last executing test programs: 9m31.044233985s ago: executing program 32 (id=67): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020004010000000000000000000000850000008700000085000000070000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000004f0001000abc7c00000000000004"], 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0fc547ed387dbe9abc89b6f7bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 8m52.125972784s ago: executing program 33 (id=277): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c00000001900010028bd7000fedbdf25fe8000000000000000000000000000bb0500000000000000000000100000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000000000000000000000000000000000000000000000000000000000000060000000000000001000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000008000c0001000100"], 0xc0}}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x2fcaa96ab9c96e56, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000036000100fc37c6fa83fb8cbf0700000008000180"], 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6202, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x23, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 8m48.573128911s ago: executing program 34 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000ac0)='./file0\x00', 0x18b) mount$bpf(0x20000000f0ff, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000000), 0x80, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffd11}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffeb}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0/file0\x00', r1}, 0x18) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@generic={&(0x7f0000000400)='./file0/../file0\x00'}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000004000ffffffff7000fedbdf25037c00d60400c28008000a"], 0x20}, 0x1, 0x0, 0x0, 0x8000000}, 0xc000) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000001680)=""/4098, 0x1002, 0x0, &(0x7f0000000000)=""/65, 0x41}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24044010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x240, 0x4, 0x0, 0x1, [{0x23c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x22c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'cgroup\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x294}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_ext={0x1c, 0x3, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000b40)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x6883, r7, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x7b9615625bfdc03e, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x4008055) socket$kcm(0x21, 0x2, 0x2) 8m44.953033568s ago: executing program 35 (id=300): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000680)="7993ff011900000000a63b00008f", 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) 8m42.211591966s ago: executing program 36 (id=244): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x1e, 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x9) socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80080003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040f00, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8m31.024812459s ago: executing program 37 (id=299): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x1, 0x2000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114905, 0x6, 0x9, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) socket(0x10, 0x3, 0x4) sendmsg$qrtr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r1}, 0x4) 8m29.101890174s ago: executing program 38 (id=310): socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x1a) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/143, 0x8f}, {&(0x7f0000001780)=""/4105, 0x1009}], 0x2}, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000000405000300000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000500004d"], 0x80}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dc000001000007c80003802c00018014000300fe80000000000000000000000000001b14000400000000000000000000000000000000011400018008000100ffffffff08000200000000000c00028005000100210000000c00028005000100210000002c00018014000300fe88000000000000000000000000000114000400fe80000000000000000000000000002f2c00018014000300fc00000000000000000000000000000114000400fc0200000000000000000000000000011400018008000100ac1e000108000200ac1e0101"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x7}, 0x10410, 0x0, 0x3e, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}, 0x810) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xd4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 8m26.424818134s ago: executing program 39 (id=323): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x84, 0x71, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0x4}, 0x100000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0xfffffffffffffff1}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x84, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x400, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1700000000000000008400000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000ddffffff020000000000000000000200000000"], 0x50) close(r4) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, 0x0, 0x4c040) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x61, 0x30, 0x61]}}, 0x0, 0x39, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300263b5fba0000040000000a0000000009000012e3240208ea02a98eeb2726ed262123f4aece98b108526e99b1a7fc57a837a527b11dc5be6ddb89a920546039cf7141", @ANYRESHEX=r2, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES16=r5, @ANYRES16=r0], 0x50) openat$cgroup_ro(r5, &(0x7f00000002c0)='pids.events\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) close(0x3) 8m24.65965049s ago: executing program 40 (id=330): socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x8100000}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r3 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x0, 0x2b, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0xd5, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7ff, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, r0, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f00000006c0)={0x0, 0x80, 0x9, 0x6, 0x8, 0xfc, 0x0, 0xaf0, 0x9000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffad8, 0x2, @perf_bp={&(0x7f0000000400), 0x1}, 0x14, 0x6, 0x1, 0x9, 0x3, 0x52e, 0x200, 0x0, 0x7, 0x0, 0x4}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x2, 0x599, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x1, 0x6, 0x5, 0x41, 0x0, 0x4, 0x44000, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0x6}, 0x408, 0x8, 0x9, 0x4, 0x4, 0x10001, 0x6, 0x0, 0x2c8c, 0x0, 0xffffffff80000000}, 0xffffffffffffffff, 0x4, r7, 0x4) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=r6], 0x14}}, 0x8000) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x80) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) 8m21.873674108s ago: executing program 41 (id=337): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x26002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0xf1afa58fcbc54a94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0xb, 0x98, 0x1, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x3, 0x86, 0x0, 0x20000000, 0x4000, 0xf49f2e8172822075, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x2, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x5, 0x401}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) 8m10.342866297s ago: executing program 42 (id=347): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 8m7.981789852s ago: executing program 43 (id=358): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x5324}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) 8m6.584030462s ago: executing program 44 (id=364): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newchain={0x24, 0x1e, 0x1, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xd, 0x1}, {0xffe0, 0xb}}}, 0x24}}, 0x44004) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9c001e001a008ebf07a551559a257aac810e"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d800000021008104", 0x8}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x541b, &(0x7f0000000240)) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_config_ext={0x7, 0x5}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x4000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f3"], 0xcfa4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x50) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000040)={'lo\x00', @random='\x00\x00\x00\x00\x00 '}) 8m1.258582073s ago: executing program 45 (id=372): syz_clone(0x20000000, &(0x7f0000000100)="419ee514cf80ae2f829cccb4010d03c257984b02708c2ebee85835ce847d159c06bc6f09f3b55273d32d5895d7dde27d305311c24309cdc5435f712ed8692f7de50269439a5efb47621a0a02fe292e4043f0bf3018b000cf888cb955e49005ba7205a8c748f041", 0x67, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)="40bf28d1ca6b4f5dfd0a6ff52b01e02dcc1ce118ff7fc8b637414343bf9590d8ca488bab17436880caccc1aaea066f77f2c4290cb568adeb84d8a27668677ebcc79dcc1c47694243a747341523cad955b27d24a59df33502c8fb3141c99ba4b32580acf081daffc33c84f8de8497011d0b4e91d75bdd") r0 = syz_clone(0x5000, &(0x7f0000000440)="38c043ac40419ad05e092f44707db2b1c4009e41e365a623387600b1b40cc667c4c826233b3faf20d9b00f8a47187aa5cec1a6f3c93e7288f99a0893f7391edbea095fcf6e7f4e89927e44dbdd87fc93c7c18ab3bbce9a1505b838fea7c1d8d6015a632222f09ce278cb1165536b997b35da9fc2747f0fa969003125a237a6f488612611b3f65612984258b04bb07bf29fce285d5c08735c0af32c246b587c17e7481c36a33434bc538aa75141823649eeca5caf959f2dd29462b1e9bae020caeb193610e875c605c1340d963d6a620d6f100dfb37a29fdd06ac7b7c49a1b2", 0xdf, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="341013af99dfcadeb22964aa2b016edbe6909684a7c7c6334fe42fa12d15a52a65373d85bcc8367bceaa517a42dbc86708bd2757ab00bc035d4f37efd9abe62f9353f3175def5674a47d4cd4cc18bf1bfd6471ad682790b78b0762cf10cdf8de17e0cd4936a8da64d79110adff93beb20c2d88e5905e6a4eb3e171fb978faa0e414aeb36a14abb") r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x480, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0xfffffffc, 0x2, 0xfffffffffffffff7, 0xffffdffd, 0x1, 0x0, 0x0, 0x0, 0x107}, r0, 0x1, 0xffffffffffffffff, 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r2, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r2, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="04000000", @ANYRES32], 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000084c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020025642532000000000900010073797a30000000000800054000000002"], 0x40c4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) 7m57.9994693s ago: executing program 46 (id=379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x1002, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000500000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a8001600070001400637d10337f749f068000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf3309d5e1ca", 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002280)={r3, 0xe0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001fc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002040)=[0x0, 0x0], 0x0, 0x85, &(0x7f0000002080)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000020c0), &(0x7f0000002100), 0x8, 0x81, 0x8, 0x8, &(0x7f0000002140)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002400)={0x83e3675c400ccbee, 0xa, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}, [@ldst={0x3, 0x1, 0x2, 0x4, 0x8, 0x10, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x0, 0x4, 0x4, 0x18, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f00000003c0)='GPL\x00', 0x7ff, 0x1000, &(0x7f0000000fc0)=""/4096, 0x41000, 0x44, '\x00', r6, 0x0, r4, 0x8, &(0x7f00000022c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000002300)={0x5, 0x5, 0x29, 0x401}, 0x10, 0x0, 0x0, 0x9, 0x0, &(0x7f0000002340)=[{0x3, 0x4, 0x7, 0x1}, {0x2, 0x4, 0x9, 0xb}, {0x3, 0x5, 0xc, 0x5}, {0x1, 0x3, 0x6, 0x5}, {0x2, 0x4, 0xb, 0xb}, {0x4, 0x5, 0xa, 0x9}, {0x4, 0x5, 0xa, 0x9}, {0x2, 0x3, 0x7, 0x1}, {0x0, 0x3, 0x0, 0x8}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getpid() r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)=ANY=[@ANYBLOB="24000000b8b6b3d800000000000000000a000008050003000600000006000240888e0000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) socket$kcm(0x2, 0x5, 0x84) 7m29.537945711s ago: executing program 8 (id=475): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001640), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001680)={r1, r2}) sendmsg$inet(r1, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x10, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000af00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004830}, 0x80) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x8, 0x3, 0x101, &(0x7f0000001280)) sendmsg$inet(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000006c0)="75c1ccd07a5210ca6c94e254730800606759578db363f48925080034d4361384db13fd737428808959bcd0842fc930c81a8bd8b665cd232c5829977dd63ce2c88d43b177e47be6084fe6987e00000000003477dbf56c0a5a", 0x58}, {&(0x7f0000000380)}], 0x2}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{0x1}, &(0x7f0000001440), &(0x7f0000001480)=r4}, 0x20) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f00000012c0)=""/103, 0x67}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/127, 0x7f}, {&(0x7f0000002800)=""/160, 0xa0}, {&(0x7f00000028c0)=""/156, 0x9c}, {&(0x7f0000002980)=""/71, 0x47}, {&(0x7f0000001340)=""/226, 0xe2}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x8}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000140), 0x0}, 0x20) close(r5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x4, 0xc, 0x7f, 0x0, 0x400000001, 0x80494, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x100600, 0xfffffffffffffffd, 0x5, 0x7, 0x4, 0x5, 0x8, 0x0, 0xd798, 0x0, 0x7}, 0x0, 0x11, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000300)=r9, 0x4) 7m29.129762815s ago: executing program 8 (id=477): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3ff, 0xf8, &(0x7f0000000600)=""/248, 0x40f00, 0x25, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x0, 0x10, 0xfffffff8}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc8910610700fa6fa26fa7088c60897d4a6148a1c1e43f00001bde605cbeac671e8e8fdecb035865e362ead91b1979a5ae30705b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd21142525815b91076ccb7b37b41215c184e731fb13d100323b77f613af02b6f3259d6f3ac85da4fe304ecfca2be5f4a8b3910a8f0a88d082ac161c4a3c1132831a88f199f67aca8f4698996d076250b2b75cdc7776b8cab72716149f70efb190007832c6077da0df4c63a226284cd6a2e5ec5bb28f18dd44821065b9758fd159c490421901361244c01bfa0cddbc726f2b4ceace9f9309f507e6a7135b33f418af0a63bfb480c2feced947dae1d7dc19c4f1807b17c559c27be4d18b2e0a3cf26832d7fc97cea307de1852f90317b501bf66473eb6dac986d7b5682abc3a5ea1dabde56b9e3a56ba20a65dc0df39edd5f34ed22a8f0c6594a894901e455d0369e407dae0f4fb4e181415153000000b6b384cb4bbfd4edfd70cd7324de228e1047a61292abe63fc71063a9040bd927779d56ef0f4725dfb3822ce1e24632f7d51a0e65bd5664fcd3e4a0b0388b842115b5689769438f9763a55956288e78b6cad0ff3f310722b4a5cc4f25a69753fcc8ece189808e6f2f71ca2337d0de3a9feaa3f4cd2a2c69d21daec3751aca69f0a6f5b0af65aace6d04dad91c67e57a0f7b8accb3f8d9b787e002e56a7149c2d10a268884e695256ddb9c17853e29689f41667522e6932294"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="260000000000004e79b36a00", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r3, 0x26, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x0, 0x1f, 0x6d, &(0x7f0000000880)="4710822a0c6239d25d0d10598c7fbb5a326a78b5fe93a84133121e4ba52957", &(0x7f00000008c0)=""/109, 0x3, 0x0, 0xa5, 0x0, &(0x7f0000000940)="bed89d774ded77dd691ca59d21b109d9e0699dd3b365fe6bb77a76d588c492a5fa1956a72c00038df12716611025a3aa624de84c3e20316080749aa812551e50cf963f5cf37384f99d7397b9b5c315369f14ae8f26ff9039d3bf9e316f8c9127e5f91ab5d710ecbaca03a83b04089fb1ab29e2a0a3bcdeb285dfe4519cc9fe826004cdf1729ad4594d69121d2d26d0ff8db151408bd5319931463cf409da0a60c98ad3b08d", 0x0, 0x4, 0x0, 0x6}, 0x50) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048004}, 0x80) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x480f0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="940100001000010028bc7000fdffffffff020000000000000000000000000001ac14140d0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}}, 0x44050) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000004c0)=ANY=[@ANYBLOB="131000002c0091bcd8b8fa9f53812e4c"], 0xfe33) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8080ffd0, 0x0, 0x0, 0x0, 0xfffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @exit]}, &(0x7f0000000540)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6c000000000101feffffffffffffff000200000024000180140001800800f3ffdf00000108000200ac1414000c00028005000100000000000600034075798a4a3ea05b362700040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000002621a0c971fad5721e3accadf19e2b1ab4808ce7526e88cdeca23ee5cb3f152ed7f707b3f161bd65be137c183370072259e7dd9087dce089e75477144252b13d6da05bcfa06ff79df21fe0b3dadfb1b0aff84"], 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x29, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 7m28.05751951s ago: executing program 8 (id=483): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2, 0x0, 0xa600000, 0x7ca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f0000000100)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32], 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m27.025973875s ago: executing program 8 (id=490): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1c3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="6000000002060108000000000000000001000009140007800800114000000080050015006a000000050005010a000000050001000700000005000400003c00000900020073797a320000000011000300686173683a69702c706f727400000000d4f9337544f40f9541713e"], 0x60}}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68020000010501010000000000000000050000065402010000000000810000006400010405001f0073797a31000000000000000000000000000000000000000000000000000000003de49a697763c1d26b44090a94b4a1ae83a34cf498713925ae23432d7089339a787f7f7d5a7e01474465a1d8aa14418d6e38fff5c65bb86a04b08afd3de1b339f7ff080000000000010000807f0009000200000008000000400105"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x802800, &(0x7f00000007c0)=ANY=[@ANYBLOB='mode=00000000000000000000401,mode=00000000000000000200001,hash,fowner>', @ANYRESDEC=r1, @ANYBLOB="2c66756e633d504f4c4943595f434845434b2c7375626a5f747970653d73827a32002c657569643e33d29fa9db8f570a57ea56a2b1b5c0d979fab7a411dd1733703ec28deed812adde62826547c6942947ec18b5b8f91d1686738e894bdc248429a4a5a933ba686c774176033d90d43ca1e12604b9521c", @ANYRESDEC=r3, @ANYBLOB=',\x00']) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c", @ANYRES32=r2], 0xfe7e) r4 = socket$kcm(0x10, 0x5, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120410007f02000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="3b7163ba5ad3dbe4ca313e47a4a27986e0c4270cb0b6d3834b390a1124cc4047826fd4574252d8867dbdf1188ff52359f431ac12135580b08a27b74014a8b07867975685cd4f37bd8fe292503ac6197593e460"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x9008520c}, 0xc, &(0x7f00000006c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r1], 0x34}, 0x1, 0x0, 0x0, 0x40840}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000080a01010000000000000000020000000900010073797a7589002200000900020073797a3200000000140000001100010000000000000010000000000a"], 0x54}}, 0x40000) 7m26.501605401s ago: executing program 8 (id=495): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x9, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000240)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x8, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 7m25.889931415s ago: executing program 8 (id=499): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x5, 0x4}, 0x8000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffa, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x29, 0x0, 0x20000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r3, r0}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$TUNSETSTEERINGEBPF(r5, 0xb701, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b43, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$kcm(0x2, 0x200000000000001, 0x106) r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r8], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000062000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x14, 0x2a, 0x31f, 0x70bd27, 0x25dfdbfb, "", [@typed={0x4, 0x0, 0x0, 0x0, @str}]}, 0x14}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 7m25.319338624s ago: executing program 47 (id=499): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000030000009310000001"], 0x0, 0x5}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x5, 0x4}, 0x8000, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffa, 0x400, 0x0, 0x0, 0x0, 0xfffffffffffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x29, 0x0, 0x20000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000100)={r3, r0}) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$TUNSETSTEERINGEBPF(r5, 0xb701, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b43, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) (async) socket$kcm(0x2, 0x200000000000001, 0x106) r8 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r8], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000062000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x2}) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2}) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x14, 0x2a, 0x31f, 0x70bd27, 0x25dfdbfb, "", [@typed={0x4, 0x0, 0x0, 0x0, @str}]}, 0x14}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 5m37.154125396s ago: executing program 6 (id=1237): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ac1414aa000000000000000000000000000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYBLOB="0f"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40e802, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="2c0000002600090122769b66ac96db4c6a00000008003d80040022800800030047"], 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000ac0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x6, [@var={0x3, 0x0, 0x0, 0xe, 0x3, 0x1}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @fwd={0x4}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f]}}, 0x0, 0x46, 0x0, 0x1, 0x2}, 0x28) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1411, 0x800, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x20000800) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x2950b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1}, 0x11efa, 0x4, 0x96, 0x0, 0x2, 0xfefff271, 0xfffc, 0x0, 0xfffffffd, 0x0, 0x20}, r5, 0xfffffeffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 5m36.482478279s ago: executing program 6 (id=1246): socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xc}, 0x10084, 0x0, 0x4, 0x8, 0x3fa, 0xcd5, 0x6, 0x0, 0x0, 0x0, 0x2}, r0, 0x10, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x21, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc22, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x4851) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xa) socket$kcm(0x2, 0x200000000000001, 0x0) 5m36.18492037s ago: executing program 4 (id=1248): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2688644c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 5m36.057794148s ago: executing program 6 (id=1250): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xc5f, 0x83d01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x4000000, 0x0, 0x10000, 0xfffffff7, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000006c0)={0x38, 0x1403, 0x1, 0x70bd25, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='rdma.current\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xb2, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 5m35.901312423s ago: executing program 4 (id=1252): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x5}, 0x1224, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44ebfe24}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040070}, 0x40040) r1 = getpid() r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f0000000440), 0x3d) socket$kcm(0x29, 0x7, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="44000000010a01080000000000000000030000010c0004400000000000000082150001"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) close(r5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8001) 5m35.664475839s ago: executing program 6 (id=1255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB="3800000001040104000000000000000007000004050001000200000006000640000400000a000200000000030200000005000100030000008b216f4f2dc9b74a0983c14ca2b71418f789a29ca2d814025faaa9fffed874cefb27de403cba134c67c66291105ca3"], 0x38}}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x9, 0x0, 0x0, {}, [{0x48, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xfffffffc, 0x20}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000000480)=ANY=[], 0x2b0}}, 0x4000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xe}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() openat$tun(0xffffffffffffff9c, 0x0, 0x42, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x118) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x80, 0x6, 0x0, 0x0, 0xfffd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8940, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0xfffffffffffffc7b, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000001240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001200)={&(0x7f0000000180)={0x1060, 0x0, 0x5, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x7}, 0x2c, 0xb, 0xd9c5, 0x627, 0x1c, 'syz1\x00', "d5300fd7931f9a895e1f56711250833f45e15bb30b0caeb7e2261ed5b5267a58", "0a91d6afee271405381efdcaca7e06ee5203091a8ba2c697ed7e949adaf69692", [{0x1ff, 0x6, {0x1, 0x3}}, {0x3ff, 0xa05, {0x2, 0xfff}}, {0xe8d, 0xfffa, {0x2, 0x4}}, {0x8, 0x7, {0x3, 0x6}}, {0x5, 0xe, {0x0, 0x1ff}}, {0x6, 0x0, {0x2, 0x211f}}, {0x6, 0x6f, {0x1, 0x101}}, {0x7, 0x5, {0x1, 0x3}}, {0x4, 0x0, {0x1, 0x2}}, {0x8, 0x4, {0x1, 0x9}}, {0x200, 0xa, {0x0, 0xffffffff}}, {0xa, 0x80, {0x0, 0x4}}, {0xfff7, 0x1, {0x2, 0x7fffffff}}, {0x7, 0x1, {0x332e059cd7c2f167, 0x8}}, {0x0, 0x7, {0x3, 0x4}}, {0x7, 0x8cb1, {0x1, 0x4e3e}}, {0x499, 0x6, {0x0, 0x1ff}}, {0x5, 0x7, {0x2, 0xffff676b}}, {0xc3, 0x0, {0x2, 0x81}}, {0xb762, 0x7f, {0x1, 0x390}}, {0x1, 0x7, {0x0, 0x80000001}}, {0x4, 0x5}, {0x7, 0x0, {0x2, 0x6}}, {0xe, 0xfff8, {0x2, 0x9}}, {0x5, 0x4, {0x1, 0x6}}, {0x4, 0x3ff, {0x3, 0x5}}, {0xff, 0x10, {0x3, 0x20000000}}, {0x5, 0x8, {0x3, 0x5f}}, {0x2, 0xc52, {0x1, 0x80}}, {0x1, 0xfff, {0x0, 0x9}}, {0x8, 0x0, {0x1}}, {0x5, 0x200, {0x3, 0x8}}, {0x5, 0x1, {0x3, 0x5}}, {0x6, 0xa26, {0x0, 0x98}}, {0x1, 0x7, {0x1, 0x8}}, {0x9, 0xd804, {0x2, 0x400}}, {0x20a, 0x1000, {0x2, 0xe}}, {0x8, 0xab, {0x0, 0x8ac6}}, {0x6, 0xfff9, {0x3, 0x2}}, {0x4, 0x7f, {0x3, 0x200}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x5, 0x6, 0x3, 0x9, 0x13, 'syz0\x00', "862b573a06dac28e49a82c463d3153c9ce1ab2b29fbe8ba7e4332f2f8cb2e2bb", "c0d31ae4b4d6ab90bb1fb80c65abf98f4c6b085cbc0368a2edf68d9364e31b44", [{0xfff, 0x1, {0x0, 0x6}}, {0xfffe, 0x3, {0x2, 0x8}}, {0x3, 0x7, {0x1, 0xd6a7}}, {0x10, 0x62a, {0x0, 0x9}}, {0x3, 0x4, {0x2}}, {0x6, 0x87, {0x1, 0x7}}, {0x6, 0x0, {0x1, 0x43b}}, {0x7, 0x5, {0x1, 0x1}}, {0x3, 0x3ff, {0x3, 0x5}}, {0x0, 0xa, {0x3, 0x8}}, {0xe, 0x8001, {0x2, 0x8}}, {0x8001, 0x0, {0x0, 0x1}}, {0x9, 0x200, {0x2, 0x4843}}, {0x40, 0x40, {0x3, 0x2}}, {0x0, 0xe3d, {0x2, 0x4}}, {0x9, 0x0, {0x3, 0x4}}, {0x8, 0x6, {0x1, 0x100}}, {0xb1, 0x3, {0x0, 0x3ff}}, {0x4, 0x2, {0x0, 0x100}}, {0xfd0, 0x3, {0x3}}, {0x0, 0x4fef, {0x3, 0x9}}, {0x101, 0x0, {0x1, 0xe1a0}}, {0x4, 0x400, {0x2, 0x8}}, {0x5, 0xa6da, {0x1, 0x6}}, {0x9, 0xbdc, {0x0, 0x1}}, {0xfffa, 0x6, {0x0, 0x817}}, {0x8000, 0x2, {0x1, 0x3}}, {0x400, 0x6, {0x3, 0x4}}, {0x2, 0x81, {0x1, 0xb}}, {0x1, 0x2, {0x3, 0x8001}}, {0x1, 0x4, {0x0, 0x5}}, {0x2, 0x100, {0x1, 0xb190}}, {0x3, 0x8, {0x3, 0x7}}, {0x7, 0x5, {0x0, 0x9}}, {0x80, 0x7, {0x3, 0x9}}, {0x4, 0x10, {0x2}}, {0xa628, 0x0, {0x1, 0x5}}, {0x31a, 0x3, {0x2, 0x7f}}, {0x5, 0xdfb, {0x3, 0x2}}, {0x2, 0x84, {0x1, 0x4fc}}]}}}, {{0x254, 0x1, {{0x3, 0x7}, 0x7, 0x9, 0xdbc, 0x1, 0x1f, 'syz0\x00', "77d880e2d7a3f2236f5e3ba70e994e966246c6a077c78227a5f7225dad2728c5", "e7562d6deb61d34794e62f3aae3b579c6e7b7e9a17d3e6bda667a7fff7da0fb9", [{0xefcd, 0x7df3, {0x3, 0x4}}, {0x800, 0x54, {0x1, 0x80000000}}, {0x2, 0x22, {0x3, 0x296}}, {0x2, 0x3a, {0x2, 0x1}}, {0xb27, 0x4, {0x0, 0x6}}, {0x8000, 0xc8, {0x2, 0xfff}}, {0x3, 0xf552, {0x2, 0x5}}, {0x0, 0x7ff, {0x0, 0x51c}}, {0xe, 0x1, {0x3}}, {0x6, 0x0, {0x2, 0x3}}, {0xa4d, 0x2, {0x0, 0x10}}, {0xe206, 0x7fff, {0x1, 0xd6c}}, {0x5, 0x7, {0x0, 0x5}}, {0x9, 0x800, {0x0, 0x1010}}, {0xf3, 0x0, {0x0, 0x3}}, {0x7, 0xe, {0x3, 0x1}}, {0x9955, 0x28, {0x2, 0x3}}, {0x1, 0xc8, {0x3, 0x3}}, {0x3, 0x2, {0x0, 0x4}}, {0xa377, 0x5, {0x3, 0xcf}}, {0x8, 0x100, {0x3, 0x2536}}, {0x5, 0x4, {0x1, 0x40}}, {0xfffc, 0x7, {0x1}}, {0x8001, 0x9, {0x2, 0x1}}, {0xfc53, 0xc, {0x0, 0x4}}, {0xd, 0x0, {0x2, 0x5}}, {0x1, 0x7, {0x3, 0xfffffffb}}, {0x2, 0x4, {0x1, 0x1}}, {0x4, 0x470, {0x0, 0x3}}, {0x3ff, 0x3, {0x3, 0x6}}, {0xfbb9, 0x4, {0x3, 0x7}}, {0xf001, 0x1, {0x1, 0x6}}, {0x5, 0x9dd0, {0x1, 0x7}}, {0x1, 0x8, {0x0, 0x8}}, {0xe7, 0x8, {0x0, 0xfffffffb}}, {0x401, 0x7, {0x0, 0xc3}}, {0x1000, 0xfffd, {0x2, 0x2}}, {0x4, 0xfffc, {0x0, 0x3}}, {0x6, 0x7fff, {0x2, 0x8}}, {0x7, 0x9ef, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x0, 0xfffffeff}, 0x7f, 0x5, 0x1, 0x3, 0x1c, 'syz0\x00', "f691c4ded9a282b241ad5f75428f1b141e6e0df42bca25db8833ae3a77624254", "4ba985e10890e6fc33832d659df80e8ec81f6d7b20a29c3f6d0b9b7204aac140", [{0xffff, 0x6, {0x1, 0x10}}, {0x7, 0x29, {0x0, 0x9}}, {0x0, 0x51a, {0x0, 0x9}}, {0x7, 0x7, {0x0, 0x80000000}}, {0x35, 0x6, {0x3, 0x4}}, {0x3, 0x3, {0x1, 0x6}}, {0xfff, 0x9, {0x3, 0x417}}, {0xfffd, 0x10, {0x0, 0x8}}, {0x0, 0x4, {0x3, 0x2}}, {0x7fff, 0x6, {0x2, 0xfffffff9}}, {0x1, 0x6, {0x2, 0x3}}, {0xa, 0x8001, {0x2, 0x2}}, {0x0, 0x101, {0x2, 0x7fff}}, {0x7d4, 0x6, {0x1, 0x6}}, {0x4, 0xff, {0x1}}, {0xb3b, 0x3, {0x0, 0x6}}, {0xf, 0xfffa, {0x1, 0x8001}}, {0x0, 0x9, {0x0, 0xfffffffa}}, {0x4, 0x1, {0x0, 0x4}}, {0x8, 0xde, {0x3}}, {0x10, 0xf, {0x3, 0x400}}, {0x3, 0xe7, {0x2, 0x1}}, {0x0, 0x3, {0x0, 0x1}}, {0xf0, 0x6, {0x3, 0xce42}}, {0x6, 0x4, {0x2, 0x2}}, {0x9, 0x2, {0x1, 0x9}}, {0x1, 0x8, {0x3, 0x9}}, {0x7ff, 0x0, {0x2, 0x1}}, {0x1, 0x6, {0x1, 0x5}}, {0x8, 0x6e83, {0x2, 0x3}}, {0x2, 0x7f, {0x0, 0x4}}, {0x800, 0x6, {0x0, 0x7ff}}, {0x62f, 0x1, {0x0, 0x6}}, {0x4, 0x2, {0x1, 0x7}}, {0x8fe3, 0xae5, {0x5, 0x7}}, {0x1, 0x5, {0x1, 0x400}}, {0xd7, 0x9, {0x0, 0x13}}, {0x6, 0x8000, {0x0, 0x3}}, {0x9, 0xf801, {0x1, 0xffff5ab7}}, {0x2, 0x4858, {0x1, 0xd}}]}}}, {{0x254, 0x1, {{0x3, 0x3}, 0x0, 0x4, 0x8, 0xd6, 0x7, 'syz0\x00', "9f7323723a8b48955f56efe92e3756c51a814e7c1257c54e91cb5187b7e06c2e", "b1e091ac156d31f27d797d4305370300000000000000772614bc14b062440bd6", [{0x3, 0x5, {0x0, 0xffffff87}}, {0x40, 0xffc0, {0x0, 0x1}}, {0x1, 0x7f, {0x0, 0x3}}, {0xffff, 0xfff0, {0x3, 0x7}}, {0x9, 0x7, {0x3, 0x8}}, {0x4, 0xe9, {0x0, 0x6}}, {0x6, 0x9, {0x2, 0x7ff}}, {0x1, 0x2, {0x0, 0x7}}, {0x6, 0x5, {0x0, 0xfffffffb}}, {0x1, 0x4745, {0x3, 0x10}}, {0x68, 0x2, {0x1, 0x6}}, {0x2, 0x0, {0x1, 0x7fff}}, {0x0, 0x7fff, {0x2, 0xffff}}, {0x3, 0x266e, {0x0, 0xbe4a}}, {0x0, 0x0, {0x2, 0xd1}}, {0x78, 0x100, {0x3, 0x4}}, {0x800, 0x8d, {0x3, 0x5}}, {0xff, 0xa, {0x2, 0x8}}, {0x1, 0x2, {0x0, 0x2}}, {0x1, 0x5, {0x3}}, {0x1, 0x9f, {0x3, 0x9}}, {0xe80d, 0x6, {0x0, 0x2}}, {0x4, 0x1ff, {0x0, 0x1}}, {0x7, 0xf001, {0x2, 0x401}}, {0x7, 0x24ef, {0x2, 0x80000001}}, {0x0, 0x0, {0x3, 0x5}}, {0xfff8, 0x8, {0x3, 0xcc}}, {0xd, 0x9, {0x0, 0x5e2e}}, {0x5, 0x3956, {0x3, 0x2}}, {0x49, 0x8, {0x2, 0x4}}, {0x0, 0xfffe, {0x3, 0x1}}, {0x1, 0x101, {0x3, 0x5}}, {0x6, 0x5, {0x2, 0x644}}, {0x5, 0x5, {0x2, 0xe5}}, {0xfff9, 0x9}, {0x1, 0x1, {0x2, 0x7}}, {0x6, 0xe, {0x2, 0x8}}, {0x7, 0xe, {0xccfa29bcf86854b6, 0x7}}, {0x3, 0x2, {0x0, 0x3}}, {0x1, 0x6, {0x2, 0x62}}]}}}, {{0x254, 0x1, {{0x6af05490c8e23690, 0xc1}, 0x13, 0x5, 0x1, 0xff, 0x22, 'syz0\x00', "e89c9179951a8ef28b3810be328e63791a941a822b92ad4ae2290805e1eae1b3", "d7301928cc26a585269f79afc76618114c66f009ea2579180876c1015521e2a0", [{0x5, 0x0, {0x71169792e2efcf72, 0x3}}, {0x7, 0x5, {0x2, 0x2}}, {0x2, 0x1, {0x2, 0x2}}, {0xfff6, 0x0, {0x2, 0x8}}, {0x3ca5, 0x81, {0x3, 0x5}}, {0x9, 0x6, {0x1, 0x8}}, {0x1, 0x1, {0x3, 0x2}}, {0x2d, 0x3ff, {0x0, 0x2}}, {0x8, 0x8, {0x2, 0x1}}, {0x0, 0x8, {0x3, 0x4}}, {0x8001, 0x8, {0x1, 0x400000}}, {0xd4, 0x1, {0x0, 0xd}}, {0xf3ed, 0x1000, {0x1, 0xffff}}, {0x5, 0x2, {0x1, 0x80}}, {0x399, 0x1ff, {0x3, 0x9a0d}}, {0x3, 0x0, {0x3, 0x4}}, {0x9cb0, 0x2, {0x2, 0x7}}, {0x5, 0x9, {0x0, 0x587c}}, {0x8, 0xfffe, {0x3, 0x7}}, {0x3, 0x1, {0x0, 0x7f}}, {0x1000, 0x4, {0x2, 0xb}}, {0x7, 0x7fff, {0x0, 0x10}}, {0x40, 0x8, {0x2, 0xc}}, {0x6ff6, 0x2, {0x0, 0x7}}, {0x3, 0x8, {0x2, 0x4}}, {0xfc01, 0x1, {0x3, 0xffffffff}}, {0x6, 0x7, {0x1, 0x7f}}, {0x8, 0x100}, {0x80, 0x3, {0x3, 0x8}}, {0x2dd, 0x2, {0x1, 0x364}}, {0x8, 0x6, {0x0, 0x6}}, {0x2, 0x198b, {0x0, 0x5}}, {0xed, 0xa, {0x3}}, {0xb5d3, 0x1, {0x0, 0xde90}}, {0x1, 0xb, {0x1, 0x430c}}, {0x1, 0xc9c, {0x3, 0x401}}, {0x6, 0x7, {0x1, 0x6}}, {0x6, 0x54f, {0x1, 0xf}}, {0xf93f, 0xcc3e, {0x0, 0x310f}}, {0x8000, 0x1, {0x3, 0x3}}]}}}, {{0x254, 0x1, {{0x3}, 0xd7, 0x7, 0xda5, 0x0, 0x28, 'syz1\x00', "c6ac228f6e0c0a1c333ce2f8259d59fb5b49661e50aa9f41c8637c9192e2e0b1", "bdab102bde258d06e702c45476f4fc21bdacec7976bf5f3b97d23b646d4fa0f8", [{0x3ff, 0x1, {0x2, 0x8}}, {0x7, 0x1, {0x1, 0x8b}}, {0x4, 0x7, {0x0, 0x4}}, {0x6, 0x0, {0x0, 0xe500}}, {0x2, 0xda6, {0x2}}, {0x6, 0x7, {0x0, 0x6}}, {0x0, 0xfff7, {0x2, 0xfffff000}}, {0x42, 0x0, {0x3, 0x2}}, {0x3, 0x8ca3, {0x1, 0x6}}, {0x7, 0x9f44, {0x0, 0x1}}, {0x2, 0xb0, {0x1, 0x3}}, {0x4, 0x9, {0x2, 0x9}}, {0x8, 0x1000, {0x1, 0x5}}, {0xfffa, 0xdec, {0x0, 0x2}}, {0x8, 0x4, {0x0, 0x3}}, {0x8, 0x5, {0x2, 0x6}}, {0x6, 0x9}, {0x0, 0x0, {0x3, 0xfffffffb}}, {0x7f, 0x2885, {0x1, 0x6256024d}}, {0x4, 0x0, {0x2, 0x6}}, {0x6, 0x8000, {0x1, 0x5}}, {0x7f, 0xa, {0x2, 0x1}}, {0xd0, 0x81, {0x3, 0x8d}}, {0x6, 0x4, {0x3, 0x4}}, {0x7, 0xb, {0x0, 0x6}}, {0x9d9a, 0x1, {0x0, 0x9}}, {0xd0, 0x6, {0x2}}, {0x4000, 0xfff9, {0x1, 0x90000}}, {0x186e, 0x7, {0xc6193ee1b20a8307, 0x4}}, {0x400, 0x6, {0x1, 0x8}}, {0xff, 0x2, {0x0, 0x9}}, {0x101, 0x7, {0x1, 0xffff}}, {0x8, 0xffff, {0x2, 0x1}}, {0x6, 0x8, {0x3, 0x80000000}}, {0x1000, 0x0, {0x0, 0x1fc}}, {0x3, 0x5, {0x1, 0x7}}, {0x0, 0x7, {0x1, 0x6}}, {0x40, 0x2, {0x3, 0x1}}, {0x9, 0x101, {0x1}}, {0x81, 0xc, {0x3, 0x1ff}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x14}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000001300), 0x400c0, 0x0) 5m34.557149232s ago: executing program 4 (id=1260): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) getpid() socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3}, @const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) 5m34.372609245s ago: executing program 4 (id=1262): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x0, 0xffff}, {}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x58, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xf, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x240048d0) socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r3, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}}}, 0x80, 0x0}, 0x40812) 5m34.328743431s ago: executing program 6 (id=1263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x48151}, 0xc015) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x3, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x1}, 0x2a00, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2fafb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x94a020, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28008010}, 0x0) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)}], 0x1, &(0x7f0000000540)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @loopback, @rand_addr=0x64010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0xb8}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}}, 0x0) 5m34.078511629s ago: executing program 4 (id=1265): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180200000000000000000000000000008500000030000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYRES8=r0], 0x28}, 0x1, 0x0, 0x0, 0x48151}, 0xc015) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x31, &(0x7f0000000300)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x83, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x1}, 0x2a00, 0x0, 0x8, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2fafb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x0, &(0x7f0000000700)='./file0\x00', 0x0, 0x94a020, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28008010}, 0x0) r5 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x484000000000000b, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x17, &(0x7f0000000080)=r9, 0x4) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 5m33.388967048s ago: executing program 6 (id=1270): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x8100000}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40088c0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6a, 0x6e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x7d, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f00000000c0), &(0x7f00000001c0)=@udp6=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 5m33.167771682s ago: executing program 4 (id=1272): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c040) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x61, 0x30, 0x61]}}, 0x0, 0x39, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300263b5fba0000040000000a0000000009000012e3240208ea02a98eeb2726ed262123f4aece98b108526e99b1a7fc57a837a527b11dc5be6ddb89a920546039cf7141", @ANYRESHEX=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='pids.events\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) close(0x3) 5m18.27649899s ago: executing program 48 (id=1270): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x8100000}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40088c0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6a, 0x6e, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x7d, &(0x7f0000000000), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="19000000040000000400000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r2, &(0x7f00000000c0), &(0x7f00000001c0)=@udp6=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 5m18.004707481s ago: executing program 49 (id=1272): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4c040) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x4}, @typedef={0x7, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x61, 0x30, 0x61]}}, 0x0, 0x39, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300263b5fba0000040000000a0000000009000012e3240208ea02a98eeb2726ed262123f4aece98b108526e99b1a7fc57a837a527b11dc5be6ddb89a920546039cf7141", @ANYRESHEX=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x50) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='pids.events\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) close(0x3) 2m54.44912421s ago: executing program 9 (id=2321): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0x3}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x34, 0x9, 0x2, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0x1c66}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x800c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0b0001006e666163637400000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000005000000000000000c0009"], 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x9) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x2, @perf_config_ext={0x0, 0x100000000000000c}, 0x0, 0x0, 0x0, 0x5, 0x3fe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x40080) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 2m54.222164438s ago: executing program 9 (id=2326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2m54.081987088s ago: executing program 9 (id=2328): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m51.814879384s ago: executing program 9 (id=2337): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001640), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000001680)={r1, r2}) sendmsg$inet(r1, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x4000040) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r3, 0x0, 0x0}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x8, 0x3, 0x101, &(0x7f0000001280)) sendmsg$inet(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000006c0)}, {0x0}], 0x2}, 0x8000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000014c0)={{0x1}, &(0x7f0000001440), &(0x7f0000001480)=r4}, 0x20) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f00000012c0)=""/103, 0x67}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/127, 0x7f}, {&(0x7f0000002800)=""/160, 0xa0}, {&(0x7f00000028c0)=""/156, 0x9c}, {&(0x7f0000002980)=""/71, 0x47}, {&(0x7f0000001340)=""/226, 0xe2}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x8}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r7, &(0x7f0000000140), 0x0}, 0x20) close(r5) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xff, 0x4, 0xc, 0x7f, 0x0, 0x400000001, 0x80494, 0xf, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x100600, 0xfffffffffffffffd, 0x5, 0x7, 0x4, 0x5, 0x8, 0x0, 0xd798, 0x0, 0x7}, 0x0, 0x11, 0xffffffffffffffff, 0x2) r8 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r8, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x3b, 0xc9000000}}, @ip_tos_u8={{0x38, 0x29, 0x37}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000300)=r9, 0x4) 2m50.873986149s ago: executing program 9 (id=2350): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) r3 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xa}, 0x1000b, 0x4, 0x98, 0x5, 0xf31, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x7}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0xfd, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1577, 0x3}, {0x3}, {0xe, 0x14}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x40f4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040)="f85c20f287f1b8c0ca7a1b8b", &(0x7f0000000080)=@tcp=r7, 0x4}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x8b7848, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280), 0x10880, &(0x7f0000000740)={[{@uid={'uid', 0x3d, r8}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x9}}, {@uid={'uid', 0x3d, r9}}, {@mode={'mode', 0x3d, 0x3}}], [{@hash}, {@obj_type={'obj_type', 0x3d, '-#:%&'}}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0xd}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x62, 0x35, 0x37, 0x64, 0x61, 0x38, 0x31], 0x2d, [0x31, 0x39, 0x0, 0x31], 0x2d, [0x36, 0x35, 0x64, 0x62], 0x2d, [0x31, 0x37, 0x39, 0x30], 0x2d, [0x64, 0x32, 0x1b, 0x38, 0x64, 0x36, 0x0, 0x37]}}}]}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x24, 0x0, 0x0) 2m49.519940823s ago: executing program 9 (id=2359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000008000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c45, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x3, 0x2, 0x9, 0xfda, 0x2, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x80102, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x7ffffffc, 0x400, 0x0, 0x800000}, 0x0, 0xfbfffffffffffffc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xa051a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x6}, 0x0, 0x73, 0x0, 0x4, 0x3fe, 0x7ffffff8, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x5, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x7, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x18014005}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = perf_event_open(0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f06010100"/18], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x4080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, 0x0, 0xc000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'veth0_to_team\x00', @random="567c39019100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m34.520476457s ago: executing program 50 (id=2359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000008000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c45, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x3, 0x2, 0x9, 0xfda, 0x2, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x20000, 0x80102, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7fe, 0x0, @perf_bp={&(0x7f0000000040)}, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8, 0x7ffffffc, 0x400, 0x0, 0x800000}, 0x0, 0xfbfffffffffffffc, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0xa051a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x6}, 0x0, 0x73, 0x0, 0x4, 0x3fe, 0x7ffffff8, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x5, 0x8}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x7}, {0xffff, 0xffff}, {0x7, 0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x18014005}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = perf_event_open(0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) sendmsg$IPSET_CMD_GET_BYINDEX(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000000f06010100"/18], 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x4080) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, 0x0, 0xc000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000380)={'veth0_to_team\x00', @random="567c39019100"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m8.722581727s ago: executing program 2 (id=3033): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@broadcast}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000040601010000000000000000000000080900020073797a100000000005000100070000000500060007000000090002007379723100000000"], 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18, 0x1}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xe3, &(0x7f0000000240)=""/227, 0x0, 0x1}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x14b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x202421, 0x0) 1m8.241314693s ago: executing program 2 (id=3037): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000b00), 0x12) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8841}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) close(r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000740), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100"], 0x25}, 0x8000) sendmsg$inet(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) 1m7.938682608s ago: executing program 2 (id=3041): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x3c, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0xf, 0x1, 'tunnel_key\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000880) 1m7.64495126s ago: executing program 2 (id=3043): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf0, 0x10, 0x400, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ecf2dba1371f375, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private2, {0x0, 0x0, 0x2, 0x200, 0x10000000, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x200000, 0x7}, {0x40400, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x70}}, 0xf0}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x300080c1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x114905, 0x6, 0x9, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x600, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c000780080012400000ffff050001000600000005000400000000000900020073797a3100ca25160700050002683a69702c706f72742c697000a4350e576f8622572c38d69a3700"/101], 0x58}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c}, 0x94) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x18, 0x1412, 0x800, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000884}, 0x841) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xe, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020114}, 0x40000) 1m7.169648684s ago: executing program 2 (id=3047): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000002c0)=r0) close(0xffffffffffffffff) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x40, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x101}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x14008044}, 0x800) 1m6.457484948s ago: executing program 2 (id=3056): sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40011) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$kcm(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x80047453, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0xc4, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) r7 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000440)='\'\x00') 1m5.418013952s ago: executing program 51 (id=3056): sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x40011) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$kcm(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x80047453, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0xc4, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) r7 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0x21005, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f00000000c0)='cpu\t>0&&\t') ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000440)='\'\x00') 18.086095107s ago: executing program 7 (id=3487): r0 = socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000004}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200"/15, @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000900fbfffffff8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000007c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x60, 0x1409, 0xb32, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000050}, 0x24044044) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x14, 0x2d, 0x107, 0xfffffffe, 0x1, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488d1}, 0x400c000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'bridge0\x00', 0x200}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000340)=""/122, 0x7a}], 0x2, &(0x7f00000005c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x2000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 17.944776693s ago: executing program 7 (id=3489): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000047"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0xd, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) r5 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x14002, 0x0, 0x0, 0xc, 0x0, 0x0, 0x2b71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r5, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000001c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x4, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x1, 0x2, 0xfffff273, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x2, 0x5, 0xd, 0x6, 0x0, 0xfffffffffffffff7, 0x800, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xaaa7, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x576b, 0x2, 0x3, 0x3, 0xec4, 0x3, 0x0, 0x24, 0x0, 0x5}, 0x0, 0x5, 0xffffffffffffffff, 0xb) r7 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)={r7}) socket$kcm(0x2a, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000001f000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r8, 0x0, 0x0}, 0x20) 16.862954476s ago: executing program 7 (id=3493): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x4, 0x8, 0x2c, 0xd9, 0x0, 0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x9}, 0xc0, 0x9, 0x4, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x20007ff, 0x0, 0xfffffffffffffc00}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 14.812431473s ago: executing program 7 (id=3496): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x25dfdbf7, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x0, 0x2, {0x37bf, 0xffff, 0x7, 0xd6d, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0xa}, {0xffffffffffffff0e, 0x9, {0xf5}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4041}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="020a030002000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2001000012001307"], 0x120}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0, 0xa2, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x26, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xf8, 0x12, 0x8, 0x70bd2a, 0x25dfdbfb, {0x25, 0x81, 0xa2, 0x0, {0x4e22, 0x4e23, [0x8, 0x7ff, 0x2, 0xeb5d], [0x46e0, 0x0, 0x3], r5, [0x2, 0x1]}, 0xffffffff, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "88e02d0ece7c0df0027f2bd82110fd42b71e1946d47ca039f20c18c0e6ccc53c2a7304c074b90af46bf7066e8c67256523b5cd760cf2067258b98d4e49925cd4172997bc7ebbd0936338d0776800f6c1cb0667b9c831650099adfc9bd42bd52fb86246166c884a24887dfcd70295acad0bebb7e725bc99f73b838a82de6dcd7884ed6164a4ae714bf42b5d2a7961bb793f3779927a17a47a9879626ad307410e5323aed0141b"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x2404c800}, 0x1) 14.192853961s ago: executing program 7 (id=3500): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) perf_event_open(0x0, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x5084, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) 13.524944392s ago: executing program 7 (id=3505): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x4, 0x8, 0x2c, 0xd9, 0x0, 0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5, 0x9}, 0xc0, 0x9, 0x4, 0x9, 0x0, 0x0, 0xfff, 0x0, 0x20007ff, 0x0, 0xfffffffffffffc00}, 0x0, 0x40003, 0xffffffffffffffff, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 3.384038382s ago: executing program 1 (id=3543): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x6, 0x98, 0x7, 0x2, 0x7, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) sendmsg$rds(r1, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000280)=""/83, 0x53}], 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.142489064s ago: executing program 0 (id=3545): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x25, &(0x7f0000000800)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x8, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xe, &(0x7f0000000640)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x55}, @ldst={0x0, 0x1, 0x0, 0x0, 0x2, 0x4c, 0x1}], &(0x7f00000006c0)='GPL\x00', 0x9, 0x22, &(0x7f0000000700)=""/34, 0x41100, 0x2, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x6, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[r3], &(0x7f0000000bc0)=[{0x2, 0x1, 0x8, 0x3}, {0x5, 0x4, 0x4, 0x3}, {0x0, 0x2, 0x1, 0x3}, {0x3, 0x5, 0xd, 0xd}, {0x2, 0x3, 0x5, 0x3}, {0x4, 0x5, 0x4, 0x7}], 0x10, 0x5}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d00000000000000000300000004000000030000000400000003000000000000"], 0x0, 0x5e, 0x0, 0x1}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @local}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2025080001000200000008000100010000000000000000000022000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000011c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d00)={0x458, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x8, 0x1, 0x3, 0x8, {0x4e20, 0x4e23, [0x9, 0x0, 0x5, 0xe11], [0x2, 0x6fc8, 0x7fff8, 0xb], 0x0, [0x101, 0x4]}, 0x9, 0x400}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "4915ead19121dcca1a5015c1c7bdea312f68297a03c773913804cd2c1da286b19f7a9df5d1639313db6d7e29e7e9d856c98a7496e8f3ac9f976423b7dde41c3652316d6412540d291a6ead8f7835643264ab1d4a8864aed567273d8820ee53accc0ac4d645e621ad9e38b3e1cb5117a59ea05e2dade964eca62f37219651c1aca24c3fdee2989ea3c10c0305a69d04baaaba65cddaf48471e08f3f24bc7cbeea68ada328d64ac7b304"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "3e9f30ca1737ac88ff96a8ee52d6826e48dcfc977aadd395c6b62ec424df3534ba50379204dbcf3d1282f1ff9c"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "40197afb7fb8f2fb42daa92f514cf922181fe7d98c8a2f0d72d924abbdcf"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "1a134a89b75bb436255f71ed7e980b81f94bcbc4bf70ff7258c41f18b7ff22b601743c68dad9ee17872bd7bf048b2839dc402f2db32382b6d6b6dcfdc577e27c96612bfee2051e911f961193252336e8c5fff9706abf61ec36d4b3987c5c43b37449381eefb65e13baab31799d22"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "f61820d9425c6e2204e58b51a4ba77a5a06091efa58285b4b6f0ccfbfdb24295d912a8d340baa3ca44da4ad7bd9155e6b121c277adbedc037514301cafe4fdd31c43a547a75ccfeda065eb3acda25e9cba10cd03a42912"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "e772e38b94ba261fac3864f7f46608e77cdbdc93c7cc5ac56f80aef0fd144467d1ea4853c3c45d7679e77e2415b8a640a7e4e2cd8ef3f31f87613f756f42c41270e7272449d2385b0a657bd822f0ab8ba35bf551c3f22fef3d8ad4a3560742c7f7f1aa128b9b722774da6536707777203e9ebc1bfaaa924ad5cb82f7e04b4f7e22a2ec9ba7a10b3b69abfb64b74413b3df500e32317d4b1d653cdd138024b745ac4d054a0c59e5c45a25ce6f6e86c8c24bbc1c81dd01f92f0be7e3b9ecd937f13b1f9b5c7d44ae25f8b4f318c845da251820f02551480d06a566c1"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "b9936ed210162379c9a0dabbfa52ca4e1db1b5e894bced45fc2e1a4d4e4f2673d195bd51"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "71515b60d39df475e93231bfe0ca679d32d2e8ea7ac70b1b014f438a452d1d24d7c647dbf76be08d7ad1b5f29b16a9b1955bc141a5d750d334a311613cfb84f8b92343d88bc89eab4b037e06f3ac42f77fb3"}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "91f4aad9aaa15bcaee1d5287fbbaf23485bbbbedbf2196f2841e490301504c10953fa568611d92e5e1de4f6662c8ac59484fddc66aac5629946f383d5e7ea40f7f31a4d5103d7ef3dc3537252b821527df3923e0119c19295a97"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "3f0394d8b00c09ad5b9b6870991c3a02a17a0f6444378bd9174fb00ada1e898aaf863e7ee1b93ee31d5780b242e542a849cde5cbc154f366c30f6a6aa067a513cad6c1d6195c680013a59ff30a9e1972f54f40071135fa2c433e4c59121533cd889105727a8394ab787ca9a57cd0ae"}]}, 0x458}, 0x1, 0x0, 0x0, 0x8000}, 0xc801) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000a1402002dbd7000ffdbdf2508000100010000000800030004000000080001000000000008001500020000000800039c1bdc6cb45b9242463ba9661ad2a20003000000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) 3.027548306s ago: executing program 1 (id=3546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2101, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x12b7a, 0x0, 0x0, 0x3, 0x9, 0x804000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000160015f5ba5edbb867e3bddf5de30359f19607012cbd7000fedbdf25107c00000c00018008000100c9534960d0ee77ccde85027b456a2ea81926bf3eb2478332cdc019721259db18b8dff427e63da5972ca97a787140e5"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x4f, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="5fd0ef745d95", @ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x11) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001180)=@newtaction={0x218, 0x30, 0x53b, 0x0, 0x0, {}, [{0x204, 0x1, [@m_csum={0x200, 0xe, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0xd, 0x81, 0x7}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x54, 0x0, 0x1000, 0x3}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x4, 0x1, 0xfffffff4}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffa1, 0xffff, 0x6, 0x58, 0x6}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x7, 0x3ff, 0x7}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb8dc, 0x6a, 0x2, 0x3, 0x4}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0xffff, 0x8, 0x9, 0x40}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0xffffffffffffffff, 0x80, 0x1}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xfffffffc, 0x0, 0xfa, 0x8000}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xf857, 0xffffffffffffffff, 0x3, 0x8001}, 0x44}}]}, {0xbc, 0x6, "f9dadb4823f66352ff3f8dcdf35d16971cd7416005c30841479d1f13ec903802f04679e7100baa2057fe285f4ab1cbbee03c041945591fdb34b4bdade6de68208826228d8eca84b1bd6dea9ac8e97b5f756ad67101becdb2d2d6631aef3b21de132b44637b9e8da2c10b0b6e16f3dc02f481ad0954f92ccb50afd54993f267c53d03a577786a2c656603e9700cfbb1d04da24d1172608d76f4298d1301ceef82e1f79e9cde3cc48b921393aa31bf47c9f978d09edcdaca14"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x218}}, 0x40004) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.858337861s ago: executing program 0 (id=3548): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x13, @loopback}, 0x10, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000240)="1dcaeecf", 0x4}], 0x2, &(0x7f0000000280)=ANY=[], 0x7}, 0xa00) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x139b031, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={0x0, r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x400, 0x8}, 0x4040, 0x0, 0xffffffff, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x33fe0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000001304000000005f5f002f714e4e20aced873afe51d9f02af2a0feddfe40f19116e61f686be148d6302a4c8a68c08bdb8019b640ef1d4bb7507c1cc70fe9c3da6415d1da570da5380ce8c69110bb1f3bfd1e3db4e98a10712bb140f37c7027683a52254d8ff6f634d930f21c0a0dab3cd6b2753e7b58815662bcb30c5b0a8a34b4bb544dfa6339c68662adc7ef4dfdb2ac99c59c209a76aa0346c3cff99dd547420bb1e4976b1e488651e2f02c63cbf458698521f1809bcfc933c8e3d3a00c1a1244a992"], 0x0, 0x28, 0x0, 0x1}, 0x28) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1000800, &(0x7f00000001c0)=ANY=[@ANYRES64=r4]) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00000005000100000000000c0002"], 0xc0}}, 0x0) 2.706487166s ago: executing program 5 (id=3549): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x5}, 0x1224, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44ebfe24}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040070}, 0x40040) r1 = getpid() r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f0000000440), 0x3d) socket$kcm(0x29, 0x7, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) close(r5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8001) 2.198766663s ago: executing program 3 (id=3554): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x80800, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000100100000100"/24], 0x28}, 0x2600f4c1) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 2.178347001s ago: executing program 0 (id=3555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='&()(\'-],{\'.}\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r2, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x1170) getpid() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x18, 0x56, 0x601, 0x3, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x75f}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40880) 1.992402888s ago: executing program 1 (id=3556): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x2}, 0x0, 0x6, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0x1}, &(0x7f0000000440), &(0x7f0000000700)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000980)={r0, 0x58, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000800)='GPL\x00', 0xffffff50, 0x0, 0x0, 0x40f00, 0x55, '\x00', r1, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9ffe, r0, 0x0, &(0x7f0000000a00)=[r0], 0x0, 0x10, 0x40}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x15, &(0x7f0000000300)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x78}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000002400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000023c0)={0x0}}, 0x40000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$sock(r4, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@ifindex=r1, 0xf, 0x0, 0x8, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) close(r5) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 1.934507023s ago: executing program 0 (id=3557): syz_clone(0x10ea22f000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000c00)={&(0x7f0000000300)=@x25={0x9, @remote}, 0x80, &(0x7f0000000a80)=[{&(0x7f00000003c0)=""/35, 0x23}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000005c0)=""/132, 0x84}, {&(0x7f0000000680)=""/2, 0x2}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000780)=""/146, 0x92}, {&(0x7f0000000840)=""/174, 0xae}, {&(0x7f0000000900)=""/185, 0xb9}, {&(0x7f00000009c0)=""/191, 0xbf}], 0x9, &(0x7f0000000b40)=""/151, 0x97}, 0x10000) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x4}, 0x959, 0xffffffffffffffff, 0x81, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x44050) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000200)=0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x24040000) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x400, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a600000000b0a0102000000000000000001000001080003400000008008000f400000000008000340000000200900010073797a310000000027000d40b1efbc487adad81450cddbfaf6308ad9e3276657792377af9437373eb042da2e7f07a400240000000b0a010200000000000000000500000a0800074000000003080004400000000270010000160a01040000000000000000020000050900010073797a3000000000240103809000038014000100687372300000000000000000000000001400010076657468315f766972745f77696669001400010076657468305f766c616e00000000000014000100697036746e6c300000000000000000001400010068737230000000000000000000000000140001006d6163767461703000000000000000001400010064756d6d7930000000000000001b00009000038014000100766972745f776966693000000000000014000100626f6e645f736c6176655f310000000014000100766574683100000000000000000000001400010069703665727370616e300000000000001400010076657468305f6d616376746170000000140001006272696467655f736c6176655f3100001400010076657468305f746f5f7465616d00000008000740000000010c00054000000000000000040900020073797a30"], 0x21c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001e00010325bd7000feffffff01000000180001801400c000ff0100000000000000000000000000017a664621b062c0f4f09dd040522b883d3eaf3a2d49a7aed5ed579008f8370436cadcdf26d3138a9e58a3e7e7af23f7df5675003772ae25962263e4529fcde17b97755212cf072d4a98fd823ffaff9f4a3031f4"], 0x2c}, 0x1, 0x0, 0x0, 0x20040091}, 0x4004000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100)}, 0x1161c6, 0x83, 0xafe8, 0x9, 0x7fff, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x9, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0) 1.861454044s ago: executing program 3 (id=3558): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x25, &(0x7f0000000800)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x8, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xe, &(0x7f0000000640)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x55}, @ldst={0x0, 0x1, 0x0, 0x0, 0x2, 0x4c, 0x1}], &(0x7f00000006c0)='GPL\x00', 0x9, 0x22, &(0x7f0000000700)=""/34, 0x41100, 0x2, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x6, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[r3], &(0x7f0000000bc0)=[{0x2, 0x1, 0x8, 0x3}, {0x5, 0x4, 0x4, 0x3}, {0x0, 0x2, 0x1, 0x3}, {0x3, 0x5, 0xd, 0xd}, {0x2, 0x3, 0x5, 0x3}, {0x4, 0x5, 0x4, 0x7}], 0x10, 0x5}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d00000000000000000300000004000000030000000400000003000000000000"], 0x0, 0x5e, 0x0, 0x1}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @local}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2025080001000200000008000100010000000000000000000022000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000011c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d00)={0x458, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x8, 0x1, 0x3, 0x8, {0x4e20, 0x4e23, [0x9, 0x0, 0x5, 0xe11], [0x2, 0x6fc8, 0x7fff8, 0xb], 0x0, [0x101, 0x4]}, 0x9, 0x400}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "4915ead19121dcca1a5015c1c7bdea312f68297a03c773913804cd2c1da286b19f7a9df5d1639313db6d7e29e7e9d856c98a7496e8f3ac9f976423b7dde41c3652316d6412540d291a6ead8f7835643264ab1d4a8864aed567273d8820ee53accc0ac4d645e621ad9e38b3e1cb5117a59ea05e2dade964eca62f37219651c1aca24c3fdee2989ea3c10c0305a69d04baaaba65cddaf48471e08f3f24bc7cbeea68ada328d64ac7b304"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "3e9f30ca1737ac88ff96a8ee52d6826e48dcfc977aadd395c6b62ec424df3534ba50379204dbcf3d1282f1ff9c"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "40197afb7fb8f2fb42daa92f514cf922181fe7d98c8a2f0d72d924abbdcf"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "1a134a89b75bb436255f71ed7e980b81f94bcbc4bf70ff7258c41f18b7ff22b601743c68dad9ee17872bd7bf048b2839dc402f2db32382b6d6b6dcfdc577e27c96612bfee2051e911f961193252336e8c5fff9706abf61ec36d4b3987c5c43b37449381eefb65e13baab31799d22"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "f61820d9425c6e2204e58b51a4ba77a5a06091efa58285b4b6f0ccfbfdb24295d912a8d340baa3ca44da4ad7bd9155e6b121c277adbedc037514301cafe4fdd31c43a547a75ccfeda065eb3acda25e9cba10cd03a42912"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "e772e38b94ba261fac3864f7f46608e77cdbdc93c7cc5ac56f80aef0fd144467d1ea4853c3c45d7679e77e2415b8a640a7e4e2cd8ef3f31f87613f756f42c41270e7272449d2385b0a657bd822f0ab8ba35bf551c3f22fef3d8ad4a3560742c7f7f1aa128b9b722774da6536707777203e9ebc1bfaaa924ad5cb82f7e04b4f7e22a2ec9ba7a10b3b69abfb64b74413b3df500e32317d4b1d653cdd138024b745ac4d054a0c59e5c45a25ce6f6e86c8c24bbc1c81dd01f92f0be7e3b9ecd937f13b1f9b5c7d44ae25f8b4f318c845da251820f02551480d06a566c1"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "b9936ed210162379c9a0dabbfa52ca4e1db1b5e894bced45fc2e1a4d4e4f2673d195bd51"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "71515b60d39df475e93231bfe0ca679d32d2e8ea7ac70b1b014f438a452d1d24d7c647dbf76be08d7ad1b5f29b16a9b1955bc141a5d750d334a311613cfb84f8b92343d88bc89eab4b037e06f3ac42f77fb3"}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "91f4aad9aaa15bcaee1d5287fbbaf23485bbbbedbf2196f2841e490301504c10953fa568611d92e5e1de4f6662c8ac59484fddc66aac5629946f383d5e7ea40f7f31a4d5103d7ef3dc3537252b821527df3923e0119c19295a97"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "3f0394d8b00c09ad5b9b6870991c3a02a17a0f6444378bd9174fb00ada1e898aaf863e7ee1b93ee31d5780b242e542a849cde5cbc154f366c30f6a6aa067a513cad6c1d6195c680013a59ff30a9e1972f54f40071135fa2c433e4c59121533cd889105727a8394ab787ca9a57cd0ae"}]}, 