last executing test programs: 5m33.385461533s ago: executing program 3 (id=426): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x700, 0x0, [@sadb_key={0x1, 0x9, 0x500}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfe, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x58}, 0x1, 0x7}, 0x0) 5m33.178756871s ago: executing program 3 (id=428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000009500000000000000e508c99f283b456dfd16691de3f2c8ff50f13192196a2da6584ab5f7323e0324c9e394a3f820454515dd7afd6cf8870800"/151], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x80000000000000, 0xdc}, 0x0, 0xc8, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xa) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381b6"], 0xfdef) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x8, &(0x7f0000000000)=ANY=[@ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a0006000140020203600e41b0000900ac00060311000000a4000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5m29.271341655s ago: executing program 2 (id=439): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) mount$bpf(0xfff0, 0x0, &(0x7f00000006c0), 0x400008, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x11, 0x65, &(0x7f0000000640), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a40000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003140000001100010000000000fc0000000100000a"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462", 0x26}, {&(0x7f00000018c0)="2c1775af1d8c", 0x6}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)={@fallback, 0xffffffffffffffff, 0x20, 0x20}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0x4}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000001c0)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x9b9b, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) 5m29.243373654s ago: executing program 4 (id=440): r0 = socket$kcm(0x23, 0x5, 0x0) write$cgroup_pressure(r0, 0x0, 0xeaff) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x138f67536d80380e, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x4ec27421, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, 0x0}, 0xf3781f4944fcd8b6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x7, 0x39b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000500)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a48500000004000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5m29.242712755s ago: executing program 0 (id=441): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000300000000000000ff07000000040000", @ANYRES32=0x1, @ANYBLOB="0500000000000000000001000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000000000000d00"/28], 0x50) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080000000000000000050000000500010006200000"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000b40)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20046090) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180), 0x10) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x49, 0x0, 0xfcd8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc2608000000001fbf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000280)={'ip6erspan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r4, r4, 0x2f, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r5, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r5, 0x4) 5m29.183020859s ago: executing program 3 (id=443): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum={0x3}]}, {0x0, [0x5f, 0x5f, 0x61, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1, 0xa1}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x99, 0x1946}, 0x200, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x400}, [@NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6d7f9da3}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}}], {0x14}}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)}, 0x10010) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_clone(0xf026080, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r5, 0x58, &(0x7f0000002140)}, 0x10) sendmsg$nl_route_sched(r4, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1}}}, 0x80, 0x0}, 0x8040) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xd, 0x7, 0x0, 0x7fffffff, 0x420, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x4}, 0x26, 0x7ff, 0x5, 0x4, 0x81, 0x6, 0x5, 0x0, 0x2, 0x0, 0xe7}, 0x0, 0x9, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89f1, &(0x7f0000000080)) sendmsg$nl_xfrm(r1, &(0x7f000000fe80)={0x0, 0x0, &(0x7f000000fe40)={&(0x7f000000fb40)=ANY=[@ANYBLOB="080100002100090027bd7000fbdbdf25200100000000000000000000000000017f0000010000000000000000000000004e2200014e2200060000a080000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b16b6e00000000001c000400ffff4e214e220000fe8000000000000000000000000000aa9c0011000a010101000000000000000000000000fc025100000000000000000000000000010a010101000000000000000000000000e0000002000000000000000000000000000000000235000002000a000a010101000000000000000000000000fc020000000000000000"], 0x108}, 0x1, 0x0, 0x0, 0x882}, 0x4000000) socketpair(0x3, 0x80806, 0x0, &(0x7f0000000040)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b"], 0xfe33) 5m28.984743777s ago: executing program 0 (id=444): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x49) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000000c0)={r0}) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0xb, 0xd}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e10500070088a800008100", 0x1c}, {&(0x7f0000000240)="cb4e88a8af3288a8eef1", 0xa}], 0x2}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x7, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'batadv_slave_1\x00', @random="94f13a60f76a"}) 5m28.785799562s ago: executing program 2 (id=445): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff, 0x401}, 0x0, 0x800, 0x0, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18030100000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2080}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xaffffffffffffffc, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x80ffff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xfffffffffffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)}], 0x1}, 0x0) 5m28.784993184s ago: executing program 4 (id=446): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0, 0x0, 0x2000000}, 0x38) 5m28.677051611s ago: executing program 1 (id=447): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) 5m28.602385455s ago: executing program 0 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x88c0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x34, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @NFT_MSG_DELOBJ={0xec, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x12, 0x8, "d82ffde42dbe7a2c6f8642ad739c846ada69be3c688989f64825520b085e12e35bc7fe1bf2a53132cdfb449fec6fb6226d63a39a08a5f3c9c743fcc2376ecec8fbf93b2d672968ab9124f3939e7a06c457d4829d3ed50aa6d7d0b891718ad964eee7ec30a73b25a3b83538b92b3feb7010c47ca676c03ded5779c5f75ec12d48a53cb1d693ba2ef5134f7892205b54207b4ed5a0a1bc911bec4fc5521452f3e96cd6a631d0e7458a768c2e8c8463b5cb15df6c1e5f8211923a31aa5f13"}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1ac}}, 0x40088) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.events\x00', 0x0, 0x0) gettid() gettid() fstat(r0, &(0x7f0000004fc0)) fstat(r2, &(0x7f0000005040)) gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x8000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r7, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, 0x0) fstat(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000880), 0x200020, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',mode=00000000000000000200201,gid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=r8, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=r9, @ANYBLOB=',mode=00000000000000000000007,euid<', @ANYRESDEC=r9, @ANYBLOB=',fowner<', @ANYRESDEC, @ANYBLOB=',smackfsdef= ,\x00']) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a20fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 5m28.432407714s ago: executing program 4 (id=449): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x104000, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x14, &(0x7f0000000000)=r4, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f000009e0ff008001fffffe1ffff81", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000002030000000000000061"], 0x0, 0x5a, 0x0, 0x0, 0x80000}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x1, 0x84) 5m28.357486464s ago: executing program 1 (id=450): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)='B', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) (async) r3 = perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, r3, 0x0) 5m27.925204857s ago: executing program 3 (id=451): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x0, 0x3ff, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000005304766e1d9fe8ff11d27197d7070000000000000000000500000f14000000f203010000040000000000000000000aab3c88aba286c3841a8770c3d852457fe07d310222112d87d6eb2f0026064323ea0a413d2e071e2f749abde42faf0e3b2bd2240d9e62e49e8200b3dc76cb880358226c86044601b2935069d5981a2b0a0c26d9ac7d4cb28a201fbb8a2228c61f69a382d43c589a9593458b5cf47b6082a37c33efaf79cb8f3b5dbe105b322ec861e7fd"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x5}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) socket$inet(0x2, 0x80000, 0x5) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) 5m27.685113865s ago: executing program 1 (id=452): perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000440)="5c00000013006bcc9e3be35c6e17aa33074b866c1d0000007ea60864160af3653c000cc0080008000000000000001cc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037aef751022297e786a6d20010000420000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004084) 5m27.549551258s ago: executing program 2 (id=453): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ff"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="96", 0x1}, {&(0x7f0000000640)="25b2b3cbea4056eb9d31", 0xa}], 0x2, 0x0, 0x0, 0x900}, 0x0) 5m27.385802383s ago: executing program 0 (id=454): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x800}) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)='#!', 0x2}], 0x1}, 0x40488c4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5m27.384379671s ago: executing program 1 (id=455): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) socket$kcm(0x29, 0x7, 0x0) 5m27.316597548s ago: executing program 4 (id=456): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) socketpair(0x22, 0x2, 0x10, &(0x7f0000002500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0xfffff271, 0xffff, 0x0, 0x0, 0x0, 0x24}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="6c010000170001000000000000000000ffffffff000000000000000000000000000004d600000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e21000000008000000000a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000011000000000000000000ac1414bb00004000000000000000000000000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000020200000000f9ffffff02000000000000000000000044000500fe880000000000000000000000000001000004d23300000002000000000000000000000000000000000000000000000001000500000800000124000000040000"], 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r7 = syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x130a9, 0x6, 0x0, 0x0, 0x9, 0x7ffffc, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) sendmsg$AUDIT_SET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x3e9, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x1, r7, 0x1, 0x0, 0xc3d6, 0x1000, 0x0, 0x6, 0x2}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5m27.23832344s ago: executing program 2 (id=457): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000005c0)) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x44, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) openat$cgroup_ro(r4, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000003"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 5m27.158834648s ago: executing program 0 (id=458): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640a", 0x3}], 0x1, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96", 0x1}, {&(0x7f0000000640)="25b2b3cbea4056eb9d31", 0xa}], 0x2, 0x0, 0x0, 0x900}, 0x0) 5m27.15237173s ago: executing program 1 (id=459): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff0000000095007400000000009f7c9177ee43b0f7973ff49cb471b1fa3344ec1d7b00afe5fc906b357720c8bff70a48b41ae137826fc445bba69cddda9242e904"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x541b, &(0x7f0000000100)={r4}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)}], 0x1}, 0x0) socketpair(0xa, 0x6, 0x80, &(0x7f0000000280)) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c0c5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x10) close(r0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='memory.swap.current\x00', 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x8, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x200, 0xba, &(0x7f0000000240)=""/186, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0xe, 0x9}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x1], &(0x7f0000000440)=[{0x4, 0x4, 0x10, 0x5}, {0x1, 0x5, 0x2, 0x8}, {0x4, 0x2, 0x7, 0x4}, {0x4, 0x1, 0x2, 0x6}, {0x1, 0x3, 0x7, 0x3}, {0x3, 0x3, 0x2, 0xb}, {0x1, 0x3, 0x10}, {0x4, 0x5, 0xa}, {0x5, 0x4, 0x10, 0x6}]}, 0xa7) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000005c0)=@generic={&(0x7f0000000140)='./file0\x00', r9}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0x1d, 0x7, 0x1, 0x0, "3c3735a59f644bcbe73c3df522eae35ad9cbf451958d9d39ab"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) 5m26.918415403s ago: executing program 4 (id=460): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1}, 0x80, 0x0}, 0x0) 5m26.918095419s ago: executing program 3 (id=461): socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x17, 0xa, 0x201, 0x0, 0xc00e, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) 5m26.857667446s ago: executing program 2 (id=462): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0xffa4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0x9}, 0x14105, 0x3, 0xfffffbff, 0x3, 0xffffffff, 0x0, 0x4, 0x0, 0x4000, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4}], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89fb, &(0x7f0000000080)) 5m26.601866717s ago: executing program 0 (id=463): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86a00, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x1000000, 0x1, 0x0, 0xe9f68cb, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x600) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000006da2b00850700004f00007874e082828efcd78de200b9c9e43211205f04e73a6d8290927e384c087e2caee804b4869408f4227693446d607bd3942ba764a12fb4fe52f003fd8031ad8956926db53e0d90df8131bc1f624e5e0e08c41bfb644777d7a7320121cff7a2198c4207ab0851c1474f38712e5bea198bc9f7be68d86dd0445f20d45c8417a45ca69d11e73f2bda15fdc84eb8540593deb3a9618d1ce3531a1330942949daa9497d6ddd64bf9daad6a701dc6984a01d4f29eb3c5030a94a875c7c74a28d01bc7d65e8081f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000340)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000040000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a9968100000005"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000008c0)=r12, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r13 = socket$kcm(0x11, 0x2, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000300)=r14, 0x4) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="1400", 0x2}], 0x1}, 0x44) close(0x3) 5m26.191951693s ago: executing program 32 (id=463): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86a00, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x1000000, 0x1, 0x0, 0xe9f68cb, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, 0x0, 0x600) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000006da2b00850700004f00007874e082828efcd78de200b9c9e43211205f04e73a6d8290927e384c087e2caee804b4869408f4227693446d607bd3942ba764a12fb4fe52f003fd8031ad8956926db53e0d90df8131bc1f624e5e0e08c41bfb644777d7a7320121cff7a2198c4207ab0851c1474f38712e5bea198bc9f7be68d86dd0445f20d45c8417a45ca69d11e73f2bda15fdc84eb8540593deb3a9618d1ce3531a1330942949daa9497d6ddd64bf9daad6a701dc6984a01d4f29eb3c5030a94a875c7c74a28d01bc7d65e8081f"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000340)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x12, &(0x7f00000008c0)=r12, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r13 = socket$kcm(0x11, 0x2, 0x300) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f0000000300)=r14, 0x4) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="1400", 0x2}], 0x1}, 0x44) close(0x3) 5m26.173323171s ago: executing program 1 (id=465): perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4004084) 5m25.844804071s ago: executing program 33 (id=465): perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x3, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x4004084) 5m25.802157393s ago: executing program 2 (id=466): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='svcsock_tcp_state\x00', r2}, 0x18) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0x14, &(0x7f00000001c0)='\x00'}, 0x11) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz0\x00', 0x1ff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7fffffff, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0700000004000000800000000e00000028000000", @ANYRES32, @ANYBLOB="1f8376508833a68c937400"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0x13, &(0x7f0000001c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff30df}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @exit, @jmp={0x5, 0x0, 0xb, 0x5, 0x8, 0x40}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x28, &(0x7f0000000180)=""/40, 0xc0e00, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x6, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x5, 0x4, 0x7}, {0x3, 0x1, 0xe}, {0x4, 0x1, 0xc, 0x6}, {0x5, 0x4, 0x6, 0xa}, {0x4, 0x1, 0x9, 0x7}, {0x5, 0x5, 0x5, 0x1}], 0x10, 0xf0e}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000680)=""/123, 0x7b, 0x0, &(0x7f0000000a40)=""/74, 0x4a}}, 0x10) socket(0x29, 0x2, 0x7fff) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="28664a71bed2fad91c77917bb83571fdf480ae6507a35d0616bd40475bbdf5e7ec1f748daabb530fc4712fa5c9a77ce16a56021d6d6b01686dd6caa6e6cff0bed937e34597731f07d6d9934f554a1378bf6d612042816050c98d0aa497f30c5f42e4f05bcc820000000000000000000000784f4f7ace80296649", 0x7a}, {&(0x7f00000057c0)="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", 0x109b}], 0x2, 0x0, 0x0, 0x7400}, 0x880d0) 5m25.798783658s ago: executing program 34 (id=466): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='svcsock_tcp_state\x00', r2}, 0x18) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, r3, 0x0, 0x14, &(0x7f00000001c0)='\x00'}, 0x11) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000900)='syz0\x00', 0x1ff) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7fffffff, 0x0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0700000004000000800000000e00000028000000", @ANYRES32, @ANYBLOB="1f8376508833a68c937400"/30, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x18) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x13, 0x13, &(0x7f0000001c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff30df}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xc}, @exit, @jmp={0x5, 0x0, 0xb, 0x5, 0x8, 0x40}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x28, &(0x7f0000000180)=""/40, 0xc0e00, 0xa, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x6, &(0x7f00000004c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000600)=[{0x3, 0x5, 0x4, 0x7}, {0x3, 0x1, 0xe}, {0x4, 0x1, 0xc, 0x6}, {0x5, 0x4, 0x6, 0xa}, {0x4, 0x1, 0x9, 0x7}, {0x5, 0x5, 0x5, 0x1}], 0x10, 0xf0e}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000680)=""/123, 0x7b, 0x0, &(0x7f0000000a40)=""/74, 0x4a}}, 0x10) socket(0x29, 0x2, 0x7fff) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="28664a71bed2fad91c77917bb83571fdf480ae6507a35d0616bd40475bbdf5e7ec1f748daabb530fc4712fa5c9a77ce16a56021d6d6b01686dd6caa6e6cff0bed937e34597731f07d6d9934f554a1378bf6d612042816050c98d0aa497f30c5f42e4f05bcc820000000000000000000000784f4f7ace80296649", 0x7a}, {&(0x7f00000057c0)="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", 0x109b}], 0x2, 0x0, 0x0, 0x7400}, 0x880d0) 5m25.790366978s ago: executing program 3 (id=467): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff0000000095007400000000009f7c9177ee43b0f7973ff49cb471b1fa3344ec1d7b00afe5fc906b357720c8bff70a48b41ae137826fc445bba69cddda9242e904"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0xffffffffffffffff) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000100)={r3}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 5m25.787197434s ago: executing program 35 (id=467): socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000079100800000000007b0a00ff0000000095007400000000009f7c9177ee43b0f7973ff49cb471b1fa3344ec1d7b00afe5fc906b357720c8bff70a48b41ae137826fc445bba69cddda9242e904"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0xffffffffffffffff) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000100)={r3}) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 5m25.724594674s ago: executing program 4 (id=468): r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x828, 0x400000000000000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xd0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa4, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "cfd19040e7e5933988a54bbdc20362b0cba09ac7ebcb0654725c22"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x154}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) 5m25.721687293s ago: executing program 36 (id=468): r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x828, 0x400000000000000, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x0, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xd0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x0, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xa4, 0x3, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1f, 0x1, "cfd19040e7e5933988a54bbdc20362b0cba09ac7ebcb0654725c22"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x154}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) 12.957747142s ago: executing program 6 (id=2759): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 12.573949688s ago: executing program 9 (id=2761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd"], 0x66) 12.502305361s ago: executing program 6 (id=2762): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x7, 0x4, 0x80, 0xe, 0x28}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0xa00, 0xc8, 0x4, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece"], 0x0}, 0x94) sendmsg$unix(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1b) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) close(0xffffffffffffffff) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x9, 0x4, 0x2, 0xc7, 0x0, 0x25, 0x404, 0xe, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x8}, 0x4800, 0x6, 0x9, 0x0, 0xf, 0xa5, 0x4, 0x0, 0x6, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb79"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1900000004000000040000000200020000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000002e0f6e82d559c5d89285aa5515513ba2e947603b83ed5bd526bdf94f27d77adb5431ff2446d3c0654542795aa87f46852a11ac62302db2aca173e4"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) 12.072334177s ago: executing program 6 (id=2768): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) 9.022541716s ago: executing program 6 (id=2782): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x440, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 8.989908851s ago: executing program 9 (id=2785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 8.937838255s ago: executing program 6 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.862880893s ago: executing program 9 (id=2787): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000000540)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x8, [@func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x2, 0x1}, {0x9, 0x5}, {0xb, 0x1}, {0x6, 0x2}, {0xa, 0x3}]}, @float={0x4, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x2e, 0x2e, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000900)=""/55, 0x60, 0x37, 0x1, 0xffffffff}, 0x28) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r1) 8.578367236s ago: executing program 9 (id=2793): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x709}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r0, 0x0, 0x200000}, 0x38) 7.4272871s ago: executing program 9 (id=2798): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f00000002c0), &(0x7f0000000400)=r0}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20044080}, 0x4004004) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000001c0), 0x4) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xa, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 7.326697975s ago: executing program 7 (id=2801): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="040000000400000004000000050001"], 0x48) close(r0) 7.050471189s ago: executing program 7 (id=2804): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000008000005c"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b5181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x709}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000100), 0x200df000, r1, 0x0, 0x200000}, 0x38) 6.617936s ago: executing program 8 (id=2805): mkdir(&(0x7f0000000180)='./file0\x00', 0x8) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)=@generic={&(0x7f00000001c0)='./file0\x00', r0}, 0x18) 5.985970887s ago: executing program 7 (id=2806): r0 = bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="06000000040000006d0000000006"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x200df000, r0, 0x0, 0xf2}, 0x38) 5.924667962s ago: executing program 8 (id=2807): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = gettid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {r4, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}], 0x40, 0x800}, 0x0) write$cgroup_pid(r3, &(0x7f0000000200)=r4, 0x12) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETQUEUE(r8, 0x400454d9, 0x0) close(r8) 5.924024988s ago: executing program 9 (id=2808): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xd, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 5.659695746s ago: executing program 7 (id=2810): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@id={0x1e, 0x3, 0x0, {0x4e21}}, 0x10, 0x0}, 0x0) 4.989598107s ago: executing program 7 (id=2812): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000bf03000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0004f678ec630000000066"], 0xd) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x8202) 4.98897036s ago: executing program 8 (id=2813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x0, {{0x40}, 0x1}}, 0x10, 0x0}, 0x0) 4.616942663s ago: executing program 8 (id=2814): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), 0x0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) 2.8849572s ago: executing program 5 (id=2815): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 2.755717321s ago: executing program 5 (id=2816): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00', r3}, 0x10) write$cgroup_int(r2, &(0x7f0000000200), 0x43451) 2.688393851s ago: executing program 5 (id=2817): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000000001}, 0x2, 0x8, 0x9, 0x0, 0x0, 0x8, 0x4}, r0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff65) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x3f1, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socketpair(0x28, 0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0xfe1b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'net_cls'}]}, 0x9) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000600)="96c06f40bac2d0f76d58d1979c63a44c482f006f80671fa2b6ab317d7d0e76fad55915c7919216abb158b3948428341d23b70355250ff9a6596968b87dd6f8c8826e19071c72eb4fc4be", &(0x7f0000000680)="e7070f60b09f19e9fffbe56f6c27e836528ac1483d5a1d9ea19cc3157bfb1e80aa8aef8a0f0031f7a13a0ff0f61988b837627727e710cc0e376bd57bc48ee443103a0ae9db9718d597355ce7ffba7e9ae91d88c44731ecf5d2d0a7f3340c1caa20cac258431614aa7cc5566ac3f5d2826fcd9c490bb032711df91445537f1cdd2567032a8791c088f735432715351976cb022f2f84a783f12d8ded144786b0a6f5", 0x0, r3, 0x4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) 2.514216984s ago: executing program 5 (id=2818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x2a) 1.006206364s ago: executing program 7 (id=2819): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[], &(0x7f0000000040)=""/247, 0x1a, 0xf7, 0x1}, 0x28) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000700)=@base={0xb, 0x4, 0xffff, 0x6}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r5, &(0x7f00000005c0), &(0x7f00000003c0)=""/74}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) 1.005733175s ago: executing program 5 (id=2820): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="17010000a4fc0a000500feff"], &(0x7f0000000000)='GPL\x00', 0x6, 0xf4240, &(0x7f0000003300)=""/137, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1000000}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000007c0), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') 1.004961769s ago: executing program 8 (id=2821): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) 938.827642ms ago: executing program 8 (id=2822): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0xe8034000, 0x0, 0x5a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34", 0x5dc}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f00000002c0)=[0x0], 0x0, 0xe6, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x43, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x514, 0x266}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e0301000000000064050000000000006916340000000000bf07000000000000260507000fff07206706000020000000470600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 474.930779ms ago: executing program 6 (id=2823): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r1) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/132, 0x84}], 0x1, &(0x7f0000000340)=""/10, 0xa}, 0x40010000) 0s ago: executing program 5 (id=2824): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): as an invalid length. [ 308.626630][T10805] FAULT_INJECTION: forcing a failure. [ 308.626630][T10805] name failslab, interval 1, probability 0, space 0, times 0 [ 308.668032][T10805] CPU: 1 UID: 0 PID: 10805 Comm: syz.9.1605 Not tainted syzkaller #0 PREEMPT(full) [ 308.668059][T10805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.668070][T10805] Call Trace: [ 308.668078][T10805] [ 308.668087][T10805] dump_stack_lvl+0x189/0x250 [ 308.668112][T10805] ? __pfx____ratelimit+0x10/0x10 [ 308.668134][T10805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.668152][T10805] ? __pfx__printk+0x10/0x10 [ 308.668180][T10805] ? __pfx___might_resched+0x10/0x10 [ 308.668205][T10805] should_fail_ex+0x414/0x560 [ 308.668234][T10805] ? nf_hook_entries_grow+0x27c/0x710 [ 308.668257][T10805] should_failslab+0xa8/0x100 [ 308.668281][T10805] __kvmalloc_node_noprof+0x161/0x5f0 [ 308.668315][T10805] ? nf_hook_entries_grow+0x27c/0x710 [ 308.668346][T10805] nf_hook_entries_grow+0x27c/0x710 [ 308.668391][T10805] __nf_register_net_hook+0x2c9/0x930 [ 308.668430][T10805] nf_register_net_hook+0xb2/0x190 [ 308.668458][T10805] nf_register_net_hooks+0x44/0x1b0 [ 308.668486][T10805] nf_ct_netns_do_get+0x3bf/0x5a0 [ 308.668516][T10805] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 308.668558][T10805] nf_ct_netns_inet_get+0x1f/0x150 [ 308.668587][T10805] nft_connlimit_do_init+0x1de/0x2e0 [ 308.668618][T10805] nft_set_elem_expr_alloc+0x1d8/0x590 [ 308.668645][T10805] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 308.668688][T10805] ? nla_strcmp+0x106/0x140 [ 308.668708][T10805] ? nla_strcmp+0x106/0x140 [ 308.668746][T10805] nf_tables_newsetelem+0x1688/0x4340 [ 308.668824][T10805] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 308.668845][T10805] ? __pfx_perf_trace_lock+0x10/0x10 [ 308.668886][T10805] ? nla_validate_array+0xfc/0x260 [ 308.668943][T10805] ? __pfx___nla_validate_parse+0x10/0x10 [ 308.668965][T10805] ? perf_trace_lock+0xec/0x3b0 [ 308.668990][T10805] ? __pfx_perf_trace_lock+0x10/0x10 [ 308.669019][T10805] ? nfnl_pernet+0x23/0x240 [ 308.669054][T10805] ? __nla_parse+0x40/0x60 [ 308.669084][T10805] nfnetlink_rcv+0x1132/0x2520 [ 308.669149][T10805] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 308.669194][T10805] ? ref_tracker_free+0x63a/0x7d0 [ 308.669256][T10805] ? __netlink_deliver_tap+0x807/0x850 [ 308.669280][T10805] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.669333][T10805] netlink_unicast+0x82c/0x9e0 [ 308.669368][T10805] ? __pfx_netlink_unicast+0x10/0x10 [ 308.669393][T10805] ? netlink_sendmsg+0x642/0xb30 [ 308.669413][T10805] ? skb_put+0x11b/0x210 [ 308.669436][T10805] netlink_sendmsg+0x805/0xb30 [ 308.669473][T10805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.669502][T10805] ? aa_sock_msg_perm+0xf1/0x1d0 [ 308.669522][T10805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.669540][T10805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.669566][T10805] __sock_sendmsg+0x21c/0x270 [ 308.669593][T10805] ____sys_sendmsg+0x505/0x830 [ 308.669620][T10805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.669651][T10805] ? import_iovec+0x74/0xa0 [ 308.669677][T10805] ___sys_sendmsg+0x21f/0x2a0 [ 308.669699][T10805] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.669747][T10805] ? __fget_files+0x2a/0x420 [ 308.669782][T10805] ? __fget_files+0x2a/0x420 [ 308.669796][T10805] ? __fget_files+0x3a0/0x420 [ 308.669828][T10805] __x64_sys_sendmsg+0x19b/0x260 [ 308.669851][T10805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.669883][T10805] ? __pfx_ksys_write+0x10/0x10 [ 308.669902][T10805] ? rcu_is_watching+0x15/0xb0 [ 308.669928][T10805] ? do_syscall_64+0xbe/0x3b0 [ 308.669957][T10805] do_syscall_64+0xfa/0x3b0 [ 308.669978][T10805] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.670000][T10805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.670017][T10805] ? clear_bhb_loop+0x60/0xb0 [ 308.670040][T10805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.670056][T10805] RIP: 0033:0x7ff0fe78ebe9 [ 308.670073][T10805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.670087][T10805] RSP: 002b:00007ff0fc9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.670106][T10805] RAX: ffffffffffffffda RBX: 00007ff0fe9c6090 RCX: 00007ff0fe78ebe9 [ 308.670118][T10805] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 308.670129][T10805] RBP: 00007ff0fc9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 308.670140][T10805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.670150][T10805] R13: 00007ff0fe9c6128 R14: 00007ff0fe9c6090 R15: 00007ffd19ecf5b8 [ 308.670185][T10805] [ 309.399654][T10809] siw: device registration error -23 [ 310.647094][T10843] netlink: 'syz.9.1617': attribute type 5 has an invalid length. [ 310.686159][T10842] siw: device registration error -23 [ 310.692679][T10843] netlink: 'syz.9.1617': attribute type 11 has an invalid length. [ 311.135914][T10858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1620'. [ 311.637463][T10872] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1625'. [ 311.921186][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1626'. [ 312.124470][T10878] netlink: 'syz.5.1627': attribute type 21 has an invalid length. [ 312.471401][T10887] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1629'. [ 312.740007][T10899] siw: device registration error -23 [ 312.851578][T10904] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1636'. [ 313.196597][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1635'. [ 314.808357][T10960] netlink: 'syz.8.1655': attribute type 21 has an invalid length. [ 314.944492][T10960] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1655'. [ 315.149759][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1659'. [ 315.238784][T10962] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1659'. [ 315.799576][T10970] netlink: 6955 bytes leftover after parsing attributes in process `syz.9.1660'. [ 315.850170][T10970] netlink: 127868 bytes leftover after parsing attributes in process `syz.9.1660'. [ 316.793848][T10999] netlink: 4400 bytes leftover after parsing attributes in process `syz.8.1672'. [ 316.870898][T11003] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1672'. [ 317.109587][T11006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1673'. [ 317.238364][T11011] netlink: 'syz.5.1673': attribute type 5 has an invalid length. [ 317.271976][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.281663][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.301340][T11017] FAULT_INJECTION: forcing a failure. [ 317.301340][T11017] name failslab, interval 1, probability 0, space 0, times 0 [ 317.303139][T11011] netlink: 'syz.5.1673': attribute type 11 has an invalid length. [ 317.354515][T11017] CPU: 0 UID: 0 PID: 11017 Comm: syz.8.1678 Not tainted syzkaller #0 PREEMPT(full) [ 317.354541][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.354551][T11017] Call Trace: [ 317.354560][T11017] [ 317.354570][T11017] dump_stack_lvl+0x189/0x250 [ 317.354597][T11017] ? __pfx____ratelimit+0x10/0x10 [ 317.354625][T11017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.354650][T11017] ? __pfx__printk+0x10/0x10 [ 317.354693][T11017] ? __pfx___might_resched+0x10/0x10 [ 317.354730][T11017] should_fail_ex+0x414/0x560 [ 317.354773][T11017] should_failslab+0xa8/0x100 [ 317.354806][T11017] __kmalloc_noprof+0xcb/0x4f0 [ 317.354829][T11017] ? nft_obj_type_get+0x26/0x460 [ 317.354852][T11017] ? nft_obj_init+0x53/0x360 [ 317.354890][T11017] nft_obj_init+0x53/0x360 [ 317.354930][T11017] nf_tables_newobj+0xac7/0x1320 [ 317.354997][T11017] ? __pfx_nf_tables_newobj+0x10/0x10 [ 317.355044][T11017] ? __nla_parse+0x40/0x60 [ 317.355086][T11017] nfnetlink_rcv+0x1132/0x2520 [ 317.355201][T11017] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 317.355356][T11017] ? __netlink_deliver_tap+0x807/0x850 [ 317.355383][T11017] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.355459][T11017] netlink_unicast+0x82c/0x9e0 [ 317.355515][T11017] ? __pfx_netlink_unicast+0x10/0x10 [ 317.355548][T11017] ? netlink_sendmsg+0x642/0xb30 [ 317.355568][T11017] ? skb_put+0x11b/0x210 [ 317.355599][T11017] netlink_sendmsg+0x805/0xb30 [ 317.355651][T11017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.355687][T11017] ? aa_sock_msg_perm+0xf1/0x1d0 [ 317.355712][T11017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.355731][T11017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.355760][T11017] __sock_sendmsg+0x21c/0x270 [ 317.355794][T11017] ____sys_sendmsg+0x505/0x830 [ 317.355831][T11017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.355878][T11017] ? import_iovec+0x74/0xa0 [ 317.355913][T11017] ___sys_sendmsg+0x21f/0x2a0 [ 317.355942][T11017] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.356021][T11017] ? __fget_files+0x2a/0x420 [ 317.356071][T11017] ? __fget_files+0x2a/0x420 [ 317.356086][T11017] ? __fget_files+0x3a0/0x420 [ 317.356139][T11017] __x64_sys_sendmsg+0x19b/0x260 [ 317.356169][T11017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.356217][T11017] ? __pfx_ksys_write+0x10/0x10 [ 317.356236][T11017] ? rcu_is_watching+0x15/0xb0 [ 317.356271][T11017] ? do_syscall_64+0xbe/0x3b0 [ 317.356307][T11017] do_syscall_64+0xfa/0x3b0 [ 317.356328][T11017] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.356352][T11017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.356370][T11017] ? clear_bhb_loop+0x60/0xb0 [ 317.356399][T11017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.356416][T11017] RIP: 0033:0x7f86dd58ebe9 [ 317.356436][T11017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.356449][T11017] RSP: 002b:00007f86de4ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.356468][T11017] RAX: ffffffffffffffda RBX: 00007f86dd7c5fa0 RCX: 00007f86dd58ebe9 [ 317.356486][T11017] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 317.356496][T11017] RBP: 00007f86de4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 317.356506][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.356516][T11017] R13: 00007f86dd7c6038 R14: 00007f86dd7c5fa0 R15: 00007ffdd142db58 [ 317.356574][T11017] [ 317.713051][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1676'. [ 318.780943][T11047] netlink: 6955 bytes leftover after parsing attributes in process `syz.9.1685'. [ 318.826008][T11047] netlink: 127868 bytes leftover after parsing attributes in process `syz.9.1685'. [ 319.163288][T11058] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1691'. [ 319.665928][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1695'. [ 319.781699][T11087] netlink: 'syz.6.1699': attribute type 10 has an invalid length. [ 319.782806][T11072] netlink: 'syz.9.1695': attribute type 5 has an invalid length. [ 319.834671][T11088] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1701'. [ 319.899039][T11072] netlink: 'syz.9.1695': attribute type 11 has an invalid length. [ 320.576379][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1703'. [ 322.312371][T11151] netlink: 'syz.7.1718': attribute type 5 has an invalid length. [ 322.320401][T11151] netlink: 'syz.7.1718': attribute type 11 has an invalid length. [ 322.835906][T11140] __nla_validate_parse: 7 callbacks suppressed [ 322.835927][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1716'. [ 322.879348][T11140] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1716'. [ 322.934172][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1721'. [ 322.961119][T11159] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1721'. [ 322.986641][T11161] netlink: 'syz.8.1722': attribute type 10 has an invalid length. [ 323.204658][T11165] netlink: 'syz.8.1724': attribute type 62 has an invalid length. [ 323.236972][T11165] netlink: 65055 bytes leftover after parsing attributes in process `syz.8.1724'. [ 323.430495][T11169] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1725'. [ 323.615305][T11178] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1730'. [ 323.719916][T11179] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1728'. [ 324.128672][T11196] netlink: 'syz.7.1734': attribute type 10 has an invalid length. [ 324.173490][T11202] netlink: 'syz.5.1737': attribute type 10 has an invalid length. [ 324.204884][T11202] batadv0: left allmulticast mode [ 324.209971][T11202] batadv0: left promiscuous mode [ 324.234004][T11202] bridge0: port 1(batadv0) entered disabled state [ 324.263443][T11206] netlink: 'syz.5.1737': attribute type 10 has an invalid length. [ 324.292153][T11206] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1737'. [ 324.339989][T11208] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1738'. [ 324.381026][T11202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.421769][T11202] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 324.716698][T11219] FAULT_INJECTION: forcing a failure. [ 324.716698][T11219] name failslab, interval 1, probability 0, space 0, times 0 [ 324.780968][T11219] CPU: 1 UID: 0 PID: 11219 Comm: syz.7.1743 Not tainted syzkaller #0 PREEMPT(full) [ 324.780995][T11219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.781005][T11219] Call Trace: [ 324.781012][T11219] [ 324.781021][T11219] dump_stack_lvl+0x189/0x250 [ 324.781047][T11219] ? __pfx____ratelimit+0x10/0x10 [ 324.781072][T11219] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.781092][T11219] ? __pfx__printk+0x10/0x10 [ 324.781131][T11219] should_fail_ex+0x414/0x560 [ 324.781158][T11219] should_failslab+0xa8/0x100 [ 324.781184][T11219] __kmalloc_cache_noprof+0x70/0x3d0 [ 324.781206][T11219] ? sctp_add_bind_addr+0x8c/0x370 [ 324.781232][T11219] sctp_add_bind_addr+0x8c/0x370 [ 324.781259][T11219] sctp_copy_local_addr_list+0x30b/0x4e0 [ 324.781284][T11219] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 324.781305][T11219] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 324.781332][T11219] ? sctp_v4_is_any+0x35/0x60 [ 324.781352][T11219] ? sctp_copy_one_addr+0x93/0x360 [ 324.781376][T11219] sctp_bind_addr_copy+0xb3/0x3c0 [ 324.781397][T11219] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 324.781419][T11219] sctp_connect_new_asoc+0x2e0/0x690 [ 324.781439][T11219] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 324.781454][T11219] ? __local_bh_enable_ip+0x12d/0x1c0 [ 324.781480][T11219] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 324.781500][T11219] ? security_sctp_bind_connect+0x7e/0x2e0 [ 324.781525][T11219] sctp_sendmsg+0x155c/0x2810 [ 324.781571][T11219] ? __pfx_sctp_sendmsg+0x10/0x10 [ 324.781599][T11219] ? aa_sk_perm+0x81e/0x950 [ 324.781629][T11219] ? __pfx_aa_sk_perm+0x10/0x10 [ 324.781656][T11219] ? sock_rps_record_flow+0x19/0x410 [ 324.781687][T11219] ? inet_sendmsg+0x2f4/0x370 [ 324.781711][T11219] __sock_sendmsg+0x19c/0x270 [ 324.781737][T11219] ____sys_sendmsg+0x505/0x830 [ 324.781763][T11219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.781791][T11219] ? import_iovec+0x74/0xa0 [ 324.781814][T11219] ___sys_sendmsg+0x21f/0x2a0 [ 324.781834][T11219] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.781893][T11219] ? __fget_files+0x2a/0x420 [ 324.781907][T11219] ? __fget_files+0x3a0/0x420 [ 324.781931][T11219] __x64_sys_sendmsg+0x19b/0x260 [ 324.781950][T11219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.781976][T11219] ? __pfx_ksys_write+0x10/0x10 [ 324.781995][T11219] ? rcu_is_watching+0x15/0xb0 [ 324.782022][T11219] ? do_syscall_64+0xbe/0x3b0 [ 324.782050][T11219] do_syscall_64+0xfa/0x3b0 [ 324.782071][T11219] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.782092][T11219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.782110][T11219] ? clear_bhb_loop+0x60/0xb0 [ 324.782131][T11219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.782148][T11219] RIP: 0033:0x7fac55d8ebe9 [ 324.782164][T11219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.782178][T11219] RSP: 002b:00007fac56b4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.782198][T11219] RAX: ffffffffffffffda RBX: 00007fac55fc5fa0 RCX: 00007fac55d8ebe9 [ 324.782210][T11219] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000004 [ 324.782222][T11219] RBP: 00007fac56b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 324.782232][T11219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.782243][T11219] R13: 00007fac55fc6038 R14: 00007fac55fc5fa0 R15: 00007ffeb4264f48 [ 324.782274][T11219] [ 325.457268][T11223] tc_dump_action: action bad kind [ 325.899082][T11235] netlink: 'syz.7.1748': attribute type 39 has an invalid length. [ 326.320736][T11248] netlink: 'syz.9.1749': attribute type 10 has an invalid length. [ 326.355216][T11250] netlink: 'syz.8.1754': attribute type 21 has an invalid length. [ 326.376104][T11250] netlink: 'syz.8.1754': attribute type 1 has an invalid length. [ 328.159515][T11277] __nla_validate_parse: 3 callbacks suppressed [ 328.159536][T11277] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1764'. [ 328.250766][T11277] netlink: 'syz.5.1764': attribute type 5 has an invalid length. [ 328.267294][T11277] netlink: 'syz.5.1764': attribute type 11 has an invalid length. [ 328.747535][T11285] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.1767'. [ 330.022119][T11296] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1772'. [ 330.101674][T11300] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1773'. [ 330.684066][T11327] netlink: 'syz.8.1782': attribute type 10 has an invalid length. [ 330.739082][T11331] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.1779'. [ 331.139758][T11337] netlink: 'syz.7.1785': attribute type 29 has an invalid length. [ 331.164360][T11337] netlink: 'syz.7.1785': attribute type 29 has an invalid length. [ 331.187205][T11337] netlink: 'syz.7.1785': attribute type 29 has an invalid length. [ 331.280309][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1786'. [ 331.372115][T11340] netlink: 'syz.7.1786': attribute type 5 has an invalid length. [ 331.389718][T11340] netlink: 'syz.7.1786': attribute type 11 has an invalid length. [ 332.247617][T11368] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1796'. [ 332.504385][T11379] macsec0: entered promiscuous mode [ 332.548617][T11382] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1800'. [ 332.570768][T11379] macsec0: entered allmulticast mode [ 332.579529][T11379] veth1_macvtap: entered allmulticast mode [ 332.687366][T11384] netlink: 'syz.7.1801': attribute type 10 has an invalid length. [ 332.696455][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1802'. [ 332.801541][T11392] netlink: 'syz.5.1802': attribute type 5 has an invalid length. [ 332.827528][T11392] netlink: 'syz.5.1802': attribute type 11 has an invalid length. [ 333.140432][T11399] netlink: 'syz.7.1807': attribute type 7 has an invalid length. [ 333.494865][T11405] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1809'. [ 333.540517][T11405] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1809'. [ 333.958033][T11417] FAULT_INJECTION: forcing a failure. [ 333.958033][T11417] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.978999][T11417] CPU: 1 UID: 0 PID: 11417 Comm: syz.5.1812 Not tainted syzkaller #0 PREEMPT(full) [ 333.979025][T11417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.979045][T11417] Call Trace: [ 333.979053][T11417] [ 333.979062][T11417] dump_stack_lvl+0x189/0x250 [ 333.979091][T11417] ? __pfx____ratelimit+0x10/0x10 [ 333.979118][T11417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.979140][T11417] ? __pfx__printk+0x10/0x10 [ 333.979166][T11417] ? __might_fault+0xb0/0x130 [ 333.979219][T11417] should_fail_ex+0x414/0x560 [ 333.979283][T11417] _copy_from_user+0x2d/0xb0 [ 333.979307][T11417] generic_map_update_batch+0x572/0x7f0 [ 333.979370][T11417] ? __pfx_generic_map_update_batch+0x10/0x10 [ 333.979393][T11417] ? __fget_files+0x2a/0x420 [ 333.979429][T11417] ? __pfx_generic_map_update_batch+0x10/0x10 [ 333.979450][T11417] bpf_map_do_batch+0x369/0x5f0 [ 333.979501][T11417] __sys_bpf+0x6af/0x870 [ 333.979534][T11417] ? __pfx___sys_bpf+0x10/0x10 [ 333.979602][T11417] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 333.979630][T11417] ? __pfx_ksys_write+0x10/0x10 [ 333.979649][T11417] ? rcu_is_watching+0x15/0xb0 [ 333.979692][T11417] __x64_sys_bpf+0x7c/0x90 [ 333.979719][T11417] do_syscall_64+0xfa/0x3b0 [ 333.979742][T11417] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.979766][T11417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.979784][T11417] ? clear_bhb_loop+0x60/0xb0 [ 333.979812][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.979829][T11417] RIP: 0033:0x7f4bab38ebe9 [ 333.979849][T11417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.979864][T11417] RSP: 002b:00007f4bac29f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.979884][T11417] RAX: ffffffffffffffda RBX: 00007f4bab5c5fa0 RCX: 00007f4bab38ebe9 [ 333.979897][T11417] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 333.979908][T11417] RBP: 00007f4bac29f090 R08: 0000000000000000 R09: 0000000000000000 [ 333.979919][T11417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.979929][T11417] R13: 00007f4bab5c6038 R14: 00007f4bab5c5fa0 R15: 00007ffc8eebadd8 [ 333.979986][T11417] [ 334.327717][T11428] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1816'. [ 334.356122][T11428] netlink: 'syz.9.1816': attribute type 28 has an invalid length. [ 334.364549][T11428] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1816'. [ 334.536408][T11438] FAULT_INJECTION: forcing a failure. [ 334.536408][T11438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.599949][T11438] CPU: 0 UID: 0 PID: 11438 Comm: syz.8.1819 Not tainted syzkaller #0 PREEMPT(full) [ 334.599976][T11438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.599987][T11438] Call Trace: [ 334.599994][T11438] [ 334.600003][T11438] dump_stack_lvl+0x189/0x250 [ 334.600029][T11438] ? __pfx____ratelimit+0x10/0x10 [ 334.600053][T11438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.600074][T11438] ? __pfx__printk+0x10/0x10 [ 334.600101][T11438] ? __might_fault+0xb0/0x130 [ 334.600132][T11438] should_fail_ex+0x414/0x560 [ 334.600162][T11438] _copy_to_user+0x31/0xb0 [ 334.600186][T11438] simple_read_from_buffer+0xe1/0x170 [ 334.600217][T11438] proc_fail_nth_read+0x1b3/0x220 [ 334.600241][T11438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.600266][T11438] ? rw_verify_area+0x2a6/0x4d0 [ 334.600287][T11438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.600309][T11438] vfs_read+0x200/0xa30 [ 334.600329][T11438] ? fdget_pos+0x247/0x320 [ 334.600351][T11438] ? __pfx___mutex_lock+0x10/0x10 [ 334.600375][T11438] ? __pfx_vfs_read+0x10/0x10 [ 334.600400][T11438] ? __fget_files+0x2a/0x420 [ 334.600421][T11438] ? __fget_files+0x3a0/0x420 [ 334.600436][T11438] ? __fget_files+0x2a/0x420 [ 334.600463][T11438] ksys_read+0x145/0x250 [ 334.600483][T11438] ? __fget_files+0x3a0/0x420 [ 334.600501][T11438] ? __pfx_ksys_read+0x10/0x10 [ 334.600529][T11438] ? do_syscall_64+0xbe/0x3b0 [ 334.600557][T11438] do_syscall_64+0xfa/0x3b0 [ 334.600578][T11438] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.600600][T11438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.600618][T11438] ? clear_bhb_loop+0x60/0xb0 [ 334.600640][T11438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.600657][T11438] RIP: 0033:0x7f86dd58d5fc [ 334.600672][T11438] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 334.600687][T11438] RSP: 002b:00007f86de499030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.600713][T11438] RAX: ffffffffffffffda RBX: 00007f86dd7c6090 RCX: 00007f86dd58d5fc [ 334.600725][T11438] RDX: 000000000000000f RSI: 00007f86de4990a0 RDI: 0000000000000006 [ 334.600736][T11438] RBP: 00007f86de499090 R08: 0000000000000000 R09: 0000000000000000 [ 334.600746][T11438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.600756][T11438] R13: 00007f86dd7c6128 R14: 00007f86dd7c6090 R15: 00007ffdd142db58 [ 334.600790][T11438] [ 335.057100][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1823'. [ 335.109676][T11449] netlink: 703 bytes leftover after parsing attributes in process `syz.6.1820'. [ 335.564300][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1830'. [ 335.587401][T11472] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1830'. [ 335.739803][T11470] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1831'. [ 335.895902][T11482] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1835'. [ 336.546049][T11522] validate_nla: 4 callbacks suppressed [ 336.546071][T11522] netlink: 'syz.5.1847': attribute type 15 has an invalid length. [ 336.642622][T11527] FAULT_INJECTION: forcing a failure. [ 336.642622][T11527] name failslab, interval 1, probability 0, space 0, times 0 [ 336.666200][T11527] CPU: 1 UID: 0 PID: 11527 Comm: syz.8.1849 Not tainted syzkaller #0 PREEMPT(full) [ 336.666232][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.666242][T11527] Call Trace: [ 336.666250][T11527] [ 336.666258][T11527] dump_stack_lvl+0x189/0x250 [ 336.666283][T11527] ? __pfx____ratelimit+0x10/0x10 [ 336.666305][T11527] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.666325][T11527] ? __pfx__printk+0x10/0x10 [ 336.666350][T11527] ? __pfx___might_resched+0x10/0x10 [ 336.666368][T11527] ? fs_reclaim_acquire+0x7d/0x100 [ 336.666390][T11527] should_fail_ex+0x414/0x560 [ 336.666416][T11527] ? nf_hook_entries_grow+0x27c/0x710 [ 336.666438][T11527] should_failslab+0xa8/0x100 [ 336.666463][T11527] __kvmalloc_node_noprof+0x161/0x5f0 [ 336.666487][T11527] ? nf_hook_entries_grow+0x27c/0x710 [ 336.666509][T11527] ? __pfx___mutex_lock+0x10/0x10 [ 336.666537][T11527] nf_hook_entries_grow+0x27c/0x710 [ 336.666578][T11527] __nf_register_net_hook+0x2c9/0x930 [ 336.666614][T11527] nf_register_net_hook+0xb2/0x190 [ 336.666640][T11527] nf_register_net_hooks+0x44/0x1b0 [ 336.666674][T11527] nf_defrag_ipv6_enable+0x87/0x120 [ 336.666702][T11527] nf_ct_netns_do_get+0x1e7/0x5a0 [ 336.666731][T11527] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 336.666773][T11527] nf_ct_netns_inet_get+0x3b/0x150 [ 336.666801][T11527] nft_connlimit_do_init+0x1de/0x2e0 [ 336.666830][T11527] nft_set_elem_expr_alloc+0x1d8/0x590 [ 336.666857][T11527] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 336.666896][T11527] ? nla_strcmp+0x106/0x140 [ 336.666917][T11527] ? nla_strcmp+0x106/0x140 [ 336.666953][T11527] nf_tables_newsetelem+0x1688/0x4340 [ 336.667021][T11527] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 336.667038][T11527] ? __lock_acquire+0xab9/0xd20 [ 336.667087][T11527] ? nla_validate_array+0xfc/0x260 [ 336.667141][T11527] ? __pfx___nla_validate_parse+0x10/0x10 [ 336.667178][T11527] ? __lock_acquire+0xab9/0xd20 [ 336.667213][T11527] ? nfnl_pernet+0x23/0x240 [ 336.667245][T11527] ? __nla_parse+0x40/0x60 [ 336.667274][T11527] nfnetlink_rcv+0x1132/0x2520 [ 336.667332][T11527] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 336.667373][T11527] ? ref_tracker_free+0x63a/0x7d0 [ 336.667427][T11527] ? __netlink_deliver_tap+0x807/0x850 [ 336.667451][T11527] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.667495][T11527] netlink_unicast+0x82c/0x9e0 [ 336.667533][T11527] ? __pfx_netlink_unicast+0x10/0x10 [ 336.667557][T11527] ? netlink_sendmsg+0x642/0xb30 [ 336.667578][T11527] ? skb_put+0x11b/0x210 [ 336.667599][T11527] netlink_sendmsg+0x805/0xb30 [ 336.667639][T11527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.667671][T11527] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.667691][T11527] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.667715][T11527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.667740][T11527] __sock_sendmsg+0x21c/0x270 [ 336.667765][T11527] ____sys_sendmsg+0x505/0x830 [ 336.667791][T11527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.667820][T11527] ? import_iovec+0x74/0xa0 [ 336.667843][T11527] ___sys_sendmsg+0x21f/0x2a0 [ 336.667865][T11527] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.667926][T11527] ? __fget_files+0x2a/0x420 [ 336.667941][T11527] ? __fget_files+0x3a0/0x420 [ 336.667970][T11527] __x64_sys_sendmsg+0x19b/0x260 [ 336.667992][T11527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.668022][T11527] ? __pfx_ksys_write+0x10/0x10 [ 336.668041][T11527] ? rcu_is_watching+0x15/0xb0 [ 336.668065][T11527] ? do_syscall_64+0xbe/0x3b0 [ 336.668092][T11527] do_syscall_64+0xfa/0x3b0 [ 336.668113][T11527] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.668135][T11527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.668152][T11527] ? clear_bhb_loop+0x60/0xb0 [ 336.668174][T11527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.668190][T11527] RIP: 0033:0x7f86dd58ebe9 [ 336.668206][T11527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.668221][T11527] RSP: 002b:00007f86de499038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.668240][T11527] RAX: ffffffffffffffda RBX: 00007f86dd7c6090 RCX: 00007f86dd58ebe9 [ 336.668253][T11527] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 336.668264][T11527] RBP: 00007f86de499090 R08: 0000000000000000 R09: 0000000000000000 [ 336.668290][T11527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.668301][T11527] R13: 00007f86dd7c6128 R14: 00007f86dd7c6090 R15: 00007ffdd142db58 [ 336.668332][T11527] [ 337.228862][T11536] C: renamed from team_slave_0 (while UP) [ 337.253727][T11536] netlink: 'syz.6.1854': attribute type 3 has an invalid length. [ 337.262473][T11536] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 337.892720][T11564] FAULT_INJECTION: forcing a failure. [ 337.892720][T11564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.908302][T11564] CPU: 0 UID: 0 PID: 11564 Comm: syz.8.1865 Not tainted syzkaller #0 PREEMPT(full) [ 337.908329][T11564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.908340][T11564] Call Trace: [ 337.908347][T11564] [ 337.908355][T11564] dump_stack_lvl+0x189/0x250 [ 337.908382][T11564] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.908407][T11564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.908451][T11564] should_fail_ex+0x414/0x560 [ 337.908480][T11564] strncpy_from_user+0x36/0x290 [ 337.908498][T11564] ? bpf_trace_run2+0x186/0x4b0 [ 337.908524][T11564] strncpy_from_user_nofault+0x72/0x150 [ 337.908550][T11564] bpf_probe_read_compat_str+0xe2/0x180 [ 337.908572][T11564] bpf_prog_65271ff8f24cc488+0x40/0x82 [ 337.908602][T11564] bpf_trace_run2+0x281/0x4b0 [ 337.908624][T11564] ? bpf_trace_run2+0x186/0x4b0 [ 337.908648][T11564] ? __pfx_bpf_trace_run2+0x10/0x10 [ 337.908672][T11564] ? nf_tables_chain_destroy+0x114/0x540 [ 337.908695][T11564] ? kasan_quarantine_put+0x88/0x220 [ 337.908722][T11564] ? nf_tables_chain_destroy+0x114/0x540 [ 337.908743][T11564] kfree+0x3a0/0x440 [ 337.908772][T11564] nf_tables_chain_destroy+0x114/0x540 [ 337.908800][T11564] __nft_release_table+0x1092/0x1240 [ 337.908837][T11564] ? __pfx___nft_release_table+0x10/0x10 [ 337.908852][T11564] ? synchronize_rcu+0x11a/0x310 [ 337.908877][T11564] ? __nft_release_hook+0x33c/0x350 [ 337.908895][T11564] ? nft_pernet+0x23/0x240 [ 337.908923][T11564] nft_rcv_nl_event+0x4f2/0x640 [ 337.908955][T11564] ? __pfx_nft_rcv_nl_event+0x10/0x10 [ 337.908986][T11564] ? nfulnl_rcv_nl_event+0x1d5/0x210 [ 337.909020][T11564] notifier_call_chain+0x1b3/0x3e0 [ 337.909051][T11564] blocking_notifier_call_chain+0x6a/0x90 [ 337.909074][T11564] netlink_release+0x1259/0x1b10 [ 337.909109][T11564] ? netlink_release+0x108/0x1b10 [ 337.909136][T11564] ? __pfx_netlink_release+0x10/0x10 [ 337.909161][T11564] ? down_write+0x162/0x1f0 [ 337.909178][T11564] ? __pfx_down_write+0x10/0x10 [ 337.909196][T11564] ? locks_remove_posix+0x381/0x650 [ 337.909229][T11564] sock_close+0xc0/0x240 [ 337.909252][T11564] ? __pfx_sock_close+0x10/0x10 [ 337.909272][T11564] __fput+0x449/0xa70 [ 337.909309][T11564] fput_close_sync+0x119/0x200 [ 337.909331][T11564] ? __pfx_fput_close_sync+0x10/0x10 [ 337.909368][T11564] __x64_sys_close+0x7f/0x110 [ 337.909389][T11564] do_syscall_64+0xfa/0x3b0 [ 337.909414][T11564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.909430][T11564] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.909447][T11564] ? clear_bhb_loop+0x60/0xb0 [ 337.909470][T11564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.909486][T11564] RIP: 0033:0x7f86dd58ebe9 [ 337.909503][T11564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.909517][T11564] RSP: 002b:00007f86de4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 337.909537][T11564] RAX: ffffffffffffffda RBX: 00007f86dd7c5fa0 RCX: 00007f86dd58ebe9 [ 337.909550][T11564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 337.909559][T11564] RBP: 00007f86de4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 337.909570][T11564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.909586][T11564] R13: 00007f86dd7c6038 R14: 00007f86dd7c5fa0 R15: 00007ffdd142db58 [ 337.909624][T11564] [ 338.389417][T11572] netlink: 'syz.8.1868': attribute type 1 has an invalid length. [ 338.480695][ T5872] Bluetooth: hci2: ISO packet for unknown connection handle 7 [ 338.536714][T11578] __nla_validate_parse: 8 callbacks suppressed [ 338.536745][T11578] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1871'. [ 338.732134][T11576] netlink: 6955 bytes leftover after parsing attributes in process `syz.5.1870'. [ 338.762166][T11576] netlink: 127868 bytes leftover after parsing attributes in process `syz.5.1870'. [ 339.323706][T11608] FAULT_INJECTION: forcing a failure. [ 339.323706][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 339.341259][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.6.1881 Not tainted syzkaller #0 PREEMPT(full) [ 339.341284][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.341295][T11608] Call Trace: [ 339.341304][T11608] [ 339.341313][T11608] dump_stack_lvl+0x189/0x250 [ 339.341339][T11608] ? __pfx____ratelimit+0x10/0x10 [ 339.341363][T11608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.341384][T11608] ? __pfx__printk+0x10/0x10 [ 339.341417][T11608] ? __pfx___might_resched+0x10/0x10 [ 339.341443][T11608] should_fail_ex+0x414/0x560 [ 339.341474][T11608] should_failslab+0xa8/0x100 [ 339.341508][T11608] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 339.341532][T11608] ? __pfx_nf_tables_abort+0x10/0x10 [ 339.341548][T11608] ? __alloc_skb+0x112/0x2d0 [ 339.341578][T11608] __alloc_skb+0x112/0x2d0 [ 339.341608][T11608] netlink_ack+0x146/0xa50 [ 339.341640][T11608] ? __kasan_kmalloc+0x93/0xb0 [ 339.341677][T11608] nfnetlink_rcv+0x2290/0x2520 [ 339.341745][T11608] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 339.341785][T11608] ? __pfx_perf_trace_lock+0x10/0x10 [ 339.341855][T11608] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.341904][T11608] netlink_unicast+0x82c/0x9e0 [ 339.341937][T11608] ? __pfx_netlink_unicast+0x10/0x10 [ 339.341961][T11608] ? netlink_sendmsg+0x642/0xb30 [ 339.341980][T11608] ? skb_put+0x11b/0x210 [ 339.342001][T11608] netlink_sendmsg+0x805/0xb30 [ 339.342037][T11608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.342064][T11608] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.342084][T11608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.342102][T11608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.342126][T11608] __sock_sendmsg+0x21c/0x270 [ 339.342152][T11608] ____sys_sendmsg+0x505/0x830 [ 339.342181][T11608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.342214][T11608] ? import_iovec+0x74/0xa0 [ 339.342255][T11608] ___sys_sendmsg+0x21f/0x2a0 [ 339.342278][T11608] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.342329][T11608] ? __fget_files+0x2a/0x420 [ 339.342365][T11608] ? __fget_files+0x2a/0x420 [ 339.342379][T11608] ? __fget_files+0x3a0/0x420 [ 339.342411][T11608] __x64_sys_sendmsg+0x19b/0x260 [ 339.342435][T11608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.342469][T11608] ? __pfx_ksys_write+0x10/0x10 [ 339.342494][T11608] ? rcu_is_watching+0x15/0xb0 [ 339.342520][T11608] ? do_syscall_64+0xbe/0x3b0 [ 339.342550][T11608] do_syscall_64+0xfa/0x3b0 [ 339.342571][T11608] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.342593][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.342611][T11608] ? clear_bhb_loop+0x60/0xb0 [ 339.342634][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.342651][T11608] RIP: 0033:0x7f0e2818ebe9 [ 339.342668][T11608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.342681][T11608] RSP: 002b:00007f0e290bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.342700][T11608] RAX: ffffffffffffffda RBX: 00007f0e283c5fa0 RCX: 00007f0e2818ebe9 [ 339.342713][T11608] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 339.342723][T11608] RBP: 00007f0e290bc090 R08: 0000000000000000 R09: 0000000000000000 [ 339.342734][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.342744][T11608] R13: 00007f0e283c6038 R14: 00007f0e283c5fa0 R15: 00007ffd15bde898 [ 339.342781][T11608] [ 339.707437][T11610] netlink: 'syz.9.1882': attribute type 4 has an invalid length. [ 340.126728][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1890'. [ 340.138008][T11635] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1891'. [ 340.304566][T11646] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1894'. [ 340.324823][T11646] netlink: 46 bytes leftover after parsing attributes in process `syz.9.1894'. [ 340.352217][T11646] netlink: 46 bytes leftover after parsing attributes in process `syz.9.1894'. [ 341.468746][T11664] siw: device registration error -23 [ 341.606403][T11668] FAULT_INJECTION: forcing a failure. [ 341.606403][T11668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.645742][T11668] CPU: 1 UID: 0 PID: 11668 Comm: syz.6.1901 Not tainted syzkaller #0 PREEMPT(full) [ 341.645772][T11668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.645783][T11668] Call Trace: [ 341.645794][T11668] [ 341.645806][T11668] dump_stack_lvl+0x189/0x250 [ 341.645840][T11668] ? __pfx____ratelimit+0x10/0x10 [ 341.645873][T11668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.645903][T11668] ? __pfx__printk+0x10/0x10 [ 341.645938][T11668] ? __might_fault+0xb0/0x130 [ 341.645989][T11668] ? __might_fault+0xb0/0x130 [ 341.646047][T11668] should_fail_ex+0x414/0x560 [ 341.646102][T11668] _copy_from_user+0x2d/0xb0 [ 341.646134][T11668] ___sys_sendmsg+0x158/0x2a0 [ 341.646174][T11668] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.646298][T11668] ? __fget_files+0x2a/0x420 [ 341.646379][T11668] ? __fget_files+0x2a/0x420 [ 341.646396][T11668] ? __fget_files+0x3a0/0x420 [ 341.646462][T11668] __x64_sys_sendmsg+0x19b/0x260 [ 341.646498][T11668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.646562][T11668] ? __pfx_ksys_write+0x10/0x10 [ 341.646579][T11668] ? rcu_is_watching+0x15/0xb0 [ 341.646624][T11668] ? do_syscall_64+0xbe/0x3b0 [ 341.646670][T11668] do_syscall_64+0xfa/0x3b0 [ 341.646704][T11668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.646720][T11668] ? asm_common_interrupt+0x26/0x40 [ 341.646734][T11668] ? clear_bhb_loop+0x60/0xb0 [ 341.646770][T11668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.646787][T11668] RIP: 0033:0x7f0e2818ebe9 [ 341.646808][T11668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.646820][T11668] RSP: 002b:00007f0e290bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.646839][T11668] RAX: ffffffffffffffda RBX: 00007f0e283c5fa0 RCX: 00007f0e2818ebe9 [ 341.646851][T11668] RDX: 0000000000000000 RSI: 0000200000003680 RDI: 0000000000000003 [ 341.646862][T11668] RBP: 00007f0e290bc090 R08: 0000000000000000 R09: 0000000000000000 [ 341.646873][T11668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.646883][T11668] R13: 00007f0e283c6038 R14: 00007f0e283c5fa0 R15: 00007ffd15bde898 [ 341.646970][T11668] [ 341.658629][T11672] netlink: 'syz.9.1903': attribute type 7 has an invalid length. [ 342.363898][T11696] netlink: 'syz.5.1909': attribute type 5 has an invalid length. [ 342.477871][T11704] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1913'. [ 342.963108][T11730] netlink: 'syz.8.1922': attribute type 33 has an invalid length. [ 342.994423][T11730] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1922'. [ 343.002536][T11734] siw: device registration error -23 [ 343.093399][T11730] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 343.429572][T11730] netlink: 'syz.8.1922': attribute type 1 has an invalid length. [ 343.703812][T11761] FAULT_INJECTION: forcing a failure. [ 343.703812][T11761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.733992][T11761] CPU: 1 UID: 0 PID: 11761 Comm: syz.7.1931 Not tainted syzkaller #0 PREEMPT(full) [ 343.734016][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.734027][T11761] Call Trace: [ 343.734047][T11761] [ 343.734054][T11761] dump_stack_lvl+0x189/0x250 [ 343.734082][T11761] ? __pfx____ratelimit+0x10/0x10 [ 343.734103][T11761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.734123][T11761] ? __pfx__printk+0x10/0x10 [ 343.734148][T11761] ? __might_fault+0xb0/0x130 [ 343.734175][T11761] ? __might_fault+0xb0/0x130 [ 343.734206][T11761] should_fail_ex+0x414/0x560 [ 343.734234][T11761] _copy_from_user+0x2d/0xb0 [ 343.734253][T11761] generic_map_update_batch+0x51b/0x7f0 [ 343.734286][T11761] ? __pfx_generic_map_update_batch+0x10/0x10 [ 343.734304][T11761] ? __fget_files+0x2a/0x420 [ 343.734329][T11761] ? __pfx_generic_map_update_batch+0x10/0x10 [ 343.734342][T11761] bpf_map_do_batch+0x369/0x5f0 [ 343.734368][T11761] __sys_bpf+0x6af/0x870 [ 343.734387][T11761] ? __pfx___sys_bpf+0x10/0x10 [ 343.734418][T11761] ? ksys_write+0x22a/0x250 [ 343.734439][T11761] ? __pfx_ksys_write+0x10/0x10 [ 343.734453][T11761] ? rcu_is_watching+0x15/0xb0 [ 343.734475][T11761] __x64_sys_bpf+0x7c/0x90 [ 343.734492][T11761] do_syscall_64+0xfa/0x3b0 [ 343.734508][T11761] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.734525][T11761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.734537][T11761] ? clear_bhb_loop+0x60/0xb0 [ 343.734555][T11761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.734567][T11761] RIP: 0033:0x7fac55d8ebe9 [ 343.734580][T11761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.734591][T11761] RSP: 002b:00007fac56b2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 343.734606][T11761] RAX: ffffffffffffffda RBX: 00007fac55fc6090 RCX: 00007fac55d8ebe9 [ 343.734616][T11761] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 343.734624][T11761] RBP: 00007fac56b2a090 R08: 0000000000000000 R09: 0000000000000000 [ 343.734632][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.734640][T11761] R13: 00007fac55fc6128 R14: 00007fac55fc6090 R15: 00007ffeb4264f48 [ 343.734667][T11761] [ 343.754388][T11763] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1932'. [ 344.218414][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1935'. [ 344.245775][T11770] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1935'. [ 344.543608][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1939'. [ 344.612431][T11784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1941'. [ 344.698623][T11780] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1938'. [ 344.751797][T11787] netlink: 4200 bytes leftover after parsing attributes in process `syz.9.1938'. [ 344.847139][T11794] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.1943'. [ 344.850504][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1944'. [ 344.910565][T11780] netlink: 92 bytes leftover after parsing attributes in process `syz.9.1938'. [ 346.065506][T11818] netlink: 'syz.7.1953': attribute type 21 has an invalid length. [ 346.157936][T11822] wlan1 speed is unknown, defaulting to 1000 [ 346.202156][T11822] wlan1 speed is unknown, defaulting to 1000 [ 346.245388][T11822] wlan1 speed is unknown, defaulting to 1000 [ 346.350128][T11822] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 346.472666][T11822] wlan1 speed is unknown, defaulting to 1000 [ 346.493787][T11822] wlan1 speed is unknown, defaulting to 1000 [ 346.521470][T11822] wlan1 speed is unknown, defaulting to 1000 [ 346.534652][T11822] wlan1 speed is unknown, defaulting to 1000 [ 346.551359][T11822] wlan1 speed is unknown, defaulting to 1000 [ 347.753973][T11865] FAULT_INJECTION: forcing a failure. [ 347.753973][T11865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.777819][T11865] CPU: 1 UID: 0 PID: 11865 Comm: syz.7.1969 Not tainted syzkaller #0 PREEMPT(full) [ 347.777846][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.777856][T11865] Call Trace: [ 347.777864][T11865] [ 347.777873][T11865] dump_stack_lvl+0x189/0x250 [ 347.777902][T11865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.777923][T11865] ? __pfx__printk+0x10/0x10 [ 347.777954][T11865] ? __might_fault+0xb0/0x130 [ 347.777985][T11865] should_fail_ex+0x414/0x560 [ 347.778016][T11865] _copy_from_user+0x2d/0xb0 [ 347.778037][T11865] kstrtouint_from_user+0xc4/0x170 [ 347.778065][T11865] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 347.778112][T11865] proc_fail_nth_write+0x88/0x200 [ 347.778132][T11865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 347.778160][T11865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 347.778183][T11865] vfs_write+0x27b/0xb30 [ 347.778218][T11865] ? __pfx_vfs_write+0x10/0x10 [ 347.778265][T11865] ? __fget_files+0x2a/0x420 [ 347.778288][T11865] ? __fget_files+0x3a0/0x420 [ 347.778302][T11865] ? __fget_files+0x2a/0x420 [ 347.778330][T11865] ksys_write+0x145/0x250 [ 347.778356][T11865] ? __pfx_ksys_write+0x10/0x10 [ 347.778386][T11865] ? do_syscall_64+0xbe/0x3b0 [ 347.778415][T11865] do_syscall_64+0xfa/0x3b0 [ 347.778440][T11865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.778456][T11865] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 347.778473][T11865] ? clear_bhb_loop+0x60/0xb0 [ 347.778495][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.778513][T11865] RIP: 0033:0x7fac55d8d69f [ 347.778529][T11865] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 347.778544][T11865] RSP: 002b:00007fac56b4b030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 347.778569][T11865] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac55d8d69f [ 347.778581][T11865] RDX: 0000000000000001 RSI: 00007fac56b4b0a0 RDI: 000000000000000a [ 347.778596][T11865] RBP: 00007fac56b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 347.778607][T11865] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 347.778617][T11865] R13: 00007fac55fc6038 R14: 00007fac55fc5fa0 R15: 00007ffeb4264f48 [ 347.778670][T11865] [ 348.504452][T11882] netlink: 'syz.7.1977': attribute type 1 has an invalid length. [ 348.599109][ T30] audit: type=1107 audit(1756838009.140:5): pid=11885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 348.648457][T11886] netlink: 'syz.8.1978': attribute type 33 has an invalid length. [ 348.673867][T11889] netlink: 'syz.6.1980': attribute type 13 has an invalid length. [ 348.704027][T11889] syz_tun: refused to change device tx_queue_len [ 348.753245][T11892] __nla_validate_parse: 16 callbacks suppressed [ 348.753283][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1979'. [ 348.806141][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1979'. [ 349.188598][T11906] netlink: 'syz.9.1986': attribute type 10 has an invalid length. [ 349.822441][T11920] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1990'. [ 350.055821][T11932] netlink: 'syz.5.1991': attribute type 10 has an invalid length. [ 350.063959][T11932] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1991'. [ 350.100030][T11935] netlink: 'syz.8.1994': attribute type 13 has an invalid length. [ 350.112854][T11935] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1994'. [ 350.128075][T11935] syz_tun: refused to change device tx_queue_len [ 350.220933][T11928] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1991'. [ 350.433698][T11943] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1998'. [ 350.806369][T11950] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1999'. [ 351.331728][T11963] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2004'. [ 351.464499][T11967] siw: device registration error -23 [ 351.624411][T11969] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2007'. [ 351.953526][T11976] netlink: 'syz.6.2008': attribute type 13 has an invalid length. [ 351.965462][T11976] syz_tun: refused to change device tx_queue_len [ 352.368519][T11991] netlink: 'syz.8.2016': attribute type 1 has an invalid length. [ 353.109096][T12023] netlink: 'syz.6.2026': attribute type 10 has an invalid length. [ 353.130207][T12023] netlink: 'syz.6.2026': attribute type 10 has an invalid length. [ 353.763273][T12048] __nla_validate_parse: 11 callbacks suppressed [ 353.763292][T12048] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2036'. [ 354.007056][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2038'. [ 354.074687][T12056] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2040'. [ 354.168043][T12060] netlink: 'syz.8.2038': attribute type 5 has an invalid length. [ 354.181052][T12060] netlink: 'syz.8.2038': attribute type 11 has an invalid length. [ 354.531539][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2044'. [ 354.533325][T12068] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2043'. [ 354.731556][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2047'. [ 354.976983][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2048'. [ 355.309871][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2052'. [ 355.394975][T12101] netlink: 'syz.5.2052': attribute type 5 has an invalid length. [ 355.411445][T12101] netlink: 'syz.5.2052': attribute type 11 has an invalid length. [ 355.457283][T12102] FAULT_INJECTION: forcing a failure. [ 355.457283][T12102] name failslab, interval 1, probability 0, space 0, times 0 [ 355.470451][T12102] CPU: 1 UID: 0 PID: 12102 Comm: syz.7.2054 Not tainted syzkaller #0 PREEMPT(full) [ 355.470476][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.470487][T12102] Call Trace: [ 355.470494][T12102] [ 355.470503][T12102] dump_stack_lvl+0x189/0x250 [ 355.470529][T12102] ? __pfx____ratelimit+0x10/0x10 [ 355.470553][T12102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.470574][T12102] ? __pfx__printk+0x10/0x10 [ 355.470605][T12102] ? __pfx___might_resched+0x10/0x10 [ 355.470631][T12102] should_fail_ex+0x414/0x560 [ 355.470660][T12102] ? nf_hook_entries_grow+0x27c/0x710 [ 355.470683][T12102] should_failslab+0xa8/0x100 [ 355.470710][T12102] __kvmalloc_node_noprof+0x161/0x5f0 [ 355.470734][T12102] ? nf_hook_entries_grow+0x27c/0x710 [ 355.470766][T12102] nf_hook_entries_grow+0x27c/0x710 [ 355.470811][T12102] __nf_register_net_hook+0x2c9/0x930 [ 355.470858][T12102] nf_register_net_hook+0xb2/0x190 [ 355.470886][T12102] nf_register_net_hooks+0x44/0x1b0 [ 355.470916][T12102] nf_ct_netns_do_get+0x212/0x5a0 [ 355.470946][T12102] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 355.470991][T12102] nf_ct_netns_inet_get+0x3b/0x150 [ 355.471021][T12102] nft_connlimit_do_init+0x1de/0x2e0 [ 355.471052][T12102] nft_set_elem_expr_alloc+0x1d8/0x590 [ 355.471080][T12102] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 355.471124][T12102] ? nla_strcmp+0x106/0x140 [ 355.471146][T12102] ? nla_strcmp+0x106/0x140 [ 355.471186][T12102] nf_tables_newsetelem+0x1688/0x4340 [ 355.471268][T12102] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 355.471290][T12102] ? __pfx_perf_trace_lock+0x10/0x10 [ 355.471335][T12102] ? nla_validate_array+0xfc/0x260 [ 355.471395][T12102] ? __pfx___nla_validate_parse+0x10/0x10 [ 355.471417][T12102] ? perf_trace_lock+0xec/0x3b0 [ 355.471443][T12102] ? __pfx_perf_trace_lock+0x10/0x10 [ 355.471472][T12102] ? nfnl_pernet+0x23/0x240 [ 355.471508][T12102] ? __nla_parse+0x40/0x60 [ 355.471539][T12102] nfnetlink_rcv+0x1132/0x2520 [ 355.471605][T12102] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 355.471645][T12102] ? __pfx_perf_trace_lock+0x10/0x10 [ 355.471711][T12102] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.471761][T12102] netlink_unicast+0x82c/0x9e0 [ 355.471797][T12102] ? __pfx_netlink_unicast+0x10/0x10 [ 355.471822][T12102] ? netlink_sendmsg+0x642/0xb30 [ 355.471852][T12102] ? skb_put+0x11b/0x210 [ 355.471874][T12102] netlink_sendmsg+0x805/0xb30 [ 355.471911][T12102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.471938][T12102] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.471958][T12102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.471976][T12102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.472001][T12102] __sock_sendmsg+0x21c/0x270 [ 355.472028][T12102] ____sys_sendmsg+0x505/0x830 [ 355.472056][T12102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.472088][T12102] ? import_iovec+0x74/0xa0 [ 355.472114][T12102] ___sys_sendmsg+0x21f/0x2a0 [ 355.472137][T12102] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.472186][T12102] ? __fget_files+0x2a/0x420 [ 355.472220][T12102] ? __fget_files+0x2a/0x420 [ 355.472235][T12102] ? __fget_files+0x3a0/0x420 [ 355.472266][T12102] __x64_sys_sendmsg+0x19b/0x260 [ 355.472289][T12102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.472322][T12102] ? __pfx_ksys_write+0x10/0x10 [ 355.472341][T12102] ? rcu_is_watching+0x15/0xb0 [ 355.472367][T12102] ? do_syscall_64+0xbe/0x3b0 [ 355.472396][T12102] do_syscall_64+0xfa/0x3b0 [ 355.472417][T12102] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.472439][T12102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.472456][T12102] ? clear_bhb_loop+0x60/0xb0 [ 355.472479][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.472495][T12102] RIP: 0033:0x7fac55d8ebe9 [ 355.472513][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.472526][T12102] RSP: 002b:00007fac56b2a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.472545][T12102] RAX: ffffffffffffffda RBX: 00007fac55fc6090 RCX: 00007fac55d8ebe9 [ 355.472558][T12102] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 355.472569][T12102] RBP: 00007fac56b2a090 R08: 0000000000000000 R09: 0000000000000000 [ 355.472579][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 355.472589][T12102] R13: 00007fac55fc6128 R14: 00007fac55fc6090 R15: 00007ffeb4264f48 [ 355.472624][T12102] [ 355.989878][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2055'. [ 356.152041][T12108] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2057'. [ 356.440917][T12119] netlink: 'syz.7.2060': attribute type 13 has an invalid length. [ 356.492519][T12119] syz_tun: refused to change device tx_queue_len [ 357.124717][T12135] netlink: 'syz.6.2066': attribute type 5 has an invalid length. [ 357.152452][T12135] netlink: 'syz.6.2066': attribute type 11 has an invalid length. [ 357.883988][T12159] FAULT_INJECTION: forcing a failure. [ 357.883988][T12159] name failslab, interval 1, probability 0, space 0, times 0 [ 357.897508][T12159] CPU: 0 UID: 0 PID: 12159 Comm: syz.7.2076 Not tainted syzkaller #0 PREEMPT(full) [ 357.897531][T12159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.897541][T12159] Call Trace: [ 357.897547][T12159] [ 357.897554][T12159] dump_stack_lvl+0x189/0x250 [ 357.897578][T12159] ? __pfx____ratelimit+0x10/0x10 [ 357.897601][T12159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.897621][T12159] ? __pfx__printk+0x10/0x10 [ 357.897648][T12159] ? __pfx___might_resched+0x10/0x10 [ 357.897664][T12159] ? fs_reclaim_acquire+0x7d/0x100 [ 357.897685][T12159] should_fail_ex+0x414/0x560 [ 357.897710][T12159] should_failslab+0xa8/0x100 [ 357.897734][T12159] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 357.897754][T12159] ? __alloc_skb+0x112/0x2d0 [ 357.897780][T12159] __alloc_skb+0x112/0x2d0 [ 357.897805][T12159] netlink_ack+0x146/0xa50 [ 357.897826][T12159] ? kasan_quarantine_put+0xdd/0x220 [ 357.897852][T12159] ? kfree+0x18e/0x440 [ 357.897876][T12159] nfnetlink_rcv+0x2290/0x2520 [ 357.897926][T12159] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 357.897957][T12159] ? __pfx_perf_trace_lock+0x10/0x10 [ 357.898004][T12159] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.898044][T12159] netlink_unicast+0x82c/0x9e0 [ 357.898073][T12159] ? __pfx_netlink_unicast+0x10/0x10 [ 357.898095][T12159] ? netlink_sendmsg+0x642/0xb30 [ 357.898115][T12159] ? skb_put+0x11b/0x210 [ 357.898134][T12159] netlink_sendmsg+0x805/0xb30 [ 357.898167][T12159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.898193][T12159] ? aa_sock_msg_perm+0xf1/0x1d0 [ 357.898211][T12159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.898229][T12159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.898262][T12159] __sock_sendmsg+0x21c/0x270 [ 357.898286][T12159] ____sys_sendmsg+0x505/0x830 [ 357.898308][T12159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.898335][T12159] ? import_iovec+0x74/0xa0 [ 357.898358][T12159] ___sys_sendmsg+0x21f/0x2a0 [ 357.898378][T12159] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.898417][T12159] ? __fget_files+0x2a/0x420 [ 357.898445][T12159] ? __fget_files+0x2a/0x420 [ 357.898459][T12159] ? __fget_files+0x3a0/0x420 [ 357.898485][T12159] __x64_sys_sendmsg+0x19b/0x260 [ 357.898504][T12159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.898531][T12159] ? __pfx_ksys_write+0x10/0x10 [ 357.898550][T12159] ? rcu_is_watching+0x15/0xb0 [ 357.898573][T12159] ? do_syscall_64+0xbe/0x3b0 [ 357.898599][T12159] do_syscall_64+0xfa/0x3b0 [ 357.898619][T12159] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.898641][T12159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.898657][T12159] ? clear_bhb_loop+0x60/0xb0 [ 357.898676][T12159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.898692][T12159] RIP: 0033:0x7fac55d8ebe9 [ 357.898707][T12159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.898722][T12159] RSP: 002b:00007fac56b4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.898739][T12159] RAX: ffffffffffffffda RBX: 00007fac55fc5fa0 RCX: 00007fac55d8ebe9 [ 357.898750][T12159] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 357.898761][T12159] RBP: 00007fac56b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 357.898771][T12159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.898781][T12159] R13: 00007fac55fc6038 R14: 00007fac55fc5fa0 R15: 00007ffeb4264f48 [ 357.898809][T12159] [ 358.909555][T12177] netlink: 'syz.9.2082': attribute type 5 has an invalid length. [ 358.927048][T12177] netlink: 'syz.9.2082': attribute type 11 has an invalid length. [ 359.055554][T12189] __nla_validate_parse: 14 callbacks suppressed [ 359.055575][T12189] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2085'. [ 359.126774][T12187] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.2081'. [ 359.654821][T12196] C: renamed from team_slave_0 [ 359.681245][T12196] netlink: 'syz.8.2088': attribute type 3 has an invalid length. [ 359.719866][T12196] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2088'. [ 359.740131][T12196] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 359.801450][T12204] FAULT_INJECTION: forcing a failure. [ 359.801450][T12204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.850205][T12204] CPU: 1 UID: 0 PID: 12204 Comm: syz.9.2091 Not tainted syzkaller #0 PREEMPT(full) [ 359.850232][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 359.850242][T12204] Call Trace: [ 359.850250][T12204] [ 359.850258][T12204] dump_stack_lvl+0x189/0x250 [ 359.850284][T12204] ? __pfx____ratelimit+0x10/0x10 [ 359.850308][T12204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.850328][T12204] ? __pfx__printk+0x10/0x10 [ 359.850350][T12204] ? __might_fault+0xb0/0x130 [ 359.850384][T12204] should_fail_ex+0x414/0x560 [ 359.850411][T12204] _copy_from_user+0x2d/0xb0 [ 359.850432][T12204] ___sys_sendmsg+0x158/0x2a0 [ 359.850453][T12204] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.850506][T12204] ? __fget_files+0x2a/0x420 [ 359.850521][T12204] ? __fget_files+0x3a0/0x420 [ 359.850547][T12204] __x64_sys_sendmsg+0x19b/0x260 [ 359.850568][T12204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.850594][T12204] ? __pfx_ksys_write+0x10/0x10 [ 359.850614][T12204] ? rcu_is_watching+0x15/0xb0 [ 359.850636][T12204] ? do_syscall_64+0xbe/0x3b0 [ 359.850663][T12204] do_syscall_64+0xfa/0x3b0 [ 359.850684][T12204] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.850705][T12204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.850722][T12204] ? clear_bhb_loop+0x60/0xb0 [ 359.850743][T12204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.850760][T12204] RIP: 0033:0x7ff0fe78ebe9 [ 359.850775][T12204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 359.850790][T12204] RSP: 002b:00007ff0fc9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.850809][T12204] RAX: ffffffffffffffda RBX: 00007ff0fe9c5fa0 RCX: 00007ff0fe78ebe9 [ 359.850822][T12204] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 359.850833][T12204] RBP: 00007ff0fc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 359.850844][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.850854][T12204] R13: 00007ff0fe9c6038 R14: 00007ff0fe9c5fa0 R15: 00007ffd19ecf5b8 [ 359.850882][T12204] [ 360.123737][T12208] netlink: 'syz.9.2093': attribute type 8 has an invalid length. [ 360.381541][T12212] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2096'. [ 360.544071][T12218] lo speed is unknown, defaulting to 1000 [ 360.738521][T12223] netlink: 'syz.6.2099': attribute type 10 has an invalid length. [ 360.857931][T12227] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2098'. [ 361.539930][T12253] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2108'. [ 361.945335][T12265] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2112'. [ 362.223613][T12270] netlink: 'syz.9.2114': attribute type 11 has an invalid length. [ 362.241679][T12270] netlink: 149476 bytes leftover after parsing attributes in process `syz.9.2114'. [ 362.269563][T12269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.349114][T12272] netlink: 'syz.8.2115': attribute type 10 has an invalid length. [ 362.510205][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2117'. [ 362.839166][T12292] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2121'. [ 362.894261][T12294] siw: device registration error -23 [ 362.962425][T12297] C: renamed from team_slave_0 [ 362.986819][T12297] netlink: 'syz.9.2125': attribute type 3 has an invalid length. [ 362.998486][T12297] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 363.251003][T12307] netlink: 'syz.6.2130': attribute type 29 has an invalid length. [ 363.277607][T12312] netlink: 'syz.6.2130': attribute type 29 has an invalid length. [ 363.363392][T12307] netlink: 'syz.6.2130': attribute type 29 has an invalid length. [ 363.448870][T12314] netlink: 'syz.9.2132': attribute type 1 has an invalid length. [ 364.349737][T12329] __nla_validate_parse: 2 callbacks suppressed [ 364.349760][T12329] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2137'. [ 364.609441][T12334] netlink: 'syz.9.2139': attribute type 1 has an invalid length. [ 365.568200][T12365] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2151'. [ 366.118009][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2158'. [ 366.925426][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2167'. [ 367.320464][T12422] netlink: 'syz.5.2170': attribute type 10 has an invalid length. [ 367.412523][T12418] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2166'. [ 367.446214][T12426] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2173'. [ 367.477141][T12426] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2173'. [ 368.145502][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2177'. [ 368.718705][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2182'. [ 369.247606][T12468] netlink: 'syz.7.2184': attribute type 10 has an invalid length. [ 369.335231][T12473] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2189'. [ 369.464560][T12476] lo speed is unknown, defaulting to 1000 [ 369.520759][T12481] netlink: 'syz.6.2192': attribute type 10 has an invalid length. [ 369.692926][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2195'. [ 369.748626][T12492] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.2197'. [ 369.864909][T12486] netlink: 'syz.6.2195': attribute type 5 has an invalid length. [ 369.877284][T12486] netlink: 'syz.6.2195': attribute type 11 has an invalid length. [ 370.750564][T12509] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2202'. [ 371.058892][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2203'. [ 371.890541][T12536] FAULT_INJECTION: forcing a failure. [ 371.890541][T12536] name failslab, interval 1, probability 0, space 0, times 0 [ 371.904537][T12536] CPU: 1 UID: 0 PID: 12536 Comm: syz.5.2211 Not tainted syzkaller #0 PREEMPT(full) [ 371.904584][T12536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 371.904609][T12536] Call Trace: [ 371.904617][T12536] [ 371.904625][T12536] dump_stack_lvl+0x189/0x250 [ 371.904651][T12536] ? __pfx____ratelimit+0x10/0x10 [ 371.904690][T12536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.904710][T12536] ? __pfx__printk+0x10/0x10 [ 371.904739][T12536] ? __pfx___might_resched+0x10/0x10 [ 371.904761][T12536] should_fail_ex+0x414/0x560 [ 371.904787][T12536] should_failslab+0xa8/0x100 [ 371.904818][T12536] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 371.904841][T12536] ? __alloc_skb+0x112/0x2d0 [ 371.904870][T12536] __alloc_skb+0x112/0x2d0 [ 371.904896][T12536] netlink_sendmsg+0x5c6/0xb30 [ 371.904929][T12536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.904956][T12536] ? aa_sock_msg_perm+0xf1/0x1d0 [ 371.904973][T12536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 371.904992][T12536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.905016][T12536] __sock_sendmsg+0x21c/0x270 [ 371.905040][T12536] ____sys_sendmsg+0x505/0x830 [ 371.905063][T12536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.905088][T12536] ? import_iovec+0x74/0xa0 [ 371.905111][T12536] ___sys_sendmsg+0x21f/0x2a0 [ 371.905131][T12536] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.905191][T12536] ? __fget_files+0x2a/0x420 [ 371.905205][T12536] ? __fget_files+0x3a0/0x420 [ 371.905231][T12536] __x64_sys_sendmsg+0x19b/0x260 [ 371.905252][T12536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.905279][T12536] ? __pfx_ksys_write+0x10/0x10 [ 371.905298][T12536] ? rcu_is_watching+0x15/0xb0 [ 371.905320][T12536] ? do_syscall_64+0xbe/0x3b0 [ 371.905346][T12536] do_syscall_64+0xfa/0x3b0 [ 371.905366][T12536] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.905399][T12536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.905415][T12536] ? clear_bhb_loop+0x60/0xb0 [ 371.905435][T12536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.905456][T12536] RIP: 0033:0x7f4bab38ebe9 [ 371.905472][T12536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.905487][T12536] RSP: 002b:00007f4bac29f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.905505][T12536] RAX: ffffffffffffffda RBX: 00007f4bab5c5fa0 RCX: 00007f4bab38ebe9 [ 371.905516][T12536] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 371.905530][T12536] RBP: 00007f4bac29f090 R08: 0000000000000000 R09: 0000000000000000 [ 371.905539][T12536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.905549][T12536] R13: 00007f4bab5c6038 R14: 00007f4bab5c5fa0 R15: 00007ffc8eebadd8 [ 371.905578][T12536] [ 372.298293][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2214'. [ 372.336899][T12539] siw: device registration error -23 [ 372.357057][T12545] FAULT_INJECTION: forcing a failure. [ 372.357057][T12545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.397696][T12545] CPU: 0 UID: 0 PID: 12545 Comm: syz.8.2215 Not tainted syzkaller #0 PREEMPT(full) [ 372.397722][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 372.397732][T12545] Call Trace: [ 372.397741][T12545] [ 372.397750][T12545] dump_stack_lvl+0x189/0x250 [ 372.397778][T12545] ? __pfx____ratelimit+0x10/0x10 [ 372.397804][T12545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.397828][T12545] ? __pfx__printk+0x10/0x10 [ 372.397863][T12545] ? __might_fault+0xb0/0x130 [ 372.397920][T12545] should_fail_ex+0x414/0x560 [ 372.397960][T12545] _copy_from_user+0x2d/0xb0 [ 372.397986][T12545] generic_map_update_batch+0x51b/0x7f0 [ 372.398043][T12545] ? __pfx_generic_map_update_batch+0x10/0x10 [ 372.398065][T12545] ? __fget_files+0x2a/0x420 [ 372.398102][T12545] ? __pfx_generic_map_update_batch+0x10/0x10 [ 372.398123][T12545] bpf_map_do_batch+0x369/0x5f0 [ 372.398164][T12545] __sys_bpf+0x6af/0x870 [ 372.398196][T12545] ? __pfx___sys_bpf+0x10/0x10 [ 372.398258][T12545] ? ksys_write+0x22a/0x250 [ 372.398290][T12545] ? __pfx_ksys_write+0x10/0x10 [ 372.398308][T12545] ? rcu_is_watching+0x15/0xb0 [ 372.398349][T12545] __x64_sys_bpf+0x7c/0x90 [ 372.398377][T12545] do_syscall_64+0xfa/0x3b0 [ 372.398398][T12545] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.398422][T12545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.398441][T12545] ? clear_bhb_loop+0x60/0xb0 [ 372.398470][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.398487][T12545] RIP: 0033:0x7f86dd58ebe9 [ 372.398505][T12545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.398519][T12545] RSP: 002b:00007f86de4ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.398538][T12545] RAX: ffffffffffffffda RBX: 00007f86dd7c5fa0 RCX: 00007f86dd58ebe9 [ 372.398551][T12545] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 372.398562][T12545] RBP: 00007f86de4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 372.398572][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.398582][T12545] R13: 00007f86dd7c6038 R14: 00007f86dd7c5fa0 R15: 00007ffdd142db58 [ 372.398640][T12545] [ 372.631513][T12550] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2216'. [ 372.740433][T12554] netlink: 'syz.5.2219': attribute type 3 has an invalid length. [ 372.748441][T12554] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2219'. [ 372.764622][T12554] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 372.781654][T12552] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2217'. [ 372.820877][T12558] netlink: 15999 bytes leftover after parsing attributes in process `syz.8.2220'. [ 372.892826][T12558] netlink: 'syz.8.2220': attribute type 21 has an invalid length. [ 372.991473][T12564] FAULT_INJECTION: forcing a failure. [ 372.991473][T12564] name failslab, interval 1, probability 0, space 0, times 0 [ 373.015146][T12564] CPU: 1 UID: 0 PID: 12564 Comm: syz.6.2224 Not tainted syzkaller #0 PREEMPT(full) [ 373.015171][T12564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 373.015182][T12564] Call Trace: [ 373.015189][T12564] [ 373.015197][T12564] dump_stack_lvl+0x189/0x250 [ 373.015221][T12564] ? __pfx____ratelimit+0x10/0x10 [ 373.015239][T12564] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.015254][T12564] ? __pfx__printk+0x10/0x10 [ 373.015274][T12564] ? __pfx___might_resched+0x10/0x10 [ 373.015286][T12564] ? fs_reclaim_acquire+0x7d/0x100 [ 373.015302][T12564] should_fail_ex+0x414/0x560 [ 373.015322][T12564] should_failslab+0xa8/0x100 [ 373.015341][T12564] __kmalloc_noprof+0xcb/0x4f0 [ 373.015357][T12564] ? kfree+0x4d/0x440 [ 373.015369][T12564] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.015385][T12564] tomoyo_realpath_from_path+0xe3/0x5d0 [ 373.015401][T12564] ? tomoyo_domain+0xd9/0x130 [ 373.015417][T12564] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 373.015435][T12564] tomoyo_path_number_perm+0x1e8/0x5a0 [ 373.015454][T12564] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 373.015482][T12564] ? __lock_acquire+0xab9/0xd20 [ 373.015515][T12564] ? __fget_files+0x2a/0x420 [ 373.015532][T12564] ? __fget_files+0x2a/0x420 [ 373.015545][T12564] ? __fget_files+0x3a0/0x420 [ 373.015558][T12564] ? __fget_files+0x2a/0x420 [ 373.015577][T12564] security_file_ioctl+0xcb/0x2d0 [ 373.015600][T12564] __se_sys_ioctl+0x47/0x170 [ 373.015622][T12564] do_syscall_64+0xfa/0x3b0 [ 373.015641][T12564] ? lockdep_hardirqs_on+0x9c/0x150 [ 373.015660][T12564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.015674][T12564] ? clear_bhb_loop+0x60/0xb0 [ 373.015694][T12564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.015709][T12564] RIP: 0033:0x7f0e2818ebe9 [ 373.015723][T12564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.015736][T12564] RSP: 002b:00007f0e290bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.015752][T12564] RAX: ffffffffffffffda RBX: 00007f0e283c5fa0 RCX: 00007f0e2818ebe9 [ 373.015763][T12564] RDX: 0000200000000300 RSI: 00000000400454d9 RDI: 0000000000000005 [ 373.015774][T12564] RBP: 00007f0e290bc090 R08: 0000000000000000 R09: 0000000000000000 [ 373.015784][T12564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.015793][T12564] R13: 00007f0e283c6038 R14: 00007f0e283c5fa0 R15: 00007ffd15bde898 [ 373.015819][T12564] [ 373.018366][T12564] ERROR: Out of memory at tomoyo_realpath_from_path. [ 373.227139][T12578] netlink: 'syz.7.2228': attribute type 13 has an invalid length. [ 373.286558][T12578] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2228'. [ 373.431762][T12578] syz_tun: refused to change device tx_queue_len [ 373.443641][T12581] lo speed is unknown, defaulting to 1000 [ 373.729327][T12592] debugfs: '!' already exists in 'ieee80211' [ 373.790076][T12599] netlink: 'syz.6.2235': attribute type 29 has an invalid length. [ 373.801541][T12599] netlink: 'syz.6.2235': attribute type 29 has an invalid length. [ 373.815417][T12599] netlink: 'syz.6.2235': attribute type 29 has an invalid length. [ 374.308006][T12624] C: renamed from team_slave_0 (while UP) [ 374.347902][T12624] netlink: 'syz.7.2247': attribute type 3 has an invalid length. [ 374.410893][T12624] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 374.581159][T12627] lo speed is unknown, defaulting to 1000 [ 374.899218][T12644] tun0: tun_chr_ioctl cmd 1074812118 [ 374.920758][T12647] __nla_validate_parse: 6 callbacks suppressed [ 374.920854][T12647] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2255'. [ 375.063788][T12627] wlan1 speed is unknown, defaulting to 1000 [ 375.309597][T12663] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2263'. [ 375.480921][T12670] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2265'. [ 375.603355][T12674] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2267'. [ 375.717422][T12679] FAULT_INJECTION: forcing a failure. [ 375.717422][T12679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.782703][T12679] CPU: 0 UID: 0 PID: 12679 Comm: syz.9.2269 Not tainted syzkaller #0 PREEMPT(full) [ 375.782728][T12679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.782739][T12679] Call Trace: [ 375.782750][T12679] [ 375.782761][T12679] dump_stack_lvl+0x189/0x250 [ 375.782794][T12679] ? __pfx____ratelimit+0x10/0x10 [ 375.782827][T12679] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.782856][T12679] ? __pfx__printk+0x10/0x10 [ 375.782891][T12679] ? __might_fault+0xb0/0x130 [ 375.782936][T12679] ? __might_fault+0xb0/0x130 [ 375.782994][T12679] should_fail_ex+0x414/0x560 [ 375.783052][T12679] _copy_from_iter+0x575/0x16f0 [ 375.783138][T12679] ? __pfx__copy_from_iter+0x10/0x10 [ 375.783188][T12679] ? skb_page_frag_refill+0x1be/0x320 [ 375.783250][T12679] kcm_sendmsg+0xf00/0x2ad0 [ 375.783456][T12679] ? __pfx_kcm_sendmsg+0x10/0x10 [ 375.783500][T12679] ? aa_sock_msg_perm+0xf1/0x1d0 [ 375.783534][T12679] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.783556][T12679] ? __pfx_kcm_sendmsg+0x10/0x10 [ 375.783587][T12679] __sock_sendmsg+0x21c/0x270 [ 375.783634][T12679] ____sys_sendmsg+0x505/0x830 [ 375.783698][T12679] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.783769][T12679] ? import_iovec+0x74/0xa0 [ 375.783817][T12679] ___sys_sendmsg+0x21f/0x2a0 [ 375.783857][T12679] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.783986][T12679] ? __fget_files+0x2a/0x420 [ 375.784069][T12679] ? __fget_files+0x2a/0x420 [ 375.784086][T12679] ? __fget_files+0x3a0/0x420 [ 375.784161][T12679] __x64_sys_sendmsg+0x19b/0x260 [ 375.784201][T12679] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.784293][T12679] ? __pfx_ksys_write+0x10/0x10 [ 375.784313][T12679] ? rcu_is_watching+0x15/0xb0 [ 375.784362][T12679] ? do_syscall_64+0xbe/0x3b0 [ 375.784410][T12679] do_syscall_64+0xfa/0x3b0 [ 375.784433][T12679] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.784460][T12679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.784481][T12679] ? clear_bhb_loop+0x60/0xb0 [ 375.784521][T12679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.784539][T12679] RIP: 0033:0x7ff0fe78ebe9 [ 375.784562][T12679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.784576][T12679] RSP: 002b:00007ff0fc9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.784595][T12679] RAX: ffffffffffffffda RBX: 00007ff0fe9c5fa0 RCX: 00007ff0fe78ebe9 [ 375.784608][T12679] RDX: 0000000000000000 RSI: 0000200000003680 RDI: 0000000000000003 [ 375.784619][T12679] RBP: 00007ff0fc9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.784630][T12679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.784642][T12679] R13: 00007ff0fe9c6038 R14: 00007ff0fe9c5fa0 R15: 00007ffd19ecf5b8 [ 375.784743][T12679] [ 376.398215][T12685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 376.425137][T12688] netlink: 'syz.7.2272': attribute type 13 has an invalid length. [ 376.434318][T12688] netlink: 164 bytes leftover after parsing attributes in process `syz.7.2272'. [ 376.469851][T12688] syz_tun: refused to change device tx_queue_len [ 376.480593][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2270'. [ 376.524617][T12685] netlink: 'syz.5.2271': attribute type 5 has an invalid length. [ 376.556803][T12685] netlink: 'syz.5.2271': attribute type 11 has an invalid length. [ 376.724880][T12693] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2274'. [ 376.769842][T12695] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2275'. [ 376.988479][T12706] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2279'. [ 378.140350][T12745] lo speed is unknown, defaulting to 1000 [ 378.707238][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.713789][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.845855][T12771] validate_nla: 6 callbacks suppressed [ 378.845875][T12771] netlink: 'syz.5.2305': attribute type 10 has an invalid length. [ 379.457450][T12788] netlink: 'syz.9.2309': attribute type 10 has an invalid length. [ 379.951645][T12812] __nla_validate_parse: 13 callbacks suppressed [ 379.951680][T12812] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.2319'. [ 380.024966][T12814] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2321'. [ 380.084846][T12818] FAULT_INJECTION: forcing a failure. [ 380.084846][T12818] name failslab, interval 1, probability 0, space 0, times 0 [ 380.091438][T12817] netlink: 'syz.8.2323': attribute type 3 has an invalid length. [ 380.121951][T12818] CPU: 1 UID: 0 PID: 12818 Comm: syz.7.2322 Not tainted syzkaller #0 PREEMPT(full) [ 380.121980][T12818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 380.121989][T12818] Call Trace: [ 380.121996][T12818] [ 380.122004][T12818] dump_stack_lvl+0x189/0x250 [ 380.122028][T12818] ? __pfx____ratelimit+0x10/0x10 [ 380.122051][T12818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.122072][T12818] ? __pfx__printk+0x10/0x10 [ 380.122110][T12818] should_fail_ex+0x414/0x560 [ 380.122138][T12818] should_failslab+0xa8/0x100 [ 380.122164][T12818] __kmalloc_cache_noprof+0x70/0x3d0 [ 380.122186][T12818] ? sctp_add_bind_addr+0x8c/0x370 [ 380.122220][T12818] sctp_add_bind_addr+0x8c/0x370 [ 380.122247][T12818] sctp_copy_local_addr_list+0x30b/0x4e0 [ 380.122273][T12818] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 380.122295][T12818] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 380.122321][T12818] ? sctp_v4_is_any+0x35/0x60 [ 380.122341][T12818] ? sctp_copy_one_addr+0x93/0x360 [ 380.122367][T12818] sctp_bind_addr_copy+0xb3/0x3c0 [ 380.122388][T12818] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 380.122412][T12818] sctp_connect_new_asoc+0x2e0/0x690 [ 380.122433][T12818] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 380.122448][T12818] ? __local_bh_enable_ip+0x12d/0x1c0 [ 380.122474][T12818] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 380.122494][T12818] ? security_sctp_bind_connect+0x7e/0x2e0 [ 380.122519][T12818] sctp_sendmsg+0x155c/0x2810 [ 380.122557][T12818] ? __pfx_sctp_sendmsg+0x10/0x10 [ 380.122585][T12818] ? aa_sk_perm+0x81e/0x950 [ 380.122614][T12818] ? __pfx_aa_sk_perm+0x10/0x10 [ 380.122641][T12818] ? sock_rps_record_flow+0x19/0x410 [ 380.122666][T12818] ? inet_sendmsg+0x2f4/0x370 [ 380.122690][T12818] __sock_sendmsg+0x19c/0x270 [ 380.122716][T12818] ____sys_sendmsg+0x505/0x830 [ 380.122742][T12818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.122770][T12818] ? import_iovec+0x74/0xa0 [ 380.122792][T12818] ___sys_sendmsg+0x21f/0x2a0 [ 380.122808][T12818] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.122861][T12818] ? __fget_files+0x2a/0x420 [ 380.122877][T12818] ? __fget_files+0x3a0/0x420 [ 380.122904][T12818] __x64_sys_sendmsg+0x19b/0x260 [ 380.122926][T12818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.122955][T12818] ? __pfx_ksys_write+0x10/0x10 [ 380.122980][T12818] ? rcu_is_watching+0x15/0xb0 [ 380.123003][T12818] ? do_syscall_64+0xbe/0x3b0 [ 380.123031][T12818] do_syscall_64+0xfa/0x3b0 [ 380.123052][T12818] ? lockdep_hardirqs_on+0x9c/0x150 [ 380.123073][T12818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.123090][T12818] ? clear_bhb_loop+0x60/0xb0 [ 380.123112][T12818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.123128][T12818] RIP: 0033:0x7fac55d8ebe9 [ 380.123144][T12818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.123157][T12818] RSP: 002b:00007fac56b4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.123174][T12818] RAX: ffffffffffffffda RBX: 00007fac55fc5fa0 RCX: 00007fac55d8ebe9 [ 380.123186][T12818] RDX: 000000000004c0e0 RSI: 00002000000006c0 RDI: 0000000000000004 [ 380.123197][T12818] RBP: 00007fac56b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 380.123207][T12818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 380.123223][T12818] R13: 00007fac55fc6038 R14: 00007fac55fc5fa0 R15: 00007ffeb4264f48 [ 380.123253][T12818] [ 380.131239][T12817] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2323'. [ 380.481612][T12817] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 380.686687][T12824] netlink: 'syz.6.2324': attribute type 3 has an invalid length. [ 380.727858][T12824] netlink: 'syz.6.2324': attribute type 3 has an invalid length. [ 380.736890][T12829] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2325'. [ 380.838660][T12824] netlink: 130500 bytes leftover after parsing attributes in process `syz.6.2324'. [ 381.028710][T12843] FAULT_INJECTION: forcing a failure. [ 381.028710][T12843] name failslab, interval 1, probability 0, space 0, times 0 [ 381.033163][T12824] netlink: 'syz.6.2324': attribute type 1 has an invalid length. [ 381.076156][T12843] CPU: 0 UID: 0 PID: 12843 Comm: syz.5.2329 Not tainted syzkaller #0 PREEMPT(full) [ 381.076183][T12843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.076193][T12843] Call Trace: [ 381.076202][T12843] [ 381.076211][T12843] dump_stack_lvl+0x189/0x250 [ 381.076236][T12843] ? __pfx____ratelimit+0x10/0x10 [ 381.076260][T12843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.076280][T12843] ? __pfx__printk+0x10/0x10 [ 381.076311][T12843] ? __pfx___might_resched+0x10/0x10 [ 381.076333][T12843] should_fail_ex+0x414/0x560 [ 381.076363][T12843] should_failslab+0xa8/0x100 [ 381.076390][T12843] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 381.076413][T12843] ? __alloc_skb+0x112/0x2d0 [ 381.076435][T12843] ? __pfx_perf_trace_lock+0x10/0x10 [ 381.076457][T12843] __alloc_skb+0x112/0x2d0 [ 381.076486][T12843] netlink_sendmsg+0x5c6/0xb30 [ 381.076521][T12843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.076549][T12843] ? aa_sock_msg_perm+0xf1/0x1d0 [ 381.076568][T12843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.076586][T12843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.076611][T12843] __sock_sendmsg+0x21c/0x270 [ 381.076637][T12843] ____sys_sendmsg+0x505/0x830 [ 381.076663][T12843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.076691][T12843] ? import_iovec+0x74/0xa0 [ 381.076716][T12843] ___sys_sendmsg+0x21f/0x2a0 [ 381.076735][T12843] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.076774][T12843] ? __fget_files+0x2a/0x420 [ 381.076806][T12843] ? __fget_files+0x2a/0x420 [ 381.076821][T12843] ? __fget_files+0x3a0/0x420 [ 381.076849][T12843] __x64_sys_sendmsg+0x19b/0x260 [ 381.076870][T12843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.076911][T12843] do_syscall_64+0xfa/0x3b0 [ 381.076932][T12843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.076955][T12843] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 381.076971][T12843] ? clear_bhb_loop+0x60/0xb0 [ 381.076991][T12843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.077006][T12843] RIP: 0033:0x7f4bab38ebe9 [ 381.077020][T12843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.077031][T12843] RSP: 002b:00007f4bac27e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.077049][T12843] RAX: ffffffffffffffda RBX: 00007f4bab5c6090 RCX: 00007f4bab38ebe9 [ 381.077060][T12843] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000007 [ 381.077071][T12843] RBP: 00007f4bac27e090 R08: 0000000000000000 R09: 0000000000000000 [ 381.077081][T12843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.077090][T12843] R13: 00007f4bab5c6128 R14: 00007f4bab5c6090 R15: 00007ffc8eebadd8 [ 381.077121][T12843] [ 381.769782][T12855] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2334'. [ 381.788962][T12855] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2334'. [ 381.881022][T12859] lo speed is unknown, defaulting to 1000 [ 381.987106][T12865] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2336'. [ 382.211300][T12872] netlink: 1057 bytes leftover after parsing attributes in process `syz.8.2340'. [ 382.252935][T12868] sctp: [Deprecated]: syz.7.2338 (pid 12868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.252935][T12868] Use struct sctp_sack_info instead [ 382.563709][T12879] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2342'. [ 382.946806][T12892] lo speed is unknown, defaulting to 1000 [ 383.010024][T12895] netlink: 'syz.8.2349': attribute type 29 has an invalid length. [ 383.032362][T12895] netlink: 'syz.8.2349': attribute type 29 has an invalid length. [ 383.057603][T12895] netlink: 'syz.8.2349': attribute type 29 has an invalid length. [ 383.141053][T12900] FAULT_INJECTION: forcing a failure. [ 383.141053][T12900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.159600][T12900] CPU: 0 UID: 0 PID: 12900 Comm: syz.7.2353 Not tainted syzkaller #0 PREEMPT(full) [ 383.159626][T12900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 383.159636][T12900] Call Trace: [ 383.159644][T12900] [ 383.159651][T12900] dump_stack_lvl+0x189/0x250 [ 383.159676][T12900] ? __pfx____ratelimit+0x10/0x10 [ 383.159699][T12900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.159719][T12900] ? __pfx__printk+0x10/0x10 [ 383.159742][T12900] ? __might_fault+0xb0/0x130 [ 383.159775][T12900] should_fail_ex+0x414/0x560 [ 383.159803][T12900] _copy_from_user+0x2d/0xb0 [ 383.159823][T12900] ____sys_sendmsg+0x2fe/0x830 [ 383.159848][T12900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.159875][T12900] ? import_iovec+0x74/0xa0 [ 383.159898][T12900] ___sys_sendmsg+0x21f/0x2a0 [ 383.159918][T12900] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.159973][T12900] ? __fget_files+0x2a/0x420 [ 383.159988][T12900] ? __fget_files+0x3a0/0x420 [ 383.160024][T12900] __x64_sys_sendmsg+0x19b/0x260 [ 383.160040][T12900] ? perf_trace_run_bpf_submit+0x100/0x170 [ 383.160061][T12900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.160089][T12900] ? __pfx_ksys_write+0x10/0x10 [ 383.160108][T12900] ? rcu_is_watching+0x15/0xb0 [ 383.160131][T12900] ? do_syscall_64+0xbe/0x3b0 [ 383.160157][T12900] do_syscall_64+0xfa/0x3b0 [ 383.160179][T12900] ? lockdep_hardirqs_on+0x9c/0x150 [ 383.160200][T12900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.160217][T12900] ? clear_bhb_loop+0x60/0xb0 [ 383.160238][T12900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.160254][T12900] RIP: 0033:0x7fac55d8ebe9 [ 383.160270][T12900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.160284][T12900] RSP: 002b:00007fac56b4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.160303][T12900] RAX: ffffffffffffffda RBX: 00007fac55fc5fa0 RCX: 00007fac55d8ebe9 [ 383.160316][T12900] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000003 [ 383.160326][T12900] RBP: 00007fac56b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 383.160337][T12900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.160347][T12900] R13: 00007fac55fc6038 R14: 00007fac55fc5fa0 R15: 00007ffeb4264f48 [ 383.160376][T12900] [ 383.522325][T12903] netlink: 'syz.5.2352': attribute type 3 has an invalid length. [ 384.305327][T12933] lo speed is unknown, defaulting to 1000 [ 385.407736][T12965] validate_nla: 1 callbacks suppressed [ 385.407758][T12965] netlink: 'syz.6.2375': attribute type 13 has an invalid length. [ 385.425984][T12965] __nla_validate_parse: 7 callbacks suppressed [ 385.426003][T12965] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2375'. [ 385.445384][T12965] syz_tun: refused to change device tx_queue_len [ 385.471190][T12970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2376'. [ 385.596030][T12978] netlink: 'syz.8.2379': attribute type 10 has an invalid length. [ 385.621768][T12978] batadv0: left allmulticast mode [ 385.627856][T12978] batadv0: left promiscuous mode [ 385.630187][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2380'. [ 385.636781][T12978] bridge0: port 3(batadv0) entered disabled state [ 385.652699][T12985] netlink: 'syz.8.2379': attribute type 10 has an invalid length. [ 385.661444][T12985] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2379'. [ 385.687642][T12978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.707372][T12978] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 385.899598][T12995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2384'. [ 386.067034][T13009] netlink: 'syz.9.2384': attribute type 5 has an invalid length. [ 386.096457][T13009] netlink: 'syz.9.2384': attribute type 11 has an invalid length. [ 386.209318][T13014] netlink: 'syz.8.2391': attribute type 13 has an invalid length. [ 386.219171][T13014] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2391'. [ 386.450825][T13014] syz_tun: refused to change device tx_queue_len [ 386.567338][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2395'. [ 386.630684][T13027] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2398'. [ 387.345450][T13022] delete_channel: no stack [ 387.410340][T13039] netlink: 63503 bytes leftover after parsing attributes in process `syz.9.2402'. [ 387.733935][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2406'. [ 388.312444][T13082] netlink: 'syz.8.2417': attribute type 13 has an invalid length. [ 388.331792][T13082] syz_tun: refused to change device tx_queue_len [ 388.458271][T13080] netlink: 'syz.5.2419': attribute type 5 has an invalid length. [ 388.482892][T13080] netlink: 'syz.5.2419': attribute type 11 has an invalid length. [ 393.732920][T13113] pim6reg1: entered allmulticast mode [ 414.340362][T13124] siw: device registration error -23 [ 414.533543][T13135] __nla_validate_parse: 5 callbacks suppressed [ 414.533577][T13135] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.2434'. [ 414.899632][T13150] FAULT_INJECTION: forcing a failure. [ 414.899632][T13150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.921795][T13150] CPU: 1 UID: 0 PID: 13150 Comm: syz.7.2441 Not tainted syzkaller #0 PREEMPT(full) [ 414.921829][T13150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.921841][T13150] Call Trace: [ 414.921848][T13150] [ 414.921856][T13150] dump_stack_lvl+0x189/0x250 [ 414.921885][T13150] ? __pfx____ratelimit+0x10/0x10 [ 414.921904][T13150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.921925][T13150] ? __pfx__printk+0x10/0x10 [ 414.921947][T13150] ? __might_fault+0xb0/0x130 [ 414.921980][T13150] should_fail_ex+0x414/0x560 [ 414.922005][T13150] _copy_from_iter+0x1db/0x16f0 [ 414.922026][T13150] ? rcu_is_watching+0x15/0xb0 [ 414.922046][T13150] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 414.922071][T13150] ? __pfx__copy_from_iter+0x10/0x10 [ 414.922090][T13150] ? __build_skb_around+0x257/0x3e0 [ 414.922119][T13150] ? netlink_sendmsg+0x642/0xb30 [ 414.922140][T13150] ? skb_put+0x11b/0x210 [ 414.922160][T13150] netlink_sendmsg+0x6b2/0xb30 [ 414.922192][T13150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.922220][T13150] ? aa_sock_msg_perm+0xf1/0x1d0 [ 414.922238][T13150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 414.922256][T13150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.922280][T13150] __sock_sendmsg+0x21c/0x270 [ 414.922305][T13150] ____sys_sendmsg+0x505/0x830 [ 414.922328][T13150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.922355][T13150] ? import_iovec+0x74/0xa0 [ 414.922378][T13150] ___sys_sendmsg+0x21f/0x2a0 [ 414.922398][T13150] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.922459][T13150] ? __fget_files+0x2a/0x420 [ 414.922474][T13150] ? __fget_files+0x3a0/0x420 [ 414.922500][T13150] __x64_sys_sendmsg+0x19b/0x260 [ 414.922516][T13150] ? perf_trace_run_bpf_submit+0x100/0x170 [ 414.922537][T13150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.922564][T13150] ? __pfx_ksys_write+0x10/0x10 [ 414.922583][T13150] ? rcu_is_watching+0x15/0xb0 [ 414.922606][T13150] ? do_syscall_64+0xbe/0x3b0 [ 414.922632][T13150] do_syscall_64+0xfa/0x3b0 [ 414.922652][T13150] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.922671][T13150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.922687][T13150] ? clear_bhb_loop+0x60/0xb0 [ 414.922708][T13150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.922724][T13150] RIP: 0033:0x7fac55d8ebe9 [ 414.922741][T13150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.922755][T13150] RSP: 002b:00007fac56b4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.922774][T13150] RAX: ffffffffffffffda RBX: 00007fac55fc5fa0 RCX: 00007fac55d8ebe9 [ 414.922786][T13150] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 414.922797][T13150] RBP: 00007fac56b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 414.922808][T13150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.922818][T13150] R13: 00007fac55fc6038 R14: 00007fac55fc5fa0 R15: 00007ffeb4264f48 [ 414.922847][T13150] [ 415.400870][T13155] bpf: Bad value for 'gid' [ 415.715192][T13154] netlink: 'syz.5.2442': attribute type 7 has an invalid length. [ 416.352396][ T5872] Bluetooth: hci2: ISO packet for unknown connection handle 6 [ 416.428363][T13169] siw: device registration error -23 [ 416.668973][T13181] FAULT_INJECTION: forcing a failure. [ 416.668973][T13181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.772187][T13181] CPU: 1 UID: 0 PID: 13181 Comm: syz.5.2450 Not tainted syzkaller #0 PREEMPT(full) [ 416.772214][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.772225][T13181] Call Trace: [ 416.772232][T13181] [ 416.772240][T13181] dump_stack_lvl+0x189/0x250 [ 416.772265][T13181] ? __pfx____ratelimit+0x10/0x10 [ 416.772290][T13181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.772310][T13181] ? __pfx__printk+0x10/0x10 [ 416.772347][T13181] should_fail_ex+0x414/0x560 [ 416.772375][T13181] _copy_from_user+0x2d/0xb0 [ 416.772396][T13181] __copy_msghdr+0x3c5/0x5b0 [ 416.772419][T13181] ___sys_sendmsg+0x1a5/0x2a0 [ 416.772440][T13181] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.772502][T13181] ? __fget_files+0x2a/0x420 [ 416.772518][T13181] ? __fget_files+0x3a0/0x420 [ 416.772545][T13181] __x64_sys_sendmsg+0x19b/0x260 [ 416.772561][T13181] ? perf_trace_run_bpf_submit+0x100/0x170 [ 416.772583][T13181] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.772611][T13181] ? __pfx_ksys_write+0x10/0x10 [ 416.772634][T13181] ? rcu_is_watching+0x15/0xb0 [ 416.772658][T13181] ? do_syscall_64+0xbe/0x3b0 [ 416.772685][T13181] do_syscall_64+0xfa/0x3b0 [ 416.772706][T13181] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.772728][T13181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.772745][T13181] ? clear_bhb_loop+0x60/0xb0 [ 416.772767][T13181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.772783][T13181] RIP: 0033:0x7f4bab38ebe9 [ 416.772799][T13181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.772813][T13181] RSP: 002b:00007f4bac29f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.772832][T13181] RAX: ffffffffffffffda RBX: 00007f4bab5c5fa0 RCX: 00007f4bab38ebe9 [ 416.772844][T13181] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 416.772855][T13181] RBP: 00007f4bac29f090 R08: 0000000000000000 R09: 0000000000000000 [ 416.772866][T13181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.772876][T13181] R13: 00007f4bab5c6038 R14: 00007f4bab5c5fa0 R15: 00007ffc8eebadd8 [ 416.772906][T13181] [ 417.127727][T13183] syzkaller0: entered promiscuous mode [ 417.151540][T13183] syzkaller0: entered allmulticast mode [ 417.191721][T13180] netlink: 'syz.9.2451': attribute type 13 has an invalid length. [ 417.215609][T13180] netlink: 'syz.9.2451': attribute type 58 has an invalid length. [ 417.224191][T13180] netlink: 152 bytes leftover after parsing attributes in process `syz.9.2451'. [ 417.398914][T13196] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2456'. [ 417.490185][T13197] netlink: 9286 bytes leftover after parsing attributes in process `syz.6.2455'. [ 417.590115][T13205] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2458'. [ 418.086738][T13217] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2464'. [ 418.198139][T13219] netlink: 'syz.5.2465': attribute type 10 has an invalid length. [ 418.780820][T13227] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2469'. [ 420.083389][T13246] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2475'. [ 420.102890][T13249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2473'. [ 420.280366][T13256] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.2476'. [ 421.070209][T13233] syzkaller0: entered promiscuous mode [ 421.097837][T13233] syzkaller0: entered allmulticast mode [ 421.123192][T13255] lo speed is unknown, defaulting to 1000 [ 421.320935][T13264] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2479'. [ 422.564001][T13288] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2488'. [ 424.305316][T13277] lo speed is unknown, defaulting to 1000 [ 424.311339][T13292] lo speed is unknown, defaulting to 1000 [ 424.472858][T13304] netlink: 10 bytes leftover after parsing attributes in process `syz.9.2494'. [ 424.510567][T13304] netlink: 'syz.9.2494': attribute type 39 has an invalid length. [ 424.530057][T13306] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.2493'. [ 424.780778][T13319] netlink: 104 bytes leftover after parsing attributes in process `syz.8.2500'. [ 424.880728][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2502'. [ 424.985769][T13326] netlink: 'syz.9.2502': attribute type 5 has an invalid length. [ 425.063950][T13326] netlink: 'syz.9.2502': attribute type 11 has an invalid length. [ 425.510951][T13343] lo speed is unknown, defaulting to 1000 [ 425.565418][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2508'. [ 425.689667][T13349] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2511'. [ 425.822658][T13353] sock: sock_timestamping_bind_phc: sock not bind to device [ 426.120649][T13370] netlink: 9286 bytes leftover after parsing attributes in process `syz.9.2517'. [ 426.218377][T13376] lo speed is unknown, defaulting to 1000 [ 426.495341][T13383] netlink: 'syz.5.2525': attribute type 21 has an invalid length. [ 426.777056][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2524'. [ 426.857262][T13387] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2526'. [ 427.926698][T13412] netlink: 825 bytes leftover after parsing attributes in process `syz.6.2536'. [ 427.968743][T13415] lo speed is unknown, defaulting to 1000 [ 428.008298][T13412] netlink: 130144 bytes leftover after parsing attributes in process `syz.6.2536'. [ 428.250522][T13421] siw: device registration error -23 [ 428.370386][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2538'. [ 428.816245][T13442] netlink: 216 bytes leftover after parsing attributes in process `syz.8.2543'. [ 428.834066][T13444] FAULT_INJECTION: forcing a failure. [ 428.834066][T13444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.849530][T13444] CPU: 1 UID: 0 PID: 13444 Comm: syz.6.2544 Not tainted syzkaller #0 PREEMPT(full) [ 428.849555][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 428.849565][T13444] Call Trace: [ 428.849573][T13444] [ 428.849581][T13444] dump_stack_lvl+0x189/0x250 [ 428.849605][T13444] ? irqentry_exit+0x74/0x90 [ 428.849629][T13444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 428.849666][T13444] should_fail_ex+0x414/0x560 [ 428.849692][T13444] _copy_from_iter+0x1db/0x16f0 [ 428.849712][T13444] ? rcu_is_watching+0x15/0xb0 [ 428.849731][T13444] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 428.849753][T13444] ? __pfx__copy_from_iter+0x10/0x10 [ 428.849773][T13444] ? __build_skb_around+0x257/0x3e0 [ 428.849798][T13444] ? netlink_sendmsg+0x642/0xb30 [ 428.849819][T13444] ? skb_put+0x11b/0x210 [ 428.849836][T13444] netlink_sendmsg+0x6b2/0xb30 [ 428.849860][T13444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.849880][T13444] ? aa_sock_msg_perm+0xf1/0x1d0 [ 428.849896][T13444] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 428.849913][T13444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 428.849932][T13444] __sock_sendmsg+0x21c/0x270 [ 428.849950][T13444] ____sys_sendmsg+0x505/0x830 [ 428.849968][T13444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 428.849988][T13444] ? import_iovec+0x74/0xa0 [ 428.850008][T13444] ___sys_sendmsg+0x21f/0x2a0 [ 428.850025][T13444] ? __pfx____sys_sendmsg+0x10/0x10 [ 428.850065][T13444] ? __fget_files+0x2a/0x420 [ 428.850077][T13444] ? __fget_files+0x3a0/0x420 [ 428.850096][T13444] __x64_sys_sendmsg+0x19b/0x260 [ 428.850111][T13444] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 428.850132][T13444] ? __pfx_ksys_write+0x10/0x10 [ 428.850153][T13444] ? do_syscall_64+0xbe/0x3b0 [ 428.850173][T13444] do_syscall_64+0xfa/0x3b0 [ 428.850215][T13444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.850228][T13444] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 428.850246][T13444] ? clear_bhb_loop+0x60/0xb0 [ 428.850262][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.850275][T13444] RIP: 0033:0x7f0e2818ebe9 [ 428.850288][T13444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.850299][T13444] RSP: 002b:00007f0e290bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.850314][T13444] RAX: ffffffffffffffda RBX: 00007f0e283c5fa0 RCX: 00007f0e2818ebe9 [ 428.850324][T13444] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000007 [ 428.850333][T13444] RBP: 00007f0e290bc090 R08: 0000000000000000 R09: 0000000000000000 [ 428.850340][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.850348][T13444] R13: 00007f0e283c6038 R14: 00007f0e283c5fa0 R15: 00007ffd15bde898 [ 428.850370][T13444] [ 429.146131][T13447] FAULT_INJECTION: forcing a failure. [ 429.146131][T13447] name failslab, interval 1, probability 0, space 0, times 0 [ 429.158935][T13447] CPU: 1 UID: 0 PID: 13447 Comm: syz.7.2545 Not tainted syzkaller #0 PREEMPT(full) [ 429.158960][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 429.158971][T13447] Call Trace: [ 429.158978][T13447] [ 429.158986][T13447] dump_stack_lvl+0x189/0x250 [ 429.159010][T13447] ? __pfx____ratelimit+0x10/0x10 [ 429.159032][T13447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.159061][T13447] ? __pfx__printk+0x10/0x10 [ 429.159089][T13447] ? __pfx___might_resched+0x10/0x10 [ 429.159104][T13447] ? fs_reclaim_acquire+0x7d/0x100 [ 429.159125][T13447] should_fail_ex+0x414/0x560 [ 429.159151][T13447] should_failslab+0xa8/0x100 [ 429.159177][T13447] kmem_cache_alloc_noprof+0x73/0x3c0 [ 429.159198][T13447] ? skb_clone+0x212/0x3a0 [ 429.159221][T13447] skb_clone+0x212/0x3a0 [ 429.159237][T13447] ? nfnetlink_rcv+0x486/0x2520 [ 429.159260][T13447] nfnetlink_rcv+0x4b4/0x2520 [ 429.159281][T13447] ? is_bpf_text_address+0x26/0x2b0 [ 429.159307][T13447] ? kernel_text_address+0xa5/0xe0 [ 429.159329][T13447] ? __kernel_text_address+0xd/0x40 [ 429.159350][T13447] ? unwind_get_return_address+0x4d/0x90 [ 429.159369][T13447] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 429.159388][T13447] ? arch_stack_walk+0xfc/0x150 [ 429.159422][T13447] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 429.159477][T13447] ? __lock_acquire+0xab9/0xd20 [ 429.159510][T13447] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.159550][T13447] netlink_unicast+0x82c/0x9e0 [ 429.159578][T13447] ? __pfx_netlink_unicast+0x10/0x10 [ 429.159600][T13447] ? netlink_sendmsg+0x642/0xb30 [ 429.159619][T13447] ? skb_put+0x11b/0x210 [ 429.159639][T13447] netlink_sendmsg+0x805/0xb30 [ 429.159671][T13447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.159698][T13447] ? aa_sock_msg_perm+0xf1/0x1d0 [ 429.159715][T13447] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.159734][T13447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.159757][T13447] __sock_sendmsg+0x21c/0x270 [ 429.159781][T13447] ____sys_sendmsg+0x505/0x830 [ 429.159805][T13447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.159832][T13447] ? import_iovec+0x74/0xa0 [ 429.159855][T13447] ___sys_sendmsg+0x21f/0x2a0 [ 429.159874][T13447] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.159928][T13447] ? __fget_files+0x2a/0x420 [ 429.159943][T13447] ? __fget_files+0x3a0/0x420 [ 429.159969][T13447] __x64_sys_sendmsg+0x19b/0x260 [ 429.159989][T13447] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.160017][T13447] ? __pfx_ksys_write+0x10/0x10 [ 429.160035][T13447] ? rcu_is_watching+0x15/0xb0 [ 429.160063][T13447] ? do_syscall_64+0xbe/0x3b0 [ 429.160089][T13447] do_syscall_64+0xfa/0x3b0 [ 429.160110][T13447] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.160128][T13447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.160143][T13447] ? clear_bhb_loop+0x60/0xb0 [ 429.160161][T13447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.160174][T13447] RIP: 0033:0x7fac55d8ebe9 [ 429.160189][T13447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.160202][T13447] RSP: 002b:00007fac56b4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.160220][T13447] RAX: ffffffffffffffda RBX: 00007fac55fc5fa0 RCX: 00007fac55d8ebe9 [ 429.160233][T13447] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 429.160244][T13447] RBP: 00007fac56b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 429.160254][T13447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.160264][T13447] R13: 00007fac55fc6038 R14: 00007fac55fc5fa0 R15: 00007ffeb4264f48 [ 429.160292][T13447] [ 429.825318][T13462] lo speed is unknown, defaulting to 1000 [ 429.893471][T13463] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2551'. [ 430.261687][T13477] lo speed is unknown, defaulting to 1000 [ 430.579250][T13477] wlan1 speed is unknown, defaulting to 1000 [ 430.611607][T13488] netlink: 88 bytes leftover after parsing attributes in process `syz.9.2560'. [ 430.990278][T13499] lo speed is unknown, defaulting to 1000 [ 431.259934][T13508] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2568'. [ 431.262161][T13509] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2566'. [ 431.278293][T13508] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2568'. [ 431.385401][T13518] netlink: 'syz.7.2570': attribute type 29 has an invalid length. [ 431.424498][T13518] netlink: 'syz.7.2570': attribute type 29 has an invalid length. [ 431.457671][T13518] netlink: 'syz.7.2570': attribute type 29 has an invalid length. [ 431.600643][T13523] netlink: 'syz.8.2573': attribute type 13 has an invalid length. [ 431.630782][T13522] wg2: entered promiscuous mode [ 431.630971][T13523] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2573'. [ 431.648430][T13522] wg2: entered allmulticast mode [ 431.680187][T13523] syz_tun: refused to change device tx_queue_len [ 431.682169][T13527] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2574'. [ 431.776586][T13531] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2575'. [ 431.785977][T13532] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2575'. [ 431.921213][T13536] FAULT_INJECTION: forcing a failure. [ 431.921213][T13536] name failslab, interval 1, probability 0, space 0, times 0 [ 431.945537][T13538] netlink: 'syz.6.2577': attribute type 29 has an invalid length. [ 431.953481][T13536] CPU: 1 UID: 0 PID: 13536 Comm: syz.8.2576 Not tainted syzkaller #0 PREEMPT(full) [ 431.953505][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.953515][T13536] Call Trace: [ 431.953523][T13536] [ 431.953530][T13536] dump_stack_lvl+0x189/0x250 [ 431.953555][T13536] ? __pfx____ratelimit+0x10/0x10 [ 431.953579][T13536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.953599][T13536] ? __pfx__printk+0x10/0x10 [ 431.953618][T13536] ? perf_trace_lock+0xec/0x3b0 [ 431.953649][T13536] should_fail_ex+0x414/0x560 [ 431.953677][T13536] should_failslab+0xa8/0x100 [ 431.953704][T13536] kmem_cache_alloc_noprof+0x73/0x3c0 [ 431.953725][T13536] ? skb_clone+0x212/0x3a0 [ 431.953748][T13536] skb_clone+0x212/0x3a0 [ 431.953770][T13536] __netlink_deliver_tap+0x404/0x850 [ 431.953808][T13536] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.953833][T13536] netlink_deliver_tap+0x19c/0x1b0 [ 431.953857][T13536] netlink_unicast+0x7fa/0x9e0 [ 431.953890][T13536] ? __pfx_netlink_unicast+0x10/0x10 [ 431.953914][T13536] ? netlink_sendmsg+0x642/0xb30 [ 431.953934][T13536] ? skb_put+0x11b/0x210 [ 431.953954][T13536] netlink_sendmsg+0x805/0xb30 [ 431.953989][T13536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.954023][T13536] ? aa_sock_msg_perm+0xf1/0x1d0 [ 431.954042][T13536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.954061][T13536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.954085][T13536] __sock_sendmsg+0x21c/0x270 [ 431.954111][T13536] ____sys_sendmsg+0x505/0x830 [ 431.954137][T13536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.954166][T13536] ? import_iovec+0x74/0xa0 [ 431.954193][T13536] ___sys_sendmsg+0x21f/0x2a0 [ 431.954214][T13536] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.954258][T13536] ? __fget_files+0x2a/0x420 [ 431.954288][T13536] ? __fget_files+0x2a/0x420 [ 431.954302][T13536] ? __fget_files+0x3a0/0x420 [ 431.954330][T13536] __x64_sys_sendmsg+0x19b/0x260 [ 431.954351][T13536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.954380][T13536] ? __pfx_ksys_write+0x10/0x10 [ 431.954398][T13536] ? rcu_is_watching+0x15/0xb0 [ 431.954422][T13536] ? do_syscall_64+0xbe/0x3b0 [ 431.954449][T13536] do_syscall_64+0xfa/0x3b0 [ 431.954469][T13536] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.954489][T13536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.954506][T13536] ? clear_bhb_loop+0x60/0xb0 [ 431.954527][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.954543][T13536] RIP: 0033:0x7f86dd58ebe9 [ 431.954559][T13536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.954572][T13536] RSP: 002b:00007f86de4ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.954589][T13536] RAX: ffffffffffffffda RBX: 00007f86dd7c5fa0 RCX: 00007f86dd58ebe9 [ 431.954602][T13536] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 431.954612][T13536] RBP: 00007f86de4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 431.954622][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.954632][T13536] R13: 00007f86dd7c6038 R14: 00007f86dd7c5fa0 R15: 00007ffdd142db58 [ 431.954665][T13536] [ 432.226529][T13547] siw: device registration error -23 [ 432.229322][T13540] netlink: 'syz.6.2577': attribute type 29 has an invalid length. [ 432.277969][T13545] netlink: 'syz.6.2577': attribute type 29 has an invalid length. [ 432.503452][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2583'. [ 432.554955][ T5872] Bluetooth: hci0: ISO packet for unknown connection handle 6 [ 432.765253][T13574] FAULT_INJECTION: forcing a failure. [ 432.765253][T13574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.809287][T13574] CPU: 1 UID: 0 PID: 13574 Comm: syz.8.2590 Not tainted syzkaller #0 PREEMPT(full) [ 432.809313][T13574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.809325][T13574] Call Trace: [ 432.809331][T13574] [ 432.809340][T13574] dump_stack_lvl+0x189/0x250 [ 432.809365][T13574] ? __pfx____ratelimit+0x10/0x10 [ 432.809388][T13574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.809407][T13574] ? __pfx__printk+0x10/0x10 [ 432.809430][T13574] ? __might_fault+0xb0/0x130 [ 432.809463][T13574] should_fail_ex+0x414/0x560 [ 432.809491][T13574] _copy_from_iter+0x3f5/0x16f0 [ 432.809532][T13574] ? __pfx__copy_from_iter+0x10/0x10 [ 432.809547][T13574] ? txopt_get+0x335/0x3f0 [ 432.809570][T13574] ? aa_label_sk_perm+0x4cd/0x630 [ 432.809593][T13574] ? __pfx_txopt_get+0x10/0x10 [ 432.809636][T13574] rawv6_sendmsg+0xb4b/0x1820 [ 432.809678][T13574] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 432.809725][T13574] ? __pfx_aa_sk_perm+0x10/0x10 [ 432.809751][T13574] ? sock_rps_record_flow+0x19/0x410 [ 432.809774][T13574] ? inet_sendmsg+0x2f4/0x370 [ 432.809792][T13574] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 432.809815][T13574] __sock_sendmsg+0x19c/0x270 [ 432.809840][T13574] ____sys_sendmsg+0x505/0x830 [ 432.809863][T13574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.809888][T13574] ? import_iovec+0x74/0xa0 [ 432.809911][T13574] ___sys_sendmsg+0x21f/0x2a0 [ 432.809931][T13574] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.809983][T13574] ? __fget_files+0x2a/0x420 [ 432.809998][T13574] ? __fget_files+0x3a0/0x420 [ 432.810023][T13574] __x64_sys_sendmsg+0x19b/0x260 [ 432.810043][T13574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.810070][T13574] ? __pfx_ksys_write+0x10/0x10 [ 432.810089][T13574] ? rcu_is_watching+0x15/0xb0 [ 432.810111][T13574] ? do_syscall_64+0xbe/0x3b0 [ 432.810137][T13574] do_syscall_64+0xfa/0x3b0 [ 432.810158][T13574] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.810179][T13574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.810196][T13574] ? clear_bhb_loop+0x60/0xb0 [ 432.810216][T13574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.810232][T13574] RIP: 0033:0x7f86dd58ebe9 [ 432.810247][T13574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.810260][T13574] RSP: 002b:00007f86de4ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.810278][T13574] RAX: ffffffffffffffda RBX: 00007f86dd7c5fa0 RCX: 00007f86dd58ebe9 [ 432.810290][T13574] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 432.810301][T13574] RBP: 00007f86de4ba090 R08: 0000000000000000 R09: 0000000000000000 [ 432.810312][T13574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.810322][T13574] R13: 00007f86dd7c6038 R14: 00007f86dd7c5fa0 R15: 00007ffdd142db58 [ 432.810350][T13574] [ 433.129053][T13580] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2591'. [ 433.461623][T13593] netlink: 'syz.6.2594': attribute type 10 has an invalid length. [ 434.945454][T13633] netlink: 'syz.7.2608': attribute type 5 has an invalid length. [ 434.968420][T13633] netlink: 'syz.7.2608': attribute type 11 has an invalid length. [ 435.677143][T13660] __nla_validate_parse: 7 callbacks suppressed [ 435.677163][T13660] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2619'. [ 436.076552][T13672] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2624'. [ 436.541277][T13684] siw: device registration error -23 [ 436.615117][T13688] netlink: 14975 bytes leftover after parsing attributes in process `syz.9.2629'. [ 436.618888][T13687] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2628'. [ 436.891098][T13696] siw: device registration error -23 [ 436.930742][T13699] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2632'. [ 437.255700][T13715] validate_nla: 4 callbacks suppressed [ 437.255720][T13715] netlink: 'syz.9.2636': attribute type 10 has an invalid length. [ 437.679854][T13715] netlink: 14601 bytes leftover after parsing attributes in process `syz.9.2636'. [ 438.628476][T13728] netlink: 825 bytes leftover after parsing attributes in process `syz.8.2641'. [ 438.662679][T13728] netlink: 130144 bytes leftover after parsing attributes in process `syz.8.2641'. [ 438.746606][T13729] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2639'. [ 438.907279][T13737] netlink: 'syz.9.2639': attribute type 5 has an invalid length. [ 438.927891][T13740] siw: device registration error -23 [ 438.935363][T13737] netlink: 'syz.9.2639': attribute type 11 has an invalid length. [ 439.038949][T13735] lo speed is unknown, defaulting to 1000 [ 439.141066][T13748] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2647'. [ 439.705509][T13735] wlan1 speed is unknown, defaulting to 1000 [ 439.742057][T13748] siw: device registration error -23 [ 440.148473][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.155048][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.793661][T13784] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2658'. [ 440.921376][T13787] bond_slave_1: mtu less than device minimum [ 441.560603][T13799] pim6reg1: entered promiscuous mode [ 441.566676][T13799] pim6reg1: entered allmulticast mode [ 442.261383][T13802] lo speed is unknown, defaulting to 1000 [ 442.269370][T13808] lo speed is unknown, defaulting to 1000 [ 442.532891][T13825] pim6reg1: entered promiscuous mode [ 442.551738][T13825] pim6reg1: entered allmulticast mode [ 442.742335][T13802] wlan1 speed is unknown, defaulting to 1000 [ 444.046893][T13843] bridge0: entered promiscuous mode [ 444.052411][T13843] bridge0: entered allmulticast mode [ 444.136304][T13808] wlan1 speed is unknown, defaulting to 1000 [ 444.491715][T13858] wg2: left promiscuous mode [ 444.496983][T13858] wg2: left allmulticast mode [ 444.530463][T13858] wg2: entered promiscuous mode [ 444.550818][T13858] wg2: entered allmulticast mode [ 444.650001][T13860] bond_slave_1: mtu less than device minimum [ 444.656193][T13854] lo speed is unknown, defaulting to 1000 [ 445.078137][T13854] wlan1 speed is unknown, defaulting to 1000 [ 445.087296][T13864] lo speed is unknown, defaulting to 1000 [ 446.156795][T13864] wlan1 speed is unknown, defaulting to 1000 [ 447.681573][T13904] sit0: entered promiscuous mode [ 447.932534][T13904] sit0: entered allmulticast mode [ 448.877386][T13929] pim6reg1: entered promiscuous mode [ 448.932624][T13929] pim6reg1: entered allmulticast mode [ 452.938883][T13966] €Â0: renamed from pim6reg1 [ 453.149394][T13964] lo speed is unknown, defaulting to 1000 [ 454.344732][T13964] wlan1 speed is unknown, defaulting to 1000 [ 457.243906][T14017] pim6reg1: entered promiscuous mode [ 457.270720][T14017] pim6reg1: entered allmulticast mode [ 459.454753][T14062] pim6reg1: entered promiscuous mode [ 459.478614][T14062] pim6reg1: entered allmulticast mode [ 463.006913][T14087] bond_slave_1: mtu less than device minimum [ 463.458563][T14128] lo speed is unknown, defaulting to 1000 [ 464.937357][T14128] wlan1 speed is unknown, defaulting to 1000 [ 466.701056][T14186] lo speed is unknown, defaulting to 1000 [ 466.988671][T14186] wlan1 speed is unknown, defaulting to 1000 [ 469.187462][T14194] syzkaller0: entered promiscuous mode [ 471.876505][T14226] ------------[ cut here ]------------ [ 471.882103][T14226] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 472.068604][T14226] WARNING: CPU: 0 PID: 14226 at kernel/bpf/verifier.c:2733 reg_bounds_sanity_check+0x6e6/0xc20 [ 472.079417][T14226] Modules linked in: [ 472.083948][T14226] CPU: 0 UID: 0 PID: 14226 Comm: syz.8.2822 Not tainted syzkaller #0 PREEMPT(full) [ 472.093575][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.103765][T14226] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 472.110041][T14226] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 472.129704][T14226] RSP: 0018:ffffc90003c4ef08 EFLAGS: 00010282 [ 472.135936][T14226] RAX: 5f48584afcc6d300 RBX: 00000000ffffdfcc RCX: 0000000000080000 [ 472.144104][T14226] RDX: ffffc9000f742000 RSI: 000000000000c5f6 RDI: 000000000000c5f7 [ 472.152283][T14226] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004 [ 472.160271][T14226] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888066472258 [ 472.168313][T14226] R13: ffff888066472278 R14: ffff888066472290 R15: 00000000ffffdfcc [ 472.176358][T14226] FS: 00007f86de4996c0(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 472.185807][T14226] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.192631][T14226] CR2: 0000000100000000 CR3: 0000000037ca4000 CR4: 00000000003526f0 [ 472.200720][T14226] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 472.208840][T14226] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 472.216870][T14226] Call Trace: [ 472.220171][T14226] [ 472.223257][T14226] reg_set_min_max+0x214/0x300 [ 472.228038][T14226] check_cond_jmp_op+0x1625/0x2910 [ 472.233216][T14226] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 472.238820][T14226] ? do_check+0x4531/0xe520 [ 472.243381][T14226] ? kfree+0x18e/0x440 [ 472.247480][T14226] do_check+0x6751/0xe520 [ 472.251985][T14226] ? __pfx_do_check+0x10/0x10 [ 472.256739][T14226] ? init_func_state+0x1ddf/0x2d20 [ 472.261940][T14226] do_check_common+0x1949/0x24f0 [ 472.266916][T14226] bpf_check+0x1746a/0x1d2e0 [ 472.271524][T14226] ? is_bpf_text_address+0x26/0x2b0 [ 472.276791][T14226] ? kernel_text_address+0xa5/0xe0 [ 472.281941][T14226] ? __kernel_text_address+0xd/0x40 [ 472.287639][T14226] ? __lock_acquire+0xab9/0xd20 [ 472.292747][T14226] ? __mutex_trylock_common+0x153/0x260 [ 472.298312][T14226] ? __pfx___mutex_trylock_common+0x10/0x10 [ 472.304558][T14226] ? css_rstat_updated+0x23a/0x4f0 [ 472.309741][T14226] ? __lock_acquire+0xab9/0xd20 [ 472.314812][T14226] ? __pfx_bpf_check+0x10/0x10 [ 472.319593][T14226] ? ktime_get_with_offset+0x8c/0x2a0 [ 472.325039][T14226] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 472.331301][T14226] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.336686][T14226] ? ktime_get_with_offset+0x8c/0x2a0 [ 472.342235][T14226] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 472.348506][T14226] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 472.355287][T14226] ? __asan_memset+0x22/0x50 [ 472.359906][T14226] ? bpf_obj_name_cpy+0x194/0x1e0 [ 472.364995][T14226] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 472.370315][T14226] ? security_bpf_prog_load+0x7f/0x310 [ 472.375856][T14226] bpf_prog_load+0x1318/0x1930 [ 472.380661][T14226] ? __pfx_bpf_prog_load+0x10/0x10 [ 472.385967][T14226] ? bpf_lsm_bpf+0x9/0x20 [ 472.390890][T14226] ? security_bpf+0x7e/0x300 [ 472.395753][T14226] __sys_bpf+0x528/0x870 [ 472.400114][T14226] ? __pfx___sys_bpf+0x10/0x10 [ 472.405021][T14226] ? rcu_is_watching+0x15/0xb0 [ 472.409805][T14226] __x64_sys_bpf+0x7c/0x90 [ 472.414286][T14226] do_syscall_64+0xfa/0x3b0 [ 472.418807][T14226] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.424149][T14226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.430227][T14226] ? clear_bhb_loop+0x60/0xb0 [ 472.435112][T14226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.441020][T14226] RIP: 0033:0x7f86dd58ebe9 [ 472.445495][T14226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.465623][T14226] RSP: 002b:00007f86de499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.474160][T14226] RAX: ffffffffffffffda RBX: 00007f86dd7c6090 RCX: 00007f86dd58ebe9 [ 472.482281][T14226] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 472.490847][T14226] RBP: 00007f86dd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.499443][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.507830][T14226] R13: 00007f86dd7c6128 R14: 00007f86dd7c6090 R15: 00007ffdd142db58 [ 472.515973][T14226] [ 472.519024][T14226] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 472.526325][T14226] CPU: 0 UID: 0 PID: 14226 Comm: syz.8.2822 Not tainted syzkaller #0 PREEMPT(full) [ 472.535696][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.545751][T14226] Call Trace: [ 472.549024][T14226] [ 472.551973][T14226] dump_stack_lvl+0x99/0x250 [ 472.556825][T14226] ? __asan_memcpy+0x40/0x70 [ 472.561429][T14226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.566741][T14226] ? __pfx__printk+0x10/0x10 [ 472.571341][T14226] vpanic+0x281/0x750 [ 472.575510][T14226] ? __pfx__printk+0x10/0x10 [ 472.580203][T14226] ? __pfx_vpanic+0x10/0x10 [ 472.584722][T14226] ? is_bpf_text_address+0x26/0x2b0 [ 472.589933][T14226] panic+0xb9/0xc0 [ 472.593652][T14226] ? __pfx_panic+0x10/0x10 [ 472.598086][T14226] __warn+0x31b/0x4b0 [ 472.602061][T14226] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 472.607714][T14226] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 472.613345][T14226] report_bug+0x2be/0x4f0 [ 472.617668][T14226] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 472.623305][T14226] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 472.629020][T14226] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 472.634663][T14226] handle_bug+0x84/0x160 [ 472.638898][T14226] exc_invalid_op+0x1a/0x50 [ 472.643411][T14226] asm_exc_invalid_op+0x1a/0x20 [ 472.648283][T14226] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 472.654530][T14226] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 1f 31 aa ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 472.674317][T14226] RSP: 0018:ffffc90003c4ef08 EFLAGS: 00010282 [ 472.680389][T14226] RAX: 5f48584afcc6d300 RBX: 00000000ffffdfcc RCX: 0000000000080000 [ 472.688347][T14226] RDX: ffffc9000f742000 RSI: 000000000000c5f6 RDI: 000000000000c5f7 [ 472.696309][T14226] RBP: 00000000ffffdfcd R08: 0000000000000003 R09: 0000000000000004 [ 472.704286][T14226] R10: dffffc0000000000 R11: fffffbfff1bfa1ec R12: ffff888066472258 [ 472.712253][T14226] R13: ffff888066472278 R14: ffff888066472290 R15: 00000000ffffdfcc [ 472.720249][T14226] reg_set_min_max+0x214/0x300 [ 472.725012][T14226] check_cond_jmp_op+0x1625/0x2910 [ 472.730128][T14226] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 472.735584][T14226] ? do_check+0x4531/0xe520 [ 472.740081][T14226] ? kfree+0x18e/0x440 [ 472.744141][T14226] do_check+0x6751/0xe520 [ 472.748537][T14226] ? __pfx_do_check+0x10/0x10 [ 472.753289][T14226] ? init_func_state+0x1ddf/0x2d20 [ 472.758972][T14226] do_check_common+0x1949/0x24f0 [ 472.763936][T14226] bpf_check+0x1746a/0x1d2e0 [ 472.768516][T14226] ? is_bpf_text_address+0x26/0x2b0 [ 472.773723][T14226] ? kernel_text_address+0xa5/0xe0 [ 472.778829][T14226] ? __kernel_text_address+0xd/0x40 [ 472.784042][T14226] ? __lock_acquire+0xab9/0xd20 [ 472.788903][T14226] ? __mutex_trylock_common+0x153/0x260 [ 472.794453][T14226] ? __pfx___mutex_trylock_common+0x10/0x10 [ 472.800372][T14226] ? css_rstat_updated+0x23a/0x4f0 [ 472.805488][T14226] ? __lock_acquire+0xab9/0xd20 [ 472.810440][T14226] ? __pfx_bpf_check+0x10/0x10 [ 472.815192][T14226] ? ktime_get_with_offset+0x8c/0x2a0 [ 472.820560][T14226] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 472.826798][T14226] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.832016][T14226] ? ktime_get_with_offset+0x8c/0x2a0 [ 472.837568][T14226] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 472.843797][T14226] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 472.850501][T14226] ? __asan_memset+0x22/0x50 [ 472.855102][T14226] ? bpf_obj_name_cpy+0x194/0x1e0 [ 472.860147][T14226] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 472.865433][T14226] ? security_bpf_prog_load+0x7f/0x310 [ 472.870893][T14226] bpf_prog_load+0x1318/0x1930 [ 472.875671][T14226] ? __pfx_bpf_prog_load+0x10/0x10 [ 472.880928][T14226] ? bpf_lsm_bpf+0x9/0x20 [ 472.885271][T14226] ? security_bpf+0x7e/0x300 [ 472.889873][T14226] __sys_bpf+0x528/0x870 [ 472.894122][T14226] ? __pfx___sys_bpf+0x10/0x10 [ 472.898913][T14226] ? rcu_is_watching+0x15/0xb0 [ 472.903706][T14226] __x64_sys_bpf+0x7c/0x90 [ 472.908134][T14226] do_syscall_64+0xfa/0x3b0 [ 472.912637][T14226] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.917831][T14226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.924080][T14226] ? clear_bhb_loop+0x60/0xb0 [ 472.928776][T14226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.934666][T14226] RIP: 0033:0x7f86dd58ebe9 [ 472.939072][T14226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.958756][T14226] RSP: 002b:00007f86de499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.967214][T14226] RAX: ffffffffffffffda RBX: 00007f86dd7c6090 RCX: 00007f86dd58ebe9 [ 472.975263][T14226] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 472.983258][T14226] RBP: 00007f86dd611e19 R08: 0000000000000000 R09: 0000000000000000 [ 472.991224][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.999184][T14226] R13: 00007f86dd7c6128 R14: 00007f86dd7c6090 R15: 00007ffdd142db58 [ 473.007169][T14226] [ 473.010504][T14226] Kernel Offset: disabled [ 473.014860][T14226] Rebooting in 86400 seconds..