last executing test programs: 5m4.614350714s ago: executing program 4 (id=900): r0 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000000), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x70}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10082, 0x0, 0x0, 0x8, 0x8, 0x77ffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0xa2, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x1b003000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x28ab0e99}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x104000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@migrate={0x50, 0x21, 0x1, 0x70bd2c, 0x25dfdbfb, {{@in=@empty, @in=@rand_addr=0x64010100, 0x4e22, 0xfff7, 0x4e23, 0x8, 0x2, 0x0, 0x80, 0x8}, 0x6e6bb0, 0x1}}, 0x50}, 0x1, 0x0, 0x0, 0x20000005}, 0xc0) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x11314, 0x0, 0x0, 0x8, 0x43fe, 0x7ffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 5m4.540161731s ago: executing program 2 (id=903): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001040)=@generic={&(0x7f00000002c0)='./file0\x00', r0}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000008877fbacfe1416e000030a83079f03b18000440c2011e0845013f2325f00070905", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0xfffffffffffffdab, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m3.569334349s ago: executing program 2 (id=908): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x1, 0x0, {0xa, 0x4e24, 0x2, @empty, 0x7}}}, 0x80, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd576985, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0xe, 0x0, 0x8, 0x7fff, 0x80000003, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r4, &(0x7f0000000340)}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x25dfdbfd, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x800000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10}, 0x2, 0xe, 0x7, 0x0, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x10000000004}, 0x0, 0xa, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1240000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000540)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x1, 0x0}, 0x0) 5m3.226362768s ago: executing program 2 (id=911): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0xc8d4) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x77, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb}, 0x94) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x83, &(0x7f0000000000)=r5, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0000000700b7c9010001000900000001000000db04ffd56dec2b0e493aacfa9d177ea8c729852e3e53986a6430621cc99b81ebf943a7b0c3a952", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x2, 0x5, 0x84) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000190081054e81f782db4cb9040220080000000000000000070a000a000900142603600e1208001e0000050401d559e0e0df7fc07963acc3038ebba8000400027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xa, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x68}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r9, 0x58, &(0x7f0000000240)}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r10}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r11, 0x36, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) 5m1.515407328s ago: executing program 3 (id=914): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18ffff000000000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8) 5m1.38962428s ago: executing program 2 (id=917): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000640), 0x3}, 0x16000, 0x2000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) close(r1) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (rerun: 64) close(r5) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c23003f) (async) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x49}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18250000", @ANYRES32=0x1, @ANYBLOB="000000000500000004d109000000000018240000", @ANYRES32=0x1, @ANYBLOB="8000eea213affa35b018ca18612a228d1329eed35e2a0f74b4a31695390342bc8b82c98945c63a3ebf4c0b2a984a3ecf6ace"], &(0x7f0000000040)='GPL\x00', 0xff, 0x42, &(0x7f0000000080)=""/66, 0x41000, 0x10, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x9}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xd, 0x4, 0x33ea7aa7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000200)=[{0x0, 0x1, 0xd, 0x9}, {0x3, 0xfffffff9, 0x2, 0x6}], 0x10, 0x3}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="b3461554050d4181dbc8bef66b70"], &(0x7f0000000340)='GPL\x00', 0x8, 0x5b, &(0x7f0000000380)=""/91, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x3, 0xf, 0x662}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0xfdef) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xaf86be13, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) (async) r15 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r16 = openat$cgroup_int(r15, &(0x7f0000000440)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r16, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=r14], 0x27) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r13, @ANYRES32=r10, @ANYBLOB='%\x00\x00\x00(\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="ba639b7d37e6d88026397e39765abc02628ef2cbcac7ebc0fe98778ee589ac2f544d50965d1760bbf918e0709c2cbaa439e00d41eaec0e1448df93459bb2a7c604e2409451faa4a5e1f4dd", @ANYRES32=r14, @ANYRES64=0x0], 0x20) 4m58.311193732s ago: executing program 3 (id=922): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x12162) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x42, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000010000300686173683a69702c6d616300140007800500150001000000080012"], 0x5c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x810) recvmsg(r1, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x10100) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000004200015797ce12fb8c42be312227120025bd7000fddbdf25020000000800388004000680100001800c00c80002000000"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 4m58.27499693s ago: executing program 4 (id=923): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000008100000000000000000082dbf5aff333cd87f93f60511437b239f1a1bc97db1c70fc66268b15e20418933244f3d0c3f980a9db3a1789aa08f02989d9526b41248c9dbbf91715648503e5063ebd1c6832"], &(0x7f00000000c0)='GPL\x00', 0x842, 0xa9, &(0x7f0000000100)=""/169, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1b2e, 0xffffffffffffffff, 0x0, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xd6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000340)=r1, 0x13) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c00810ce00f80ecdb4cb9f207c804a00d000000030007fb0a0002000a0ada1b40d805481100c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 4m58.179905667s ago: executing program 2 (id=924): r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x21) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x7400}, 0x4000050) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000004000000040000000200000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@int={0x8, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x18, 0x7}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x2e, 0x61, 0x5f, 0x61]}}, &(0x7f00000008c0)=""/103, 0x3a, 0x67, 0x0, 0x7}, 0x28) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@bloom_filter={0x1e, 0x240, 0x2b36, 0xe, 0x10000, r1, 0x9, '\x00', 0x0, r3, 0x1, 0x4, 0x3, 0xe, @void, @value, @value=r4}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000000)={r6}, 0x8) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[], 0x318}, 0x24008000) setsockopt$sock_attach_bpf(r8, 0x6, 0x3, &(0x7f0000000040)=r7, 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500000000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef4094200001b14d6d930dfe1d9d322fe7c4a50b5b9bd6ee6f61e59eb4edbb57a00e97a6f6e7b7e2720637a1e7892811eb64252f19e00360db798262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5ad42ce81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b", 0xd8}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40490}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[@ANYBLOB="700000000107010400000000000000000700000a0c00064000000000000000810c00034080000000000000010c000240fffffffffffffffe0c000780080002400000000208000540000000000c000240000000000000b8d0e56800070c00024000000000000001000c000240fffffffffffffffa"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x91) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008d40000000c0a010300000000000000000100000008000440000000000900010073797a3000000000ac000380a8000080040001802c000680140007800c000100636f756e7465720004000280140001800c000100636f75737465720004000280090009"], 0x158}}, 0x0) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000006c0), 0x400008, &(0x7f00000001c0)=ANY=[@ANYBLOB='no']) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="200000002e00090027bd700000000000040000000800180005ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r11}) write$cgroup_subtree(r11, &(0x7f0000000580)=ANY=[], 0xfe33) 4m58.179635351s ago: executing program 4 (id=925): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40008100) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x22) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 4m58.126494946s ago: executing program 3 (id=927): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000000)="270502001cffba000600282f86dd", 0xe}], 0x1}, 0x800) 4m58.001244341s ago: executing program 3 (id=929): r0 = getpid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x10) fstat(0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20008000) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10020, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000330007010000800dfb"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb1de40100180000000000000010000000100000000900000807000000328083950000000e0100000001000000000000"], 0x0, 0x31}, 0x28) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@local, 0x4d5, 0x33}, @in6=@private0, {0x3}, {0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x7fffffff, 0x100004}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) 4m57.963382218s ago: executing program 4 (id=931): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x7, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) 4m57.838987883s ago: executing program 3 (id=933): socket$netlink(0x10, 0x3, 0xb) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001040)=@generic={&(0x7f00000002c0)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000008877fbacfe1416e000030a83079f03b18000440c2011e0845013f2325f00070905", 0x0, 0x6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffdab, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m57.687398716s ago: executing program 4 (id=935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x64}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3264}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x18}}]}, &(0x7f0000000080)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 4m57.110528031s ago: executing program 4 (id=936): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000c17af4699a02000000050000000000000000499a07d1213944ed5e7cf46674f18ceae42e2a97f6c25a3bf5835f9a8c0e36a796cd63dd22c17717ede0774949318755d69792c8e1614ad61a6eb196c60416dd127a2af70d0c31c5c2c53f894962e5f2ac0e18c9acafeae3d29ad6a201a16c264708d04b9811facf08d352cb6a4f9ae31666a77ac58e71f7a8cad03368c7d5f3138602bbce7635851c4cea5f13901a8c4a037ebc645d617b0d032c232d4ced5eee8f3a05cfd12b275f917f14f70f50967f8cf9e3"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r2, 0x58, &(0x7f0000001340)}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={&(0x7f0000000040)="97f9f3f4c087fbb7766bee04ed672c161a18bbe8ac87f346de433a7f5078e77a325aeaefe1d4db1c4ebce0459e20c178f60359a16545b3a7ab262c26fb9a0cc8b488202448f9bae41d42", &(0x7f00000000c0)=""/38, &(0x7f0000000300)="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", &(0x7f0000000100)="b8bec11fc821f741", 0xffffff95, r2, 0x4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000300)="1fad9e7a5c0c62b19c0206ecddbbd92e83ff8e67670ffde6448f38c61da4d0bc81ce49e5d3ec45b8769f6362fbddc8bb61bd656d908b33427e101be1d012cfad187f37690ee67d51762180250adb68fa4cf38134840a7bb3d97f7390d69da048263e39e0491bfa6e96510c28200c66894e82396f1407d3106104cda67403579591bc39e876ad10e26d7be75ae1883cbdd563454af2683ef134ee209344c03e0d1eaf482941e7de1275faf7eb8ff13e624aaf5b8e121b885356b693dcf9d939d94a9c4df849af5f1036486da560a3aba8a11dd482ca2f7deb0b45da19a4d038f9fc3b805e136739a20cc43ad3f490df61080adb", &(0x7f00000007c0)=""/4096, &(0x7f0000000100)="738d506efac878", &(0x7f0000000180)="47e68751c1f5b70cdac90cc32f0f8fd62cb86d0fcc30e41d81b7b816dec21ab970a196dd9b09c84483161b376f9e4e555bb33ce26117de20bdb0d8e3c4496f0559d80781b3e6fe08e91cd88a0e240b25e0e8b75b490f9aa1f88fef4f473671614812d1", 0x1, r2}, 0x38) (async, rerun: 64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES16=r1], 0xe0}}, 0xc0) 4m56.521313062s ago: executing program 2 (id=937): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x12162) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x42, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000010000300686173683a69702c6d616300140007800500150001000000080012"], 0x5c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff000000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x810) recvmsg(r1, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x10100) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000004200015797ce12fb8c42be312227120025bd7000fddbdf25020000000800388004000680100001800c00c80002000000"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 4m56.520145322s ago: executing program 3 (id=938): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xf8, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x69, 0x6, "2f1f854447aa1865cfac94445794c055898b0bf8a780b40795d104d72e660662b836a6da3e0747a82b4fbecfa09021aa3e849df2b9fa5d75bd76e9ad0e58bd74855e1218f449d918f8bad8738ad168620338445bc5b3c0b5dba6b7c13e4edf4d3484aea688"}, @NFTA_TABLE_USERDATA={0x57, 0x6, "4406ec5729327b291a95762ec1494ba1a9f0938d0a25a38e5bccd52f3bd41aee3f044e8551990a8f58c6b8f8d84267bd778bcefb06bd540e1e5e40484624c57d97b5c28d9495230ba4f38d98baf9d372d39049"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x40081) 4m23.498429051s ago: executing program 32 (id=932): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18ffff000000000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = getpid() r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x8) 4m23.036200077s ago: executing program 33 (id=934): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32, @ANYRES8=r3], 0xfe33) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000340)={0x5, 0x80, 0x5, 0x5, 0x2, 0x6, 0x0, 0x4, 0x100, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x893c, 0x3}, 0x100030, 0x0, 0x2, 0x6, 0x6, 0x435f, 0x0, 0x0, 0xd, 0x0, 0x9}) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c081}, 0x1) r4 = socket$kcm(0x23, 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x8}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89ef, &(0x7f0000000000)={r4}) 4m22.602771079s ago: executing program 34 (id=937): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x12162) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x42, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000010000300686173683a69702c6d616300140007800500150001000000080012"], 0x5c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff000000", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x810) recvmsg(r1, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x10100) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000004200015797ce12fb8c42be312227120025bd7000fddbdf25020000000800388004000680100001800c00c80002000000"], 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 4m22.246578802s ago: executing program 35 (id=938): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xf8, 0x1, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x69, 0x6, "2f1f854447aa1865cfac94445794c055898b0bf8a780b40795d104d72e660662b836a6da3e0747a82b4fbecfa09021aa3e849df2b9fa5d75bd76e9ad0e58bd74855e1218f449d918f8bad8738ad168620338445bc5b3c0b5dba6b7c13e4edf4d3484aea688"}, @NFTA_TABLE_USERDATA={0x57, 0x6, "4406ec5729327b291a95762ec1494ba1a9f0938d0a25a38e5bccd52f3bd41aee3f044e8551990a8f58c6b8f8d84267bd778bcefb06bd540e1e5e40484624c57d97b5c28d9495230ba4f38d98baf9d372d39049"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8000}, 0x40081) 4m21.85392558s ago: executing program 36 (id=936): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000140)=[0x1, 0x0], &(0x7f0000000700), 0x0, 0x100000}}, 0x40) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000c17af4699a02000000050000000000000000499a07d1213944ed5e7cf46674f18ceae42e2a97f6c25a3bf5835f9a8c0e36a796cd63dd22c17717ede0774949318755d69792c8e1614ad61a6eb196c60416dd127a2af70d0c31c5c2c53f894962e5f2ac0e18c9acafeae3d29ad6a201a16c264708d04b9811facf08d352cb6a4f9ae31666a77ac58e71f7a8cad03368c7d5f3138602bbce7635851c4cea5f13901a8c4a037ebc645d617b0d032c232d4ced5eee8f3a05cfd12b275f917f14f70f50967f8cf9e3"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r2, 0x58, &(0x7f0000001340)}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000140)={&(0x7f0000000040)="97f9f3f4c087fbb7766bee04ed672c161a18bbe8ac87f346de433a7f5078e77a325aeaefe1d4db1c4ebce0459e20c178f60359a16545b3a7ab262c26fb9a0cc8b488202448f9bae41d42", &(0x7f00000000c0)=""/38, &(0x7f0000000300)="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", &(0x7f0000000100)="b8bec11fc821f741", 0xffffff95, r2, 0x4}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={&(0x7f0000000300)="1fad9e7a5c0c62b19c0206ecddbbd92e83ff8e67670ffde6448f38c61da4d0bc81ce49e5d3ec45b8769f6362fbddc8bb61bd656d908b33427e101be1d012cfad187f37690ee67d51762180250adb68fa4cf38134840a7bb3d97f7390d69da048263e39e0491bfa6e96510c28200c66894e82396f1407d3106104cda67403579591bc39e876ad10e26d7be75ae1883cbdd563454af2683ef134ee209344c03e0d1eaf482941e7de1275faf7eb8ff13e624aaf5b8e121b885356b693dcf9d939d94a9c4df849af5f1036486da560a3aba8a11dd482ca2f7deb0b45da19a4d038f9fc3b805e136739a20cc43ad3f490df61080adb", &(0x7f00000007c0)=""/4096, &(0x7f0000000100)="738d506efac878", &(0x7f0000000180)="47e68751c1f5b70cdac90cc32f0f8fd62cb86d0fcc30e41d81b7b816dec21ab970a196dd9b09c84483161b376f9e4e555bb33ce26117de20bdb0d8e3c4496f0559d80781b3e6fe08e91cd88a0e240b25e0e8b75b490f9aa1f88fef4f473671614812d1", 0x1, r2}, 0x38) (async, rerun: 64) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES16=r1], 0xe0}}, 0xc0) 4m6.436485687s ago: executing program 9 (id=943): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f0000000000)={r2}) 4m6.180734713s ago: executing program 9 (id=950): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x30, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4m5.853606595s ago: executing program 9 (id=951): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x10000002, 0x200, 0x2, 0x2}], 0x10, 0x40000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000870a000000000000637e00000000000095"], &(0x7f0000000180)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x2000000) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x200) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x404c892}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000900000018000000080000fe7b000000f5ff040000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x6000, 0xa6, &(0x7f0000000300)=""/166, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x1, 0x4, 0x80000001}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000680)=[r0, r0, r0, r8, r0, r0], &(0x7f0000000700)=[{0x3, 0x3, 0x4, 0xa}, {0x5, 0x4, 0x3, 0x9}, {0x1, 0x1, 0xd, 0x5}, {0x1, 0x4, 0x1, 0xa}]}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x82, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b4000000000000006b113e00000000008510000002000000850000000800000095000000000000009500000000000000a8fe2cb4b0f2440de0fa8b11ada9b471a0fd9f17da4ff992f552bc02f30bd98b31c1fada6e45b65d3a1213591b2acf33efc8d0290f01d7bb03192129ae933c2974aa8c9b72a40d068e2fdaa45c211145a8bdeade817dae109f39f8786d4ce8ba274d441b8af079b75f52adaf5b01861a3a2ea8fa13d9584a0a4c3088877833a3d80e7711f3107e143fbc9680caebb8968a317fd03130f57b4bbb79d67b5b1ddb0f8d0cf82952f5d52d815e98a5010a62c22a85ef6d7f66617616417852e41f57abcafde3733c623d2ea777ed480a7f3eb6d1c43090f0a7c287e8b7e50bd2a683cc415884762ccd80252217d1b18af068ef92b4a8a960cf282da794a240cc4116762955695ef41df7feb28263b6569d5bab892c29223497dee42f3f064ee95d5dfd10b4feb3625a17437a354fc99eaacc30db9a8fae0b39486bb844877921ca7ac44d1f5b76ca3139c4452dcca8b11867ca2d028b2ecc925ee95a5ab7d76ed53ed202f48bc51cd796254a89d176671e1dfb9df6de9a5ce5ada1cef5e12745f1916111abcd31c4bd"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) 4m5.455502127s ago: executing program 9 (id=954): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x800c051}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xbffffe}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82348, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, @perf_config_ext={0x5, 