0x1b3/0x220 [ 196.970986][ T7575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.971039][ T7575] ? rw_verify_area+0x2a6/0x4d0 [ 196.971074][ T7575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 196.971112][ T7575] vfs_read+0x1fd/0xa30 [ 196.971146][ T7575] ? fdget_pos+0x247/0x320 [ 196.971184][ T7575] ? __pfx___mutex_lock+0x10/0x10 [ 196.971218][ T7575] ? __pfx_vfs_read+0x10/0x10 [ 196.971261][ T7575] ? __fget_files+0x2a/0x420 [ 196.971301][ T7575] ? __fget_files+0x3a0/0x420 [ 196.971324][ T7575] ? __fget_files+0x2a/0x420 [ 196.971377][ T7575] ksys_read+0x145/0x250 [ 196.971409][ T7575] ? __pfx_ksys_read+0x10/0x10 [ 196.971425][ T7575] ? rcu_is_watching+0x15/0xb0 [ 196.971466][ T7575] ? do_syscall_64+0xbe/0x3b0 [ 196.971509][ T7575] do_syscall_64+0xfa/0x3b0 [ 196.971536][ T7575] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.971564][ T7575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.971586][ T7575] ? clear_bhb_loop+0x60/0xb0 [ 196.971621][ T7575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.971642][ T7575] RIP: 0033:0x7fa44218d8dc [ 196.971666][ T7575] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 196.971683][ T7575] RSP: 002b:00007fa44301b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 196.971711][ T7575] RAX: ffffffffffffffda RBX: 00007fa4423e5fa0 RCX: 00007fa44218d8dc [ 196.971726][ T7575] RDX: 000000000000000f RSI: 00007fa44301b0a0 RDI: 0000000000000005 [ 196.971738][ T7575] RBP: 00007fa44301b090 R08: 0000000000000000 R09: 0000000000000000 [ 196.971751][ T7575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.971762][ T7575] R13: 00007fa4423e6038 R14: 00007fa4423e5fa0 R15: 00007ffdfa76e3d8 [ 196.971827][ T7575] [ 197.226108][ T7572] netlink: 80 bytes leftover after parsing attributes in process `syz.3.562'. [ 197.506157][ T7579] netlink: 32 bytes leftover after parsing attributes in process `syz.4.564'. [ 197.544055][ T7579] openvswitch: netlink: Missing key (keys=40, expected=80) [ 197.905895][ T7599] netlink: 'syz.4.571': attribute type 13 has an invalid length. [ 198.255277][ T5869] Bluetooth: hci4: unexpected event 0x20 length: 15 > 7 [ 199.062707][ T7619] netlink: 80 bytes leftover after parsing attributes in process `syz.0.577'. [ 199.744681][ T7634] openvswitch: netlink: Missing valid actions attribute. [ 199.772771][ T7634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.825720][ T7637] netlink: 148 bytes leftover after parsing attributes in process `syz.2.581'. [ 199.936466][ T7637] netlink: 168 bytes leftover after parsing attributes in process `syz.2.581'. [ 200.427892][ T7660] wg2: entered promiscuous mode [ 200.463329][ T7660] wg2: entered allmulticast mode [ 200.517942][ T7650] netlink: 'syz.3.584': attribute type 10 has an invalid length. [ 200.758213][ T7650] veth1_macvtap: left promiscuous mode [ 201.209889][ T7678] __nla_validate_parse: 1 callbacks suppressed [ 201.209941][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'. [ 201.245228][ T7678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.589'. [ 201.438062][ T7690] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.595'. [ 201.461350][ T7690] netlink: 2740 bytes leftover after parsing attributes in process `syz.3.595'. [ 201.704184][ T7698] netlink: 'syz.0.597': attribute type 1 has an invalid length. [ 202.405245][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.411910][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.587199][ T7705] netlink: 'syz.4.601': attribute type 23 has an invalid length. [ 203.235679][ T7718] netlink: 'syz.3.605': attribute type 10 has an invalid length. [ 203.253097][ T7718] netlink: 2 bytes leftover after parsing attributes in process `syz.3.605'. [ 203.816007][ T7721] FAULT_INJECTION: forcing a failure. [ 203.816007][ T7721] name failslab, interval 1, probability 0, space 0, times 0 [ 203.829114][ T7721] CPU: 0 UID: 0 PID: 7721 Comm: syz.4.608 Not tainted syzkaller #0 PREEMPT(full) [ 203.829142][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 203.829156][ T7721] Call Trace: [ 203.829166][ T7721] [ 203.829177][ T7721] dump_stack_lvl+0x189/0x250 [ 203.829214][ T7721] ? __pfx____ratelimit+0x10/0x10 [ 203.829243][ T7721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.829269][ T7721] ? __pfx__printk+0x10/0x10 [ 203.829317][ T7721] should_fail_ex+0x414/0x560 [ 203.829350][ T7721] should_failslab+0xa8/0x100 [ 203.829376][ T7721] kmem_cache_alloc_noprof+0x73/0x3c0 [ 203.829410][ T7721] ? radix_tree_node_alloc+0x7e/0x3a0 [ 203.829442][ T7721] radix_tree_node_alloc+0x7e/0x3a0 [ 203.829477][ T7721] idr_get_free+0x2b3/0xa70 [ 203.829522][ T7721] idr_alloc_u32+0x159/0x2d0 [ 203.829558][ T7721] ? __pfx_idr_alloc_u32+0x10/0x10 [ 203.829589][ T7721] ? do_raw_spin_lock+0x121/0x290 [ 203.829627][ T7721] idr_alloc_cyclic+0x9b/0x1b0 [ 203.829663][ T7721] bpf_link_prime+0x6b/0x220 [ 203.829704][ T7721] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 203.829736][ T7721] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 203.829775][ T7721] ? __fget_files+0x2a/0x420 [ 203.829813][ T7721] bpf_raw_tracepoint_open+0x1b2/0x220 [ 203.829849][ T7721] __sys_bpf+0x73e/0x860 [ 203.829881][ T7721] ? __pfx___sys_bpf+0x10/0x10 [ 203.829930][ T7721] ? do_syscall_64+0xb7/0x3b0 [ 203.829961][ T7721] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 203.829998][ T7721] ? __pfx_ksys_write+0x10/0x10 [ 203.830015][ T7721] ? rcu_is_watching+0x15/0xb0 [ 203.830056][ T7721] __x64_sys_bpf+0x7c/0x90 [ 203.830083][ T7721] do_syscall_64+0xfa/0x3b0 [ 203.830108][ T7721] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.830134][ T7721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.830155][ T7721] ? clear_bhb_loop+0x60/0xb0 [ 203.830182][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.830203][ T7721] RIP: 0033:0x7ff1ded8eec9 [ 203.830224][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.830242][ T7721] RSP: 002b:00007ff1dfce1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 203.830272][ T7721] RAX: ffffffffffffffda RBX: 00007ff1defe5fa0 RCX: 00007ff1ded8eec9 [ 203.830287][ T7721] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000011 [ 203.830305][ T7721] RBP: 00007ff1dfce1090 R08: 0000000000000000 R09: 0000000000000000 [ 203.830318][ T7721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.830330][ T7721] R13: 00007ff1defe6038 R14: 00007ff1defe5fa0 R15: 00007ffc30d86de8 [ 203.830369][ T7721] [ 204.158355][ T7724] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 204.278806][ T7731] netlink: 92 bytes leftover after parsing attributes in process `syz.4.610'. [ 204.346143][ T7729] netlink: 'syz.1.611': attribute type 10 has an invalid length. [ 204.395503][ T7729] veth0_vlan: entered allmulticast mode [ 204.460845][ T7736] netlink: 'syz.2.614': attribute type 23 has an invalid length. [ 204.538227][ T7729] veth0_vlan: left promiscuous mode [ 204.549617][ T7729] veth0_vlan: entered promiscuous mode [ 204.569304][ T7729] team0: Device veth0_vlan failed to register rx_handler [ 204.914506][ T7752] netlink: 'syz.1.619': attribute type 10 has an invalid length. [ 204.922327][ T7752] netlink: 2 bytes leftover after parsing attributes in process `syz.1.619'. [ 205.106800][ T7747] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 205.321349][ T7752] batadv_slave_1: entered promiscuous mode [ 205.339758][ T7752] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.350410][ T7752] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.360932][ T7752] bridge0: port 3(batadv_slave_1) entered blocking state [ 205.380056][ T7752] bridge0: port 3(batadv_slave_1) entered disabled state [ 205.388191][ T7752] batadv_slave_1: entered allmulticast mode [ 205.409555][ T7752] bridge0: port 3(batadv_slave_1) entered blocking state [ 205.417058][ T7752] bridge0: port 3(batadv_slave_1) entered forwarding state [ 205.436972][ T7767] FAULT_INJECTION: forcing a failure. [ 205.436972][ T7767] name failslab, interval 1, probability 0, space 0, times 0 [ 205.455863][ T7767] CPU: 0 UID: 0 PID: 7767 Comm: syz.2.621 Not tainted syzkaller #0 PREEMPT(full) [ 205.455894][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.455906][ T7767] Call Trace: [ 205.455914][ T7767] [ 205.455923][ T7767] dump_stack_lvl+0x189/0x250 [ 205.455955][ T7767] ? __pfx____ratelimit+0x10/0x10 [ 205.455983][ T7767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.456004][ T7767] ? __pfx__printk+0x10/0x10 [ 205.456035][ T7767] ? __pfx___might_resched+0x10/0x10 [ 205.456061][ T7767] should_fail_ex+0x414/0x560 [ 205.456091][ T7767] should_failslab+0xa8/0x100 [ 205.456128][ T7767] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 205.456150][ T7767] ? __get_vm_area_node+0x13f/0x300 [ 205.456167][ T7767] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 205.456194][ T7767] __get_vm_area_node+0x13f/0x300 [ 205.456222][ T7767] __vmalloc_node_range_noprof+0x301/0x12f0 [ 205.456244][ T7767] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 205.456297][ T7767] ? perf_trace_lock+0xec/0x3b0 [ 205.456325][ T7767] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.456349][ T7767] ? __might_fault+0xb0/0x130 [ 205.456387][ T7767] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 205.456420][ T7767] __vmalloc_noprof+0xb1/0xf0 [ 205.456441][ T7767] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 