0x458}, 0x1, 0x0, 0x0, 0x8000}, 0xc801) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000a1402002dbd7000ffdbdf2508000100010000000800030004000000080001000000000008001500020000000800039c1bdc6cb45b9242463ba9661ad2a20003000000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.71566039s ago: executing program 5 (id=3559): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x80800, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000"], 0x28}, 0x2600f4c1) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x28}, 0xfc40) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 1.584602188s ago: executing program 5 (id=3560): r0 = socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000004}, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000200"/15, @ANYRES32=r1, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000900fbfffffff8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff850000001300000085000000500000"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, 0x0, 0x24044044) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x400c000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000080)={'bridge0\x00', 0x200}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/144, 0x90}, {&(0x7f0000000340)=""/122, 0x7a}], 0x2, &(0x7f00000005c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}, 0x2000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040), 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.579449585s ago: executing program 3 (id=3561): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x53}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 1.43776598s ago: executing program 3 (id=3562): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x134e00000000000}, 0x0, 0x2, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x30, 0x0, 0x20000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0xf, 0x0, 0x0, 0x40f00, 0x5}, 0x94) socket$kcm(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000600)="974501000000000001008cc5ffffffff", 0x10}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x22, &(0x7f0000000200), 0x4) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000000000001000000040800034000"/36], 0x24}, 0x1, 0x0, 0x0, 0x4d30528ff5e6ce26}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x0) fstat(r5, &(0x7f0000001840)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) 1.416842862s ago: executing program 5 (id=3563): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8001) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0xff, 0xf8, 0x7, 0x0, 0x800ea, 0x9800, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffffffffffff9f54, 0xff}, 0xc001, 0x40000010040, 0xfd84, 0x6, 0x10001, 0x400, 0xa33, 0x0, 0x4, 0x0, 0x40008}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305828, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40481}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40305829, &(0x7f0000000040)=0x20204) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="0205e6080e00000000000000ffdbdf2505000600000000000a004e2200000009070000000000000010"], 0x70}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xac, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3c, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000740)={0x14, 0x14, 0x403, 0x70bd27, 0x25dfdbfc, {0x10, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008800}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa00}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.400302283s ago: executing program 1 (id=3564): r0 = perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x2, 0x5, 0x8, 0x0, 0x3, 0x20000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x78}, 0x20, 0xb, 0xc, 0x1, 0x2, 0x2, 0x81, 0x0, 0x1}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x7) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='\x00') socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x40, 0x0, 0x0, 0x2, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x2}, 0x10000, 0x40000000, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.217459148s ago: executing program 0 (id=3565): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x84f, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000002c0), 0x27, r3}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{r2}, &(0x7f0000001840), &(0x7f0000001880)=r5}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r2}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r7, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) r9 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r11) sendmsg$NFT_BATCH(r11, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x20010005}, 0x8000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r11, 0x17, 0x0, @void}, 0x10) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x20) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000003300070100000000000000000c7c00000c00"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0xc010) 1.060742556s ago: executing program 1 (id=3566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2101, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x12b7a, 0x0, 0x0, 0x3, 0x9, 0x804000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0xffffffffffffffff, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000040)=r2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000160015f5ba5edbb867e3bddf5de30359f19607012cbd7000fedbdf25107c00000c00018008000100c9534960d0ee77ccde85027b456a2ea81926bf3eb2478332cdc019721259db18b8dff427e63da5972ca97a787140e5"], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x4f, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYBLOB="5fd0ef745d95", @ANYRESDEC=r4], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x11) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001180)=@newtaction={0x218, 0x30, 0x53b, 0x0, 0x0, {}, [{0x204, 0x1, [@m_csum={0x200, 0xe, 0x0, 0x0, {{0x9}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x2, 0xd, 0x81, 0x7}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x54, 0x0, 0x1000, 0x3}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x7, 0x4, 0x1, 0xfffffff4}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffa1, 0xffff, 0x6, 0x58, 0x6}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x7, 0x3ff, 0x7}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xb8dc, 0x6a, 0x2, 0x3, 0x4}, 0x29}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0xffff, 0x8, 0x9, 0x40}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x2, 0xffffffffffffffff, 0x80, 0x1}, 0x2d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xfffffffc, 0x0, 0xfa, 0x8000}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xf857, 0xffffffffffffffff, 0x3, 0x8001}, 0x44}}]}, {0xbc, 0x6, "f9dadb4823f66352ff3f8dcdf35d16971cd7416005c30841479d1f13ec903802f04679e7100baa2057fe285f4ab1cbbee03c041945591fdb34b4bdade6de68208826228d8eca84b1bd6dea9ac8e97b5f756ad67101becdb2d2d6631aef3b21de132b44637b9e8da2c10b0b6e16f3dc02f481ad0954f92ccb50afd54993f267c53d03a577786a2c656603e9700cfbb1d04da24d1172608d76f4298d1301ceef82e1f79e9cde3cc48b921393aa31bf47c9f978d09edcdaca14"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x218}}, 0x40004) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 993.476558ms ago: executing program 3 (id=3567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='&()(\'-],{\'.}\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r2, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x1170) getpid() r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)={0x18, 0x56, 0x601, 0x3, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, 0x0, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x75f}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40880) 551.605019ms ago: executing program 5 (id=3568): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r0, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={0x0, &(0x7f0000000780)=""/47, 0x0, 0x2f, 0x1, 0x9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x9, &(0x7f0000000440)=@raw=[@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x400, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)=@allocspi={0x108, 0x16, 0x1, 0x0, 0x0, {{{@in=@remote, @in6=@local, 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in6=@loopback, {0x0, 0x1, 0x2, 0x60, 0x4000004, 0x0, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8000000000}, {0x5}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x10}, 0x5, 0x5}, [@proto={0x5, 0x19, 0xa148350c48e7de73}, @extra_flags={0x8, 0x18, 0x200}]}, 0x108}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}, 0xa03, 0x0, 0xfffffffd, 0x4, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x1}, 0x2a00, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x35, &(0x7f00000000c0), 0x4) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 550.98908ms ago: executing program 1 (id=3569): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x5}, 0x1224, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44ebfe24}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040070}, 0x40040) r1 = getpid() r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x2, &(0x7f0000000040), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, &(0x7f0000000440), 0x3d) socket$kcm(0x29, 0x7, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x800) close(r5) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=[@ip_tos_int={{0x7ff4d4260000}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x2}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr, @generic={0x0, 0x0, "96"}, @generic={0x0, 0x0, "206a77bdd1a004129054e7704a"}]}}}], 0xf}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8001) 389.092659ms ago: executing program 3 (id=3570): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x1}, 0x2a00, 0x3, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000440)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000340)=ANY=[@ANYBLOB='b 6:', @ANYRESDEC], 0xb) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000003240)='GPL\x00'}, 0xc01) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)={0x1c, 0x36, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x27}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000080)=r6) 95.692074ms ago: executing program 5 (id=3571): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x25, &(0x7f0000000800)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x8, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0xe, &(0x7f0000000640)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x55}, @ldst={0x0, 0x1, 0x0, 0x0, 0x2, 0x4c, 0x1}], &(0x7f00000006c0)='GPL\x00', 0x9, 0x22, &(0x7f0000000700)=""/34, 0x41100, 0x2, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x6, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[r3], &(0x7f0000000bc0)=[{0x2, 0x1, 0x8, 0x3}, {0x5, 0x4, 0x4, 0x3}, {0x0, 0x2, 0x1, 0x3}, {0x3, 0x5, 0xd, 0xd}, {0x2, 0x3, 0x5, 0x3}, {0x4, 0x5, 0x4, 0x7}], 0x10, 0x5}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x40000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d00000000000000000300000004000000030000000400000003000000000000"], 0x0, 0x5e, 0x0, 0x1}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r7, 0x8946, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @local}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000000000000000ffff00000000000000003300000002000000e00000020000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001000000003c0000000a000000fe8000000000000000000000000000aa0000000001000000000000000000000000000000ff010000000000000000000000000001000000002b0000000a000000fe8800000000000000000000000000010000000000000000000000000000000000000000ff020000000000000000000000000001000000003200000002000000fe8000000000000000000000000000000000000004"], 0x254}}, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2025080001000200000008000100010000000000000000000022000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f00000011c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000d00)={0x458, 0x13, 0x400, 0x70bd2c, 0x25dfdbfe, {0x8, 0x1, 0x3, 0x8, {0x4e20, 0x4e23, [0x9, 0x0, 0x5, 0xe11], [0x2, 0x6fc8, 0x7fff8, 0xb], 0x0, [0x101, 0x4]}, 0x9, 0x400}, [@INET_DIAG_REQ_BYTECODE={0xad, 0x1, "4915ead19121dcca1a5015c1c7bdea312f68297a03c773913804cd2c1da286b19f7a9df5d1639313db6d7e29e7e9d856c98a7496e8f3ac9f976423b7dde41c3652316d6412540d291a6ead8f7835643264ab1d4a8864aed567273d8820ee53accc0ac4d645e621ad9e38b3e1cb5117a59ea05e2dade964eca62f37219651c1aca24c3fdee2989ea3c10c0305a69d04baaaba65cddaf48471e08f3f24bc7cbeea68ada328d64ac7b304"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "3e9f30ca1737ac88ff96a8ee52d6826e48dcfc977aadd395c6b62ec424df3534ba50379204dbcf3d1282f1ff9c"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "40197afb7fb8f2fb42daa92f514cf922181fe7d98c8a2f0d72d924abbdcf"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "1a134a89b75bb436255f71ed7e980b81f94bcbc4bf70ff7258c41f18b7ff22b601743c68dad9ee17872bd7bf048b2839dc402f2db32382b6d6b6dcfdc577e27c96612bfee2051e911f961193252336e8c5fff9706abf61ec36d4b3987c5c43b37449381eefb65e13baab31799d22"}, @INET_DIAG_REQ_BYTECODE={0x5b, 0x1, "f61820d9425c6e2204e58b51a4ba77a5a06091efa58285b4b6f0ccfbfdb24295d912a8d340baa3ca44da4ad7bd9155e6b121c277adbedc037514301cafe4fdd31c43a547a75ccfeda065eb3acda25e9cba10cd03a42912"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "e772e38b94ba261fac3864f7f46608e77cdbdc93c7cc5ac56f80aef0fd144467d1ea4853c3c45d7679e77e2415b8a640a7e4e2cd8ef3f31f87613f756f42c41270e7272449d2385b0a657bd822f0ab8ba35bf551c3f22fef3d8ad4a3560742c7f7f1aa128b9b722774da6536707777203e9ebc1bfaaa924ad5cb82f7e04b4f7e22a2ec9ba7a10b3b69abfb64b74413b3df500e32317d4b1d653cdd138024b745ac4d054a0c59e5c45a25ce6f6e86c8c24bbc1c81dd01f92f0be7e3b9ecd937f13b1f9b5c7d44ae25f8b4f318c845da251820f02551480d06a566c1"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "b9936ed210162379c9a0dabbfa52ca4e1db1b5e894bced45fc2e1a4d4e4f2673d195bd51"}, @INET_DIAG_REQ_BYTECODE={0x56, 0x1, "71515b60d39df475e93231bfe0ca679d32d2e8ea7ac70b1b014f438a452d1d24d7c647dbf76be08d7ad1b5f29b16a9b1955bc141a5d750d334a311613cfb84f8b92343d88bc89eab4b037e06f3ac42f77fb3"}, @INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "91f4aad9aaa15bcaee1d5287fbbaf23485bbbbedbf2196f2841e490301504c10953fa568611d92e5e1de4f6662c8ac59484fddc66aac5629946f383d5e7ea40f7f31a4d5103d7ef3dc3537252b821527df3923e0119c19295a97"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "3f0394d8b00c09ad5b9b6870991c3a02a17a0f6444378bd9174fb00ada1e898aaf863e7ee1b93ee31d5780b242e542a849cde5cbc154f366c30f6a6aa067a513cad6c1d6195c680013a59ff30a9e1972f54f40071135fa2c433e4c59121533cd889105727a8394ab787ca9a57cd0ae"}]}, 0x458}, 0x1, 0x0, 0x0, 0x8000}, 0xc801) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000a1402002dbd7000ffdbdf2508000100010000000800030004000000080001000000000008001500020000000800039c1bdc6cb45b9242463ba9661ad2a20003000000"], 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) 0s ago: executing program 0 (id=3572): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x53}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) kernel console output (not intermixed with test programs): blocking state [ 354.253333][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.261466][T12544] bridge_slave_0: entered allmulticast mode [ 354.270110][T12544] bridge_slave_0: entered promiscuous mode [ 354.311331][T12544] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.320828][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.331275][T12544] bridge_slave_1: entered allmulticast mode [ 354.339465][T12544] bridge_slave_1: entered promiscuous mode [ 355.178861][ T5636] Bluetooth: hci5: command tx timeout [ 355.568839][ T5636] Bluetooth: hci6: command tx timeout [ 356.658451][ T3276] bridge_slave_1: left allmulticast mode [ 356.728271][ T3276] bridge_slave_1: left promiscuous mode [ 356.736532][ T3276] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.747768][ T3276] bridge_slave_0: left allmulticast mode [ 356.755785][ T3276] bridge_slave_0: left promiscuous mode [ 356.763934][ T3276] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.027820][ T3276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.042810][ T3276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.065793][ T3276] bond0 (unregistering): Released all slaves [ 357.163576][T12544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.212863][T12665] netlink: 'syz.7.1378': attribute type 4 has an invalid length. [ 357.249156][ T5636] Bluetooth: hci5: command tx timeout [ 357.256348][T12544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.442449][T12684] netlink: 'syz.3.1382': attribute type 10 has an invalid length. [ 357.480308][T12544] team0: Port device team_slave_0 added [ 357.502592][T12544] team0: Port device team_slave_1 added [ 357.508396][T12541] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.547508][T12541] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.563874][T12541] bridge_slave_0: entered allmulticast mode [ 357.593950][T12541] bridge_slave_0: entered promiscuous mode [ 357.649018][ T5636] Bluetooth: hci6: command tx timeout [ 357.665757][T12541] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.722154][T12541] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.754819][T12541] bridge_slave_1: entered allmulticast mode [ 357.802184][T12541] bridge_slave_1: entered promiscuous mode [ 358.055481][T12697] netlink: 3752 bytes leftover after parsing attributes in process `syz.9.1385'. [ 358.087233][T12544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.105224][T12701] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1386'. [ 358.106556][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.201755][T12544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.252614][T12544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.265943][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.292628][T12544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.331830][T12541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.435462][T12541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.446394][T12706] option changes via remount are deprecated (pid=12705 comm=syz.9.1387) [ 358.547258][T12541] team0: Port device team_slave_0 added [ 358.651662][T12541] team0: Port device team_slave_1 added [ 358.718073][T12544] hsr_slave_0: entered promiscuous mode [ 358.725679][T12544] hsr_slave_1: entered promiscuous mode [ 358.732760][T12544] debugfs: 'hsr0' already exists in 'hsr' [ 358.768962][T12544] Cannot create hsr debugfs directory [ 358.974598][T12541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.009499][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.069570][T12541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.114233][T12733] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1396'. [ 359.169767][T12541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.184279][T12541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.211305][T12541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.322683][ T3276] hsr_slave_0: left promiscuous mode [ 359.329493][ T5636] Bluetooth: hci5: command tx timeout [ 359.347196][ T3276] hsr_slave_1: left promiscuous mode [ 359.366050][ T3276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.377808][ T3276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.388338][ T3276] batman_adv: batadv0: Removing interface: dummy0 [ 359.534701][T12753] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1401'. [ 359.687934][T12759] netlink: 'syz.9.1402': attribute type 61 has an invalid length. [ 359.702973][T12759] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1402'. [ 359.731178][ T5636] Bluetooth: hci6: command tx timeout [ 359.832035][ T3276] team0 (unregistering): Port device team_slave_1 removed [ 359.863281][ T3276] team0 (unregistering): Port device team_slave_0 removed [ 360.022623][T12740] netlink: 288 bytes leftover after parsing attributes in process `syz.7.1395'. [ 360.048369][ T77] smbdirect: ib_dev[syz2] removed [ 360.267517][T12761] netlink: 'syz.9.1402': attribute type 2 has an invalid length. [ 360.288993][T12761] netlink: 'syz.9.1402': attribute type 2 has an invalid length. [ 360.371751][T12541] hsr_slave_0: entered promiscuous mode [ 360.412883][T12541] hsr_slave_1: entered promiscuous mode [ 360.433435][T12541] debugfs: 'hsr0' already exists in 'hsr' [ 360.458022][T12541] Cannot create hsr debugfs directory [ 360.529557][T12776] netlink: 'syz.9.1405': attribute type 29 has an invalid length. [ 360.586407][T12779] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1406'. [ 360.656106][T12781] netlink: 'syz.9.1405': attribute type 29 has an invalid length. [ 360.713477][T12776] netlink: 'syz.9.1405': attribute type 29 has an invalid length. [ 361.514093][T12812] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 361.648359][T12820] netlink: 'syz.7.1414': attribute type 1 has an invalid length. [ 361.653288][T12816] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1416'. [ 361.666354][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1414'. [ 361.954350][T12822] option changes via remount are deprecated (pid=12821 comm=syz.3.1417) [ 362.844472][T12544] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.877187][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.902829][T12544] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.946628][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.963065][T12544] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.994586][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.024792][T12856] option changes via remount are deprecated (pid=12855 comm=syz.7.1424) [ 363.283692][T12544] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.299387][T12544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.493941][ T3276] bridge_slave_1: left allmulticast mode [ 363.503982][ T3276] bridge_slave_1: left promiscuous mode [ 363.527266][ T3276] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.558192][ T3276] bridge_slave_0: left allmulticast mode [ 363.564444][ T3276] bridge_slave_0: left promiscuous mode [ 363.570763][ T3276] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.768509][ T3276] bond0 (unregistering): (slave 1î7): Releasing backup interface [ 366.792750][ T3276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.803675][ T3276] bond0 (unregistering): Released all slaves [ 366.998893][T12913] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1439'. [ 367.014337][T12915] netlink: 624 bytes leftover after parsing attributes in process `syz.3.1440'. [ 367.530143][T12934] option changes via remount are deprecated (pid=12932 comm=syz.7.1443) [ 367.683120][ T3276] hsr_slave_0: left promiscuous mode [ 367.703329][ T3276] hsr_slave_1: left promiscuous mode [ 367.724969][ T3276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.752913][ T3276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.845391][T12947] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1446'. [ 368.151143][ T3276] team0 (unregistering): Port device team_slave_1 removed [ 368.168246][ T3276] team0 (unregistering): Port device team_slave_0 removed [ 368.327639][T12544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.437659][T12544] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.496846][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.499336][T12958] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1449'. [ 368.504105][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.547801][T12960] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 368.600961][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.608167][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.263437][T12979] nbd: must specify a device to reconfigure [ 369.332685][T12541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 369.375985][T12541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 369.397004][T12541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 369.420805][T12541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 369.450545][T12541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 369.502859][T12541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 369.526419][T12541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 369.571187][T12541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.953517][T12541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.039345][T12541] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.116330][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.123543][ T3325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.137372][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.144571][ T3325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.719737][T12544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.893880][T12544] veth0_vlan: entered promiscuous mode [ 370.925130][T12544] veth1_vlan: entered promiscuous mode [ 371.024323][T12544] veth0_macvtap: entered promiscuous mode [ 371.053529][T12544] veth1_macvtap: entered promiscuous mode [ 371.114032][T12544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.157459][T12544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.204037][ T63] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.215504][ T63] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.238536][ T63] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.490198][ T63] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.553762][T12541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.792240][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.842076][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.869500][T13055] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1463'. [ 371.874660][T12541] veth0_vlan: entered promiscuous mode [ 372.010152][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1465'. [ 372.016665][T12541] veth1_vlan: entered promiscuous mode [ 372.025952][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.055237][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1465'. [ 372.061119][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.194624][T12541] veth0_macvtap: entered promiscuous mode [ 372.263075][T12541] veth1_macvtap: entered promiscuous mode [ 372.295852][T13064] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 [ 372.433451][T12541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.504356][T12541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.554597][ T6351] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.565390][ T6351] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.586345][ T6351] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.616733][ T6351] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.055593][ T3292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.080747][ T3292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.154938][T13093] FAULT_INJECTION: forcing a failure. [ 373.154938][T13093] name failslab, interval 1, probability 0, space 0, times 0 [ 373.197256][T13093] CPU: 1 UID: 0 PID: 13093 Comm: syz.2.1472 Not tainted syzkaller #0 PREEMPT(full) [ 373.197285][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 373.197303][T13093] Call Trace: [ 373.197389][T13093] [ 373.197459][T13093] dump_stack_lvl+0xe8/0x150 [ 373.197611][T13093] should_fail_ex+0x40c/0x560 [ 373.197722][T13093] should_failslab+0xa8/0x100 [ 373.197767][T13093] __kmalloc_noprof+0xfe/0x720 [ 373.197804][T13093] ? sk_prot_alloc+0xe7/0x210 [ 373.197913][T13093] ? sk_prot_alloc+0xe7/0x210 [ 373.197937][T13093] sk_prot_alloc+0xe7/0x210 [ 373.197954][T13093] ? sk_alloc+0x27/0x390 [ 373.197974][T13093] sk_alloc+0x3a/0x390 [ 373.197994][T13093] bpf_prog_test_run_skb+0x3a6/0x2230 [ 373.198068][T13093] ? __fget_files+0x3a2/0x420 [ 373.198095][T13093] ? __fget_files+0x2a/0x420 [ 373.198114][T13093] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 373.198141][T13093] bpf_prog_test_run+0x2c5/0x340 [ 373.198182][T13093] __sys_bpf+0xa22/0xd90 [ 373.198207][T13093] ? __pfx___sys_bpf+0x10/0x10 [ 373.198239][T13093] ? __fget_files+0x2a/0x420 [ 373.198271][T13093] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 373.198297][T13093] ? ksys_write+0x242/0x270 [ 373.198321][T13093] ? __pfx_ksys_write+0x10/0x10 [ 373.198344][T13093] __x64_sys_bpf+0xba/0xd0 [ 373.198366][T13093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.198400][T13093] do_syscall_64+0x174/0x580 [ 373.198488][T13093] ? trace_irq_disable+0x3b/0x140 [ 373.198505][T13093] ? clear_bhb_loop+0x40/0x90 [ 373.198528][T13093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.198547][T13093] RIP: 0033:0x7f0d9279ce59 [ 373.198571][T13093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.198617][T13093] RSP: 002b:00007f0d9360c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.198661][T13093] RAX: ffffffffffffffda RBX: 00007f0d92a15fa0 RCX: 00007f0d9279ce59 [ 373.198672][T13093] RDX: 0000000000000050 RSI: 0000200000000900 RDI: 000000000000000a [ 373.198684][T13093] RBP: 00007f0d9360c090 R08: 0000000000000000 R09: 0000000000000000 [ 373.198694][T13093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.198704][T13093] R13: 00007f0d92a16038 R14: 00007f0d92a15fa0 R15: 00007ffe8d415558 [ 373.198734][T13093] [ 373.482137][ T6351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.508980][ T6351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.793496][T13106] netlink: 'syz.0.1353': attribute type 61 has an invalid length. [ 373.803435][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 373.940327][T13113] netlink: 'syz.0.1353': attribute type 2 has an invalid length. [ 373.977200][T13113] netlink: 'syz.0.1353': attribute type 2 has an invalid length. [ 374.111629][T13121] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1478'. [ 374.152437][T13121] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1478'. [ 374.356271][T13072] infiniband uyz0: set down [ 374.382494][T13072] infiniband uyz0: added bridge_slave_1 [ 374.550299][T13072] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 374.568519][T13072] infiniband uyz0: Couldn't open port 1 [ 374.594956][T13072] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 374.611241][T13072] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 374.657026][T13072] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 374.686135][T13129] FAULT_INJECTION: forcing a failure. [ 374.686135][T13129] name failslab, interval 1, probability 0, space 0, times 0 [ 374.741930][T13129] CPU: 0 UID: 0 PID: 13129 Comm: syz.0.1479 Not tainted syzkaller #0 PREEMPT(full) [ 374.741959][T13129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 374.741970][T13129] Call Trace: [ 374.741978][T13129] [ 374.741987][T13129] dump_stack_lvl+0xe8/0x150 [ 374.742015][T13129] should_fail_ex+0x40c/0x560 [ 374.742046][T13129] should_failslab+0xa8/0x100 [ 374.742070][T13129] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 374.742097][T13129] ? local_lock_release+0x9c/0x160 [ 374.742209][T13129] ? __alloc_skb+0x1d7/0x7a0 [ 374.742224][T13129] ? __alloc_skb+0x1d7/0x7a0 [ 374.742245][T13129] __alloc_skb+0x1d7/0x7a0 [ 374.742265][T13129] alloc_skb_with_frags+0xc6/0x760 [ 374.742335][T13129] sock_alloc_send_pskb+0x878/0x990 [ 374.742377][T13129] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 374.742403][T13129] ? packet_sendmsg+0x5e3/0x5040 [ 374.742476][T13129] packet_sendmsg+0x3258/0x5040 [ 374.742497][T13129] ? aa_label_sk_perm+0x532/0x6e0 [ 374.742596][T13129] ? __perf_event_header__init_id+0x3b6/0x480 [ 374.742625][T13129] ? perf_prepare_sample+0x117/0x2150 [ 374.742645][T13129] ? perf_prepare_sample+0x1336/0x2150 [ 374.742664][T13129] ? ktime_get+0x45/0x220 [ 374.742701][T13129] ? lock_acquire+0x106/0x350 [ 374.742740][T13129] ? __pfx_packet_sendmsg+0x10/0x10 [ 374.742762][T13129] ? lapic_next_event+0x11/0x20 [ 374.742800][T13129] ? __pfx_aa_sk_perm+0x10/0x10 [ 374.742823][T13129] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.742856][T13129] ? __pfx_packet_sendmsg+0x10/0x10 [ 374.742873][T13129] sock_sendmsg_nosec+0x13a/0x180 [ 374.742927][T13129] ____sys_sendmsg+0x54e/0x850 [ 374.742951][T13129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.742981][T13129] ? import_iovec+0x73/0xa0 [ 374.743036][T13129] ___sys_sendmsg+0x2a5/0x360 [ 374.743055][T13129] ? __lock_acquire+0x683/0x2cf0 [ 374.743079][T13129] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.743098][T13129] ? __lock_acquire+0x683/0x2cf0 [ 374.743149][T13129] ? __fget_files+0x2a/0x420 [ 374.743168][T13129] ? __fget_files+0x3a2/0x420 [ 374.743202][T13129] __x64_sys_sendmsg+0x1b1/0x290 [ 374.743224][T13129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.743258][T13129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.743278][T13129] do_syscall_64+0x174/0x580 [ 374.743297][T13129] ? clear_bhb_loop+0x40/0x90 [ 374.743319][T13129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.743338][T13129] RIP: 0033:0x7f026c39ce59 [ 374.743357][T13129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.743373][T13129] RSP: 002b:00007f026d22b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.743394][T13129] RAX: ffffffffffffffda RBX: 00007f026c615fa0 RCX: 00007f026c39ce59 [ 374.743408][T13129] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 374.743420][T13129] RBP: 00007f026d22b090 R08: 0000000000000000 R09: 0000000000000000 [ 374.743432][T13129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.743443][T13129] R13: 00007f026c616038 R14: 00007f026c615fa0 R15: 00007ffc9513bb58 [ 374.743474][T13129] [ 375.164398][T13072] RDS/IB: uyz0: added [ 375.186539][T13072] smc: adding ib device uyz0 with port count 1 [ 375.196148][T13072] smc: ib device uyz0 port 1 has no pnetid [ 376.008159][ T5291] 8021q: adding VLAN 0 to HW filter on device eth9 [ 377.453433][ T5291] 8021q: adding VLAN 0 to HW filter on device eth10 [ 377.453801][T13187] netlink: 'syz.2.1491': attribute type 61 has an invalid length. [ 377.521407][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 377.523063][T13188] option changes via remount are deprecated (pid=13183 comm=syz.0.1492) [ 377.592365][T13185] can: request_module (can-proto-5) failed. [ 377.863802][T13190] netlink: 'syz.2.1491': attribute type 2 has an invalid length. [ 377.898361][T13190] netlink: 'syz.2.1491': attribute type 2 has an invalid length. [ 377.955056][T13192] option changes via remount are deprecated (pid=13191 comm=syz.3.1493) [ 378.631652][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.650141][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.906071][T13293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 