0x875}, 0x2, 0x2000000, 0x0, 0x9, 0x4402, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x2, 0x88) r2 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x48, 0x1, 0xfd, 0x4, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0xe}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfffffffffffffffe}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c00014000"], 0x870}}, 0x0) 4m5.350156211s ago: executing program 9 (id=955): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f", 0x2b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0x1a06002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9ff, 0x23, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_config_ext={0xf3a, 0x2}, 0x8000, 0x0, 0x80000, 0x1, 0x0, 0x2, 0x3, 0x0, 0xffff}, 0x0, 0xfff7ffffefffffff, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x82, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) 4m1.778700443s ago: executing program 9 (id=957): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$kcm(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r4, &(0x7f0000000180)={'full', 0x20, 0x7023, 0x20, 0x6}, 0x2f) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/199, 0xc7}], 0x1, &(0x7f0000000500)=""/6, 0x6}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x1299046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0xbc0023, 0x0) 3m46.615692276s ago: executing program 37 (id=957): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x0, 0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$kcm(0x1e, 0x5, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) write$cgroup_pressure(r4, &(0x7f0000000180)={'full', 0x20, 0x7023, 0x20, 0x6}, 0x2f) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/199, 0xc7}], 0x1, &(0x7f0000000500)=""/6, 0x6}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x1299046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0xbc0023, 0x0) 2m15.604329953s ago: executing program 6 (id=1491): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff272, 0xfffc, 0x0, 0x0, 0x0, 0x365}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x800000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e586575f800250002000f00000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x60040084) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f0000000100)) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x24005001) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) 2m14.450599413s ago: executing program 6 (id=1496): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x92340, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@newsa={0x118, 0x10, 0x7, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in=@multicast2, 0x4e1f, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@rand_addr=' \x01\x00', {0xff, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x5, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@mcast2}, @srcaddr={0x14, 0xd, @in=@local}]}, 0x118}}, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x0, 0x0, 0x2, 0x1}}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xc, r2, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffdf8, 0x0, &(0x7f0000000fc0)="dd5e48aa95ac0000"}, 0x50) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80040001}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8044) socketpair(0x28, 0x2, 0x0, &(0x7f0000000200)) 2m13.219057441s ago: executing program 6 (id=1497): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x0, 0x0, 0x0, 0x210000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000001000000010100"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095000000000000008a138db907014317bdc86399003ef279bcf4438908fb119c3434377c5416c3cb37b84568575efdf19a281703ec0ebd66879d0d95516f52a13ea385c52fad4aff77dd304e6a8961cc72e8fb09"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000240)=""/4096}, 0x24) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) recvmsg$can_raw(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/147, 0x93}, {0x0}, {&(0x7f0000000600)=""/212, 0xd4}], 0x3, &(0x7f00000009c0)=""/210, 0xd2}, 0x60000003) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000000080101000000000000000005000007060002408863000004000480090001007379343000000000050003002f"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40080) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d010900500012804900f880ea72235c5013f75c5a9ea24e25e521b8ca4759fe9ee6cb7c486c434b5f73829b3c21fcb903ee93511b48757cff54a13dc0fce8da4e62d85a1f9fc33f9a53e4"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x5}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @in=@rand_addr=0x64010102, @in=@remote, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x42000) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000001240)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 2m10.828651862s ago: executing program 6 (id=1505): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100000000000000000000000000008500000075"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0xf0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m10.65617441s ago: executing program 6 (id=1507): socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xffc0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x4000, 0x0, 0x0, 0x0, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000600000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) socketpair(0xf, 0xa, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="b9ff0307683a268cb8f8ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m6.540012351s ago: executing program 6 (id=1516): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8948, &(0x7f0000000a40)='l\\:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x00\x00\x00\x00\xd3\r7\x8e\xabd\x0fup\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\a\x00\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\x04\x00\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1S\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tQ\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq\x00\x00^q\x17\xea\x1c\xe1\x1a\xce\xe1\x90\xe8\xe8\xea`%H\xe8\x11t\xdd\xf7\x8e\x06\x00\x00U\xd2\xf8\xdc\x12\x92\x1e!VqW\xf7\xe1\xd9\x8fs8.\xe0Sv\xfb\xb6\x84M\xee\xee_\x18P\xfa\x1eD\xb0i\x0e\xd0\xd1\x19\x922=\xc2\x88\x12\x19\xc6Ba\x10_\x0f\x9e!\xb5\x9d\x9e\x0e\v\xb3\xa7}\xf5\x84k{We@\xcd \x130kX|\x8dV`\x00r/\x85h8`\x10\xb2\xe8\xf8\xb5\x86,\xd3\x1e\xf2\xbe\xde\xf4\xc4\xba8?P\v/\xce^\x9fZo\x96\xb4\x97xY\x03S\x06E\x1d\x16 \x84\x04;\xfb\x81\xa3\xfb3g') 1m50.758544749s ago: executing program 38 (id=1516): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8948, &(0x7f0000000a40)='l\\:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OGK\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb7s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x00\x00\x00\x00\xd3\r7\x8e\xabd\x0fup\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\a\x00\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0R\xd3\x8a\xe1n\x97\xea\xf1\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\x04\x00\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB\x01\xd1\xa8\xd4\xe6K0\xe1S\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\tb\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tQ\xd9\xae\xc0\x18\x00\b\x00\x00Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq\x00\x00^q\x17\xea\x1c\xe1\x1a\xce\xe1\x90\xe8\xe8\xea`%H\xe8\x11t\xdd\xf7\x8e\x06\x00\x00U\xd2\xf8\xdc\x12\x92\x1e!VqW\xf7\xe1\xd9\x8fs8.\xe0Sv\xfb\xb6\x84M\xee\xee_\x18P\xfa\x1eD\xb0i\x0e\xd0\xd1\x19\x922=\xc2\x88\x12\x19\xc6Ba\x10_\x0f\x9e!\xb5\x9d\x9e\x0e\v\xb3\xa7}\xf5\x84k{We@\xcd \x130kX|\x8dV`\x00r/\x85h8`\x10\xb2\xe8\xf8\xb5\x86,\xd3\x1e\xf2\xbe\xde\xf4\xc4\xba8?P\v/\xce^\x9fZo\x96\xb4\x97xY\x03S\x06E\x1d\x16 \x84\x04;\xfb\x81\xa3\xfb3g') 23.376479385s ago: executing program 8 (id=1994): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x3a84821, &(0x7f0000000840)=ANY=[@ANYBLOB=',']) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x15, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x12, 0x0, {0x2}, {0x8, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0xf, 0x7, 0xf, 0x1, 0x7, 0x9, 0xe, 0x3, 0xb, 0x9, 0x10, 0xa, 0xc, 0x5, 0x4, 0x1], 0x0, [0x7, 0xfff, 0x6, 0x5fd, 0x2, 0x1, 0x7, 0x3, 0x7, 0x5, 0x4, 0x7, 0x7, 0xd, 0x3, 0x4], [0x81, 0x6, 0xe764, 0x3, 0x3, 0x6, 0x8, 0x1, 0x3, 0x900, 0x9, 0x7, 0x4, 0x1, 0x6, 0x4]}}}}]}, 0x88}}, 0x4000010) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/uts\x00') close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000002c0)={0x1, &(0x7f0000000240)=[{0x100, 0x8, 0xf6, 0xffffff64}]}) 23.073141289s ago: executing program 8 (id=1997): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2b, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x4048010) recvmsg$unix(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) close(r7) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b20, &(0x7f0000000000)={'virt_wifi0\x00'}) 22.327174534s ago: executing program 8 (id=2006): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) close(0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8022, 0x800, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0xf0, 0x15, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x453, 0x100, 0x70bd2b, 0x25dfdbfe, "fa94a5a971756d0092578f12599c06412c76fa986d4b19c960a90d9b5298767933d6986a08860402389674c64feace8ab3061acfce9d5d575115a67bf417", ["", "", "", "", "", "", "", "", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040000) 6.284018035s ago: executing program 0 (id=2083): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x154b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11eba, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802feffff7f0500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 6.275005711s ago: executing program 7 (id=2084): r0 = socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000a80)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, 0x0, 0x0, 0xc, 0xe4, &(0x7f00000001c0)=""/228, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000003800250825bd7000f9dbdf250f000000100007800c00028008003400", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000004000000000081e32a95", @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000e50800000008000000000000005d34867bc135eadb435f7801a8ec6a0b940c4a602e365742a4bde0b393c0f89bacf8e51c014859efda176047f266efd1b9a25d3fa5e5f1ce44487d67c948695ad71643d43d85b22d543b1de5069af1ee984b058f", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000010000000200000f7e00020003000000800000002c00000004000000ac0000002a0102006a18090000000000000f020000005803002e"], &(0x7f0000000d80)=""/129, 0x52, 0xc5, 0x5}, 0x28) socket$kcm(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0x4) 6.043323903s ago: executing program 1 (id=2086): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[], 0x20) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x40080) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58b75234ba45dc5c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x1000, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x7, 0x0, 0x4d31, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={&(0x7f0000000280), 0x9}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200000, 0x0, 0x1000000000000000}, 0x0, 0x9, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a14000000110e01000000"], 0x28}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, 0x0, 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000240), 0x9) openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.972779607s ago: executing program 7 (id=2087): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x1a, 0x0, 0x0, @ipv4=@local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 5.916960695s ago: executing program 5 (id=2088): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg(r3, 0x0, 0x4) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.780759414s ago: executing program 1 (id=2089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x28040) 5.630993659s ago: executing program 0 (id=2090): socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000040)=r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000500)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd, {}, [{0x64, 0x1, [@m_skbmod={0x3e, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfff57a000000ad6e911b51818462b4003a000000", 0x38}], 0x1}, 0x0) 5.600038302s ago: executing program 1 (id=2091): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1404, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000002c6f160b000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e08906200060000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="680200000005010400000000000000000700000254020100"], 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r5 = socket$kcm(0x2c, 0x3, 0x0) r6 = perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r6, 0x0) r7 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14000000fa03"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x38}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27050200d40f00000600002f8847", 0xe}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900)=r4, 0x4) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000000080)=""/143, 0x8f}, {&(0x7f0000000200)=""/246, 0xf6}], 0x3}, 0x10100) 5.206404885s ago: executing program 7 (id=2092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)='g', 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0xff, 0x0, 0x480000000000000b, 0x1910b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080)}, 0x11efa, 0x4, 0x98, 0x1, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899", 0x56}, {0x0}], 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000003a2a5e247b00000008001900", @ANYRES32], 0x24}], 0x1}, 0x0) 5.121661146s ago: executing program 5 (id=2093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'bond_slave_1\x00', 0x1000}) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xc, 0x43, 0x40, 0xc0, 0x1}, 0x50) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c59447"], 0x10b8}, 0x200008c0) close(r5) sendmsg(r1, &(0x7f0000001540)={&(0x7f0000001cc0)=@xdp={0x2c, 0x3, 0x0, 0x1a}, 0x80, &(0x7f0000001380), 0x0, &(0x7f00000013c0)}, 0x44041) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) perf_event_open(&(0x7f0000001640)={0x3, 0x80, 0x6, 0x7, 0x3, 0x2, 0x0, 0x8000000000000000, 0x5c020, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0xc108, 0x5, 0xfff, 0x6, 0xb, 0x7, 0x2, 0x0, 0x2, 0x0, 0xcf62}, 0xffffffffffffffff, 0xc, r4, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000020000000000497f765b6aa6c7150000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002500010125bd70b85235e50221e7ee000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) sendmsg$sock(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x4000084) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001500)={&(0x7f00000013c0)="d3efc0344e574189312a763856f409035a40d1", &(0x7f0000001400)=""/193, &(0x7f00000016c0)="2f2246410a24d91dbad6cbbd46a54d34d83de1fc42f197c22bbdb2f86e9b1e3ee3b3330bdadbb8fd70a8a80380c6488e72e1409e616b82d941d43b149dacc69694af7c75cb5f2bef64a4a48b6d288539c1f2c13903dbadf59d9f5f588fd45076aa26df63ed876002dbc3fb0d3dc1dba3dba1f988398917895a696cab363972708889af17186d930adf1b9d", &(0x7f0000001880)="b9c67ccb4f24c18bd1ddea43ca14baac1628b4bfdba33a4881668e139d6ab3f1b483f513a60f4cf3298cd906476c6efaae81178732e2db27785a65c3bae46d7a8f2d4aa39a8162cc7219191ba16ba2861f6b7aaa68d41307", 0x9, r9, 0x4}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001b80)={0xffffffffffffffff, 0xe0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001900), &(0x7f0000001900), 0x0, 0x90, &(0x7f0000001980)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000019c0), &(0x7f0000001a00), 0x8, 0xc4, 0x8, 0x8, &(0x7f0000001a40)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0xb, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r11, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000002c0)=r6, 0x4) 4.337741091s ago: executing program 0 (id=2094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000030601010000e6ff0000002900020073797a31000000000f6e"], 0x28}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) fstat(r0, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1000001}}], 0x18}, 0x0) fstat(r0, &(0x7f00000001c0)) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x4d18aa27, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x73fc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2ac0186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x0, 0x0}, 0x30) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) fstat(r0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8902, &(0x7f0000000080)) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1}, 0x400100f) fstat(r0, &(0x7f0000000300)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) fstat(r0, &(0x7f0000000380)) 4.33585691s ago: executing program 7 (id=2095): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x7, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000013b4a88a607e002700091c25bd7000ffd3008001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0xc000) 4.317806769s ago: executing program 5 (id=2096): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0042, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffc, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x3fe, 0x3, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ffffe, 0x0, 0x41000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000001c0)='cgroup.clone_children\x00', 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.029598567s ago: executing program 0 (id=2097): r0 = socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000a80)) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, 0x0, 0x0, 0xc, 0xe4, &(0x7f00000001c0)=""/228, 0x40f00, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) socket$kcm(0x2, 0x200000000000001, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000003800250825bd7000f9dbdf250f000000100007800c00028008003400", @ANYRES32=0x0, @ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000004000000000081e32a95", @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8", 0x0, 0x0, 0x0}, 0x38) socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000e50800000008000000000000005d34867bc135eadb435f7801a8ec6a0b940c4a602e365742a4bde0b393c0f89bacf8e51c014859efda176047f266efd1b9a25d3fa5e5f1ce44487d67c948695ad71643d43d85b22d543b1de5069af1ee984b058f", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000010000000200000f7e00020003000000800000002c00000004000000ac0000002a0102006a18090000000000000f020000005803002e"], &(0x7f0000000d80)=""/129, 0x52, 0xc5, 0x5}, 0x28) socket$kcm(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0x4) 3.97631935s ago: executing program 7 (id=2098): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x2}, 0x80, &(0x7f0000000000)=[{0x0, 0x5f}, {&(0x7f0000000240)="00000000000000040600", 0xa}, {&(0x7f00000002c0)="832debe16dcb86c87d5aefe65d02", 0xe}], 0x3}, 0xc8c0) 3.674235407s ago: executing program 1 (id=2099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="28000000030601010000e6ff0000002900020073797a31000000000f6e"], 0x28}, 0x1, 0x0, 0x0, 0x20008844}, 0x0) fstat(r0, &(0x7f0000000140)) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1000001}}], 0x18}, 0x0) fstat(r0, &(0x7f00000001c0)) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x4d18aa27, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x73fc}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)={0xffffffffffffffff}) sendmsg$sock(r6, &(0x7f0000006e40)={&(0x7f0000005980)=@generic={0x1, "7f2ac0186b32b4c3e37e9db0cc4d174988d2a7485e8abf2e0d364ef46996432a3c1f52de9d37bbd65c4381f1e88065069a4c67aeb01cefdda4f74f30b0d0cc3280305951c1a9f9bd942b1080f8fe1f9709a4e70d778a658977ef70f8aa3d710a5f78e96bb6f5530f87548ac4914e4cb5a19987d62bb82525306ab2479ead"}, 0x80, 0x0}, 0x4004010) recvmsg(0xffffffffffffffff, 0x0, 0x40002002) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r5, 0x0, 0x0, 0x0}, 0x30) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) fstat(r0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8902, &(0x7f0000000080)) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="ff", 0x1}], 0x1}, 0x400100f) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) fstat(r0, &(0x7f0000000380)) 1.101082228s ago: executing program 7 (id=2100): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x1dba, 0xfffffffffffffeff}, 0x6606, 0x3ff, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYRES8=r3], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x3, 0xbff, 0x6, 0x38009, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0xa}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0x4, &(0x7f0000000080)=@raw=[@alu={0x7, 0xf1eec6dd892c6407, 0x5, 0x4, 0xb, 0xfffffffffffffffe, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x96}, @initr0={0x18, 0x0, 0x0, 0x0, 0xdc20, 0x0, 0x0, 0x0, 0xa0}], &(0x7f0000000140)='syzkaller\x00', 0x7, 0xc1, &(0x7f0000000180)=""/193, 0x40f00, 0x26, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xd, 0x2, 0x4}, 0x10, r3, r5, 0x1, &(0x7f0000000480)=[r7, r8, r9, r10], &(0x7f00000004c0)=[{0x5, 0x1, 0x5, 0x2}], 0x10, 0x10001}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="a836", 0x2}], 0x1}, 0x4040001) recvmsg$unix(r12, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1}, 0x0) 1.031404126s ago: executing program 1 (id=2101): socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x154b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11eba, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x5, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x122) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3d}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802feffff7f0500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 884.725353ms ago: executing program 0 (id=2102): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)={@map, 0xffffffffffffffff, 0x6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0}, 0x50) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x90b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x2c, 0x0, 0x0, 0x1, 0x1e, 0x5, 0xffffffffffffffc1}}, {0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc004001}, 0x20008810) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4084) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0x0, 0x7, 0x8}, 0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newsa={0x194, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@mcast2, @in=@private=0xa0100fe, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x1, 0x400800, 0x9, 0x292}, {0x1000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "e0fa01040000000800000000fff2074f"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x194}}, 0x44050) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x18, &(0x7f0000000700)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 802.223616ms ago: executing program 5 (id=2103): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xa) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)}, {&(0x7f0000000c00)}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d", 0x7e}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f0000000080020012", 0x2d}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 536.703947ms ago: executing program 8 (id=2006): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x28000) close(0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8022, 0x800, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=@newsa={0xf0, 0x15, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@remote}, {@in=@local, 0x4d5, 0x33}, @in=@multicast1, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x453, 0x100, 0x70bd2b, 0x25dfdbfe, "fa94a5a971756d0092578f12599c06412c76fa986d4b19c960a90d9b5298767933d6986a08860402389674c64feace8ab3061acfce9d5d575115a67bf417", ["", "", "", "", "", "", "", "", "", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x4004800}, 0x4040000) 306.187235ms ago: executing program 8 (id=2104): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000f761) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @broadcast}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, &(0x7f0000000340)}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x25dfdbfd, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x800000}}}, @TCA_SKBMOD_ETYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x1, 0x0}, 0x0) 220.207469ms ago: executing program 1 (id=2105): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)='g', 0x1}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0xff, 0x0, 0x480000000000000b, 0x1910b, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000080)}, 0x11efa, 0x4, 0x98, 0x1, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899", 0x56}, {0x0}], 0x3}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000003a2a5e247b00000008001900", @ANYRES32], 0x24}], 0x1}, 0x0) 212.250831ms ago: executing program 0 (id=2106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000028d61374728d2a6d00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x140}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x88}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x1, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="c01000003200070101000000fcdbdf25047c0000ac100180a71001"], 0x10c0}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x9, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x11, 0x1, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$cgroup_ro(r8, 0x0, 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_netfilter(0x10, 0x3, 0xc) 169.140103ms ago: executing program 5 (id=2107): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg(r3, 0x0, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888847", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.555251ms ago: executing program 8 (id=2108): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x4002}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x800, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7, 0x2}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xfffffffb, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x5, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x54, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0xee, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0x9, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd70, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0xffffffff, 0x9, 0x5}, {0x4, 0x0, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0xfffffff7, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x8000, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0xf58d, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x190, 0x8, 0xc, 0x1}, {0x41e2e32, 0x6, 0x6, 0x2, 0x0, 0x4}, {0x0, 0x2, 0x5e, 0x1000, 0xffffffff, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0xfffffffb, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x1ff}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3, 0x1}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000020601010000000000009db8b1314e7dd78985cc3b23338ebb090000070000000c000780080012400000ffff0500010006000000050005000200000005000400000056000900020073797a310000000011000300"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001840)=""/187, 0xbb}, {&(0x7f0000000540)=""/242, 0xf2}, {&(0x7f00000038c0)=""/4041, 0xfc9}, {&(0x7f0000000780)=""/4112, 0x1010}, {&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f00000002c0)=""/119, 0x77}], 0x6}, 0x22) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 5 (id=2109): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x14808, 0x0, 0x0, 0x0, 0x9, 0x800002, 0x7, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xb, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0xa, 0x3, 0x3a) setsockopt$sock_attach_bpf(r0, 0x3a, 0x3, 0x0, 0x500) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x14808, 0x0, 0x0, 0x0, 0x9, 0x800002, 0x7, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xb, 0xffffffffffffffff, 0x1) (async) socket$kcm(0xa, 0x3, 0x3a) (async) setsockopt$sock_attach_bpf(r0, 0x3a, 0x3, 0x0, 0x500) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070ca00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r3}, 0x38) (async) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) (async) kernel console output (not intermixed with test programs): ][T10306] tipc: Node identity 340008, cluster identity 4711 [ 344.305909][T10306] tipc: Node number set to 3407880 [ 344.523322][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1216'. [ 344.532560][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1216'. [ 345.424414][T10361] FAULT_INJECTION: forcing a failure. [ 345.424414][T10361] name failslab, interval 1, probability 0, space 0, times 0 [ 345.456170][T10361] CPU: 1 UID: 0 PID: 10361 Comm: syz.7.1229 Not tainted syzkaller #0 PREEMPT(full) [ 345.456194][T10361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 345.456205][T10361] Call Trace: [ 345.456212][T10361] [ 345.456219][T10361] dump_stack_lvl+0xe8/0x150 [ 345.456245][T10361] should_fail_ex+0x412/0x560 [ 345.456269][T10361] should_failslab+0xa8/0x100 [ 345.456291][T10361] kmem_cache_alloc_noprof+0x87/0x6e0 [ 345.456313][T10361] ? __netlink_lookup+0xc6/0x8b0 [ 345.456332][T10361] ? skb_clone+0x212/0x3a0 [ 345.456357][T10361] skb_clone+0x212/0x3a0 [ 345.456383][T10361] __netlink_deliver_tap+0x404/0x850 [ 345.456410][T10361] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.456428][T10361] netlink_deliver_tap+0x19c/0x1b0 [ 345.456446][T10361] netlink_unicast+0x7e3/0x9b0 [ 345.456475][T10361] ? __pfx_netlink_unicast+0x10/0x10 [ 345.456496][T10361] ? __alloc_skb+0x193/0x390 [ 345.456514][T10361] ? netlink_sendmsg+0x650/0xb40 [ 345.456529][T10361] ? skb_put+0x11b/0x210 [ 345.456552][T10361] netlink_sendmsg+0x813/0xb40 [ 345.456579][T10361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.456600][T10361] ? aa_sock_msg_perm+0xf1/0x1b0 [ 345.456622][T10361] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.456642][T10361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.456658][T10361] ____sys_sendmsg+0xa68/0xad0 [ 345.456679][T10361] ? __might_fault+0xaf/0x130 [ 345.456707][T10361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.456736][T10361] ? import_iovec+0x73/0xa0 [ 345.456760][T10361] ___sys_sendmsg+0x2a5/0x360 [ 345.456778][T10361] ? __lock_acquire+0x6b5/0x2cf0 [ 345.456801][T10361] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.456851][T10361] ? __fget_files+0x2a/0x420 [ 345.456868][T10361] ? __fget_files+0x3a0/0x420 [ 345.456894][T10361] __x64_sys_sendmsg+0x1bd/0x2a0 [ 345.456917][T10361] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.456935][T10361] ? perf_trace_preemptirq_template+0xab/0x340 [ 345.456960][T10361] ? __pfx_ksys_write+0x10/0x10 [ 345.456991][T10361] do_syscall_64+0xe2/0xf80 [ 345.457007][T10361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.457022][T10361] ? trace_irq_disable+0x37/0x100 [ 345.457033][T10361] ? clear_bhb_loop+0x60/0xb0 [ 345.457048][T10361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.457059][T10361] RIP: 0033:0x7f34a0f9aeb9 [ 345.457072][T10361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.457083][T10361] RSP: 002b:00007f34a1ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.457098][T10361] RAX: ffffffffffffffda RBX: 00007f34a1215fa0 RCX: 00007f34a0f9aeb9 [ 345.457107][T10361] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 345.457115][T10361] RBP: 00007f34a1ede090 R08: 0000000000000000 R09: 0000000000000000 [ 345.457123][T10361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.457130][T10361] R13: 00007f34a1216038 R14: 00007f34a1215fa0 R15: 00007ffed69a4278 [ 345.457151][T10361] [ 345.457178][T10361] netlink: 'syz.7.1229': attribute type 21 has an invalid length. [ 346.217358][T10376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.465682][T10400] __nla_validate_parse: 10 callbacks suppressed [ 346.465701][T10400] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.1238'. [ 346.514787][T10401] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1238'. [ 346.619420][T10414] FAULT_INJECTION: forcing a failure. [ 346.619420][T10414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.632669][T10414] CPU: 0 UID: 0 PID: 10414 Comm: syz.8.1244 Not tainted syzkaller #0 PREEMPT(full) [ 346.632691][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 346.632700][T10414] Call Trace: [ 346.632707][T10414] [ 346.632713][T10414] dump_stack_lvl+0xe8/0x150 [ 346.632739][T10414] should_fail_ex+0x412/0x560 [ 346.632764][T10414] _copy_from_user+0x2d/0xb0 [ 346.632789][T10414] ____sys_sendmsg+0x334/0xad0 [ 346.632819][T10414] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.632848][T10414] ? import_iovec+0x73/0xa0 [ 346.632874][T10414] ___sys_sendmsg+0x2a5/0x360 [ 346.632892][T10414] ? __lock_acquire+0x6b5/0x2cf0 [ 346.632919][T10414] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.632959][T10414] ? __fget_files+0x2a/0x420 [ 346.633001][T10414] ? __fget_files+0x2a/0x420 [ 346.633018][T10414] ? __fget_files+0x3a0/0x420 [ 346.633049][T10414] __x64_sys_sendmsg+0x1bd/0x2a0 [ 346.633074][T10414] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.633094][T10414] ? perf_trace_preemptirq_template+0xab/0x340 [ 346.633124][T10414] ? __pfx_ksys_write+0x10/0x10 [ 346.633161][T10414] do_syscall_64+0xe2/0xf80 [ 346.633179][T10414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.633195][T10414] ? trace_irq_disable+0x37/0x100 [ 346.633210][T10414] ? clear_bhb_loop+0x60/0xb0 [ 346.633230][T10414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.633246][T10414] RIP: 0033:0x7f7f5b39aeb9 [ 346.633262][T10414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.633276][T10414] RSP: 002b:00007f7f5c33b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.633296][T10414] RAX: ffffffffffffffda RBX: 00007f7f5b615fa0 RCX: 00007f7f5b39aeb9 [ 346.633308][T10414] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 346.633320][T10414] RBP: 00007f7f5c33b090 R08: 0000000000000000 R09: 0000000000000000 [ 346.633330][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.633341][T10414] R13: 00007f7f5b616038 R14: 00007f7f5b615fa0 R15: 00007ffec0ca5d58 [ 346.633374][T10414] [ 346.879698][T10419] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1245'. [ 346.899510][T10419] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1245'. [ 346.910412][T10419] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1245'. [ 346.981253][T10419] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1245'. [ 347.040114][T10425] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1248'. [ 347.050273][T10425] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1248'. [ 347.061324][T10425] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1248'. [ 347.246963][T10436] netlink: 'syz.6.1249': attribute type 2 has an invalid length. [ 347.264890][T10435] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1250'. [ 347.481283][T10435] netlink: 'syz.7.1250': attribute type 26 has an invalid length. [ 347.891717][T10447] netlink: 'syz.8.1252': attribute type 10 has an invalid length. [ 350.650970][T10495] netlink: 'syz.6.1264': attribute type 2 has an invalid length. [ 351.211719][T10487] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 351.235849][T10487] veth0_vlan: entered allmulticast mode [ 351.378822][T10513] netlink: 'syz.7.1265': attribute type 29 has an invalid length. [ 351.434859][T10515] netlink: 'syz.7.1265': attribute type 29 has an invalid length. [ 351.553500][T10519] netlink: 'syz.5.1267': attribute type 10 has an invalid length. [ 351.562059][T10519] __nla_validate_parse: 10 callbacks suppressed [ 351.562092][T10519] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1267'. [ 351.710088][T10519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1267'. [ 351.908882][T10529] netlink: 'syz.6.1269': attribute type 1 has an invalid length. [ 352.152496][T10551] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1274'. [ 352.162626][T10551] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1274'. [ 352.185999][T10551] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1274'. [ 353.704046][T10582] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1283'. [ 353.715531][T10584] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1283'. [ 353.735042][T10585] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1283'. [ 353.744690][T10592] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1283'. [ 353.867076][T10596] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1285'. [ 356.022584][T10689] openvswitch: netlink: ct_state flags 020000e0 unsupported [ 356.266807][T10700] netlink: 'syz.7.1311': attribute type 10 has an invalid length. [ 356.313410][T10700] batman_adv: batadv0: Adding interface: veth0_vlan [ 356.356492][T10700] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.441814][T10700] batman_adv: batadv0: Interface activated: veth0_vlan [ 356.592869][T10707] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 357.303302][T10740] __nla_validate_parse: 14 callbacks suppressed [ 357.303324][T10740] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1319'. [ 357.395594][T10740] hsr_slave_0: left promiscuous mode [ 357.434229][T10740] hsr_slave_1: left promiscuous mode [ 357.547437][T10755] netlink: 'syz.7.1319': attribute type 10 has an invalid length. [ 357.751756][T10755] batman_adv: batadv0: Adding interface: team0 [ 357.765350][T10755] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.844092][T10755] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 357.887041][T10759] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1322'. [ 357.914267][T10761] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1322'. [ 357.940838][T10764] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1322'. [ 357.980997][T10768] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1322'. [ 358.057451][T10773] netlink: 'syz.8.1326': attribute type 7 has an invalid length. [ 358.639000][T10773] netlink: 120 bytes leftover after parsing attributes in process `syz.8.1326'. [ 358.663810][T10787] netlink: 'syz.0.1331': attribute type 2 has an invalid length. [ 358.675293][T10787] tipc: Started in network mode [ 358.680202][T10787] tipc: Node identity 340008, cluster identity 4711 [ 358.713923][T10787] tipc: Node number set to 3407880 [ 358.794415][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1333'. [ 359.182992][T10805] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1338'. [ 359.228039][T10807] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1337'. [ 359.264343][T10807] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1337'. [ 359.499975][T10814] netlink: 'syz.5.1342': attribute type 10 has an invalid length. [ 364.809902][ C1] sched: DL replenish lagged too much [ 368.257424][T10835] __nla_validate_parse: 4 callbacks suppressed [ 368.257443][T10835] netlink: 182 bytes leftover after parsing attributes in process `syz.6.1347'. [ 369.127617][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1350'. [ 369.192739][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1350'. [ 369.230513][T10858] raw_sendmsg: syz.7.1348 forgot to set AF_INET. Fix it! [ 369.242856][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1350'. [ 369.289510][T10857] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1350'. [ 369.754361][T10885] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1356'. [ 369.828996][T10885] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1356'. [ 369.876363][T10893] netlink: 'syz.0.1354': attribute type 10 has an invalid length. [ 369.890030][T10893] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1354'. [ 370.097791][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1354'. [ 370.258335][T10906] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 370.793873][T10911] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1360'. [ 372.509126][T10953] netlink: 'syz.0.1368': attribute type 3 has an invalid length. [ 372.661290][T10978] FAULT_INJECTION: forcing a failure. [ 372.661290][T10978] name failslab, interval 1, probability 0, space 0, times 0 [ 372.678412][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.7.1372 Not tainted syzkaller #0 PREEMPT(full) [ 372.678458][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 372.678483][T10978] Call Trace: [ 372.678491][T10978] [ 372.678498][T10978] dump_stack_lvl+0xe8/0x150 [ 372.678527][T10978] should_fail_ex+0x412/0x560 [ 372.678553][T10978] should_failslab+0xa8/0x100 [ 372.678574][T10978] kmem_cache_alloc_noprof+0x87/0x6e0 [ 372.678595][T10978] ? __netlink_lookup+0xc6/0x8b0 [ 372.678615][T10978] ? skb_clone+0x212/0x3a0 [ 372.678642][T10978] skb_clone+0x212/0x3a0 [ 372.678673][T10978] __netlink_deliver_tap+0x404/0x850 [ 372.678703][T10978] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.678723][T10978] netlink_deliver_tap+0x19c/0x1b0 [ 372.678741][T10978] netlink_unicast+0x7e3/0x9b0 [ 372.678772][T10978] ? __pfx_netlink_unicast+0x10/0x10 [ 372.678795][T10978] ? __alloc_skb+0x193/0x390 [ 372.678813][T10978] ? netlink_sendmsg+0x650/0xb40 [ 372.678829][T10978] ? skb_put+0x11b/0x210 [ 372.678851][T10978] netlink_sendmsg+0x813/0xb40 [ 372.678878][T10978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.678899][T10978] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.678920][T10978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 372.678937][T10978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.678953][T10978] ____sys_sendmsg+0xa68/0xad0 [ 372.678974][T10978] ? __might_fault+0xaf/0x130 [ 372.679003][T10978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.679031][T10978] ? import_iovec+0x73/0xa0 [ 372.679056][T10978] ___sys_sendmsg+0x2a5/0x360 [ 372.679074][T10978] ? __lock_acquire+0x6b5/0x2cf0 [ 372.679099][T10978] ? __pfx____sys_sendmsg+0x10/0x10 [ 372.679153][T10978] ? __fget_files+0x2a/0x420 [ 372.679170][T10978] ? __fget_files+0x3a0/0x420 [ 372.679198][T10978] __x64_sys_sendmsg+0x1bd/0x2a0 [ 372.679222][T10978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 372.679252][T10978] ? __pfx_ksys_write+0x10/0x10 [ 372.679284][T10978] do_syscall_64+0xe2/0xf80 [ 372.679302][T10978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.679317][T10978] ? trace_irq_disable+0x37/0x100 [ 372.679332][T10978] ? clear_bhb_loop+0x60/0xb0 [ 372.679352][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.679374][T10978] RIP: 0033:0x7f34a0f9aeb9 [ 372.679390][T10978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.679404][T10978] RSP: 002b:00007f34a1ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.679422][T10978] RAX: ffffffffffffffda RBX: 00007f34a1215fa0 RCX: 00007f34a0f9aeb9 [ 372.679434][T10978] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 372.679445][T10978] RBP: 00007f34a1ede090 R08: 0000000000000000 R09: 0000000000000000 [ 372.679454][T10978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.679464][T10978] R13: 00007f34a1216038 R14: 00007f34a1215fa0 R15: 00007ffed69a4278 [ 372.679494][T10978] [ 372.975606][T10969] netlink: 'syz.5.1370': attribute type 10 has an invalid length. [ 373.046978][T10964] netlink: 'syz.8.1369': attribute type 21 has an invalid length. [ 373.054843][T10964] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.062996][T10964] netlink: 'syz.8.1369': attribute type 1 has an invalid length. [ 373.373850][T10986] __nla_validate_parse: 6 callbacks suppressed [ 373.373871][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1375'. [ 373.393648][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1375'. [ 373.416064][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1375'. [ 373.436504][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1375'. [ 373.462653][T10993] delete_channel: no stack [ 373.481012][T10993] delete_channel: no stack [ 373.637027][T11005] netlink: 'syz.7.1377': attribute type 33 has an invalid length. [ 373.654787][T11005] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1377'. [ 373.748833][T11005] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1377'. [ 374.007816][T11017] netlink: 33 bytes leftover after parsing attributes in process `syz.7.1377'. [ 374.470095][T11026] delete_channel: no stack [ 377.125942][T11056] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1388'. [ 377.174110][T11056] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1388'. [ 377.215596][T11056] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1388'. [ 377.475711][T11064] netlink: 'syz.6.1390': attribute type 10 has an invalid length. [ 377.601239][T11066] netlink: Conntrack attr has 4 unknown bytes [ 378.600772][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.607318][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.772310][T11103] netlink: 'syz.0.1398': attribute type 10 has an invalid length. [ 378.856005][T11103] batman_adv: batadv0: Adding interface: team0 [ 378.864214][T11103] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.915767][T11103] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 379.176705][T11123] __nla_validate_parse: 9 callbacks suppressed [ 379.176724][T11123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'. [ 379.214986][T11123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'. [ 379.260827][T11123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'. [ 379.284205][T11123] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1403'. [ 379.359843][T11129] netlink: 'syz.8.1405': attribute type 10 has an invalid length. [ 379.392493][T11129] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1405'. [ 379.464476][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1405'. [ 380.051374][T11148] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1409'. [ 380.996479][T11189] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1417'. [ 381.000023][T11194] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1418'. [ 381.017009][T11189] netlink: Conntrack attr has 4 unknown bytes [ 381.061998][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1418'. [ 381.346444][T11201] siw: device registration error -23 [ 382.118519][T11200] delete_channel: no stack [ 382.161283][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.174094][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.182810][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.194023][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.237078][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.987282][T11221] chnl_net:caif_netlink_parms(): no params data found [ 383.247093][T11221] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.254396][T11221] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.262018][T11221] bridge_slave_0: entered allmulticast mode [ 383.271260][T11221] bridge_slave_0: entered promiscuous mode [ 383.281758][T11221] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.289619][T11221] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.297486][T11221] bridge_slave_1: entered allmulticast mode [ 383.331402][T11221] bridge_slave_1: entered promiscuous mode [ 383.392750][T11221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.435765][T11221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.559357][T11221] team0: Port device team_slave_0 added [ 383.569960][T11221] team0: Port device team_slave_1 added [ 383.632646][T11221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.640603][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.771856][T11221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.784366][T11221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.804268][T11221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 383.831445][T11221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.302360][T11221] hsr_slave_0: entered promiscuous mode [ 384.310235][T11288] __nla_validate_parse: 14 callbacks suppressed [ 384.310256][T11288] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1438'. [ 384.350400][ T5831] Bluetooth: hci1: command tx timeout [ 384.353024][T11221] hsr_slave_1: entered promiscuous mode [ 384.391599][T11221] debugfs: 'hsr0' already exists in 'hsr' [ 384.453422][T11221] Cannot create hsr debugfs directory [ 384.948953][T11221] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.888581][T11336] delete_channel: no stack [ 386.425380][ T5831] Bluetooth: hci1: command tx timeout [ 386.557878][T11221] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.777855][T11221] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.838898][T11392] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.1459'. [ 386.850528][T11392] netlink: 4268 bytes leftover after parsing attributes in process `syz.7.1459'. [ 386.965029][T11221] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.154805][T11221] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 387.905894][T11405] delete_channel: no stack [ 387.914505][T11221] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 387.977819][T11410] xt_bpf: check failed: parse error [ 387.997787][T11221] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 388.018731][T11221] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 388.045051][T11411] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1465'. [ 388.076115][T11414] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 388.083789][T11414] veth0_vlan: entered allmulticast mode [ 388.218748][T11417] veth0_vlan: left promiscuous mode [ 388.233669][T11417] veth0_vlan: entered promiscuous mode [ 388.256246][T11417] batman_adv: batadv0: Interface activated: veth0_vlan [ 388.500329][T11221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.554580][T11221] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.600468][ T9095] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.607780][ T9095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.655573][ T5831] Bluetooth: hci1: command tx timeout [ 388.663027][ T9095] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.670416][ T9095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.074858][T11221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.420771][T11221] veth0_vlan: entered promiscuous mode [ 389.437473][T11221] veth1_vlan: entered promiscuous mode [ 389.488732][T11221] veth0_macvtap: entered promiscuous mode [ 389.503425][T11221] veth1_macvtap: entered promiscuous mode [ 389.534169][T11221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 389.558898][T11221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 389.586457][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.665510][ T5831] Bluetooth: hci1: command tx timeout [ 390.908054][T11427] delete_channel: no stack [ 390.917348][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.955379][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.037687][T11452] netlink: 'syz.7.1472': attribute type 10 has an invalid length. [ 391.100318][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.118076][T11452] geneve0: entered promiscuous mode [ 391.197511][T11452] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 391.307324][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.350124][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.550607][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.565598][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1474'. [ 391.586711][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.131422][T11470] delete_channel: no stack [ 393.346303][T11479] syzkaller0: entered promiscuous mode [ 393.364504][T11479] syzkaller0: entered allmulticast mode [ 393.517424][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1480'. [ 395.180859][T11496] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1484'. [ 395.496265][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1487'. [ 395.538086][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1489'. [ 395.728878][ T3518] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.962467][ T3518] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.043876][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 396.043905][ T5829] Bluetooth: hci6: command 0x0406 tx timeout [ 396.050125][ T5838] Bluetooth: hci7: command 0x0406 tx timeout [ 396.148152][ T3518] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.462046][ T3518] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.562838][T11518] netlink: 'syz.7.1493': attribute type 10 has an invalid length. [ 396.582529][T11518] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1493'. [ 396.743733][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1493'. [ 396.764250][ T5147] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.774925][ T5147] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.784519][ T5147] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.794775][ T5147] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.894623][ T5147] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 398.203889][ T3518] bridge_slave_1: left allmulticast mode [ 398.211326][ T3518] bridge_slave_1: left promiscuous mode [ 398.221184][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.505784][ T3518] bridge_slave_0: left allmulticast mode [ 398.540944][ T3518] bridge_slave_0: left promiscuous mode [ 398.568801][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.986255][ T5147] Bluetooth: hci0: command tx timeout [ 399.431348][T11563] netlink: 'syz.7.1499': attribute type 10 has an invalid length. [ 399.692563][T11571] netlink: 'syz.8.1502': attribute type 1 has an invalid length. [ 399.700663][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1502'. [ 400.068430][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.091260][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.110006][ T3518] bond0 (unregistering): Released all slaves [ 400.134350][T11545] netlink: 288 bytes leftover after parsing attributes in process `syz.6.1497'. [ 400.143730][T11559] netlink: 10 bytes leftover after parsing attributes in process `syz.7.1499'. [ 400.178060][T11563] team0: Device ipvlan1 failed to register rx_handler [ 400.238911][T11570] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1502'. [ 400.384680][ T3518] tipc: Left network mode [ 401.076327][ T5147] Bluetooth: hci0: command tx timeout [ 402.247947][T11522] chnl_net:caif_netlink_parms(): no params data found [ 403.041974][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1513'. [ 403.052244][T11632] netlink: 348 bytes leftover after parsing attributes in process `syz.8.1513'. [ 403.062710][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1513'. [ 403.082295][ T3518] hsr_slave_0: left promiscuous mode [ 403.097224][ T3518] hsr_slave_1: left promiscuous mode [ 403.143140][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.150817][ T5147] Bluetooth: hci0: command tx timeout [ 403.195280][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.201700][T11632] netlink: 348 bytes leftover after parsing attributes in process `syz.8.1513'. [ 403.356058][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.375111][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.404469][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1513'. [ 403.544985][ T3518] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 403.565382][ T3518] batman_adv: batadv0: Removing interface: veth0_vlan [ 403.622919][ T3518] batman_adv: batadv0: Removing interface: team0 [ 403.872589][ T3518] veth1_macvtap: left promiscuous mode [ 403.885701][ T3518] veth0_macvtap: left promiscuous mode [ 403.911714][ T3518] veth1_vlan: left promiscuous mode [ 403.935506][ T3518] veth0_vlan: left promiscuous mode [ 403.946638][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1513'. [ 403.970307][T11632] netlink: 348 bytes leftover after parsing attributes in process `syz.8.1513'. [ 404.012148][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1513'. [ 404.067706][T11632] netlink: 348 bytes leftover after parsing attributes in process `syz.8.1513'. [ 404.106864][T11632] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1513'. [ 405.109318][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 405.160360][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 405.231299][ T5147] Bluetooth: hci0: command tx timeout [ 405.656511][T11522] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.663684][T11522] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.675732][T11522] bridge_slave_0: entered allmulticast mode [ 405.683581][T11522] bridge_slave_0: entered promiscuous mode [ 405.724682][T11522] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.765819][T11522] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.783265][T11522] bridge_slave_1: entered allmulticast mode [ 405.845988][T11522] bridge_slave_1: entered promiscuous mode [ 406.001146][T11522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.021315][T11522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.073930][T11522] team0: Port device team_slave_0 added [ 406.085363][T11522] team0: Port device team_slave_1 added [ 406.217244][T11522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.224239][T11522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.286339][T11522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.313265][T11522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.321609][T11522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.459729][T11522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.627844][T11522] hsr_slave_0: entered promiscuous mode [ 406.670832][T11522] hsr_slave_1: entered promiscuous mode [ 406.713852][T11522] debugfs: 'hsr0' already exists in 'hsr' [ 406.737974][T11522] Cannot create hsr debugfs directory [ 409.852105][T11694] __nla_validate_parse: 5 callbacks suppressed [ 409.852123][T11694] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1528'. [ 409.926969][T11697] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1528'. [ 409.965669][T11694] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1528'. [ 411.094358][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1529'. [ 411.297212][T11696] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1529'. [ 411.423289][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1529'. [ 411.556447][T11696] netlink: 348 bytes leftover after parsing attributes in process `syz.7.1529'. [ 411.631757][T11696] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1529'. [ 412.717620][T11738] netlink: 'syz.8.1537': attribute type 10 has an invalid length. [ 413.744885][T11748] netlink: 'syz.5.1539': attribute type 10 has an invalid length. [ 413.755507][T11748] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1539'. [ 414.324825][T11745] : entered promiscuous mode [ 414.635641][T11757] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 414.719389][T11757] tap0: tun_chr_ioctl cmd 1074025677 [ 414.735732][T11757] tap0: linktype set to 29 [ 414.772337][T11522] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 414.816294][T11522] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.874297][T11522] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.976716][T11522] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 415.422268][T11779] FAULT_INJECTION: forcing a failure. [ 415.422268][T11779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.496315][T11779] CPU: 1 UID: 0 PID: 11779 Comm: syz.8.1545 Not tainted syzkaller #0 PREEMPT(full) [ 415.496342][T11779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 415.496352][T11779] Call Trace: [ 415.496359][T11779] [ 415.496366][T11779] dump_stack_lvl+0xe8/0x150 [ 415.496391][T11779] should_fail_ex+0x412/0x560 [ 415.496415][T11779] _copy_from_user+0x2d/0xb0 [ 415.496439][T11779] ___sys_sendmsg+0x1c6/0x360 [ 415.496459][T11779] ? __lock_acquire+0x6b5/0x2cf0 [ 415.496484][T11779] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.496536][T11779] ? __fget_files+0x2a/0x420 [ 415.496552][T11779] ? __fget_files+0x3a0/0x420 [ 415.496578][T11779] __x64_sys_sendmsg+0x1bd/0x2a0 [ 415.496601][T11779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.496629][T11779] ? __pfx_ksys_write+0x10/0x10 [ 415.496659][T11779] do_syscall_64+0xe2/0xf80 [ 415.496677][T11779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.496692][T11779] ? trace_irq_disable+0x37/0x100 [ 415.496708][T11779] ? clear_bhb_loop+0x60/0xb0 [ 415.496727][T11779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.496742][T11779] RIP: 0033:0x7f2de6b9aeb9 [ 415.496758][T11779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.496781][T11779] RSP: 002b:00007f2de7b0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.496799][T11779] RAX: ffffffffffffffda RBX: 00007f2de6e16090 RCX: 00007f2de6b9aeb9 [ 415.496812][T11779] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000005 [ 415.496821][T11779] RBP: 00007f2de7b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 415.496831][T11779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.496839][T11779] R13: 00007f2de6e16128 R14: 00007f2de6e16090 R15: 00007ffdc538bfd8 [ 415.496863][T11779] [ 416.163158][T11522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.441350][T11522] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.540617][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.547857][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.587465][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.594636][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.941816][T11809] netlink: 'syz.5.1553': attribute type 29 has an invalid length. [ 416.996937][T11809] netlink: 'syz.5.1553': attribute type 3 has an invalid length. [ 417.039881][T11809] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1553'. [ 417.952793][T11522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.110930][T11831] netlink: 'syz.5.1557': attribute type 10 has an invalid length. [ 418.132559][T11831] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1557'. [ 418.142132][T11522] veth0_vlan: entered promiscuous mode [ 418.146125][T11829] netlink: 'syz.7.1556': attribute type 10 has an invalid length. [ 418.260461][T11834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1557'. [ 418.293962][T11829] team0: Port device geneve1 added [ 418.349162][T11522] veth1_vlan: entered promiscuous mode [ 418.451503][T11522] veth0_macvtap: entered promiscuous mode [ 418.518919][T11522] veth1_macvtap: entered promiscuous mode [ 418.556680][T11522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.601420][T11522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.714746][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.723796][T11844] netlink: 528 bytes leftover after parsing attributes in process `syz.5.1560'. [ 418.734000][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.789206][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.838223][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.105776][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.113641][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.331690][ T3538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.385255][ T3538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.840413][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 420.850874][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 420.860379][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 420.878631][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 420.886605][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 422.194129][T11922] FAULT_INJECTION: forcing a failure. [ 422.194129][T11922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.225434][T11922] CPU: 0 UID: 0 PID: 11922 Comm: syz.0.1571 Not tainted syzkaller #0 PREEMPT(full) [ 422.225458][T11922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 422.225467][T11922] Call Trace: [ 422.225474][T11922] [ 422.225480][T11922] dump_stack_lvl+0xe8/0x150 [ 422.225505][T11922] should_fail_ex+0x412/0x560 [ 422.225530][T11922] _copy_from_user+0x2d/0xb0 [ 422.225554][T11922] memdup_user+0x5e/0xd0 [ 422.225574][T11922] strndup_user+0x68/0xd0 [ 422.225593][T11922] __se_sys_mount+0x9d/0x420 [ 422.225617][T11922] ? __pfx___se_sys_mount+0x10/0x10 [ 422.225641][T11922] ? __x64_sys_mount+0x20/0xc0 [ 422.225661][T11922] do_syscall_64+0xe2/0xf80 [ 422.225678][T11922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.225695][T11922] ? clear_bhb_loop+0x60/0xb0 [ 422.225715][T11922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.225732][T11922] RIP: 0033:0x7f46cef9aeb9 [ 422.225747][T11922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.225762][T11922] RSP: 002b:00007f46cfe20028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 422.225781][T11922] RAX: ffffffffffffffda RBX: 00007f46cf215fa0 RCX: 00007f46cef9aeb9 [ 422.225794][T11922] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 422.225805][T11922] RBP: 00007f46cfe20090 R08: 0000000000000000 R09: 0000000000000000 [ 422.225815][T11922] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.225824][T11922] R13: 00007f46cf216038 R14: 00007f46cf215fa0 R15: 00007ffd82fa68e8 [ 422.225853][T11922] [ 422.461918][T11930] netlink: 'syz.5.1570': attribute type 10 has an invalid length. [ 422.470026][T11930] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1570'. [ 422.483566][T11931] FAULT_INJECTION: forcing a failure. [ 422.483566][T11931] name failslab, interval 1, probability 0, space 0, times 0 [ 422.528279][T11931] CPU: 1 UID: 0 PID: 11931 Comm: syz.8.1572 Not tainted syzkaller #0 PREEMPT(full) [ 422.528306][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 422.528317][T11931] Call Trace: [ 422.528324][T11931] [ 422.528331][T11931] dump_stack_lvl+0xe8/0x150 [ 422.528359][T11931] should_fail_ex+0x412/0x560 [ 422.528391][T11931] should_failslab+0xa8/0x100 [ 422.528413][T11931] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 422.528437][T11931] ? __alloc_skb+0x193/0x390 [ 422.528456][T11931] ? __alloc_skb+0x1d7/0x390 [ 422.528472][T11931] ? __local_bh_enable_ip+0xd0/0x130 [ 422.528489][T11931] ? __alloc_skb+0x193/0x390 [ 422.528508][T11931] __alloc_skb+0x1d7/0x390 [ 422.528531][T11931] netlink_sendmsg+0x5d4/0xb40 [ 422.528558][T11931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.528580][T11931] ? aa_sock_msg_perm+0xf1/0x1b0 [ 422.528601][T11931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.528621][T11931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.528637][T11931] ____sys_sendmsg+0xa68/0xad0 [ 422.528658][T11931] ? __might_fault+0xaf/0x130 [ 422.528686][T11931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.528715][T11931] ? import_iovec+0x73/0xa0 [ 422.528742][T11931] ___sys_sendmsg+0x2a5/0x360 [ 422.528762][T11931] ? __lock_acquire+0x6b5/0x2cf0 [ 422.528788][T11931] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.528842][T11931] ? __fget_files+0x2a/0x420 [ 422.528859][T11931] ? __fget_files+0x3a0/0x420 [ 422.528886][T11931] __x64_sys_sendmsg+0x1bd/0x2a0 [ 422.528910][T11931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.528929][T11931] ? perf_trace_preemptirq_template+0xab/0x340 [ 422.528957][T11931] ? __pfx_ksys_write+0x10/0x10 [ 422.528990][T11931] do_syscall_64+0xe2/0xf80 [ 422.529008][T11931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.529025][T11931] ? trace_irq_disable+0x37/0x100 [ 422.529040][T11931] ? clear_bhb_loop+0x60/0xb0 [ 422.529060][T11931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.529076][T11931] RIP: 0033:0x7f2de6b9aeb9 [ 422.529093][T11931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.529106][T11931] RSP: 002b:00007f2de7b0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.529125][T11931] RAX: ffffffffffffffda RBX: 00007f2de6e16090 RCX: 00007f2de6b9aeb9 [ 422.529138][T11931] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 422.529149][T11931] RBP: 00007f2de7b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 422.529159][T11931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.529169][T11931] R13: 00007f2de6e16128 R14: 00007f2de6e16090 R15: 00007ffdc538bfd8 [ 422.529198][T11931] [ 422.845442][T11920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1570'. [ 422.909818][ T52] Bluetooth: hci2: command tx timeout [ 422.940898][T11883] chnl_net:caif_netlink_parms(): no params data found [ 423.396188][ T3518] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.840740][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 423.868843][ T3518] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.929668][T11950] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1576'. [ 423.979214][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 424.005655][T11950] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1576'. [ 424.020197][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.035577][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 424.047445][T11883] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.054816][T11883] bridge_slave_0: entered allmulticast mode [ 424.147162][T11883] bridge_slave_0: entered promiscuous mode [ 424.171853][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.205341][T11883] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.212676][T11883] bridge_slave_1: entered allmulticast mode [ 424.262847][T11883] bridge_slave_1: entered promiscuous mode [ 424.540580][T11883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.561742][T11883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.683333][T11883] team0: Port device team_slave_0 added [ 424.709566][T11883] team0: Port device team_slave_1 added [ 424.831151][T11883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.878417][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.934552][T11883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.967895][T11883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.979769][T11883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 425.010220][ T52] Bluetooth: hci2: command tx timeout [ 425.023461][T11883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.145663][ T3518] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.253491][ T3518] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.279225][T11996] netlink: 'syz.7.1584': attribute type 10 has an invalid length. [ 425.289724][T11996] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1584'. [ 425.361974][T12000] netlink: 'syz.5.1586': attribute type 10 has an invalid length. [ 425.467892][T12000] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1586'. [ 425.669848][T11996] ipvlan1: entered promiscuous mode [ 425.676993][T11996] ipvlan1: entered allmulticast mode [ 425.683896][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1586'. [ 425.697251][T11996] veth0_vlan: entered allmulticast mode [ 425.799021][T11996] bridge0: port 3(ipvlan1) entered blocking state [ 425.861790][T11996] bridge0: port 3(ipvlan1) entered disabled state [ 425.914269][T11996] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 426.239947][T11883] hsr_slave_0: entered promiscuous mode [ 426.257812][T11883] hsr_slave_1: entered promiscuous mode [ 426.276837][T11883] debugfs: 'hsr0' already exists in 'hsr' [ 426.282611][T11883] Cannot create hsr debugfs directory [ 426.445700][T12013] FAULT_INJECTION: forcing a failure. [ 426.445700][T12013] name failslab, interval 1, probability 0, space 0, times 0 [ 426.479152][T12013] CPU: 0 UID: 0 PID: 12013 Comm: syz.7.1590 Not tainted syzkaller #0 PREEMPT(full) [ 426.479175][T12013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 426.479185][T12013] Call Trace: [ 426.479191][T12013] [ 426.479199][T12013] dump_stack_lvl+0xe8/0x150 [ 426.479224][T12013] should_fail_ex+0x412/0x560 [ 426.479247][T12013] should_failslab+0xa8/0x100 [ 426.479267][T12013] __kmalloc_noprof+0xde/0x7e0 [ 426.479282][T12013] ? nf_tables_newrule+0x152c/0x28b0 [ 426.479301][T12013] ? nla_strcmp+0x106/0x140 [ 426.479324][T12013] nf_tables_newrule+0x152c/0x28b0 [ 426.479355][T12013] ? __pfx_nf_tables_newrule+0x10/0x10 [ 426.479370][T12013] ? nfnl_pernet+0x23/0x240 [ 426.479393][T12013] ? nfnl_pernet+0x23/0x240 [ 426.479421][T12013] ? __nla_parse+0x40/0x60 [ 426.479445][T12013] nfnetlink_rcv+0x1240/0x27b0 [ 426.479465][T12013] ? trace_call_bpf+0xc2/0xb70 [ 426.479514][T12013] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 426.479551][T12013] ? lockdep_hardirqs_on+0x7a/0x110 [ 426.479592][T12013] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 426.479615][T12013] ? rcu_preempt_deferred_qs_irqrestore+0x7b9/0xbc0 [ 426.479653][T12013] netlink_unicast+0x80f/0x9b0 [ 426.479683][T12013] ? __pfx_netlink_unicast+0x10/0x10 [ 426.479704][T12013] ? __alloc_skb+0x193/0x390 [ 426.479723][T12013] ? netlink_sendmsg+0x650/0xb40 [ 426.479738][T12013] ? skb_put+0x11b/0x210 [ 426.479759][T12013] netlink_sendmsg+0x813/0xb40 [ 426.479785][T12013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.479806][T12013] ? lockdep_hardirqs_on+0x7a/0x110 [ 426.479819][T12013] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.479841][T12013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.479860][T12013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.479875][T12013] ____sys_sendmsg+0xa68/0xad0 [ 426.479905][T12013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.479934][T12013] ? import_iovec+0x73/0xa0 [ 426.479959][T12013] ___sys_sendmsg+0x2a5/0x360 [ 426.479978][T12013] ? __lock_acquire+0x6b5/0x2cf0 [ 426.480011][T12013] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.480064][T12013] ? __fget_files+0x2a/0x420 [ 426.480081][T12013] ? __fget_files+0x3a0/0x420 [ 426.480108][T12013] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.480130][T12013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.480159][T12013] ? __pfx_sched_clock_cpu+0x10/0x10 [ 426.480192][T12013] do_syscall_64+0xe2/0xf80 [ 426.480207][T12013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.480223][T12013] ? clear_bhb_loop+0x60/0xb0 [ 426.480244][T12013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.480260][T12013] RIP: 0033:0x7f34a0f9aeb9 [ 426.480276][T12013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.480290][T12013] RSP: 002b:00007f34a1ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.480308][T12013] RAX: ffffffffffffffda RBX: 00007f34a1215fa0 RCX: 00007f34a0f9aeb9 [ 426.480320][T12013] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 426.480330][T12013] RBP: 00007f34a1ede090 R08: 0000000000000000 R09: 0000000000000000 [ 426.480338][T12013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.480348][T12013] R13: 00007f34a1216038 R14: 00007f34a1215fa0 R15: 00007ffed69a4278 [ 426.480377][T12013] [ 427.065808][ T52] Bluetooth: hci2: command tx timeout [ 427.560512][ T3518] bridge_slave_1: left allmulticast mode [ 427.592225][ T3518] bridge_slave_1: left promiscuous mode [ 427.627310][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.711689][ T3518] bridge_slave_0: left allmulticast mode [ 427.764172][ T3518] bridge_slave_0: left promiscuous mode [ 427.828892][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.886642][T12020] __nla_validate_parse: 6 callbacks suppressed [ 427.886664][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 427.913075][T12020] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1594'. [ 427.926220][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 427.947523][T12020] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1594'. [ 427.960501][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1594'. [ 428.202756][T12045] netlink: 'syz.8.1598': attribute type 10 has an invalid length. [ 428.224141][T12045] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1598'. [ 428.295943][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1598'. [ 428.418142][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1601'. [ 429.074038][T12061] proc: Unknown parameter 'fowner<00000000000000000000' [ 429.111600][ T52] Bluetooth: hci7: ISO packet for unknown connection handle 22 [ 429.147358][ T52] Bluetooth: hci2: command tx timeout [ 429.242432][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.263020][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.274536][ T3518] bond0 (unregistering): Released all slaves [ 429.295284][T12056] netlink: 'syz.7.1602': attribute type 2 has an invalid length. [ 429.457332][ T3518] tipc: Left network mode [ 429.578761][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1605'. [ 429.673330][T12070] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 431.229786][T12092] netlink: 'syz.0.1609': attribute type 21 has an invalid length. [ 431.330633][T12092] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.391402][T12092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.398772][T12092] IPv6: NLM_F_CREATE should be set when creating new route [ 433.567638][T12114] netlink: 'syz.8.1614': attribute type 10 has an invalid length. [ 433.588481][T12114] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1614'. [ 433.648597][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1614'. [ 434.215662][T12124] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1618'. [ 434.413716][T11883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.656760][T11883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.893709][T11883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 435.091079][T11883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 435.278384][ T3518] hsr_slave_0: left promiscuous mode [ 435.305705][ T3518] hsr_slave_1: left promiscuous mode [ 435.316207][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.323639][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.369386][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.381154][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.441995][ T3518] veth1_macvtap: left promiscuous mode [ 435.462857][ T3518] veth0_macvtap: left promiscuous mode [ 435.478003][ T3518] veth1_vlan: left promiscuous mode [ 435.490350][ T3518] veth0_vlan: left promiscuous mode [ 435.603633][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 435.627653][T12144] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1622'. [ 435.667728][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 435.732695][T12144] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1622'. [ 435.805603][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 436.070287][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1622'. [ 436.082500][T12144] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1622'. [ 437.100096][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 437.141299][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 437.529599][ T5828] infiniband syz1: ib_query_port failed (-19) [ 437.645784][T12183] netlink: 'syz.7.1628': attribute type 10 has an invalid length. [ 437.662256][T12173] netlink: 'syz.5.1626': attribute type 4 has an invalid length. [ 437.993284][T11883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.069659][T11883] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.116565][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.123795][ T9101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.152418][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.159697][ T9101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.292874][T12208] netlink: 'syz.7.1632': attribute type 10 has an invalid length. [ 438.991440][T11883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.300089][T11883] veth0_vlan: entered promiscuous mode [ 439.352829][T12227] __nla_validate_parse: 7 callbacks suppressed [ 439.352858][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 439.395330][T12227] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1635'. [ 439.535110][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 439.571718][T12227] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1635'. [ 439.652573][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 439.682168][ T3518] bridge_slave_1: left allmulticast mode [ 439.701523][ T3518] bridge_slave_1: left promiscuous mode [ 439.754093][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.841206][T12240] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1638'. [ 439.861995][ T3518] bridge_slave_0: left allmulticast mode [ 439.876710][ T3518] bridge_slave_0: left promiscuous mode [ 439.876897][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 439.885120][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.910467][T12227] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1635'. [ 439.961613][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 439.971028][T12227] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1635'. [ 440.029706][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.036083][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.049220][T12248] netlink: 'syz.7.1640': attribute type 10 has an invalid length. [ 441.098294][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.109124][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.119812][ T3518] bond0 (unregistering): Released all slaves [ 441.131142][T11883] veth1_vlan: entered promiscuous mode [ 441.279169][ T3518] tipc: Left network mode [ 441.297425][T11883] veth0_macvtap: entered promiscuous mode [ 441.358199][T11883] veth1_macvtap: entered promiscuous mode [ 441.402800][T11883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 441.604722][T11883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.831396][ T9107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.965534][ T9107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.522059][ T9107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.556838][ T9107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.127635][ T9105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.159919][ T9105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.533565][ T3518] hsr_slave_0: left promiscuous mode [ 443.699339][ T3518] hsr_slave_1: left promiscuous mode [ 443.706992][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.725937][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.743841][T12310] netlink: 'syz.0.1655': attribute type 10 has an invalid length. [ 443.763843][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.771936][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.819226][ T3518] veth1_macvtap: left promiscuous mode [ 443.825200][ T3518] veth0_macvtap: left promiscuous mode [ 443.831406][ T3518] veth1_vlan: left promiscuous mode [ 443.838346][ T3518] veth0_vlan: left promiscuous mode [ 444.515020][T12317] netlink: 'syz.8.1657': attribute type 13 has an invalid length. [ 444.535584][T12317] __nla_validate_parse: 6 callbacks suppressed [ 444.535604][T12317] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1657'. [ 445.001703][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 445.120484][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 445.771448][T12308] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1654'. [ 445.805441][T12317] : renamed from syz_tun (while UP) [ 445.848345][T12317] : refused to change device tx_queue_len [ 445.875301][T12317] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 446.008061][ T9105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.045535][ T9105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.223328][T12327] netlink: 'syz.8.1660': attribute type 10 has an invalid length. [ 446.285352][T12327] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1660'. [ 446.405825][T12332] netlink: 'syz.7.1661': attribute type 21 has an invalid length. [ 448.606015][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1660'. [ 449.960219][T12332] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1661'. [ 450.384234][T12378] netlink: 'syz.1.1667': attribute type 10 has an invalid length. [ 450.446217][T12382] FAULT_INJECTION: forcing a failure. [ 450.446217][T12382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.467084][T12378] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1667'. [ 450.489516][T12382] CPU: 0 UID: 0 PID: 12382 Comm: syz.5.1670 Not tainted syzkaller #0 PREEMPT(full) [ 450.489542][T12382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 450.489552][T12382] Call Trace: [ 450.489560][T12382] [ 450.489567][T12382] dump_stack_lvl+0xe8/0x150 [ 450.489609][T12382] should_fail_ex+0x412/0x560 [ 450.489635][T12382] _copy_from_user+0x2d/0xb0 [ 450.489660][T12382] bond_do_ioctl+0x1e5/0x8d0 [ 450.489690][T12382] ? __pfx_bond_do_ioctl+0x10/0x10 [ 450.489710][T12382] ? __mutex_lock+0x319/0x1300 [ 450.489745][T12382] ? full_name_hash+0x92/0xe0 [ 450.489771][T12382] dev_ifsioc+0x961/0x1280 [ 450.489795][T12382] ? dev_load+0x21/0x1f0 [ 450.489820][T12382] dev_ioctl+0x7b4/0x1150 [ 450.489843][T12382] sock_do_ioctl+0x23e/0x320 [ 450.489863][T12382] ? __pfx_sock_do_ioctl+0x10/0x10 [ 450.489876][T12382] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 450.489910][T12382] sock_ioctl+0x5c6/0x7f0 [ 450.489936][T12382] ? __pfx_sock_ioctl+0x10/0x10 [ 450.489958][T12382] ? __fget_files+0x2a/0x420 [ 450.489976][T12382] ? __fget_files+0x3a0/0x420 [ 450.489992][T12382] ? __fget_files+0x2a/0x420 [ 450.490013][T12382] ? bpf_lsm_file_ioctl+0x9/0x20 [ 450.490032][T12382] ? __pfx_sock_ioctl+0x10/0x10 [ 450.490054][T12382] __se_sys_ioctl+0xfc/0x170 [ 450.490078][T12382] do_syscall_64+0xe2/0xf80 [ 450.490095][T12382] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.490111][T12382] ? trace_irq_disable+0x37/0x100 [ 450.490125][T12382] ? clear_bhb_loop+0x60/0xb0 [ 450.490144][T12382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.490159][T12382] RIP: 0033:0x7f59c6b9aeb9 [ 450.490174][T12382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.490185][T12382] RSP: 002b:00007f59c79a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.490202][T12382] RAX: ffffffffffffffda RBX: 00007f59c6e15fa0 RCX: 00007f59c6b9aeb9 [ 450.490213][T12382] RDX: 00002000000002c0 RSI: 0000000000008993 RDI: 0000000000000003 [ 450.490223][T12382] RBP: 00007f59c79a3090 R08: 0000000000000000 R09: 0000000000000000 [ 450.490233][T12382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.490242][T12382] R13: 00007f59c6e16038 R14: 00007f59c6e15fa0 R15: 00007ffe1fc29338 [ 450.490272][T12382] [ 451.326811][T12417] netlink: 'syz.5.1675': attribute type 1 has an invalid length. [ 451.435561][T12417] @ÿ: renamed from hsr0 (while UP) [ 451.649932][T12430] netlink: 'syz.0.1678': attribute type 39 has an invalid length. [ 451.951089][T12430] hsr_slave_1 (unregistering): left promiscuous mode [ 451.960260][T12439] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 451.996285][T12441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1680'. [ 452.116384][T12434] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1680'. [ 452.132265][T12447] netlink: 'syz.7.1684': attribute type 10 has an invalid length. [ 452.172395][T12447] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1684'. [ 452.193330][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1684'. [ 452.351271][T12461] syz.5.1686: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 452.391500][T12461] CPU: 1 UID: 0 PID: 12461 Comm: syz.5.1686 Not tainted syzkaller #0 PREEMPT(full) [ 452.391530][T12461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 452.391544][T12461] Call Trace: [ 452.391553][T12461] [ 452.391562][T12461] dump_stack_lvl+0xe8/0x150 [ 452.391592][T12461] warn_alloc+0x249/0x340 [ 452.391612][T12461] ? stack_trace_save+0xa9/0x100 [ 452.391639][T12461] ? __pfx_warn_alloc+0x10/0x10 [ 452.391666][T12461] ? kasan_save_track+0x4f/0x80 [ 452.391684][T12461] ? kasan_save_track+0x3e/0x80 [ 452.391699][T12461] ? __kasan_kmalloc+0x93/0xb0 [ 452.391717][T12461] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 452.391735][T12461] ? xskq_create+0x56/0x170 [ 452.391752][T12461] ? xsk_setsockopt+0x603/0x990 [ 452.391777][T12461] ? do_sock_setsockopt+0x17c/0x1b0 [ 452.391799][T12461] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 452.391821][T12461] ? do_syscall_64+0xe2/0xf80 [ 452.391845][T12461] __vmalloc_node_range_noprof+0x132/0x1730 [ 452.391896][T12461] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.391921][T12461] ? __kasan_kmalloc+0x93/0xb0 [ 452.391947][T12461] vmalloc_user_noprof+0xad/0xe0 [ 452.391967][T12461] ? xskq_create+0xbf/0x170 [ 452.391986][T12461] xskq_create+0xbf/0x170 [ 452.392007][T12461] xsk_init_queue+0xad/0x110 [ 452.392038][T12461] xsk_setsockopt+0x603/0x990 [ 452.392067][T12461] ? __pfx_xsk_setsockopt+0x10/0x10 [ 452.392094][T12461] ? __pfx_aa_sk_perm+0x10/0x10 [ 452.392119][T12461] ? __fget_files+0x2a/0x420 [ 452.392138][T12461] ? aa_sock_opt_perm+0xff/0x1a0 [ 452.392163][T12461] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 452.392182][T12461] ? __pfx_xsk_setsockopt+0x10/0x10 [ 452.392210][T12461] do_sock_setsockopt+0x17c/0x1b0 [ 452.392239][T12461] __x64_sys_setsockopt+0x13d/0x1b0 [ 452.392268][T12461] do_syscall_64+0xe2/0xf80 [ 452.392287][T12461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.392307][T12461] ? trace_irq_disable+0x37/0x100 [ 452.392325][T12461] ? clear_bhb_loop+0x60/0xb0 [ 452.392359][T12461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.392377][T12461] RIP: 0033:0x7f59c6b9aeb9 [ 452.392395][T12461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.392411][T12461] RSP: 002b:00007f59c7982028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 452.392434][T12461] RAX: ffffffffffffffda RBX: 00007f59c6e16090 RCX: 00007f59c6b9aeb9 [ 452.392449][T12461] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 452.392462][T12461] RBP: 00007f59c6c08c1f R08: 0000000000000004 R09: 0000000000000000 [ 452.392474][T12461] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 452.392485][T12461] R13: 00007f59c6e16128 R14: 00007f59c6e16090 R15: 00007ffe1fc29338 [ 452.392516][T12461] [ 452.392537][T12461] Mem-Info: [ 452.680507][T12461] active_anon:7515 inactive_anon:0 isolated_anon:0 [ 452.680507][T12461] active_file:17897 inactive_file:40083 isolated_file:0 [ 452.680507][T12461] unevictable:768 dirty:292 writeback:0 [ 452.680507][T12461] slab_reclaimable:6968 slab_unreclaimable:104209 [ 452.680507][T12461] mapped:30069 shmem:1376 pagetables:1795 [ 452.680507][T12461] sec_pagetables:0 bounce:0 [ 452.680507][T12461] kernel_misc_reclaimable:0 [ 452.680507][T12461] free:1300061 free_pcp:21404 free_cma:0 [ 452.728699][T12461] Node 0 active_anon:30060kB inactive_anon:0kB active_file:71588kB inactive_file:160128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120276kB dirty:1168kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13608kB pagetables:7056kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 452.804454][T12461] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 452.873164][T12461] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.926518][T12461] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 452.932460][T12461] Node 0 DMA32 free:1298580kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30196kB inactive_anon:0kB active_file:71588kB inactive_file:160128kB unevictable:1536kB writepending:1180kB zspages:0kB present:3129332kB managed:2554128kB mlocked:0kB bounce:0kB free_pcp:61976kB local_pcp:41208kB free_cma:0kB [ 452.992008][T12461] lowmem_reserve[]: 0 0 1 1 1 [ 453.019290][T12461] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 453.070832][T12461] lowmem_reserve[]: 0 0 0 0 0 [ 453.084753][T12461] Node 1 Normal free:3891168kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19616kB local_pcp:5504kB free_cma:0kB [ 453.133633][T12480] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1693'. [ 453.150419][T12480] ksmbd: Unknown IPC event: 3, ignore. [ 453.206722][T12461] lowmem_reserve[]: 0 0 0 0 0 [ 453.216923][T12482] netlink: 'syz.1.1694': attribute type 10 has an invalid length. [ 453.221580][T12461] Node 0 [ 453.224860][T12482] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1694'. [ 453.232281][T12461] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 453.276127][T12482] batman_adv: batadv0: Adding interface: veth0_vlan [ 453.300059][T12482] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.311369][T12461] Node 0 DMA32: 2763*4kB (UM) 2435*8kB (UME) 1899*16kB (UME) 2563*32kB (UME) 1974*64kB (UME) 753*128kB (UME) 263*256kB (UME) 240*512kB (UME) 130*1024kB (UM) 61*2048kB (UM) 118*4096kB (UM) = 1297236kB [ 453.360700][T12482] batman_adv: batadv0: Interface activated: veth0_vlan [ 453.479477][T12461] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 453.517800][T12461] Node 1 Normal: 172*4kB (UE) 64*8kB (UME) 49*16kB (UME) 75*32kB (UME) 21*64kB (UME) 9*128kB (UME) 3*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891168kB [ 453.545010][T12461] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.558301][T12461] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.656355][T12461] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 453.686894][T12461] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 453.709482][T12505] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 453.723436][T12461] 59353 total pagecache pages [ 453.724078][T12505] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1700'. [ 453.731456][T12461] 0 pages in swap cache [ 453.742035][T12461] Free swap = 124996kB [ 453.757949][T12461] Total swap = 124996kB [ 453.786621][T12461] 2097051 pages RAM [ 453.799613][T12461] 0 pages HighMem/MovableOnly [ 453.804345][T12461] 426621 pages reserved [ 453.811255][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1700'. [ 453.821555][T12461] 0 pages cma reserved [ 454.155992][T12523] netlink: 'syz.0.1704': attribute type 23 has an invalid length. [ 455.559979][T12527] syzkaller0: entered promiscuous mode [ 455.585314][T12527] syzkaller0: entered allmulticast mode [ 455.867729][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1708'. [ 457.006906][T12568] FAULT_INJECTION: forcing a failure. [ 457.006906][T12568] name failslab, interval 1, probability 0, space 0, times 0 [ 457.054698][T12568] CPU: 0 UID: 0 PID: 12568 Comm: syz.7.1712 Not tainted syzkaller #0 PREEMPT(full) [ 457.054725][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 457.054736][T12568] Call Trace: [ 457.054746][T12568] [ 457.054756][T12568] dump_stack_lvl+0xe8/0x150 [ 457.054795][T12568] should_fail_ex+0x412/0x560 [ 457.054846][T12568] should_failslab+0xa8/0x100 [ 457.054879][T12568] kmem_cache_alloc_noprof+0x87/0x6e0 [ 457.054913][T12568] ? skb_clone+0x212/0x3a0 [ 457.054934][T12568] ? __pfx_perf_trace_lock+0x10/0x10 [ 457.054973][T12568] skb_clone+0x212/0x3a0 [ 457.055019][T12568] __netlink_deliver_tap+0x404/0x850 [ 457.055096][T12568] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.055132][T12568] netlink_deliver_tap+0x19c/0x1b0 [ 457.055165][T12568] netlink_unicast+0x7e3/0x9b0 [ 457.055234][T12568] ? __pfx_netlink_unicast+0x10/0x10 [ 457.055262][T12568] ? __alloc_skb+0x193/0x390 [ 457.055289][T12568] ? netlink_sendmsg+0x650/0xb40 [ 457.055305][T12568] ? skb_put+0x11b/0x210 [ 457.055349][T12568] netlink_sendmsg+0x813/0xb40 [ 457.055415][T12568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.055455][T12568] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.055491][T12568] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.055522][T12568] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.055539][T12568] ____sys_sendmsg+0xa68/0xad0 [ 457.055567][T12568] ? __pfx_perf_trace_lock+0x10/0x10 [ 457.055618][T12568] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.055686][T12568] ? import_iovec+0x73/0xa0 [ 457.055734][T12568] ___sys_sendmsg+0x2a5/0x360 [ 457.055788][T12568] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.055908][T12568] ? __fget_files+0x2a/0x420 [ 457.055987][T12568] ? __fget_files+0x2a/0x420 [ 457.056006][T12568] ? __fget_files+0x3a0/0x420 [ 457.056076][T12568] __x64_sys_sendmsg+0x1bd/0x2a0 [ 457.056119][T12568] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.056139][T12568] ? perf_trace_preemptirq_template+0xab/0x340 [ 457.056211][T12568] ? __pfx_ksys_write+0x10/0x10 [ 457.056293][T12568] do_syscall_64+0xe2/0xf80 [ 457.056316][T12568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.056332][T12568] ? trace_irq_disable+0x37/0x100 [ 457.056348][T12568] ? clear_bhb_loop+0x60/0xb0 [ 457.056384][T12568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.056402][T12568] RIP: 0033:0x7f34a0f9aeb9 [ 457.056424][T12568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.056438][T12568] RSP: 002b:00007f34a1ede028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.056457][T12568] RAX: ffffffffffffffda RBX: 00007f34a1215fa0 RCX: 00007f34a0f9aeb9 [ 457.056470][T12568] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 457.056480][T12568] RBP: 00007f34a1ede090 R08: 0000000000000000 R09: 0000000000000000 [ 457.056491][T12568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.056501][T12568] R13: 00007f34a1216038 R14: 00007f34a1215fa0 R15: 00007ffed69a4278 [ 457.056593][T12568] [ 457.654662][T12575] netlink: 'syz.1.1715': attribute type 10 has an invalid length. [ 457.686640][T12575] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1715'. [ 457.843493][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 460.627995][T12618] netlink: 'syz.8.1719': attribute type 2 has an invalid length. [ 460.637927][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1719'. [ 460.709258][T12621] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 461.119959][T12633] netlink: 'syz.7.1724': attribute type 6 has an invalid length. [ 461.137144][T12631] netlink: 15231 bytes leftover after parsing attributes in process `syz.8.1725'. [ 462.879950][T12652] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 463.119714][T12659] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.1732'. [ 463.171849][T12659] ksmbd: Unknown IPC event: 3, ignore. [ 463.452286][T12678] netlink: 'syz.8.1737': attribute type 10 has an invalid length. [ 463.512880][T12678] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1737'. [ 463.538202][T12682] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1740'. [ 463.563814][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1737'. [ 463.589423][T12689] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1740'. [ 463.636120][T12682] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1740'. [ 463.758186][T12693] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.1741'. [ 464.080016][T12707] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1744'. [ 464.184555][T12710] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1746'. [ 464.213432][T12707] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 464.508708][T12710] netlink: 'syz.7.1746': attribute type 10 has an invalid length. [ 465.324184][T12743] netlink: 'syz.5.1752': attribute type 10 has an invalid length. [ 465.401132][T12743] veth0_vlan: left promiscuous mode [ 465.424499][T12743] veth0_vlan: left allmulticast mode [ 465.474892][T12743] veth0_vlan: entered promiscuous mode [ 465.500163][T12756] FAULT_INJECTION: forcing a failure. [ 465.500163][T12756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.505560][T12743] batman_adv: batadv0: Interface activated: veth0_vlan [ 465.544252][T12756] CPU: 1 UID: 0 PID: 12756 Comm: syz.7.1755 Not tainted syzkaller #0 PREEMPT(full) [ 465.544277][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 465.544288][T12756] Call Trace: [ 465.544295][T12756] [ 465.544302][T12756] dump_stack_lvl+0xe8/0x150 [ 465.544329][T12756] should_fail_ex+0x412/0x560 [ 465.544355][T12756] _copy_from_user+0x2d/0xb0 [ 465.544380][T12756] ___sys_sendmsg+0x1c6/0x360 [ 465.544401][T12756] ? __lock_acquire+0x6b5/0x2cf0 [ 465.544428][T12756] ? __pfx____sys_sendmsg+0x10/0x10 [ 465.544472][T12756] ? __fget_files+0x2a/0x420 [ 465.544506][T12756] ? __fget_files+0x2a/0x420 [ 465.544523][T12756] ? __fget_files+0x3a0/0x420 [ 465.544552][T12756] __x64_sys_sendmsg+0x1bd/0x2a0 [ 465.544577][T12756] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 465.544609][T12756] ? __pfx_ksys_write+0x10/0x10 [ 465.544644][T12756] do_syscall_64+0xe2/0xf80 [ 465.544661][T12756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.544677][T12756] ? clear_bhb_loop+0x60/0xb0 [ 465.544698][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.544714][T12756] RIP: 0033:0x7f34a0f9aeb9 [ 465.544730][T12756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.544744][T12756] RSP: 002b:00007f34a1ebd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.544762][T12756] RAX: ffffffffffffffda RBX: 00007f34a1216090 RCX: 00007f34a0f9aeb9 [ 465.544775][T12756] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 465.544784][T12756] RBP: 00007f34a1ebd090 R08: 0000000000000000 R09: 0000000000000000 [ 465.544794][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.544804][T12756] R13: 00007f34a1216128 R14: 00007f34a1216090 R15: 00007ffed69a4278 [ 465.544837][T12756] [ 466.874467][T12785] netlink: 'syz.0.1757': attribute type 10 has an invalid length. [ 466.958233][T12785] team0: Port device geneve1 added [ 467.353952][T12798] netlink: 'syz.5.1761': attribute type 10 has an invalid length. [ 467.440908][T12799] netlink: 'syz.0.1760': attribute type 2 has an invalid length. [ 467.449553][T12799] tipc: Started in network mode [ 467.454439][T12799] tipc: Node identity 340008, cluster identity 4711 [ 467.472969][T12799] tipc: Node number set to 3407880 [ 468.283755][T12837] FAULT_INJECTION: forcing a failure. [ 468.283755][T12837] name failslab, interval 1, probability 0, space 0, times 0 [ 468.320562][T12837] CPU: 0 UID: 0 PID: 12837 Comm: syz.0.1771 Not tainted syzkaller #0 PREEMPT(full) [ 468.320587][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 468.320597][T12837] Call Trace: [ 468.320604][T12837] [ 468.320612][T12837] dump_stack_lvl+0xe8/0x150 [ 468.320639][T12837] should_fail_ex+0x412/0x560 [ 468.320665][T12837] should_failslab+0xa8/0x100 [ 468.320686][T12837] __kmalloc_cache_noprof+0x83/0x6e0 [ 468.320705][T12837] ? uprobe_register+0x1a8/0x950 [ 468.320730][T12837] uprobe_register+0x1a8/0x950 [ 468.320747][T12837] ? pcpu_alloc_noprof+0x10b3/0x18d0 [ 468.320775][T12837] probe_event_enable+0x3a1/0xab0 [ 468.320792][T12837] ? __pfx_uprobe_perf_filter+0x10/0x10 [ 468.320818][T12837] perf_trace_event_init+0x4e1/0x9d0 [ 468.320847][T12837] perf_uprobe_init+0x12e/0x1a0 [ 468.320872][T12837] perf_uprobe_event_init+0xe6/0x180 [ 468.320899][T12837] perf_try_init_event+0x17f/0x870 [ 468.320916][T12837] ? perf_event_alloc+0x109a/0x2e40 [ 468.320940][T12837] perf_event_alloc+0x1489/0x2e40 [ 468.320961][T12837] ? perf_event_alloc+0x109a/0x2e40 [ 468.320987][T12837] ? __fget_files+0x2a/0x420 [ 468.321015][T12837] ? __pfx_perf_event_alloc+0x10/0x10 [ 468.321040][T12837] ? find_lively_task_by_vpid+0x19/0x290 [ 468.321057][T12837] ? find_lively_task_by_vpid+0x19/0x290 [ 468.321073][T12837] ? find_lively_task_by_vpid+0x19/0x290 [ 468.321095][T12837] __se_sys_perf_event_open+0x7a9/0x1d60 [ 468.321132][T12837] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 468.321179][T12837] ? __pfx_ksys_write+0x10/0x10 [ 468.321211][T12837] ? __x64_sys_perf_event_open+0x20/0xc0 [ 468.321234][T12837] do_syscall_64+0xe2/0xf80 [ 468.321252][T12837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.321268][T12837] ? trace_irq_disable+0x37/0x100 [ 468.321284][T12837] ? clear_bhb_loop+0x60/0xb0 [ 468.321305][T12837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.321322][T12837] RIP: 0033:0x7f46cef9aeb9 [ 468.321339][T12837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.321354][T12837] RSP: 002b:00007f46cfe20028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 468.321373][T12837] RAX: ffffffffffffffda RBX: 00007f46cf215fa0 RCX: 00007f46cef9aeb9 [ 468.321386][T12837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 468.321428][T12837] RBP: 00007f46cfe20090 R08: 0000000000000000 R09: 0000000000000000 [ 468.321437][T12837] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 468.321446][T12837] R13: 00007f46cf216038 R14: 00007f46cf215fa0 R15: 00007ffd82fa68e8 [ 468.321481][T12837] [ 469.597191][T12858] netlink: 'syz.7.1776': attribute type 13 has an invalid length. [ 469.610218][T12858] netlink: 'syz.7.1776': attribute type 17 has an invalid length. [ 473.079971][T12858] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.101873][T12858] batman_adv: batadv0: Interface activated: team0 [ 473.239435][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.568873][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.796308][T12858] ipvlan1: left promiscuous mode [ 473.801517][T12858] ipvlan1: left allmulticast mode [ 473.812696][T12858] veth0_vlan: left allmulticast mode [ 473.903687][T12858] geneve0: left promiscuous mode [ 474.061849][ T9095] ip6_tunnel:  xmit: Local address not yet configured! [ 474.339107][T12907] netlink: 'syz.8.1787': attribute type 10 has an invalid length. [ 474.349273][T12907] __nla_validate_parse: 5 callbacks suppressed [ 474.349305][T12907] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1787'. [ 474.431309][T12907] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1787'. [ 474.712451][T12925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1793'. [ 474.766400][T12925] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 477.671401][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1800'. [ 478.207286][T12981] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.602998][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 479.247607][T12985] : port 1(erspan0) entered blocking state [ 479.254303][T12985] : port 1(erspan0) entered disabled state [ 479.262836][T12985] erspan0: entered allmulticast mode [ 479.284394][T12985] erspan0: entered promiscuous mode [ 479.530008][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1813'. [ 479.884413][T13007] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1817'. [ 479.909807][T13007] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 482.580265][T13034] netlink: 'syz.7.1826': attribute type 10 has an invalid length. [ 482.588367][T13038] netlink: 'syz.8.1827': attribute type 10 has an invalid length. [ 482.588408][T13038] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1827'. [ 482.603632][T13038] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1827'. [ 482.608744][T13034] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1826'. [ 482.722523][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1825'. [ 483.253453][T13070] netlink: 300 bytes leftover after parsing attributes in process `syz.7.1836'. [ 483.298024][T13070] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1836'. [ 483.309831][T13073] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1838'. [ 483.523763][T13076] netlink: 'syz.8.1839': attribute type 10 has an invalid length. [ 483.538167][T13076] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1839'. [ 487.014626][T13117] __nla_validate_parse: 1 callbacks suppressed [ 487.014648][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1846'. [ 487.302897][T13127] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1849'. [ 487.386036][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 488.258914][T13149] netlink: 'syz.0.1853': attribute type 10 has an invalid length. [ 488.271049][T13149] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1853'. [ 488.307789][T13149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1853'. [ 489.552466][T13189] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1859'. [ 489.597889][T13189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1859'. [ 489.634164][T13189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1859'. [ 489.687983][T13189] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1859'. [ 489.697842][T13194] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1861'. [ 489.762751][T13196] netlink: 'syz.5.1862': attribute type 10 has an invalid length. [ 490.420829][T13196] team0 (unregistering): Port device team_slave_0 removed [ 490.549144][T13196] team0 (unregistering): Port device team_slave_1 removed [ 490.640973][T13225] netlink: 'syz.8.1865': attribute type 1 has an invalid length. [ 490.664501][T13219] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1865'. [ 492.163331][T13274] __nla_validate_parse: 1 callbacks suppressed [ 492.163350][T13274] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.1881'. [ 492.184991][T13274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1881'. [ 492.443954][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1886'. [ 492.970025][T13302] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1889'. [ 494.099291][T13313] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1893'. [ 494.289115][T13327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1896'. [ 494.320775][T13327] netlink: 'syz.1.1896': attribute type 41 has an invalid length. [ 494.554735][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1897'. [ 494.781278][T13337] lo: entered allmulticast mode [ 494.882284][T13340] FAULT_INJECTION: forcing a failure. [ 494.882284][T13340] name failslab, interval 1, probability 0, space 0, times 0 [ 494.933053][T13337] lo: entered promiscuous mode [ 494.992067][T13340] CPU: 0 UID: 0 PID: 13340 Comm: syz.0.1900 Not tainted syzkaller #0 PREEMPT(full) [ 494.992094][T13340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 494.992104][T13340] Call Trace: [ 494.992112][T13340] [ 494.992120][T13340] dump_stack_lvl+0xe8/0x150 [ 494.992147][T13340] should_fail_ex+0x412/0x560 [ 494.992174][T13340] should_failslab+0xa8/0x100 [ 494.992196][T13340] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 494.992222][T13340] ? perf_event_alloc+0x1cb/0x2e40 [ 494.992248][T13340] perf_event_alloc+0x1cb/0x2e40 [ 494.992278][T13340] ? __pfx_perf_trace_lock+0x10/0x10 [ 494.992293][T13340] ? __fget_files+0x2a/0x420 [ 494.992317][T13340] ? __pfx_perf_event_alloc+0x10/0x10 [ 494.992341][T13340] ? find_lively_task_by_vpid+0x19/0x290 [ 494.992358][T13340] ? find_lively_task_by_vpid+0x19/0x290 [ 494.992371][T13340] ? find_lively_task_by_vpid+0x19/0x290 [ 494.992392][T13340] __se_sys_perf_event_open+0x7a9/0x1d60 [ 494.992425][T13340] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 494.992465][T13340] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 494.992486][T13340] ? __pfx_ksys_write+0x10/0x10 [ 494.992515][T13340] ? __x64_sys_perf_event_open+0x20/0xc0 [ 494.992535][T13340] do_syscall_64+0xe2/0xf80 [ 494.992554][T13340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.992568][T13340] ? trace_irq_disable+0x37/0x100 [ 494.992582][T13340] ? clear_bhb_loop+0x60/0xb0 [ 494.992604][T13340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.992620][T13340] RIP: 0033:0x7f46cef9aeb9 [ 494.992637][T13340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.992651][T13340] RSP: 002b:00007f46cfe20028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 494.992671][T13340] RAX: ffffffffffffffda RBX: 00007f46cf215fa0 RCX: 00007f46cef9aeb9 [ 494.992684][T13340] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 494.992694][T13340] RBP: 00007f46cfe20090 R08: 0000000000000000 R09: 0000000000000000 [ 494.992705][T13340] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 494.992716][T13340] R13: 00007f46cf216038 R14: 00007f46cf215fa0 R15: 00007ffd82fa68e8 [ 494.992748][T13340] [ 495.016181][T13337] lo: left allmulticast mode [ 495.075715][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'. [ 495.259006][T13339] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1898'. [ 495.286530][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'. [ 495.994230][T13369] netlink: 'syz.1.1909': attribute type 29 has an invalid length. [ 496.003641][T13369] netlink: 'syz.1.1909': attribute type 29 has an invalid length. [ 496.012439][T13369] unsupported nla_type 58 [ 496.050519][T13364] netlink: 'syz.7.1908': attribute type 10 has an invalid length. [ 496.319735][T13373] IPv6: NLM_F_CREATE should be specified when creating new route [ 496.328421][T13373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 496.335734][T13373] IPv6: NLM_F_CREATE should be set when creating new route [ 497.167468][T13404] __nla_validate_parse: 16 callbacks suppressed [ 497.167492][T13404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1918'. [ 497.210620][T13404] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1918'. [ 497.263079][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 497.337234][T13386] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1913'. [ 497.377725][T13401] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1917'. [ 497.430214][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 497.537065][T13401] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1917'. [ 497.622030][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 497.915023][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 497.998659][T13401] netlink: 348 bytes leftover after parsing attributes in process `syz.5.1917'. [ 498.104698][T13419] FAULT_INJECTION: forcing a failure. [ 498.104698][T13419] name failslab, interval 1, probability 0, space 0, times 0 [ 498.185653][T13419] CPU: 0 UID: 0 PID: 13419 Comm: syz.1.1920 Not tainted syzkaller #0 PREEMPT(full) [ 498.185680][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 498.185690][T13419] Call Trace: [ 498.185701][T13419] [ 498.185712][T13419] dump_stack_lvl+0xe8/0x150 [ 498.185752][T13419] should_fail_ex+0x412/0x560 [ 498.185810][T13419] should_failslab+0xa8/0x100 [ 498.185848][T13419] kmem_cache_alloc_noprof+0x87/0x6e0 [ 498.185872][T13419] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 498.185903][T13419] ? skb_clone+0x212/0x3a0 [ 498.185923][T13419] ? __pfx_perf_trace_lock+0x10/0x10 [ 498.185967][T13419] skb_clone+0x212/0x3a0 [ 498.186018][T13419] __netlink_deliver_tap+0x404/0x850 [ 498.186108][T13419] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.186159][T13419] netlink_deliver_tap+0x19c/0x1b0 [ 498.186194][T13419] netlink_unicast+0x7e3/0x9b0 [ 498.186274][T13419] ? __pfx_netlink_unicast+0x10/0x10 [ 498.186303][T13419] ? __alloc_skb+0x193/0x390 [ 498.186332][T13419] ? netlink_sendmsg+0x650/0xb40 [ 498.186349][T13419] ? skb_put+0x11b/0x210 [ 498.186398][T13419] netlink_sendmsg+0x813/0xb40 [ 498.186481][T13419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.186526][T13419] ? aa_sock_msg_perm+0xf1/0x1b0 [ 498.186565][T13419] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 498.186599][T13419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.186620][T13419] ____sys_sendmsg+0xa68/0xad0 [ 498.186650][T13419] ? __pfx_perf_trace_lock+0x10/0x10 [ 498.186710][T13419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.186790][T13419] ? import_iovec+0x73/0xa0 [ 498.186844][T13419] ___sys_sendmsg+0x2a5/0x360 [ 498.186906][T13419] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.187050][T13419] ? __fget_files+0x2a/0x420 [ 498.187141][T13419] ? __fget_files+0x2a/0x420 [ 498.187161][T13419] ? __fget_files+0x3a0/0x420 [ 498.187242][T13419] __x64_sys_sendmsg+0x1bd/0x2a0 [ 498.187289][T13419] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.187308][T13419] ? perf_trace_preemptirq_template+0xab/0x340 [ 498.187383][T13419] ? __pfx_ksys_write+0x10/0x10 [ 498.187483][T13419] do_syscall_64+0xe2/0xf80 [ 498.187506][T13419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.187522][T13419] ? trace_irq_disable+0x37/0x100 [ 498.187538][T13419] ? clear_bhb_loop+0x60/0xb0 [ 498.187578][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.187597][T13419] RIP: 0033:0x7f53d3b9aeb9 [ 498.187620][T13419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.187633][T13419] RSP: 002b:00007f53d49ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.187652][T13419] RAX: ffffffffffffffda RBX: 00007f53d3e16180 RCX: 00007f53d3b9aeb9 [ 498.187666][T13419] RDX: 0000000000040050 RSI: 0000200000000280 RDI: 0000000000000007 [ 498.187677][T13419] RBP: 00007f53d49ef090 R08: 0000000000000000 R09: 0000000000000000 [ 498.187689][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.187699][T13419] R13: 00007f53d3e16218 R14: 00007f53d3e16180 R15: 00007ffd7c0810a8 [ 498.187808][T13419] [ 499.256808][T13436] netlink: 'syz.5.1924': attribute type 21 has an invalid length. [ 499.303159][T13440] netlink: 'syz.0.1927': attribute type 21 has an invalid length. [ 499.692160][T13454] netlink: 'syz.7.1933': attribute type 10 has an invalid length. [ 500.320233][T13475] netlink: 'syz.7.1938': attribute type 17 has an invalid length. [ 500.662743][T13491] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.471587][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.478226][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.551391][T13518] netlink: 'syz.7.1948': attribute type 10 has an invalid length. [ 503.227555][T13559] netlink: 'syz.5.1961': attribute type 21 has an invalid length. [ 503.230995][T13562] netlink: 'syz.0.1960': attribute type 10 has an invalid length. [ 503.258283][T13562] __nla_validate_parse: 37 callbacks suppressed [ 503.258318][T13562] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1960'. [ 503.298525][T13559] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1961'. [ 503.465599][T13557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1960'. [ 503.652288][T13573] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1966'. [ 503.820759][T13577] FAULT_INJECTION: forcing a failure. [ 503.820759][T13577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.846231][T13577] CPU: 1 UID: 0 PID: 13577 Comm: syz.8.1967 Not tainted syzkaller #0 PREEMPT(full) [ 503.846258][T13577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 503.846269][T13577] Call Trace: [ 503.846276][T13577] [ 503.846284][T13577] dump_stack_lvl+0xe8/0x150 [ 503.846310][T13577] should_fail_ex+0x412/0x560 [ 503.846337][T13577] _copy_to_user+0x31/0xb0 [ 503.846362][T13577] simple_read_from_buffer+0xe1/0x170 [ 503.846385][T13577] proc_fail_nth_read+0x1bb/0x230 [ 503.846410][T13577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.846435][T13577] ? rw_verify_area+0x2a6/0x4d0 [ 503.846456][T13577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 503.846480][T13577] vfs_read+0x20c/0xa70 [ 503.846498][T13577] ? irqentry_exit+0x59c/0x620 [ 503.846515][T13577] ? fdget_pos+0x246/0x320 [ 503.846537][T13577] ? __pfx___mutex_lock+0x10/0x10 [ 503.846556][T13577] ? __pfx_vfs_read+0x10/0x10 [ 503.846586][T13577] ? fdget_pos+0x157/0x320 [ 503.846615][T13577] ksys_read+0x150/0x270 [ 503.846639][T13577] ? __pfx_ksys_read+0x10/0x10 [ 503.846672][T13577] do_syscall_64+0xe2/0xf80 [ 503.846690][T13577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.846707][T13577] ? clear_bhb_loop+0x60/0xb0 [ 503.846728][T13577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.846745][T13577] RIP: 0033:0x7f2de6b5b78e [ 503.846783][T13577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 503.846798][T13577] RSP: 002b:00007f2de7ae8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 503.846818][T13577] RAX: ffffffffffffffda RBX: 00007f2de7ae96c0 RCX: 00007f2de6b5b78e [ 503.846831][T13577] RDX: 000000000000000f RSI: 00007f2de7ae90a0 RDI: 0000000000000006 [ 503.846842][T13577] RBP: 00007f2de7ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 503.846853][T13577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.846863][T13577] R13: 00007f2de6e16218 R14: 00007f2de6e16180 R15: 00007ffdc538bfd8 [ 503.846894][T13577] [ 504.665442][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 504.688933][T13598] netlink: 'syz.7.1972': attribute type 3 has an invalid length. [ 504.727846][T13598] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1972'. [ 505.141789][T13616] netlink: 'syz.7.1982': attribute type 10 has an invalid length. [ 505.171718][T13616] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1982'. [ 505.217256][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1982'. [ 505.748797][T13619] syzkaller0: entered promiscuous mode [ 505.769374][T13639] netlink: 'syz.7.1987': attribute type 1 has an invalid length. [ 505.777457][T13619] syzkaller0: entered allmulticast mode [ 505.783212][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1987'. [ 507.985488][T13643] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1987'. [ 507.995399][T13646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1990'. [ 508.005409][T13644] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 508.082662][T13662] netlink: 'syz.7.1995': attribute type 10 has an invalid length. [ 508.326404][T13673] netlink: 'syz.5.1998': attribute type 2 has an invalid length. [ 508.361766][T13677] __nla_validate_parse: 2 callbacks suppressed [ 508.361797][T13677] netlink: 384 bytes leftover after parsing attributes in process `syz.0.2001'. [ 508.468225][T13675] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2000'. [ 508.483240][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2000'. [ 508.500262][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2000'. [ 508.526612][T13675] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2000'. [ 508.666091][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 508.870699][T13692] netlink: 'syz.0.2005': attribute type 1 has an invalid length. [ 509.575477][ T3518] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.082275][ T3518] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.291467][ T3518] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.397533][ T3518] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.682465][ T5147] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 510.703078][ T5147] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 510.724872][ T5147] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 510.743563][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 510.751972][ T5147] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 511.014773][T13725] netlink: 'syz.0.2014': attribute type 2 has an invalid length. [ 511.030152][ T3518] bridge_slave_1: left allmulticast mode [ 511.067554][ T3518] bridge_slave_1: left promiscuous mode [ 511.080646][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.389917][ T3518] bridge_slave_0: left allmulticast mode [ 511.415374][ T3518] bridge_slave_0: left promiscuous mode [ 511.421271][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.743241][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.753836][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.764724][ T3518] bond0 (unregistering): Released all slaves [ 512.781071][T13709] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2008'. [ 512.801714][T13722] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2009'. [ 512.825445][ T5147] Bluetooth: hci1: command tx timeout [ 512.857927][T13760] netlink: 'syz.7.2019': attribute type 49 has an invalid length. [ 514.235212][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2023'. [ 514.367979][T13791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2023'. [ 514.558797][T13811] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2027'. [ 514.784772][T13816] netlink: 'syz.0.2028': attribute type 2 has an invalid length. [ 514.905572][ T5147] Bluetooth: hci1: command tx timeout [ 515.073732][T13829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2031'. [ 515.093803][T13829] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2031'. [ 515.498728][T13841] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2033'. [ 515.579050][T13715] chnl_net:caif_netlink_parms(): no params data found [ 515.912942][T13838] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2032'. [ 515.960377][ T3518] hsr_slave_0: left promiscuous mode [ 515.984999][ T3518] hsr_slave_1: left promiscuous mode [ 515.996386][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.026082][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.051346][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.071244][T13854] netlink: 'syz.5.2036': attribute type 10 has an invalid length. [ 516.079311][T13853] netlink: 'syz.7.2037': attribute type 10 has an invalid length. [ 516.087275][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.087489][T13854] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2036'. [ 516.108639][T13853] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2037'. [ 516.128033][ T3518] veth1_vlan: left promiscuous mode [ 516.134008][T13857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2036'. [ 516.134802][ T3518] veth0_vlan: left promiscuous mode [ 516.619839][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 516.662214][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 516.985497][ T5147] Bluetooth: hci1: command tx timeout [ 517.388991][T13870] netlink: 'syz.7.2041': attribute type 10 has an invalid length. [ 517.413006][T13715] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.444700][T13715] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.455743][T13715] bridge_slave_0: entered allmulticast mode [ 517.486635][T13715] bridge_slave_0: entered promiscuous mode [ 517.499226][T13715] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.523540][T13715] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.532625][T13715] bridge_slave_1: entered allmulticast mode [ 517.541433][T13715] bridge_slave_1: entered promiscuous mode [ 517.677829][T13715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.504669][T13715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.521457][T13879] netlink: 'syz.1.2042': attribute type 2 has an invalid length. [ 518.546541][T13879] tipc: Started in network mode [ 518.551447][T13879] tipc: Node identity 340008, cluster identity 4711 [ 518.560921][T13879] tipc: Node number set to 3407880 [ 518.587088][T13883] netlink: 'syz.0.2044': attribute type 1 has an invalid length. [ 518.663122][T13715] team0: Port device team_slave_0 added [ 518.678102][T13715] team0: Port device team_slave_1 added [ 518.967618][T13715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.987301][T13715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.066097][ T5147] Bluetooth: hci1: command tx timeout [ 519.097261][T13715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.159445][T13715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.177774][T13715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.257241][T13715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.324994][T13919] netlink: 'syz.1.2051': attribute type 10 has an invalid length. [ 519.372880][T13919] __nla_validate_parse: 4 callbacks suppressed [ 519.372911][T13919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2051'. [ 519.402903][ T5147] Bluetooth: hci7: Dropping invalid advertising data [ 519.411054][ T5147] Bluetooth: hci7: unknown advertising packet type: 0xdc [ 519.411084][ T5147] Bluetooth: hci7: Malformed LE Event: 0x02 [ 519.490764][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 519.520487][T13908] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2049'. [ 519.600017][T13715] hsr_slave_0: entered promiscuous mode [ 519.642604][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 519.651415][T13715] hsr_slave_1: entered promiscuous mode [ 519.718223][T13908] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2049'. [ 519.763232][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 520.000469][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 520.004366][T13946] netlink: 'syz.5.2055': attribute type 10 has an invalid length. [ 520.030440][T13946] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2055'. [ 520.043052][T13908] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2049'. [ 520.081497][T13940] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2055'. [ 520.106447][T13954] nbd: couldn't find a device at index 384 [ 520.242306][T13957] netlink: 'syz.7.2056': attribute type 2 has an invalid length. [ 522.800067][T13991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.833871][T13991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.897539][T13991] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 522.938216][T13991] bond0 (unregistering): Released all slaves [ 523.029859][T13998] netlink: 'syz.1.2065': attribute type 10 has an invalid length. [ 523.058860][T14006] netlink: 'syz.7.2067': attribute type 10 has an invalid length. [ 523.133473][T13998] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.163106][T13998] bridge_slave_1: left allmulticast mode [ 523.179207][T13998] bridge_slave_1: left promiscuous mode [ 523.204244][T13998] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.267857][T13998] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 523.484944][T14020] netlink: 'syz.5.2069': attribute type 10 has an invalid length. [ 523.509408][T13715] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 523.549774][T13715] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 523.619272][T13715] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 523.668001][T14030] netlink: 'syz.7.2072': attribute type 2 has an invalid length. [ 523.683518][T13715] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 524.031480][ T5147] Bluetooth: hci0: command 0x0406 tx timeout [ 524.240676][T13715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.292813][T13715] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.338199][ T9098] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.345401][ T9098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.410246][ T9098] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.417447][ T9098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.563023][T14058] delete_channel: no stack [ 524.691218][T14068] __nla_validate_parse: 10 callbacks suppressed [ 524.691237][T14068] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2080'. [ 524.847152][T14068] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2080'. [ 524.869795][T14078] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2080'. [ 524.911979][T14080] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2082'. [ 524.979368][T14084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2082'. [ 525.018686][T14085] netlink: 'syz.0.2083': attribute type 10 has an invalid length. [ 525.020948][T14087] netlink: 'syz.7.2084': attribute type 2 has an invalid length. [ 525.034492][T14085] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2083'. [ 525.073277][T14085] batman_adv: batadv0: Adding interface: veth0_vlan [ 525.080735][T14085] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.129738][T14085] batman_adv: batadv0: Interface activated: veth0_vlan [ 525.208522][T13715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.440546][T14106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2087'. [ 525.908713][ T30] audit: type=1107 audit(1770389137.424:4): pid=14115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 525.994247][T14120] syz.1.2091: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 526.146769][T14120] CPU: 0 UID: 0 PID: 14120 Comm: syz.1.2091 Not tainted syzkaller #0 PREEMPT(full) [ 526.146797][T14120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 526.146809][T14120] Call Trace: [ 526.146819][T14120] [ 526.146831][T14120] dump_stack_lvl+0xe8/0x150 [ 526.146880][T14120] warn_alloc+0x249/0x340 [ 526.146912][T14120] ? stack_trace_save+0xa9/0x100 [ 526.146955][T14120] ? __pfx_warn_alloc+0x10/0x10 [ 526.147016][T14120] ? kasan_save_track+0x4f/0x80 [ 526.147032][T14120] ? kasan_save_track+0x3e/0x80 [ 526.147048][T14120] ? __kasan_kmalloc+0x93/0xb0 [ 526.147065][T14120] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 526.147083][T14120] ? xskq_create+0x56/0x170 [ 526.147103][T14120] ? xsk_setsockopt+0x603/0x990 [ 526.147127][T14120] ? do_sock_setsockopt+0x17c/0x1b0 [ 526.147150][T14120] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 526.147172][T14120] ? do_syscall_64+0xe2/0xf80 [ 526.147211][T14120] __vmalloc_node_range_noprof+0x132/0x1730 [ 526.147383][T14120] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 526.147440][T14120] ? __kasan_kmalloc+0x93/0xb0 [ 526.147493][T14120] vmalloc_user_noprof+0xad/0xe0 [ 526.147519][T14120] ? xskq_create+0xbf/0x170 [ 526.147549][T14120] xskq_create+0xbf/0x170 [ 526.147588][T14120] xsk_init_queue+0xad/0x110 [ 526.147635][T14120] xsk_setsockopt+0x603/0x990 [ 526.147682][T14120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 526.147717][T14120] ? __pfx_aa_sk_perm+0x10/0x10 [ 526.147762][T14120] ? __fget_files+0x2a/0x420 [ 526.147780][T14120] ? aa_sock_opt_perm+0xff/0x1a0 [ 526.147826][T14120] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 526.147852][T14120] ? __pfx_xsk_setsockopt+0x10/0x10 [ 526.147894][T14120] do_sock_setsockopt+0x17c/0x1b0 [ 526.147946][T14120] __x64_sys_setsockopt+0x13d/0x1b0 [ 526.148004][T14120] do_syscall_64+0xe2/0xf80 [ 526.148028][T14120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.148046][T14120] ? trace_irq_disable+0x37/0x100 [ 526.148064][T14120] ? clear_bhb_loop+0x60/0xb0 [ 526.148104][T14120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.148124][T14120] RIP: 0033:0x7f53d3b9aeb9 [ 526.148147][T14120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.148164][T14120] RSP: 002b:00007f53d4a10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 526.148185][T14120] RAX: ffffffffffffffda RBX: 00007f53d3e16090 RCX: 00007f53d3b9aeb9 [ 526.148199][T14120] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 526.148210][T14120] RBP: 00007f53d3c08c1f R08: 0000000000000004 R09: 0000000000000000 [ 526.148222][T14120] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 526.148234][T14120] R13: 00007f53d3e16128 R14: 00007f53d3e16090 R15: 00007ffd7c0810a8 [ 526.148331][T14120] [ 526.148339][T14120] Mem-Info: [ 526.572127][T14114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2090'. [ 526.585243][T14120] active_anon:7744 inactive_anon:0 isolated_anon:0 [ 526.585243][T14120] active_file:19929 inactive_file:40112 isolated_file:0 [ 526.585243][T14120] unevictable:768 dirty:168 writeback:25 [ 526.585243][T14120] slab_reclaimable:6932 slab_unreclaimable:145656 [ 526.585243][T14120] mapped:30302 shmem:1376 pagetables:1780 [ 526.585243][T14120] sec_pagetables:0 bounce:0 [ 526.585243][T14120] kernel_misc_reclaimable:0 [ 526.585243][T14120] free:1263276 free_pcp:14369 free_cma:0 [ 526.634993][T14114] netlink: 46 bytes leftover after parsing attributes in process `syz.0.2090'. [ 526.662698][T14120] Node 0 active_anon:31076kB inactive_anon:0kB active_file:79716kB inactive_file:160244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121208kB dirty:672kB writeback:100kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13544kB pagetables:6896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 526.669720][T14125] netlink: 'syz.7.2092': attribute type 10 has an invalid length. [ 526.701321][T14120] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 526.715740][T14114] netlink: 46 bytes leftover after parsing attributes in process `syz.0.2090'. [ 526.790721][T14120] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 526.869821][T14120] lowmem_reserve[]: 0 2494 2495 2495 2495 [ 526.896863][T13715] veth0_vlan: entered promiscuous mode [ 526.914454][T13715] veth1_vlan: entered promiscuous mode [ 526.939353][T14120] Node 0 DMA32 free:1146932kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30840kB inactive_anon:0kB active_file:79716kB inactive_file:160252kB unevictable:1536kB writepending:676kB zspages:0kB present:3129332kB managed:2554128kB mlocked:0kB bounce:0kB free_pcp:37756kB local_pcp:16792kB free_cma:0kB [ 527.018405][T14120] lowmem_reserve[]: 0 0 1 1 1 [ 527.031398][T14120] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 527.054399][T13715] veth0_macvtap: entered promiscuous mode [ 527.073494][T14120] lowmem_reserve[]: 0 0 0 0 0 [ 527.092385][T14120] Node 1 Normal free:3891168kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19616kB local_pcp:5504kB free_cma:0kB [ 527.111643][T13715] veth1_macvtap: entered promiscuous mode [ 527.137410][T14120] lowmem_reserve[]: 0 0 0 0 0 [ 527.144629][T14120] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 527.205301][T14120] Node 0 DMA32: 2177*4kB (UM) 2926*8kB (UME) 2264*16kB (UME) 2608*32kB (UME) 1483*64kB (UME) 902*128kB (UME) 371*256kB (UME) 242*512kB (UME) 134*1024kB (UM) 59*2048kB (UM) 75*4096kB (UM) = 1146292kB [ 527.218313][T13715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 527.291310][T14120] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 527.310751][T14145] netlink: 'syz.0.2097': attribute type 2 has an invalid length. [ 527.327268][T14120] Node 1 Normal: 172*4kB (UE) 64*8kB (UME) 49*16kB (UME) 75*32kB (UME) 21*64kB (UME) 9*128kB (UME) 3*256kB (ME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891168kB [ 527.337912][T13715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.356567][T14120] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.366991][T14120] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 527.377250][T14120] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 527.389946][T14120] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 527.400340][T14120] 61416 total pagecache pages [ 527.404518][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.425288][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.433459][T14120] 0 pages in swap cache [ 527.434030][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.443773][T14120] Free swap = 124996kB [ 527.460338][T14120] Total swap = 124996kB [ 527.467199][T14120] 2097051 pages RAM [ 527.472527][T14120] 0 pages HighMem/MovableOnly [ 527.482640][T14120] 426621 pages reserved [ 527.489853][T14120] 0 pages cma reserved [ 530.104510][ T3538] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.469508][ T9098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.494273][ T9098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.527148][T14170] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 530.550593][T14170] __nla_validate_parse: 4 callbacks suppressed [ 530.550624][T14170] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2101'. [ 530.578777][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.591777][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.674309][T14181] netlink: 'syz.5.2103': attribute type 16 has an invalid length. [ 530.699069][T14181] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2103'. [ 530.718255][T14181] veth1_macvtap: entered allmulticast mode [ 531.076474][T14194] netlink: 'syz.1.2105': attribute type 10 has an invalid length. [ 531.085871][T14194] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2105'. [ 531.126937][T14195] netlink: 'syz.0.2106': attribute type 1 has an invalid length. [ 531.154976][T14194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'. [ 531.260387][T14195] syzkaller0: entered promiscuous mode [ 531.266223][T14195] syzkaller0: entered allmulticast mode [ 531.278144][T14168] ------------[ cut here ]------------ [ 531.283949][T14168] !atomic_long_inc_not_zero(&event->refcount) [ 531.283965][T14168] WARNING: kernel/events/core.c:10447 at __perf_event_overflow+0xb9e/0xec0, CPU#0: syz.7.2100/14168 [ 531.301652][T14168] Modules linked in: [ 531.306491][T14168] CPU: 0 UID: 0 PID: 14168 Comm: syz.7.2100 Not tainted syzkaller #0 PREEMPT(full) [ 531.315952][T14168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.326192][T14168] RIP: 0010:__perf_event_overflow+0xb9e/0xec0 [ 531.332281][T14168] Code: 90 36 00 4d 89 3e 4c 8b 7c 24 10 e9 c2 fc ff ff e8 27 43 ce ff 49 bd 00 00 00 00 00 fc ff df e9 08 fe ff ff e8 13 43 ce ff 90 <0f> 0b 90 e9 21 ff ff ff e8 05 43 ce ff 48 c7 c7 e0 11 b7 8b e8 f9 [ 531.352673][T14168] RSP: 0000:ffffc900039df780 EFLAGS: 00010283 [ 531.358958][T14168] RAX: ffffffff81f6343d RBX: ffff88807e4193d8 RCX: 0000000000080000 [ 531.367172][T14168] RDX: ffffc90023011000 RSI: 0000000000000388 RDI: 0000000000000389 [ 531.375243][T14168] RBP: ffffc900039df890 R08: ffff88807e41952f R09: 1ffff1100fc832a5 [ 531.383236][T14168] R10: dffffc0000000000 R11: ffffed100fc832a6 R12: ffff88807e4192d8 [ 531.391459][T14168] R13: dffffc0000000000 R14: ffff88807e419528 R15: 0000000000000000 [ 531.400071][T14168] FS: 00007f34a1ede6c0(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 531.409503][T14168] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 531.416166][T14168] CR2: 00007f34a1ede660 CR3: 0000000070b08000 CR4: 00000000003526f0 [ 531.424681][T14168] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 531.432749][T14168] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 531.440815][T14168] Call Trace: [ 531.444117][T14168] [ 531.447142][T14168] ? __perf_event_overflow+0x561/0xec0 [ 531.452627][T14168] ? __pfx___perf_event_overflow+0x10/0x10 [ 531.458528][T14168] ? is_bpf_text_address+0x26/0x2b0 [ 531.463755][T14168] ? is_bpf_text_address+0x26/0x2b0 [ 531.469385][T14168] perf_swevent_event+0x323/0x650 [ 531.471330][T14203] netlink: 'syz.5.2109': attribute type 13 has an invalid length. [ 531.474442][T14168] ? ___perf_sw_event+0x198/0x730 [ 531.483279][T14203] netlink: 24859 bytes leftover after parsing attributes in process `syz.5.2109'. [ 531.487524][T14168] ? __pfx_perf_swevent_event+0x10/0x10 [ 531.487553][T14168] ? kernel_text_address+0xa5/0xe0 [ 531.508378][T14168] ___perf_sw_event+0x4a6/0x730 [ 531.513261][T14168] ? ___perf_sw_event+0x198/0x730 [ 531.518518][T14168] ? __pfx____perf_sw_event+0x10/0x10 [ 531.521725][T14199] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2108'. [ 531.524026][T14168] ? count_memcg_event_mm+0x21/0x260 [ 531.524076][T14168] __perf_sw_event+0xf9/0x1a0 [ 531.524105][T14168] handle_mm_fault+0x3128/0x32a0 [ 531.524134][T14168] ? __pfx_perf_trace_lock+0x10/0x10 [ 531.524171][T14168] ? handle_mm_fault+0xee/0x32a0 [ 531.524209][T14168] ? __pfx_handle_mm_fault+0x10/0x10 [ 531.524235][T14168] ? lock_vma_under_rcu+0x45a/0x500 [ 531.524274][T14168] ? task_work_run+0x21f/0x270 [ 531.524299][T14168] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 531.524336][T14168] do_user_addr_fault+0xa73/0x1360 [ 531.524376][T14168] ? rcu_is_watching+0x15/0xb0 [ 531.524400][T14168] ? trace_page_fault_user+0x84/0x1c0 [ 531.524440][T14168] exc_page_fault+0x6a/0xc0 [ 531.524465][T14168] asm_exc_page_fault+0x26/0x30 [ 531.524486][T14168] RIP: 0033:0x7f34a0e610be [ 531.524506][T14168] Code: 00 00 00 64 f0 83 04 25 a0 ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 d8 fe ff ff e8 0a af 0d 00 85 c0 0f 84 a2 01 00 00 <64> f0 83 2c 25 a0 ff ff ff 01 e8 b3 90 0c 00 48 8b 4c 24 08 8b 00 [ 531.524526][T14168] RSP: 002b:00007f34a1ede050 EFLAGS: 00010206 [ 531.524548][T14168] RAX: 0000000000000000 RBX: 00007f34a1215fa0 RCX: 00007f34a1008c1f [ 531.524564][T14168] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 531.524578][T14168] RBP: 00007f34a1008c1f R08: 0000000000000000 R09: 0000000000000000 [ 531.524593][T14168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.524606][T14168] R13: 00007f34a1216038 R14: 00007f34a1215fa0 R15: 00007ffed69a4278 [ 531.524644][T14168] [ 531.524657][T14168] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 531.524672][T14168] CPU: 0 UID: 0 PID: 14168 Comm: syz.7.2100 Not tainted syzkaller #0 PREEMPT(full) [ 531.524695][T14168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.524706][T14168] Call Trace: [ 531.524714][T14168] [ 531.524723][T14168] vpanic+0x1e0/0x670 [ 531.524752][T14168] panic+0xc5/0xd0 [ 531.524775][T14168] ? __pfx_panic+0x10/0x10 [ 531.524817][T14168] __warn+0x315/0x4a0 [ 531.524836][T14168] ? __perf_event_overflow+0xb9e/0xec0 [ 531.524856][T14168] ? __perf_event_overflow+0xb9e/0xec0 [ 531.524876][T14168] __report_bug+0x29a/0x540 [ 531.524904][T14168] ? __perf_event_overflow+0xb9e/0xec0 [ 531.524924][T14168] ? __pfx___report_bug+0x10/0x10 [ 531.524964][T14168] ? __perf_event_overflow+0xb9e/0xec0 [ 531.524983][T14168] report_bug+0x16a/0x220 [ 531.525003][T14168] ? __perf_event_overflow+0xb9e/0xec0 [ 531.525020][T14168] ? __perf_event_overflow+0xba0/0xec0 [ 531.525037][T14168] handle_bug+0x98/0x200 [ 531.525061][T14168] exc_invalid_op+0x1a/0x50 [ 531.525084][T14168] asm_exc_invalid_op+0x1a/0x20 [ 531.525106][T14168] RIP: 0010:__perf_event_overflow+0xb9e/0xec0 [ 531.525125][T14168] Code: 90 36 00 4d 89 3e 4c 8b 7c 24 10 e9 c2 fc ff ff e8 27 43 ce ff 49 bd 00 00 00 00 00 fc ff df e9 08 fe ff ff e8 13 43 ce ff 90 <0f> 0b 90 e9 21 ff ff ff e8 05 43 ce ff 48 c7 c7 e0 11 b7 8b e8 f9 [ 531.525141][T14168] RSP: 0000:ffffc900039df780 EFLAGS: 00010283 [ 531.525158][T14168] RAX: ffffffff81f6343d RBX: ffff88807e4193d8 RCX: 0000000000080000 [ 531.525173][T14168] RDX: ffffc90023011000 RSI: 0000000000000388 RDI: 0000000000000389 [ 531.525186][T14168] RBP: ffffc900039df890 R08: ffff88807e41952f R09: 1ffff1100fc832a5 [ 531.525201][T14168] R10: dffffc0000000000 R11: ffffed100fc832a6 R12: ffff88807e4192d8 [ 531.525216][T14168] R13: dffffc0000000000 R14: ffff88807e419528 R15: 0000000000000000 [ 531.525239][T14168] ? __perf_event_overflow+0xb9d/0xec0 [ 531.525270][T14168] ? __perf_event_overflow+0x561/0xec0 [ 531.525294][T14168] ? __pfx___perf_event_overflow+0x10/0x10 [ 531.525311][T14168] ? is_bpf_text_address+0x26/0x2b0 [ 531.525336][T14168] ? is_bpf_text_address+0x26/0x2b0 [ 531.525369][T14168] perf_swevent_event+0x323/0x650 [ 531.525387][T14168] ? ___perf_sw_event+0x198/0x730 [ 531.525411][T14168] ? __pfx_perf_swevent_event+0x10/0x10 [ 531.525438][T14168] ? kernel_text_address+0xa5/0xe0 [ 531.525471][T14168] ___perf_sw_event+0x4a6/0x730 [ 531.525495][T14168] ? ___perf_sw_event+0x198/0x730 [ 531.525513][T14168] ? __pfx____perf_sw_event+0x10/0x10 [ 531.525572][T14168] ? count_memcg_event_mm+0x21/0x260 [ 531.525609][T14168] __perf_sw_event+0xf9/0x1a0 [ 531.525634][T14168] handle_mm_fault+0x3128/0x32a0 [ 531.525660][T14168] ? __pfx_perf_trace_lock+0x10/0x10 [ 531.525692][T14168] ? handle_mm_fault+0xee/0x32a0 [ 531.525728][T14168] ? __pfx_handle_mm_fault+0x10/0x10 [ 531.525751][T14168] ? lock_vma_under_rcu+0x45a/0x500 [ 531.525786][T14168] ? task_work_run+0x21f/0x270 [ 531.525808][T14168] ? __pfx_blkcg_maybe_throttle_current+0x10/0x10 [ 531.525840][T14168] do_user_addr_fault+0xa73/0x1360 [ 531.525877][T14168] ? rcu_is_watching+0x15/0xb0 [ 531.525897][T14168] ? trace_page_fault_user+0x84/0x1c0 [ 531.525929][T14168] exc_page_fault+0x6a/0xc0 [ 531.525950][T14168] asm_exc_page_fault+0x26/0x30 [ 531.525968][T14168] RIP: 0033:0x7f34a0e610be [ 531.525983][T14168] Code: 00 00 00 64 f0 83 04 25 a0 ff ff ff 01 64 48 8b 04 25 00 00 00 00 48 8d b8 d8 fe ff ff e8 0a af 0d 00 85 c0 0f 84 a2 01 00 00 <64> f0 83 2c 25 a0 ff ff ff 01 e8 b3 90 0c 00 48 8b 4c 24 08 8b 00 [ 531.525999][T14168] RSP: 002b:00007f34a1ede050 EFLAGS: 00010206 [ 531.526015][T14168] RAX: 0000000000000000 RBX: 00007f34a1215fa0 RCX: 00007f34a1008c1f [ 531.526029][T14168] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000007 [ 531.526041][T14168] RBP: 00007f34a1008c1f R08: 0000000000000000 R09: 0000000000000000 [ 531.526054][T14168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.526066][T14168] R13: 00007f34a1216038 R14: 00007f34a1215fa0 R15: 00007ffed69a4278 [ 531.526102][T14168] [ 531.534106][T14168] Kernel Offset: disabled