205.456474][ T7767] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 205.456508][ T7767] bpf_prog_alloc+0x3c/0x1a0 [ 205.456540][ T7767] bpf_prog_load+0x735/0x19e0 [ 205.456598][ T7767] ? __pfx_bpf_prog_load+0x10/0x10 [ 205.456625][ T7767] ? __pfx_perf_trace_lock+0x10/0x10 [ 205.456671][ T7767] ? bpf_lsm_bpf+0x9/0x20 [ 205.456687][ T7767] ? security_bpf+0x7e/0x300 [ 205.456714][ T7767] __sys_bpf+0x507/0x860 [ 205.456743][ T7767] ? __pfx___sys_bpf+0x10/0x10 [ 205.456790][ T7767] ? ksys_write+0x22a/0x250 [ 205.456812][ T7767] ? __pfx_ksys_write+0x10/0x10 [ 205.456828][ T7767] ? rcu_is_watching+0x15/0xb0 [ 205.456859][ T7767] __x64_sys_bpf+0x7c/0x90 [ 205.456885][ T7767] do_syscall_64+0xfa/0x3b0 [ 205.456914][ T7767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.456933][ T7767] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.456953][ T7767] ? clear_bhb_loop+0x60/0xb0 [ 205.456977][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.456996][ T7767] RIP: 0033:0x7ff846f8eec9 [ 205.457015][ T7767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.457031][ T7767] RSP: 002b:00007ff847e2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.457052][ T7767] RAX: ffffffffffffffda RBX: 00007ff8471e6180 RCX: 00007ff846f8eec9 [ 205.457072][ T7767] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 205.457083][ T7767] RBP: 00007ff847e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 205.457095][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.457111][ T7767] R13: 00007ff8471e6218 R14: 00007ff8471e6180 R15: 00007ffe162c3438 [ 205.457146][ T7767] [ 205.457413][ T7767] syz.2.621: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 205.768841][ T7775] netlink: 'syz.1.625': attribute type 23 has an invalid length. [ 205.812916][ T7767] ,cpuset=/,mems_allowed=0-1 [ 205.819456][ T7767] CPU: 1 UID: 0 PID: 7767 Comm: syz.2.621 Not tainted syzkaller #0 PREEMPT(full) [ 205.819481][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.819498][ T7767] Call Trace: [ 205.819507][ T7767] [ 205.819517][ T7767] dump_stack_lvl+0x189/0x250 [ 205.819555][ T7767] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.819580][ T7767] ? __pfx__printk+0x10/0x10 [ 205.819610][ T7767] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 205.819643][ T7767] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 205.819669][ T7767] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 205.819698][ T7767] warn_alloc+0x214/0x310 [ 205.819731][ T7767] ? __pfx_warn_alloc+0x10/0x10 [ 205.819756][ T7767] ? __get_vm_area_node+0x13f/0x300 [ 205.819781][ T7767] ? __get_vm_area_node+0x2b5/0x300 [ 205.819811][ T7767] __vmalloc_node_range_noprof+0x326/0x12f0 [ 205.819878][ T7767] ? perf_trace_lock+0xec/0x3b0 [ 205.819908][ T7767] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 205.819932][ T7767] ? __might_fault+0xb0/0x130 [ 205.819963][ T7767] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 205.819988][ T7767] __vmalloc_noprof+0xb1/0xf0 [ 205.820015][ T7767] ? bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 205.820044][ T7767] bpf_prog_alloc_no_stats+0x4a/0x4d0 [ 205.820080][ T7767] bpf_prog_alloc+0x3c/0x1a0 [ 205.820113][ T7767] bpf_prog_load+0x735/0x19e0 [ 205.820163][ T7767] ? __pfx_bpf_prog_load+0x10/0x10 [ 205.820189][ T7767] ? __pfx_perf_trace_lock+0x10/0x10 [ 205.820238][ T7767] ? bpf_lsm_bpf+0x9/0x20 [ 205.820255][ T7767] ? security_bpf+0x7e/0x300 [ 205.820284][ T7767] __sys_bpf+0x507/0x860 [ 205.820314][ T7767] ? __pfx___sys_bpf+0x10/0x10 [ 205.820365][ T7767] ? ksys_write+0x22a/0x250 [ 205.820391][ T7767] ? __pfx_ksys_write+0x10/0x10 [ 205.820405][ T7767] ? rcu_is_watching+0x15/0xb0 [ 205.820438][ T7767] __x64_sys_bpf+0x7c/0x90 [ 205.820465][ T7767] do_syscall_64+0xfa/0x3b0 [ 205.820498][ T7767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.820518][ T7767] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.820538][ T7767] ? clear_bhb_loop+0x60/0xb0 [ 205.820565][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.820584][ T7767] RIP: 0033:0x7ff846f8eec9 [ 205.820604][ T7767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.820621][ T7767] RSP: 002b:00007ff847e2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 205.820643][ T7767] RAX: ffffffffffffffda RBX: 00007ff8471e6180 RCX: 00007ff846f8eec9 [ 205.820657][ T7767] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 205.820670][ T7767] RBP: 00007ff847e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 205.820682][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.820693][ T7767] R13: 00007ff8471e6218 R14: 00007ff8471e6180 R15: 00007ffe162c3438 [ 205.820734][ T7767] [ 205.820944][ T7767] Mem-Info: [ 206.121724][ T7767] active_anon:5841 inactive_anon:0 isolated_anon:0 [ 206.121724][ T7767] active_file:3340 inactive_file:39914 isolated_file:0 [ 206.121724][ T7767] unevictable:768 dirty:342 writeback:0 [ 206.121724][ T7767] slab_reclaimable:10555 slab_unreclaimable:95684 [ 206.121724][ T7767] mapped:31447 shmem:1356 pagetables:1234 [ 206.121724][ T7767] sec_pagetables:0 bounce:0 [ 206.121724][ T7767] kernel_misc_reclaimable:0 [ 206.121724][ T7767] free:1331243 free_pcp:14855 free_cma:0 [ 206.192780][ T7767] Node 0 active_anon:23264kB inactive_anon:0kB active_file:13360kB inactive_file:159456kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119588kB dirty:1364kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11964kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.300582][ T7767] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 206.393188][ T7767] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 206.428379][ T7780] netlink: 'syz.0.626': attribute type 6 has an invalid length. [ 206.437310][ T7780] netlink: 140 bytes leftover after parsing attributes in process `syz.0.626'. [ 206.450237][ T7767] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 206.474042][ T7767] Node 0 DMA32 free:1423096kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22832kB inactive_anon:0kB active_file:13360kB inactive_file:157896kB unevictable:1536kB writepending:1416kB present:3129332kB managed:2557364kB mlocked:0kB bounce:0kB free_pcp:42104kB local_pcp:20804kB free_cma:0kB [ 206.474841][ T7780] netlink: 'syz.0.626': attribute type 1 has an invalid length. [ 206.552269][ T7767] lowmem_reserve[]: 0 0 1 1 1 [ 206.587509][ T7767] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 206.621698][ T7781] FAULT_INJECTION: forcing a failure. [ 206.621698][ T7781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.648958][ T7781] CPU: 1 UID: 0 PID: 7781 Comm: syz.4.628 Not tainted syzkaller #0 PREEMPT(full) [ 206.648988][ T7781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 206.649001][ T7781] Call Trace: [ 206.649010][ T7781] [ 206.649019][ T7781] dump_stack_lvl+0x189/0x250 [ 206.649054][ T7781] ? __pfx____ratelimit+0x10/0x10 [ 206.649081][ T7781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.649105][ T7781] ? __pfx__printk+0x10/0x10 [ 206.649138][ T7781] ? trace_call_bpf+0x5ba/0x850 [ 206.649160][ T7781] ? trace_call_bpf+0xb7/0x850 [ 206.649176][ T7781] ? __pfx_trace_call_bpf+0x10/0x10 [ 206.649198][ T7781] should_fail_ex+0x414/0x560 [ 206.649227][ T7781] strncpy_from_user+0x36/0x290 [ 206.649245][ T7781] ? perf_trace_run_bpf_submit+0x100/0x170 [ 206.649276][ T7781] strncpy_from_user_nofault+0x72/0x150 [ 206.649326][ T7781] bpf_bprintf_prepare+0xb91/0x13a0 [ 206.649354][ T7781] ? perf_trace_preemptirq_template+0x280/0x340 [ 206.649399][ T7781] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 206.649434][ T7781] ? bpf_trace_printk+0xc1/0x190 [ 206.649461][ T7781] bpf_trace_printk+0xdb/0x190 [ 206.649484][ T7781] ? __pfx_bpf_trace_printk+0x10/0x10 [ 206.649501][ T7781] ? bpf_trace_run2+0x186/0x4b0 [ 206.649530][ T7781] ? lock_acquire+0x175/0x360 [ 206.649581][ T7781] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 206.649602][ T7781] bpf_trace_run2+0x281/0x4b0 [ 206.649629][ T7781] ? bpf_trace_run2+0x186/0x4b0 [ 206.649658][ T7781] ? __pfx_bpf_trace_run2+0x10/0x10 [ 206.649693][ T7781] ? __bpf_trace_contention_begin+0xcd/0x130 [ 206.649723][ T7781] __bpf_trace_contention_begin+0xdc/0x130 [ 206.649755][ T7781] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 206.649777][ T7781] ? nl80211_pre_doit+0x281/0x930 [ 206.649807][ T7781] ? nl80211_pre_doit+0x281/0x930 [ 206.649842][ T7781] trace_contention_begin+0xf4/0x120 [ 206.649867][ T7781] __mutex_lock+0x198/0x1350 [ 206.649895][ T7781] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.649934][ T7781] ? ref_tracker_alloc+0x318/0x460 [ 206.649958][ T7781] ? nl80211_pre_doit+0x281/0x930 [ 206.649983][ T7781] ? __pfx___mutex_lock+0x10/0x10 [ 206.650006][ T7781] ? __cfg80211_wdev_from_attrs+0x6ee/0x7b0 [ 206.650037][ T7781] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 206.650064][ T7781] ? __nla_parse+0x40/0x60 [ 206.650095][ T7781] nl80211_pre_doit+0x281/0x930 [ 206.650125][ T7781] genl_family_rcv_msg_doit+0x1bb/0x300 [ 206.650159][ T7781] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 206.650199][ T7781] ? bpf_lsm_capable+0x9/0x20 [ 206.650219][ T7781] ? security_capable+0x7e/0x2e0 [ 206.650257][ T7781] genl_rcv_msg+0x60e/0x790 [ 206.650294][ T7781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.650312][ T7781] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 206.650329][ T7781] ? __pfx_nl80211_start_nan+0x10/0x10 [ 206.650355][ T7781] ? __pfx_nl80211_post_doit+0x10/0x10 [ 206.650379][ T7781] ? perf_trace_preemptirq_template+0x280/0x340 [ 206.650426][ T7781] netlink_rcv_skb+0x208/0x470 [ 206.650451][ T7781] ? __lock_acquire+0xab9/0xd20 [ 206.650482][ T7781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.650504][ T7781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.650560][ T7781] ? down_read+0x1ad/0x2e0 [ 206.650592][ T7781] genl_rcv+0x28/0x40 [ 206.650609][ T7781] netlink_unicast+0x82c/0x9e0 [ 206.650647][ T7781] ? __pfx_netlink_unicast+0x10/0x10 [ 206.650674][ T7781] ? netlink_sendmsg+0x642/0xb30 [ 206.650698][ T7781] ? skb_put+0x11b/0x210 [ 206.650733][ T7781] netlink_sendmsg+0x805/0xb30 [ 206.650780][ T7781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.650810][ T7781] ? aa_sock_msg_perm+0xf1/0x1d0 [ 206.650838][ T7781] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.650865][ T7781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.650892][ T7781] __sock_sendmsg+0x219/0x270 [ 206.650920][ T7781] ____sys_sendmsg+0x505/0x830 [ 206.650959][ T7781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.651000][ T7781] ? import_iovec+0x74/0xa0 [ 206.651038][ T7781] ___sys_sendmsg+0x21f/0x2a0 [ 206.651071][ T7781] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.651150][ T7781] ? __fget_files+0x2a/0x420 [ 206.651173][ T7781] ? __fget_files+0x3a0/0x420 [ 206.651207][ T7781] __x64_sys_sendmsg+0x19b/0x260 [ 206.651243][ T7781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.651310][ T7781] do_syscall_64+0xfa/0x3b0 [ 206.651340][ T7781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.651360][ T7781] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.651380][ T7781] ? clear_bhb_loop+0x60/0xb0 [ 206.651407][ T7781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.651427][ T7781] RIP: 0033:0x7ff1ded8eec9 [ 206.651448][ T7781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.651465][ T7781] RSP: 002b:00007ff1dfce1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.651488][ T7781] RAX: ffffffffffffffda RBX: 00007ff1defe5fa0 RCX: 00007ff1ded8eec9 [ 206.651503][ T7781] RDX: 0000000000000800 RSI: 0000200000000180 RDI: 0000000000000007 [ 206.651516][ T7781] RBP: 00007ff1dfce1090 R08: 0000000000000000 R09: 0000000000000000 [ 206.651528][ T7781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.651540][ T7781] R13: 00007ff1defe6038 R14: 00007ff1defe5fa0 R15: 00007ffc30d86de8 [ 206.651580][ T7781] [ 207.173867][ T7767] lowmem_reserve[]: 0 0 0 0 0 [ 207.183767][ T7767] Node 1 Normal free:3888100kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17792kB local_pcp:10080kB free_cma:0kB [ 207.217482][ T7767] lowmem_reserve[]: 0 0 0 0 0 [ 207.222360][ T7767] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 207.235453][ T7767] Node 0 DMA32: 529*4kB (UME) 739*8kB (UM) 421*16kB (UM) 455*32kB (UM) 211*64kB (UM) 39*128kB (UME) 26*256kB (UM) 2*512kB (UM) 8*1024kB (UM) 6*2048kB (UME) 329*4096kB (M) = 1423564kB [ 207.255301][ T7767] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 207.268925][ T7767] Node 1 Normal: 203*4kB (UME) 55*8kB (UME) 34*16kB (UME) 105*32kB (UME) 33*64kB (UME) 5*128kB (UME) 5*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (E) 946*4096kB (M) = 3888100kB [ 207.288654][ T7767] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.298466][ T7767] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.308304][ T7767] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.318010][ T7767] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.327604][ T7767] 44608 total pagecache pages [ 207.332332][ T7767] 0 pages in swap cache [ 207.336850][ T7767] Free swap = 124996kB [ 207.367656][ T7767] Total swap = 124996kB [ 207.371916][ T7767] 2097051 pages RAM [ 207.379488][ T7767] 0 pages HighMem/MovableOnly [ 207.389792][ T7767] 425684 pages reserved [ 207.397879][ T7767] 0 pages cma reserved [ 207.666136][ T7802] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 207.719757][ T7804] xt_l2tp: missing protocol rule (udp|l2tpip) [ 207.795362][ T7804] netlink: 157588 bytes leftover after parsing attributes in process `syz.0.633'. [ 208.459034][ T7816] netlink: 56 bytes leftover after parsing attributes in process `syz.4.639'. [ 208.776302][ T7823] netlink: 'syz.3.643': attribute type 6 has an invalid length. [ 208.807457][ T7823] netlink: 140 bytes leftover after parsing attributes in process `syz.3.643'. [ 208.890334][ T7829] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 209.645043][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 209.911040][ T7849] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 209.920099][ T7849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.650'. [ 210.027949][ T7853] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 210.092867][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.652'. [ 212.477329][ T7849] batman_adv: batadv0: Adding interface: virt_wifi0 [ 212.505126][ T7849] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.610696][ T7849] batman_adv: batadv0: Interface activated: virt_wifi0 [ 212.767095][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'. [ 214.006560][ T5869] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 214.441043][ T7892] netlink: 'syz.2.663': attribute type 6 has an invalid length. [ 214.475313][ T7892] netlink: 140 bytes leftover after parsing attributes in process `syz.2.663'. [ 214.557437][ T7892] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 214.679268][ T7900] netlink: 48 bytes leftover after parsing attributes in process `syz.0.666'. [ 214.785760][ T7902] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.666'. [ 214.954534][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 214.999250][ T7910] netlink: 'syz.2.668': attribute type 17 has an invalid length. [ 215.028827][ T7906] netlink: 148 bytes leftover after parsing attributes in process `syz.3.669'. [ 215.137308][ T7906] netlink: 168 bytes leftover after parsing attributes in process `syz.3.669'. [ 215.746096][ T7923] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.670'. [ 215.803808][ T7923] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 216.329646][ T7930] lo speed is unknown, defaulting to 1000 [ 216.468680][ T7942] netlink: 'syz.1.678': attribute type 6 has an invalid length. [ 216.506994][ T7942] netlink: 140 bytes leftover after parsing attributes in process `syz.1.678'. [ 216.534040][ T7942] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 217.084493][ T7952] netlink: 132 bytes leftover after parsing attributes in process `syz.4.680'. [ 218.243426][ T7977] netlink: 'syz.3.687': attribute type 23 has an invalid length. [ 218.894794][ T7990] netlink: 'syz.0.691': attribute type 23 has an invalid length. [ 219.709016][ T8003] netlink: 180 bytes leftover after parsing attributes in process `syz.2.695'. [ 220.777007][ T8000] netlink: 772 bytes leftover after parsing attributes in process `syz.2.695'. [ 222.439847][ T8052] Driver unsupported XDP return value 0 on prog (id 485) dev N/A, expect packet loss! [ 222.610345][ T8063] IPv6: NLM_F_CREATE should be specified when creating new route [ 223.084118][ T5869] Bluetooth: hci3: Malformed LE Event: 0x0d [ 223.101528][ T8075] netlink: 'syz.2.718': attribute type 16 has an invalid length. [ 223.114390][ T8075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.718'. [ 223.864085][ T8095] netlink: 'syz.1.723': attribute type 23 has an invalid length. [ 223.965696][ T8100] netlink: 'syz.3.727': attribute type 16 has an invalid length. [ 223.973606][ T8100] netlink: 132 bytes leftover after parsing attributes in process `syz.3.727'. [ 224.058647][ T8105] netlink: zone id is out of range [ 224.090885][ T8105] netlink: zone id is out of range [ 224.142039][ T8105] netlink: zone id is out of range [ 224.221177][ T8105] netlink: zone id is out of range [ 224.318645][ T8105] netlink: zone id is out of range [ 224.352919][ T8105] netlink: zone id is out of range [ 224.374307][ T8105] netlink: zone id is out of range [ 224.379525][ T8105] netlink: zone id is out of range [ 224.421706][ T8105] netlink: zone id is out of range [ 224.527913][ T8105] netlink: zone id is out of range [ 224.584081][ T8112] tap0: tun_chr_ioctl cmd 1074025675 [ 224.599773][ T8112] tap0: persist enabled [ 224.707858][ T8112] tap0: tun_chr_ioctl cmd 1074025675 [ 224.713491][ T8112] tap0: persist disabled [ 225.498282][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 225.543157][ T8124] netlink: 168 bytes leftover after parsing attributes in process `syz.0.734'. [ 226.313399][ T8140] netlink: 'syz.3.740': attribute type 6 has an invalid length. [ 226.336314][ T8140] netlink: 140 bytes leftover after parsing attributes in process `syz.3.740'. [ 226.366749][ T8140] netlink: 'syz.3.740': attribute type 1 has an invalid length. [ 226.419175][ T8142] netlink: 'syz.1.741': attribute type 23 has an invalid length. [ 228.491601][ T8186] netlink: 80 bytes leftover after parsing attributes in process `syz.2.754'. [ 229.106894][ T8190] netlink: 14 bytes leftover after parsing attributes in process `syz.1.755'. [ 229.120406][ T8193] netlink: 772 bytes leftover after parsing attributes in