last executing test programs: 1m5.39883473s ago: executing program 4 (id=247): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0xfd, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x7, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x10, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4d31, 0x600, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x0, 0x2, 0x1, 0x0, 0x0, 0x4, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x6, &(0x7f0000000000), 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000940)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100005531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, @perf_bp={0x0, 0x2}, 0x201, 0x0, 0xfffffffc, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000017000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1m4.840232626s ago: executing program 4 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x8, 0x8, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000300007010000f8ffffffb702000008000000b7030000000007808500000070"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m4.814392051s ago: executing program 4 (id=253): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3ff, 0x80}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000001300000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480"], 0x88}}, 0x0) 1m4.683728272s ago: executing program 4 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000008000850000008700000018010000646c7f0000000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x21980, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x2}, 0x114905, 0x4, 0x9, 0x1, 0x3ff, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x400000, 0xba, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="740000000001010400000000141a000002000000100005800a000100512e3933310000000800074000000001240001801400018008000100e000000108000200e00000020c000280050001000000000024000280140001"], 0x74}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x1, 0x4, 0x3, 0x5, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x201000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001440)={0x0, 0x0, 0x0, &(0x7f00000003c0)="0ce47464e25589", 0x100}, 0x38) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1201, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x18, 0x3}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet(0x2, 0x5, 0x9) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000002) write$cgroup_subtree(r7, 0x0, 0x12) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @empty}, 0x80, 0x0}, 0x20000001) write$cgroup_type(r2, &(0x7f0000000080), 0x11ffffce1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r8, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0x82, &(0x7f0000000bc0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) 1m2.581746483s ago: executing program 4 (id=267): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x8, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x30, 0x140c, 0x10, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000780), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x48510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1, 0x10}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x3, 0xffffffffffffffff, 0x2) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000b00)={&(0x7f0000000380)=@can={0x1d, r3}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000400)="ee", 0x1}, {&(0x7f0000000500)="7bbab22f34118eff661dc4c2b83219691d899f", 0x13}, {&(0x7f00000005c0)="63e24f0884a4c5178fe81624d911ddf652fb6f0fd173b1bc587684c071c01332f86154fa81fcdc6391cf5e3ca046e339840fa198453c5f7064bbfe48086b0b0177ce0251e2172c4a9931c3ca3aea760b0428cd58355517222574046706a4440b0342c2317e87270f63776ec1b79fc90b37a9ec4297c79e336bb2d77e70472a304b25b4919a832a75d76c7c79f09cff69eda0677c0e8f056b7e", 0x99}, {&(0x7f0000000680)="4d6ca09efc59da159e25862e125e65008dee06f78026c522a94c74629b5e42a6336018d1de4366f07085ac167f807fa550ac1ec1653beefdda32a84ca1c8bf4f36c1eaddff61c264e0a9c2458c6b7f860cc414b9", 0x54}, {&(0x7f0000000700)="22a41cff7b0c65af4edab73960ca90451377452c217945021750e3ce7e1ac4b95081e524fcac0ed31f03b7ac92274f4a01ea9bd359d33d74f81ba384d1a03434e311631263d5f09304938adf287e01ebd6c15d4ee40bfd0ab792a1708fe2d4385875092a75140b9d407e1d8065c498", 0x6f}, {&(0x7f00000007c0)="31c861906fc221a315d13e2e57feafa6be7b32c1f402caf374cbab831a77c193", 0x20}], 0x6, &(0x7f0000000980)=[{0xc0, 0x0, 0x6eed, "cea0314ac4cbae4632fff44cbb5796452737b8258c0714053a9c0bcd90d425bee3891c4b710cc4f413616a16774229ecff24c5438b717047e3e5fd3279afbf11d8f460e5037078484a257c57b03da3a7a8ab677e20f676eabbeea9e47cfed0f742ad04ed89448ca7c8aef162555ddc87846d3a251ae813f0d7823f4c32a2bb9675ce3fc3f7ca8de955827415e05357e083d1cd157b98cb49116d212775e57987df28921214cbe754ba356b8880"}, {0xc0, 0x1b, 0xffffffff, "997990684e2887a9e9a13bd37232dcbdfd3b20ba5d2b3077525b13d36033a74896d1ed20d7142f34e1b647caa0835180ac82210c021f30a310d7ae4fbb24b3bdfdf26da6c0d1d78bdf890a4f72ffad3fc6fcf868d1f415feb524513628c1a4f0acad674cacbd8c93ac58103ddfcdfe0e5c4dce46008b0c28ab8eff4a0b57590e09c7206bd69cc1fcb89b782e0bb1c31332e986b061dc5ff30c77b237c5e4d3becda91227683ed36d631689b84884fa1b"}], 0x180}, 0x4000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 59.268256835s ago: executing program 4 (id=284): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006c00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x6400, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 50.324392588s ago: executing program 1 (id=304): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x1, 0x2}, 0x1302, 0x2, 0x7, 0x7, 0x4000000020000002, 0x3, 0x6, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001240)={&(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0x40ca800}, 0x1c, 0x0, 0x0, &(0x7f0000000200)}, 0x20044084) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r5 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB='/cpu '], 0x5) r6 = openat$cgroup_int(r1, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB=')'], 0x5) write$cgroup_int(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8910, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000500)=[{0x2d}, {0x40, 0x40}, {0x6, 0xfd, 0x0, 0xfffffffd}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f0000000000), 0x2a979d) 49.56826396s ago: executing program 1 (id=308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000007bfa100000000000007010000f8ffffffb702000008000000b703000000000028850000006b00000095"], &(0x7f0000000440)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) 49.353180084s ago: executing program 1 (id=311): socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x8, 0x4}, 0x40, 0x2, 0xa516, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x8, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002100090308000000ffdbdf2501000000080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601020000000000040000000000000c000780080012400006000010000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a31000000000500010007000000"], 0x54}}, 0x40) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2594f91547f19e", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x9, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x20, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x20050800) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) close(0xffffffffffffffff) r7 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000140), 0x4d) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb}, 0x48) 45.372355083s ago: executing program 1 (id=316): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8fe000000009408000000001700638af0ff00000000bfa900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000000c00000095"], &(0x7f0000005d80)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 45.143226533s ago: executing program 1 (id=320): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbfb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x0, 0x6, 0x3c22, 0x9, 0x7, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffb, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x4000000000000009, 0xaba, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x20e3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000001e953a2c001d227f40c6bc2a42c14974e673b280e7ffc5ed6bab147d392c0ae390ba3864621451231a745a753b2854e4d72b083e68991e73e66d4560773c07a3bf2b6c5c401c8a4b406dcfab45f34339f55baef8d39efbe1e132e72b3d3b93cb82b17f841e"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x29, 0x6, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r6, &(0x7f0000000140), 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x1}, 0x11efa, 0x6a, 0x400099, 0x0, 0x2, 0xfffff26f, 0xfefc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000014, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 44.485952645s ago: executing program 1 (id=326): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x6, 0x0, 0x3, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000200), &(0x7f0000000240)}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1e2e7}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080000}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)=0x10000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xe6, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000300), 0x8, 0x14, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x5, 0x0, @val=@target_btf_id=r4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004080}, 0x8084) 44.039005033s ago: executing program 32 (id=284): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006c00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x6400, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 37.479131378s ago: executing program 2 (id=349): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40009, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x5ea9, 0x0, 0x2, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xd4}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x45) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xff, 0x0, 0xfc, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1fe, 0x2, @perf_bp={0x0, 0x8}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = getpid() r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open$cgroup(&(0x7f00000003c0)={0x6, 0x80, 0x0, 0x7, 0x85, 0x2, 0x0, 0x2, 0x180040, 0xb, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x80000001, 0x6}, 0x0, 0xd8c, 0xd, 0xc, 0x479f, 0xf, 0xe, 0x0, 0x8001, 0x0, 0x4a6}, r2, 0x7, r1, 0x3) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r6], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xff53, 0x0, &(0x7f0000000380)="b88fd8698b791f9cea0efaca8a7ffabf40a1540000c96029998161373610748d37213bed8a8e4f51effc55512a3d645d1d691c04f669e9c78189c8", 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a3, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 36.622617581s ago: executing program 2 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4061c0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x18, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x98803b553eaec7dc}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0x82, 0x1000, &(0x7f0000000140)=""/4096, 0x1e00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001140)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001180)=[{0x5, 0x2, 0x6, 0xc}, {0x5, 0x4, 0x6, 0xb}, {0x4, 0x1, 0x2}, {0x1, 0x4, 0x5, 0x4}, {0x5, 0x3, 0x10, 0xb}, {0x4, 0x1, 0x8}], 0x10, 0x4}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000012c0)=r1) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001300)={'pimreg\x00', @random="9730a8235066"}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000013c0)={{r0, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f0000001380)=r1}, 0x20) fstat(r2, &(0x7f0000001400)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000018c0)={r1, 0xe0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000001640)=[0x0, 0x0, 0x0], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, &(0x7f00000016c0)=[{}], 0x8, 0x10, &(0x7f0000001700), &(0x7f0000001740), 0x8, 0x60, 0x8, 0x8, &(0x7f0000001780)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r1, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc2, &(0x7f0000001a00)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0xaa, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x16, 0x10, &(0x7f0000001480)=@raw=[@exit, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xb}, @jmp={0x5, 0x1, 0x3, 0x9, 0x9, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000001500)='GPL\x00', 0x5, 0xb5, &(0x7f0000001540)=""/181, 0x41000, 0x18, '\x00', r3, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000001900)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, &(0x7f0000001c40)=[r2, r2, r2], 0x0, 0x10, 0x7f}, 0x94) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) mkdir(&(0x7f0000001d40)='./file0\x00', 0x81) (async) socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r8, &(0x7f0000002240)={&(0x7f0000001d80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000001e00)=""/251, 0xfb}, {&(0x7f0000001f00)=""/251, 0xfb}, {&(0x7f0000002000)=""/251, 0xfb}, {&(0x7f0000002100)=""/160, 0xa0}], 0x4, &(0x7f0000002200)=""/51, 0x33}, 0x40001140) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002440)={&(0x7f0000002280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0xb, [@struct={0x1, 0x3, 0x0, 0x4, 0x1, 0x5, [{0xd, 0x3, 0x8}, {0x0, 0x4, 0x43d1}, {0x2, 0x2, 0x4}]}, @union={0x2, 0x2, 0x0, 0x5, 0x0, 0x7, [{0x2, 0x0, 0xac}, {0x2, 0x4, 0x4}]}, @datasec={0x7, 0x8, 0x0, 0xf, 0x3, [{0x8, 0x6, 0xcc}, {0x1, 0x2, 0xf5}, {0x1, 0x8, 0xffffff7f}, {0x2, 0xdd, 0x40}, {0x2, 0xb791, 0x6}, {0x1, 0x9, 0x3}, {0x3, 0xffffffff, 0x3}, {0x2, 0x4, 0xba}], "f307ee"}, @func={0xb, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x2e, 0xba0d545391466f3b, 0x30]}}, &(0x7f0000002380)=""/182, 0xf3, 0xb6, 0x1}, 0x28) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002500)=r4, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002480)=@bloom_filter={0x1e, 0x4, 0xc, 0x273, 0x8000, r2, 0x8, '\x00', r5, r9, 0x0, 0x4, 0x5, 0x9, @value=r10}, 0x50) (async) r12 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002580)=@generic={&(0x7f0000002540)='./file0\x00', 0x0, 0x18}, 0x18) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000002600)={0xfffffc01, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000025c0)={@fallback, r1, 0x1c, 0x2030, 0x0, @void, @void, @value=r13}, 0x20) (async) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002640)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000026c0)={r1, r14, 0xf, 0x0, @val=@kprobe_multi=@addrs={0x64cdf050c0d3d3b1, 0x3, 0x0, &(0x7f0000002680)=[0x1, 0xe, 0x1380], 0x8}}, 0x30) (async) socketpair(0x23, 0x0, 0x5, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NFULNL_MSG_CONFIG(r15, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x28, 0x1, 0x4, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8011) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002940)={@fallback=r14, 0x31, 0x1, 0x4, &(0x7f0000002840)=[0x0], 0x1, 0x0, &(0x7f0000002880), &(0x7f00000028c0)=[0x0, 0x0, 0x0], &(0x7f0000002900)=[0x0, 0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(r16, &(0x7f0000002980)={[{0x2b, 'devices'}, {0x2d, 'blkio'}, {0x0, 'net_prio'}, {0x2b, 'devices'}, {0xba01e5fd2fc193ab, 'hugetlb'}]}, 0x2c) (async) close(r14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002ac0)={@fallback=r12, 0xe, 0x1, 0x23, &(0x7f00000029c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000002a00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r18 = openat$cgroup_netprio_ifpriomap(r16, &(0x7f0000002b40), 0x2, 0x0) (async) r19 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002e40)={0x6, 0x21, &(0x7f0000002b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r16}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @alu={0x4, 0x0, 0xb, 0xf, 0xa, 0x40, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', r5, 0x25, r16, 0x8, &(0x7f0000002d00)={0x0, 0x9}, 0x8, 0x10, &(0x7f0000002d40)={0x0, 0x7, 0xf3, 0xffff55f6}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002d80)=[r2, r16, r11, 0x1, r16, r0], &(0x7f0000002dc0)=[{0x5, 0x3, 0x2, 0x7}, {0x3, 0x4, 0xb, 0x9}, {0x3, 0x4, 0xd, 0xb}, {0x3, 0x1, 0x7, 0x3}, {0x4, 0x2, 0xc, 0x8}, {0x0, 0x5, 0xe, 0x6}, {0x4, 0x1, 0x2, 0x5}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002b00)={@fallback=r18, r7, 0x1b, 0x1, 0xffffffffffffffff, @void, @value=r19, @void, @void, r17}, 0x20) 35.938922633s ago: executing program 2 (id=358): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000001c00)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000001b40)=""/130, 0x82}, 0x40000042) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x4, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x3, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0xf6, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x4, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x941, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x20004, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0xffffffff, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x5, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x3, 0x7}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0xffffffff, 0x7, 