381.974675][ T5291] 8021q: adding VLAN 0 to HW filter on device eth11 [ 382.337762][T13330] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1524'. [ 383.617879][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1532'. [ 384.017763][T13370] FAULT_INJECTION: forcing a failure. [ 384.017763][T13370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.039293][T13370] CPU: 0 UID: 0 PID: 13370 Comm: syz.0.1537 Not tainted syzkaller #0 PREEMPT(full) [ 384.039321][T13370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 384.039332][T13370] Call Trace: [ 384.039343][T13370] [ 384.039354][T13370] dump_stack_lvl+0xe8/0x150 [ 384.039399][T13370] should_fail_ex+0x40c/0x560 [ 384.039461][T13370] _copy_from_iter+0x1d3/0x1660 [ 384.039586][T13370] ? kmem_cache_alloc_node_noprof+0x1e1/0x610 [ 384.039628][T13370] ? rcu_is_watching+0x15/0xb0 [ 384.039674][T13370] ? trace_kmem_cache_alloc+0x29/0xe0 [ 384.039723][T13370] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 384.039759][T13370] ? __pfx__copy_from_iter+0x10/0x10 [ 384.039794][T13370] ? __alloc_skb+0x276/0x7a0 [ 384.039814][T13370] ? __alloc_skb+0x276/0x7a0 [ 384.039867][T13370] ? netlink_sendmsg+0x650/0xb40 [ 384.039929][T13370] ? skb_put+0x112/0x210 [ 384.039974][T13370] netlink_sendmsg+0x6c0/0xb40 [ 384.040048][T13370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.040099][T13370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 384.040161][T13370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.040187][T13370] sock_sendmsg_nosec+0x13a/0x180 [ 384.040239][T13370] ____sys_sendmsg+0x54e/0x850 [ 384.040299][T13370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.040374][T13370] ? import_iovec+0x73/0xa0 [ 384.040424][T13370] ___sys_sendmsg+0x2a5/0x360 [ 384.040450][T13370] ? __lock_acquire+0x683/0x2cf0 [ 384.040506][T13370] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.040707][T13370] ? __fget_files+0x2a/0x420 [ 384.040731][T13370] ? __fget_files+0x3a2/0x420 [ 384.040810][T13370] __x64_sys_sendmsg+0x1b1/0x290 [ 384.040855][T13370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.040972][T13370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.041005][T13370] do_syscall_64+0x174/0x580 [ 384.041028][T13370] ? trace_irq_disable+0x3b/0x140 [ 384.041055][T13370] ? clear_bhb_loop+0x40/0x90 [ 384.041099][T13370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.041123][T13370] RIP: 0033:0x7f026c39ce59 [ 384.041152][T13370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.041168][T13370] RSP: 002b:00007f026d22b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.041189][T13370] RAX: ffffffffffffffda RBX: 00007f026c615fa0 RCX: 00007f026c39ce59 [ 384.041203][T13370] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 384.041215][T13370] RBP: 00007f026d22b090 R08: 0000000000000000 R09: 0000000000000000 [ 384.041227][T13370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.041238][T13370] R13: 00007f026c616038 R14: 00007f026c615fa0 R15: 00007ffc9513bb58 [ 384.041336][T13370] [ 384.963565][ T5291] 8021q: adding VLAN 0 to HW filter on device eth12 [ 385.833417][T13414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1548'. [ 385.863431][T13414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1548'. [ 385.893790][T13416] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1546'. [ 386.043570][T13422] netlink: 'syz.0.1546': attribute type 39 has an invalid length. [ 386.189883][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1550'. [ 386.457493][T13431] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1551'. [ 387.631225][T13472] netlink: 'syz.7.1559': attribute type 2 has an invalid length. [ 387.665470][T13472] netlink: 'syz.7.1559': attribute type 2 has an invalid length. [ 387.907317][T13480] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1561'. [ 388.000356][T13484] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1562'. [ 388.156414][T13492] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1564'. [ 388.601175][T13505] openvswitch: netlink: ct_state flags 00000180 unsupported [ 391.939014][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1578'. [ 392.133596][T13607] netlink: 'syz.2.1581': attribute type 21 has an invalid length. [ 392.150493][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1582'. [ 392.635790][T13614] FAULT_INJECTION: forcing a failure. [ 392.635790][T13614] name failslab, interval 1, probability 0, space 0, times 0 [ 392.649597][T13614] CPU: 0 UID: 0 PID: 13614 Comm: syz.3.1583 Not tainted syzkaller #0 PREEMPT(full) [ 392.649622][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.649635][T13614] Call Trace: [ 392.649646][T13614] [ 392.649657][T13614] dump_stack_lvl+0xe8/0x150 [ 392.649701][T13614] should_fail_ex+0x40c/0x560 [ 392.649764][T13614] should_failslab+0xa8/0x100 [ 392.649806][T13614] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 392.649844][T13614] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 392.649872][T13614] ? radix_tree_node_alloc+0x7e/0x3a0 [ 392.650010][T13614] ? radix_tree_node_alloc+0x7e/0x3a0 [ 392.650078][T13614] radix_tree_node_alloc+0x7e/0x3a0 [ 392.650144][T13614] idr_get_free+0x28f/0xa10 [ 392.650245][T13614] idr_alloc_u32+0x18a/0x330 [ 392.650265][T13614] ? __radix_tree_preload+0x82/0x870 [ 392.650323][T13614] ? __pfx_idr_alloc_u32+0x10/0x10 [ 392.650373][T13614] ? do_raw_spin_lock+0x12b/0x2f0 [ 392.650440][T13614] idr_alloc_cyclic+0x9c/0x1b0 [ 392.650503][T13614] map_create+0x47c/0x1b90 [ 392.650574][T13614] ? __pfx_map_create+0x10/0x10 [ 392.650658][T13614] ? bpf_lsm_bpf+0x9/0x20 [ 392.650693][T13614] ? security_bpf+0x7e/0x2d0 [ 392.650770][T13614] __sys_bpf+0xaea/0xd90 [ 392.650838][T13614] ? __pfx___sys_bpf+0x10/0x10 [ 392.650932][T13614] ? __fget_files+0x2a/0x420 [ 392.651050][T13614] ? ksys_write+0x242/0x270 [ 392.651096][T13614] ? __pfx_ksys_write+0x10/0x10 [ 392.651159][T13614] __x64_sys_bpf+0xba/0xd0 [ 392.651201][T13614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.651234][T13614] do_syscall_64+0x174/0x580 [ 392.651266][T13614] ? clear_bhb_loop+0x40/0x90 [ 392.651310][T13614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.651333][T13614] RIP: 0033:0x7fd49579ce59 [ 392.651360][T13614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.651377][T13614] RSP: 002b:00007fd4965bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.651397][T13614] RAX: ffffffffffffffda RBX: 00007fd495a15fa0 RCX: 00007fd49579ce59 [ 392.651410][T13614] RDX: 0000000000000050 RSI: 0000200000004440 RDI: 0000000000000000 [ 392.651422][T13614] RBP: 00007fd4965bd090 R08: 0000000000000000 R09: 0000000000000000 [ 392.651433][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.651444][T13614] R13: 00007fd495a16038 R14: 00007fd495a15fa0 R15: 00007ffd132ed408 [ 392.651540][T13614] [ 393.554078][T13641] FAULT_INJECTION: forcing a failure. [ 393.554078][T13641] name failslab, interval 1, probability 0, space 0, times 0 [ 393.600199][T13641] CPU: 1 UID: 0 PID: 13641 Comm: syz.9.1590 Not tainted syzkaller #0 PREEMPT(full) [ 393.600226][T13641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.600236][T13641] Call Trace: [ 393.600242][T13641] [ 393.600250][T13641] dump_stack_lvl+0xe8/0x150 [ 393.600287][T13641] should_fail_ex+0x40c/0x560 [ 393.600317][T13641] should_failslab+0xa8/0x100 [ 393.600339][T13641] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 393.600366][T13641] ? local_lock_release+0x9c/0x160 [ 393.600394][T13641] ? __alloc_skb+0x1d7/0x7a0 [ 393.600409][T13641] ? __alloc_skb+0x1d7/0x7a0 [ 393.600431][T13641] __alloc_skb+0x1d7/0x7a0 [ 393.600452][T13641] netlink_sendmsg+0x5d4/0xb40 [ 393.600475][T13641] ? lapic_next_event+0x11/0x20 [ 393.600503][T13641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.600526][T13641] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.600552][T13641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.600571][T13641] sock_sendmsg_nosec+0x13a/0x180 [ 393.600598][T13641] ____sys_sendmsg+0x54e/0x850 [ 393.600623][T13641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.600648][T13641] ? lock_release+0x2d7/0x3c0 [ 393.600669][T13641] ? import_iovec+0x73/0xa0 [ 393.600690][T13641] ___sys_sendmsg+0x2a5/0x360 [ 393.600710][T13641] ? __lock_acquire+0x683/0x2cf0 [ 393.600732][T13641] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.600782][T13641] ? __fget_files+0x2a/0x420 [ 393.600801][T13641] ? __fget_files+0x3a2/0x420 [ 393.600825][T13641] __x64_sys_sendmsg+0x1b1/0x290 [ 393.600847][T13641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.600883][T13641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.600903][T13641] do_syscall_64+0x174/0x580 [ 393.600922][T13641] ? clear_bhb_loop+0x40/0x90 [ 393.600945][T13641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.600964][T13641] RIP: 0033:0x7f6a8f19ce59 [ 393.600982][T13641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.600998][T13641] RSP: 002b:00007f6a90013028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.601019][T13641] RAX: ffffffffffffffda RBX: 00007f6a8f415fa0 RCX: 00007f6a8f19ce59 [ 393.601032][T13641] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 393.601044][T13641] RBP: 00007f6a90013090 R08: 0000000000000000 R09: 0000000000000000 [ 393.601060][T13641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.601071][T13641] R13: 00007f6a8f416038 R14: 00007f6a8f415fa0 R15: 00007ffcf65d6858 [ 393.601101][T13641] [ 394.184819][T13655] lo speed is unknown, defaulting to 1000 [ 394.197221][T13646] netlink: 'syz.0.1592': attribute type 21 has an invalid length. [ 394.224503][T13655] lo speed is unknown, defaulting to 1000 [ 394.231525][T13646] IPv6: NLM_F_CREATE should be specified when creating new route [ 394.264810][T13646] IPv6: Can't replace route, no match found [ 394.315271][T13655] lo speed is unknown, defaulting to 1000 [ 394.337496][T13655] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 394.390940][T13655] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 394.432133][T13655] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 394.507331][T13665] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1593'. [ 394.573665][T13655] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 394.645245][T13665] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1593'. [ 394.844858][T13655] lo speed is unknown, defaulting to 1000 [ 394.926144][T13655] lo speed is unknown, defaulting to 1000 [ 394.968155][T13655] lo speed is unknown, defaulting to 1000 [ 395.040441][T13655] lo speed is unknown, defaulting to 1000 [ 395.082180][T13655] lo speed is unknown, defaulting to 1000 [ 395.157062][T13676] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1597'. [ 396.043741][T13711] netlink: 'syz.2.1606': attribute type 10 has an invalid length. [ 396.067514][T13711] batman_adv: batadv0: Adding interface: dummy0 [ 396.086249][T13711] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.152600][T13711] batman_adv: batadv0: Interface activated: dummy0 [ 396.367708][T13718] netlink: 'syz.2.1607': attribute type 61 has an invalid length. [ 396.422713][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1607'. [ 396.524879][T13721] netlink: 'syz.0.1608': attribute type 61 has an invalid length. [ 396.550373][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1608'. [ 396.612919][T13718] netlink: 'syz.2.1607': attribute type 2 has an invalid length. [ 396.642019][T13718] netlink: 'syz.2.1607': attribute type 2 has an invalid length. [ 396.690481][T13721] netlink: 'syz.0.1608': attribute type 2 has an invalid length. [ 396.758871][T13721] netlink: 'syz.0.1608': attribute type 2 has an invalid length. [ 397.096603][T13733] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1611'. [ 397.153310][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1610'. [ 397.264394][T13738] netlink: 'syz.0.1612': attribute type 2 has an invalid length. [ 397.275906][T13738] netlink: 'syz.0.1612': attribute type 2 has an invalid length. [ 398.030138][T13763] mac80211_hwsim hwsim59 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 398.997629][T13795] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1625'. [ 400.077926][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1631'. [ 400.171967][T13827] xt_cluster: you have exceeded the maximum number of cluster nodes (9248 > 32) [ 400.221794][T13801] lo speed is unknown, defaulting to 1000 [ 400.662166][T13845] syzkaller1: tun_chr_ioctl cmd 1074025684 [ 400.974764][ T5291] 8021q: adding VLAN 0 to HW filter on device eth13 [ 401.086441][T13857] netlink: 'syz.2.1638': attribute type 21 has an invalid length. [ 401.129561][T13857] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1638'. [ 401.415918][T13867] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1641'. [ 401.507592][T13872] netlink: 'syz.2.1643': attribute type 10 has an invalid length. [ 401.507667][T13870] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1641'. [ 401.937427][T13867] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1641'. [ 402.285141][T13889] option changes via remount are deprecated (pid=13888 comm=syz.7.1646) [ 402.303715][T13903] netlink: 'syz.9.1648': attribute type 62 has an invalid length. [ 402.653711][ T5291] 8021q: adding VLAN 0 to HW filter on device eth14 [ 403.162161][T13887] lo speed is unknown, defaulting to 1000 [ 403.556179][ T30] audit: type=1107 audit(1782449386.157:2): pid=13926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÿ‹¹' [ 403.740800][T13941] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1658'. [ 404.056594][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1660'. [ 404.203889][T13898] lo speed is unknown, defaulting to 1000 [ 404.467742][T13952] option changes via remount are deprecated (pid=13951 comm=syz.2.1661) [ 405.823929][T13989] netlink: 'syz.2.1668': attribute type 21 has an invalid length. [ 405.857099][T13989] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1668'. [ 405.888270][T13989] netlink: 'syz.2.1668': attribute type 5 has an invalid length. [ 406.043099][T13989] netlink: 'syz.2.1668': attribute type 6 has an invalid length. [ 406.117504][T13989] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1668'. [ 407.471245][T14032] netlink: 3752 bytes leftover after parsing attributes in process `syz.9.1680'. [ 407.840819][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1683'. [ 408.055833][T14041] netlink: 122 bytes leftover after parsing attributes in process `syz.9.1683'. [ 408.124662][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1685'. [ 408.981790][T13985] lo speed is unknown, defaulting to 1000 [ 409.406100][T14079] netlink: 288 bytes leftover after parsing attributes in process `syz.9.1692'. [ 409.792990][T14082] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1693'. [ 410.093285][ T5291] 8021q: adding VLAN 0 to HW filter on device eth15 [ 410.861200][T14108] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.1700'. [ 410.914511][T14109] netlink: 'syz.0.1701': attribute type 4 has an invalid length. [ 410.922547][T14109] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1701'. [ 411.198401][T14109] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 411.556723][T14124] netlink: 'syz.7.1703': attribute type 12 has an invalid length. [ 411.567237][T14124] netlink: 'syz.7.1703': attribute type 29 has an invalid length. [ 411.781249][T14136] netlink: 'syz.0.1706': attribute type 16 has an invalid length. [ 411.819023][T14136] netlink: 'syz.0.1706': attribute type 17 has an invalid length. [ 411.992587][T14145] netlink: zone id is out of range [ 412.008183][T14145] netlink: zone id is out of range [ 412.387480][T14152] option changes via remount are deprecated (pid=14151 comm=syz.9.1710) [ 412.599542][ T5291] 8021q: adding VLAN 0 to HW filter on device eth16 [ 412.620611][T14143] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1705'. [ 413.564785][T14163] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1713'. [ 415.163140][T14191] netlink: 'syz.7.1720': attribute type 61 has an invalid length. [ 415.202839][T14191] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1720'. [ 415.310813][T14187] IPv6: Can't replace route, no match found [ 415.333110][T14158] lo speed is unknown, defaulting to 1000 [ 415.505858][T14191] netlink: 'syz.7.1720': attribute type 2 has an invalid length. [ 415.532954][T14191] netlink: 'syz.7.1720': attribute type 2 has an invalid length. [ 415.895448][T14214] netlink: 'syz.0.1724': attribute type 2 has an invalid length. [ 415.932883][T14214] netlink: 'syz.0.1724': attribute type 2 has an invalid length. [ 418.011845][T14269] netlink: 'syz.7.1736': attribute type 10 has an invalid length. [ 418.073829][T14269] batman_adv: batadv0: Adding interface: dummy0 [ 418.128053][T14269] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.292421][T14269] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 418.762005][T14283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1741'. [ 418.845737][T14287] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1740'. [ 419.034752][T14287] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1740'. [ 419.482075][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1745'. [ 419.538993][T14300] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1745'. [ 421.105175][T14347] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1756'. [ 421.807895][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1759'. [ 422.030205][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1763'. [ 422.873588][T14369] netlink: zone id is out of range [ 422.968037][T14369] netlink: zone id is out of range [ 423.025521][T14369] netlink: zone id is out of range [ 423.064364][T14369] netlink: zone id is out of range [ 423.117921][T14369] netlink: zone id is out of range [ 423.213945][T14369] netlink: zone id is out of range [ 423.300391][T14369] netlink: zone id is out of range [ 423.418079][T14369] netlink: zone id is out of range [ 423.483949][T14369] netlink: zone id is out of range [ 423.542249][T14369] netlink: zone id is out of range [ 423.767792][T14392] netlink: 3752 bytes leftover after parsing attributes in process `syz.9.1770'. [ 423.827753][T14393] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1769'. [ 423.913616][T14393] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1769'. [ 424.796562][T14429] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1779'. [ 424.906852][ T30] audit: type=1107 audit(1782449407.517:3): pid=14428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 425.093656][T14440] netlink: 3752 bytes leftover after parsing attributes in process `syz.7.1783'. [ 425.391727][T14453] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1786'. [ 425.473193][T14453] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1786'. [ 426.746156][T14518] __nla_validate_parse: 2 callbacks suppressed [ 426.746202][T14518] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1803'. [ 426.947775][T14525] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1806'. [ 426.976327][T14525] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1806'. [ 427.291587][T14535] option changes via remount are deprecated (pid=14529 comm=syz.7.1808) [ 427.475840][T14540] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.1809'. [ 427.905398][T14556] siw: device registration error -23 [ 427.918352][T14545] netlink: 'syz.9.1810': attribute type 2 has an invalid length. [ 427.951826][T14545] netlink: 'syz.9.1810': attribute type 2 has an invalid length. [ 428.392826][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1818'. [ 428.732595][T14585] option changes via remount are deprecated (pid=14584 comm=syz.9.1821) [ 428.829179][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1824'. [ 428.839422][T14597] netlink: 'syz.3.1825': attribute type 2 has an invalid length. [ 428.887004][T14597] netlink: 'syz.3.1825': attribute type 2 has an invalid length. [ 429.077074][T14600] siw: device registration error -23 [ 429.269821][T14618] FAULT_INJECTION: forcing a failure. [ 429.269821][T14618] name failslab, interval 1, probability 0, space 0, times 0 [ 429.298839][T14618] CPU: 0 UID: 0 PID: 14618 Comm: syz.2.1830 Not tainted syzkaller #0 PREEMPT(full) [ 429.298866][T14618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.298876][T14618] Call Trace: [ 429.298884][T14618] [ 429.298892][T14618] dump_stack_lvl+0xe8/0x150 [ 429.298918][T14618] should_fail_ex+0x40c/0x560 [ 429.298955][T14618] should_failslab+0xa8/0x100 [ 429.298977][T14618] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 429.299001][T14618] ? local_lock_release+0x9c/0x160 [ 429.299030][T14618] ? __alloc_skb+0x1d7/0x7a0 [ 429.299045][T14618] ? __alloc_skb+0x1d7/0x7a0 [ 429.299067][T14618] __alloc_skb+0x1d7/0x7a0 [ 429.299087][T14618] netlink_sendmsg+0x5d4/0xb40 [ 429.299106][T14618] ? lockdep_hardirqs_on+0x7a/0x110 [ 429.299229][T14618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.299263][T14618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.299281][T14618] sock_sendmsg_nosec+0x13a/0x180 [ 429.299306][T14618] ____sys_sendmsg+0x54e/0x850 [ 429.299331][T14618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.299360][T14618] ? import_iovec+0x73/0xa0 [ 429.299383][T14618] ___sys_sendmsg+0x2a5/0x360 [ 429.299402][T14618] ? __lock_acquire+0x683/0x2cf0 [ 429.299423][T14618] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.299473][T14618] ? __fget_files+0x2a/0x420 [ 429.299491][T14618] ? __fget_files+0x3a2/0x420 [ 429.299517][T14618] __x64_sys_sendmsg+0x1b1/0x290 [ 429.299539][T14618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.299575][T14618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.299595][T14618] do_syscall_64+0x174/0x580 [ 429.299612][T14618] ? clear_bhb_loop+0x40/0x90 [ 429.299635][T14618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.299652][T14618] RIP: 0033:0x7f0d9279ce59 [ 429.299671][T14618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.299687][T14618] RSP: 002b:00007f0d935eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.299706][T14618] RAX: ffffffffffffffda RBX: 00007f0d92a16090 RCX: 00007f0d9279ce59 [ 429.299719][T14618] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000c [ 429.299731][T14618] RBP: 00007f0d935eb090 R08: 0000000000000000 R09: 0000000000000000 [ 429.299742][T14618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.299752][T14618] R13: 00007f0d92a16128 R14: 00007f0d92a16090 R15: 00007ffe8d415558 [ 429.299783][T14618] [ 429.612247][T14624] netlink: 'syz.0.1833': attribute type 22 has an invalid length. [ 429.886524][T14624] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1833'. [ 430.390256][T14645] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1836'. [ 430.426463][T14642] option changes via remount are deprecated (pid=14641 comm=syz.2.1837) [ 430.458822][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1839'. [ 430.459139][T14645] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1836'. [ 430.737531][T14656] netlink: 'syz.9.1841': attribute type 2 has an invalid length. [ 430.746922][T14656] netlink: 'syz.9.1841': attribute type 2 has an invalid length. [ 431.319458][T14678] IPv6: Can't replace route, no match found [ 431.631631][T14686] option changes via remount are deprecated (pid=14685 comm=syz.2.1851) [ 431.715994][T14693] netlink: 'syz.7.1853': attribute type 14 has an invalid length. [ 432.201388][T14700] netlink: 'syz.2.1856': attribute type 2 has an invalid length. [ 432.250428][T14700] netlink: 'syz.2.1856': attribute type 2 has an invalid length. [ 432.732857][T14705] __nla_validate_parse: 6 callbacks suppressed [ 432.732878][T14705] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1858'. [ 432.959010][T14714] netlink: 'syz.9.1862': attribute type 5 has an invalid length. [ 432.995949][T14716] netlink: 'syz.7.1863': attribute type 10 has an invalid length. [ 433.023313][T14716] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1863'. [ 433.057716][T14716] team0: entered promiscuous mode [ 433.080563][T14716] team_slave_0: entered promiscuous mode [ 433.099221][T14716] team_slave_1: entered promiscuous mode [ 433.119821][T14716] veth0: entered promiscuous mode [ 433.149864][T14716] team0: entered allmulticast mode [ 433.155038][T14716] team_slave_0: entered allmulticast mode [ 433.160829][T14716] team_slave_1: entered allmulticast mode [ 433.166866][T14716] veth0: entered allmulticast mode [ 433.205247][T14716] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.214167][T14716] bridge0: port 1(team0) entered blocking state [ 433.230592][T14716] bridge0: port 1(team0) entered disabled state [ 433.400565][T14726] netlink: 288 bytes leftover after parsing attributes in process `syz.7.1867'. [ 433.620975][T14735] netlink: 'syz.9.1870': attribute type 2 has an invalid length. [ 433.629241][T14735] netlink: 'syz.9.1870': attribute type 2 has an invalid length. [ 434.018294][T14741] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1872'. [ 434.045402][T14744] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 434.971238][T14776] netlink: 'syz.2.1884': attribute type 2 has an invalid length. [ 434.999031][T14776] netlink: 'syz.2.1884': attribute type 2 has an invalid length. [ 435.876706][T14795] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1889'. [ 436.087054][T14816] netlink: 4595 bytes leftover after parsing attributes in process `syz.9.1896'. [ 436.157350][T14818] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1895'. [ 436.180444][T14816] netlink: 4595 bytes leftover after parsing attributes in process `syz.9.1896'. [ 436.206466][T14816] netlink: 4595 bytes leftover after parsing attributes in process `syz.9.1896'. [ 436.223747][T14822] netlink: 'syz.7.1897': attribute type 2 has an invalid length. [ 436.244759][T14822] netlink: 'syz.7.1897': attribute type 2 has an invalid length. [ 436.476399][T14831] netlink: 'syz.9.1899': attribute type 61 has an invalid length. [ 436.505338][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1899'. [ 436.566513][T14836] FAULT_INJECTION: forcing a failure. [ 436.566513][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 436.627895][T14836] CPU: 1 UID: 0 PID: 14836 Comm: syz.0.1900 Not tainted syzkaller #0 PREEMPT(full) [ 436.627923][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.627935][T14836] Call Trace: [ 436.627943][T14836] [ 436.627951][T14836] dump_stack_lvl+0xe8/0x150 [ 436.627981][T14836] should_fail_ex+0x40c/0x560 [ 436.628015][T14836] should_failslab+0xa8/0x100 [ 436.628040][T14836] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 436.628070][T14836] ? skb_clone+0x212/0x3a0 [ 436.628089][T14836] ? skb_clone+0x212/0x3a0 [ 436.628111][T14836] ? irqentry_exit+0x218/0x8f0 [ 436.628146][T14836] skb_clone+0x212/0x3a0 [ 436.628173][T14836] __netlink_deliver_tap+0x413/0x860 [ 436.628213][T14836] ? netlink_deliver_tap+0x2e/0x1b0 [ 436.628238][T14836] netlink_deliver_tap+0x19c/0x1b0 [ 436.628262][T14836] netlink_unicast+0x77f/0x940 [ 436.628298][T14836] netlink_sendmsg+0x813/0xb40 [ 436.628334][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.628355][T14836] ? perf_trace_lock_acquire+0x109/0x440 [ 436.628379][T14836] ? aa_sock_msg_perm+0xf1/0x1b0 [ 436.628409][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.628430][T14836] sock_sendmsg_nosec+0x13a/0x180 [ 436.628460][T14836] ____sys_sendmsg+0x54e/0x850 [ 436.628490][T14836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.628525][T14836] ? import_iovec+0x73/0xa0 [ 436.628551][T14836] ___sys_sendmsg+0x2a5/0x360 [ 436.628571][T14836] ? __lock_acquire+0x683/0x2cf0 [ 436.628598][T14836] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.628664][T14836] ? __fget_files+0x2a/0x420 [ 436.628681][T14836] ? __fget_files+0x3a2/0x420 [ 436.628710][T14836] __x64_sys_sendmsg+0x1b1/0x290 [ 436.628736][T14836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.628783][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.628805][T14836] do_syscall_64+0x174/0x580 [ 436.628825][T14836] ? clear_bhb_loop+0x40/0x90 [ 436.628847][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.628871][T14836] RIP: 0033:0x7f026c39ce59 [ 436.628890][T14836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.628906][T14836] RSP: 002b:00007f026d22b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.628926][T14836] RAX: ffffffffffffffda RBX: 00007f026c615fa0 RCX: 00007f026c39ce59 [ 436.628939][T14836] RDX: 0000000000000000 RSI: 00002000000039c0 RDI: 0000000000000008 [ 436.628951][T14836] RBP: 00007f026d22b090 R08: 0000000000000000 R09: 0000000000000000 [ 436.628963][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.628974][T14836] R13: 00007f026c616038 R14: 00007f026c615fa0 R15: 00007ffc9513bb58 [ 436.629012][T14836] [ 438.886417][T14922] xt_socket: unknown flags 0x50 [ 438.906800][T14922] __nla_validate_parse: 1 callbacks suppressed [ 438.906819][T14922] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'. [ 438.977628][T14924] validate_nla: 4 callbacks suppressed [ 438.977763][T14924] netlink: 'syz.3.1922': attribute type 11 has an invalid length. [ 438.992819][T14924] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1922'. [ 439.087909][T14907] option changes via remount are deprecated (pid=14906 comm=syz.0.1915) [ 439.102396][T14928] nbd: must specify at least one socket [ 439.110909][T14928] netlink: 4079 bytes leftover after parsing attributes in process `syz.7.1923'. [ 439.132687][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1925'. [ 439.147449][T14931] netlink: 'syz.2.1924': attribute type 2 has an invalid length. [ 439.156294][T14931] netlink: 'syz.2.1924': attribute type 2 has an invalid length. [ 439.173022][T14929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1925'. [ 439.357942][T14937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1926'. [ 439.386818][T14937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1926'. [ 439.500653][T14941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1929'. [ 440.051752][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.061736][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.294789][T14982] netlink: 'syz.9.1939': attribute type 2 has an invalid length. [ 440.308210][T14982] netlink: 'syz.9.1939': attribute type 2 has an invalid length. [ 441.315569][T15000] pim6reg0: tun_chr_ioctl cmd 2147767521 [ 441.337652][T15010] netlink: 'syz.0.1944': attribute type 39 has an invalid length. [ 441.445779][T15003] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1944'. [ 441.607458][T15002] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.864213][T15010] hsr_slave_0: left promiscuous mode [ 441.883860][T15010] hsr_slave_1: left promiscuous mode [ 442.360819][T15043] netlink: 'syz.0.1952': attribute type 10 has an invalid length. [ 442.375187][T15045] netlink: 'syz.7.1953': attribute type 2 has an invalid length. [ 442.388766][T15043] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1952'. [ 442.402785][T15045] netlink: 'syz.7.1953': attribute type 2 has an invalid length. [ 442.424207][T15043] team0: entered promiscuous mode [ 442.450325][T15043] team_slave_0: entered promiscuous mode [ 442.483592][T15043] team_slave_1: entered promiscuous mode [ 442.545006][T15043] team0: entered allmulticast mode [ 442.615946][T15043] team_slave_0: entered allmulticast mode [ 442.654198][T15043] team_slave_1: entered allmulticast mode [ 442.695816][T15043] bridge0: port 3(team0) entered blocking state [ 442.744282][T15043] bridge0: port 3(team0) entered disabled state [ 442.804518][T15043] bridge0: port 3(team0) entered blocking state [ 442.811059][T15043] bridge0: port 3(team0) entered forwarding state [ 443.168027][T15068] netlink: 'syz.9.1957': attribute type 1 has an invalid length. [ 443.487942][T15076] FAULT_INJECTION: forcing a failure. [ 443.487942][T15076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.511007][T15076] CPU: 1 UID: 0 PID: 15076 Comm: syz.7.1959 Not tainted syzkaller #0 PREEMPT(full) [ 443.511033][T15076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.511043][T15076] Call Trace: [ 443.511050][T15076] [ 443.511058][T15076] dump_stack_lvl+0xe8/0x150 [ 443.511084][T15076] should_fail_ex+0x40c/0x560 [ 443.511115][T15076] _copy_from_user+0x2d/0xb0 [ 443.511219][T15076] generic_map_update_batch+0x651/0x9a0 [ 443.511252][T15076] ? __pfx_generic_map_update_batch+0x10/0x10 [ 443.511276][T15076] ? __fget_files+0x2a/0x420 [ 443.511301][T15076] ? __pfx_generic_map_update_batch+0x10/0x10 [ 443.511324][T15076] bpf_map_do_batch+0x391/0x630 [ 443.511350][T15076] __sys_bpf+0xbe5/0xd90 [ 443.511376][T15076] ? __pfx___sys_bpf+0x10/0x10 [ 443.511406][T15076] ? __fget_files+0x2a/0x420 [ 443.511441][T15076] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 443.511470][T15076] ? ksys_write+0x242/0x270 [ 443.511494][T15076] ? __pfx_ksys_write+0x10/0x10 [ 443.511522][T15076] __x64_sys_bpf+0xba/0xd0 [ 443.511548][T15076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.511569][T15076] do_syscall_64+0x174/0x580 [ 443.511586][T15076] ? trace_irq_disable+0x3b/0x140 [ 443.511603][T15076] ? clear_bhb_loop+0x40/0x90 [ 443.511626][T15076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.511645][T15076] RIP: 0033:0x7f7d67d9ce59 [ 443.511662][T15076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.511678][T15076] RSP: 002b:00007f7d68c46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 443.511698][T15076] RAX: ffffffffffffffda RBX: 00007f7d68015fa0 RCX: 00007f7d67d9ce59 [ 443.511712][T15076] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 443.511724][T15076] RBP: 00007f7d68c46090 R08: 0000000000000000 R09: 0000000000000000 [ 443.511736][T15076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 443.511746][T15076] R13: 00007f7d68016038 R14: 00007f7d68015fa0 R15: 00007ffdaad19d28 [ 443.511777][T15076] [ 444.369551][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1963'. [ 444.489987][T15101] option changes via remount are deprecated (pid=15100 comm=syz.3.1964) [ 444.540181][T15107] netlink: 'syz.2.1966': attribute type 2 has an invalid length. [ 444.574796][T15107] netlink: 'syz.2.1966': attribute type 2 has an invalid length. [ 444.763461][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1970'. [ 445.235292][T15134] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1973'. [ 445.334041][T15134] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1973'. [ 446.009292][T15159] option changes via remount are deprecated (pid=15155 comm=syz.2.1979) [ 446.490709][T15176] netlink: 'syz.9.1983': attribute type 2 has an invalid length. [ 446.535185][T15176] netlink: 'syz.9.1983': attribute type 2 has an invalid length. [ 446.844467][T15189] net_ratelimit: 17 callbacks