process `syz.2.757'. [ 229.135004][ T8193] netlink: 6068 bytes leftover after parsing attributes in process `syz.2.757'. [ 229.352038][ T8199] netlink: 148 bytes leftover after parsing attributes in process `syz.0.758'. [ 229.382090][ T8201] netlink: 'syz.3.759': attribute type 23 has an invalid length. [ 229.417253][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.758'. [ 229.442133][ T8199] net_ratelimit: 227 callbacks suppressed [ 229.442198][ T8199] openvswitch: netlink: Flow actions attr not present in new flow. [ 229.509494][ T8199] netlink: 168 bytes leftover after parsing attributes in process `syz.0.758'. [ 229.604246][ T5877] Bluetooth: hci2: command 0x0406 tx timeout [ 229.619414][ T5185] Bluetooth: hci1: command 0x0406 tx timeout [ 229.619498][ T5883] Bluetooth: hci0: command 0x0406 tx timeout [ 229.634234][ T5883] Bluetooth: hci3: command 0x0406 tx timeout [ 229.637147][ T5877] Bluetooth: hci4: command 0x0406 tx timeout [ 229.949170][ T8190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.711741][ T8190] bond0 (unregistering): Released all slaves [ 231.271052][ T8213] netlink: 'syz.1.763': attribute type 6 has an invalid length. [ 231.295826][ T8213] __nla_validate_parse: 1 callbacks suppressed [ 231.295850][ T8213] netlink: 140 bytes leftover after parsing attributes in process `syz.1.763'. [ 231.315837][ T8213] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 231.403164][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.762'. [ 231.446609][ T8211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.506216][ T8211] netlink: 168 bytes leftover after parsing attributes in process `syz.0.762'. [ 232.018207][ T8235] netlink: 188 bytes leftover after parsing attributes in process `syz.4.769'. [ 232.244514][ T8238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.769'. [ 232.486929][ T8247] netlink: 132 bytes leftover after parsing attributes in process `syz.3.772'. [ 232.578895][ T8249] netlink: 148 bytes leftover after parsing attributes in process `syz.4.773'. [ 232.608878][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 232.630953][ T8249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.663411][ T8252] netlink: 168 bytes leftover after parsing attributes in process `syz.4.773'. [ 232.763600][ T8251] netlink: 80 bytes leftover after parsing attributes in process `syz.2.774'. [ 232.822447][ T8254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.930510][ T8259] netlink: 'syz.4.777': attribute type 6 has an invalid length. [ 232.952979][ T8259] netlink: 'syz.4.777': attribute type 1 has an invalid length. [ 233.163628][ T8267] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.412683][ T8276] netlink: 'syz.2.783': attribute type 23 has an invalid length. [ 234.654355][ T8297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.917301][ T8300] tap0: tun_chr_ioctl cmd 2148553947 [ 235.937541][ T8319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.958367][ T8321] netlink: 'syz.1.795': attribute type 6 has an invalid length. [ 235.993030][ T8321] netlink: 'syz.1.795': attribute type 1 has an invalid length. [ 236.665959][ T8340] __nla_validate_parse: 13 callbacks suppressed [ 236.666007][ T8340] netlink: 148 bytes leftover after parsing attributes in process `syz.0.801'. [ 236.751284][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.801'. [ 236.781222][ T8340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.844113][ T8340] netlink: 168 bytes leftover after parsing attributes in process `syz.0.801'. [ 236.951601][ T8351] netlink: 'syz.2.805': attribute type 23 has an invalid length. [ 236.974595][ T8351] netlink: 'syz.2.805': attribute type 6 has an invalid length. [ 237.047840][ T8356] netlink: 104 bytes leftover after parsing attributes in process `syz.4.807'. [ 237.273634][ T8363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 237.300354][ T8363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.390121][ T8363] netlink: 168 bytes leftover after parsing attributes in process `syz.2.810'. [ 238.183643][ T8379] netlink: 'syz.0.814': attribute type 6 has an invalid length. [ 238.211904][ T8379] netlink: 140 bytes leftover after parsing attributes in process `syz.0.814'. [ 238.256895][ T8379] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 238.347932][ T8387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.359694][ T8387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.040825][ T8397] netlink: 'syz.3.821': attribute type 6 has an invalid length. [ 239.077010][ T8397] netlink: 168 bytes leftover after parsing attributes in process `syz.3.821'. [ 239.249670][ T8400] ±ÿ: renamed from team_slave_1 (while UP) [ 239.819077][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.827'. [ 239.856619][ T8420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.892511][ T8420] netlink: 168 bytes leftover after parsing attributes in process `syz.1.827'. [ 240.370341][ T8432] netlink: 'syz.3.830': attribute type 6 has an invalid length. [ 240.384565][ T8431] netlink: 'syz.1.829': attribute type 10 has an invalid length. [ 240.406718][ T8432] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 241.833659][ T8465] __nla_validate_parse: 4 callbacks suppressed [ 241.840324][ T8465] netlink: 28 bytes leftover after parsing attributes in process `syz.4.839'. [ 242.188824][ T8452] syzkaller0: entered promiscuous mode [ 242.195334][ T8452] syzkaller0: entered allmulticast mode [ 242.626343][ T8473] netlink: 'syz.0.844': attribute type 10 has an invalid length. [ 242.636773][ T8473] netlink: 2 bytes leftover after parsing attributes in process `syz.0.844'. [ 242.734624][ T8475] netlink: 'syz.1.845': attribute type 6 has an invalid length. [ 242.750445][ T8475] netlink: 140 bytes leftover after parsing attributes in process `syz.1.845'. [ 242.804631][ T8476] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 244.849499][ T8479] netlink: 80 bytes leftover after parsing attributes in process `syz.1.846'. [ 244.944702][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 244.954148][ T8486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 245.172569][ T8497] netlink: 'syz.2.853': attribute type 21 has an invalid length. [ 245.188497][ T8497] netlink: 'syz.2.853': attribute type 10 has an invalid length. [ 245.539247][ T8497] team0 (unregistering): Port device team_slave_0 removed [ 245.580558][ T8497] team0 (unregistering): Port device team_slave_1 removed [ 245.798730][ T8518] netlink: 'syz.4.857': attribute type 6 has an invalid length. [ 245.821460][ T8518] netlink: 140 bytes leftover after parsing attributes in process `syz.4.857'. [ 245.889834][ T8518] netlink: 'syz.4.857': attribute type 1 has an invalid length. [ 245.953810][ T8521] netlink: 'syz.2.858': attribute type 23 has an invalid length. [ 245.976962][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.860'. [ 246.008415][ T8523] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 246.052763][ T8523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.112044][ T8526] netlink: 'syz.0.859': attribute type 10 has an invalid length. [ 246.141606][ T8526] netlink: 2 bytes leftover after parsing attributes in process `syz.0.859'. [ 246.159446][ T8523] netlink: 168 bytes leftover after parsing attributes in process `syz.3.860'. [ 247.448463][ T8549] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.868'. [ 247.548752][ T8549] netlink: 2740 bytes leftover after parsing attributes in process `syz.4.868'. [ 247.760948][ T8558] netlink: 'syz.0.872': attribute type 23 has an invalid length. [ 247.795103][ T8559] netlink: 'syz.3.871': attribute type 6 has an invalid length. [ 247.802844][ T8559] netlink: 140 bytes leftover after parsing attributes in process `syz.3.871'. [ 247.896232][ T8559] netlink: 'syz.3.871': attribute type 1 has an invalid length. [ 248.334257][ T8568] netlink: 'syz.0.874': attribute type 10 has an invalid length. [ 248.342156][ T8568] netlink: 2 bytes leftover after parsing attributes in process `syz.0.874'. [ 248.589621][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'. [ 248.648077][ T8570] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 248.667923][ T8570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.748598][ T8579] netlink: 168 bytes leftover after parsing attributes in process `syz.2.875'. [ 248.818613][ T8582] -1: renamed from syzkaller0 [ 249.087609][ T8587] netlink: 80 bytes leftover after parsing attributes in process `syz.4.882'. [ 249.168857][ T8593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.880'. [ 249.712178][ T8599] netlink: 'syz.3.884': attribute type 23 has an invalid length. [ 250.209513][ T8616] netlink: 'syz.1.891': attribute type 10 has an invalid length. [ 250.283865][ T8616] netlink: 2 bytes leftover after parsing attributes in process `syz.1.891'. [ 251.157355][ T8631] netlink: 80 bytes leftover after parsing attributes in process `syz.1.896'. [ 251.972913][ T8650] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 252.162786][ T8652] netlink: 'syz.4.906': attribute type 3 has an invalid length. [ 252.280050][ T8652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.452844][ T8659] xt_l2tp: v2 sid > 0xffff: 1114112 [ 252.698909][ T8665] __nla_validate_parse: 2 callbacks suppressed [ 252.698952][ T8665] netlink: 