0x80000001, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec41, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x12f, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0x4, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x5e9a, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x6, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x4, 0x3, 0x514c, 0xf8a, 0x20019}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14000000100001ff00000000000000000500000a60000000060a010400000000000000000a0000030900010073797a310000000034000480300001800b0001006f626a72656600002000028008000340000000150800013b000000060900020073797a32000000000900020073797a3200000000140000001100010000000000000000000200000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000840) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10022) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) (async) socketpair(0x1, 0x1, 0x0, 0x0) 34.915030486s ago: executing program 2 (id=362): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002940)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018d8f700000000000000000000000000000000000000000000000000000000000002c995c295fa216b6f124b329e6bc12fec92d5f9610fb090a5d8f36b2ae61b99b2746edae650446dd0f1a4ae365cd638f3c44a2cfb4c5de91825848e2d1316ad08dfabc2e76b"], 0x0, 0x26, 0x0, 0x1}, 0x28) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000001ac0)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2000, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x2b}]}, 0x24}], 0x1}, 0x20000000) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x2c, 0x6, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f00000001c0)=r1, 0xa1) (async) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f00000001c0)=r1, 0xa1) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xe, 0x0, &(0x7f0000000100)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async) close(r5) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) 33.707662771s ago: executing program 2 (id=367): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$kcm(0x2, 0x1, 0x84) r0 = getpid() r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000019000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0xb, 0x404, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x3, 0x2, 0x7, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@delqdisc={0x13c, 0x25, 0x9ef879e31000483a, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0xb, 0x8}, {0xfff3, 0x5}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1a}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x33}]}}, @q_dsmark={{0xb}, {0x50, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x60fc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3f}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r5, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e", 0xc}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="e68886dd00000000000000000200", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.633426614s ago: executing program 2 (id=371): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x400a}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x5, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002500)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3728}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002480)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2a3a1, r2, 0x0, &(0x7f00000024c0)=[0x1, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) (async) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x30, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x40004) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r7, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000d00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0xe, 0xfc, &(0x7f0000000b00)=""/252, 0x0, 0x2, '\x00', r11, 0x1b, r12, 0x8, &(0x7f0000000fc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001000)={0x3, 0x4, 0x4, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r13, 0x0, 0x1}, 0x48) (async) perf_event_open(0x0, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000380007ecff000002fed99f25077c00000c00088008000100e0000002"], 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0x8010) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x810) 28.752452584s ago: executing program 33 (id=326): r0 = socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0x1, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x6, 0x0, 0x3, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000200), &(0x7f0000000240)}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0xffffffff, 0x25dfdc02, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1e2e7}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004800) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080000}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40305829, &(0x7f0000000040)=0x10000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0xe6, &(0x7f0000000180), 0x0, 0x10, &(0x7f0000000100), &(0x7f0000000300), 0x8, 0x14, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r3, 0x5, 0x0, @val=@target_btf_id=r4}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x12, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8004080}, 0x8084) 17.237074395s ago: executing program 34 (id=371): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x400a}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) (async, rerun: 64) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x5, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}}, 0x0) (async) sendmsg$NFT_BATCH(r4, 0x0, 0x0) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002500)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3728}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002480)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2a3a1, r2, 0x0, &(0x7f00000024c0)=[0x1, 0x1, r1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) (async, rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) (async) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) (async) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x30, 0x1, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x40004) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r7, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f0000000d00)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) (async) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f80)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@map_fd={0x18, 0x4, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0xe, 0xfc, &(0x7f0000000b00)=""/252, 0x0, 0x2, '\x00', r11, 0x1b, r12, 0x8, &(0x7f0000000fc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001000)={0x3, 0x4, 0x4, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r13, 0x0, 0x1}, 0x48) (async) perf_event_open(0x0, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000380007ecff000002fed99f25077c00000c00088008000100e0000002"], 0x20}, 0x1, 0x0, 0x0, 0x48014}, 0x8010) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x810) 6.410802012s ago: executing program 0 (id=410): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x80108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) (async) socketpair(0x1, 0x805, 0x0, 0x0) (async, rerun: 64) r2 = socket$kcm(0x11, 0x2, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000002740)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000005ff00000000005f1fba6a8c"], 0x0, 0x2b, 0x0, 0x1, 0x3}, 0x28) (async) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) setsockopt$sock_attach_bpf(r3, 0x6, 0x3, &(0x7f0000000080), 0x4) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x40000c4) sendmsg$sock(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="f1", 0x1}], 0x1}, 0x41) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x5, 0x80) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000180001037d80bfe8804d0b662a"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x8854) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x2084) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000500)={'full', 0x20, 0x7, 0x20, 0x400}, 0x2f) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, 0xffffffffffffffff, 0x1a}, 0x14) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x64}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) (async, rerun: 32) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0xfe, 0xff, 0x0, 0x0, 0x10000000009b51, 0x2112, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x3}, 0x4c00, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe3dc}, 0x0, 0x8, 0xffffffffffffffff, 0x1b) (async) socketpair(0x2c, 0x1, 0x1, 0x0) 4.916505613s ago: executing program 0 (id=414): perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0xfffffffffffffffe}, 0x20085, 0x4, 0x20, 0xf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e8a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in=@rand_addr=0x64010100, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}}, 0xf0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x18, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x12, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 4.191989053s ago: executing program 3 (id=416): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3ff, 0x80}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.934859867s ago: executing program 3 (id=417): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0x60, 0x4, {0x8}}]}}]}, 0x3c}}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c40), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000700)) (async) fstat(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f00000008c0)={[{}, {@gid}, {@gid}, {}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}, {}, {}], [{@smackfsdef}]}) (async) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8000, &(0x7f00000008c0)={[{}, {@gid}, {@gid}, {}, {@uid={'uid', 0x3d, r4}}, {@gid={'gid', 0x3d, r5}}, {}, {}], [{@smackfsdef}]}) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7291, 0x3ff}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) (async) r6 = perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x7291, 0x3ff}, 0x0, 0x2, 0x0, 0x0, 0x1}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf}, 0x94) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') (async) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/pid\x00') fstat(r12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000000800)={[{@uid={'uid', 0x3d, r13}}, {@mode={'mode', 0x3d, 0x3a}}]}) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000240)={r9}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000240)={r9}) r16 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000b40), 0x60300, 0x0) sendmsg$unix(r15, &(0x7f0000000c80)={&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x24, 0x1, 0x1, [r12, r7, r11, r10, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @rights={{0x20, 0x1, 0x1, [r15, r9, r6, r9]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r16, r6, r12]}}], 0xf8, 0x40}, 0x10) (async) sendmsg$unix(r15, &(0x7f0000000c80)={&(0x7f0000000380)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x24, 0x1, 0x1, [r12, r7, r11, r10, r8]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r13, r14}}}, @rights={{0x20, 0x1, 0x1, [r15, r9, r6, r9]}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [r16, r6, r12]}}], 0xf8, 0x40}, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000100)) (async) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r5}}, {@gid={'gid', 0x3d, r14}}, {@uid={'uid', 0x3d, r17}}, {@uid={'uid', 0x3d, r18}}, {@mode={'mode', 0x3d, 0xfffffffffffffffb}}], [{@smackfsroot={'smackfsroot', 0x3d, ','}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}]}) (async) mount$bpf(0x0, &(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000200)={[{@gid={'gid', 0x3d, r5}}, {@gid={'gid', 0x3d, r14}}, {@uid={'uid', 0x3d, r17}}, {@uid={'uid', 0x3d, r18}}, {@mode={'mode', 0x3d, 0xfffffffffffffffb}}], [{@smackfsroot={'smackfsroot', 0x3d, ','}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'GPL\x00'}}]}) r19 = socket$inet6_sctp(0xa, 0x1, 0x84) r20 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000003340)={&(0x7f00000003c0)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002b00)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="34000000320000042cbd7000ffdbdf25e6f820657aee29c5c2056e5d64bf192721974bc46b96e05ca70c7e08006600", @ANYRES32, @ANYBLOB="9e2919374689db21576878f7dbfa2ebd14b32b07e49150d707624939385c2c6173be4619fa8a734aa1d6040057b3107b03fdafbdc2841ba6894a6f3a41ed1d1b70dffdc7cb"], 0x34}, {&(0x7f0000000700)={0x1520, 0x3e, 0x2, 0x70bd2c, 0x25dfdbfe, "", [@generic="26812ad1b467c6a1d9b0eb59f0f4b84c9ab40ce8ba24279f08eabfa4d76f0a6421e18c7b57cff9b20f2e09d57c0353fa1dd6932cfc71e5f23d01f977725bd528859cf606e4b4dcbaba186791d3c90759fd57eb0bbf79dc193553722aa1cbe4656645b03155509081ac76b37749faf173236ffcf326da092a4d7611236a5a227c7a4c105c4cc1359995e0fa55ca1bc328c73e81201f6869b89348f00b5c1099b1b1b91c3f4aac436e9710a4b9cf3559d92665a3faeefdff055c38f55626be1dd52e9ce016e3caabdd0760a42852968b70a884d40fae0306a44cfac8cf59d7b0869ea52a4e87f212f918d9face7f9c05a4130651ba32cb2b15", @generic="96d883da361e5032c61cd46f58d3fa04c03641e1f8d960aa00c2c2726684bbfb4605e412c05f6ede601a9c0dbb7edd81a1893a16ff7f017fc8dbc847bdadfb0a515c9967dd8078b5e3c0251d9b42b904142ccd0605ce4779210d6bed30c079a9f8cbf06ffd1eafab584e1e8722ffa8afea454e2e09893ffd44fcff54ee40ade7450a1ae09018f7b9ee359958796e42df", @typed={0x8, 0xb4, 0x0, 0x0, @pid}, @generic="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", @generic="ed8055e3acce544c6d6f1fcfddfa28613d60818ee22e5e6f645b897f03fa00cd284d5bc9fe2cc4baabfb0ebf33db573712976b23556cc652302689cacc8cb0820728a323f5cf73c6fb3292e203b49dafc078f7d7f65c571831366eef5fc4197ab5a7dd2cce02e28a08cb4a3e3aa9a1bc898dc794deb0b7366c7d4e7f500210dc5771b409ed959a70637bab6d17434c7e20780ac699b990d982fe47459bb5353603bf4111f60e74", @nested={0x8c, 0x46, 0x0, 0x1, [@typed={0x8, 0x59, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="3b0ae712e9c74e159126ddad0549de93f60454a417c1922f7b11551590506c1daf9f90afda22288a73c458d3776e89606607f973913b227b75adc97a7777105f8e8aa11eae6993f983eab342d15ffaaf5720aac40857de40fca42f2556e82bf3856a9260a5795e45b16511ce2456f5ec39356b1ede7766c96653375f5fc2d90b"]}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@mcast2}, @nested={0x235, 0xd4, 0x0, 0x1, [@generic="27ae1d473df549300e13cb588f419dfbeb7285832ee0e1f520675dc86a3ba1bd44ee306b13f7bfbb4cbe930f16e8d163187f458efb0887718404f0118cb03e44426c33a8a08d8e221a2d2d4e14965a679157b620a03aad6bea059c51d040b6987b47d18c146450f2f6695f585a4de26abec5da4a159851ed2f462cf77fcae9c010cc6ebc249b7c1d7f3dd73bdac791e3c203b358bfa4687d7b613321ff20127fe761cfca6fc43a530a2d22258d3d0f5fce969b11ab9db146eeb368f4b2d41508bda91507f529a8d0b9", @nested={0x4, 0xfd}, @generic="bc5f4e71e8122c64caeb0d3ed925f9bbda4ffae682790ececc7a99fb4128808a91cd41fe4d9ef580662b78f6f86cb5880205ed88f1d2ab550d8cac997fc83409139981dd9d67fa18363f2e29eea129fcbe94da01a6c412b1b4829b39808988d86f15173f8cf459e7f20c892e9a6a7539a1a0d205a8153b9ec34bd9d7fc7d82de46a804bb74863593", @nested={0x4, 0xc0}, @typed={0x4, 0x44}, @nested={0x4, 0x6}, @typed={0xcd, 0x52, 0x0, 0x0, @binary="5d483e22e2c2b834720d3e9908a3dad178ddbc4eb0db40721354efa60e381ff8949df61cb07433787ae03836c3909ad97dadfb73ebc7d7149116f9fcb3a8fec1feb91eb7bcd84bcbab2f154c730bce398334e7c247daf6fbe18fd6bcfa4978335e3e7d4961559ba78454c672f7e107996feb28038f3aac6b3ed39ea0f8fdf5162a2a34cfd5396959b7285cd5b3e55815e86d3225f7c479991be1bed7d289a12f84551ea590b8077c341df49cdbb156d8c6afbce7662508ae2ced0dd1883e0638f27ae52706284319e8"}]}]}, 0x1520}, {&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000002b00000206000000fedbdf252c00dd800800f800", @ANYRES32=r1, @ANYBLOB="14004400fe8000000000000000000000000000bb08000800050000000400a78008005900", @ANYRES32=r1, @ANYBLOB="0800200064019b02a76b860ea4eaf60c551d2a680036cde14c29772d23516c4f4583076a8611f79692ba04b2dfd9bc42010000670d27a07f4dd5ffef874bbd8d3b6fe5131becbaf97da17418e457e2f5bf2b4bba4f668e7870824bb0fb"], 0x4c}, {&(0x7f0000001e80)={0x302, 0x2d, 0x300, 0x70bd2c, 0x25dfdbfd, "", [@generic="c677a3aa1b88da497dee145ff1a8b3a8b6a70a1d2054dd9f8e8f83deb22f4af54cd9dc22888c82a82e4d35f96952a6e9ffee6b1b9294f8cb8973e1cb2f047615e98023525fabfe10e6b0997b6deb5b6f7ebf6c646a71de94bcb0451fd55101e97924d1e5929ac0eb3b15a4e7b8b38709b1782ffa459310ab8ba1139736143b412dfded2a344b8042d5d6feec1fcfb07589015da96c8aee9f780065955624026c78b5e0d84cd4d24ac7dc368e8742181f362e35d21a859b56602f89379f419df0b6b67ef97e39b417519f57ce819f2f07f8", @nested={0x1bd, 0xca, 0x0, 0x1, [@nested={0x4, 0x10d}, @typed={0x8, 0x98, 0x0, 0x0, @pid}, @typed={0x18, 0x143, 0x0, 0x0, @binary="f6c919d7ad4ccb0e60c0a89a2eda654617a0e95b"}, @nested={0x4, 0x27}, @nested={0x4, 0x2}, @generic="2e0b9756acb827d1b1e015cdb79aff70b209eb76dad5a781f41b9dc6a051c01eb294cb9a60c1d19bce9ad84c7986ff16fd8f1911b7ad3d95d3043502e8d96dbc582347e52c9956e3ff70d65561d6aee8265f486d274cc728b2be80a6566cf601b62d7cd95b18f380fdccc0ff32abf148eb8b3205d172e2befbc2af085d8ae6178983dc78795b89a415c6b7a378584ad03e249d02a69f5134f168e20ce7be808f7b4ba45ed4531183017a51edfd56c77b6d1525120fae5396959976b2a27dff1f", @nested={0x4, 0x102}, @typed={0x8, 0x131, 0x0, 0x0, @fd=r0}, @generic="aca5cab30f51353abc533fa4e0a7e438e2eda5663272870bcde849529734d9be08d99127055f7b4946cbc302521ccedf62c611d49b0cf7ce4aa8fc0ace712a5f12a534eee2fc2cc62fe233e81a401c64d71d2ebddf9ff7ffeb00619dc1253cdcba4bbf966a0e5e1ede35cb65a6325a065c5dcbd485821ee8eb4550197fbbaec66a987fbf998f8526622f962d6a858e97fc0240cfe40f5dc0ed2406a25c460fdc8cefcd047756cf847bb8ef86959ef6f690aab3709f8e1ec3df8c8f0fb70f92f41a"]}, @typed={0x8, 0xb5, 0x0, 0x0, @ipv4=@multicast1}]}, 0x2ac}, {&(0x7f0000002bc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="fed683242b49f39564a9477c5ae052b45d130b1442e3659f9a19cde1b162f3b8ae0701ca17dc797a2cbf7a7cf97c7ef84e2febca6ec92e2482fbafe0a583f3d97c754f30f8dbaa4cd57f09a65fc690b3ad2a42c05536bcd7f0b64cfc566c87522cfd8b6492f87b7250edca6268fa90c1e80d0122611216be85ba4beee3993b64d58bb04f2bb9b6922d1200bc3bb4d2bbe12abd7911ee920a4c47f498faa85922409ef027382accf773ccfdbc501e2fcfb5349ea39721a3ffe0d8c83ff29eb2636dc3577d8f0cb00e7ed89f3e3827ca4ab8b89a0152ea23aa87cfeab2a7cc3ed1552e7cb72d0000000d3d4dbcb7a7a46d0900000000000000b602bf9ae3b1065563a42f09a175404d5fa3a727cb2247789ee84584181af4a281c6780dedfa3c74bb4a47682bb26458120efd9f1451fdf583bd6e531eb6eaac83fe7f920be3d4f3555042fb7d31bbb5bbb9216cbd531eafbffb55b2ada701f416e90ea490e890bc004000422d99eb2d0142a2692ba72d251453e2b8fbf4e2b02a038d3f84044e46ab9074056c09bf6b17af496f617c87daa24c076fe6687ef597d550c2145406c9910c239c42eb770bc5e9baf9276b46b9a6cd2922f9efa3acdb182e6c5922cb89546c2989de5a6bb9c3711993442302e2ad5ec15d8cac003b56bed7e06e678727e099eb80d6484d2f5ea59b98b7027545ce916d4f52a4c7b9cdad22030b310200000000000000a9c7ef567c551e3798870f64784410000000009050617f99ad2a272931bb7071e7a573578b1999c61c77061925e73d75d3e40ab74f27b99c6636853a1d5528e83472ef600c0c9e9f83ad864c1813a450fee1ab777a7c8cef139564fd371401be72b132bad33e38184c421ac1f79b70984897970a68926ca80b1cf3049d8df46cb090f6db7197302d6cd8f5d652a70f02c25e7ee8bb2c9f52be3760af9a1c2b991a653299731842f10ac498385ecb599e04c553efd0219461b4540cd0781a7ed6093524b3bbd8b0adfd79418317a785d5421217ecc44306792a85b55a4f2085474241822d400c08f2f325e610d33bf9cf15d6f9eea49b8b7dbfb8a509672eda19e6d3a7bbe4001f1ca7e35eae5539ffd224d804a30c755a4620b591bb101a986ca631d847795731056587cabaf82bae7ea818bab462c09a6875b7cfdfcf82ebb58bcc2bf090273527d100000000"], 0x444}, {&(0x7f0000002640)={0xe8, 0x1a, 0x2, 0x70bd2c, 0x25dfdbfb, "", [@generic="82af877d708804eec5de5329609ae74e0592088e0fa8a7c71ebb48bdeafcf5d2bcf5d41cf51dd4b62f8e9aa764f8e3d233c76f612ac4adb7832d300f4e81936bbe9b37f25f219b19de44c288d90dcf82a213e233aa31d57e8d64890cb3f7555753454fa6831d012f60f508a5", @typed={0x5b, 0x107, 0x0, 0x0, @binary="520cefc3e03a04886bd5bc53e252d0bd1f0c642f01023ca2456aa414b34ac5b5e718195bf355e4b2f3d7b6b4cf2ab7a9d00e74f219d007da7eb7ca242eee25c6eaf2ffdb8146035b422f0c63ce7fffb284953e75a04867"}, @typed={0x8, 0x49, 0x0, 0x0, @pid}, @typed={0x8, 0x98, 0x0, 0x0, @uid}]}, 0xe8}, {&(0x7f0000000480)=ANY=[@ANYBLOB="18000000410010002abd7000fbdbdf2508005e007f000001d1f40c86961e6a30ac6cec284a17b06039697b15d583c1fbbdeffef20f5d7518f2b5188ce89504d46daac68b821a4a23a30563b3ab36743e75b85a20e4"], 0x18}, {&(0x7f0000002800)={0x8c, 0x1a, 0x200, 0x70bd29, 0x25dfdbfd, "", [@nested={0x20, 0xa, 0x0, 0x1, [@typed={0x8, 0xb3, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x102}, @typed={0xc, 0x2f, 0x0, 0x0, @u64=0xe}, @nested={0x4, 0x6b}]}, @typed={0x6, 0xae, 0x0, 0x0, @str=')\x00'}, @nested={0x52, 0x68, 0x0, 0x1, [@generic="4cb7a6bc6673712a2dd1c64c30e984f76c263e132c0dc0d21cb79ca4d9c717cb60eca8bea18843122e3cd48252fa", @nested={0x4, 0xd3}, @nested={0x4, 0xf3}, @nested={0x4, 0x72}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x1607a53a}, @typed={0x8, 0x14b, 0x0, 0x0, @uid}, @nested={0x4, 0x20}]}]}, 0x8c}, {&(0x7f0000002940)={0x1c0, 0x20, 0x0, 0x70bd25, 0x25dfdbfb, "", [@nested={0xb1, 0x14b, 0x0, 0x1, [@generic="12d627a1217b50fa9d8e33a160a70d1b6a861e899517c370817f7ad017dee02b87f2aeb34bacb191c481f8d2f574fac64122110be61aeb1766022aa687039a54272564faa778ca3d38cbf1bde3c6f8287327fe4f8b051ad1d4b169b9d51d5c7b168a0df5cc378103834ec4794a02efeefb", @nested={0x4, 0x3e}, @typed={0x8, 0x2f, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x106}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@private1}, @typed={0x8, 0x93, 0x0, 0x0, @uid}, @typed={0x8, 0x11, 0x0, 0x0, @u32=0x6}, @typed={0x8, 0x101, 0x0, 0x0, @uid}]}, @nested={0x7f, 0x11d, 0x0, 0x1, [@generic="a4a388ad2951db34224b4b8ea923e714c86e911eb5ab476debc99c", @nested={0x4, 0xd8}, @generic="9171bc1a84146ef379c6583311a6648c744c5f0cab87292c664804329e2fc6583bd61a08af3695588ab4bc72524b28f9db7d6133aa655d3887dd2d03d517a199766b2d8f5cf3910fe2fad72e36978b1640b2fbf2993dc4dbc7f6e11c"]}, @nested={0x8, 0xd1, 0x0, 0x1, [@nested={0x4, 0x157}]}, @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@remote}, @generic="354a447f6c50fa258cb3333af0845da5da83096fb08899ef3d4da3b55a76cc7144eff35f10358adb557d907b86a9afee8f5c3b7c6f1484a01a5efa84b9df57ffadf1b3cc50fa97f0c60825be92c217ecc62b2d2f83", @typed={0x8, 0x12e, 0x0, 0x0, @fd=r0}]}, 0x1c0}], 0x9, &(0x7f0000003240)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r5}}}, @rights={{0x24, 0x1, 0x1, [r19, r0, r20, r2, r2]}}], 0xe0, 0x10000014}, 0x85) r21 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r21, &(0x7f0000000380)={&(0x7f0000000040)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)="871d638a855bde4f9428abb64f7b021bb55aaa2fa5c1dc2a0787385406bf90903a1da5f6c4b1536d435f0d45e6725c771aac632423d8b894caa9045dbe01709292d0e69ea5d349", 0x47}], 0x1, &(0x7f0000000280)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x100000000}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @timestamping={{0x14, 0x1, 0x25, 0x7fffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xce6c}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xf0}, 0x2000010) 3.703649112s ago: executing program 0 (id=418): bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) close(0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0xa, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90f24fc60", 0x8c0}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r4, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x8, 0x0, 0x0) socket$kcm(0x2c, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={0x30, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x9, 0x3d, 0x0, 0x1, [@generic="dfffffffff"]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @fd}]}, 0x30}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.871042784s ago: executing program 3 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0100000003"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.237916397s ago: executing program 0 (id=420): r0 = perf_event_open$cgroup(&(0x7f00000000c0)={0x4, 0x80, 0xd, 0x9, 0x9, 0x3, 0x0, 0x8000, 0x2020, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6671, 0x0, @perf_config_ext={0x9, 0xac7}, 0x4349, 0xd90, 0x8, 0x3, 0x10, 0x1, 0x6, 0x0, 0xfffeffff, 0x0, 0xfffffffffffffff7}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0xffac, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2010, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000000000010000}, 0x0, 0xffffffffffffffff, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580), 0x10000008}, 0x40001) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xd, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x4880, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x8915, 0x0, 0xc, 0x1, 0x3fe, 0x6e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, @perf_bp={0x0, 0x4}, 0x814, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0x3) socket$kcm(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x6}, {0x0, [0x61, 0x5f, 0x2e, 0x6f]}}, &(0x7f0000000700)=""/5, 0x1e, 0x5, 0x1, 0x9, 0x10000, @value=r4}, 0x28) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) sendmsg$inet6(r3, &(0x7f0000000240)={&(0x7f0000000180)={0xa, 0x4e23, 0x1, @empty, 0x38a}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000280)="80004b77efe55463", 0x8}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES32=r2], 0x30}, 0x4) 1.478753855s ago: executing program 0 (id=421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000020000000000000005000100180100002020752500000000002020207b1af8ff00000000bfa1000000000000070100000400ffffb702000008000040b70300000080f1ff850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0xe, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) 1.352465392s ago: executing program 3 (id=422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x200, 0x70bd28, 0x3, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffe0}, {0x1, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_ext={0x1c, 0x8, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffff80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f00000003c0)='GPL\x00', 0x1edf, 0xa2, &(0x7f0000000440)=""/162, 0x40f00, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x8, 0x1, 0x1}, 0x10, 0x100fd, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1]}, 0x94) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00'}, 0x18) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={&(0x7f0000000000), 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x150, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x60, 0x14, {{'hmac(sha1)\x00'}, 0xa0, 0xa0, '01234567890123456789'}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f00000006c0)={&(0x7f0000000000), 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newpolicy={0xfc, 0x13, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r5 = gettid() fstat(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000340)="d2ff03076003008cb89e08f088a8ef7986ddae5c389016a09c784a2261e7f6f5db4c0e5b6a3883c9", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r9, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x41ce4feb40080ab4, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x8000}}, {@gid}, {@uid={'uid', 0x3d, r10}}, {@gid={'gid', 0x3d, r11}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, 'GPL\x00'}}, {@subj_role={'subj_role', 0x3d, '\xd6]\\['}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@euid_lt={'euid<', r12}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@permit_directio}, {@seclabel}]}) r13 = getpid() fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x41ce4feb40080ab4, &(0x7f0000000440)={[{@mode={'mode', 0x3d, 0x8000}}, {@gid={'gid', 0x3d, r15}}, {@uid={'uid', 0x3d, r16}}, {@gid={'gid', 0x3d, r17}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@obj_role={'obj_role', 0x3d, 'GPL\x00'}}, {@subj_role={'subj_role', 0x3d, '\xd6]\\['}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'GPL\x00'}}, {@uid_eq={'uid', 0x3d, 0xee01}}, {@euid_lt={'euid<', r18}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@permit_directio}, {@seclabel}]}) sendmsg$netlink(r0, &(0x7f0000000980)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc, &(0x7f0000000340)=[{&(0x7f0000000140)={0x1fc, 0x38, 0x2, 0x70bd27, 0x25dfdbfd, "", [@nested={0xcb, 0x79, 0x0, 0x1, [@typed={0x8, 0x153, 0x0, 0x0, @fd=r0}, @generic="41ae2dbc02d38057f7686a946a978518474195e2ca5c458603002d6447cc50871685827085c5055bc2f2176eb7e51599c601386586286f689ffe53a90c081a49bcb74dce1e6dcdb73bff4c563f5f35914abb04e12c44967dc19b4bf61ce98e17375f9949ad793067f36bee44e3fdd4a8aecb28a68049742547024a95f52e300244642c588e41b1c86347fba2ba25efe3f98d6ca7bea2295ae5b4661e49d664ba23f0fbe920926c0fb6f019828ec3408dd47e15f9f03e744c625cbb24471c97"]}, @nested={0x11d, 0x16b, 0x0, 0x1, [@generic="8f9b24d5ad6fdbfea2dcb0784dd5ba7b", @generic="9b5a477046401073f033", @generic="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"]}]}, 0x1fc}], 0x1, &(0x7f00000008c0)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x20, 0x1, 0x1, [r0, r3, r4, r0]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r11}}}, @cred={{0x1c, 0x1, 0x2, {r13, 0xffffffffffffffff, r14}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r15}}}], 0xb8, 0x81}, 0x20008005) 1.15490763s ago: executing program 0 (id=423): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) openat$cgroup(r0, 0x0, 0x200002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x1200, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x80108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x1, @perf_bp={&(0x7f00000000c0), 0xe}, 0x0, 0x2, 0xfffffffe, 0x8, 0x2, 0x3, 0x873f, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair(0x1, 0x805, 0x0, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000002740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@union={0x5, 0x0, 0x0, 0x5, 0x0, 0xff}]}, {0x0, [0x0, 0x5f, 0x1f, 0x0, 0x2e]}}, 0x0, 0x2b, 0x0, 0x1, 0x3}, 0x28) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300068c1) setsockopt$sock_attach_bpf(r5, 0x6, 0x3, &(0x7f0000000080), 0x4) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4050}, 0x40000c4) sendmsg$sock(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="f1", 0x1}], 0x1}, 0x41) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket(0xf, 0x5, 0x80) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000180001037d80bfe8804d0b662a"], 0x14}, 0x1, 0x0, 0x0, 0x45}, 0x8854) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x3, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x2084) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x1, 0x3fe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x3ff}, 0x10410, 0x0, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x64}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90) 851.358159ms ago: executing program 3 (id=424): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x3ff, 0x80}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) 0s ago: executing program 3 (id=425): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/169, 0xa9}, {&(0x7f0000001c40)=""/4151, 0x1037}, {&(0x7f0000000140)=""/156, 0x9c}, {&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000000)=""/19, 0x13}], 0x5}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffffffb}, 0x8, 0x80000000, 0x0, 0x7, 0x6, 0xa6e6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = getpid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, &(0x7f00000004c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0xc, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r10, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000700)="b7452a308aed7eb495fe5dc48cc5595c4a9b8f529ed5c23a2452ad8e", 0x1c}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x37}, @private=0xa010102}}}], 0x20}, 0x400c804) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e160602000000000e000a000d000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x2400}, 0x4000814) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 78.707254][ T5602] cgroup: Unknown subsys name 'net' [ 78.798171][ T5602] cgroup: Unknown subsys name 'cpuset' [ 78.807176][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.558623][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.977084][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.985343][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.986535][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.987701][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.987979][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.989119][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.989445][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.990150][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.991043][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.002408][ T5634] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.003315][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.003708][ T5633] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.003759][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.005780][ T5634] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.014254][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.014413][ T5633] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.019415][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.021541][ T5633] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.021613][ T5634] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.024637][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.026404][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.032727][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.041611][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.076816][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.078618][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.046591][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.054192][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.054685][ T5622] bridge_slave_0: entered allmulticast mode [ 85.061642][ T5622] bridge_slave_0: entered promiscuous mode [ 85.071297][ T5629] Bluetooth: hci4: command tx timeout [ 85.118794][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.124794][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.125268][ T5622] bridge_slave_1: entered allmulticast mode [ 85.130425][ T5622] bridge_slave_1: entered promiscuous mode [ 85.144325][ T5629] Bluetooth: hci0: command tx timeout [ 85.144819][ T5629] Bluetooth: hci1: command tx timeout [ 85.145268][ T5619] Bluetooth: hci3: command tx timeout [ 85.224468][ T5619] Bluetooth: hci2: command tx timeout [ 85.237136][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.237413][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.237828][ T5613] bridge_slave_0: entered allmulticast mode [ 85.243010][ T5613] bridge_slave_0: entered promiscuous mode [ 85.303401][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.303831][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.304559][ T5613] bridge_slave_1: entered allmulticast mode [ 85.309856][ T5613] bridge_slave_1: entered promiscuous mode [ 85.344485][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.344720][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.345115][ T5615] bridge_slave_0: entered allmulticast mode [ 85.350184][ T5615] bridge_slave_0: entered promiscuous mode [ 85.366041][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.416049][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.416846][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.417236][ T5615] bridge_slave_1: entered allmulticast mode [ 85.423175][ T5615] bridge_slave_1: entered promiscuous mode [ 85.441382][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.459457][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.507883][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.581391][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.584753][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.585130][ T5616] bridge_slave_0: entered allmulticast mode [ 85.590059][ T5616] bridge_slave_0: entered promiscuous mode [ 85.600709][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.600974][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.601344][ T5616] bridge_slave_1: entered allmulticast mode [ 85.603371][ T5616] bridge_slave_1: entered promiscuous mode [ 85.641500][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.652382][ T5622] team0: Port device team_slave_0 added [ 85.670721][ T5613] team0: Port device team_slave_0 added [ 85.701469][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.709645][ T5622] team0: Port device team_slave_1 added [ 85.710243][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.711035][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.711462][ T5614] bridge_slave_0: entered allmulticast mode [ 85.718317][ T5614] bridge_slave_0: entered promiscuous mode [ 85.738430][ T5613] team0: Port device team_slave_1 added [ 85.747854][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.778134][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.778416][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.778812][ T5614] bridge_slave_1: entered allmulticast mode [ 85.795634][ T5614] bridge_slave_1: entered promiscuous mode [ 85.816931][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.885811][ T5615] team0: Port device team_slave_0 added [ 85.891099][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.891129][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.891202][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.939364][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.940060][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.940135][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.992641][ T5615] team0: Port device team_slave_1 added [ 85.998413][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.998430][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.998498][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.050789][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.057322][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.057364][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.057437][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.103889][ T5616] team0: Port device team_slave_0 added [ 86.135333][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.135382][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.135409][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.147637][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.160584][ T5616] team0: Port device team_slave_1 added [ 86.209520][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.209557][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.209611][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.299234][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.299281][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.299323][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.376357][ T5614] team0: Port device team_slave_0 added [ 86.388026][ T5622] hsr_slave_0: entered promiscuous mode [ 86.391154][ T5622] hsr_slave_1: entered promiscuous mode [ 86.399945][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.399961][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.399988][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.427944][ T5613] hsr_slave_0: entered promiscuous mode [ 86.430937][ T5613] hsr_slave_1: entered promiscuous mode [ 86.433473][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 86.433709][ T5613] Cannot create hsr debugfs directory [ 86.451062][ T5614] team0: Port device team_slave_1 added [ 86.529640][ T5615] hsr_slave_0: entered promiscuous mode [ 86.532340][ T5615] hsr_slave_1: entered promiscuous mode [ 86.535829][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 86.535852][ T5615] Cannot create hsr debugfs directory [ 86.560794][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.568698][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.568723][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.580411][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.580463][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.580537][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.801745][ T5616] hsr_slave_0: entered promiscuous mode [ 86.807285][ T5616] hsr_slave_1: entered promiscuous mode [ 86.809007][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 86.809075][ T5616] Cannot create hsr debugfs directory [ 86.901514][ T5614] hsr_slave_0: entered promiscuous mode [ 86.907299][ T5614] hsr_slave_1: entered promiscuous mode [ 86.908042][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 86.908064][ T5614] Cannot create hsr debugfs directory [ 87.144754][ T5619] Bluetooth: hci4: command tx timeout [ 87.234566][ T5619] Bluetooth: hci3: command tx timeout [ 87.234795][ T5619] Bluetooth: hci1: command tx timeout [ 87.234897][ T5619] Bluetooth: hci0: command tx timeout [ 87.304885][ T5629] Bluetooth: hci2: command tx timeout [ 87.510276][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.529508][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.538033][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.550173][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.558955][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.569979][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.588438][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.599639][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.665709][ T5622] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.678186][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.693607][ T5622] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.703409][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.707397][ T5622] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.720959][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.734815][ T5622] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.744124][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.831789][ T5615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.848349][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.856989][ T5615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.868832][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.883037][ T5615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.897353][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.913562][ T5615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.925419][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.041067][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.053558][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.071158][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.078546][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.089367][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.108432][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.118722][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.144962][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.155931][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.237405][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.271772][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.272186][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.309199][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.319550][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.328777][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.328891][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.353730][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.368037][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.387223][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.398496][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.413168][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.423083][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.472288][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.503024][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.568238][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.593349][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.605736][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.605840][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.653100][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.653599][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.670809][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.671105][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.727690][ T247] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.727936][ T247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.763477][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.892829][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.953005][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.953135][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.995673][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.995806][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.046065][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.158958][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.220796][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.221090][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.228250][ T5629] Bluetooth: hci4: command tx timeout [ 89.250554][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.250697][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.305915][ T5619] Bluetooth: hci1: command tx timeout [ 89.305967][ T5619] Bluetooth: hci3: command tx timeout [ 89.311579][ T5629] Bluetooth: hci0: command tx timeout [ 89.384149][ T5629] Bluetooth: hci2: command tx timeout [ 89.481562][ T5614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.989999][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.231610][ T5613] veth0_vlan: entered promiscuous mode [ 90.277154][ T5613] veth1_vlan: entered promiscuous mode [ 90.342317][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.450125][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.482880][ T5613] veth0_macvtap: entered promiscuous mode [ 90.537218][ T5613] veth1_macvtap: entered promiscuous mode [ 90.577538][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.631918][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.663812][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.748419][ T247] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.749460][ T1108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.749583][ T1108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.749676][ T1108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.796679][ T5616] veth0_vlan: entered promiscuous mode [ 90.864778][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.891390][ T5616] veth1_vlan: entered promiscuous mode [ 90.957012][ T5615] veth0_vlan: entered promiscuous mode [ 91.022485][ T5615] veth1_vlan: entered promiscuous mode [ 91.061662][ T247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.061714][ T247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.087098][ T5616] veth0_macvtap: entered promiscuous mode [ 91.126931][ T5616] veth1_macvtap: entered promiscuous mode [ 91.148461][ T5614] veth0_vlan: entered promiscuous mode [ 91.199931][ T5614] veth1_vlan: entered promiscuous mode [ 91.206951][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.218056][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.228403][ T5615] veth0_macvtap: entered promiscuous mode [ 91.237662][ T5615] veth1_macvtap: entered promiscuous mode [ 91.256526][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.304252][ T5629] Bluetooth: hci4: command tx timeout [ 91.312732][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.347425][ T5613] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.368775][ T5622] veth0_vlan: entered promiscuous mode [ 91.375429][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.375499][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.396263][ T52] Bluetooth: hci3: command tx timeout [ 91.396312][ T52] Bluetooth: hci1: command tx timeout [ 91.396405][ T5629] Bluetooth: hci0: command tx timeout [ 91.438733][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.457432][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.476004][ T5629] Bluetooth: hci2: command tx timeout [ 91.488912][ T5622] veth1_vlan: entered promiscuous mode [ 91.510250][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.544828][ T5815] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4'. [ 91.568784][ T5614] veth0_macvtap: entered promiscuous mode [ 91.635093][ T5614] veth1_macvtap: entered promiscuous mode [ 91.698331][ T5818] netlink: 'syz.3.6': attribute type 21 has an invalid length. [ 91.736021][ T5818] netlink: 'syz.3.6': attribute type 19 has an invalid length. [ 91.736062][ T5818] netlink: 'syz.3.6': attribute type 28 has an invalid length. [ 91.737117][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 91.767133][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.777601][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.827853][ T5622] veth0_macvtap: entered promiscuous mode [ 91.870485][ T25] cfg80211: failed to load regulatory.db [ 91.905666][ T5821] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7'. [ 91.928317][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.960273][ T5622] veth1_macvtap: entered promiscuous mode [ 92.003834][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.003877][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.033419][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.119042][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.121095][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.121264][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.121410][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.130081][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.130135][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.153385][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.230711][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.315841][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.317343][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.317484][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.317604][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.317700][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.328261][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.328315][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.535847][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.536778][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.658642][ T1108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.715504][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.739629][ T5831] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 92.863870][ T5831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9'. [ 92.930107][ T5831] openvswitch: netlink: Flow key attr not present in new flow. [ 93.143864][ T5831] netlink: 80 bytes leftover after parsing attributes in process `syz.3.9'. [ 93.203292][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.203356][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.481258][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.481306][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.522650][ T5835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.667219][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.667277][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.754548][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.754598][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.841489][ T5835] syz.0.1 (5835) used greatest stack depth: 18088 bytes left [ 93.912838][ T5840] syz.2.10: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 93.913161][ T5840] CPU: 1 UID: 0 PID: 5840 Comm: syz.2.10 Not tainted syzkaller #0 PREEMPT(full) [ 93.913188][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.913207][ T5840] Call Trace: [ 93.913221][ T5840] [ 93.913231][ T5840] dump_stack_lvl+0xe8/0x150 [ 93.913276][ T5840] warn_alloc+0x24d/0x270 [ 93.913302][ T5840] ? kasan_save_track+0x4f/0x80 [ 93.913326][ T5840] ? kasan_save_track+0x3e/0x80 [ 93.913354][ T5840] ? __pfx_warn_alloc+0x10/0x10 [ 93.913374][ T5840] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 93.913402][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.913446][ T5840] __vmalloc_node_range_noprof+0x127/0x1540 [ 93.913507][ T5840] ? rcu_is_watching+0x16/0xb0 [ 93.913541][ T5840] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 93.913576][ T5840] ? __kmalloc_cache_noprof+0x321/0x600 [ 93.913600][ T5840] ? __kmalloc_cache_noprof+0x14d/0x600 [ 93.913622][ T5840] ? xskq_create+0x56/0x220 [ 93.913662][ T5840] xskq_create+0x148/0x220 [ 93.913697][ T5840] ? xsk_init_queue+0x8a/0xe0 [ 93.913737][ T5840] xsk_init_queue+0x8a/0xe0 [ 93.913773][ T5840] xsk_setsockopt+0x5e0/0x960 [ 93.913809][ T5840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 93.913842][ T5840] ? __pfx_aa_sk_perm+0x10/0x10 [ 93.913872][ T5840] ? aa_sock_opt_perm+0x142/0x1e0 [ 93.913903][ T5840] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 93.913930][ T5840] ? __pfx_xsk_setsockopt+0x10/0x10 [ 93.913962][ T5840] do_sock_setsockopt+0x17c/0x1b0 [ 93.913993][ T5840] __x64_sys_setsockopt+0x13d/0x1b0 [ 93.914027][ T5840] do_syscall_64+0x166/0x520 [ 93.914050][ T5840] ? trace_irq_disable+0x3b/0x140 [ 93.914072][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.914095][ T5840] ? clear_bhb_loop+0x70/0xc0 [ 93.914131][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.914155][ T5840] RIP: 0033:0x7fc3f179e159 [ 93.914188][ T5840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.914208][ T5840] RSP: 002b:00007fc3f2730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 93.914233][ T5840] RAX: ffffffffffffffda RBX: 00007fc3f1a26090 RCX: 00007fc3f179e159 [ 93.914250][ T5840] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000012 [ 93.914265][ T5840] RBP: 00007fc3f183506b R08: 0000000000000004 R09: 0000000000000000 [ 93.914279][ T5840] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 93.914294][ T5840] R13: 00007fc3f1a26128 R14: 00007fc3f1a26090 R15: 00007ffe37e9e948 [ 93.914331][ T5840] [ 94.004965][ T5840] Mem-Info: [ 94.005016][ T5840] active_anon:5313 inactive_anon:0 isolated_anon:0 [ 94.005016][ T5840] active_file:0 inactive_file:41816 isolated_file:0 [ 94.005016][ T5840] unevictable:0 dirty:1511 writeback:0 [ 94.005016][ T5840] slab_reclaimable:10081 slab_unreclaimable:92260 [ 94.005016][ T5840] mapped:29073 shmem:520 pagetables:1034 [ 94.005016][ T5840] sec_pagetables:0 bounce:0 [ 94.005016][ T5840] kernel_misc_reclaimable:0 [ 94.005016][ T5840] free:1331898 free_pcp:17866 free_cma:0 [ 94.005180][ T5840] Node 0 active_anon:21252kB inactive_anon:0kB active_file:0kB inactive_file:167060kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116292kB dirty:6028kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11804kB pagetables:3968kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 94.005379][ T5840] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 94.005538][ T5840] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.005603][ T5840] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 94.005647][ T5840] Node 0 DMA32 free:1371200kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21252kB inactive_anon:0kB active_file:0kB inactive_file:167060kB unevictable:0kB writepending:6028kB zspages:0kB present:3129332kB managed:2546664kB mlocked:0kB bounce:0kB free_pcp:71460kB local_pcp:45192kB free_cma:0kB [ 94.005712][ T5840] lowmem_reserve[]: 0 0 0 0 0 [ 94.005753][ T5840] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.005812][ T5840] lowmem_reserve[]: 0 0 0 0 0 [ 94.005852][ T5840] Node 1 Normal free:3941032kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:16kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 94.005914][ T5840] lowmem_reserve[]: 0 0 0 0 0 [ 94.031446][ T5840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 94.032020][ T5840] Node 0 DMA32: 912*4kB (UM) 145*8kB (UM) 10*16kB (UME) 8*32kB (ME) 3*64kB (ME) 3*128kB (UM) 5*256kB (UME) 4*512kB (ME) 4*1024kB (ME) 5*2048kB (UME) 329*4096kB (M) = 1371048kB [ 94.032545][ T5840] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 94.032862][ T5840] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 2*16kB (UM) 7*32kB (UM) 8*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (M) = 3941032kB [ 94.082491][ T5840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.082553][ T5840] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.082610][ T5840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 94.082662][ T5840] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 94.082706][ T5840] 42338 total pagecache pages [ 94.082736][ T5840] 0 pages in swap cache [ 94.082757][ T5840] Free swap = 124996kB [ 94.082779][ T5840] Total swap = 124996kB [ 94.082810][ T5840] 2097051 pages RAM [ 94.082838][ T5840] 0 pages HighMem/MovableOnly [ 94.082859][ T5840] 428769 pages reserved [ 94.082887][ T5840] 0 pages cma reserved [ 95.236065][ T5842] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11'. [ 95.522117][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 95.645914][ T5869] Zero length message leads to an empty skb [ 95.689726][ T5871] netlink: 48 bytes leftover after parsing attributes in process `syz.3.16'. [ 95.721479][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 96.841227][ T5894] netlink: 'syz.1.22': attribute type 16 has an invalid length. [ 96.841536][ T5894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.22'. [ 96.939199][ T5897] ======================================================= [ 96.939199][ T5897] WARNING: The mand mount option has been deprecated and [ 96.939199][ T5897] and is ignored by this kernel. Remove the mand [ 96.939199][ T5897] option from the mount to silence this warning. [ 96.939199][ T5897] ======================================================= [ 97.904600][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.29'. [ 98.076955][ T5917] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 98.146447][ T5917] veth1_virt_wifi: entered promiscuous mode [ 98.325307][ T5925] nbd: socks must be embedded in a SOCK_ITEM attr [ 99.310100][ T5949] netlink: 'syz.2.35': attribute type 2 has an invalid length. [ 99.328251][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.37'. [ 99.372520][ T5951] dummy1: entered allmulticast mode [ 99.396489][ T5953] FAULT_INJECTION: forcing a failure. [ 99.396489][ T5953] name failslab, interval 1, probability 0, space 0, times 1 [ 99.396541][ T5953] CPU: 1 UID: 0 PID: 5953 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(full) [ 99.396565][ T5953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.396577][ T5953] Call Trace: [ 99.396584][ T5953] [ 99.396594][ T5953] dump_stack_lvl+0xe8/0x150 [ 99.396630][ T5953] should_fail_ex+0x410/0x560 [ 99.396667][ T5953] should_failslab+0xa8/0x100 [ 99.396694][ T5953] ? skb_clone+0x212/0x3a0 [ 99.396722][ T5953] kmem_cache_alloc_noprof+0xa1/0x600 [ 99.396803][ T5953] ? skb_clone+0x212/0x3a0 [ 99.396926][ T5953] skb_clone+0x212/0x3a0 [ 99.397048][ T5953] __netlink_deliver_tap+0x413/0x860 [ 99.397180][ T5953] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.397256][ T5953] netlink_deliver_tap+0x19c/0x1b0 [ 99.397338][ T5953] netlink_sendskb+0x68/0x140 [ 99.397414][ T5953] nfnetlink_rcv+0x260c/0x28c0 [ 99.397577][ T5953] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 99.397687][ T5953] ? ref_tracker_free+0x689/0x830 [ 99.397813][ T5953] ? skb_clone+0x246/0x3a0 [ 99.397889][ T5953] ? __netlink_deliver_tap+0x811/0x860 [ 99.397991][ T5953] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.398060][ T5953] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.398154][ T5953] netlink_unicast+0x7bd/0x940 [ 99.398264][ T5953] netlink_sendmsg+0x813/0xb40 [ 99.398383][ T5953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.398487][ T5953] ? apparmor_socket_sendmsg+0x98/0x360 [ 99.398550][ T5953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.398624][ T5953] sock_sendmsg_nosec+0x13a/0x180 [ 99.398726][ T5953] ____sys_sendmsg+0x54e/0x850 [ 99.398829][ T5953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.398931][ T5953] ? import_iovec+0x73/0xa0 [ 99.399007][ T5953] ___sys_sendmsg+0x2a5/0x360 [ 99.399072][ T5953] ? __lock_acquire+0x747/0x2de0 [ 99.399150][ T5953] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.399318][ T5953] ? __fget_files+0x2a/0x420 [ 99.399395][ T5953] ? __fget_files+0x3a2/0x420 [ 99.399500][ T5953] __x64_sys_sendmsg+0x1b1/0x290 [ 99.399575][ T5953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.399736][ T5953] do_syscall_64+0x166/0x520 [ 99.399797][ T5953] ? trace_irq_disable+0x3b/0x140 [ 99.399850][ T5953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.399911][ T5953] ? clear_bhb_loop+0x70/0xc0 [ 99.399985][ T5953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.400041][ T5953] RIP: 0033:0x7fa339f9e159 [ 99.400095][ T5953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.400140][ T5953] RSP: 002b:00007fa3381f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.400206][ T5953] RAX: ffffffffffffffda RBX: 00007fa33a225fa0 RCX: 00007fa339f9e159 [ 99.400248][ T5953] RDX: 0000000000000094 RSI: 0000200000009b40 RDI: 0000000000000003 [ 99.400282][ T5953] RBP: 00007fa3381f6090 R08: 0000000000000000 R09: 0000000000000000 [ 99.400323][ T5953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.400356][ T5953] R13: 00007fa33a226038 R14: 00007fa33a225fa0 R15: 00007ffe60ed1c58 [ 99.400441][ T5953] [ 99.405199][ T5951] netlink: 'syz.4.37': attribute type 16 has an invalid length. [ 99.405262][ T5951] netlink: 'syz.4.37': attribute type 1 has an invalid length. [ 99.405310][ T5951] netlink: 112 bytes leftover after parsing attributes in process `syz.4.37'. [ 99.745395][ T5954] -1O2~: renamed from syzkaller0 [ 101.337000][ T5983] netlink: 'syz.0.47': attribute type 39 has an invalid length. [ 102.840032][ T5987] netlink: 'syz.2.48': attribute type 9 has an invalid length. [ 102.840079][ T5987] netlink: 7679 bytes leftover after parsing attributes in process `syz.2.48'. [ 103.249548][ T5993] netlink: 'syz.4.50': attribute type 2 has an invalid length. [ 103.257779][ T5999] FAULT_INJECTION: forcing a failure. [ 103.257779][ T5999] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.257813][ T5999] CPU: 0 UID: 0 PID: 5999 Comm: syz.1.52 Not tainted syzkaller #0 PREEMPT(full) [ 103.257846][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.257859][ T5999] Call Trace: [ 103.257868][ T5999] [ 103.257877][ T5999] dump_stack_lvl+0xe8/0x150 [ 103.257917][ T5999] should_fail_ex+0x410/0x560 [ 103.257949][ T5999] _copy_from_user+0x2d/0xb0 [ 103.257982][ T5999] kstrtouint_from_user+0xd6/0x180 [ 103.258020][ T5999] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 103.258068][ T5999] ? lock_acquire+0x115/0x350 [ 103.258099][ T5999] proc_fail_nth_write+0x8e/0x210 [ 103.258124][ T5999] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.258160][ T5999] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.258183][ T5999] vfs_write+0x296/0xba0 [ 103.258232][ T5999] ? __pfx_vfs_write+0x10/0x10 [ 103.258270][ T5999] ? __fget_files+0x2a/0x420 [ 103.258309][ T5999] ? __fget_files+0x3a2/0x420 [ 103.258339][ T5999] ? __fget_files+0x2a/0x420 [ 103.258384][ T5999] ksys_write+0x150/0x270 [ 103.258424][ T5999] ? __pfx_ksys_write+0x10/0x10 [ 103.258476][ T5999] do_syscall_64+0x166/0x520 [ 103.258506][ T5999] ? trace_irq_disable+0x3b/0x140 [ 103.258528][ T5999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.258551][ T5999] ? clear_bhb_loop+0x70/0xc0 [ 103.258582][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.258605][ T5999] RIP: 0033:0x7fe6e0d5e98e [ 103.258626][ T5999] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 103.258645][ T5999] RSP: 002b:00007fe6e1c14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.258669][ T5999] RAX: ffffffffffffffda RBX: 00007fe6e1c156c0 RCX: 00007fe6e0d5e98e [ 103.258685][ T5999] RDX: 0000000000000001 RSI: 00007fe6e1c150a0 RDI: 0000000000000004 [ 103.258698][ T5999] RBP: 00007fe6e1c15090 R08: 0000000000000000 R09: 0000000000000000 [ 103.258711][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.258724][ T5999] R13: 00007fe6e1026038 R14: 00007fe6e1025fa0 R15: 00007ffc8af6b188 [ 103.258764][ T5999] [ 103.750624][ T6007] netlink: 'syz.2.55': attribute type 9 has an invalid length. [ 103.750673][ T6007] netlink: 7679 bytes leftover after parsing attributes in process `syz.2.55'. [ 104.233460][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 104.536375][ T6032] netlink: 'syz.2.63': attribute type 3 has an invalid length. [ 104.739963][ T6042] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 104.740014][ T6042] netlink: 'syz.1.64': attribute type 3 has an invalid length. [ 104.989901][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.309988][ T6059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.901723][ T6071] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 105.910836][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.921793][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.338726][ T6071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.338775][ T6071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.870249][ T6097] netlink: 'syz.3.80': attribute type 2 has an invalid length. [ 109.334757][ T6113] netlink: 64 bytes leftover after parsing attributes in process `syz.1.84'. [ 109.708180][ T6125] netlink: 'syz.3.87': attribute type 10 has an invalid length. [ 109.708230][ T6125] netlink: 156 bytes leftover after parsing attributes in process `syz.3.87'. [ 110.123071][ T6133] syz.2.89: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 110.123209][ T6133] CPU: 1 UID: 0 PID: 6133 Comm: syz.2.89 Not tainted syzkaller #0 PREEMPT(full) [ 110.123236][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.123251][ T6133] Call Trace: [ 110.123260][ T6133] [ 110.123271][ T6133] dump_stack_lvl+0xe8/0x150 [ 110.123312][ T6133] warn_alloc+0x24d/0x270 [ 110.123338][ T6133] ? kasan_save_track+0x4f/0x80 [ 110.123362][ T6133] ? kasan_save_track+0x3e/0x80 [ 110.123391][ T6133] ? __pfx_warn_alloc+0x10/0x10 [ 110.123412][ T6133] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 110.123441][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.123494][ T6133] __vmalloc_node_range_noprof+0x127/0x1540 [ 110.123563][ T6133] ? rcu_is_watching+0x16/0xb0 [ 110.123601][ T6133] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.123637][ T6133] ? __kmalloc_cache_noprof+0x321/0x600 [ 110.123662][ T6133] ? __kmalloc_cache_noprof+0x14d/0x600 [ 110.123686][ T6133] ? xskq_create+0x56/0x220 [ 110.123729][ T6133] xskq_create+0x148/0x220 [ 110.123773][ T6133] ? xsk_init_queue+0x8a/0xe0 [ 110.123812][ T6133] xsk_init_queue+0x8a/0xe0 [ 110.123850][ T6133] xsk_setsockopt+0x5e0/0x960 [ 110.123889][ T6133] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.123925][ T6133] ? __pfx_aa_sk_perm+0x10/0x10 [ 110.123955][ T6133] ? aa_sock_opt_perm+0x142/0x1e0 [ 110.123990][ T6133] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 110.124021][ T6133] ? __pfx_xsk_setsockopt+0x10/0x10 [ 110.124058][ T6133] do_sock_setsockopt+0x17c/0x1b0 [ 110.124094][ T6133] __x64_sys_setsockopt+0x13d/0x1b0 [ 110.124131][ T6133] do_syscall_64+0x166/0x520 [ 110.124155][ T6133] ? trace_irq_disable+0x3b/0x140 [ 110.124179][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.124204][ T6133] ? clear_bhb_loop+0x70/0xc0 [ 110.124235][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.124260][ T6133] RIP: 0033:0x7fc3f179e159 [ 110.124282][ T6133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.124302][ T6133] RSP: 002b:00007fc3f2730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.124325][ T6133] RAX: ffffffffffffffda RBX: 00007fc3f1a26090 RCX: 00007fc3f179e159 [ 110.124343][ T6133] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 110.124358][ T6133] RBP: 00007fc3f183506b R08: 0000000000000004 R09: 0000000000000000 [ 110.124372][ T6133] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 110.124387][ T6133] R13: 00007fc3f1a26128 R14: 00007fc3f1a26090 R15: 00007ffe37e9e948 [ 110.124431][ T6133] [ 110.164591][ T6133] Mem-Info: [ 110.164618][ T6133] active_anon:5507 inactive_anon:0 isolated_anon:0 [ 110.164618][ T6133] active_file:0 inactive_file:52554 isolated_file:0 [ 110.164618][ T6133] unevictable:0 dirty:294 writeback:0 [ 110.164618][ T6133] slab_reclaimable:10077 slab_unreclaimable:96685 [ 110.164618][ T6133] mapped:29373 shmem:521 pagetables:1190 [ 110.164618][ T6133] sec_pagetables:0 bounce:0 [ 110.164618][ T6133] kernel_misc_reclaimable:0 [ 110.164618][ T6133] free:1310825 free_pcp:22807 free_cma:0 [ 110.164685][ T6133] Node 0 active_anon:22028kB inactive_anon:0kB active_file:0kB inactive_file:210012kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117492kB dirty:1176kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12012kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.164760][ T6133] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 110.164825][ T6133] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.164902][ T6133] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 110.164978][ T6133] Node 0 DMA32 free:1286912kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22028kB inactive_anon:0kB active_file:0kB inactive_file:210012kB unevictable:0kB writepending:1176kB zspages:0kB present:3129332kB managed:2546664kB mlocked:0kB bounce:0kB free_pcp:91228kB local_pcp:45060kB free_cma:0kB [ 110.165056][ T6133] lowmem_reserve[]: 0 0 0 0 0 [ 110.165129][ T6133] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.165200][ T6133] lowmem_reserve[]: 0 0 0 0 0 [ 110.165272][ T6133] Node 1 Normal free:3941028kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 110.165346][ T6133] lowmem_reserve[]: 0 0 0 0 0 [ 110.165420][ T6133] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 110.165636][ T6133] Node 0 DMA32: 1623*4kB (UME) 1070*8kB (UME) 370*16kB (UME) 408*32kB (UME) 177*64kB (UME) 84*128kB (UME) 46*256kB (UME) 7*512kB (UM) 5*1024kB (UM) 1*2048kB (E) 295*4096kB (M) = 1286956kB [ 110.165964][ T6133] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 110.184710][ T6133] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 2*16kB (UM) 7*32kB (UM) 8*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 0*2048kB 961*4096kB (M) = 3941028kB [ 110.185018][ T6133] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.185043][ T6133] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.185067][ T6133] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 110.185091][ T6133] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 110.185113][ T6133] 53071 total pagecache pages [ 110.185127][ T6133] 0 pages in swap cache [ 110.185139][ T6133] Free swap = 124996kB [ 110.185152][ T6133] Total swap = 124996kB [ 110.185166][ T6133] 2097051 pages RAM [ 110.185179][ T6133] 0 pages HighMem/MovableOnly [ 110.185191][ T6133] 428769 pages reserved [ 110.185204][ T6133] 0 pages cma reserved [ 110.711604][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 111.533139][ T6132] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'. [ 111.874063][ T6162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.97'. [ 111.917382][ T6162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.97'. [ 111.930025][ T6165] bpf: Bad value for 'uid' [ 112.668313][ T6189] netlink: 72 bytes leftover after parsing attributes in process `syz.2.102'. [ 115.010967][ T6207] macsec0: entered promiscuous mode [ 116.180130][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 116.297696][ T6230] netlink: 'syz.2.113': attribute type 11 has an invalid length. [ 116.438490][ T6243] netlink: 'syz.2.113': attribute type 2 has an invalid length. [ 116.538741][ T6239] tap0: tun_chr_ioctl cmd 1074025680 [ 116.650713][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.118'. [ 117.852497][ T6272] syzkaller0: entered promiscuous mode [ 117.852546][ T6272] syzkaller0: entered allmulticast mode [ 118.378622][ T6297] netlink: 'syz.1.129': attribute type 2 has an invalid length. [ 119.317850][ T6317] netlink: 1164 bytes leftover after parsing attributes in process `syz.3.136'. [ 119.317904][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.3.136'. [ 119.554004][ T6326] Illegal XDP return value 2617222631 on prog (id 67) dev N/A, expect packet loss! [ 119.602548][ T6331] netlink: 28 bytes leftover after parsing attributes in process `syz.1.140'. [ 122.436251][ T6359] netlink: 'syz.2.142': attribute type 39 has an invalid length. [ 123.208149][ T6380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.149'. [ 123.330458][ T6370] netlink: 'syz.1.147': attribute type 39 has an invalid length. [ 126.207881][ T6447] macvlan1: entered allmulticast mode [ 126.602003][ T6456] netlink: 72 bytes leftover after parsing attributes in process `syz.4.162'. [ 127.260923][ T6475] netlink: 'syz.1.169': attribute type 4 has an invalid length. [ 127.270882][ T6475] netlink: 152 bytes leftover after parsing attributes in process `syz.1.169'. [ 127.305680][ T6475] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 127.371986][ T6477] netlink: 'syz.1.169': attribute type 4 has an invalid length. [ 127.372044][ T6477] netlink: 152 bytes leftover after parsing attributes in process `syz.1.169'. [ 127.372094][ T6477] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 128.007553][ T6484] netlink: 'syz.1.173': attribute type 9 has an invalid length. [ 128.007603][ T6484] netlink: 7679 bytes leftover after parsing attributes in process `syz.1.173'. [ 128.030761][ T6485] netlink: 'syz.4.171': attribute type 16 has an invalid length. [ 128.030803][ T6485] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 128.030846][ T6485] netlink: 112 bytes leftover after parsing attributes in process `syz.4.171'. [ 128.287285][ T6489] FAULT_INJECTION: forcing a failure. [ 128.287285][ T6489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.287418][ T6489] CPU: 1 UID: 0 PID: 6489 Comm: syz.0.172 Not tainted syzkaller #0 PREEMPT(full) [ 128.287517][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.287558][ T6489] Call Trace: [ 128.287594][ T6489] [ 128.287631][ T6489] dump_stack_lvl+0xe8/0x150 [ 128.287743][ T6489] should_fail_ex+0x410/0x560 [ 128.287826][ T6489] _copy_from_iter+0x1d3/0x1660 [ 128.287889][ T6489] ? __alloc_skb+0x27a/0x7a0 [ 128.287952][ T6489] ? __alloc_skb+0x27a/0x7a0 [ 128.288022][ T6489] ? __alloc_skb+0x27a/0x7a0 [ 128.288076][ T6489] ? __pfx__copy_from_iter+0x10/0x10 [ 128.288136][ T6489] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 128.288220][ T6489] ? __alloc_skb+0x27a/0x7a0 [ 128.288276][ T6489] ? __alloc_skb+0x27a/0x7a0 [ 128.288358][ T6489] ? netlink_sendmsg+0x650/0xb40 [ 128.288432][ T6489] ? skb_put+0x112/0x210 [ 128.288504][ T6489] netlink_sendmsg+0x6c0/0xb40 [ 128.288608][ T6489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.288711][ T6489] ? apparmor_socket_sendmsg+0x98/0x360 [ 128.288790][ T6489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.288863][ T6489] sock_sendmsg_nosec+0x13a/0x180 [ 128.288969][ T6489] ____sys_sendmsg+0x54e/0x850 [ 128.289067][ T6489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.289168][ T6489] ? import_iovec+0x73/0xa0 [ 128.289242][ T6489] ___sys_sendmsg+0x2a5/0x360 [ 128.289315][ T6489] ? __lock_acquire+0x747/0x2de0 [ 128.289388][ T6489] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.289554][ T6489] ? __fget_files+0x2a/0x420 [ 128.289635][ T6489] ? __fget_files+0x3a2/0x420 [ 128.289748][ T6489] __x64_sys_sendmsg+0x1b1/0x290 [ 128.289838][ T6489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.289971][ T6489] do_syscall_64+0x166/0x520 [ 128.290025][ T6489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.290087][ T6489] ? clear_bhb_loop+0x70/0xc0 [ 128.290159][ T6489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.290219][ T6489] RIP: 0033:0x7fa339f9e159 [ 128.290285][ T6489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.290345][ T6489] RSP: 002b:00007fa3381f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.290430][ T6489] RAX: ffffffffffffffda RBX: 00007fa33a225fa0 RCX: 00007fa339f9e159 [ 128.290472][ T6489] RDX: 000000000404c010 RSI: 0000200000000000 RDI: 0000000000000004 [ 128.290512][ T6489] RBP: 00007fa3381f6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.290546][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.290585][ T6489] R13: 00007fa33a226038 R14: 00007fa33a225fa0 R15: 00007ffe60ed1c58 [ 128.290671][ T6489] [ 128.400471][ T6493] netlink: 56 bytes leftover after parsing attributes in process `syz.3.175'. [ 128.400521][ T6493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'. [ 128.716093][ T6488] netlink: 'syz.2.174': attribute type 2 has an invalid length. [ 129.059301][ T6516] netlink: 'syz.3.181': attribute type 15 has an invalid length. [ 129.143405][ T6523] netlink: 'syz.3.181': attribute type 15 has an invalid length. [ 129.249296][ T6527] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.250425][ T6527] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.250501][ T6527] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.250535][ T6527] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.250567][ T6527] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.250599][ T6527] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.250631][ T6527] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.250663][ T6527] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 129.502968][ T6516] vxlan0: entered promiscuous mode [ 129.871103][ T6523] vxlan0: entered promiscuous mode [ 130.167609][ T6543] netlink: 'syz.3.187': attribute type 9 has an invalid length. [ 130.175600][ T6543] netlink: 7679 bytes leftover after parsing attributes in process `syz.3.187'. [ 130.516357][ T6555] FAULT_INJECTION: forcing a failure. [ 130.516357][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 130.537366][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.1.189 Not tainted syzkaller #0 PREEMPT(full) [ 130.537399][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.537412][ T6555] Call Trace: [ 130.537420][ T6555] [ 130.537430][ T6555] dump_stack_lvl+0xe8/0x150 [ 130.537468][ T6555] should_fail_ex+0x410/0x560 [ 130.537497][ T6555] should_failslab+0xa8/0x100 [ 130.537524][ T6555] ? skb_clone+0x212/0x3a0 [ 130.537552][ T6555] kmem_cache_alloc_noprof+0xa1/0x600 [ 130.537588][ T6555] ? skb_clone+0x212/0x3a0 [ 130.537630][ T6555] skb_clone+0x212/0x3a0 [ 130.537662][ T6555] __netlink_deliver_tap+0x413/0x860 [ 130.537706][ T6555] ? netlink_deliver_tap+0x2e/0x1b0 [ 130.537737][ T6555] netlink_deliver_tap+0x19c/0x1b0 [ 130.537769][ T6555] netlink_unicast+0x781/0x940 [ 130.537807][ T6555] netlink_sendmsg+0x813/0xb40 [ 130.537849][ T6555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.537889][ T6555] ? apparmor_socket_sendmsg+0x98/0x360 [ 130.537915][ T6555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.537944][ T6555] sock_sendmsg_nosec+0x13a/0x180 [ 130.537981][ T6555] ____sys_sendmsg+0x54e/0x850 [ 130.538015][ T6555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.538052][ T6555] ? import_iovec+0x73/0xa0 [ 130.538081][ T6555] ___sys_sendmsg+0x2a5/0x360 [ 130.538106][ T6555] ? __lock_acquire+0x747/0x2de0 [ 130.538132][ T6555] ? __pfx____sys_sendmsg+0x10/0x10 [ 130.538197][ T6555] ? __fget_files+0x2a/0x420 [ 130.538226][ T6555] ? __fget_files+0x3a2/0x420 [ 130.538267][ T6555] __x64_sys_sendmsg+0x1b1/0x290 [ 130.538297][ T6555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 130.538346][ T6555] do_syscall_64+0x166/0x520 [ 130.538368][ T6555] ? trace_irq_disable+0x3b/0x140 [ 130.538389][ T6555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.538412][ T6555] ? clear_bhb_loop+0x70/0xc0 [ 130.538440][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.538462][ T6555] RIP: 0033:0x7fe6e0d9e159 [ 130.538483][ T6555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.538501][ T6555] RSP: 002b:00007fe6e1bd3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.538525][ T6555] RAX: ffffffffffffffda RBX: 00007fe6e1026180 RCX: 00007fe6e0d9e159 [ 130.538542][ T6555] RDX: 000000000404c010 RSI: 0000200000000000 RDI: 0000000000000004 [ 130.538556][ T6555] RBP: 00007fe6e1bd3090 R08: 0000000000000000 R09: 0000000000000000 [ 130.538570][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.538583][ T6555] R13: 00007fe6e1026218 R14: 00007fe6e1026180 R15: 00007ffc8af6b188 [ 130.538626][ T6555] [ 130.645317][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 130.872435][ T6561] netlink: 'syz.0.193': attribute type 39 has an invalid length. [ 132.209800][ T6585] macvlan1: entered allmulticast mode [ 132.324366][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.202'. [ 133.666247][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.666374][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.005874][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.206'. [ 134.245985][ T6619] netlink: 'syz.1.207': attribute type 10 has an invalid length. [ 134.262012][ T6616] netlink: 'syz.2.211': attribute type 39 has an invalid length. [ 134.362563][ T6619] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 134.470278][ T6618] netlink: 71 bytes leftover after parsing attributes in process `syz.3.210'. [ 135.251858][ T6630] netlink: 'syz.2.213': attribute type 29 has an invalid length. [ 136.223616][ T6647] macvlan1: entered allmulticast mode [ 136.657206][ T6661] netlink: 14 bytes leftover after parsing attributes in process `syz.0.220'. [ 136.717970][ T6665] net_ratelimit: 3321 callbacks suppressed [ 136.726748][ T6665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.783556][ T6661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.797490][ T6660] netlink: 'syz.4.223': attribute type 39 has an invalid length. [ 136.817850][ T6661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.833294][ T6661] bond0 (unregistering): Released all slaves [ 137.388075][ T6677] warning: `syz.1.227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 139.977623][ T6692] netlink: 152 bytes leftover after parsing attributes in process `syz.2.232'. [ 140.136794][ T6699] netlink: 'syz.2.232': attribute type 21 has an invalid length. [ 142.872022][ T6699] netlink: 132 bytes leftover after parsing attributes in process `syz.2.232'. [ 143.855820][ T6727] netlink: 36 bytes leftover after parsing attributes in process `syz.3.241'. [ 144.616492][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.245'. [ 144.801255][ T5629] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 145.219160][ T6749] netlink: 72 bytes leftover after parsing attributes in process `syz.0.249'. [ 145.666079][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.256'. [ 145.692421][ T6767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.256'. [ 147.233237][ T6784] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.260'. [ 147.474740][ T6795] netlink: 72 bytes leftover after parsing attributes in process `syz.2.264'. [ 147.790831][ T6805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 148.169963][ T6818] netlink: 288 bytes leftover after parsing attributes in process `syz.1.269'. [ 148.479254][ T6832] netlink: 'syz.2.273': attribute type 16 has an invalid length. [ 148.479298][ T6832] netlink: 'syz.2.273': attribute type 17 has an invalid length. [ 148.497524][ T6833] netlink: 'syz.2.273': attribute type 16 has an invalid length. [ 148.497621][ T6833] netlink: 'syz.2.273': attribute type 17 has an invalid length. [ 148.511005][ T6835] netlink: 'syz.0.274': attribute type 23 has an invalid length. [ 148.586769][ T6832] lo: entered promiscuous mode [ 148.598899][ T6832] tunl0: entered promiscuous mode [ 148.611060][ T6832] gre0: entered promiscuous mode [ 148.619171][ T6832] gretap0: entered promiscuous mode [ 148.624556][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.274'. [ 148.638186][ T6832] erspan0: entered promiscuous mode [ 148.645673][ T6832] ip_vti0: entered promiscuous mode [ 148.646424][ T6832] ip6_vti0: entered promiscuous mode [ 148.669274][ T6832] sit0: entered promiscuous mode [ 148.710950][ T6832] ip6tnl0: entered promiscuous mode [ 148.783676][ T6832] ip6gre0: entered promiscuous mode [ 148.799711][ T6832] syz_tun: entered promiscuous mode [ 148.811036][ T6832] ip6gretap0: entered promiscuous mode [ 148.856578][ T6832] bridge0: entered promiscuous mode [ 148.868370][ T6832] vcan0: entered promiscuous mode [ 148.878628][ T6832] bond0: entered promiscuous mode [ 148.878679][ T6832] bond_slave_0: entered promiscuous mode [ 148.880491][ T6832] bond_slave_1: entered promiscuous mode [ 148.901052][ T6832] team0: entered promiscuous mode [ 148.901103][ T6832] team_slave_0: entered promiscuous mode [ 148.912423][ T6832] team_slave_1: entered promiscuous mode [ 148.936950][ T6832] dummy0: entered promiscuous mode [ 148.947877][ T6832] nlmon0: entered promiscuous mode [ 148.954214][ T6832] vxcan0: entered promiscuous mode [ 148.960205][ T6832] vxcan1: entered promiscuous mode [ 148.966619][ T6832] veth0: entered promiscuous mode [ 148.967299][ T6832] veth1: entered promiscuous mode [ 148.978457][ T6832] wg0: entered promiscuous mode [ 148.988266][ T6832] wg2: entered promiscuous mode [ 148.989057][ T6832] veth0_to_bridge: entered promiscuous mode [ 149.005043][ T6832] veth1_to_bridge: entered promiscuous mode [ 149.013152][ T6832] veth0_to_bond: entered promiscuous mode [ 149.020590][ T6832] veth1_to_bond: entered promiscuous mode [ 149.029196][ T6832] veth0_to_team: entered promiscuous mode [ 149.038087][ T6832] veth1_to_team: entered promiscuous mode [ 149.047118][ T6832] veth0_to_batadv: entered promiscuous mode [ 149.054465][ T6832] batadv_slave_0: entered promiscuous mode [ 149.061308][ T6832] veth1_to_batadv: entered promiscuous mode [ 149.069703][ T6832] batadv_slave_1: entered promiscuous mode [ 149.077887][ T6832] xfrm0: entered promiscuous mode [ 149.084424][ T6832] veth0_to_hsr: entered promiscuous mode [ 149.091534][ T6832] veth1_to_hsr: entered promiscuous mode [ 149.100029][ T6832] hsr0: entered promiscuous mode [ 149.108669][ T6832] veth1_virt_wifi: entered promiscuous mode [ 149.118730][ T6832] veth0_virt_wifi: entered promiscuous mode [ 149.128053][ T6832] virt_wifi0: entered promiscuous mode [ 149.140698][ T6832] vlan0: entered promiscuous mode [ 149.148135][ T6832] vlan1: entered promiscuous mode [ 149.155780][ T6832] macvlan0: entered promiscuous mode [ 149.162242][ T6832] veth1_vlan: entered allmulticast mode [ 149.169168][ T6832] macvlan1: entered promiscuous mode [ 149.175343][ T6832] macvlan1: left allmulticast mode [ 149.180577][ T6832] veth1_vlan: left allmulticast mode [ 149.220383][ T6832] ipvlan0: entered promiscuous mode [ 149.248076][ T6832] ipvlan1: entered promiscuous mode [ 149.276999][ T6832] macvtap0: entered promiscuous mode [ 149.306957][ T6832] macsec0: entered promiscuous mode [ 149.313189][ T6832] geneve0: entered promiscuous mode [ 149.318808][ T6832] geneve1: entered promiscuous mode [ 149.331047][ T6832] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 149.463057][ T6832] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 149.481502][ T6832] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 149.498795][ T6832] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 149.533660][ T6832] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 149.543934][ T6832] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 149.544715][ T6832] #!: entered promiscuous mode [ 149.602533][ T6832] mac80211_hwsim hwsim13 wlan2: entered promiscuous mode [ 149.636140][ T6832] : entered promiscuous mode [ 149.644223][ T6838] netlink: 'syz.3.275': attribute type 21 has an invalid length. [ 149.644337][ T6838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.275'. [ 149.915658][ T6847] netlink: 'syz.1.278': attribute type 2 has an invalid length. [ 150.059154][ T6851] netlink: 68 bytes leftover after parsing attributes in process `syz.1.278'. [ 150.218065][ T50] ip6_tunnel:  xmit: Local address not yet configured! [ 150.243118][ T50] ip6_tunnel:  xmit: Local address not yet configured! [ 150.249698][ T6850] tmpfs: Unknown parameter '{9C8aԖ쯳' [ 150.269182][ T6850] __nla_validate_parse: 3 callbacks suppressed [ 150.269243][ T6850] netlink: 28 bytes leftover after parsing attributes in process `syz.2.277'. [ 150.290001][ T5756] ip6_tunnel:  xmit: Local address not yet configured! [ 150.672401][ T6855] netlink: 'syz.3.279': attribute type 2 has an invalid length. [ 150.991090][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 151.151153][ T5731] ip6_tunnel:  xmit: Local address not yet configured! [ 151.224308][ T5731] ip6_tunnel:  xmit: Local address not yet configured! [ 151.316266][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 151.418548][ T6872] netlink: 1 bytes leftover after parsing attributes in process `syz.2.286'. [ 151.468615][ T6872] netlink: 'syz.2.286': attribute type 10 has an invalid length. [ 154.221031][ T6886] netlink: 'syz.1.287': attribute type 10 has an invalid length. [ 154.221111][ T6886] netlink: 40 bytes leftover after parsing attributes in process `syz.1.287'. [ 154.507889][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 154.777310][ T6891] netlink: 44 bytes leftover after parsing attributes in process `syz.0.288'. [ 154.790426][ T6891] netlink: 44 bytes leftover after parsing attributes in process `syz.0.288'. [ 154.799592][ T6891] netlink: 44 bytes leftover after parsing attributes in process `syz.0.288'. [ 154.818737][ T6886] team0: Port device geneve1 added [ 154.940982][ T6890] netlink: 'syz.2.289': attribute type 39 has an invalid length. [ 155.303190][ T6901] netlink: 15119 bytes leftover after parsing attributes in process `syz.3.291'. [ 156.411227][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 156.676283][ T6925] netlink: 72 bytes leftover after parsing attributes in process `syz.0.298'. [ 160.127708][ T6945] netlink: 'syz.3.303': attribute type 39 has an invalid length. [ 160.242199][ T6946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.305'. [ 160.403711][ T6951] netlink: 'syz.0.306': attribute type 4 has an invalid length. [ 160.411846][ T6951] netlink: 17 bytes leftover after parsing attributes in process `syz.0.306'. [ 160.931522][ T6956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.309'. [ 160.945223][ T6956] FAULT_INJECTION: forcing a failure. [ 160.945223][ T6956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.972527][ T6956] CPU: 1 UID: 0 PID: 6956 Comm: syz.0.309 Not tainted syzkaller #0 PREEMPT(full) [ 160.972559][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 160.972572][ T6956] Call Trace: [ 160.972581][ T6956] [ 160.972591][ T6956] dump_stack_lvl+0xe8/0x150 [ 160.972628][ T6956] should_fail_ex+0x410/0x560 [ 160.972657][ T6956] _copy_to_user+0x31/0xb0 [ 160.972687][ T6956] simple_read_from_buffer+0xe1/0x170 [ 160.972724][ T6956] proc_fail_nth_read+0x1bb/0x230 [ 160.972745][ T6956] ? common_file_perm+0x20e/0x2b0 [ 160.972773][ T6956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.972799][ T6956] ? rw_verify_area+0x24a/0x4c0 [ 160.972833][ T6956] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 160.972854][ T6956] vfs_read+0x213/0xa80 [ 160.972892][ T6956] ? __pfx___mutex_lock+0x10/0x10 [ 160.972916][ T6956] ? __pfx_vfs_read+0x10/0x10 [ 160.972951][ T6956] ? __fget_files+0x2a/0x420 [ 160.972986][ T6956] ? __fget_files+0x3a2/0x420 [ 160.973024][ T6956] ? __fget_files+0x2a/0x420 [ 160.973065][ T6956] ksys_read+0x150/0x270 [ 160.973100][ T6956] ? __pfx_ksys_read+0x10/0x10 [ 160.973144][ T6956] do_syscall_64+0x166/0x520 [ 160.973164][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.973188][ T6956] ? clear_bhb_loop+0x70/0xc0 [ 160.973216][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.973239][ T6956] RIP: 0033:0x7fa339f5e98e [ 160.973259][ T6956] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 160.973277][ T6956] RSP: 002b:00007fa3381f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 160.973301][ T6956] RAX: ffffffffffffffda RBX: 00007fa3381f66c0 RCX: 00007fa339f5e98e [ 160.973317][ T6956] RDX: 000000000000000f RSI: 00007fa3381f60a0 RDI: 000000000000000a [ 160.973331][ T6956] RBP: 00007fa3381f6090 R08: 0000000000000000 R09: 0000000000000000 [ 160.973345][ T6956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.973358][ T6956] R13: 00007fa33a226038 R14: 00007fa33a225fa0 R15: 00007ffe60ed1c58 [ 160.973393][ T6956] [ 161.601401][ T6971] netlink: 'syz.3.314': attribute type 12 has an invalid length. [ 161.601444][ T6971] netlink: 132 bytes leftover after parsing attributes in process `syz.3.314'. [ 161.607797][ T6973] netlink: 'syz.3.314': attribute type 12 has an invalid length. [ 161.607872][ T6973] netlink: 132 bytes leftover after parsing attributes in process `syz.3.314'. [ 161.618864][ T6961] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 161.618962][ T6961] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 161.732228][ T6973] netlink: 'syz.3.314': attribute type 11 has an invalid length. [ 161.936859][ T6975] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 162.310941][ T6971] netlink: 'syz.3.314': attribute type 11 has an invalid length. [ 162.916862][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 165.466091][ T6998] netlink: 28 bytes leftover after parsing attributes in process `syz.2.318'. [ 165.920869][ T7021] netlink: 'syz.3.328': attribute type 29 has an invalid length. [ 165.938483][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.327'. [ 166.076348][ T7022] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.077985][ T7021] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 166.213368][ T7021] openvswitch: netlink: Tunnel attr 347 out of range max 16 [ 166.229594][ T7021] netlink: 196 bytes leftover after parsing attributes in process `syz.3.328'. [ 166.811623][ T7034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.333'. [ 167.048043][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.054898][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.059336][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.078148][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.085698][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.823592][ T1108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.847019][ T7054] netlink: 76 bytes leftover after parsing attributes in process `syz.2.336'. [ 168.357970][ T1108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.024795][ T7070] openvswitch: netlink: Tunnel attr 13 has unexpected len 0 expected 16 [ 169.156709][ T5629] Bluetooth: hci5: command tx timeout [ 169.319967][ T7017] infiniband syz2: set down [ 169.320276][ T7017] infiniband syz2: added ipvlan1 [ 169.513641][ T7017] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 169.552472][ T7017] infiniband syz2: Couldn't open port 1 [ 169.554704][ T7017] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 169.554937][ T7017] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 169.555049][ T7017] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 169.652638][ T1108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.846606][ T7017] RDS/IB: syz2: added [ 169.856095][ T7017] smc: adding ib device syz2 with port count 1 [ 169.866841][ T1108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.877616][ T7017] smc: ib device syz2 port 1 has no pnetid [ 169.900420][ T7077] netlink: 240 bytes leftover after parsing attributes in process `syz.3.340'. [ 170.708584][ T1108] bridge_slave_1: left allmulticast mode [ 170.708660][ T1108] bridge_slave_1: left promiscuous mode [ 170.709821][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.836650][ T1108] bridge_slave_0: left allmulticast mode [ 170.867224][ T1108] bridge_slave_0: left promiscuous mode [ 170.867498][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.128571][ T7094] netlink: 132 bytes leftover after parsing attributes in process `syz.3.344'. [ 171.226474][ T5629] Bluetooth: hci5: command tx timeout [ 172.311686][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.337029][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.349827][ T1108] bond0 (unregistering): Released all slaves [ 173.306818][ T5629] Bluetooth: hci5: command tx timeout [ 173.355899][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 173.425573][ T7137] netlink: 132 bytes leftover after parsing attributes in process `syz.0.351'. [ 174.678702][ T7178] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.360'. [ 175.394061][ T5629] Bluetooth: hci5: command tx timeout [ 175.657856][ T7195] sit0: left promiscuous mode [ 176.019581][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 176.650201][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.650360][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.650560][ T7037] bridge_slave_0: entered allmulticast mode [ 176.679585][ T7037] bridge_slave_0: entered promiscuous mode [ 176.712690][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.720241][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.781789][ T7037] bridge_slave_1: entered allmulticast mode [ 176.803608][ T7037] bridge_slave_1: entered promiscuous mode [ 177.216422][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.251148][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.673310][ T7037] team0: Port device team_slave_0 added [ 177.708253][ T7037] team0: Port device team_slave_1 added [ 178.012528][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.021147][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.021209][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.094167][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.095297][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 178.095387][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.474516][ T7037] hsr_slave_0: entered promiscuous mode [ 178.481478][ T7037] hsr_slave_1: entered promiscuous mode [ 178.492896][ T7037] debugfs: 'hsr0' already exists in 'hsr' [ 178.503051][ T7037] Cannot create hsr debugfs directory [ 180.016366][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 180.185823][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 180.187608][ T7037] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 180.231737][ T7262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.379'. [ 180.294765][ T7263] netlink: 'syz.0.379': attribute type 10 has an invalid length. [ 180.294806][ T7263] netlink: 40 bytes leftover after parsing attributes in process `syz.0.379'. [ 182.194470][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 182.278193][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 182.280056][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 182.282747][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 182.284716][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 183.095584][ T7037] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 183.103764][ T7037] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 183.129210][ T7037] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 183.254250][ T7037] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 183.304899][ T7037] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 183.514664][ T7263] team0: Port device geneve1 added [ 183.553368][ T7230] lo speed is unknown, defaulting to 1000 [ 183.781738][ T1108] hsr_slave_0: left promiscuous mode [ 183.808323][ T1108] hsr_slave_1: left promiscuous mode [ 183.824312][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.825131][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.845926][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.846675][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.920186][ T7283] FAULT_INJECTION: forcing a failure. [ 183.920186][ T7283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.933773][ T7283] CPU: 1 UID: 0 PID: 7283 Comm: syz.0.383 Not tainted syzkaller #0 PREEMPT(full) [ 183.933804][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.933818][ T7283] Call Trace: [ 183.933827][ T7283] [ 183.933837][ T7283] dump_stack_lvl+0xe8/0x150 [ 183.933876][ T7283] should_fail_ex+0x410/0x560 [ 183.933905][ T7283] _copy_from_user+0x2d/0xb0 [ 183.933934][ T7283] ___sys_sendmsg+0x1c6/0x360 [ 183.933962][ T7283] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 183.933993][ T7283] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.934029][ T7283] ? irqentry_exit+0x218/0x910 [ 183.934081][ T7283] ? __fget_files+0x2a/0x420 [ 183.934113][ T7283] ? __fget_files+0x3a2/0x420 [ 183.934156][ T7283] __x64_sys_sendmsg+0x1b1/0x290 [ 183.934183][ T7283] ? perf_trace_preemptirq_template+0x270/0x350 [ 183.934210][ T7283] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.934261][ T7283] do_syscall_64+0x166/0x520 [ 183.934283][ T7283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.934307][ T7283] ? clear_bhb_loop+0x70/0xc0 [ 183.934335][ T7283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.934358][ T7283] RIP: 0033:0x7fa339f9e159 [ 183.934379][ T7283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.934398][ T7283] RSP: 002b:00007fa3381f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.934423][ T7283] RAX: ffffffffffffffda RBX: 00007fa33a225fa0 RCX: 00007fa339f9e159 [ 183.934440][ T7283] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 183.934454][ T7283] RBP: 00007fa3381f6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.934469][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.934483][ T7283] R13: 00007fa33a226038 R14: 00007fa33a225fa0 R15: 00007ffe60ed1c58 [ 183.934519][ T7283] [ 184.241205][ T1108] veth1_macvtap: left promiscuous mode [ 184.245995][ T1108] veth0_macvtap: left promiscuous mode [ 184.248102][ T1108] veth1_vlan: left promiscuous mode [ 184.253244][ T1108] veth0_vlan: left promiscuous mode [ 184.344423][ T5619] Bluetooth: hci4: command tx timeout [ 186.424026][ T5619] Bluetooth: hci4: command tx timeout [ 187.581977][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 187.602050][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 187.817950][ T7037] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 187.851783][ T7037] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 187.991335][ T7230] lo speed is unknown, defaulting to 1000 [ 188.077617][ T7294] macvlan1: entered allmulticast mode [ 188.139605][ T5276] 8021q: adding VLAN 0 to HW filter on device eth4 [ 188.365022][ T7230] lo speed is unknown, defaulting to 1000 [ 188.502436][ T7312] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 188.504874][ T5619] Bluetooth: hci4: command tx timeout [ 189.516147][ T7037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.750152][ T7037] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.816675][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.816963][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.924644][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.924772][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.584365][ T5619] Bluetooth: hci4: command tx timeout [ 190.680259][ T1108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.994597][ T7230] infiniband sz1: set active [ 190.996680][ T7230] infiniband sz1: added lo [ 191.003649][ T7230] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 191.148682][ T7230] infiniband sz1: Couldn't open port 1 [ 191.173387][ T7230] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 191.189034][ T7230] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 191.206626][ T7230] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 191.456813][ T7230] RDS/IB: sz1: added [ 191.462993][ T7230] smc: adding ib device sz1 with port count 1 [ 191.463053][ T7230] smc: ib device sz1 port 1 has no pnetid [ 192.776318][ T10] lo speed is unknown, defaulting to 1000 [ 192.814168][ T5759] lo speed is unknown, defaulting to 1000 [ 192.821748][ T7230] lo speed is unknown, defaulting to 1000 [ 193.187239][ T1108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.389538][ T7354] netlink: 'syz.3.392': attribute type 21 has an invalid length. [ 193.389545][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 193.408493][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 193.416687][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 193.428005][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 193.432239][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 193.481720][ T7354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.392'. [ 193.517092][ T7356] netlink: 'syz.0.393': attribute type 10 has an invalid length. [ 193.612603][ T1108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.829385][ T7356] team0 (unregistering): Port device team_slave_0 removed [ 193.875241][ T7356] team0 (unregistering): Port device team_slave_1 removed [ 193.912698][ T7356] team0 (unregistering): Port device geneve1 removed [ 194.019678][ T7230] lo speed is unknown, defaulting to 1000 [ 194.181518][ T1108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.265570][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.272022][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.764808][ T7372] netlink: 'syz.0.395': attribute type 21 has an invalid length. [ 194.989790][ T7372] netlink: 132 bytes leftover after parsing attributes in process `syz.0.395'. [ 195.083536][ T7230] lo speed is unknown, defaulting to 1000 [ 195.464425][ T52] Bluetooth: hci2: command tx timeout [ 195.739887][ T1108] bridge_slave_1: left allmulticast mode [ 195.739932][ T1108] bridge_slave_1: left promiscuous mode [ 195.740191][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.788276][ T1108] bridge_slave_0: left allmulticast mode [ 195.794858][ T1108] bridge_slave_0: left promiscuous mode [ 195.803329][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.545346][ T52] Bluetooth: hci2: command tx timeout [ 199.624131][ T52] Bluetooth: hci2: command tx timeout [ 200.228656][ T1108] team0: Port device geneve1 removed [ 200.401358][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.427553][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.440996][ T1108] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 200.465448][ T1108] bond0 (unregistering): Released all slaves [ 200.596507][ T7230] lo speed is unknown, defaulting to 1000 [ 200.610901][ T5276] 8021q: adding VLAN 0 to HW filter on device eth5 [ 200.653784][ T7037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.149523][ T7428] netlink: 28 bytes leftover after parsing attributes in process `syz.0.404'. [ 201.704386][ T52] Bluetooth: hci2: command tx timeout [ 201.983473][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.983699][ T7270] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.983990][ T7270] bridge_slave_0: entered allmulticast mode [ 202.082019][ T7448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.406'. [ 202.101797][ T7270] bridge_slave_0: entered promiscuous mode [ 202.432472][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.443260][ T7270] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.443501][ T7270] bridge_slave_1: entered allmulticast mode [ 202.467559][ T7270] bridge_slave_1: entered promiscuous mode [ 202.529123][ T7230] lo speed is unknown, defaulting to 1000 [ 202.671783][ T7270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.735015][ T7270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.968865][ T7458] netlink: 'syz.3.408': attribute type 21 has an invalid length. [ 203.051981][ T7458] netlink: 132 bytes leftover after parsing attributes in process `syz.3.408'. [ 203.074421][ T7270] team0: Port device team_slave_0 added [ 203.096566][ T7270] team0: Port device team_slave_1 added [ 203.448588][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.455928][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.483495][ T7270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.578405][ T7270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.586815][ T7270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.586882][ T7270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.932787][ T7037] veth0_vlan: entered promiscuous mode [ 204.024204][ T7270] hsr_slave_0: entered promiscuous mode [ 204.034744][ T7270] hsr_slave_1: entered promiscuous mode [ 204.048373][ T7230] lo speed is unknown, defaulting to 1000 [ 204.075557][ T7037] veth1_vlan: entered promiscuous mode [ 204.163932][ T7475] netlink: 'syz.0.410': attribute type 39 has an invalid length. [ 204.314839][ T5276] 8021q: adding VLAN 0 to HW filter on device eth6 [ 204.562946][ T7487] netlink: 'syz.3.412': attribute type 39 has an invalid length. [ 204.994906][ T7037] veth0_macvtap: entered promiscuous mode [ 205.039057][ T7037] veth1_macvtap: entered promiscuous mode [ 205.269616][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.302891][ T7037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.752825][ T7230] lo speed is unknown, defaulting to 1000 [ 205.760629][ T5846] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.829307][ T63] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.938272][ T1174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.967493][ T1174] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.193905][ T7270] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 206.233068][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.241761][ T7270] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 206.312522][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.371529][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.417'. [ 206.393267][ T7270] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 206.511937][ T7511] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 206.521514][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 206.618992][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 206.619023][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 206.619071][ T5633] Bluetooth: hci1: command 0x0406 tx timeout [ 206.680407][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.730521][ T7270] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 206.847830][ T7522] netlink: 'syz.0.418': attribute type 61 has an invalid length. [ 207.001900][ T7270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.117238][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.117283][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.222362][ T5276] 8021q: adding VLAN 0 to HW filter on device eth7 [ 207.584446][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.584682][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.692157][ T1108] hsr_slave_0: left promiscuous mode [ 208.708690][ T1108] hsr_slave_1: left promiscuous mode [ 208.709705][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.709750][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.735516][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.743088][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.903196][ T1108] veth1_macvtap: left promiscuous mode [ 208.913677][ T1108] veth0_macvtap: left promiscuous mode [ 208.913832][ T1108] veth1_vlan: left promiscuous mode [ 208.929415][ T1108] veth0_vlan: left promiscuous mode [ 209.959945][ T7549] netlink: 'syz.0.423': attribute type 39 has an invalid length. [ 210.118119][ T5846] smc: removing ib device syz2 [ 210.385175][ T7562] netlink: 'syz.3.425': attribute type 29 has an invalid length. [ 210.879400][ T7567] netlink: 'syz.3.425': attribute type 10 has an invalid length. [ 211.522810][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 211.617411][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 213.000904][ T25] ================================================================== [ 213.000928][ T25] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x230/0x250 [ 213.000968][ T25] Read of size 1 at addr ffff88807ba02e09 by task kworker/1:0/25 [ 213.000988][ T25] [ 213.001003][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 213.001031][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.001048][ T25] Workqueue: events smc_ib_port_event_work [ 213.001091][ T25] Call Trace: [ 213.001104][ T25] [ 213.001118][ T25] dump_stack_lvl+0xe8/0x150 [ 213.001166][ T25] print_address_description+0x55/0x1e0 [ 213.001207][ T25] ? __ethtool_get_link_ksettings+0x230/0x250 [ 213.001233][ T25] print_report+0x58/0x70 [ 213.001271][ T25] kasan_report+0x117/0x150 [ 213.001321][ T25] ? __ethtool_get_link_ksettings+0x230/0x250 [ 213.001385][ T25] __ethtool_get_link_ksettings+0x230/0x250 [ 213.001434][ T25] __ethtool_get_link_ksettings+0x11f/0x250 [ 213.001482][ T25] ib_get_eth_speed+0x180/0x7f0 [ 213.001536][ T25] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 213.001618][ T25] ? do_raw_spin_unlock+0xf5/0x200 [ 213.001666][ T25] ? rxe_query_port+0x6b/0x3d0 [ 213.001729][ T25] rxe_query_port+0x93/0x3d0 [ 213.001797][ T25] ib_query_port+0x16e/0x830 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 213.001858][ T25] smc_ib_port_event_work+0x147/0x920 [ 213.001938][ T25] ? rcu_is_watching+0x16/0xb0 [ 213.001982][ T25] ? process_scheduled_works+0x97a/0x1630 [ 213.002023][ T25] process_scheduled_works+0xc3d/0x1630 [ 213.002183][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.002252][ T25] ? assign_work+0x3cf/0x5d0 [ 213.002315][ T25] worker_thread+0xa47/0xfb0 [ 213.002460][ T25] kthread+0x38b/0x480 [ 213.002495][ T25] ? __pfx_worker_thread+0x10/0x10 [ 213.002528][ T25] ? __pfx_kthread+0x10/0x10 [ 213.002566][ T25] ret_from_fork+0x514/0xb70 [ 213.002609][ T25] ? __pfx_ret_from_fork+0x10/0x10 [ 213.002655][ T25] ? __switch_to+0xc89/0x1420 [ 213.002707][ T25] ? __pfx_kthread+0x10/0x10 [ 213.002752][ T25] ret_from_fork_asm+0x1a/0x30 [ 213.002859][ T25] [ 213.002868][ T25] [ 213.002875][ T25] Allocated by task 5614: [ 213.002887][ T25] kasan_save_track+0x3e/0x80 [ 213.002912][ T25] __kasan_kmalloc+0x93/0xb0 [ 213.002938][ T25] __kvmalloc_node_noprof+0x50f/0x820 [ 213.002964][ T25] alloc_netdev_mqs+0xa9/0x12a0 [ 213.002995][ T25] rtnl_create_link+0x321/0xd70 [ 213.003028][ T25] rtnl_newlink_create+0x258/0x7b0 [ 213.003056][ T25] rtnl_newlink+0x166d/0x1c30 [ 213.003081][ T25] rtnetlink_rcv_msg+0x802/0xc00 [ 213.003105][ T25] netlink_rcv_skb+0x226/0x4a0 [ 213.003135][ T25] netlink_unicast+0x7bd/0x940 [ 213.003162][ T25] netlink_sendmsg+0x813/0xb40 [ 213.003193][ T25] sock_sendmsg_nosec+0x13a/0x180 [ 213.003226][ T25] __sys_sendto+0x408/0x5a0 [ 213.003250][ T25] __x64_sys_sendto+0xde/0x100 [ 213.003275][ T25] do_syscall_64+0x166/0x520 [ 213.003299][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.003323][ T25] [ 213.003330][ T25] Freed by task 1108: [ 213.003341][ T25] kasan_save_track+0x3e/0x80 [ 213.003365][ T25] kasan_save_free_info+0x40/0x50 [ 213.003398][ T25] __kasan_slab_free+0x5c/0x80 [ 213.003423][ T25] kfree+0x1c5/0x650 [ 213.003455][ T25] device_release+0xc4/0x1f0 [ 213.003483][ T25] kobject_put+0x222/0x550 [ 213.003509][ T25] netdev_run_todo+0xeee/0x1060 [ 213.003539][ T25] default_device_exit_batch+0x6d9/0x760 [ 213.003564][ T25] ops_undo_list+0x4b4/0x8d0 [ 213.003588][ T25] cleanup_net+0x572/0x810 [ 213.003611][ T25] process_scheduled_works+0xc3d/0x1630 [ 213.003641][ T25] worker_thread+0xa47/0xfb0 [ 213.003671][ T25] kthread+0x38b/0x480 [ 213.003692][ T25] ret_from_fork+0x514/0xb70 [ 213.003713][ T25] ret_from_fork_asm+0x1a/0x30 [ 213.003753][ T25] [ 213.003760][ T25] The buggy address belongs to the object at ffff88807ba02000 [ 213.003760][ T25] which belongs to the cache kmalloc-cg-4k of size 4096 [ 213.003780][ T25] The buggy address is located 3593 bytes inside of [ 213.003780][ T25] freed 4096-byte region [ffff88807ba02000, ffff88807ba03000) [ 213.003804][ T25] [ 213.003812][ T25] The buggy address belongs to the physical page: [ 213.003825][ T25] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ba00 [ 213.003846][ T25] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 213.003865][ T25] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 213.003897][ T25] page_type: f5(slab) [ 213.003919][ T25] raw: 00fff00000000040 ffff88801b04b500 dead000000000100 dead000000000122 [ 213.003938][ T25] raw: 0000000000000000 0000000200040004 00000000f5000000 0000000000000000 [ 213.003959][ T25] head: 00fff00000000040 ffff88801b04b500 dead000000000100 dead000000000122 [ 213.003979][ T25] head: 0000000000000000 0000000200040004 00000000f5000000 0000000000000000 [ 213.003999][ T25] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 213.004018][ T25] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 213.004031][ T25] page dumped because: kasan: bad access detected [ 213.004049][ T25] page_owner tracks the page as allocated [ 213.004058][ T25] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5614, tgid 5614 (syz-executor), ts 87123101270 [ 213.004092][ T25] post_alloc_hook+0x1f9/0x250 [ 213.004126][ T25] get_page_from_freelist+0x2209/0x2280 [ 213.004152][ T25] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 213.004178][ T25] allocate_slab+0x7d/0x620 [ 213.004207][ T25] refill_objects+0x2d5/0x350 [ 213.004237][ T25] __pcs_replace_empty_main+0x2c8/0x6c0 [ 213.004266][ T25] __kvmalloc_node_noprof+0x63c/0x820 [ 213.004291][ T25] alloc_netdev_mqs+0xa9/0x12a0 [ 213.004322][ T25] rtnl_create_link+0x321/0xd70 [ 213.004356][ T25] rtnl_newlink_create+0x258/0x7b0 [ 213.004383][ T25] rtnl_newlink+0x166d/0x1c30 [ 213.004408][ T25] rtnetlink_rcv_msg+0x802/0xc00 [ 213.004432][ T25] netlink_rcv_skb+0x226/0x4a0 [ 213.004461][ T25] netlink_unicast+0x7bd/0x940 [ 213.004488][ T25] netlink_sendmsg+0x813/0xb40 [ 213.004520][ T25] sock_sendmsg_nosec+0x13a/0x180 [ 213.004562][ T25] page last free pid 5342 tgid 5342 ts 55699072037 stack trace: [ 213.004579][ T25] __free_frozen_pages+0xc93/0xd90 [ 213.004614][ T25] __slab_free+0x274/0x2c0 [ 213.004637][ T25] qlist_free_all+0x99/0x100 [ 213.004660][ T25] kasan_quarantine_reduce+0x148/0x160 [ 213.004684][ T25] __kasan_slab_alloc+0x22/0x80 [ 213.004711][ T25] __kmalloc_noprof+0x307/0x720 [ 213.004733][ T25] tomoyo_realpath_from_path+0xef/0x640 [ 213.004770][ T25] tomoyo_path_perm+0x283/0x560 [ 213.004793][ T25] security_inode_getattr+0x12b/0x310 [ 213.004826][ T25] __x64_sys_newfstat+0x133/0x270 [ 213.004856][ T25] do_syscall_64+0x166/0x520 [ 213.004880][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.004907][ T25] [ 213.004913][ T25] Memory state around the buggy address: [ 213.004926][ T25] ffff88807ba02d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.004943][ T25] ffff88807ba02d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.004959][ T25] >ffff88807ba02e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.004971][ T25] ^ [ 213.004983][ T25] ffff88807ba02e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.004999][ T25] ffff88807ba02f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 213.005012][ T25] ================================================================== [ 213.254933][ T25] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 213.771024][ T25] CPU: 1 UID: 0 PID: 25 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 213.780262][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 213.790358][ T25] Workqueue: events smc_ib_port_event_work [ 213.796267][ T25] Call Trace: [ 213.799581][ T25] [ 213.802548][ T25] vpanic+0x56d/0xa60 [ 213.806621][ T25] ? __pfx_vpanic+0x10/0x10 [ 213.811229][ T25] panic+0xc5/0xd0 [ 213.815017][ T25] ? __pfx_panic+0x10/0x10 [ 213.819506][ T25] ? preempt_schedule_thunk+0x16/0x40 [ 213.824939][ T25] ? __ethtool_get_link_ksettings+0x230/0x250 [ 213.831047][ T25] ? preempt_schedule_thunk+0x16/0x40 [ 213.836491][ T25] ? __ethtool_get_link_ksettings+0x230/0x250 [ 213.842599][ T25] check_panic_on_warn+0x89/0xb0 [ 213.847588][ T25] ? __ethtool_get_link_ksettings+0x230/0x250 [ 213.853697][ T25] end_report+0x73/0x170 [ 213.857993][ T25] ? __ethtool_get_link_ksettings+0x230/0x250 [ 213.864096][ T25] kasan_report+0x128/0x150 [ 213.868695][ T25] ? __ethtool_get_link_ksettings+0x230/0x250 [ 213.874844][ T25] __ethtool_get_link_ksettings+0x230/0x250 [ 213.880811][ T25] __ethtool_get_link_ksettings+0x11f/0x250 [ 213.886760][ T25] ib_get_eth_speed+0x180/0x7f0 [ 213.891683][ T25] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 213.897141][ T25] ? do_raw_spin_unlock+0xf5/0x200 [ 213.902318][ T25] ? rxe_query_port+0x6b/0x3d0 [ 213.907155][ T25] rxe_query_port+0x93/0x3d0 [ 213.911844][ T25] ib_query_port+0x16e/0x830 [ 213.916513][ T25] smc_ib_port_event_work+0x147/0x920 [ 213.921969][ T25] ? rcu_is_watching+0x16/0xb0 [ 213.926788][ T25] ? process_scheduled_works+0x97a/0x1630 [ 213.932561][ T25] process_scheduled_works+0xc3d/0x1630 [ 213.938272][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 213.944325][ T25] ? assign_work+0x3cf/0x5d0 [ 213.949018][ T25] worker_thread+0xa47/0xfb0 [ 213.953769][ T25] kthread+0x38b/0x480 [ 213.957893][ T25] ? __pfx_worker_thread+0x10/0x10 [ 213.963044][ T25] ? __pfx_kthread+0x10/0x10 [ 213.967686][ T25] ret_from_fork+0x514/0xb70 [ 213.972362][ T25] ? __pfx_ret_from_fork+0x10/0x10 [ 213.977530][ T25] ? __switch_to+0xc89/0x1420 [ 213.982267][ T25] ? __pfx_kthread+0x10/0x10 [ 213.986907][ T25] ret_from_fork_asm+0x1a/0x30 [ 213.991793][ T25] [ 213.995442][ T25] Kernel Offset: disabled [ 213.999796][ T25] Rebooting in 86400 seconds..