suppressed [ 446.844599][T15189] openvswitch: netlink: Actions may not be safe on all matching packets [ 447.412766][T15209] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1990'. [ 447.505525][T15210] IPv6: Can't replace route, no match found [ 447.758474][T15213] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1993'. [ 448.214218][T15227] netlink: 'syz.0.1994': attribute type 27 has an invalid length. [ 448.703403][T15227] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1994'. [ 449.173723][T15244] netlink: 'syz.7.1999': attribute type 2 has an invalid length. [ 449.183604][T15244] netlink: 'syz.7.1999': attribute type 2 has an invalid length. [ 449.672241][T15257] netlink: 'syz.2.2002': attribute type 1 has an invalid length. [ 449.947957][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2006'. [ 449.960762][T15274] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2004'. [ 450.015449][T15261] netlink: 'syz.0.2003': attribute type 21 has an invalid length. [ 450.066567][T15270] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2003'. [ 450.953058][T15294] netlink: 'syz.9.2011': attribute type 10 has an invalid length. [ 450.999601][T15297] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2012'. [ 451.004670][T15294] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2011'. [ 451.067146][T15294] team0: entered promiscuous mode [ 451.108489][T15294] team_slave_0: entered promiscuous mode [ 451.131137][T15294] team_slave_1: entered promiscuous mode [ 451.181025][T15294] team0: entered allmulticast mode [ 451.212691][T15294] team_slave_0: entered allmulticast mode [ 451.236499][T15294] team_slave_1: entered allmulticast mode [ 451.265264][T15294] 8021q: adding VLAN 0 to HW filter on device team0 [ 451.286089][T15294] bridge0: port 3(team0) entered blocking state [ 451.302706][T15294] bridge0: port 3(team0) entered disabled state [ 451.416842][T15297] netlink: 15678 bytes leftover after parsing attributes in process `syz.3.2012'. [ 451.444585][T15312] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2015'. [ 451.526584][T15313] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2015'. [ 451.932693][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2021'. [ 452.135737][ T5291] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.558247][T15348] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2025'. [ 453.151601][T15366] FAULT_INJECTION: forcing a failure. [ 453.151601][T15366] name failslab, interval 1, probability 0, space 0, times 0 [ 453.194520][T15366] CPU: 0 UID: 0 PID: 15366 Comm: syz.2.2031 Not tainted syzkaller #0 PREEMPT(full) [ 453.194546][T15366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.194557][T15366] Call Trace: [ 453.194567][T15366] [ 453.194579][T15366] dump_stack_lvl+0xe8/0x150 [ 453.194632][T15366] should_fail_ex+0x40c/0x560 [ 453.194697][T15366] should_failslab+0xa8/0x100 [ 453.194738][T15366] __kmalloc_cache_noprof+0xa8/0x660 [ 453.194784][T15366] ? nfnetlink_rcv+0x1021/0x28c0 [ 453.194877][T15366] ? nfnetlink_rcv+0x1021/0x28c0 [ 453.194937][T15366] nfnetlink_rcv+0x1021/0x28c0 [ 453.195127][T15366] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 453.195147][T15366] ? trace_call_bpf+0x7d1/0xb80 [ 453.195258][T15366] ? ref_tracker_free+0x689/0x830 [ 453.195458][T15366] ? skb_clone+0x246/0x3a0 [ 453.195508][T15366] ? __netlink_deliver_tap+0x811/0x860 [ 453.195584][T15366] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.195614][T15366] ? netlink_deliver_tap+0x2e/0x1b0 [ 453.195681][T15366] netlink_unicast+0x7bb/0x940 [ 453.195766][T15366] netlink_sendmsg+0x813/0xb40 [ 453.195808][T15366] ? __pfx_trace_call_bpf+0x10/0x10 [ 453.195873][T15366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.195925][T15366] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.195989][T15366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.196015][T15366] sock_sendmsg_nosec+0x13a/0x180 [ 453.196067][T15366] ____sys_sendmsg+0x54e/0x850 [ 453.196127][T15366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.196205][T15366] ? import_iovec+0x73/0xa0 [ 453.196256][T15366] ___sys_sendmsg+0x2a5/0x360 [ 453.196318][T15366] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.196460][T15366] ? __fget_files+0x2a/0x420 [ 453.196536][T15366] ? __fget_files+0x2a/0x420 [ 453.196560][T15366] ? __fget_files+0x3a2/0x420 [ 453.196640][T15366] __x64_sys_sendmsg+0x1b1/0x290 [ 453.196684][T15366] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.196803][T15366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.196836][T15366] do_syscall_64+0x174/0x580 [ 453.196859][T15366] ? trace_irq_disable+0x3b/0x140 [ 453.196886][T15366] ? clear_bhb_loop+0x40/0x90 [ 453.196932][T15366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.196956][T15366] RIP: 0033:0x7f0d9279ce59 [ 453.196983][T15366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.197000][T15366] RSP: 002b:00007f0d9360c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.197020][T15366] RAX: ffffffffffffffda RBX: 00007f0d92a15fa0 RCX: 00007f0d9279ce59 [ 453.197034][T15366] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 453.197045][T15366] RBP: 00007f0d9360c090 R08: 0000000000000000 R09: 0000000000000000 [ 453.197057][T15366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.197068][T15366] R13: 00007f0d92a16038 R14: 00007f0d92a15fa0 R15: 00007ffe8d415558 [ 453.197168][T15366] [ 453.625166][T15375] netlink: 'syz.3.2034': attribute type 21 has an invalid length. [ 453.730034][T15382] netlink: 'syz.0.2036': attribute type 3 has an invalid length. [ 454.041175][T15375] netlink: 'syz.3.2034': attribute type 8 has an invalid length. [ 454.325588][T15397] openvswitch: netlink: Actions may not be safe on all matching packets [ 454.337221][T15397] : renamed from bond_slave_0 (while UP) [ 455.404307][T15426] __nla_validate_parse: 7 callbacks suppressed [ 455.404328][T15426] netlink: 3752 bytes leftover after parsing attributes in process `syz.9.2053'. [ 456.969759][T15442] openvswitch: netlink: IP tunnel dst address not specified [ 457.490487][T15466] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2062'. [ 457.582831][T15465] netlink: 192 bytes leftover after parsing attributes in process `syz.7.2061'. [ 457.937671][T15479] netlink: 3752 bytes leftover after parsing attributes in process `syz.3.2067'. [ 457.950018][T15478] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2066'. [ 458.237201][T15486] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2068'. [ 460.479034][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'. [ 460.670933][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'. [ 460.890151][T15517] netlink: 'syz.0.2079': attribute type 10 has an invalid length. [ 460.914346][T15517] team0: Device veth0_vlan failed to register rx_handler [ 461.019634][T15522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2080'. [ 461.352725][T15526] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.2082'. [ 461.911552][T15535] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2085'. [ 462.938351][T15540] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 462.947383][T15540] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2086'. [ 462.964995][T15540] team0: entered promiscuous mode [ 462.971965][T15540] team_slave_0: entered promiscuous mode [ 462.978002][T15540] team_slave_1: entered promiscuous mode [ 462.997154][T15540] team0: entered allmulticast mode [ 463.008252][T15540] team_slave_0: entered allmulticast mode [ 463.022700][T15540] team_slave_1: entered allmulticast mode [ 463.030761][T15540] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.038613][T15540] bridge0: port 1(team0) entered blocking state [ 463.060437][T15540] bridge0: port 1(team0) entered disabled state [ 463.841355][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2089'. [ 464.272059][T15578] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2099'. [ 464.356360][T15580] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2098'. [ 464.527359][T15591] netlink: 'syz.9.2102': attribute type 10 has an invalid length. [ 464.538574][T15591] wg2: entered promiscuous mode [ 464.547080][T15591] wg2: entered allmulticast mode [ 464.552051][T15591] team0: Device wg2 is of different type [ 464.845055][T15606] FAULT_INJECTION: forcing a failure. [ 464.845055][T15606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.896741][T15606] CPU: 0 UID: 0 PID: 15606 Comm: syz.0.2108 Not tainted syzkaller #0 PREEMPT(full) [ 464.896770][T15606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.896781][T15606] Call Trace: [ 464.896789][T15606] [ 464.896797][T15606] dump_stack_lvl+0xe8/0x150 [ 464.896825][T15606] should_fail_ex+0x40c/0x560 [ 464.896857][T15606] _copy_from_iter+0x1d3/0x1660 [ 464.896884][T15606] ? kmem_cache_alloc_node_noprof+0x1e1/0x610 [ 464.896914][T15606] ? rcu_is_watching+0x15/0xb0 [ 464.896939][T15606] ? trace_kmem_cache_alloc+0x29/0xe0 [ 464.896969][T15606] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 464.896997][T15606] ? __pfx__copy_from_iter+0x10/0x10 [ 464.897033][T15606] ? __alloc_skb+0x276/0x7a0 [ 464.897051][T15606] ? __alloc_skb+0x276/0x7a0 [ 464.897073][T15606] ? netlink_sendmsg+0x650/0xb40 [ 464.897095][T15606] ? skb_put+0x112/0x210 [ 464.897116][T15606] netlink_sendmsg+0x6c0/0xb40 [ 464.897146][T15606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.897172][T15606] ? aa_sock_msg_perm+0xf1/0x1b0 [ 464.897200][T15606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.897221][T15606] sock_sendmsg_nosec+0x13a/0x180 [ 464.897249][T15606] ____sys_sendmsg+0x54e/0x850 [ 464.897276][T15606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.897306][T15606] ? import_iovec+0x73/0xa0 [ 464.897329][T15606] ___sys_sendmsg+0x2a5/0x360 [ 464.897349][T15606] ? __lock_acquire+0x683/0x2cf0 [ 464.897373][T15606] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.897427][T15606] ? __fget_files+0x2a/0x420 [ 464.897445][T15606] ? __fget_files+0x3a2/0x420 [ 464.897473][T15606] __x64_sys_sendmsg+0x1b1/0x290 [ 464.897493][T15606] ? perf_trace_preemptirq_template+0x26f/0x350 [ 464.897524][T15606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.897562][T15606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.897583][T15606] do_syscall_64+0x174/0x580 [ 464.897603][T15606] ? clear_bhb_loop+0x40/0x90 [ 464.897627][T15606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.897645][T15606] RIP: 0033:0x7f026c39ce59 [ 464.897664][T15606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.897680][T15606] RSP: 002b:00007f026d22b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.897701][T15606] RAX: ffffffffffffffda RBX: 00007f026c615fa0 RCX: 00007f026c39ce59 [ 464.897715][T15606] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000005 [ 464.897727][T15606] RBP: 00007f026d22b090 R08: 0000000000000000 R09: 0000000000000000 [ 464.897739][T15606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.897750][T15606] R13: 00007f026c616038 R14: 00007f026c615fa0 R15: 00007ffc9513bb58 [ 464.897780][T15606] [ 465.252822][T15611] netlink: 'syz.7.2105': attribute type 46 has an invalid length. [ 465.315096][T15616] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2111'. [ 465.361676][T15600] netlink: 'syz.7.2105': attribute type 1 has an invalid length. [ 465.373387][T15600] netlink: 'syz.7.2105': attribute type 4 has an invalid length. [ 465.634887][T15622] __nla_validate_parse: 1 callbacks suppressed [ 465.634921][T15622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2114'. [ 465.658416][T15628] FAULT_INJECTION: forcing a failure. [ 465.658416][T15628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.673436][T15628] CPU: 1 UID: 0 PID: 15628 Comm: syz.9.2115 Not tainted syzkaller #0 PREEMPT(full) [ 465.673461][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.673471][T15628] Call Trace: [ 465.673478][T15628] [ 465.673485][T15628] dump_stack_lvl+0xe8/0x150 [ 465.673512][T15628] should_fail_ex+0x40c/0x560 [ 465.673543][T15628] _copy_to_user+0x31/0xb0 [ 465.673565][T15628] bpf_test_finish+0x52e/0x690 [ 465.673595][T15628] ? __pfx_bpf_test_finish+0x10/0x10 [ 465.673629][T15628] bpf_prog_test_run_skb+0x11fe/0x2230 [ 465.673669][T15628] ? __fget_files+0x3a2/0x420 [ 465.673687][T15628] ? __fget_files+0x2a/0x420 [ 465.673709][T15628] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 465.673730][T15628] bpf_prog_test_run+0x2c5/0x340 [ 465.673754][T15628] __sys_bpf+0xa22/0xd90 [ 465.673788][T15628] ? __pfx___sys_bpf+0x10/0x10 [ 465.673816][T15628] ? __fget_files+0x2a/0x420 [ 465.673850][T15628] ? ksys_write+0x242/0x270 [ 465.673874][T15628] ? __pfx_ksys_write+0x10/0x10 [ 465.673900][T15628] __x64_sys_bpf+0xba/0xd0 [ 465.673926][T15628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.673947][T15628] do_syscall_64+0x174/0x580 [ 465.673963][T15628] ? trace_irq_disable+0x3b/0x140 [ 465.673988][T15628] ? clear_bhb_loop+0x40/0x90 [ 465.674013][T15628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.674029][T15628] RIP: 0033:0x7f6a8f19ce59 [ 465.674044][T15628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.674059][T15628] RSP: 002b:00007f6a90013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 465.674078][T15628] RAX: ffffffffffffffda RBX: 00007f6a8f415fa0 RCX: 00007f6a8f19ce59 [ 465.674090][T15628] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 465.674102][T15628] RBP: 00007f6a90013090 R08: 0000000000000000 R09: 0000000000000000 [ 465.674113][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.674124][T15628] R13: 00007f6a8f416038 R14: 00007f6a8f415fa0 R15: 00007ffcf65d6858 [ 465.674153][T15628] [ 466.104476][T15640] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2123'. [ 466.495229][T15657] netlink: 'syz.7.2129': attribute type 11 has an invalid length. [ 466.636225][T15663] FAULT_INJECTION: forcing a failure. [ 466.636225][T15663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.681619][T15663] CPU: 0 UID: 0 PID: 15663 Comm: syz.2.2130 Not tainted syzkaller #0 PREEMPT(full) [ 466.681647][T15663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 466.681658][T15663] Call Trace: [ 466.681666][T15663] [ 466.681674][T15663] dump_stack_lvl+0xe8/0x150 [ 466.681704][T15663] should_fail_ex+0x40c/0x560 [ 466.681737][T15663] _copy_from_user+0x2d/0xb0 [ 466.681761][T15663] memdup_user+0x5e/0xd0 [ 466.681808][T15663] strndup_user+0x68/0xd0 [ 466.681829][T15663] perf_uprobe_init+0x61/0x1a0 [ 466.681858][T15663] perf_uprobe_event_init+0xe6/0x180 [ 466.681885][T15663] perf_try_init_event+0x172/0x830 [ 466.681920][T15663] perf_event_alloc+0x1452/0x2e30 [ 466.681949][T15663] ? perf_event_alloc+0x10c4/0x2e30 [ 466.681998][T15663] ? __pfx_perf_event_alloc+0x10/0x10 [ 466.682022][T15663] ? find_lively_task_by_vpid+0x19/0x290 [ 466.682053][T15663] ? find_lively_task_by_vpid+0x19/0x290 [ 466.682078][T15663] ? find_lively_task_by_vpid+0x19/0x290 [ 466.682100][T15663] ? find_lively_task_by_vpid+0x19/0x290 [ 466.682130][T15663] __se_sys_perf_event_open+0x79e/0x1d40 [ 466.682172][T15663] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 466.682267][T15663] ? __pfx___se_sys_perf_event_open+0x10/0x10 [ 466.682316][T15663] ? __pfx_ksys_write+0x10/0x10 [ 466.682349][T15663] ? __x64_sys_perf_event_open+0x20/0xc0 [ 466.682375][T15663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.682397][T15663] do_syscall_64+0x174/0x580 [ 466.682415][T15663] ? trace_irq_disable+0x3b/0x140 [ 466.682436][T15663] ? clear_bhb_loop+0x40/0x90 [ 466.682461][T15663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.682480][T15663] RIP: 0033:0x7f0d9279ce59 [ 466.682499][T15663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.682516][T15663] RSP: 002b:00007f0d9360c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 466.682536][T15663] RAX: ffffffffffffffda RBX: 00007f0d92a15fa0 RCX: 00007f0d9279ce59 [ 466.682549][T15663] RDX: 0000000000000000 RSI: 0000000000000196 RDI: 0000200000000000 [ 466.682561][T15663] RBP: 00007f0d9360c090 R08: 0000000000000000 R09: 0000000000000000 [ 466.682572][T15663] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 466.682584][T15663] R13: 00007f0d92a16038 R14: 00007f0d92a15fa0 R15: 00007ffe8d415558 [ 466.682621][T15663] [ 466.924294][T15656] netlink: 'syz.0.2127': attribute type 46 has an invalid length. [ 467.507296][T15651] netlink: 'syz.0.2127': attribute type 1 has an invalid length. [ 467.515090][T15651] netlink: 'syz.0.2127': attribute type 4 has an invalid length. [ 467.523009][T15651] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2127'. [ 467.861117][T15697] netlink: 'syz.9.2136': attribute type 1 has an invalid length. [ 467.922998][T15697] netlink: 'syz.9.2136': attribute type 2 has an invalid length. [ 467.951037][T15697] netlink: 16146 bytes leftover after parsing attributes in process `syz.9.2136'. [ 468.200989][T15712] netlink: 'syz.3.2145': attribute type 9 has an invalid length. [ 468.209675][T15703] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2142'. [ 468.268721][T15712] netlink: 'syz.3.2145': attribute type 13 has an invalid length. [ 468.296782][T15712] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2145'. [ 468.775866][T15686] lo speed is unknown, defaulting to 1000 [ 469.387622][T15746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2156'. [ 469.660697][T15755] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2160'. [ 470.136934][T15772] netlink: 'syz.2.2168': attribute type 61 has an invalid length. [ 470.163910][T15772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2168'. [ 470.374288][T15780] netlink: 'syz.2.2168': attribute type 2 has an invalid length. [ 470.387383][T15780] netlink: 'syz.2.2168': attribute type 2 has an invalid length. [ 471.153321][T15819] netlink: 408 bytes leftover after parsing attributes in process `syz.9.2188'. [ 471.266997][T12541] cgroup: fork rejected by pids controller in /syz0 [ 472.233182][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.246312][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.258227][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.267930][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.275941][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.583454][T15857] netlink: 'syz.3.2200': attribute type 1 has an invalid length. [ 472.648691][T15857] netlink: 'syz.3.2200': attribute type 2 has an invalid length. [ 472.665610][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2204'. [ 472.691876][T15857] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.2200'. [ 473.443569][T15846] lo speed is unknown, defaulting to 1000 [ 474.161396][T15887] netlink: 'syz.2.2207': attribute type 1 has an invalid length. [ 474.289793][ T5636] Bluetooth: hci1: command tx timeout [ 474.334144][T15848] lo speed is unknown, defaulting to 1000 [ 475.159653][T15907] netlink: 'syz.2.2213': attribute type 2 has an invalid length. [ 475.177400][T15907] netlink: 8656 bytes leftover after parsing attributes in process `syz.2.2213'. [ 475.335810][T15913] FAULT_INJECTION: forcing a failure. [ 475.335810][T15913] name failslab, interval 1, probability 0, space 0, times 0 [ 475.385679][T15913] CPU: 1 UID: 0 PID: 15913 Comm: syz.9.2215 Not tainted syzkaller #0 PREEMPT(full) [ 475.385705][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.385716][T15913] Call Trace: [ 475.385724][T15913] [ 475.385733][T15913] dump_stack_lvl+0xe8/0x150 [ 475.385763][T15913] should_fail_ex+0x40c/0x560 [ 475.385798][T15913] should_failslab+0xa8/0x100 [ 475.385825][T15913] __kmalloc_cache_node_noprof+0xaa/0x630 [ 475.385857][T15913] ? ktime_get+0x45/0x220 [ 475.385886][T15913] ? __get_vm_area_node+0x136/0x300 [ 475.385909][T15913] ? __get_vm_area_node+0x136/0x300 [ 475.385936][T15913] ? perf_trace_lock+0xff/0x410 [ 475.385963][T15913] __get_vm_area_node+0x136/0x300 [ 475.385996][T15913] __vmalloc_node_range_noprof+0x358/0x1730 [ 475.386025][T15913] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 475.386049][T15913] ? irqentry_exit+0x8b7/0x8f0 [ 475.386099][T15913] ? irqentry_exit+0x218/0x8f0 [ 475.386137][T15913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 475.386182][T15913] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 475.386200][T15913] __vmalloc_noprof+0xd2/0x120 [ 475.386227][T15913] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 475.386251][T15913] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 475.386270][T15913] ? bpf_prog_alloc+0x2a/0x1a0 [ 475.386293][T15913] bpf_prog_alloc+0x3c/0x1a0 [ 475.386316][T15913] bpf_prog_load+0x7f8/0x1c00 [ 475.386353][T15913] ? __pfx_bpf_prog_load+0x10/0x10 [ 475.386407][T15913] __sys_bpf+0xd0d/0xd90 [ 475.386437][T15913] ? __pfx___sys_bpf+0x10/0x10 [ 475.386453][T15913] ? lock_acquire+0x106/0x350 [ 475.386474][T15913] ? ktime_get+0x45/0x220 [ 475.386508][T15913] ? ktime_get+0x45/0x220 [ 475.386560][T15913] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 475.386607][T15913] __x64_sys_bpf+0xba/0xd0 [ 475.386642][T15913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.386664][T15913] do_syscall_64+0x174/0x580 [ 475.386684][T15913] ? clear_bhb_loop+0x40/0x90 [ 475.386709][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.386728][T15913] RIP: 0033:0x7f6a8f19ce59 [ 475.386746][T15913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.386761][T15913] RSP: 002b:00007f6a90013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.386780][T15913] RAX: ffffffffffffffda RBX: 00007f6a8f415fa0 RCX: 00007f6a8f19ce59 [ 475.386794][T15913] RDX: 0000000000000094 RSI: 00002000000027c0 RDI: 0000000000000005 [ 475.386806][T15913] RBP: 00007f6a90013090 R08: 0000000000000000 R09: 0000000000000000 [ 475.386817][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.386828][T15913] R13: 00007f6a8f416038 R14: 00007f6a8f415fa0 R15: 00007ffcf65d6858 [ 475.386864][T15913] [ 475.656828][T15913] syz.9.2215: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 475.673794][T15913] CPU: 1 UID: 0 PID: 15913 Comm: syz.9.2215 Not tainted syzkaller #0 PREEMPT(full) [ 475.673820][T15913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.673831][T15913] Call Trace: [ 475.673838][T15913] [ 475.673846][T15913] dump_stack_lvl+0xe8/0x150 [ 475.673875][T15913] warn_alloc+0x24c/0x270 [ 475.673906][T15913] ? __kasan_kmalloc+0x22/0xb0 [ 475.673930][T15913] ? __pfx_warn_alloc+0x10/0x10 [ 475.673955][T15913] ? ktime_get+0x45/0x220 [ 475.673997][T15913] ? __get_vm_area_node+0x2af/0x300 [ 475.674033][T15913] __vmalloc_node_range_noprof+0x37d/0x1730 [ 475.674065][T15913] ? irqentry_exit+0x8b7/0x8f0 [ 475.674111][T15913] ? irqentry_exit+0x218/0x8f0 [ 475.674149][T15913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 475.674194][T15913] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 475.674213][T15913] __vmalloc_noprof+0xd2/0x120 [ 475.674241][T15913] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 475.674264][T15913] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 475.674281][T15913] ? bpf_prog_alloc+0x2a/0x1a0 [ 475.674302][T15913] bpf_prog_alloc+0x3c/0x1a0 [ 475.674324][T15913] bpf_prog_load+0x7f8/0x1c00 [ 475.674360][T15913] ? __pfx_bpf_prog_load+0x10/0x10 [ 475.674413][T15913] __sys_bpf+0xd0d/0xd90 [ 475.674443][T15913] ? __pfx___sys_bpf+0x10/0x10 [ 475.674460][T15913] ? lock_acquire+0x106/0x350 [ 475.674482][T15913] ? ktime_get+0x45/0x220 [ 475.674515][T15913] ? ktime_get+0x45/0x220 [ 475.674566][T15913] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 475.674618][T15913] __x64_sys_bpf+0xba/0xd0 [ 475.674647][T15913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.674669][T15913] do_syscall_64+0x174/0x580 [ 475.674689][T15913] ? clear_bhb_loop+0x40/0x90 [ 475.674715][T15913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.674734][T15913] RIP: 0033:0x7f6a8f19ce59 [ 475.674753][T15913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.674769][T15913] RSP: 002b:00007f6a90013028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.674789][T15913] RAX: ffffffffffffffda RBX: 00007f6a8f415fa0 RCX: 00007f6a8f19ce59 [ 475.674802][T15913] RDX: 0000000000000094 RSI: 00002000000027c0 RDI: 0000000000000005 [ 475.674815][T15913] RBP: 00007f6a90013090 R08: 0000000000000000 R09: 0000000000000000 [ 475.674827][T15913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.674838][T15913] R13: 00007f6a8f416038 R14: 00007f6a8f415fa0 R15: 00007ffcf65d6858 [ 475.674875][T15913] [ 475.675051][T15913] Mem-Info: [ 475.930415][T15913] active_anon:21114 inactive_anon:0 isolated_anon:0 [ 475.930415][T15913] active_file:0 inactive_file:61635 isolated_file:0 [ 475.930415][T15913] unevictable:768 dirty:278 writeback:0 [ 475.930415][T15913] slab_reclaimable:6898 slab_unreclaimable:106732 [ 475.930415][T15913] mapped:29898 shmem:14464 pagetables:1869 [ 475.930415][T15913] sec_pagetables:0 bounce:0 [ 475.930415][T15913] kernel_misc_reclaimable:0 [ 475.930415][T15913] free:1284004 free_pcp:12918 free_cma:0 [ 475.984666][T15913] Node 0 active_anon:84188kB inactive_anon:0kB active_file:0kB inactive_file:246328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119584kB dirty:1112kB writeback:0kB shmem:56200kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13516kB pagetables:7328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 476.028942][T15913] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 476.065920][T15913] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.068407][T15918] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.2216'. [ 476.096475][T15913] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 476.111676][T15913] Node 0 DMA32 free:1184272kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:81288kB inactive_anon:0kB active_file:0kB inactive_file:246328kB unevictable:1536kB writepending:1112kB zspages:0kB present:3129332kB managed:2551448kB mlocked:0kB bounce:0kB free_pcp:50744kB local_pcp:28696kB free_cma:0kB [ 476.144971][T15913] lowmem_reserve[]: 0 0 0 0 0 [ 476.149982][T15913] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.179763][T15913] lowmem_reserve[]: 0 0 0 0 0 [ 476.184532][T15913] Node 1 Normal free:3940416kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 476.297481][T15913] lowmem_reserve[]: 0 0 0 0 0 [ 476.302277][T15913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 476.314950][T15913] Node 0 DMA32: 3408*4kB (UM) 854*8kB (UME) 458*16kB (UME) 84*32kB (UME) 289*64kB (UME) 188*128kB (UME) 50*256kB (UME) 25*512kB (UME) 7*1024kB (UME) 4*2048kB (UME) 262*4096kB (UM) = 1187152kB [ 476.333960][T15913] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 476.345483][T15913] Node 1 Normal: 0*4kB 2*8kB (UM) 5*16kB (UM) 5*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (UM) = 3940416kB [ 476.362884][T15913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.369707][ T5630] Bluetooth: hci1: command tx timeout [ 476.373341][T15913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 476.373360][T15913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 476.373373][T15913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 476.373385][T15913] 74115 total pagecache pages [ 476.373407][T15913] 0 pages in swap cache [ 476.373413][T15913] Free swap = 124996kB [ 476.373419][T15913] Total swap = 124996kB [ 476.373427][T15913] 2097051 pages RAM [ 476.373433][T15913] 0 pages HighMem/MovableOnly [ 476.373439][T15913] 427418 pages reserved [ 476.373445][T15913] 0 pages cma reserved [ 476.592368][T15848] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.626883][T15848] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.635176][T15848] bridge_slave_0: entered allmulticast mode [ 476.646225][T15848] bridge_slave_0: entered promiscuous mode [ 476.698610][T15848] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.712363][T15848] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.720306][T15848] bridge_slave_1: entered allmulticast mode [ 476.728441][T15848] bridge_slave_1: entered promiscuous mode [ 476.930884][T15848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.952741][T15848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.050788][T15848] team0: Port device team_slave_0 added [ 477.064843][T15848] team0: Port device team_slave_1 added [ 477.118068][T15848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.128749][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.170506][T15848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.194205][T15848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.208756][T15848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.237412][T15848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.290652][T15943] netlink: 3752 bytes leftover after parsing attributes in process `syz.9.2225'. [ 477.446033][T15948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2226'. [ 477.901267][T15848] hsr_slave_0: entered promiscuous mode [ 477.908175][T15848] hsr_slave_1: entered promiscuous mode [ 477.971593][ T5630] Bluetooth: hci6: command 0x0406 tx timeout [ 478.449395][ T5636] Bluetooth: hci1: command tx timeout [ 479.071572][T15990] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2237'. [ 479.113359][T15990] netlink: 'syz.2.2237': attribute type 61 has an invalid length. [ 479.121809][T15990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2237'. [ 479.216057][T15995] netlink: 'syz.2.2237': attribute type 2 has an invalid length. [ 479.224004][T15995] netlink: 'syz.2.2237': attribute type 2 has an invalid length. [ 479.645104][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2239'. [ 480.528732][ T5636] Bluetooth: hci1: command tx timeout [ 481.276336][T16005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2240'. [ 481.313283][T15848] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.590177][T15848] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.789440][T16015] netlink: 'syz.2.2244': attribute type 13 has an invalid length. [ 481.797719][T16015] netlink: 14532 bytes leftover after parsing attributes in process `syz.2.2244'. [ 481.818187][T16015] netlink: 'syz.2.2244': attribute type 10 has an invalid length. [ 481.951371][T16015] team0 (unregistering): Port device team_slave_0 removed [ 481.976352][T16020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2246'. [ 482.040481][T16015] team0 (unregistering): Port device team_slave_1 removed [ 482.133049][T15848] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.240394][T16034] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2250'. [ 482.324498][T16036] netlink: 108 bytes leftover after parsing attributes in process `syz.7.2251'. [ 482.351336][T16036] netlink: 'syz.7.2251': attribute type 61 has an invalid length. [ 482.407108][T16036] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2251'. [ 482.467171][T16041] netlink: 'syz.7.2251': attribute type 2 has an invalid length. [ 482.478997][T16041] netlink: 'syz.7.2251': attribute type 2 has an invalid length. [ 482.744730][T15848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 482.785562][T15848] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.807791][T15848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 482.829857][T15848] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.847022][T15848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 482.883576][T15848] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.901419][T15848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 483.012249][T15848] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.231655][T15848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.298026][T15848] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.347159][ T3396] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.354392][ T3396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.420449][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.428000][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.443819][T16077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2263'. [ 483.579973][T15848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 483.626355][T15848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.629632][T16081] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2265'. [ 483.703779][T16081] netlink: 'syz.2.2265': attribute type 61 has an invalid length. [ 483.728061][T16081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2265'. [ 483.999545][T16083] netlink: 'syz.2.2265': attribute type 2 has an invalid length. [ 484.391976][T15848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.588831][T15848] veth0_vlan: entered promiscuous mode [ 484.710532][T15848] veth1_vlan: entered promiscuous mode [ 484.771386][T16109] FAULT_INJECTION: forcing a failure. [ 484.771386][T16109] name failslab, interval 1, probability 0, space 0, times 0 [ 484.784053][T16109] CPU: 1 UID: 0 PID: 16109 Comm: syz.7.2272 Not tainted syzkaller #0 PREEMPT(full) [ 484.784077][T16109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.784088][T16109] Call Trace: [ 484.784099][T16109] [ 484.784110][T16109] dump_stack_lvl+0xe8/0x150 [ 484.784157][T16109] should_fail_ex+0x40c/0x560 [ 484.784221][T16109] should_failslab+0xa8/0x100 [ 484.784263][T16109] __kmalloc_cache_noprof+0xa8/0x660 [ 484.784311][T16109] ? genl_start+0x1c9/0x6d0 [ 484.784341][T16109] ? genl_start+0x1c9/0x6d0 [ 484.784410][T16109] genl_start+0x1c9/0x6d0 [ 484.784490][T16109] __netlink_dump_start+0x442/0x7b0 [ 484.784557][T16109] genl_family_rcv_msg_dumpit+0x213/0x310 [ 484.784611][T16109] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 484.784682][T16109] ? __pfx_genl_start+0x10/0x10 [ 484.784709][T16109] ? __pfx_genl_dumpit+0x10/0x10 [ 484.784735][T16109] ? __pfx_genl_done+0x10/0x10 [ 484.784792][T16109] ? bpf_lsm_capable+0x9/0x20 [ 484.784815][T16109] ? security_capable+0x7e/0x2c0 [ 484.784980][T16109] genl_rcv_msg+0x5e1/0x7a0 [ 484.785057][T16109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.785092][T16109] ? __pfx_l2tp_nl_cmd_session_dump+0x10/0x10 [ 484.785272][T16109] netlink_rcv_skb+0x226/0x4a0 [ 484.785312][T16109] ? __pfx_genl_rcv_msg+0x10/0x10 [ 484.785359][T16109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 484.785476][T16109] ? down_read+0x2be/0x330 [ 484.785528][T16109] genl_rcv+0x28/0x40 [ 484.785560][T16109] netlink_unicast+0x7bb/0x940 [ 484.785644][T16109] netlink_sendmsg+0x813/0xb40 [ 484.785724][T16109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.785778][T16109] ? aa_sock_msg_perm+0xf1/0x1b0 [ 484.785841][T16109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.785868][T16109] sock_sendmsg_nosec+0x13a/0x180 [ 484.785920][T16109] ____sys_sendmsg+0x54e/0x850 [ 484.785980][T16109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.786060][T16109] ? import_iovec+0x73/0xa0 [ 484.786111][T16109] ___sys_sendmsg+0x2a5/0x360 [ 484.786138][T16109] ? __lock_acquire+0x683/0x2cf0 [ 