80 bytes leftover after parsing attributes in process `syz.4.911'. [ 253.461188][ T8679] netlink: 14 bytes leftover after parsing attributes in process `syz.3.914'. [ 253.802518][ T8684] netlink: 'syz.4.916': attribute type 19 has an invalid length. [ 253.827574][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 254.179373][ T8681] netlink: 32 bytes leftover after parsing attributes in process `syz.0.917'. [ 254.190188][ T8691] netlink: 'syz.2.918': attribute type 10 has an invalid length. [ 254.198127][ T8691] netlink: 2 bytes leftover after parsing attributes in process `syz.2.918'. [ 254.339426][ T8679] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.387898][ T8679] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.442757][ T8679] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 254.554374][ T8679] bond0 (unregistering): Released all slaves [ 254.990324][ T8706] netlink: 80 bytes leftover after parsing attributes in process `syz.0.922'. [ 255.019857][ T8691] batadv_slave_1: entered promiscuous mode [ 255.042482][ T8691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.082870][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.120642][ T8691] bridge0: port 3(batadv_slave_1) entered blocking state [ 255.150610][ T8691] bridge0: port 3(batadv_slave_1) entered disabled state [ 255.164752][ T8691] batadv_slave_1: entered allmulticast mode [ 255.175526][ T8691] bridge0: port 3(batadv_slave_1) entered blocking state [ 255.182794][ T8691] bridge0: port 3(batadv_slave_1) entered forwarding state [ 255.208731][ T8709] netlink: 'syz.3.923': attribute type 2 has an invalid length. [ 255.231284][ T8702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.233217][ T8709] netlink: 132 bytes leftover after parsing attributes in process `syz.3.923'. [ 255.244638][ T8702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.548727][ T8717] netlink: 'syz.2.926': attribute type 27 has an invalid length. [ 255.770362][ T8729] netlink: 'syz.3.932': attribute type 27 has an invalid length. [ 255.833277][ T8731] netlink: 'syz.1.934': attribute type 10 has an invalid length. [ 255.834290][ T8722] raw_sendmsg: syz.0.929 forgot to set AF_INET. Fix it! [ 255.841517][ T8731] netlink: 2 bytes leftover after parsing attributes in process `syz.1.934'. [ 255.945319][ T8736] FAULT_INJECTION: forcing a failure. [ 255.945319][ T8736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.973071][ T8736] CPU: 1 UID: 0 PID: 8736 Comm: syz.4.933 Not tainted syzkaller #0 PREEMPT(full) [ 255.973105][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.973119][ T8736] Call Trace: [ 255.973128][ T8736] [ 255.973139][ T8736] dump_stack_lvl+0x189/0x250 [ 255.973180][ T8736] ? __pfx____ratelimit+0x10/0x10 [ 255.973213][ T8736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.973238][ T8736] ? __pfx__printk+0x10/0x10 [ 255.973272][ T8736] ? __might_fault+0xb0/0x130 [ 255.973305][ T8736] should_fail_ex+0x414/0x560 [ 255.973339][ T8736] _copy_from_user+0x2d/0xb0 [ 255.973360][ T8736] ___sys_sendmsg+0x158/0x2a0 [ 255.973399][ T8736] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.973468][ T8736] ? __fget_files+0x2a/0x420 [ 255.973492][ T8736] ? __fget_files+0x3a0/0x420 [ 255.973525][ T8736] __x64_sys_sendmsg+0x19b/0x260 [ 255.973560][ T8736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.973600][ T8736] ? __pfx_ksys_write+0x10/0x10 [ 255.973626][ T8736] ? do_syscall_64+0xbe/0x3b0 [ 255.973663][ T8736] do_syscall_64+0xfa/0x3b0 [ 255.973691][ T8736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.973710][ T8736] ? asm_sysvec_call_function_single+0x1a/0x20 [ 255.973730][ T8736] ? clear_bhb_loop+0x60/0xb0 [ 255.973755][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.973775][ T8736] RIP: 0033:0x7ff1ded8eec9 [ 255.973795][ T8736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.973813][ T8736] RSP: 002b:00007ff1dfce1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.973836][ T8736] RAX: ffffffffffffffda RBX: 00007ff1defe5fa0 RCX: 00007ff1ded8eec9 [ 255.973851][ T8736] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 255.973864][ T8736] RBP: 00007ff1dfce1090 R08: 0000000000000000 R09: 0000000000000000 [ 255.973877][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.973888][ T8736] R13: 00007ff1defe6038 R14: 00007ff1defe5fa0 R15: 00007ffc30d86de8 [ 255.973922][ T8736] [ 256.464544][ T8742] netlink: 'syz.3.937': attribute type 21 has an invalid length. [ 256.494900][ T8721] delete_channel: no stack [ 256.587465][ T8742] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 256.640533][ T8742] netlink: 144 bytes leftover after parsing attributes in process `syz.3.937'. [ 256.722552][ T8742] netlink: 'syz.3.937': attribute type 19 has an invalid length. [ 256.731436][ T8742] netlink: 40 bytes leftover after parsing attributes in process `syz.3.937'. [ 257.198323][ T8768] netlink: 'syz.4.946': attribute type 10 has an invalid length. [ 258.306455][ T8771] delete_channel: no stack [ 258.449580][ T8792] veth0_vlan: left promiscuous mode [ 258.472379][ T8792] veth0_vlan: entered promiscuous mode [ 258.537245][ T8792] team0: Device veth0_vlan failed to register rx_handler [ 258.727659][ T8798] __nla_validate_parse: 1 callbacks suppressed [ 258.727683][ T8798] netlink: 2 bytes leftover after parsing attributes in process `syz.3.958'. [ 258.759152][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'. [ 258.851702][ T8793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.894586][ T8793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.948840][ T8793] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 258.982751][ T8793] batman_adv: batadv0: Removing interface: virt_wifi0 [ 259.278473][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.960'. [ 259.328459][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.959'. [ 259.364014][ T8803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.959'. [ 259.748934][ T8819] netlink: 12 bytes leftover after parsing attributes in process `syz.2.965'. [ 260.584929][ T8834] validate_nla: 2 callbacks suppressed [ 260.584956][ T8834] netlink: 'syz.4.970': attribute type 10 has an invalid length. [ 260.671678][ T8834] netlink: 2 bytes leftover after parsing attributes in process `syz.4.970'. [ 260.948425][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.973'. [ 261.091834][ T8826] delete_channel: no stack [ 261.851191][ T8860] netlink: 'syz.2.976': attribute type 7 has an invalid length. [ 261.859392][ T8860] netlink: 'syz.2.976': attribute type 6 has an invalid length. [ 262.446819][ T8881] netlink: 'syz.3.983': attribute type 6 has an invalid length. [ 262.455848][ T8881] netlink: 140 bytes leftover after parsing attributes in process `syz.3.983'. [ 262.468771][ T8881] netlink: 'syz.3.983': attribute type 1 has an invalid length. [ 263.372598][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.379048][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.248642][ T8890] netlink: 'syz.4.984': attribute type 10 has an invalid length. [ 265.284754][ T8890] netlink: 2 bytes leftover after parsing attributes in process `syz.4.984'. [ 265.442329][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 266.202316][ T8893] delete_channel: no stack [ 267.132332][ T8918] netlink: 'syz.4.995': attribute type 6 has an invalid length. [ 267.173267][ T8918] netlink: 140 bytes leftover after parsing attributes in process `syz.4.995'. [ 267.269856][ T8918] netlink: 'syz.4.995': attribute type 1 has an invalid length. [ 267.608628][ T8928] netlink: 'syz.3.998': attribute type 10 has an invalid length. [ 267.624014][ T8928] netlink: 2 bytes leftover after parsing attributes in process `syz.3.998'. [ 267.670189][ T8925] netlink: 'syz.2.997': attribute type 4 has an invalid length. [ 267.711281][ T8925] netlink: 'syz.2.997': attribute type 4 has an invalid length. [ 267.731631][ T8925] netlink: 199756 bytes leftover after parsing attributes in process `syz.2.997'. [ 268.004077][ T8920] lo speed is unknown, defaulting to 1000 [ 269.219821][ T8948] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1004'. [ 269.286857][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1004'. [ 269.334600][ T8948] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 269.387828][ T8948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.429823][ T8953] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1004'. [ 269.870607][ T8971] netlink: 'syz.0.1009': attribute type 6 has an invalid length. [ 269.881828][ T8971] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1009'. [ 269.894983][ T8971] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 269.991238][ T8949] delete_channel: no stack [ 270.077726][ T8974] wg2: entered promiscuous mode [ 270.082712][ T8974] wg2: entered allmulticast mode [ 270.247319][ T8973] netlink: 'syz.1.1010': attribute type 10 has an invalid length. [ 270.268766][ T8973] veth1_macvtap: left promiscuous mode [ 270.579859][ T8986] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 270.819659][ T8993] FAULT_INJECTION: forcing a failure. [ 270.819659][ T8993] name failslab, interval 1, probability 0, space 0, times 0 [ 270.838960][ T8993] CPU: 1 UID: 0 PID: 8993 Comm: syz.3.1018 Not tainted syzkaller #0 PREEMPT(full) [ 270.838994][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.839007][ T8993] Call Trace: [ 270.839018][ T8993] [ 270.839028][ T8993] dump_stack_lvl+0x189/0x250 [ 270.839076][ T8993] ? __pfx____ratelimit+0x10/0x10 [ 270.839105][ T8993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.839130][ T8993] ? __pfx__printk+0x10/0x10 [ 270.839167][ T8993] ? __pfx___might_resched+0x10/0x10 [ 270.839189][ T8993] ? fs_reclaim_acquire+0x7d/0x100 [ 270.839220][ T8993] should_fail_ex+0x414/0x560 [ 270.839252][ T8993] should_failslab+0xa8/0x100 [ 270.839278][ T8993] kmem_cache_alloc_noprof+0x73/0x3c0 [ 270.839310][ T8993] ? __pmd_alloc+0xc6/0x3b0 [ 270.839358][ T8993] __pmd_alloc+0xc6/0x3b0 [ 270.839394][ T8993] __handle_mm_fault+0x9ad/0x5440 [ 270.839447][ T8993] ? __pfx___handle_mm_fault+0x10/0x10 [ 270.839504][ T8993] ? find_vma+0xe7/0x160 [ 270.839522][ T8993] ? __pfx_find_vma+0x10/0x10 [ 270.839551][ T8993] handle_mm_fault+0x40a/0x8e0 [ 270.839608][ T8993] do_user_addr_fault+0x764/0x1390 [ 270.839665][ T8993] exc_page_fault+0x76/0xf0 [ 270.839690][ T8993] ? __might_fault+0xb0/0x130 [ 270.839711][ T8993] asm_exc_page_fault+0x26/0x30 [ 270.839733][ T8993] RIP: 0010:__put_user_4+0xd/0x20 [ 270.839760][ T8993] Code: 66 89 01 31 c9 0f 01 ca e9 50 45 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 270.839776][ T8993] RSP: 0018:ffffc9001aaefe50 EFLAGS: 00050202 [ 270.839796][ T8993] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000200000000080 [ 270.839809][ T8993] RDX: 0000000000000000 RSI: ffffffff8dbaa5db RDI: ffffffff8be34480 [ 270.839823][ T8993] RBP: 0000000000000004 R08: 0000000000000000 R09: ffffffff820c4960 [ 270.839835][ T8993] R10: dffffc0000000000 R11: ffffed1005d87cc9 R12: 0000000000000000 [ 270.839849][ T8993] R13: 0000200000000080 R14: 0000000000000022 R15: 0000000000000002 [ 270.839869][ T8993] ? __might_fault+0xb0/0x130 [ 270.839901][ T8993] __sys_socketpair+0xb7/0x560 [ 270.839939][ T8993] __x64_sys_socketpair+0x9b/0xb0 [ 270.839967][ T8993] do_syscall_64+0xfa/0x3b0 [ 270.839992][ T8993] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.840035][ T8993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.840058][ T8993] ? clear_bhb_loop+0x60/0xb0 [ 270.840085][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.840105][ T8993] RIP: 0033:0x7fb0d238eec9 [ 270.840124][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.840142][ T8993] RSP: 002b:00007fb0d05f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 270.840162][ T8993] RAX: ffffffffffffffda RBX: 00007fb0d25e5fa0 RCX: 00007fb0d238eec9 [ 270.840177][ T8993] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000022 [ 270.840209][ T8993] RBP: 00007fb0d05f6090 R08: 0000000000000000 R09: 0000000000000000 [ 270.840221][ T8993] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 270.840234][ T8993] R13: 00007fb0d25e6038 R14: 00007fb0d25e5fa0 R15: 00007ffe3a384f18 [ 270.840292][ T8993] [ 271.221904][ T8998] netlink: 'syz.3.1019': attribute type 21 has an invalid length. [ 271.231698][ T8998] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1019'. [ 271.247336][ T8998] netlink: 'syz.3.1019': attribute type 5 has an invalid length. [ 271.255292][ T8998] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1019'. [ 271.458447][ T9002] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1020'. [ 271.520320][ T9006] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1021'. [ 272.123613][ T9022] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1029'. [ 272.221872][ T9026] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1030'. [ 272.328032][ T9003] delete_channel: no stack [ 273.359005][ T9047] validate_nla: 3 callbacks suppressed [ 273.359032][ T9047] netlink: 'syz.0.1036': attribute type 6 has an invalid length. [ 273.396003][ T9047] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1036'. [ 273.478941][ T9053] netlink: 'syz.0.1036': attribute type 1 has an invalid length. [ 273.883159][ T9060] netlink: 'syz.1.1035': attribute type 1 has an invalid length. [ 273.929866][ T9060] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1035'. [ 274.442219][ T9067] C: renamed from team_slave_0 [ 274.451634][ T9067] netlink: 'syz.2.1040': attribute type 2 has an invalid length. [ 274.465052][ T9067] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1040'. [ 274.480806][ T9067] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 274.590059][ T9063] netlink: 'syz.3.1038': attribute type 6 has an invalid length. [ 274.598829][ T9068] netlink: 'syz.4.1039': attribute type 75 has an invalid length. [ 274.626671][ T9072] netlink: 'syz.1.1041': attribute type 4 has an invalid length. [ 274.638728][ T9072] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1041'. [ 274.688754][ T9076] : entered promiscuous mode [ 274.745010][ T9072] netlink: 'syz.1.1041': attribute type 3 has an invalid length. [ 274.752875][ T9072] netlink: 'syz.1.1041': attribute type 2 has an invalid length. [ 274.956151][ T9076] netlink: 'syz.2.1043': attribute type 2 has an invalid length. [ 275.345711][ T9082] syzkaller0: entered promiscuous mode [ 275.351818][ T9082] syzkaller0: entered allmulticast mode [ 275.451273][ T9073] delete_channel: no stack [ 276.301884][ T9107] __nla_validate_parse: 5 callbacks suppressed [ 276.301956][ T9107] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1051'. [ 276.335156][ T9107] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1051'. [ 276.513163][ T9110] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1052'. [ 276.598605][ T9114] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1054'. [ 276.618810][ T9098] syz.1.1049 (9098) used greatest stack depth: 15408 bytes left [ 276.628202][ T9114] team_slave_0: entered allmulticast mode [ 276.635385][ T9114] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 276.653555][ T9114] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1054'. [ 276.855888][ T9126] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 276.862798][ T9126] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 276.995509][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1058'. [ 278.122449][ T9136] delete_channel: no stack [ 278.572527][ T9151] validate_nla: 3 callbacks suppressed [ 278.572568][ T9151] netlink: 'syz.2.1065': attribute type 4 has an invalid length. [ 278.580836][ T9154] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 278.594118][ T9151] netlink: 'syz.2.1065': attribute type 4 has an invalid length. [ 278.594270][ T9151] netlink: 199756 bytes leftover after parsing attributes in process `syz.2.1065'. [ 278.949967][ T9161] netlink: 'syz.1.1068': attribute type 6 has an invalid length. [ 278.972888][ T9161] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1068'. [ 278.998640][ T9161] netlink: 'syz.1.1068': attribute type 1 has an invalid length. [ 281.232244][ T9180] delete_channel: no stack [ 281.643632][ T9185] netlink: 'syz.2.1074': attribute type 46 has an invalid length. [ 282.089677][ T9206] netlink: 'syz.3.1081': attribute type 6 has an invalid length. [ 282.120441][ T9206] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1081'. [ 282.162182][ T9209] netlink: 'syz.3.1081': attribute type 1 has an invalid length. [ 282.175982][ T9208] openvswitch: netlink: IP tunnel dst address not specified [ 282.268954][ T9210] delete_channel: no stack [ 283.534387][ T9256] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 283.569117][ T9253] netlink: 'syz.0.1098': attribute type 6 has an invalid length. [ 283.579894][ T9249] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 283.608881][ T9253] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1098'. [ 283.647351][ T9253] netlink: 'syz.0.1098': attribute type 1 has an invalid length. [ 283.683604][ T9264] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1102'. [ 285.920481][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 285.936553][ T9299] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 285.959440][ T9299] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.202067][ T9304] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1114'. [ 286.322738][ T9310] netlink: 'syz.1.1116': attribute type 4 has an invalid length. [ 286.332045][ T9310] netlink: 'syz.1.1116': attribute type 4 has an invalid length. [ 286.342564][ T9310] netlink: 199756 bytes leftover after parsing attributes in process `syz.1.1116'. [ 286.389973][ T9292] delete_channel: no stack [ 286.572634][ T9315] netlink: 'syz.4.1118': attribute type 3 has an invalid length. [ 286.608899][ T9315] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1118'. [ 286.681874][ T9315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.761499][ T9316] syzkaller0: entered promiscuous mode [ 286.767986][ T9316] syzkaller0: entered allmulticast mode [ 286.848763][ T9321] netlink: 'syz.2.1120': attribute type 11 has an invalid length. [ 286.857550][ T9321] netlink: 149476 bytes leftover after parsing attributes in process `syz.2.1120'. [ 287.252472][ T9319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.605766][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 287.642905][ T9336] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 287.657478][ T9336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 287.796422][ T9342] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1128'. [ 287.826658][ T9343] netlink: 'syz.1.1129': attribute type 4 has an invalid length. [ 287.876534][ T9343] netlink: 'syz.1.1129': attribute type 4 has an invalid length. [ 287.909042][ T9343] netlink: 199756 bytes leftover after parsing attributes in process `syz.1.1129'. [ 288.021015][ T9348] netlink: 'syz.4.1131': attribute type 19 has an invalid length. [ 288.132376][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1133'. [ 288.485214][ T9359] netlink: 'syz.4.1134': attribute type 3 has an invalid length. [ 288.494875][ T9359] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1134'. [ 288.538477][ T9359] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.790327][ T9345] delete_channel: no stack [ 289.304978][ T9370] syzkaller0: entered promiscuous mode [ 289.311223][ T9370] syzkaller0: entered allmulticast mode [ 289.727740][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 289.738599][ T9383] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 289.760051][ T9383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.999410][ T9387] netlink: 'syz.0.1144': attribute type 19 has an invalid length. [ 290.096175][ T9390] netlink: 'syz.2.1146': attribute type 4 has an invalid length. [ 290.117341][ T9390] netlink: 'syz.2.1146': attribute type 4 has an invalid length. [ 290.126291][ T9393] netlink: 'syz.4.1147': attribute type 3 has an invalid length. [ 290.132559][ T9390] netlink: 199756 bytes leftover after parsing attributes in process `syz.2.1146'. [ 290.146208][ T9393] netlink: 13435 bytes leftover after parsing attributes in process `syz.4.1147'. [ 290.166198][ T9393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.968926][ T9395] delete_channel: no stack [ 290.975066][ T9396] delete_channel: no stack [ 292.199492][ T9429] syzkaller0: entered promiscuous mode [ 292.216285][ T9429] syzkaller0: entered allmulticast mode [ 292.318209][ T9434] netlink: 'syz.0.1160': attribute type 19 has an invalid length. [ 292.769462][ T9452] netlink: 'syz.1.1165': attribute type 4 has an invalid length. [ 292.777780][ T9452] netlink: 'syz.1.1165': attribute type 4 has an invalid length. [ 292.794617][ T9452] netlink: 199756 bytes leftover after parsing attributes in process `syz.1.1165'. [ 293.185680][ T9458] syzkaller0: entered promiscuous mode [ 293.199767][ T9458] syzkaller0: entered allmulticast mode [ 294.335291][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 294.518914][ T9488] syzkaller0: entered promiscuous mode [ 294.525841][ T9488] syzkaller0: entered allmulticast mode [ 296.470685][ T9525] FAULT_INJECTION: forcing a failure. [ 296.470685][ T9525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.518195][ T9525] CPU: 1 UID: 0 PID: 9525 Comm: syz.1.1189 Not tainted syzkaller #0 PREEMPT(full) [ 296.518228][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 296.518242][ T9525] Call Trace: [ 296.518256][ T9525] [ 296.518270][ T9525] dump_stack_lvl+0x189/0x250 [ 296.518315][ T9525] ? __pfx____ratelimit+0x10/0x10 [ 296.518359][ T9525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.518396][ T9525] ? __pfx__printk+0x10/0x10 [ 296.518442][ T9525] ? __might_fault+0xb0/0x130 [ 296.518497][ T9525] ? __might_fault+0xb0/0x130 [ 296.518560][ T9525] should_fail_ex+0x414/0x560 [ 296.518627][ T9525] _copy_from_user+0x2d/0xb0 [ 296.518663][ T9525] ____sys_sendmsg+0x2fe/0x830 [ 296.518743][ T9525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.518840][ T9525] ? import_iovec+0x74/0xa0 [ 296.518908][ T9525] ___sys_sendmsg+0x21f/0x2a0 [ 296.518978][ T9525] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.519143][ T9525] ? __fget_files+0x2a/0x420 [ 296.519262][ T9525] ? __fget_files+0x2a/0x420 [ 296.519293][ T9525] ? __fget_files+0x3a0/0x420 [ 296.519398][ T9525] __x64_sys_sendmsg+0x19b/0x260 [ 296.519458][ T9525] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 296.519559][ T9525] ? __pfx_ksys_write+0x10/0x10 [ 296.519576][ T9525] ? rcu_is_watching+0x15/0xb0 [ 296.519640][ T9525] ? do_syscall_64+0xbe/0x3b0 [ 296.519699][ T9525] do_syscall_64+0xfa/0x3b0 [ 296.519738][ T9525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.519758][ T9525] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.519778][ T9525] ? clear_bhb_loop+0x60/0xb0 [ 296.519821][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.519844][ T9525] RIP: 0033:0x7f3ba498eec9 [ 296.519872][ T9525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.519891][ T9525] RSP: 002b:00007f3ba577b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.519915][ T9525] RAX: ffffffffffffffda RBX: 00007f3ba4be5fa0 RCX: 00007f3ba498eec9 [ 296.519930][ T9525] RDX: 0000000000040010 RSI: 0000200000000300 RDI: 0000000000000004 [ 296.519943][ T9525] RBP: 00007f3ba577b090 R08: 0000000000000000 R09: 0000000000000000 [ 296.519956][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.519969][ T9525] R13: 00007f3ba4be6038 R14: 00007f3ba4be5fa0 R15: 00007ffdcbd48098 [ 296.520081][ T9525] [ 297.501364][ T9539] netlink: 'syz.1.1194': attribute type 10 has an invalid length. [ 298.286324][ T9558] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1200'. [ 298.739187][ T9583] netlink: 'syz.4.1210': attribute type 6 has an invalid length. [ 298.744269][ T9579] netlink: 'syz.0.1209': attribute type 6 has an invalid length. [ 298.757440][ T9583] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1210'. [ 298.770533][ T9579] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1209'. [ 298.787359][ T9583] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 298.807583][ T9579] netlink: 'syz.0.1209': attribute type 1 has an invalid length. [ 300.051387][ T9619] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1223'. [ 300.084599][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1221'. [ 300.094046][ T9618] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1221'. [ 300.125136][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 300.145724][ T9619] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 300.153408][ T9619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.366822][ T9627] netlink: 'syz.1.1227': attribute type 6 has an invalid length. [ 300.398994][ T9627] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1227'. [ 300.472010][ T9632] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 300.650426][ T9634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1230'. [ 300.774261][ T9625] lo speed is unknown, defaulting to 1000 [ 301.564694][ T9654] openvswitch: netlink: Unknown key attributes 1 [ 302.046017][ T9661] lo speed is unknown, defaulting to 1000 [ 302.079303][ T9669] netlink: 'syz.2.1241': attribute type 6 has an invalid length. [ 302.103988][ T9669] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1241'. [ 302.135103][ T9670] netlink: 'syz.2.1241': attribute type 1 has an invalid length. [ 302.766352][ T9680] netlink: 'syz.1.1244': attribute type 75 has an invalid length. [ 303.871770][ T9713] netlink: 'syz.0.1255': attribute type 4 has an invalid length. [ 303.881185][ T9713] netlink: 'syz.0.1255': attribute type 4 has an invalid length. [ 303.890542][ T9713] __nla_validate_parse: 1 callbacks suppressed [ 303.890575][ T9713] netlink: 199756 bytes leftover after parsing attributes in process `syz.0.1255'. [ 304.015983][ T9693] delete_channel: no stack [ 304.107722][ T9721] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 304.137725][ T9721] netlink: 'syz.2.1258': attribute type 2 has an invalid length. [ 304.410038][ T9731] FAULT_INJECTION: forcing a failure. [ 304.410038][ T9731] name failslab, interval 1, probability 0, space 0, times 0 [ 304.423075][ T9731] CPU: 0 UID: 0 PID: 9731 Comm: syz.1.1262 Not tainted syzkaller #0 PREEMPT(full) [ 304.423104][ T9731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 304.423118][ T9731] Call Trace: [ 304.423132][ T9731] [ 304.423145][ T9731] dump_stack_lvl+0x189/0x250 [ 304.423201][ T9731] ? __pfx____ratelimit+0x10/0x10 [ 304.423242][ T9731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.423280][ T9731] ? __pfx__printk+0x10/0x10 [ 304.423397][ T9731] should_fail_ex+0x414/0x560 [ 304.423483][ T9731] should_failslab+0xa8/0x100 [ 304.423526][ T9731] kmem_cache_alloc_noprof+0x73/0x3c0 [ 304.423563][ T9731] ? radix_tree_node_alloc+0x7e/0x3a0 [ 304.423623][ T9731] radix_tree_node_alloc+0x7e/0x3a0 [ 304.423698][ T9731] idr_get_free+0x2b3/0xa70 [ 304.423810][ T9731] idr_alloc_u32+0x159/0x2d0 [ 304.423882][ T9731] ? __pfx_idr_alloc_u32+0x10/0x10 [ 304.423939][ T9731] ? do_raw_spin_lock+0x121/0x290 [ 304.424021][ T9731] idr_alloc_cyclic+0x9b/0x1b0 [ 304.424112][ T9731] bpf_link_prime+0x6b/0x220 [ 304.424169][ T9731] bpf_raw_tp_link_attach+0x49a/0x6c0 [ 304.424239][ T9731] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 304.424345][ T9731] ? __fget_files+0x2a/0x420 [ 304.424443][ T9731] bpf_raw_tracepoint_open+0x1b2/0x220 [ 304.424503][ T9731] __sys_bpf+0x73e/0x860 [ 304.424558][ T9731] ? __pfx___sys_bpf+0x10/0x10 [ 304.424689][ T9731] ? do_syscall_64+0xb7/0x3b0 [ 304.424716][ T9731] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 304.424767][ T9731] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 304.424809][ T9731] ? __pfx_ksys_write+0x10/0x10 [ 304.424827][ T9731] ? rcu_is_watching+0x15/0xb0 [ 304.424905][ T9731] __x64_sys_bpf+0x7c/0x90 [ 304.424949][ T9731] do_syscall_64+0xfa/0x3b0 [ 304.424976][ T9731] ? lockdep_hardirqs_on+0x9c/0x150 [ 304.425010][ T9731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.425035][ T9731] ? clear_bhb_loop+0x60/0xb0 [ 304.425085][ T9731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.425116][ T9731] RIP: 0033:0x7f3ba498eec9 [ 304.425145][ T9731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.425164][ T9731] RSP: 002b:00007f3ba577b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.425188][ T9731] RAX: ffffffffffffffda RBX: 00007f3ba4be5fa0 RCX: 00007f3ba498eec9 [ 304.425202][ T9731] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000011 [ 304.425216][ T9731] RBP: 00007f3ba577b090 R08: 0000000000000000 R09: 0000000000000000 [ 304.425228][ T9731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.425240][ T9731] R13: 00007f3ba4be6038 R14: 00007f3ba4be5fa0 R15: 00007ffdcbd48098 [ 304.425359][ T9731] [ 305.158799][ T9742] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1263'. [ 305.159053][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 305.199421][ T9744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1267'. [ 305.234671][ T9741] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 305.381748][ T9741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.530789][ T9752] netlink: 'syz.4.1269': attribute type 23 has an invalid length. [ 305.967740][ T9762] netlink: 'syz.4.1275': attribute type 10 has an invalid length. [ 305.987548][ T9762] veth0_vlan: left promiscuous mode [ 305.998929][ T9762] veth0_vlan: entered promiscuous mode [ 306.016119][ T9762] team0: Device veth0_vlan failed to register rx_handler [ 306.071620][ T9768] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1277'. [ 306.269779][ T9775] netlink: 'syz.3.1280': attribute type 4 has an invalid length. [ 306.301242][ T9775] netlink: 'syz.3.1280': attribute type 4 has an invalid length. [ 306.323544][ T9775] netlink: 199756 bytes leftover after parsing attributes in process `syz.3.1280'. [ 306.465516][ T9785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1282'. [ 306.827176][ T9789] netlink: 'syz.0.1285': attribute type 23 has an invalid length. [ 308.028830][ T9822] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1297'. [ 308.235164][ T9834] netlink: 'syz.3.1301': attribute type 23 has an invalid length. [ 308.380284][ T9840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1305'. [ 308.426620][ T9843] netlink: 'syz.4.1303': attribute type 75 has an invalid length. [ 308.936249][ T9852] netlink: 'syz.1.1309': attribute type 23 has an invalid length. [ 309.849496][ T9862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1313'. [ 310.829054][ T9889] netlink: 'syz.2.1323': attribute type 4 has an invalid length. [ 310.838417][ T9889] netlink: 'syz.2.1323': attribute type 4 has an invalid length. [ 310.847909][ T9889] netlink: 199756 bytes leftover after parsing attributes in process `syz.2.1323'. [ 311.159405][ T9898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 311.194103][ T9898] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 311.533144][ T9907] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 311.545140][ T9907] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 311.553593][ T9907] CPU: 1 UID: 0 PID: 9907 Comm: syz.3.1329 Not tainted syzkaller #0 PREEMPT(full) [ 311.563339][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.573409][ T9907] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 311.579530][ T9907] Code: 18 00 74 08 4c 89 ef e8 ed 7e 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ea 7d 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 c1 7e 01 f8 4d 89 2e 41 80 3c 1f 00 [ 311.599153][ T9907] RSP: 0018:ffffc9001c2bf0f8 EFLAGS: 00010246 [ 311.605241][ T9907] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 311.613231][ T9907] RDX: ffffc9000f2e5000 RSI: 00000000000004dd RDI: 00000000000004de [ 311.621211][ T9907] RBP: ffff88807f283330 R08: dffffc0000000000 R09: 0000000000000002 [ 311.629189][ T9907] R10: 000000000000000a R11: 0000000000000002 R12: ffff88807c9ec8a8 [ 311.637191][ T9907] R13: ffff88807f283328 R14: 0000000000000000 R15: 1ffff1100f93d916 [ 311.645184][ T9907] FS: 00007fb0d05b46c0(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000 [ 311.654133][ T9907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.660736][ T9907] CR2: 00002000000035c0 CR3: 0000000079ae8000 CR4: 00000000003526f0 [ 311.668730][ T9907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.676718][ T9907] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 311.684711][ T9907] Call Trace: [ 311.688011][ T9907] [ 311.690958][ T9907] xfrm_state_insert+0x54/0x60 [ 311.695754][ T9907] ipcomp6_init_state+0x655/0x900 [ 311.700834][ T9907] __xfrm_init_state+0xa76/0x13f0 [ 311.705875][ T9907] ? __xfrm_init_state+0x7ef/0x13f0 [ 311.711091][ T9907] xfrm_add_sa+0x2f5b/0x4070 [ 311.715718][ T9907] ? __pfx_xfrm_add_sa+0x10/0x10 [ 311.720685][ T9907] ? __nla_parse+0x40/0x60 [ 311.725121][ T9907] xfrm_user_rcv_msg+0x7a3/0xab0 [ 311.730069][ T9907] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 311.735544][ T9907] ? __pfx___mutex_trylock_common+0x10/0x10 [ 311.741446][ T9907] ? rcu_is_watching+0x15/0xb0 [ 311.746217][ T9907] ? trace_contention_end+0x39/0x120 [ 311.751508][ T9907] ? __mutex_lock+0x335/0x1350 [ 311.756293][ T9907] netlink_rcv_skb+0x208/0x470 [ 311.761092][ T9907] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 311.766559][ T9907] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.771903][ T9907] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.777149][ T9907] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.782384][ T9907] xfrm_netlink_rcv+0x79/0x90 [ 311.787100][ T9907] netlink_unicast+0x82c/0x9e0 [ 311.791887][ T9907] ? __pfx_netlink_unicast+0x10/0x10 [ 311.797221][ T9907] ? security_netlink_send+0x58/0x290 [ 311.802633][ T9907] ? __sanitizer_cov_trace_pc+0x3c/0x70 [ 311.808207][ T9907] netlink_sendmsg+0x805/0xb30 [ 311.813006][ T9907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.818306][ T9907] ? aa_sock_msg_perm+0xf1/0x1d0 [ 311.823266][ T9907] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.828576][ T9907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.833887][ T9907] __sock_sendmsg+0x219/0x270 [ 311.838612][ T9907] ____sys_sendmsg+0x505/0x830 [ 311.843423][ T9907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.848819][ T9907] ? import_iovec+0x74/0xa0 [ 311.853349][ T9907] ___sys_sendmsg+0x21f/0x2a0 [ 311.858053][ T9907] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.863293][ T9907] ? __fget_files+0x2a/0x420 [ 311.867909][ T9907] ? __fget_files+0x3a0/0x420 [ 311.872626][ T9907] __x64_sys_sendmsg+0x19b/0x260 [ 311.877591][ T9907] ? clockevents_program_event+0x24d/0x360 [ 311.883444][ T9907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.888944][ T9907] ? do_syscall_64+0xbe/0x3b0 [ 311.893666][ T9907] do_syscall_64+0xfa/0x3b0 [ 311.898225][ T9907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.904402][ T9907] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.910581][ T9907] ? clear_bhb_loop+0x60/0xb0 [ 311.915285][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.921193][ T9907] RIP: 0033:0x7fb0d238eec9 [ 311.925629][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.945532][ T9907] RSP: 002b:00007fb0d05b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.953968][ T9907] RAX: ffffffffffffffda RBX: 00007fb0d25e6180 RCX: 00007fb0d238eec9 [ 311.961950][ T9907] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000009 [ 311.969930][ T9907] RBP: 00007fb0d2411f91 R08: 0000000000000000 R09: 0000000000000000 [ 311.977911][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.985893][ T9907] R13: 00007fb0d25e6218 R14: 00007fb0d25e6180 R15: 00007ffe3a384f18 [ 311.993891][ T9907] [ 311.996927][ T9907] Modules linked in: [ 312.001055][ T9907] ---[ end trace 0000000000000000 ]--- [ 312.006926][ T9907] RIP: 0010:__xfrm_state_insert+0x1011/0x1450 [ 312.013152][ T9907] Code: 18 00 74 08 4c 89 ef e8 ed 7e 01 f8 4d 89 65 00 41 80 3c 1e 00 74 08 48 89 ef e8 ea 7d 01 f8 4c 8b 75 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 c1 7e 01 f8 4d 89 2e 41 80 3c 1f 00 [ 312.033053][ T9907] RSP: 0018:ffffc9001c2bf0f8 EFLAGS: 00010246 [ 312.039453][ T9907] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000 [ 312.047614][ T9907] RDX: ffffc9000f2e5000 RSI: 00000000000004dd RDI: 00000000000004de [ 312.055817][ T9907] RBP: ffff88807f283330 R08: dffffc0000000000 R09: 0000000000000002 [ 312.063939][ T9907] R10: 000000000000000a R11: 0000000000000002 R12: ffff88807c9ec8a8 [ 312.072056][ T9907] R13: ffff88807f283328 R14: 0000000000000000 R15: 1ffff1100f93d916 [ 312.080236][ T9907] FS: 00007fb0d05b46c0(0000) GS:ffff888125d11000(0000) knlGS:0000000000000000 [ 312.089331][ T9907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.096072][ T9907] CR2: 00002000000035c0 CR3: 0000000079ae8000 CR4: 00000000003526f0 [ 312.104231][ T9907] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 312.112328][ T9907] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 312.120463][ T9907] Kernel panic - not syncing: Fatal exception in interrupt [ 312.128043][ T9907] Kernel Offset: disabled [ 312.132403][ T9907] Rebooting in 86400 seconds..