484.786191][T16109] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.786401][T16109] ? __fget_files+0x2a/0x420 [ 484.786426][T16109] ? __fget_files+0x3a2/0x420 [ 484.786515][T16109] __x64_sys_sendmsg+0x1b1/0x290 [ 484.786562][T16109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.786690][T16109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.786724][T16109] do_syscall_64+0x174/0x580 [ 484.786746][T16109] ? trace_irq_disable+0x3b/0x140 [ 484.786773][T16109] ? clear_bhb_loop+0x40/0x90 [ 484.786818][T16109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.786842][T16109] RIP: 0033:0x7f7d67d9ce59 [ 484.786870][T16109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.786885][T16109] RSP: 002b:00007f7d68c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.786905][T16109] RAX: ffffffffffffffda RBX: 00007f7d68015fa0 RCX: 00007f7d67d9ce59 [ 484.786919][T16109] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 484.786930][T16109] RBP: 00007f7d68c46090 R08: 0000000000000000 R09: 0000000000000000 [ 484.786942][T16109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.786953][T16109] R13: 00007f7d68016038 R14: 00007f7d68015fa0 R15: 00007ffdaad19d28 [ 484.787050][T16109] [ 485.172792][T15848] veth0_macvtap: entered promiscuous mode [ 485.183680][T15848] veth1_macvtap: entered promiscuous mode [ 485.205301][T15848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.217920][T15848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.344493][ T3396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.401874][ T3396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.526044][ T3396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.596609][ T3396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.699687][ T6351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.709459][ T6351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.725037][T16123] netlink: 108 bytes leftover after parsing attributes in process `syz.9.2277'. [ 485.757159][T16123] validate_nla: 1 callbacks suppressed [ 485.757199][T16123] netlink: 'syz.9.2277': attribute type 61 has an invalid length. [ 485.773841][ T3325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.774323][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2277'. [ 485.799280][ T3325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.899462][T16128] netlink: 'syz.9.2277': attribute type 2 has an invalid length. [ 485.907369][T16128] netlink: 'syz.9.2277': attribute type 2 has an invalid length. [ 485.925223][T16129] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2278'. [ 489.197954][T16157] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2287'. [ 489.247807][T16164] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.2289'. [ 489.466406][T16166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2290'. [ 489.492923][T16169] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2291'. [ 489.523883][T16169] netlink: 'syz.2.2291': attribute type 61 has an invalid length. [ 489.531736][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2291'. [ 489.644471][T16169] netlink: 'syz.2.2291': attribute type 2 has an invalid length. [ 489.677999][T16169] netlink: 'syz.2.2291': attribute type 2 has an invalid length. [ 490.652344][T16195] FAULT_INJECTION: forcing a failure. [ 490.652344][T16195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.692106][T16195] CPU: 0 UID: 0 PID: 16195 Comm: syz.9.2298 Not tainted syzkaller #0 PREEMPT(full) [ 490.692133][T16195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.692144][T16195] Call Trace: [ 490.692152][T16195] [ 490.692159][T16195] dump_stack_lvl+0xe8/0x150 [ 490.692188][T16195] should_fail_ex+0x40c/0x560 [ 490.692220][T16195] _copy_from_user+0x2d/0xb0 [ 490.692241][T16195] ___sys_sendmsg+0x1c6/0x360 [ 490.692270][T16195] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.692315][T16195] ? lockdep_hardirqs_on+0x7a/0x110 [ 490.692361][T16195] ? __x64_sys_sendmsg+0x196/0x290 [ 490.692390][T16195] __x64_sys_sendmsg+0x1b1/0x290 [ 490.692410][T16195] ? perf_trace_preemptirq_template+0x26f/0x350 [ 490.692443][T16195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.692488][T16195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.692509][T16195] do_syscall_64+0x174/0x580 [ 490.692529][T16195] ? clear_bhb_loop+0x40/0x90 [ 490.692554][T16195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.692573][T16195] RIP: 0033:0x7f6a8f19ce59 [ 490.692591][T16195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.692607][T16195] RSP: 002b:00007f6a90013028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.692626][T16195] RAX: ffffffffffffffda RBX: 00007f6a8f415fa0 RCX: 00007f6a8f19ce59 [ 490.692639][T16195] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000007 [ 490.692650][T16195] RBP: 00007f6a90013090 R08: 0000000000000000 R09: 0000000000000000 [ 490.692661][T16195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.692672][T16195] R13: 00007f6a8f416038 R14: 00007f6a8f415fa0 R15: 00007ffcf65d6858 [ 490.692706][T16195] [ 490.948318][T16201] FAULT_INJECTION: forcing a failure. [ 490.948318][T16201] name failslab, interval 1, probability 0, space 0, times 0 [ 490.960982][T16201] CPU: 1 UID: 0 PID: 16201 Comm: syz.7.2301 Not tainted syzkaller #0 PREEMPT(full) [ 490.961008][T16201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.961019][T16201] Call Trace: [ 490.961030][T16201] [ 490.961041][T16201] dump_stack_lvl+0xe8/0x150 [ 490.961086][T16201] should_fail_ex+0x40c/0x560 [ 490.961151][T16201] should_failslab+0xa8/0x100 [ 490.961192][T16201] __kmalloc_noprof+0xfe/0x720 [ 490.961240][T16201] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 490.961272][T16201] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 490.961345][T16201] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 490.961421][T16201] genl_family_rcv_msg_doit+0xda/0x340 [ 490.961490][T16201] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 490.961546][T16201] ? __pfx_genl_get_cmd+0x10/0x10 [ 490.961583][T16201] ? __pfx_nbd_genl_status+0x10/0x10 [ 490.961744][T16201] ? __pfx_trace_call_bpf+0x10/0x10 [ 490.961811][T16201] genl_rcv_msg+0x614/0x7a0 [ 490.961883][T16201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.961918][T16201] ? __pfx_nbd_genl_status+0x10/0x10 [ 490.962039][T16201] netlink_rcv_skb+0x226/0x4a0 [ 490.962079][T16201] ? __pfx_genl_rcv_msg+0x10/0x10 [ 490.962126][T16201] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 490.962237][T16201] ? down_read+0x2be/0x330 [ 490.962290][T16201] genl_rcv+0x28/0x40 [ 490.962322][T16201] netlink_unicast+0x7bb/0x940 [ 490.962410][T16201] netlink_sendmsg+0x813/0xb40 [ 490.962489][T16201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.962544][T16201] ? aa_sock_msg_perm+0xf1/0x1b0 [ 490.962613][T16201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.962641][T16201] sock_sendmsg_nosec+0x13a/0x180 [ 490.962693][T16201] ____sys_sendmsg+0x54e/0x850 [ 490.962756][T16201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.962837][T16201] ? import_iovec+0x73/0xa0 [ 490.962888][T16201] ___sys_sendmsg+0x2a5/0x360 [ 490.962917][T16201] ? __lock_acquire+0x683/0x2cf0 [ 490.962969][T16201] ? __pfx____sys_sendmsg+0x10/0x10 [ 490.963171][T16201] ? __fget_files+0x2a/0x420 [ 490.963196][T16201] ? __fget_files+0x3a2/0x420 [ 490.963273][T16201] __x64_sys_sendmsg+0x1b1/0x290 [ 490.963321][T16201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 490.963441][T16201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.963475][T16201] do_syscall_64+0x174/0x580 [ 490.963509][T16201] ? clear_bhb_loop+0x40/0x90 [ 490.963555][T16201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.963585][T16201] RIP: 0033:0x7f7d67d9ce59 [ 490.963613][T16201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.963628][T16201] RSP: 002b:00007f7d68c46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.963648][T16201] RAX: ffffffffffffffda RBX: 00007f7d68015fa0 RCX: 00007f7d67d9ce59 [ 490.963661][T16201] RDX: 0000000000040070 RSI: 0000200000000100 RDI: 0000000000000008 [ 490.963673][T16201] RBP: 00007f7d68c46090 R08: 0000000000000000 R09: 0000000000000000 [ 490.963685][T16201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.963696][T16201] R13: 00007f7d68016038 R14: 00007f7d68015fa0 R15: 00007ffdaad19d28 [ 490.963798][T16201] [ 491.252108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.460767][T16208] netlink: 'syz.9.2302': attribute type 21 has an invalid length. [ 491.506084][T16208] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.844819][T16218] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2305'. [ 491.873059][T16221] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2306'. [ 491.884267][T16218] netlink: 'syz.3.2305': attribute type 61 has an invalid length. [ 491.893268][T16221] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2306'. [ 491.902638][T16218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2305'. [ 491.912380][T16221] netlink: 'syz.2.2306': attribute type 6 has an invalid length. [ 491.932275][T16221] netlink: 'syz.2.2306': attribute type 5 has an invalid length. [ 491.975113][T16221] netlink: 43 bytes leftover after parsing attributes in process `syz.2.2306'. [ 492.048851][T16224] netlink: 'syz.3.2305': attribute type 2 has an invalid length. [ 492.056625][T16224] netlink: 'syz.3.2305': attribute type 2 has an invalid length. [ 494.382298][T16275] netlink: 'syz.9.2321': attribute type 9 has an invalid length. [ 494.718257][T16294] netlink: 'syz.2.2330': attribute type 10 has an invalid length. [ 494.726891][T16294] __nla_validate_parse: 7 callbacks suppressed [ 494.726909][T16294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2330'. [ 495.695221][T16299] netlink: zone id is out of range [ 495.700523][T16299] netlink: zone id is out of range [ 495.705647][T16299] netlink: zone id is out of range [ 495.710770][T16299] netlink: zone id is out of range [ 495.715901][T16299] netlink: zone id is out of range [ 495.721020][T16299] netlink: zone id is out of range [ 495.726141][T16299] netlink: zone id is out of range [ 495.731258][T16299] netlink: zone id is out of range [ 495.736404][T16299] netlink: zone id is out of range [ 495.965833][T16303] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2333'. [ 495.976788][T16303] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2333'. [ 496.786233][T16306] netlink: 'syz.3.2334': attribute type 2 has an invalid length. [ 496.808761][T16306] netlink: 'syz.3.2334': attribute type 2 has an invalid length. [ 497.367808][ T5636] Bluetooth: hci3: ACL packet for unknown connection handle 3840 [ 497.442891][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2342'. [ 497.507232][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 497.574219][T16333] netlink: 'syz.7.2345': attribute type 10 has an invalid length. [ 497.582317][T16333] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2345'. [ 498.186149][T16348] netlink: 'syz.9.2350': attribute type 17 has an invalid length. [ 498.424975][T16361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2356'. [ 498.613354][T16348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.766805][T16348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.810748][T16348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.820951][T16348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.836257][T16348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.846623][T16348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.875821][T16348] veth1_vlan: left promiscuous mode [ 498.882704][T16348] veth0_vlan: left promiscuous mode [ 498.889406][T16348] veth0_vlan: entered promiscuous mode [ 498.896689][T16348] veth1_vlan: entered promiscuous mode [ 498.912691][T16348] veth1_macvtap: left promiscuous mode [ 498.923008][T16348] veth0_macvtap: left promiscuous mode [ 498.940394][T16348] veth0_macvtap: entered promiscuous mode [ 498.952165][T16348] veth1_macvtap: entered promiscuous mode [ 498.987661][T16348] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.999803][T16348] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.012523][T16348] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.036943][T16348] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.071016][ T5945] lo speed is unknown, defaulting to 1000 [ 499.078411][ T5945] syz2: Port: 1 Link ACTIVE [ 499.518366][ T212] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.527181][ T212] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.541385][ T212] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.550170][ T212] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.472191][T16400] netlink: 'syz.7.2368': attribute type 46 has an invalid length. [ 500.846088][T16405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 501.314048][T16411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.516079][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.527822][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.667597][T16417] netlink: 'syz.2.2376': attribute type 10 has an invalid length. [ 502.461139][T16437] netlink: zone id is out of range [ 502.503145][T16432] netlink: 'syz.7.2379': attribute type 4 has an invalid length. [ 502.555497][T16432] netlink: 'syz.7.2379': attribute type 17 has an invalid length. [ 502.680921][T16437] netlink: zone id is out of range [ 502.686109][T16437] netlink: zone id is out of range [ 502.691229][T16437] netlink: zone id is out of range [ 502.723408][T16432] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2379'. [ 502.795180][T16445] netlink: 'syz.0.2382': attribute type 7 has an invalid length. [ 502.818778][T16445] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2382'. [ 502.842981][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2384'. [ 502.868316][T16447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2384'. [ 503.022116][T16454] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2386'. [ 503.242814][T16464] openvswitch: netlink: Message has 4 unknown bytes. [ 503.253609][T16464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.264407][T16464] FAULT_INJECTION: forcing a failure. [ 503.264407][T16464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.278093][T16464] CPU: 0 UID: 0 PID: 16464 Comm: syz.2.2391 Not tainted syzkaller #0 PREEMPT(full) [ 503.278117][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 503.278127][T16464] Call Trace: [ 503.278135][T16464] [ 503.278142][T16464] dump_stack_lvl+0xe8/0x150 [ 503.278170][T16464] should_fail_ex+0x40c/0x560 [ 503.278200][T16464] _copy_from_user+0x2d/0xb0 [ 503.278222][T16464] kstrtouint_from_user+0xd6/0x180 [ 503.278253][T16464] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 503.278296][T16464] proc_fail_nth_write+0x8e/0x210 [ 503.278365][T16464] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 503.278394][T16464] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 503.278414][T16464] vfs_write+0x296/0xba0 [ 503.278444][T16464] ? __pfx_vfs_write+0x10/0x10 [ 503.278468][T16464] ? __fget_files+0x2a/0x420 [ 503.278491][T16464] ? __fget_files+0x3a2/0x420 [ 503.278509][T16464] ? __fget_files+0x2a/0x420 [ 503.278535][T16464] ksys_write+0x150/0x270 [ 503.278560][T16464] ? __pfx_ksys_write+0x10/0x10 [ 503.278591][T16464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.278611][T16464] do_syscall_64+0x174/0x580 [ 503.278628][T16464] ? trace_irq_disable+0x3b/0x140 [ 503.278650][T16464] ? clear_bhb_loop+0x40/0x90 [ 503.278671][T16464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.278696][T16464] RIP: 0033:0x7f0d9275d68e [ 503.278713][T16464] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 503.278728][T16464] RSP: 002b:00007f0d9360bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 503.278746][T16464] RAX: ffffffffffffffda RBX: 00007f0d9360c6c0 RCX: 00007f0d9275d68e [ 503.278760][T16464] RDX: 0000000000000001 RSI: 00007f0d9360c0a0 RDI: 0000000000000004 [ 503.278771][T16464] RBP: 00007f0d9360c090 R08: 0000000000000000 R09: 0000000000000000 [ 503.278782][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 503.278793][T16464] R13: 00007f0d92a16038 R14: 00007f0d92a15fa0 R15: 00007ffe8d415558 [ 503.278824][T16464] [ 506.386540][T16501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 508.879044][T16471] lo speed is unknown, defaulting to 1000 [ 509.805203][T16516] netlink: 71 bytes leftover after parsing attributes in process `syz.0.2407'. [ 511.643943][T16530] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2411'. [ 511.910171][ T7990] cgroup: fork rejected by pids controller in /syz7 [ 512.360773][T16538] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2414'. [ 512.418795][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2414'. [ 512.954446][T16552] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2419'. [ 513.029805][T16552] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2419'. [ 513.088074][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 513.101661][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 513.112900][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 513.122412][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 513.133828][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 513.293437][T16561] netlink: 'syz.3.2422': attribute type 21 has an invalid length. [ 513.328321][T16561] netlink: 'syz.3.2422': attribute type 22 has an invalid length. [ 513.345885][T16561] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.2422'. [ 513.356309][ T3325] bridge0: port 1(team0) entered disabled state [ 513.372831][ T3325] bridge_slave_1: left allmulticast mode [ 513.389097][ T3325] bridge_slave_1: left promiscuous mode [ 513.399348][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.103025][ T3325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.156618][ T3325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.168617][ T3325] bond0 (unregistering): Released all slaves [ 514.798211][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 514.812251][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 514.823330][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 514.838517][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.874006][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.925375][ T5291] 8021q: adding VLAN 0 to HW filter on device eth17 [ 515.250840][ T5636] Bluetooth: hci2: command tx timeout [ 516.017912][T16638] netlink: 'syz.2.2436': attribute type 21 has an invalid length. [ 516.039422][T16638] netlink: 'syz.2.2436': attribute type 22 has an invalid length. [ 516.056126][T16635] netlink: 'syz.0.2435': attribute type 12 has an invalid length. [ 516.066200][T16638] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2436'. [ 516.514601][ T5291] 8021q: adding VLAN 0 to HW filter on device eth19 [ 516.674532][T16626] lo speed is unknown, defaulting to 1000 [ 516.798416][T16555] lo speed is unknown, defaulting to 1000 [ 516.929238][ T5636] Bluetooth: hci3: command tx timeout [ 517.328733][ T5636] Bluetooth: hci2: command tx timeout [ 517.429526][ T3325] hsr_slave_0: left promiscuous mode [ 517.452602][ T3325] hsr_slave_1: left promiscuous mode [ 517.475409][ T3325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.522811][T16675] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.2446'. [ 517.523933][ T3325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.576737][ T3325] batman_adv: batadv0: Removing interface: dummy0 [ 517.949184][T16684] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2448'. [ 518.146374][ T3325] team_slave_1 (unregistering): left promiscuous mode [ 518.153428][ T3325] team_slave_1 (unregistering): left allmulticast mode [ 518.161674][ T3325] team0 (unregistering): Port device team_slave_1 removed [ 518.181764][ T3325] team_slave_0 (unregistering): left promiscuous mode [ 518.192837][ T3325] team_slave_0 (unregistering): left allmulticast mode [ 518.202575][ T3325] team0 (unregistering): Port device team_slave_0 removed [ 518.283694][ T3325] veth0 (unregistering): left promiscuous mode [ 518.290119][ T3325] veth0 (unregistering): left allmulticast mode [ 518.297335][ T3325] team0 (unregistering): Port device veth0 removed [ 518.348778][T16598] lo speed is unknown, defaulting to 1000 [ 518.369494][ T212] smc: removing ib device uyz0 [ 518.384757][ T5291] 8021q: adding VLAN 0 to HW filter on device eth18 [ 518.437255][ T212] smbdirect: ib_dev[uyz0] removed [ 518.715185][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2451'. [ 518.946790][T16698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2452'. [ 519.009653][ T5636] Bluetooth: hci3: command tx timeout [ 519.429626][ T5636] Bluetooth: hci2: command tx timeout [ 519.555469][T16712] netlink: 'syz.3.2457': attribute type 13 has an invalid length. [ 519.576412][T16712] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2457'. [ 520.244485][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2460'. [ 520.813866][ T5291] 8021q: adding VLAN 0 to HW filter on device eth20 [ 520.848932][T16555] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.880170][T16555] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.892648][T16555] bridge_slave_0: entered allmulticast mode [ 520.922692][T16555] bridge_slave_0: entered promiscuous mode [ 521.088769][ T5636] Bluetooth: hci3: command tx timeout [ 521.227702][T16555] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.234877][T16555] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.242089][T16555] bridge_slave_1: entered allmulticast mode [ 521.275122][T16775] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 521.349530][T16555] bridge_slave_1: entered promiscuous mode [ 521.489023][ T5636] Bluetooth: hci2: command tx timeout [ 521.600846][T16776] netlink: 'syz.0.2469': attribute type 13 has an invalid length. [ 521.608792][T16776] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.2469'. [ 521.687141][T16555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.907013][T16555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.279946][T16598] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.312047][T16598] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.327853][T16598] bridge_slave_0: entered allmulticast mode [ 522.358149][T16598] bridge_slave_0: entered promiscuous mode [ 522.384558][T16598] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.411639][T16598] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.445239][T16598] bridge_slave_1: entered allmulticast mode [ 522.464147][T16598] bridge_slave_1: entered promiscuous mode [ 522.507615][T16555] team0: Port device team_slave_0 added [ 522.516818][T16555] team0: Port device team_slave_1 added [ 522.671189][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'. [ 522.681830][T16598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.739085][T16598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.767000][T16555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.774639][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.834648][T16555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.866651][T16555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.874845][T16555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 522.901097][T16555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.076208][T16598] team0: Port device team_slave_0 added [ 523.113080][T16598] team0: Port device team_slave_1 added [ 523.168900][ T5636] Bluetooth: hci3: command tx timeout [ 523.239538][ T77] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.280429][T16555] hsr_slave_0: entered promiscuous mode [ 523.286795][T16555] hsr_slave_1: entered promiscuous mode [ 523.293412][T16555] debugfs: 'hsr0' already exists in 'hsr' [ 523.299226][T16555] Cannot create hsr debugfs directory [ 523.304867][T16823] netlink: 'syz.3.2480': attribute type 13 has an invalid length. [ 523.315236][T16823] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.2480'. [ 523.361723][T16598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.380625][T16598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.460323][T16598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.512747][T16598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.520857][T16598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.546759][T16598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.592759][ T77] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.627349][T16831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2483'. [ 523.701460][T16598] hsr_slave_0: entered promiscuous mode [ 523.714543][T16598] hsr_slave_1: entered promiscuous mode [ 523.721665][T16598] debugfs: 'hsr0' already exists in 'hsr' [ 523.727466][T16598] Cannot create hsr debugfs directory [ 523.818265][T16835] netlink: 'syz.3.2484': attribute type 21 has an invalid length. [ 523.839055][ T77] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.847736][T16830] option changes via remount are deprecated (pid=16829 comm=syz.2.2483) [ 523.851062][T16835] IPv6: Can't replace route, no match found [ 523.862471][T16837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2485'. [ 524.018080][ T77] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.021397][T16842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2487'. [ 524.885480][ T77] bridge0: port 3(team0) entered disabled state [ 524.939377][ T77] bridge_slave_1: left allmulticast mode [ 524.945066][ T77] bridge_slave_1: left promiscuous mode [ 524.951752][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.991766][ T77] bridge_slave_0: left allmulticast mode [ 524.997790][ T77] bridge_slave_0: left promiscuous mode [ 525.003621][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.225224][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.243887][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.254387][ T77] bond0 (unregistering): Released all slaves [ 525.608997][T16889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2495'. [ 526.719377][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2499'. [ 526.769398][T16920] FAULT_INJECTION: forcing a failure. [ 526.769398][T16920] name failslab, interval 1, probability 0, space 0, times 0 [ 526.784752][T16920] CPU: 1 UID: 0 PID: 16920 Comm: syz.3.2500 Not tainted syzkaller #0 PREEMPT(full) [ 526.784778][T16920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.784789][T16920] Call Trace: [ 526.784797][T16920] [ 526.784804][T16920] dump_stack_lvl+0xe8/0x150 [ 526.784832][T16920] should_fail_ex+0x40c/0x560 [ 526.784863][T16920] should_failslab+0xa8/0x100 [ 526.784887][T16920] __kmalloc_noprof+0xfe/0x720 [ 526.784917][T16920] ? tcf_idr_create+0x5d/0x6b0 [ 526.785059][T16920] ? tcf_idr_create+0x5d/0x6b0 [ 526.785091][T16920] tcf_idr_create+0x5d/0x6b0 [ 526.785124][T16920] ? __nla_parse+0x40/0x60 [ 526.785155][T16920] tcf_police_init+0x3fe/0x1550 [ 526.785197][T16920] ? __pfx_tcf_police_init+0x10/0x10 [ 526.785246][T16920] ? __kasan_kmalloc+0x93/0xb0 [ 526.785266][T16920] ? __kmalloc_cache_noprof+0x32d/0x660 [ 526.785292][T16920] ? tcf_action_init_1+0x202/0x740 [ 526.785321][T16920] ? __asan_memcpy+0x40/0x70 [ 526.785349][T16920] tcf_action_init_1+0x4ba/0x740 [ 526.785382][T16920] ? __pfx_tcf_action_init_1+0x10/0x10 [ 526.785408][T16920] ? _raw_read_unlock+0x28/0x50 [ 526.785463][T16920] ? tc_action_load_ops+0x247/0x540 [ 526.785511][T16920] ? __nla_parse+0x40/0x60 [ 526.785541][T16920] tcf_action_init+0x30e/0xb10 [ 526.785580][T16920] ? __pfx_tcf_action_init+0x10/0x10 [ 526.785637][T16920] ? __pfx___nla_validate_parse+0x10/0x10 [ 526.785666][T16920] ? __lock_acquire+0x683/0x2cf0 [ 526.785718][T16920] tc_ctl_action+0x43b/0xc70 [ 526.785758][T16920] ? __pfx_tc_ctl_action+0x10/0x10 [ 526.785791][T16920] ? rcu_is_watching+0x15/0xb0 [ 526.785857][T16920] ? __pfx_tc_ctl_action+0x10/0x10 [ 526.785883][T16920] rtnetlink_rcv_msg+0x7b9/0xc00 [ 526.785968][T16920] ? netlink_sendmsg+0x5d4/0xb40 [ 526.785993][T16920] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 526.786021][T16920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 526.786051][T16920] ? __lock_acquire+0x683/0x2cf0 [ 526.786083][T16920] netlink_rcv_skb+0x226/0x4a0 [ 526.786112][T16920] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 526.786142][T16920] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.786176][T16920] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.786197][T16920] ? netlink_deliver_tap+0x2e/0x1b0 [ 526.786224][T16920] netlink_unicast+0x7bb/0x940 [ 526.786254][T16920] netlink_sendmsg+0x813/0xb40 [ 526.786283][T16920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.786307][T16920] ? aa_sock_msg_perm+0xf1/0x1b0 [ 526.786332][T16920] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.786351][T16920] sock_sendmsg_nosec+0x13a/0x180 [ 526.786380][T16920] ____sys_sendmsg+0x54e/0x850 [ 526.786407][T16920] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.786438][T16920] ? import_iovec+0x73/0xa0 [ 526.786462][T16920] ___sys_sendmsg+0x2a5/0x360 [ 526.786481][T16920] ? __lock_acquire+0x683/0x2cf0 [ 526.786504][T16920] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.786562][T16920] ? __fget_files+0x2a/0x420 [ 526.786579][T16920] ? __fget_files+0x3a2/0x420 [ 526.786607][T16920] __x64_sys_sendmsg+0x1b1/0x290 [ 526.786631][T16920] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.786666][T16920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.786685][T16920] do_syscall_64+0x174/0x580 [ 526.786702][T16920] ? trace_irq_disable+0x3b/0x140 [ 526.786720][T16920] ? clear_bhb_loop+0x40/0x90 [ 526.786742][T16920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.786759][T16920] RIP: 0033:0x7fd49579ce59 [ 526.786775][T16920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.786789][T16920] RSP: 002b:00007fd4965bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.786808][T16920] RAX: ffffffffffffffda RBX: 00007fd495a15fa0 RCX: 00007fd49579ce59 [ 526.786820][T16920] RDX: 0000000000044004 RSI: 0000200000000280 RDI: 0000000000000003 [ 526.786833][T16920] RBP: 00007fd4965bd090 R08: 0000000000000000 R09: 0000000000000000 [ 526.786843][T16920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.786852][T16920] R13: 00007fd495a16038 R14: 00007fd495a15fa0 R15: 00007ffd132ed408 [ 526.786880][T16920] [ 527.482158][T16935] netlink: 420 bytes leftover after parsing attributes in process `syz.0.2501'. [ 527.721455][ T77] hsr_slave_0: left promiscuous mode [ 527.737765][ T77] hsr_slave_1: left promiscuous mode [ 527.752132][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.768016][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.796130][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.805255][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.833130][ T77] veth1_macvtap: left promiscuous mode [ 527.838831][ T77] veth0_macvtap: left promiscuous mode [ 527.844526][ T77] veth1_vlan: left promiscuous mode [ 527.852891][ T77] veth0_vlan: left promiscuous mode [ 528.082402][ T77] team_slave_1 (unregistering): left promiscuous mode [ 528.089193][ T77] team_slave_1 (unregistering): left allmulticast mode [ 528.097188][ T77] team0 (unregistering): Port device team_slave_1 removed [ 528.120700][ T77] team_slave_0 (unregistering): left promiscuous mode [ 528.127492][ T77] team_slave_0 (unregistering): left allmulticast mode [ 528.136846][ T77] team0 (unregistering): Port device team_slave_0 removed [ 528.376733][ T63] smbdirect: ib_dev[syz2] removed [ 528.392925][ T5291] 8021q: adding VLAN 0 to HW filter on device eth20 [ 528.460437][ T10] lo speed is unknown, defaulting to 1000 [ 528.477199][ T10] infiniband syz2: ib_query_port failed (-19) [ 528.679119][T16555] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 528.691863][T16555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 528.976328][T16555] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 529.092029][T16555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 529.136348][T16555] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 529.195632][T16967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2509'. [ 529.235304][T16555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 529.260888][T16555] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 529.397311][T16555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 530.486107][ T5291] 8021q: adding VLAN 0 to HW filter on device eth25 [ 530.599965][T17008] netlink: 'syz.2.2515': attribute type 21 has an invalid length. [ 530.611163][T17008] netlink: 'syz.2.2515': attribute type 22 has an invalid length. [ 530.644111][T17008] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2515'. [ 531.347234][T16555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.371908][T16598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 531.430123][T16598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.448371][T16598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 531.528574][T16598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.565445][T16598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 531.615166][T16598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.658561][T17046] netlink: 'syz.2.2523': attribute type 10 has an invalid length. [ 531.670968][T17046] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2523'. [ 531.684719][T16598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 531.712150][T16598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.811633][T16555] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.857277][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.864474][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.913078][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.920463][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.960109][T17067] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2526'. [ 532.185204][T16598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.259022][T16598] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.320556][ T212] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.329094][ T212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.405538][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.412739][ T3276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.509556][T16555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.836977][T16598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.010054][T16598] veth0_vlan: entered promiscuous mode [ 534.034435][T16598] veth1_vlan: entered promiscuous mode [ 534.059886][T16598] veth0_macvtap: entered promiscuous mode [ 534.082611][T16598] veth1_macvtap: entered promiscuous mode [ 534.158833][T16598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.227996][T16598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.280487][ T3276] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.299459][ T3276] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.329714][ T3276] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.350317][ T3276] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.406512][ T5291] 8021q: adding VLAN 0 to HW filter on device eth19 [ 534.548604][T16555] veth0_vlan: entered promiscuous mode [ 534.560848][T17162] netlink: zone id is out of range [ 534.565996][T17162] netlink: zone id is out of range [ 534.595233][T17162] netlink: zone id is out of range [ 534.617806][T17162] netlink: zone id is out of range [ 534.674573][T17162] netlink: zone id is out of range [ 534.708519][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 534.717444][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2541'. [ 534.726947][T17162] netlink: zone id is out of range [ 534.764736][ T3276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.776780][T17162] netlink: zone id is out of range [ 534.798445][T16555] veth1_vlan: entered promiscuous mode [ 534.805974][T17162] netlink: zone id is out of range [ 534.813331][ T3276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.837822][T17165] netlink: 'syz.0.2542': attribute type 1 has an invalid length. [ 534.848239][T17162] netlink: zone id is out of range [ 534.853401][T17162] netlink: zone id is out of range [ 535.163140][ T6351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.171327][ T6351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.350914][T16555] veth0_macvtap: entered promiscuous mode [ 535.387324][T16555] veth1_macvtap: entered promiscuous mode [ 535.488028][T16555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.538532][T16555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.600940][ T3313] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.626450][T17178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2544'. [ 535.639413][ T3313] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.677754][T17178] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2544'. [ 535.703384][T17178] netlink: 'syz.3.2544': attribute type 5 has an invalid length. [ 535.711288][ T3276] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.721129][ T3276] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.734023][T17178] netlink: 43 bytes leftover after parsing attributes in process `syz.3.2544'. [ 536.126028][T17198] sctp: [Deprecated]: syz.3.2547 (pid 17198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.126028][T17198] Use struct sctp_sack_info instead [ 536.163440][ T3325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.210510][ T3325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.250617][ T5291] 8021q: adding VLAN 0 to HW filter on device eth26 [ 536.363716][ T3325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.402089][ T3325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.489450][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2549'. [ 536.718826][T17208] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2550'. [ 537.173021][T17234] netlink: 'syz.7.2554': attribute type 3 has an invalid length. [ 537.180786][T17234] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2554'. [ 537.696384][T17254] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2560'. [ 537.716367][T17261] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2561'. [ 539.436265][T17310] netlink: 'syz.1.2572': attribute type 10 has an invalid length. [ 539.582760][T17310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 539.635849][T17310] team0: Port device netdevsim0 added [ 540.033959][T17316] __nla_validate_parse: 3 callbacks suppressed [ 540.033981][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 540.063542][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 541.099763][T17334] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2577'. [ 541.549984][T17340] netlink: 'syz.1.2579': attribute type 10 has an invalid length. [ 541.720777][T17349] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2580'. [ 541.731582][T17349] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2580'. [ 541.740553][T17349] netlink: 336 bytes leftover after parsing attributes in process `syz.7.2580'. [ 541.802566][T17340] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.811751][T17340] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.113981][T17354] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2581'. [ 542.125249][T17354] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2581'. [ 542.134625][T17354] netlink: 336 bytes leftover after parsing attributes in process `syz.7.2581'. [ 542.535751][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2587'. [ 545.553284][T17464] __nla_validate_parse: 8 callbacks suppressed [ 545.553318][T17464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2603'. [ 545.591442][T17464] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2603'. [ 545.642003][T17464] netlink: 336 bytes leftover after parsing attributes in process `syz.1.2603'. [ 545.741700][T17465] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2602'. [ 545.852647][T17465] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2602'. [ 545.923456][T17478] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2605'. [ 547.227007][T17528] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2615'. [ 547.258124][T17528] netlink: 'syz.7.2615': attribute type 12 has an invalid length. [ 547.277658][T17528] netlink: 5504 bytes leftover after parsing attributes in process `syz.7.2615'. [ 547.485912][T17534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2616'. [ 547.601637][T17540] net_ratelimit: 40 callbacks suppressed [ 547.601657][T17540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 547.629316][T17541] netlink: 'syz.1.2620': attribute type 2 has an invalid length. [ 547.772779][T17532] option changes via remount are deprecated (pid=17531 comm=syz.3.2618) [ 547.799901][T17545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2621'. [ 547.857852][T17545] netlink: 'syz.2.2621': attribute type 61 has an invalid length. [ 547.892992][T17549] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 548.071915][T17545] netlink: 'syz.2.2621': attribute type 2 has an invalid length. [ 548.082797][T17559] FAULT_INJECTION: forcing a failure. [ 548.082797][T17559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.099146][T17560] netlink: 'syz.3.2624': attribute type 29 has an invalid length. [ 548.108853][T17545] netlink: 'syz.2.2621': attribute type 2 has an invalid length. [ 548.133832][T17560] netlink: 'syz.3.2624': attribute type 29 has an invalid length. [ 548.195633][T17560] netlink: 'syz.3.2624': attribute type 29 has an invalid length. [ 548.208590][T17559] CPU: 1 UID: 0 PID: 17559 Comm: syz.0.2623 Not tainted syzkaller #0 PREEMPT(full) [ 548.208617][T17559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 548.208628][T17559] Call Trace: [ 548.208639][T17559] [ 548.208651][T17559] dump_stack_lvl+0xe8/0x150 [ 548.208747][T17559] should_fail_ex+0x40c/0x560 [ 548.208793][T17559] _copy_from_user+0x2d/0xb0 [ 548.208821][T17559] __copy_msghdr+0x390/0x590 [ 548.208866][T17559] ___sys_sendmsg+0x213/0x360 [ 548.208892][T17559] ? perf_trace_run_bpf_submit+0xee/0x170 [ 548.208936][T17559] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.209035][T17559] ? __fget_files+0x2a/0x420 [ 548.209136][T17559] ? __fget_files+0x2a/0x420 [ 548.209157][T17559] ? __fget_files+0x3a2/0x420 [ 548.209215][T17559] __x64_sys_sendmsg+0x1b1/0x290 [ 548.209252][T17559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.209344][T17559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.209373][T17559] do_syscall_64+0x174/0x580 [ 548.209393][T17559] ? trace_irq_disable+0x3b/0x140 [ 548.209417][T17559] ? clear_bhb_loop+0x40/0x90 [ 548.209453][T17559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.209475][T17559] RIP: 0033:0x7fb13319ce59 [ 548.209499][T17559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.209515][T17559] RSP: 002b:00007fb133fc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.209535][T17559] RAX: ffffffffffffffda RBX: 00007fb133415fa0 RCX: 00007fb13319ce59 [ 548.209549][T17559] RDX: 0000000000000c00 RSI: 00002000000003c0 RDI: 0000000000000004 [ 548.209561][T17559] RBP: 00007fb133fc4090 R08: 0000000000000000 R09: 0000000000000000 [ 548.209573][T17559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.209583][T17559] R13: 00007fb133416038 R14: 00007fb133415fa0 R15: 00007ffdafa7a8b8 [ 548.209652][T17559] [ 550.088200][ T5636] Bluetooth: hci3: Malformed Event: 0x2f [ 551.531553][T17656] __nla_validate_parse: 2 callbacks suppressed [ 551.533850][T17656] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2645'. [ 551.649405][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2649'. [ 551.658573][T17669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2649'. [ 551.989764][T17677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2651'. [ 551.999422][T17677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2651'. [ 552.019068][T17677] netlink: 336 bytes leftover after parsing attributes in process `syz.0.2651'. [ 552.171532][T17673] option changes via remount are deprecated (pid=17672 comm=syz.7.2650) [ 553.301539][T17727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2665'. [ 553.337606][T17727] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2665'. [ 553.359663][T17727] netlink: 336 bytes leftover after parsing attributes in process `syz.2.2665'. [ 553.532650][T17737] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2668'. [ 554.479415][T17764] netlink: 'syz.3.2672': attribute type 61 has an invalid length. [ 557.223062][T17868] netlink: 'syz.3.2688': attribute type 46 has an invalid length. [ 557.535219][T17886] __nla_validate_parse: 8 callbacks suppressed [ 557.535239][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2694'. [ 558.665402][T17923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2703'. [ 559.289617][T17953] netlink: 'syz.3.2711': attribute type 10 has an invalid length. [ 559.357819][T17953] 8021q: adding VLAN 0 to HW filter on device ªªªªªª [ 559.445143][T17953] netdevsim netdevsim3 ªªªªªª: entered promiscuous mode [ 559.477363][T17953] netdevsim netdevsim3 ªªªªªª: entered allmulticast mode [ 559.487637][T17953] team0: Port device ªªªªªª added [ 559.631762][T17963] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2714'. [ 559.688644][T17963] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2714'. [ 560.627557][T17990] netlink: 'syz.2.2720': attribute type 21 has an invalid length. [ 560.666602][T17990] netlink: 'syz.2.2720': attribute type 22 has an invalid length. [ 560.689104][T17990] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.2720'. [ 561.956919][T18029] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2727'. [ 562.041051][T18027] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2727'. [ 562.161595][T18032] netlink: 'syz.7.2726': attribute type 1 has an invalid length. [ 562.271653][T18040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2725'. [ 562.344194][T18031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2725'. [ 562.980247][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.986593][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.200018][T18068] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2734'. [ 563.617351][T18088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 563.703509][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2741'. [ 563.736130][T18092] netlink: 'syz.7.2741': attribute type 61 has an invalid length. [ 563.758287][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2741'. [ 563.758504][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2742'. [ 563.818425][T18094] openvswitch: netlink: Missing key (keys=40, expected=80) [ 563.850043][T18097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2743'. [ 563.881557][T18097] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2743'. [ 563.891162][T18099] FAULT_INJECTION: forcing a failure. [ 563.891162][T18099] name failslab, interval 1, probability 0, space 0, times 0 [ 563.912768][T18099] CPU: 1 UID: 0 PID: 18099 Comm: syz.1.2744 Not tainted syzkaller #0 PREEMPT(full) [ 563.912795][T18099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 563.912806][T18099] Call Trace: [ 563.912813][T18099] [ 563.912820][T18099] dump_stack_lvl+0xe8/0x150 [ 563.912849][T18099] should_fail_ex+0x40c/0x560 [ 563.912880][T18099] should_failslab+0xa8/0x100 [ 563.912903][T18099] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 563.912931][T18099] ? skb_clone+0x212/0x3a0 [ 563.912951][T18099] ? skb_clone+0x212/0x3a0 [ 563.912977][T18099] skb_clone+0x212/0x3a0 [ 563.913001][T18099] __netlink_deliver_tap+0x413/0x860 [ 563.913041][T18099] ? netlink_deliver_tap+0x2e/0x1b0 [ 563.913063][T18099] netlink_deliver_tap+0x19c/0x1b0 [ 563.913085][T18099] netlink_unicast+0x77f/0x940 [ 563.913115][T18099] netlink_sendmsg+0x813/0xb40 [ 563.913145][T18099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.913170][T18099] ? aa_sock_msg_perm+0xf1/0x1b0 [ 563.913199][T18099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 563.913218][T18099] sock_sendmsg_nosec+0x13a/0x180 [ 563.913248][T18099] sock_write_iter+0x2de/0x3e0 [ 563.913276][T18099] ? __pfx_sock_write_iter+0x10/0x10 [ 563.913307][T18099] ? bpf_lsm_file_permission+0x9/0x20 [ 563.913332][T18099] ? security_file_permission+0x75/0x260 [ 563.913443][T18099] vfs_write+0x612/0xba0 [ 563.913474][T18099] ? __pfx_vfs_write+0x10/0x10 [ 563.913505][T18099] ? __fget_files+0x2a/0x420 [ 563.913531][T18099] ksys_write+0x150/0x270 [ 563.913555][T18099] ? __pfx_ksys_write+0x10/0x10 [ 563.913584][T18099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.913604][T18099] do_syscall_64+0x174/0x580 [ 563.913623][T18099] ? clear_bhb_loop+0x40/0x90 [ 563.913645][T18099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.913663][T18099] RIP: 0033:0x7f64ec39ce59 [ 563.913680][T18099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.913697][T18099] RSP: 002b:00007f64ed184028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 563.913717][T18099] RAX: ffffffffffffffda RBX: 00007f64ec615fa0 RCX: 00007f64ec39ce59 [ 563.913730][T18099] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000007 [ 563.913741][T18099] RBP: 00007f64ed184090 R08: 0000000000000000 R09: 0000000000000000 [ 563.913751][T18099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.913762][T18099] R13: 00007f64ec616038 R14: 00007f64ec615fa0 R15: 00007ffd483ca2f8 [ 563.913792][T18099] [ 563.913945][T18099] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.2744'. [ 564.181512][T18092] netlink: 'syz.7.2741': attribute type 2 has an invalid length. [ 564.198902][T18092] netlink: 'syz.7.2741': attribute type 2 has an invalid length. [ 564.575128][T18129] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2750'. [ 564.712262][T18123] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2750'. [ 566.627062][T18192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 566.784765][T18202] FAULT_INJECTION: forcing a failure. [ 566.784765][T18202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 566.858242][T18202] CPU: 1 UID: 0 PID: 18202 Comm: syz.2.2771 Not tainted syzkaller #0 PREEMPT(full) [ 566.858272][T18202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 566.858282][T18202] Call Trace: [ 566.858289][T18202] [ 566.858297][T18202] dump_stack_lvl+0xe8/0x150 [ 566.858326][T18202] should_fail_ex+0x40c/0x560 [ 566.858357][T18202] _copy_from_user+0x2d/0xb0 [ 566.858378][T18202] ___sys_sendmsg+0x1c6/0x360 [ 566.858399][T18202] ? __lock_acquire+0x683/0x2cf0 [ 566.858421][T18202] ? __pfx____sys_sendmsg+0x10/0x10 [ 566.858446][T18202] ? perf_trace_preemptirq_template+0xb2/0x350 [ 566.858497][T18202] ? __fget_files+0x2a/0x420 [ 566.858515][T18202] ? __fget_files+0x3a2/0x420 [ 566.858542][T18202] __x64_sys_sendmsg+0x1b1/0x290 [ 566.858566][T18202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 566.858605][T18202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.858626][T18202] do_syscall_64+0x174/0x580 [ 566.858645][T18202] ? clear_bhb_loop+0x40/0x90 [ 566.858665][T18202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.858682][T18202] RIP: 0033:0x7f0d9279ce59 [ 566.858698][T18202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.858713][T18202] RSP: 002b:00007f0d9360c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 566.858733][T18202] RAX: ffffffffffffffda RBX: 00007f0d92a15fa0 RCX: 00007f0d9279ce59 [ 566.858746][T18202] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 566.858758][T18202] RBP: 00007f0d9360c090 R08: 0000000000000000 R09: 0000000000000000 [ 566.858770][T18202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.858780][T18202] R13: 00007f0d92a16038 R14: 00007f0d92a15fa0 R15: 00007ffe8d415558 [ 566.858811][T18202] [ 568.191413][T18227] netlink: 'syz.7.2773': attribute type 1 has an invalid length. [ 568.594757][T18251] __nla_validate_parse: 5 callbacks suppressed [ 568.597659][T18251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2777'. [ 569.034492][T18260] netlink: 'syz.2.2780': attribute type 27 has an invalid length. [ 569.184103][T18256] option changes via remount are deprecated (pid=18255 comm=syz.3.2778) [ 571.087675][T18311] option changes via remount are deprecated (pid=18310 comm=syz.2.2794) [ 571.244193][T18322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2795'. [ 571.365847][T18326] netlink: 'syz.2.2798': attribute type 10 has an invalid length. [ 571.407295][T18326] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2798'. [ 571.642275][T18332] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2799'. [ 571.990431][T18334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2801'. [ 574.588205][T18354] option changes via remount are deprecated (pid=18353 comm=syz.2.2808) [ 574.662213][T18362] netlink: 'syz.7.2811': attribute type 10 has an invalid length. [ 574.766095][T18364] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2812'. [ 574.829319][T18362] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 574.842181][T18362] team0: Port device netdevsim0 added [ 575.515061][T18389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2820'. [ 575.647885][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'. [ 575.658360][T18389] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2820'. [ 575.671753][T18389] veth1_to_bridge: entered allmulticast mode [ 575.745806][T18389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2820'. [ 575.784376][T18389] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2820'. [ 576.020905][T18398] option changes via remount are deprecated (pid=18397 comm=syz.7.2824) [ 576.044176][T18408] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2823'. [ 576.135747][T18408] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2823'. [ 576.448769][T18422] netlink: 'syz.7.2829': attribute type 10 has an invalid length. [ 577.806171][T18455] option changes via remount are deprecated (pid=18453 comm=syz.7.2839) [ 578.060785][T18470] netlink: 1852 bytes leftover after parsing attributes in process `syz.7.2843'. [ 578.561952][T18484] netlink: 'syz.7.2847': attribute type 21 has an invalid length. [ 578.586073][T18484] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2847'. [ 579.657303][T18505] netlink: 'syz.2.2854': attribute type 10 has an invalid length. [ 579.956231][T18517] __nla_validate_parse: 3 callbacks suppressed [ 579.956262][T18517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2859'. [ 580.358168][T18532] netlink: 'syz.0.2863': attribute type 10 has an invalid length. [ 580.367124][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2864'. [ 580.486451][T18532] team0: Port device veth1_to_hsr added [ 580.824112][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2868'. [ 580.948737][T18562] FAULT_INJECTION: forcing a failure. [ 580.948737][T18562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 580.966178][T18564] netlink: 'syz.0.2871': attribute type 10 has an invalid length. [ 580.985647][T18562] CPU: 0 UID: 0 PID: 18562 Comm: syz.7.2870 Not tainted syzkaller #0 PREEMPT(full) [ 580.985674][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 580.985685][T18562] Call Trace: [ 580.985692][T18562] [ 580.985700][T18562] dump_stack_lvl+0xe8/0x150 [ 580.985728][T18562] should_fail_ex+0x40c/0x560 [ 580.985761][T18562] _copy_from_user+0x2d/0xb0 [ 580.985781][T18562] __sys_bpf+0x2e7/0xd90 [ 580.985806][T18562] ? __pfx___sys_bpf+0x10/0x10 [ 580.985822][T18562] ? lock_acquire+0x106/0x350 [ 580.985846][T18562] ? ktime_get+0x45/0x220 [ 580.985880][T18562] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 580.985910][T18562] __x64_sys_bpf+0xba/0xd0 [ 580.985931][T18562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.985946][T18562] do_syscall_64+0x174/0x580 [ 580.985961][T18562] ? clear_bhb_loop+0x40/0x90 [ 580.985978][T18562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.985992][T18562] RIP: 0033:0x7f8684b9ce59 [ 580.986006][T18562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.986019][T18562] RSP: 002b:00007f8685a85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 580.986036][T18562] RAX: ffffffffffffffda RBX: 00007f8684e15fa0 RCX: 00007f8684b9ce59 [ 580.986047][T18562] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 0000000000000012 [ 580.986056][T18562] RBP: 00007f8685a85090 R08: 0000000000000000 R09: 0000000000000000 [ 580.986065][T18562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 580.986075][T18562] R13: 00007f8684e16038 R14: 00007f8684e15fa0 R15: 00007ffcc672fe18 [ 580.986099][T18562] [ 581.012142][T18564] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2871'. [ 581.313370][T18564] team0: entered promiscuous mode [ 581.353093][T18564] team_slave_0: entered promiscuous mode [ 581.476806][T18564] team_slave_1: entered promiscuous mode [ 581.484823][T18564] veth1_to_hsr: entered promiscuous mode [ 581.517610][T18564] team0: entered allmulticast mode [ 581.598680][T18564] team_slave_0: entered allmulticast mode [ 581.604474][T18564] team_slave_1: entered allmulticast mode [ 581.612239][T18564] veth1_to_hsr: entered allmulticast mode [ 581.619477][T18564] bridge0: port 3(team0) entered blocking state [ 581.626220][T18564] bridge0: port 3(team0) entered disabled state [ 581.646263][T18564] bridge0: port 3(team0) entered blocking state [ 581.652913][T18564] bridge0: port 3(team0) entered forwarding state [ 582.160664][ T5636] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 582.161484][T18582] netlink: 'syz.3.2874': attribute type 7 has an invalid length. [ 582.366892][T18589] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.2876'. [ 582.410476][T18589] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.2876'. [ 582.476349][T18594] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2878'. [ 582.542048][T18594] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2878'. [ 582.576669][T18594] netlink: 31 bytes leftover after parsing attributes in process `syz.7.2878'. [ 582.596719][T18594] netlink: 'syz.7.2878': attribute type 3 has an invalid length. [ 582.608624][T18594] netlink: 'syz.7.2878': attribute type 2 has an invalid length. [ 582.642067][T18594] netlink: 31 bytes leftover after parsing attributes in process `syz.7.2878'. [ 582.694239][T18606] netlink: 'syz.1.2881': attribute type 29 has an invalid length. [ 583.451254][T18628] netlink: 'syz.2.2886': attribute type 10 has an invalid length. [ 583.782456][ T3396] bridge0: port 3(team0) entered disabled state [ 583.864496][ T3396] bridge_slave_1: left allmulticast mode [ 583.897954][ T3396] bridge_slave_1: left promiscuous mode [ 583.924382][ T3396] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.985046][ T3396] bridge_slave_0: left allmulticast mode [ 584.015196][ T3396] bridge_slave_0: left promiscuous mode [ 584.047249][ T3396] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.103525][T18655] openvswitch: netlink: Actions may not be safe on all matching packets [ 584.477667][T18668] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 6 [ 584.974956][ T3396] bond0 (unregistering): (slave 42): Releasing backup interface [ 584.997397][ T3396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.010621][ T3396] bond0 (unregistering): Released all slaves [ 585.029586][T18674] __nla_validate_parse: 1 callbacks suppressed [ 585.029614][T18674] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2899'. [ 586.444598][T18728] IPv6: NLM_F_CREATE should be specified when creating new route [ 586.455081][T18728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 586.462454][T18728] IPv6: NLM_F_CREATE should be set when creating new route [ 586.476712][T18728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 586.491669][T18728] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2911'. [ 586.501037][T18728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2911'. [ 586.511486][T18728] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2911'. [ 586.520930][T18728] netlink: 'syz.2.2911': attribute type 2 has an invalid length. [ 586.529545][T18728] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2911'. [ 586.936488][T18742] FAULT_INJECTION: forcing a failure. [ 586.936488][T18742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.957289][T18742] CPU: 1 UID: 0 PID: 18742 Comm: syz.3.2918 Not tainted syzkaller #0 PREEMPT(full) [ 586.957317][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 586.957327][T18742] Call Trace: [ 586.957335][T18742] [ 586.957343][T18742] dump_stack_lvl+0xe8/0x150 [ 586.957369][T18742] should_fail_ex+0x40c/0x560 [ 586.957400][T18742] _copy_from_user+0x2d/0xb0 [ 586.957421][T18742] ___sys_recvmsg+0x173/0x5a0 [ 586.957447][T18742] ? __pfx____sys_recvmsg+0x10/0x10 [ 586.957470][T18742] ? __fget_files+0x2a/0x420 [ 586.957504][T18742] ? __fget_files+0x3a2/0x420 [ 586.957530][T18742] __x64_sys_recvmsg+0x1ae/0x290 [ 586.957550][T18742] ? perf_trace_preemptirq_template+0x26f/0x350 [ 586.957580][T18742] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 586.957619][T18742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.957639][T18742] do_syscall_64+0x174/0x580 [ 586.957659][T18742] ? clear_bhb_loop+0x40/0x90 [ 586.957682][T18742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.957700][T18742] RIP: 0033:0x7fd49579ce59 [ 586.957718][T18742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.957734][T18742] RSP: 002b:00007fd4965bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 586.957754][T18742] RAX: ffffffffffffffda RBX: 00007fd495a15fa0 RCX: 00007fd49579ce59 [ 586.957767][T18742] RDX: 0000000000010042 RSI: 0000200000001cc0 RDI: 0000000000000009 [ 586.957779][T18742] RBP: 00007fd4965bd090 R08: 0000000000000000 R09: 0000000000000000 [ 586.957791][T18742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.957802][T18742] R13: 00007fd495a16038 R14: 00007fd495a15fa0 R15: 00007ffd132ed408 [ 586.957832][T18742] [ 587.023428][ T3396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.262595][ T3396] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.306221][T18755] netlink: 'syz.3.2918': attribute type 1 has an invalid length. [ 587.314010][T18755] netlink: 'syz.3.2918': attribute type 2 has an invalid length. [ 587.321750][T18755] netlink: 16146 bytes leftover after parsing attributes in process `syz.3.2918'. [ 587.720914][T18761] netlink: 'syz.1.2920': attribute type 10 has an invalid length. [ 588.082429][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2924'. [ 588.104531][ T3396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 588.128115][ T3396] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 588.159852][ T3396] veth1_macvtap: left promiscuous mode [ 588.165447][ T3396] veth0_macvtap: left promiscuous mode [ 588.193457][ T3396] veth1_vlan: left promiscuous mode [ 589.263875][ T3396] team_slave_1 (unregistering): left promiscuous mode [ 589.271217][ T3396] team_slave_1 (unregistering): left allmulticast mode [ 589.280221][ T3396] team0 (unregistering): Port device team_slave_1 removed [ 589.313481][ T3396] team_slave_0 (unregistering): left promiscuous mode [ 589.328644][ T3396] team_slave_0 (unregistering): left allmulticast mode [ 589.345506][ T3396] team0 (unregistering): Port device team_slave_0 removed [ 590.280698][T18790] FAULT_INJECTION: forcing a failure. [ 590.280698][T18790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.296272][T18790] CPU: 0 UID: 0 PID: 18790 Comm: syz.2.2934 Not tainted syzkaller #0 PREEMPT(full) [ 590.296303][T18790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 590.296314][T18790] Call Trace: [ 590.296321][T18790] [ 590.296328][T18790] dump_stack_lvl+0xe8/0x150 [ 590.296357][T18790] should_fail_ex+0x40c/0x560 [ 590.296387][T18790] _copy_from_user+0x2d/0xb0 [ 590.296408][T18790] ___sys_sendmsg+0x1c6/0x360 [ 590.296429][T18790] ? __lock_acquire+0x683/0x2cf0 [ 590.296453][T18790] ? __pfx____sys_sendmsg+0x10/0x10 [ 590.296508][T18790] ? __fget_files+0x2a/0x420 [ 590.296526][T18790] ? __fget_files+0x3a2/0x420 [ 590.296554][T18790] __x64_sys_sendmsg+0x1b1/0x290 [ 590.296578][T18790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 590.296617][T18790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.296637][T18790] do_syscall_64+0x174/0x580 [ 590.296655][T18790] ? trace_irq_disable+0x3b/0x140 [ 590.296673][T18790] ? clear_bhb_loop+0x40/0x90 [ 590.296696][T18790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.296715][T18790] RIP: 0033:0x7f0d9279ce59 [ 590.296733][T18790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.296750][T18790] RSP: 002b:00007f0d9360c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 590.296769][T18790] RAX: ffffffffffffffda RBX: 00007f0d92a15fa0 RCX: 00007f0d9279ce59 [ 590.296783][T18790] RDX: 0000000000048004 RSI: 0000200000003a80 RDI: 0000000000000003 [ 590.296801][T18790] RBP: 00007f0d9360c090 R08: 0000000000000000 R09: 0000000000000000 [ 590.296812][T18790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.296823][T18790] R13: 00007f0d92a16038 R14: 00007f0d92a15fa0 R15: 00007ffe8d415558 [ 590.296855][T18790] [ 590.754249][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2937'. [ 591.216600][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'. [ 591.226165][T18798] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2937'. [ 591.250072][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'. [ 591.266578][T18798] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2937'. [ 592.138278][T18815] netlink: 'syz.3.2942': attribute type 10 has an invalid length. [ 593.375363][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2952'. [ 593.537618][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.547310][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.556428][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.575036][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.584178][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.593265][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.602350][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.611442][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.620529][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.629623][T18836] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 593.739253][T18858] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2957'. [ 593.751455][T18858] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2957'. [ 593.941770][T18857] option changes via remount are deprecated (pid=18854 comm=syz.7.2958) [ 594.617722][T18878] netlink: 'syz.2.2965': attribute type 1 has an invalid length. [ 595.084081][T18901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2974'. [ 595.095870][T18901] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2974'. [ 595.106039][T18901] veth1_to_bridge: entered allmulticast mode [ 595.625312][T18907] FAULT_INJECTION: forcing a failure. [ 595.625312][T18907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.638384][T18907] CPU: 1 UID: 0 PID: 18907 Comm: syz.7.2978 Not tainted syzkaller #0 PREEMPT(full) [ 595.638406][T18907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 595.638417][T18907] Call Trace: [ 595.638424][T18907] [ 595.638432][T18907] dump_stack_lvl+0xe8/0x150 [ 595.638460][T18907] should_fail_ex+0x40c/0x560 [ 595.638493][T18907] _copy_to_user+0x31/0xb0 [ 595.638516][T18907] simple_read_from_buffer+0xe1/0x170 [ 595.638542][T18907] proc_fail_nth_read+0x1bb/0x230 [ 595.638566][T18907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 595.638588][T18907] ? rw_verify_area+0x24a/0x4c0 [ 595.638610][T18907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 595.638629][T18907] vfs_read+0x213/0xa80 [ 595.638657][T18907] ? __pfx___mutex_lock+0x10/0x10 [ 595.638678][T18907] ? __pfx_vfs_read+0x10/0x10 [ 595.638701][T18907] ? __fget_files+0x2a/0x420 [ 595.638723][T18907] ? __fget_files+0x3a2/0x420 [ 595.638740][T18907] ? __fget_files+0x2a/0x420 [ 595.638766][T18907] ksys_read+0x150/0x270 [ 595.638786][T18907] ? __pfx_ksys_read+0x10/0x10 [ 595.638815][T18907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.638833][T18907] do_syscall_64+0x174/0x580 [ 595.638849][T18907] ? trace_irq_disable+0x3b/0x140 [ 595.638876][T18907] ? clear_bhb_loop+0x40/0x90 [ 595.638898][T18907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.638917][T18907] RIP: 0033:0x7f8684b5d68e [ 595.638935][T18907] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 595.638950][T18907] RSP: 002b:00007f8685a84fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 595.638969][T18907] RAX: ffffffffffffffda RBX: 00007f8685a856c0 RCX: 00007f8684b5d68e [ 595.638983][T18907] RDX: 000000000000000f RSI: 00007f8685a850a0 RDI: 0000000000000004 [ 595.638995][T18907] RBP: 00007f8685a85090 R08: 0000000000000000 R09: 0000000000000000 [ 595.639006][T18907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 595.639016][T18907] R13: 00007f8684e16038 R14: 00007f8684e15fa0 R15: 00007ffcc672fe18 [ 595.639047][T18907] [ 595.647269][T18914] netlink: 'syz.1.2980': attribute type 21 has an invalid length. [ 595.810190][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 595.835089][T18914] netlink: 'syz.1.2980': attribute type 22 has an invalid length. [ 595.879773][T18914] __nla_validate_parse: 4 callbacks suppressed [ 595.879791][T18914] netlink: 14380 bytes leftover after parsing attributes in process `syz.1.2980'. [ 596.001275][T18921] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 596.007232][T18921] syzkaller1: linktype set to 823 [ 596.236136][T18930] netlink: 'syz.0.2986': attribute type 21 has an invalid length. [ 596.629778][T18926] IPv6: pim6reg1: Disabled Multicast RS [ 596.837141][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'. [ 597.778538][T18980] netlink: 'syz.3.3004': attribute type 21 has an invalid length. [ 597.818313][T18980] netlink: 'syz.3.3004': attribute type 22 has an invalid length. [ 597.855287][T18980] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.3004'. [ 598.571208][T18992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 598.598370][T18992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 598.633205][T18992] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3010'. [ 598.675825][T18992] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3010'. [ 598.704951][T18992] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3010'. [ 598.730801][T18992] netlink: 'syz.2.3010': attribute type 2 has an invalid length. [ 598.760050][T18992] netlink: 31 bytes leftover after parsing attributes in process `syz.2.3010'. [ 599.040909][T19015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3020'. [ 599.051008][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3019'. [ 599.067043][T19015] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3020'. [ 599.465038][T19029] netlink: 'syz.0.3025': attribute type 1 has an invalid length. [ 599.478100][T19029] netlink: 'syz.0.3025': attribute type 2 has an invalid length. [ 601.358725][T19079] netlink: 'syz.2.3043': attribute type 5 has an invalid length. [ 601.366680][T19079] __nla_validate_parse: 5 callbacks suppressed [ 601.366700][T19079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3043'. [ 601.753693][T19089] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3048'. [ 601.994202][T19099] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3050'. [ 602.488289][T19106] netlink: 'syz.0.3053': attribute type 10 has an invalid length. [ 602.951720][ T3325] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.092083][T19106] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 603.102914][T19106] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 603.110773][T19106] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 603.121385][T19106] team0: Port device netdevsim0 added [ 603.291730][ T3325] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.444054][ T3325] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.456663][T19118] netlink: 'syz.3.3059': attribute type 46 has an invalid length. [ 603.572116][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 603.593051][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 603.601798][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 603.610127][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 603.620641][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 603.856419][ T3325] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.726237][T19152] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3069'. [ 605.396035][ T3325] bridge_slave_1: left allmulticast mode [ 605.422139][ T3325] bridge_slave_1: left promiscuous mode [ 605.451952][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.484180][ T3325] bridge_slave_0: left allmulticast mode [ 605.512209][ T3325] bridge_slave_0: left promiscuous mode [ 605.535098][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.739202][ T5630] Bluetooth: hci4: command tx timeout [ 606.005666][ T3325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.043782][ T3325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.057855][ T3325] bond0 (unregistering): Released all slaves [ 606.167978][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 606.415663][T19209] net_ratelimit: 3320 callbacks suppressed [ 606.415683][T19209] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 6 [ 607.029745][T19230] netlink: 'syz.7.3090': attribute type 10 has an invalid length. [ 607.061362][T19122] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.065129][T19230] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3090'. [ 607.088078][T19122] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.124488][T19122] bridge_slave_0: entered allmulticast mode [ 607.178146][T19122] bridge_slave_0: entered promiscuous mode [ 607.224379][T19122] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.245647][T19122] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.268922][T19122] bridge_slave_1: entered allmulticast mode [ 607.290638][T19122] bridge_slave_1: entered promiscuous mode [ 607.338308][T19230] team0: entered promiscuous mode [ 607.359044][T19230] team_slave_0: entered promiscuous mode [ 607.365197][T19230] team_slave_1: entered promiscuous mode [ 607.379054][T19230] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 607.418164][T19230] team0: entered allmulticast mode [ 607.457084][T19230] team_slave_0: entered allmulticast mode [ 607.485508][T19230] team_slave_1: entered allmulticast mode [ 607.532116][T19230] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 607.562936][T19230] bridge0: port 3(team0) entered blocking state [ 607.589599][T19230] bridge0: port 3(team0) entered disabled state [ 607.607811][T19230] bridge0: port 3(team0) entered blocking state [ 607.614272][T19230] bridge0: port 3(team0) entered forwarding state [ 607.750284][ T3325] hsr_slave_0: left promiscuous mode [ 607.768050][ T3325] hsr_slave_1: left promiscuous mode [ 607.791790][ T3325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.816452][ T3325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.835076][ T3325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.855926][ T3325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.865373][ T3325] batman_adv: batadv0: Interface deactivated: dummy0 [ 607.873285][ T3325] batman_adv: batadv0: Removing interface: dummy0 [ 607.890128][ T5630] Bluetooth: hci4: command tx timeout [ 607.904282][ T3325] veth1_macvtap: left promiscuous mode [ 607.909992][ T3325] veth0_macvtap: left promiscuous mode [ 607.915590][ T3325] veth1_vlan: left promiscuous mode [ 607.921290][ T3325] veth0_vlan: left promiscuous mode [ 607.961988][T19267] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3098'. [ 608.288522][T19122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.315610][T19122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.339880][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6 [ 608.379707][T19122] team0: Port device team_slave_0 added [ 608.387933][T19122] team0: Port device team_slave_1 added [ 608.423103][T19122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.430760][T19122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.463609][T19122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.508638][T19122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.534758][T19122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.598052][T19122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.857949][T19122] hsr_slave_0: entered promiscuous mode [ 608.883955][T19122] hsr_slave_1: entered promiscuous mode [ 608.906274][T19122] debugfs: 'hsr0' already exists in 'hsr' [ 608.922715][T19122] Cannot create hsr debugfs directory [ 609.190852][T19294] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.3108'. [ 609.733164][T19314] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 609.968852][ T5630] Bluetooth: hci4: command tx timeout [ 610.139277][T19332] netlink: 14568 bytes leftover after parsing attributes in process `syz.7.3120'. [ 610.203962][ T5291] 8021q: adding VLAN 0 to HW filter on device eth7 [ 610.327184][T19336] netlink: 'syz.7.3122': attribute type 10 has an invalid length. [ 610.360906][T19336] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3122'. [ 610.571898][T19343] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3125'. [ 611.067515][T19365] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.3131'. [ 611.081588][T19363] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3130'. [ 611.127626][T19363] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3130'. [ 611.136673][T19122] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 611.306213][T19122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 611.325365][T19122] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 611.365630][T19122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 611.390669][T19122] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 611.421747][T19122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 611.446295][T19122] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 611.493623][T19122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 611.696389][T19122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.729069][T19122] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.744394][ T3396] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.751527][ T3396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.776163][ T5291] 8021q: adding VLAN 0 to HW filter on device eth8 [ 611.827409][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.834623][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.865456][T19393] netlink: 'syz.0.3137': attribute type 10 has an invalid length. [ 612.049764][ T5630] Bluetooth: hci4: command tx timeout [ 612.256454][T19411] __nla_validate_parse: 1 callbacks suppressed [ 612.256490][T19411] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.3139'. [ 612.819885][T19432] FAULT_INJECTION: forcing a failure. [ 612.819885][T19432] name failslab, interval 1, probability 0, space 0, times 0 [ 612.836923][T19432] CPU: 0 UID: 0 PID: 19432 Comm: syz.0.3144 Not tainted syzkaller #0 PREEMPT(full) [ 612.836950][T19432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.836961][T19432] Call Trace: [ 612.836978][T19432] [ 612.836997][T19432] dump_stack_lvl+0xe8/0x150 [ 612.837086][T19432] should_fail_ex+0x40c/0x560 [ 612.837222][T19432] should_failslab+0xa8/0x100 [ 612.837306][T19432] __kmalloc_cache_noprof+0xa8/0x660 [ 612.837392][T19432] ? __inet_diag_dump_start+0x90/0xbb0 [ 612.837551][T19432] ? __inet_diag_dump_start+0x90/0xbb0 [ 612.837697][T19432] __inet_diag_dump_start+0x90/0xbb0 [ 612.837769][T19432] ? netlink_lookup+0x30/0x200 [ 612.837821][T19432] ? netlink_lookup+0x30/0x200 [ 612.837965][T19432] __netlink_dump_start+0x442/0x7b0 [ 612.838114][T19432] inet_diag_handler_cmd+0x1df/0x2c0 [ 612.838221][T19432] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 612.838266][T19432] ? sock_diag_lock_handler+0x19/0x290 [ 612.838342][T19432] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 612.838377][T19432] ? __pfx_inet_diag_dump+0x10/0x10 [ 612.838412][T19432] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 612.838513][T19432] ? sock_diag_lock_handler+0x19/0x290 [ 612.838578][T19432] ? sock_diag_lock_handler+0x19/0x290 [ 612.838699][T19432] sock_diag_rcv_msg+0x4b0/0x5f0 [ 612.838808][T19432] netlink_rcv_skb+0x226/0x4a0 [ 612.838884][T19432] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 612.838974][T19432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 612.839216][T19432] ? netlink_deliver_tap+0x2e/0x1b0 [ 612.839276][T19432] ? netlink_deliver_tap+0x2e/0x1b0 [ 612.839411][T19432] netlink_unicast+0x7bb/0x940 [ 612.839625][T19432] netlink_sendmsg+0x813/0xb40 [ 612.839808][T19432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.839922][T19432] ? aa_sock_msg_perm+0xf1/0x1b0 [ 612.840056][T19432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 612.840097][T19432] sock_sendmsg_nosec+0x13a/0x180 [ 612.840198][T19432] ____sys_sendmsg+0x54e/0x850 [ 612.840341][T19432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 612.840519][T19432] ? import_iovec+0x73/0xa0 [ 612.840632][T19432] ___sys_sendmsg+0x2a5/0x360 [ 612.840689][T19432] ? perf_trace_run_bpf_submit+0xee/0x170 [ 612.840795][T19432] ? __pfx____sys_sendmsg+0x10/0x10 [ 612.841155][T19432] ? __fget_files+0x2a/0x420 [ 612.841363][T19432] ? __fget_files+0x2a/0x420 [ 612.841401][T19432] ? __fget_files+0x3a2/0x420 [ 612.841598][T19432] __x64_sys_sendmsg+0x1b1/0x290 [ 612.841643][T19432] ? perf_trace_preemptirq_template+0x26f/0x350 [ 612.841723][T19432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 612.842024][T19432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.842084][T19432] do_syscall_64+0x174/0x580 [ 612.842116][T19432] ? trace_irq_disable+0x3b/0x140 [ 612.842162][T19432] ? clear_bhb_loop+0x40/0x90 [ 612.842256][T19432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.842290][T19432] RIP: 0033:0x7fb13319ce59 [ 612.842337][T19432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.842352][T19432] RSP: 002b:00007fb133fa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 612.842372][T19432] RAX: ffffffffffffffda RBX: 00007fb133416090 RCX: 00007fb13319ce59 [ 612.842385][T19432] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 612.842397][T19432] RBP: 00007fb133fa3090 R08: 0000000000000000 R09: 0000000000000000 [ 612.842407][T19432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 612.842418][T19432] R13: 00007fb133416128 R14: 00007fb133416090 R15: 00007ffdafa7a8b8 [ 612.842665][T19432] [ 613.511720][T19122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.873620][T19452] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.3150'. [ 613.913985][T19452] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.3150'. [ 614.109451][T19465] netlink: 'syz.1.3151': attribute type 10 has an invalid length. [ 614.179655][T19465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3151'. [ 614.244340][T19465] team0: entered promiscuous mode [ 614.268242][T19465] team_slave_0: entered promiscuous mode [ 614.280091][T19465] team_slave_1: entered promiscuous mode [ 614.324965][T19465] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 614.366214][T19465] team0: entered allmulticast mode [ 614.386609][T19465] team_slave_0: entered allmulticast mode [ 614.399806][T19465] team_slave_1: entered allmulticast mode [ 614.414730][T19465] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 614.441958][T19465] bridge0: port 3(team0) entered blocking state [ 614.454894][T19465] bridge0: port 3(team0) entered disabled state [ 614.787437][T19122] veth0_vlan: entered promiscuous mode [ 614.825073][T19122] veth1_vlan: entered promiscuous mode [ 614.917371][T19122] veth0_macvtap: entered promiscuous mode [ 614.931888][T19122] veth1_macvtap: entered promiscuous mode [ 614.998639][T19122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.053838][T19122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.115901][ T6351] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.140993][ T6351] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.178223][ T6351] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.207289][ T6351] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.477605][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.517256][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.579120][T19506] FAULT_INJECTION: forcing a failure. [ 615.579120][T19506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.594192][T19506] CPU: 0 UID: 0 PID: 19506 Comm: syz.1.3163 Not tainted syzkaller #0 PREEMPT(full) [ 615.594218][T19506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.594229][T19506] Call Trace: [ 615.594239][T19506] [ 615.594250][T19506] dump_stack_lvl+0xe8/0x150 [ 615.594295][T19506] should_fail_ex+0x40c/0x560 [ 615.594359][T19506] _copy_from_user+0x2d/0xb0 [ 615.594395][T19506] ___sys_sendmsg+0x1c6/0x360 [ 615.594456][T19506] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.594596][T19506] ? __fget_files+0x2a/0x420 [ 615.594676][T19506] ? __fget_files+0x2a/0x420 [ 615.594699][T19506] ? __fget_files+0x3a2/0x420 [ 615.594778][T19506] __x64_sys_sendmsg+0x1b1/0x290 [ 615.594825][T19506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.594937][T19506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.594969][T19506] do_syscall_64+0x174/0x580 [ 615.594990][T19506] ? trace_irq_disable+0x3b/0x140 [ 615.595023][T19506] ? clear_bhb_loop+0x40/0x90 [ 615.595067][T19506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.595090][T19506] RIP: 0033:0x7f64ec39ce59 [ 615.595117][T19506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.595133][T19506] RSP: 002b:00007f64ed184028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.595152][T19506] RAX: ffffffffffffffda RBX: 00007f64ec615fa0 RCX: 00007f64ec39ce59 [ 615.595164][T19506] RDX: 0000000000040000 RSI: 0000200000000840 RDI: 0000000000000005 [ 615.595176][T19506] RBP: 00007f64ed184090 R08: 0000000000000000 R09: 0000000000000000 [ 615.595186][T19506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.595197][T19506] R13: 00007f64ec616038 R14: 00007f64ec615fa0 R15: 00007ffd483ca2f8 [ 615.595284][T19506] [ 615.793790][ T3325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 615.801703][ T3325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 615.910255][T19504] lo speed is unknown, defaulting to 1000 [ 615.964493][T19504] lo speed is unknown, defaulting to 1000 [ 616.038247][T19504] lo speed is unknown, defaulting to 1000 [ 616.085725][T19504] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 616.153400][T19504] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 616.258123][T19504] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 616.433499][T19504] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 616.547599][T19504] lo speed is unknown, defaulting to 1000 [ 616.562312][T19504] lo speed is unknown, defaulting to 1000 [ 616.569816][T19504] lo speed is unknown, defaulting to 1000 [ 616.605585][T19529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3168'. [ 616.626621][T19504] lo speed is unknown, defaulting to 1000 [ 616.656589][T19504] lo speed is unknown, defaulting to 1000 [ 616.845918][T19537] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.3171'. [ 616.879189][T19537] netlink: 4356 bytes leftover after parsing attributes in process `syz.1.3171'. [ 617.006174][T19544] netlink: 'syz.3.3173': attribute type 5 has an invalid length. [ 617.143182][T19550] netlink: 'syz.7.3175': attribute type 2 has an invalid length. [ 617.188796][T19550] netlink: 'syz.7.3175': attribute type 2 has an invalid length. [ 617.285109][T19559] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3177'. [ 617.324178][T19558] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3176'. [ 617.402750][T19558] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3176'. [ 617.515852][T19567] netlink: 'syz.5.3179': attribute type 2 has an invalid length. [ 617.547570][T19567] netlink: 'syz.5.3179': attribute type 2 has an invalid length. [ 618.074922][T19594] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.3187'. [ 618.103472][T19594] netlink: 4356 bytes leftover after parsing attributes in process `syz.5.3187'. [ 618.435897][T19612] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.3192'. [ 618.812405][T19627] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3196'. [ 618.899970][T19630] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3196'. [ 619.151528][T19641] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3201'. [ 619.204041][T19641] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3201'. [ 619.266695][T19648] FAULT_INJECTION: forcing a failure. [ 619.266695][T19648] name failslab, interval 1, probability 0, space 0, times 0 [ 619.325206][T19648] CPU: 0 UID: 0 PID: 19648 Comm: syz.1.3202 Not tainted syzkaller #0 PREEMPT(full) [ 619.325232][T19648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 619.325243][T19648] Call Trace: [ 619.325251][T19648] [ 619.325259][T19648] dump_stack_lvl+0xe8/0x150 [ 619.325290][T19648] should_fail_ex+0x40c/0x560 [ 619.325325][T19648] should_failslab+0xa8/0x100 [ 619.325351][T19648] __kmalloc_cache_noprof+0xa8/0x660 [ 619.325384][T19648] ? genl_start+0x1c9/0x6d0 [ 619.325409][T19648] ? genl_start+0x1c9/0x6d0 [ 619.325443][T19648] genl_start+0x1c9/0x6d0 [ 619.325480][T19648] __netlink_dump_start+0x442/0x7b0 [ 619.325512][T19648] genl_family_rcv_msg_dumpit+0x213/0x310 [ 619.325545][T19648] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 619.325571][T19648] ? genl_get_cmd+0x6cc/0x960 [ 619.325605][T19648] ? __pfx_genl_start+0x10/0x10 [ 619.325627][T19648] ? __pfx_genl_dumpit+0x10/0x10 [ 619.325651][T19648] ? __pfx_genl_done+0x10/0x10 [ 619.325679][T19648] ? __dev_queue_xmit+0x29b/0x37f0 [ 619.325830][T19648] genl_rcv_msg+0x5e1/0x7a0 [ 619.325867][T19648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.325893][T19648] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 619.325947][T19648] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 619.325968][T19648] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 619.325993][T19648] ? __pfx_ref_tracker_free+0x10/0x10 [ 619.326021][T19648] ? __asan_memcpy+0x40/0x70 [ 619.326050][T19648] ? __skb_clone+0x5c/0x6c0 [ 619.326080][T19648] netlink_rcv_skb+0x226/0x4a0 [ 619.326104][T19648] ? __pfx_genl_rcv_msg+0x10/0x10 [ 619.326133][T19648] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 619.326177][T19648] ? down_read+0x2be/0x330 [ 619.326204][T19648] genl_rcv+0x28/0x40 [ 619.326228][T19648] netlink_unicast+0x7bb/0x940 [ 619.326263][T19648] netlink_sendmsg+0x813/0xb40 [ 619.326300][T19648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.326328][T19648] ? aa_sock_msg_perm+0xf1/0x1b0 [ 619.326360][T19648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 619.326381][T19648] sock_sendmsg_nosec+0x13a/0x180 [ 619.326412][T19648] ____sys_sendmsg+0x54e/0x850 [ 619.326442][T19648] ? __pfx_____sys_sendmsg+0x10/0x10 [ 619.326477][T19648] ? import_iovec+0x73/0xa0 [ 619.326504][T19648] ___sys_sendmsg+0x2a5/0x360 [ 619.326525][T19648] ? __lock_acquire+0x683/0x2cf0 [ 619.326553][T19648] ? __pfx____sys_sendmsg+0x10/0x10 [ 619.326606][T19648] ? __fget_files+0x2a/0x420 [ 619.326642][T19648] ? __fget_files+0x2a/0x420 [ 619.326660][T19648] ? __fget_files+0x3a2/0x420 [ 619.326694][T19648] __x64_sys_sendmsg+0x1b1/0x290 [ 619.326726][T19648] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 619.326774][T19648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.326796][T19648] do_syscall_64+0x174/0x580 [ 619.326817][T19648] ? clear_bhb_loop+0x40/0x90 [ 619.326843][T19648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.326862][T19648] RIP: 0033:0x7f64ec39ce59 [ 619.326881][T19648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.326897][T19648] RSP: 002b:00007f64ed184028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 619.326917][T19648] RAX: ffffffffffffffda RBX: 00007f64ec615fa0 RCX: 00007f64ec39ce59 [ 619.326930][T19648] RDX: 0000000000008010 RSI: 0000200000000000 RDI: 0000000000000007 [ 619.326943][T19648] RBP: 00007f64ed184090 R08: 0000000000000000 R09: 0000000000000000 [ 619.326954][T19648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.326965][T19648] R13: 00007f64ec616038 R14: 00007f64ec615fa0 R15: 00007ffd483ca2f8 [ 619.327004][T19648] [ 619.688778][T19646] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 6 [ 619.898770][T19663] netlink: 'syz.5.3207': attribute type 39 has an invalid length. [ 622.348259][T19757] __nla_validate_parse: 6 callbacks suppressed [ 622.348290][T19757] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3237'. [ 622.409267][T19758] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3239'. [ 622.443082][T19757] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3237'. [ 624.040404][T19830] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3260'. [ 624.054384][T19830] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3260'. [ 624.376321][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.395673][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.521331][T19845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3263'. [ 624.757143][T19847] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3265'. [ 624.839415][T19861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3268'. [ 625.297658][T19879] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3272'. [ 625.510325][T19879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3272'. [ 627.346095][T19947] netlink: 'syz.3.3290': attribute type 61 has an invalid length. [ 627.353959][T19947] __nla_validate_parse: 4 callbacks suppressed [ 627.353975][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3290'. [ 627.478142][T19952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'. [ 627.523691][T19952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'. [ 627.620547][T19947] netlink: 'syz.3.3290': attribute type 2 has an invalid length. [ 627.652468][T19947] netlink: 'syz.3.3290': attribute type 2 has an invalid length. [ 627.663468][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3293'. [ 628.142108][T19967] netlink: 'syz.5.3295': attribute type 10 has an invalid length. [ 628.236784][T19967] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 628.290245][T19967] team0: Port device netdevsim0 added [ 628.504029][T19988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3300'. [ 628.508465][T19980] lo speed is unknown, defaulting to 1000 [ 629.005824][T20008] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3304'. [ 629.070526][T20008] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3304'. [ 629.157148][T20013] netlink: 'syz.5.3307': attribute type 21 has an invalid length. [ 629.187500][T20013] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.3307'. [ 629.870650][T20039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3312'. [ 630.187594][T20051] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3317'. [ 630.355522][T20058] netlink: 'syz.5.3319': attribute type 21 has an invalid length. [ 630.981834][T20082] netlink: 'syz.3.3328': attribute type 1 has an invalid length. [ 630.995400][T20082] netlink: 'syz.3.3328': attribute type 2 has an invalid length. [ 631.007178][T20082] netlink: 'syz.3.3328': attribute type 1 has an invalid length. [ 632.859748][T20122] __nla_validate_parse: 7 callbacks suppressed [ 632.859781][T20122] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3346'. [ 633.007783][T20126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3345'. [ 634.092829][T20175] FAULT_INJECTION: forcing a failure. [ 634.092829][T20175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.106470][T20175] CPU: 1 UID: 0 PID: 20175 Comm: syz.5.3365 Not tainted syzkaller #0 PREEMPT(full) [ 634.106496][T20175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.106508][T20175] Call Trace: [ 634.106516][T20175] [ 634.106524][T20175] dump_stack_lvl+0xe8/0x150 [ 634.106553][T20175] should_fail_ex+0x40c/0x560 [ 634.106587][T20175] _copy_from_user+0x2d/0xb0 [ 634.106609][T20175] ___sys_sendmsg+0x1c6/0x360 [ 634.106630][T20175] ? __lock_acquire+0x683/0x2cf0 [ 634.106655][T20175] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.106724][T20175] ? __fget_files+0x2a/0x420 [ 634.106743][T20175] ? __fget_files+0x3a2/0x420 [ 634.106774][T20175] __x64_sys_sendmsg+0x1b1/0x290 [ 634.106808][T20175] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.106854][T20175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.106875][T20175] do_syscall_64+0x174/0x580 [ 634.106894][T20175] ? trace_irq_disable+0x3b/0x140 [ 634.106913][T20175] ? clear_bhb_loop+0x40/0x90 [ 634.106937][T20175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.106957][T20175] RIP: 0033:0x7f77f0f9ce59 [ 634.106976][T20175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.106992][T20175] RSP: 002b:00007f77f1f12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.107013][T20175] RAX: ffffffffffffffda RBX: 00007f77f1215fa0 RCX: 00007f77f0f9ce59 [ 634.107027][T20175] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 000000000000000b [ 634.107040][T20175] RBP: 00007f77f1f12090 R08: 0000000000000000 R09: 0000000000000000 [ 634.107052][T20175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.107064][T20175] R13: 00007f77f1216038 R14: 00007f77f1215fa0 R15: 00007ffdefdfcf78 [ 634.107102][T20175] [ 634.362294][T20185] netlink: 176 bytes leftover after parsing attributes in process `syz.7.3366'. [ 635.069464][T20207] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3375'. [ 635.120303][T20207] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3375'. [ 635.157743][T20211] netlink: 'syz.3.3378': attribute type 33 has an invalid length. [ 635.200125][T20217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3377'. [ 635.231152][T20217] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3377'. [ 635.269428][T20217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3377'. [ 635.356156][T20217] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3377'. [ 636.263404][T20255] netlink: 'syz.3.3385': attribute type 7 has an invalid length. [ 636.291937][T20255] netlink: 'syz.3.3385': attribute type 8 has an invalid length. [ 636.391488][T20255] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 636.400915][T20262] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3388'. [ 636.415494][T20255] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 636.469293][T20255] netlink: 'syz.3.3385': attribute type 2 has an invalid length. [ 636.479322][T20221] option changes via remount are deprecated (pid=20220 comm=syz.5.3379) [ 636.511871][T20255] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 636.589204][T20255] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 636.596963][T20255] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 636.604684][T20255] netlink: 'syz.3.3385': attribute type 1 has an invalid length. [ 636.694230][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 637.500623][T20293] IPv6: NLM_F_CREATE should be specified when creating new route [ 638.097695][T20304] __nla_validate_parse: 8 callbacks suppressed [ 638.097714][T20304] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3402'. [ 638.370034][T20309] FAULT_INJECTION: forcing a failure. [ 638.370034][T20309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.480171][T20309] CPU: 0 UID: 0 PID: 20309 Comm: syz.3.3405 Not tainted syzkaller #0 PREEMPT(full) [ 638.480200][T20309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 638.480212][T20309] Call Trace: [ 638.480221][T20309] [ 638.480230][T20309] dump_stack_lvl+0xe8/0x150 [ 638.480261][T20309] should_fail_ex+0x40c/0x560 [ 638.480296][T20309] _copy_from_user+0x2d/0xb0 [ 638.480320][T20309] __sys_bpf+0x2e7/0xd90 [ 638.480354][T20309] ? __pfx___sys_bpf+0x10/0x10 [ 638.480389][T20309] ? __fget_files+0x2a/0x420 [ 638.480431][T20309] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 638.480461][T20309] ? ksys_write+0x242/0x270 [ 638.480488][T20309] ? __pfx_ksys_write+0x10/0x10 [ 638.480518][T20309] __x64_sys_bpf+0xba/0xd0 [ 638.480547][T20309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.480569][T20309] do_syscall_64+0x174/0x580 [ 638.480588][T20309] ? trace_irq_disable+0x3b/0x140 [ 638.480606][T20309] ? clear_bhb_loop+0x40/0x90 [ 638.480631][T20309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.480651][T20309] RIP: 0033:0x7fd49579ce59 [ 638.480670][T20309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.480687][T20309] RSP: 002b:00007fd4965bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 638.480707][T20309] RAX: ffffffffffffffda RBX: 00007fd495a15fa0 RCX: 00007fd49579ce59 [ 638.480722][T20309] RDX: 000000000000005f RSI: 00002000000001c0 RDI: 0000000000000023 [ 638.480735][T20309] RBP: 00007fd4965bd090 R08: 0000000000000000 R09: 0000000000000000 [ 638.480747][T20309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.480759][T20309] R13: 00007fd495a16038 R14: 00007fd495a15fa0 R15: 00007ffd132ed408 [ 638.480795][T20309] [ 639.677234][T20337] netlink: 272 bytes leftover after parsing attributes in process `syz.0.3416'. [ 639.725602][ T5636] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.751861][T20341] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.764388][T20341] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.775105][T20341] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.785080][T20341] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 640.607034][T20362] FAULT_INJECTION: forcing a failure. [ 640.607034][T20362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.664651][T20362] CPU: 0 UID: 0 PID: 20362 Comm: syz.5.3420 Not tainted syzkaller #0 PREEMPT(full) [ 640.664678][T20362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 640.664690][T20362] Call Trace: [ 640.664698][T20362] [ 640.664708][T20362] dump_stack_lvl+0xe8/0x150 [ 640.664737][T20362] should_fail_ex+0x40c/0x560 [ 640.664771][T20362] _copy_from_user+0x2d/0xb0 [ 640.664794][T20362] bpf_test_init+0xd8/0x150 [ 640.664823][T20362] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 640.664868][T20362] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 640.664899][T20362] ? __fget_files+0x2a/0x420 [ 640.664926][T20362] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 640.664951][T20362] bpf_prog_test_run+0x2c5/0x340 [ 640.664979][T20362] __sys_bpf+0xa22/0xd90 [ 640.665010][T20362] ? __pfx___sys_bpf+0x10/0x10 [ 640.665046][T20362] ? __fget_files+0x2a/0x420 [ 640.665089][T20362] ? ksys_write+0x242/0x270 [ 640.665116][T20362] ? __pfx_ksys_write+0x10/0x10 [ 640.665147][T20362] __x64_sys_bpf+0xba/0xd0 [ 640.665177][T20362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.665199][T20362] do_syscall_64+0x174/0x580 [ 640.665217][T20362] ? trace_irq_disable+0x3b/0x140 [ 640.665236][T20362] ? clear_bhb_loop+0x40/0x90 [ 640.665269][T20362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.665289][T20362] RIP: 0033:0x7f77f0f9ce59 [ 640.665308][T20362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.665324][T20362] RSP: 002b:00007f77f1f12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 640.665345][T20362] RAX: ffffffffffffffda RBX: 00007f77f1215fa0 RCX: 00007f77f0f9ce59 [ 640.665359][T20362] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 640.665370][T20362] RBP: 00007f77f1f12090 R08: 0000000000000000 R09: 0000000000000000 [ 640.665383][T20362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.665393][T20362] R13: 00007f77f1216038 R14: 00007f77f1215fa0 R15: 00007ffdefdfcf78 [ 640.665432][T20362] [ 641.453171][T20380] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3423'. [ 641.523921][T20380] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3423'. [ 641.817679][T20335] lo speed is unknown, defaulting to 1000 [ 641.901785][T20341] Bluetooth: hci3: command 0x0406 tx timeout [ 641.907918][T20341] Bluetooth: hci5: command tx timeout [ 641.933713][T20381] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3424'. [ 643.734904][T20435] validate_nla: 3 callbacks suppressed [ 643.734922][T20435] netlink: 'syz.0.3437': attribute type 11 has an invalid length. [ 643.748262][T20435] netlink: 'syz.0.3437': attribute type 5 has an invalid length. Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe