last executing test programs: 5m5.542787854s ago: executing program 4 (id=1502): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x7, 0xc}, 0x10000, 0x7, 0x4, 0x7, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80100, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x1d, 0x1, 0xa) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x810) r3 = socket(0x1d, 0x2, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xc}, {0x0, [0x2e, 0x0, 0x30, 0x2e, 0x5f, 0x30, 0x41, 0x0, 0x61, 0x61]}}, &(0x7f0000000200)=""/222, 0x24, 0xde, 0x1, 0xce42}, 0x28) setsockopt$sock_attach_bpf(r3, 0x6a, 0x6e, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x136e54520700452d, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89f7, &(0x7f0000000040)={'veth1_to_hsr\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) getpid() sendmsg$netlink(r3, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ff0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000004000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m3.561811963s ago: executing program 4 (id=1520): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x889}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0xfffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0xffffffffffffffbc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102031100fe08000e"], 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000140)={'b', ' *:* ', 'm\x00'}, 0x8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9a18fe00000000b6090800400000007b9af0ff00000000bf8610000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000003d08f0ff0000000085000000b4000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m2.204205448s ago: executing program 4 (id=1528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000005000000095000000000000009bd773c1240b139e136e79751b1207174b4d285a6adae89f65a2708e24bcfb7d46d441e40c3258de3ffe74212653cba853b1f8e5b14562e37b44f8d983f59ec92134a086e1ec45e89b5f4caf51abbf70eae9628a52d2a5e1f133112280cbe1ccf960d88048aaca215b26966fe6e7313fa2ed021d1f2a24eca8c32bc3cbb4684833f71090bdf2922a23bcdb6d40073a6ece1051f73190a9"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 5m2.039919146s ago: executing program 4 (id=1531): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1}, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x10000009, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001180)}, 0x3000c810) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x4000, r1}, 0x18) 5m1.443786676s ago: executing program 4 (id=1536): getpid() bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x13, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000020000000bca30000000003002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f61147c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 5m1.041528891s ago: executing program 4 (id=1539): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040004) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000001000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c901", 0x87}], 0x1, 0x0, 0x0, 0x2663}, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x2, 0xc6, 0xfd, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xae, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000390000000000000200000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000248000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800024000000000080001"], 0xc4}}, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r8}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x408, 0xf6107, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000fe, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x2, 0x80000000000f, 0x0, 0xc, 0x0, 0x20bf}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 5m0.578727819s ago: executing program 32 (id=1539): r0 = getpid() r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040004) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000001000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c901", 0x87}], 0x1, 0x0, 0x0, 0x2663}, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0xd, 0x2, 0xc6, 0xfd, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xae, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000390000000000000200000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000248000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800024000000000080001"], 0xc4}}, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r8}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20040040) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x408, 0xf6107, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000fe, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x2, 0x80000000000f, 0x0, 0xc, 0x0, 0x20bf}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 8.37430293s ago: executing program 3 (id=3327): recvmsg(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 20) 8.353055417s ago: executing program 5 (id=3328): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x20, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x24000054) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r3}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x9) syz_clone(0x2802000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x1407, 0x800, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x44901}, 0x4) 8.194200222s ago: executing program 3 (id=3329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x3}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x8001, 0x0, 0x201, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000003c00010322bd7002fadb6a2501"], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x4008800) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x1, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x5}, 0x11eff, 0x4, 0x98, 0x0, 0x2, 0xfffff276, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8844}, 0x8000) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8fdffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b70f00000000000063115d00000000000700c39d59139335bf96128a02c9222b8c5421d423ad723642ec000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="23470200ffffffff8510000000000000181b0000", @ANYRES32=r0, @ANYBLOB="66b32667da10a946eb0000008000000000905f04005d0f0000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 8.192237032s ago: executing program 0 (id=3330): r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0xfff, 0x2, 0x7, 0x9, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x7c}}, 0x20008000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="340440eb405ea02769cbc722599b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000006c0)="5c00000012006bcd9e3fe3dc6e48aa310b6b87033c00a6001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20c090}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1411, 0x300, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x1) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001400000426bd7000fedbdf251e0f0b000100072bb8a312c8fa000000cacaa0e04785d2a1363c6674c19ced15c67bde8eb6d0af86686e653759132958e1cc1fec41c85b3a7ae575b82dad97f6c2292fa647077617d0c235a96c8a0ce90324ad3bf6ac265f5dba37c88cea3a3ae7288165651aab8d12c841ecb8163f00cb95c06b7344ccee30d52d852b073478a58fe655e0439bd03144e20a605b70b697ced654e77ef72893da421e455968e2710f138376f5dcc1840369"], 0x20}, 0x1, 0x0, 0x0, 0x68}, 0x20000050) sendmsg$inet6(r6, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="24000100000000862900000034000000fc00"/32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x4004000) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x4}, {0xfff1, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=@getchain={0x5c, 0x66, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x4, 0xb}, {0xfff9, 0x14}, {0xfff3, 0xf}}, [{0x8}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000003}, 0x20004800) 7.488930797s ago: executing program 1 (id=3333): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007004000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.430952075s ago: executing program 5 (id=3334): r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200020, 0x4, @perf_config_ext={0x8, 0x2}, 0x100, 0x2, 0x8001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000628000480240001800b000100657874686472000014000280080006400000000108000740000000150900010073797a30000000000900020073797a320000000005000740bf000000140000001100010000000000000000000300000a445133995cd5c25e6364fd55"], 0x84}, 0x1, 0x0, 0x0, 0x10010}, 0x0) fstat(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x201, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 7.307015984s ago: executing program 3 (id=3335): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0x16, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0xfffff586, 0xfb, &(0x7f0000000800)=""/251, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000940)=[r0], &(0x7f00000009c0)=[{0x0, 0x4, 0xe, 0x9}]}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x71fe}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0xf, &(0x7f00000006c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8, 0x9, 0xffff}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_clone(0x7000000, &(0x7f00000001c0)="a4799adfd938738a56edfcbcc7c258f2607d9a776bf9afacefc439f3ab112b751fcad120f8f02a9575cfb2d174efad0c77f6f9b0d2db2c311b65d4a4dc01e8a9b611e3c3138db3022201858d4422f4e0cbd034fc86d0329e629cfaa8586c", 0x5e, &(0x7f0000000740), &(0x7f0000000780), &(0x7f0000000f40)="f6d5347e82a02d629c7ba64660d45696394dd2afe21f90c98344c658ba41ee9d85a5175c2e78021846b8f5e4b4eaf370c0325bfd6f1c830a69a732ba2e3bf21b9d7e43cbab4099261246869482d15247ebf5fb83b937d98047273d4e771b09c1deb9f0a8f7107e9e106ceea699c51e4a748f3658268f605dcf7706f28768e259f0eb17f153dd36a08ec377cfcb1a6d0e00559e7f3b92f5c5c0891d835c48ca7d80ce5c298355318ef8405f020d1c8d49ecb194e778e7f3aab1d002ebc95be5a3f88477507ce32f0abe8c88aa163f6efeb6ca7050dfcacd972f3de15308602c73b7c7a9949a499bfee1") r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r4, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x89, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000a80), &(0x7f0000000b00), 0x8, 0x20, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f00)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r3], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7fff}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r7, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 7.275870865s ago: executing program 0 (id=3336): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000009000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000408000000000000000000000000000000020000006c0000010001000000000084010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000e00000010000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000020000000000330000000200000000000000000000000000ffffac1414aa000000000001000000000000000000000000000020010000000000000000000000000000000004d26c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 7.141299383s ago: executing program 0 (id=3338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffff7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000880), 0x8) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0x18, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe8a, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@map_fd={0x18, 0x8, 0x1, 0x0, r2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x9, 0xb8, &(0x7f0000000740)=""/184, 0x8d8dadbae81294a5, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0xf, 0x67f9, 0x35b3}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r1, r3, r1, r1, r1, r1, r1, r5, r1], &(0x7f0000000900)=[{0x2, 0x1, 0xf, 0xa}, {0x3, 0x3, 0xf, 0xc}, {0x1, 0x4, 0xa}, {0x3, 0x2, 0x0, 0x3}], 0x10, 0x100000}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080018002d0301000000000095000000000000006916000000000000bf6700000000000035060700f0ff0f006706000002000000160300000ee60060bf050000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5480a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000005574d074fa7e93447a88c0fbab48660aae7cdf367ef0e4538279b6113de5b94e1056f443305145c9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) fstat(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x20000000, &(0x7f0000000040), 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)="6a6a897b27736049febaa8a46a3dd5cf25f82715edb6e0d920d734c0af83ccd0c0be4f075d05") r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000001ac0)={&(0x7f0000000040)={0x14, 0x17, 0x1, 0x70bd2a, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@deltfilter={0x1048, 0x2d, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x9, 0xb}, {0x4, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x1018, 0x2, [@TCA_BASIC_POLICE={0x1014, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x101795ff, 0x8749, 0x7, 0x2, 0x1, 0x6, 0x5, 0xffff7649, 0x3, 0x5, 0x4, 0x2, 0x8, 0x5, 0x7, 0x519, 0x3, 0x1, 0xa, 0x4, 0xa7, 0x7fffffff, 0x3, 0x26, 0x5, 0x1, 0x13bc, 0xf, 0x8, 0x5, 0x3, 0xff, 0x4, 0x6, 0xf, 0x0, 0x3, 0x63c4000, 0x7, 0x9, 0x7f, 0x9, 0x8, 0xfffffffb, 0x5, 0x2, 0x5, 0x7d3, 0x7, 0x5, 0x5ce, 0x8, 0x9, 0x10000, 0xff000, 0x1, 0x8, 0x101, 0x10000, 0x79, 0xfffffff1, 0x9, 0x2, 0x80000001, 0x3, 0x8, 0x7f, 0x2, 0xfffffff7, 0x2, 0x3, 0x101, 0x3, 0xc, 0x2, 0x6, 0xb2da, 0xc, 0x6, 0x6504, 0xfffffff7, 0x7, 0x3ff, 0x7, 0x7, 0x3, 0x6, 0x6, 0xfffffff7, 0xd, 0x7, 0x18, 0xfff, 0x0, 0x7, 0x0, 0x95a8, 0x0, 0xc636, 0x0, 0x3, 0x6, 0x5, 0x63, 0x800, 0xfffffffe, 0xf5, 0xb, 0x2, 0x5, 0x9, 0x4, 0x3, 0x3, 0x2b, 0x2, 0x4, 0x3, 0x3, 0x4de3, 0x0, 0x533, 0xfffffffb, 0x200, 0x9, 0xfffffffe, 0x81, 0x100, 0x7, 0x3, 0xa, 0x8000, 0x8, 0x101, 0x2, 0x5, 0x1, 0x9, 0xffffff97, 0x3ff, 0x2, 0x9, 0x87, 0x0, 0x6, 0x0, 0x72e, 0x2, 0x10fd, 0xfffffff7, 0x7, 0x9, 0x8, 0x2, 0x5, 0x4, 0xfffffc21, 0x5, 0x7114, 0x5, 0x557, 0x3ce, 0x3b9a, 0x2, 0xb, 0x10001, 0xd2, 0x10001, 0xfffffffe, 0x3, 0x800, 0x3, 0x5ee7, 0x123, 0x80000001, 0x4, 0x800, 0x8000, 0x1, 0x7f, 0x12000, 0x4, 0x81, 0x7, 0x200, 0x8f, 0x80000001, 0xaf4, 0x81, 0xa8b2, 0x2, 0x0, 0x9311, 0x1ff, 0x7ff, 0x8, 0x5a68, 0x4c07, 0xfffffff7, 0x1, 0x4, 0x383d, 0x1, 0xf, 0x5, 0x3, 0x8552, 0x1, 0xffff, 0xfffffff8, 0x9, 0x101, 0xd, 0xa, 0x7, 0x7f, 0x7, 0x8, 0x9, 0xc988, 0x10001, 0xf2e3, 0x10, 0x1, 0xe1, 0x86e, 0x9cf, 0x0, 0x0, 0x9, 0xf, 0x1000, 0x2, 0xb36f, 0x8, 0x1042, 0x0, 0xffffffff, 0xef, 0x10001, 0x0, 0x6, 0x0, 0x3, 0xffffffff, 0x7, 0x43, 0x1000, 0x6, 0x8, 0x7, 0xe, 0x0, 0x7, 0xe, 0x7d]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x2, 0x1, 0x10001, 0x8, 0x8, 0xac1f, 0x5, 0xbf3, 0x5, 0x6ea, 0x1, 0x5, 0xdd2, 0x7d, 0x7, 0x3, 0x8, 0x189d, 0x5, 0x4, 0x7, 0x9, 0xb, 0x6, 0x5, 0x3, 0x5, 0x1, 0x2, 0x0, 0x5, 0x7, 0x89588710, 0x4d1, 0x7, 0x0, 0x8, 0xfffffff7, 0x5, 0x44b, 0x7fff, 0x81, 0x7, 0xd, 0x101, 0x1, 0x5, 0x686, 0x3e1, 0x4, 0x10, 0x5, 0x7, 0xd619, 0xb9, 0x400, 0x54d1, 0x7, 0x4, 0x6, 0x6, 0x1, 0x74, 0x3, 0x10, 0x7, 0xd4f, 0x5, 0x3, 0x1, 0xcc, 0x93b, 0x1, 0x5, 0xffff, 0x6, 0x4, 0x96, 0xb7d2, 0x10000, 0x8, 0x0, 0x0, 0x5, 0x31bd, 0x2, 0x7, 0xffff, 0xfffffffd, 0x5, 0xfffffff9, 0x2, 0x4265, 0x0, 0x7fff, 0xc14, 0x1d, 0x6, 0x0, 0x80000000, 0x10001, 0x10, 0x2, 0x7fffffff, 0x8, 0x0, 0x6, 0x3, 0x4823, 0x8, 0x101, 0x3, 0x5, 0x0, 0x5, 0x3, 0x6a2b, 0x8, 0xce, 0x5, 0x0, 0x8, 0x9, 0x3, 0x9b, 0x8000, 0x2, 0x9, 0x3, 0xfffff242, 0x9, 0x81, 0x8, 0x81, 0x81, 0xeb, 0x1ceb, 0xe, 0x1, 0x1, 0x777a8d85, 0x9, 0x6, 0x3, 0x1, 0x4deda6ef, 0x0, 0x3, 0x3, 0x6, 0x3, 0x3, 0x568, 0x34, 0x61, 0x0, 0x1000, 0x8, 0x1, 0x0, 0x5, 0x5, 0xa3, 0x5, 0x4b02, 0x7, 0x9, 0xffffffdb, 0xf, 0x8d6, 0xffffffff, 0x8, 0xf4, 0x3, 0x3, 0x6b7, 0x5, 0x7f, 0x80000001, 0x6, 0x3, 0xc371, 0xfffffff7, 0x2, 0x5, 0x7fff, 0x4, 0xffffff81, 0x3, 0x3, 0x5, 0x6, 0x1ff, 0x6, 0xffff, 0x40, 0x8c, 0x2, 0x2, 0x1, 0x2, 0x3, 0x8001, 0x0, 0x10000, 0x7, 0x400, 0x9, 0x5, 0x7, 0x6, 0x36d3, 0x401, 0x1830, 0x8, 0x8, 0x0, 0x436, 0x9, 0x1, 0xae6, 0x7, 0x3, 0x401, 0x1, 0x8000, 0x0, 0x6, 0x0, 0x2, 0x9, 0x4, 0x1, 0xfffffdd6, 0x4, 0x0, 0x7, 0x9, 0x6, 0x2, 0x4, 0xfffffffe, 0x7, 0x0, 0x200, 0x5, 0xfffffffd, 0x4, 0x6, 0x4, 0x2, 0x7f, 0x2, 0xf, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8001, 0x3fec, 0x9, 0xc84, 0x3, 0x4, 0x4, 0x7, 0x7f, 0xaa, 0x6, 0x0, 0x4, 0x9, 0x1, 0x8, 0x3ff, 0x5, 0x3ff, 0x1, 0x1, 0x3, 0x180, 0x2, 0xcec, 0x60000000, 0xa6d, 0x0, 0x4, 0x4, 0x5, 0xb50, 0xcb5, 0x3ff, 0x80, 0x6, 0x8, 0xffff, 0xff, 0x7, 0x8, 0x9, 0x80, 0x7, 0xe, 0x0, 0x30, 0x6276, 0x0, 0x88b, 0xd, 0x100, 0x0, 0x100, 0x0, 0x5, 0x4, 0x309a, 0xf0a3, 0x3, 0x4, 0x0, 0x6, 0x0, 0x100, 0x8, 0xffffffff, 0x8, 0xf4c9, 0x5, 0x8, 0xc26, 0x6, 0xf6, 0x8, 0x9, 0x401, 0x6, 0x7c, 0x1, 0xfffffff8, 0x6, 0x7, 0x0, 0x4, 0xffff, 0xf, 0x100, 0x5, 0x1, 0x1, 0x7fff, 0x9, 0xffff, 0x7, 0xa7, 0x9, 0x3cc, 0xf, 0x6, 0x2d20, 0x2, 0x9, 0x6c, 0xfff, 0x0, 0x1, 0x6, 0x1, 0xd, 0xffffffff, 0x7, 0x9, 0x6, 0xfffffffd, 0x1ff, 0xc, 0x1ff, 0x401, 0x74bb, 0x2, 0xee, 0x4, 0xf, 0x0, 0x3, 0x10001, 0x7, 0x3, 0x0, 0x3, 0xbf, 0x4, 0x9b7, 0x2, 0x34, 0x5, 0x8001, 0x2, 0x5c, 0x1, 0x800, 0x1, 0x4f, 0x6, 0x400, 0x81, 0x1, 0x7, 0x6, 0x9a, 0x13, 0x1, 0x129, 0x4, 0x8, 0x5ed, 0x2f, 0xcb0, 0x4db0, 0x2, 0x1000, 0xbfa, 0x8, 0xfff, 0x10001, 0x2, 0xffffffff, 0x2, 0xda, 0x1, 0xf90, 0x3, 0x0, 0x2, 0x9, 0x9, 0xffff, 0x0, 0x196, 0x10, 0x8, 0x8, 0xe26, 0x0, 0x80, 0x7ff, 0xf00000, 0x6, 0x0, 0x3ff, 0x0, 0x8, 0x8, 0x9, 0x57, 0x4, 0x9, 0xa, 0x2ff, 0x8, 0xb6b8, 0x4a2, 0x0, 0x9, 0x2, 0x6, 0x7, 0xff, 0x800, 0x7, 0x60, 0x8, 0x7, 0x4, 0xffffffff, 0x6, 0x3, 0x0, 0x8, 0x5, 0x1f, 0xff, 0x7ff, 0x61, 0x7, 0x9, 0x5, 0xd42, 0x36ce, 0x0, 0xfffffff8, 0x4, 0x9, 0x8000, 0x8, 0x0, 0x3, 0xff, 0x0, 0x400, 0x7f, 0x5, 0x7, 0x16a5, 0x43f, 0x4f6a, 0xfffff001, 0x0, 0x2, 0x10, 0x4, 0x1, 0x7, 0x5]}, @TCA_POLICE_RATE={0x404, 0x2, [0x800, 0x6, 0x7, 0x6, 0x6, 0x3, 0x9, 0xffffff2a, 0x3, 0x100, 0x10000, 0x6, 0xd4b4, 0x1, 0x9, 0xb0, 0x8c, 0x101, 0x4, 0x0, 0x7f, 0x34, 0xffff, 0x6, 0x7fffffff, 0x10, 0x1, 0x1000, 0x10, 0x5, 0xffffffc0, 0x7, 0x2, 0x808, 0x8, 0x40, 0x2, 0xfffffff7, 0x32e841a5, 0xa, 0x40, 0x4, 0x22, 0xfffffffd, 0x8, 0xfffffff8, 0x80000000, 0x8001, 0x80000001, 0x1ff, 0xfffffffa, 0x7ca, 0x1c, 0x4c, 0x7ff, 0x0, 0x6, 0x3, 0x3e, 0x0, 0xd27c, 0x5da6, 0x9, 0xccb, 0x6, 0xffff, 0x0, 0xe, 0xeb, 0x7, 0x68, 0x6, 0x7, 0xff, 0x2, 0xd8f6, 0x7ff, 0x3ff, 0x2, 0xb2, 0x8, 0xffff, 0x990, 0xffffffff, 0x3d35, 0x8, 0x9, 0x5, 0xfffffffe, 0x1, 0xffffffff, 0x8, 0x200, 0x80000000, 0x40, 0x3e, 0xfffffffd, 0x7f0, 0xfffffffb, 0x8, 0x2, 0xb3ad, 0x13e, 0x6, 0x100, 0x0, 0x8, 0x2, 0x8, 0x7fff, 0xffffffff, 0xfffffff3, 0x1, 0x4167, 0xff, 0x6, 0x8, 0xfffffbff, 0x2, 0x0, 0x7, 0x8, 0xea, 0x7fff, 0x4, 0x3, 0xfffffff6, 0x8, 0x1, 0x3, 0xff, 0x40, 0x8, 0x8, 0xd74, 0x4, 0x30, 0x6, 0x1, 0x5, 0x9, 0x7ff, 0x7, 0x1, 0x3, 0xe, 0x3800, 0x1, 0x1, 0x7ff, 0x8, 0x3, 0x6, 0x4e43, 0x9015, 0x6, 0x558a0ebb, 0x1, 0x7, 0x6, 0xaf9, 0x7, 0xfffffff7, 0xffffffff, 0x9, 0x2, 0x144, 0x5, 0x7ff, 0x1, 0xfffe, 0x47f, 0x2, 0xfffffff6, 0x64, 0x7be, 0xe14, 0x4, 0x0, 0x8, 0x9, 0x5, 0x1ff2, 0x40, 0xf, 0xeb77, 0x2, 0x7, 0xbd7d, 0x4, 0x9, 0x4, 0xe, 0x8, 0xffffffff, 0x8, 0x3ff80000, 0x0, 0xd78d, 0x7f, 0x8, 0x4, 0x2, 0x5, 0x3, 0x1, 0x35, 0x401, 0x0, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1, 0x1ff, 0x7, 0x8, 0x26c4, 0x7fff, 0x394d, 0x7, 0x8, 0x5, 0x1, 0x4, 0x1, 0x8000, 0xe, 0x9, 0x7, 0x1, 0xfffffffb, 0x6, 0x2, 0x8, 0x2f, 0x6, 0x3ff, 0x3, 0x218, 0x9, 0x80, 0x5, 0x0, 0x0, 0xfff, 0x5, 0x0, 0x704f1bb1, 0x8, 0x5, 0x8, 0xee4, 0xffffffff, 0xfffeffff]}]}]}}]}, 0x1048}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050003ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000500000000000900020073797a3000000000100003006269746d61703a706f7274001c0007800600054000000000060004000000000008000840000000440500010007000000050004"], 0x64}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1280001000002020000000000080005007a010401a80016002000034004020000035c0461c900004f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c811dc0c1cd706ff2f41398d8e7369039e7ff837d3150d78569e4243b96f7e508", 0xcb}], 0x1}, 0x20014000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 6.987745561s ago: executing program 1 (id=3339): r0 = getpid() r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x10, 0x80002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="d80000001a00810a1d08007b490d4f1e81f8d804000100ff05142603600e12080005007a01e300a800160020000340", 0x2f}, {&(0x7f00000001c0)="04b0c01973db62014b4508e867be719e6c655f5bef946d108ab65bf4ac235bf1c8ba633e52fc59758a981c4d75ab3fd6ff2c88d3687a3e4d637a9a4982f800623352ec49cc0724bdae415a9c6660f66452c2560a95859abeff609c70339db131bb3fab40a0e4556e4dd7b38ec58b862c82f7c92aad81bb14b8046eb561923c8cdbfa6cae75c951a717468c9761f0e6e42ab785df64c62faa3b03759b0000000000000000e95b5de907", 0xa9}], 0x2}, 0x8890) sendmsg$nl_route_sched(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0xfffffffe}}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r5 = socket(0x10, 0x80002, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_TYPE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0xd, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x90}, 0x44841) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9509, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') ioctl$TUNSETVNETHDRSZ(r11, 0x400454d8, 0x0) r12 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x2, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r12, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r13, 0x40042408, r14) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000004400010029bd700004000000010000000400488028000180"], 0x40}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000004800e10bc33470010000000002"], 0x14}, 0x1, 0x0, 0x0, 0x8815}, 0xc0d0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xc, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000001000000611069000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x29, 0x3c, &(0x7f0000000040), 0xcf) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e00)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x54, 0x1, [@m_sample={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x10000000, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 6.88673169s ago: executing program 5 (id=3340): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01000000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x44}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="20fbffff00030508f5599f5cc5574030050000000c0d71800600014009a80000"], 0x20}}, 0x4000) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000600ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000600ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="186b00000800000033848848497fce000000000200000018460000ffffffff65e3fb9e8a81f1291801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a00c00008500040006000000dd"], &(0x7f0000000580)='GPL\x00', 0xdcbd, 0x84, &(0x7f00000005c0)=""/132, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x229ca, 0xffffffffffffffff, 0x3, &(0x7f0000000780)=[0x1, r2], &(0x7f00000007c0)=[{0x2, 0x5, 0x1, 0x8}, {0x1, 0x1, 0x8, 0x3}, {0x3, 0x2, 0x10, 0x1}], 0x10, 0x6}, 0x94) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="186b00000800000033848848497fce000000000200000018460000ffffffff65e3fb9e8a81f1291801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a00c00008500040006000000dd"], &(0x7f0000000580)='GPL\x00', 0xdcbd, 0x84, &(0x7f00000005c0)=""/132, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x3, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x229ca, 0xffffffffffffffff, 0x3, &(0x7f0000000780)=[0x1, r2], &(0x7f00000007c0)=[{0x2, 0x5, 0x1, 0x8}, {0x1, 0x1, 0x8, 0x3}, {0x3, 0x2, 0x10, 0x1}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r4, 0x4) r5 = perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x7, 0x2, 0xe, 0x9, 0x0, 0x6, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x80, 0x4, @perf_config_ext={0x1ff, 0x4}, 0x10, 0x8000000000000001, 0x2, 0x1, 0xffffffff, 0x6, 0x4a, 0x0, 0x1, 0x0, 0x6d7}, 0x0, 0x3, 0xffffffffffffffff, 0xb) r6 = perf_event_open$cgroup(&(0x7f00000006c0)={0x0, 0x80, 0x2, 0x40, 0x3e, 0x6, 0x0, 0x0, 0x7cb0, 0x75903d4e9bd00b23, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_config_ext={0x5, 0x2}, 0x10004, 0x6, 0x4, 0x1, 0x5, 0x800, 0x1, 0x0, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x4, r5, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f0000000ac0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^J\xab\xc0Pf\xf3\xd9R\x12\'QXp\t\xfc\xf3\x05\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4#\x13\x13\x9a\x88\xaf]\xb9G\xea\xf2\xcd\xcd.\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0%96\x0f\xf0<\xc3?\b.\xd3\xd5\xcf\xc5\x05\x91\xe7L\xa6\x8d\'\xe4~\x89[\xb9\xd4Q\x8a\x98X\xb6\xa0}M\xb8Q\x16\x97\xf8\x0f\xa6\xa1\x86\xbb\xbdr\xde\xd4\'ln1\x93\f\xbe/\xd4}\x8cD\x1aV\x1e0\fp\xa6?\x88vB\xe6\x17\xf2\xfd\xeej`0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x42, 0x0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90021", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, 0x50) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0xfdef) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000002c0)={r1}) socket$kcm(0x11, 0x2, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @random='\x00\x00]\x00N\v'}) r7 = socket$kcm(0x2, 0x200000000000001, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a04"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES64=r0], 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340), 0x1, 0x0, 0x18, 0x1f000000}, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50}, 0x40003c22) 2.142770242s ago: executing program 1 (id=3343): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$kcm(0x2, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000002c0)=""/34, 0x56}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x5450, r1) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={0xffffffffffffffff, &(0x7f0000000140)="c3737a0322f2e11a1cac3de523377ed06c33f00d8292a2ecba85a4cd3beb08ce970b2e520a81531f20b9af488997f264d64772691394fd0209f2315e87c0aab53e1399df24ef772328827fbc14a39460df30a2dc6980a3343cb70344a2ee3501e0302fd5f76175dc701a0ca5b33e4538a11fbe60b3b94cb186920722459f86a213c5ac5519b831ee2c619645870e3bc0614659876b1c904d277b1223c9f6f12657ec9b2b7add115b10d9", &(0x7f0000000240)=""/32, 0x4}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000100000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20008840}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ec0)=ANY=[@ANYRES64=r6, @ANYRES8=0x0, @ANYBLOB="ea7cdea73aad72c1cdad05d2ec24cbf7ca21b2abb1dc3dce5b3f226187e414a8893b47d0eb2f35663ebf59bd457ed3adaa1e471bc77482ca234022d2dec5d9a3303dd410462f20047fe634c1c2f00ffb246bc1638d405d4243542c778a8ac55e26dc0d007332fa8840a10a0bc24f129dab6c727524fad35544b36e37f9a8bab6fa09ab270dd3bb146ff1f2f58e9b8fbebd299b4773369a8b", @ANYRESOCT=r2, @ANYRES8=r6, @ANYBLOB="4ce4188eef33711b2b619694ef80a8975284fce6a3ef8853837957267a98c23ff6f5290c38ae83aad8c8df7566945bda0ca472cf", @ANYRES32=0x0, @ANYBLOB="a4810c875e5e27d44e96208acd99b16d2d9f2f7c4715ffda64f4f6f13b4248aa6c5969360a0dcf523985abbf05cabe3a331a9981709c2af8cba9bbfc00dca8f95d7deecf8baf7b153c8677b777ae45f209cda5ef66d75935b36e281eef5057e53319e351ab5a541cb1bb07237ad37c7ac94b1f0512cba8b2d123fab616bb57ca4ae5f1d78c12b301cbb72d6adc4f450709c9e4a3e645a4be7e3b9f0d9017fd5d8e9c425541fb935d2357a9f46e5440eecdbc0b6e0b9860d68a55eb9b6780532fc55583df13b9fbee5af03aa51a60dcb39c9300b4f721568ec1c9", @ANYRESHEX=0x0], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="940100000d0a010800000000000000000a00fffe0900020073797a31000000000900010073797a31000000005c0103805801008008000340000000024c010a80600002800900020073797a30000000000900020073797a30000000000900020073797a3200000000080003400000000108000340000000040900020073797a312000000008000340000000030900020073797a300000000008000180ffffffff1c000280080003400000000308000180fffffffd08000180ffffffffa8"], 0x194}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x50) r8 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f0000000000)='cpu&\t\t') ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000900)={0x274, 0x12, 0x400, 0x70bd26, 0x25dfdbfc, {0x2a, 0x5, 0xc4, 0x9, {0x4e20, 0x4e20, [0xffffffff, 0x3, 0x7f, 0x8], [0xb848, 0x0, 0x4, 0x7], 0x0, [0x5, 0x2]}, 0x2, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "a7887bf2ae3cd8207d011bae93f94436d99946ac0b29abfc480982e6ecb56ec297a66d878f98370d166aaab578b06ffab85c10a479f555cb4069b2ffb9cebf40efcfcf0f8ad44003c9a5e354d9c6f85001835fc184e9f795b168264ff491de724d337e0ec3db72f0ec9b606fc78d429f45bde072688866c7adf68b4bde2140e5c3cb395f398da4e5bf084aafdcde15badd118056c9256c434a1386658f9a42d733d22ae25216790eb762c97614e6e4ba68f3d38513eef44557bde63b5184f47edad483fa38fdc33c93134eef5d7cf710cd31d799e33b829680e7b4856317688681df1a47b9fa70a92588f6423effb781b97d03e8e7"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "4c7280ec873e7ee34bf9d4409cf1a0a500c37cc0251530f224d2670b74a40d6e9600c34ab4747038a2fc8b6b44a0fae0ee2ed05db7adede9cf38e3fbca6175eac60e813de77b60e0eaf20aee682a5ebf520f36"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "9b9fce4785e91993c0c7cb4742d4e2857ba1834be72c7457cc48bdbb8371d9855d68b38baa288d9a5d7161576d0bafed9cf40def441b18e9eff1936eacb2d1dd5e7313be8b5620d434b5e581fee10bd0b2287f35f398d35a542a8468d3f90dda24a131b2045f2a8401435064eb27960c5ba52c8be37c3495a6a3782ba900db353181888bf229fff397d0c762647efab972a79524ef5ec8035458f0aab126634b31eb27dd6cfa933f59d6cbb7e3766ad9be73cb42c746d4ef518178fc411fa97a636656a986fe99e206f6cb1d"}]}, 0x274}, 0x1, 0x0, 0x0, 0x80}, 0x40000) sendmsg$netlink(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00c97bd6155d04e37dddf020a816d502b86cb55a3d024d7b4f1ff901fad43bcfbff385e35a2d8bf697e241aa447b2b55bd0492744ac8f81f36403de8098e48f7e7e9eebb4afc0ddcd6365cfd1b1159e27209f3e6eb7262a99a95d85b7ceaec981c4a752b4bbcee01ddc4dd640e12d1cd5bd69e0dca1798de79285be16bbd6fc75e06a6"], 0x28}, {&(0x7f00000006c0)={0x18, 0x28, 0x800, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0xd7, 0x0, 0x0, @u32=0x1}]}, 0x18}], 0x2, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) 2.14194974s ago: executing program 2 (id=3344): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e1", 0x12}], 0x1}, 0x600000d0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x6c, 0x4e, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9005bec6886dd", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.128417715s ago: executing program 0 (id=3345): socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x7c}, 0x8000) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) 2.038378859s ago: executing program 3 (id=3346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x7, @perf_bp={0x0, 0xc}, 0x2010, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x98e9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @mcast1, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$kcm(0x10, 0x2, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="ff020000000000000000000000000001000004d46c0000000a010101000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f0004000000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f088a848e088fb00000000002177fbac141516e000030a94070203b180008902020000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, &(0x7f00000001c0)=ANY=[@ANYBLOB="000836b4ced737b9545b9d1f312ed7eacd19fa399e246f6fba9cbf27dd8ccd54a3ea9ce2f2de4f37bbf902ab348d73e06d0b0e13970d6218441ac39b5ec07a44a76d52f662cbaad80bc00b956f5a1c8320b02acb4c7f0433fd1002198a11a2a76ed310a06a353f18ce6cd573ab35504e4e203ef95e599c49cf8e7ab28dd445d655d6bc29c82b85"]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) mount$bpf(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x104000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000003200200427bd7000fedbdf250400000008001a8004000380f61bcd8d97574573c655ce98c453ce0da5311e9f4d139479ecc4cf652ccdc177d58a767e25b8d2f7a0486119326fd34dbe665541badeefe0d3411374ad68c9b4bf332fac5a36511d0d56d278f52875483f3954d0b6b5103aa75f881f2f9ca07307c1223ae2f3be6e26ab19646e2921cdb40ea62a867f892c7237255fc4444dbc2af0c48b96ee7a8aee3afc77e1c8ca28fb6519fbdb0e71025e06117e04d0eb9aaaec0bd6b1234d4e9316fb5a387a6330763200"/217], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000d3000000002d00a7ad5fbbcd5a8560e80571a59e18618d88f9596c8517b49db3f3276b8bb393a8906b99c65e5417ea8bcd05dffa2bda5ccf020089bfbe62d183efbabee5002fa1da034ca3df9b5a2ac6d0566aa4a98ee2ce"], 0x1c}, 0x1, 0x0, 0x0, 0x440d3}, 0x0) mkdir(0x0, 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.919449635s ago: executing program 2 (id=3347): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040002000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, 0x0, 0x4000010) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x200, 0xb, 0x69838, r0, 0x7a9fc915, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x8, @value=r4}, 0x50) socket$netlink(0x10, 0x3, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000103000000000000000000fd8510000006000000180000000000000000000000000000006d00000000000000180000000000002000000000000000009500000000000000a4030000fcffffff95"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888ca", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.592536098s ago: executing program 2 (id=3348): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a80016002000014003000008", 0x3c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000030006ae130000000060000000a000000000000120100000002000000020000930a0000000a0000009c000000050000000d00000000000080000000000030612e0000", @ANYRES16=r0, @ANYRES8=r1], &(0x7f00000007c0)=""/216, 0x4e, 0xd8, 0x0, 0x3}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18e90000004500005cd04e0a00213b0000000000060000000095000023000000006ac3cad27192243d165d83abd38a332e2ae77352512531ec17b20b54647e3e7ba7ae0217d44eee2473d3590db42f650a516578f829a2d6dcee9f0c897a0fbf1340eab8db9ea0d932e1ae599b772803"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xc0f00}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0x26, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r6 = socket$kcm(0xa, 0x922000000003, 0x11) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESOCT=r8, @ANYRESDEC=r6, @ANYRESHEX=r7, @ANYRES32, @ANYRESDEC=r2], 0x50) 1.573352524s ago: executing program 1 (id=3349): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xba, 0x4}, 0x10fde5, 0x0, 0x0, 0x6, 0x1000007, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9, 0x9, 0x8001, 0x66901, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffef6, 0x4, @perf_bp={0x0, 0x1}, 0xc8a0, 0x6, 0xfffffffe, 0x8, 0x9, 0x472}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002600010125bd7000fcffff97777a6e000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x24040196}, 0x18) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="24000000660091ef"], 0xfe33) 740.043633ms ago: executing program 5 (id=3350): r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200020, 0x4, @perf_config_ext={0x8, 0x2}, 0x100, 0x2, 0x8001, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000580), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000628000480240001800b000100657874686472000014000280080006400000000108000740000000150900010073797a30000000000900020073797a320000000005000740bf000000140000001100010000000000000000000300000a445133995cd5c25e6364fd55"], 0x84}, 0x1, 0x0, 0x0, 0x10010}, 0x0) fstat(r0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$nl_route_sched(r3, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) sendmsg(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x201, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) 683.773266ms ago: executing program 2 (id=3351): perf_event_open(&(0x7f0000000480)={0x4ccced42742b41c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001a12c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000b00), 0x7}, 0x0, 0x400000, 0xba, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000886ee7e7f0000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x3a, &(0x7f00000008c0)={&(0x7f0000003b40)=ANY=[@ANYRES32=r2], 0x80}, 0x1, 0x0, 0x0, 0x6040814}, 0x80) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000b40), 0x7}, 0x0, 0x0, 0x8000, 0x4, 0x0, 0x800, 0x200}, 0x0, 0x2, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x2, 0x73) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f0000000ac0)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) r7 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xec, 0x10, 0x0, 0x0, 0x0, 0xdde, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000300), 0x8}, 0x114905, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000010200)=ANY=[], 0x33fe0) sendmsg$nl_netfilter(r1, &(0x7f0000003b00)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003ac0)={&(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="0000d30007800400c1804b68705d18a3cdd20f973dd5ef3295a4b702852cd5f56cda4e8a6fc915c34db6905a5da7c3dd16e51bf48c67222eb306758c18b5225a0872685609a897885837778cd27a424b776c156f3384b588e0e44868b80943445c4c5b97117b57349ff28afae5b1bd2e73cbb3aa01a7b7621ac8587cd9d5d78835cbf6c0edf76dfc71a9e16783a3f64963ed86ec883df100c5451e2a17f0fbfb57a38e2d4f809ba898bd0d34fde9ac93e5b6ab9bb9c57645976fb5e1c9da6573b631cc2fe0668ee121d8c178e00771977036d88c1d007d7a6073412cf7b8e97d0db57a83e7dbf55c6d331fd9a1b255114c9587e054fdfe6456e9dc010f19f688dcebb23763ac66ee4a83c79ce50f7a7441e636500e277930a4be267be17a282f87bb4e56edeb26a16ce5dcb6aedfc095378ee9e76e3cc0bcf7e3e9f5689cc9cb445b09ef504c6c9cfe31e94b1e11fd10ebe8aa3f85cabdaf683de40445ba6a3262856ba7ac1ca0e15de0b60e1ddd0760a12b1ee263ea1251b48d45da2bec5f51fa671f2f8303260b057efdc8a09065b5a333a8308fda81760bec92ffee97859c95cc83d5d28369caa3289da6f567f52578a7c8656b6a483191b0a3de219851e65d65e74f65e435d23961347aeef891644864cd240895dedeb76b7237b2b599be1032d608f136e8597040b1f37e4366a6f8fb8ecea915e11e65df654ae4445ab8b8a740a72831a13bb5f4ac8c8acc72cac242fb9891f5922828ebeaefb758362416ee8d40a81bedca80e88c89f2f712f057d650ad1e50d7eb88a871808285235edcdebc1c68eb039b0821912d970eb67154a82c6e8594d620111c5cfa05f3dcad977773758bee3a1bc80b0ab614ddf83f21951b0f5fafa1cdb7534d915da74cd0756478d572be48ba1591a42bf62078c773281b26a40f1bdb2d5f876f30f69a0d4d2b8be0a71cadfbb85764ff155dca09511dad681d3b3c730de885ea028c78717cad46baef6650f9eebf246e92cc99f99dc07fafa8e2bd0baac1970070afe688d245d676056f1981d500ce5fbe9e3ed6b011f81b271b4dd9546c985481ab92e742a1934cdcde13cacaf8c41bf57ffe1f2efd3eaf5c0afb7ba128aade59baacd858a464d35909d59a9abf5b21c74376cb7b01a0bcdf26954e3dc2148341dc7520a6d15a378814ad451ea7811233d89770f364bf1019674f5a84e423a1478e97925d07df901bec8221a3d9b9410a80671e94cec7829c051fdfdaef87eb313d0c80fa6feb09fa86510eb39309fb711d3c835e5f4be612327a3f9dfe860cc8bfecbc227d186c7211ab1a0d17aaa6802e0685f5f76b11aa65cc15399c5baab97f8f2d8fbcc55985be1d9a54c4f7a2c709ec199d9a90aaa501b70587349a4f5af21d9361bcf002b3ceeec28aa78a3790d56589bb7b75665186e5246e67ffbcf6433ad3a333e7ca9f91e6f001f2138dbc77d00b8e0a06feb62410a47b6ed7e6b447655c84164ca49391dd34ddd6a299d6eb1ef53d26c86c6938e88c050cf60dd6610287fd510a92f3c77f068feeb592c7a8826e1c35a0044d6a32122584f165578d904f17330be742baa2044e3171ad6db95959d558a07185ad14aa0c8ec8709a40a47d0c210e6f9d8acf9fc766787ae3432e64564b1d0959d271d9b624148b80957c19621b7bb3d216ce82612f2c1e1b7e3140644feb9d004831bd366911b0995cdc9efd696cf600e580952143537087b2beb0c2aacc2508278bd4eda156544a13d9627e15700268edbbcd972b609070d2b991bc7ce39512cea91b221116bb2d2be3b2b5475b1c83ff829e7bd367151ac14d8cf1509c0406dc04f3d886dc151934e94db9d5c5f564071eff649fdc6ab24e40031c03c6f586519d87f675d61349bd73f13a139ccddb82b9be8cd36bb5ac1538b399f56d31ae40a0d3732743373e5990c50faf817ce36034fd0beaa0e7e455adbf4c55e367f23d35442cf90fca671a92b2fd392cf97b5a47ae6a68af90b4100c207facdeee9533d80c62dceaba565964d436b182a61e07188f803737486418056f7d212c941b2170536784d073adb2118e4844df078a8369d496efab1b31017a706cc4eb09fb1fc45a84a92f84ad9332b920aeb3c6ab5a353e68f69cc772879738c2c9fc8234e22d58cb1e38284f5c8fdc0ed5e855a6bee8b733cdb797e934b0d8aa215905814f15bb3bd77d2094a9eedc48b7aa21c3237658b7cf29a41f064e86e8497f6af71c0ca533feef375cd0e2a1c00d0679c37414272f80ac67e9ae472f6cb079ee54c1a728258c9062f8e6e9dbe680c00dc29431a2c686b400af0f651ecf15ae38a1f305b06be3d0542e49b132d699f976f9cf71131acf93e6b58610cfd9c5a5953163e74cbb617686f1b6980972893ed1b6153a67fb176fb162d9c88009d6b5cf10501a3d13729d8ed6f4671ca388096e4fbd26be84d8313e2c070be6e7e8b564b49e2e76625e60455cd67f87927b348993cabe8cc1fc2313c8dbf789043db80d981d33eb627d821d5ceea0fa543d7dce9803658e88f73c53a7809df42bfa72e99dd77b1f20447e51f4c6d2ad4117175aea02e536ff8e4705d2535ab18714ddb3484ef863f90d2473b8f969cc9c584ce858b3e9a3d1938e5f0a16619f1ea3a219486d903739463cda92cc61fd77c8ccfdedd75f23fc8ca2aa244672db2c8385c6e9c7870a29a39cce34985c1ef4940b123fbff2694f484d83a26f4dce369c8f7fc896566888f1e3dca329784ae376928118eb2174202616229b2a6a31ffdfbbed1257e8ad8f3f4ead0bf29ed7308b539830454d2627b35981e483b4b47186f0fbac840253b894a29959bfb9092013e230bffb4d98df12ee145668f6fe337069cabd6cd72068abb77a6c2db02e3a87e4d615b0acb3239ac5e635615e1d1c81d298f00856cc13596bea06b80fe6380b01fc6d07ac120fcc60af526f363e722d211379af5d69e02e13f598050d7a5f3bdb890d7d8c605a96d596fa50312b9699da81ca860bb5c10abcddbc99f3707407f848d73024c304f1dd260e43a50b1ed1ce4e4d02929afa79ad36541223bb92d7a448ea5f1f3fda5247bbd5831f446873ff032f4b6526673e7faa5385100ddb3d1552f4dcbe86e93558cc8aeb58e5fa5d64e743bf144701b1890f08840650b1c0ed7d8143f9ae33433ffdbc70116eeddec3f48b35f5b909f80888cb95b68a4e6bfde9cb1d981d224c7a5820698f92cec5a81494a64808fa5598e0cbee726888724220dff7d3d238d85d195434adb904ef57f4272feec026c1289cdb9c7e01a626f0215617c7daa4459797f1129ff6cfee6fb69b9b7e0f716f11bd85d1f6c8baa7b7b5dd383b1e660441dbd0908e12b8184874a64069efdedcb332859b4a866913677284301494adfe5e635e5a8d1f6ae6f09620525045088242d2ece0f1e623362bb95132399229427f808aaec4aacf708aec96e2c3194dfec6ffb43e50bc9cb45b58b619ee37baf59e8ac1b5242fb07e565ec08413f7cc250feb99ebe8d0adc75a52bea3e210d4a35cad567b6032d33687d745094d2252d0127496198f0503f9f102b47e9e4401577cabf71864ec26ddebc5802186200e06281d8198b472086147c100b51b692f1177330a351f714843605477c8a462118785680cf20cde4557888739755516747f420c208f51f08896219ca6586a806e47def157ab1bbf0ab21f2fb2e9345d215f8368267ccf2a3923727421b559a4ca1d7eae0880bec8999cee5d2553f48d89a4c3e994e3b866073cac587bdafc28ed18e8641b6e40c62a6ce35d9dcd645f1169329441231f64144449a468ae9b1ac13c371885972924e5abf9986a23431db02395c150e66ae655763526dec2ceb04276d35b24b4259836a9c62d8ee54817e9aa4b1e2f3ef707a17b16a755513edd8a82d9b0c07936f309787f713765482875998be7f7b65df87903fc214e1aa406838101d03008263f293c30dfa13ea86f5667d3b308da7dafd06d498a8015fd1c1ab92080b81086d13235c1e1987077d8a6518542d81e61f9bc084c14bd2f2e5e0e7c080ea2d6199f5b8580ecba3e758dcce9a0fe5be63dea85b3c6b3d5faf12eb2b9404e5798e4589d7b43516cf487917c2737d3e3b63ac3b8f191168d13131b4eb2409e8512e45f8cf75d026f42b5a16d85b0d977bb6510b49a227ff91cdcd6ce2326b86537ecd90ccbf927dca3cd021e021807a813aae23c2e1fa0d8d31321fa63551b5c9a6dd3fabde9b956f3567baea0d932b5b1d3907f273fe77fdf2b509a2b7c38ff21251a3dcd3467d98ee3671f0902645f8424066394641654fa7f96263b9940264772f9acd55bb23a3d515ffb220bc3855437d7bd7f9af064b436749565526c9ef1ab2b762abf072d6326d1bf766676fb18435a08b90d06eae693c9a8b8c51b5b682464f3ae0a00925c7430b68a28ff2706c3407c464a000e405f8493f40722970f59464ccc74c769f163213f2aed4a83760a2d9cfdd0bb1a10579918018f44c6ef947f1b4078cb8be229889a91bf602ed7026df6ae93045bd9c224e94c760784927b6fc2d3c9d5682d79fe35518c4c34356225fd7e3f1adc3647971f9db1208867dc447e2b8c44f3cd619cc5bd4de9fe1501740fa7166494531b43949605f5a0f678fefd6285ddb4e43e3cbacdc0bd5b1f85395f86729d1675a8a4a4562187fc88a809b15d2cce3997182fb9bcfce927902ec870e2fc397409ed94d5cf7e2f77aaed6e8184ad29d6adcc201ee08482ab96f84da78dd214586b40b053992726f0310c4cd2872b446c330e086334a0bcd1b8609d67efcf591b3762f7b1b85b58084e46ed7dac26eb3fb7afb5eb66a70ffd15bf29b39557f5dc660d7eda60aaa65b0a483c635dde692c91e9feea9d44686227e95188675436faba413704a3a0613748765ef2779b4d43d1678e0d894bd2eec27c002289879fcf595c2cb876a0e3e5198dffa141d0ab0f64c7c4bf567094d7c32b94351041195707e8b04f065cd2fce3748e6c6daa85a649f488c944707cb105062d9820e17ef991ba0d60e08526f547f8920458ae4e40e377c7a7bc5eca9ba66ae538d1fe04a24cb912930fd75884946429855a9c522dca859b34af0133e14b3b6c95c06c2c0801fd674b9b1984a3d0b0351adbf5aba33cd35fba56fd86ab14386fe0379d7f3eebc93544fc74c60444b20d73c3a109966d965d1abd7be0ad4025046d179d8ba0762b451b3ed34601a8403653739c84580238ccf540d7a6bf9e6450f67064c950bf5b92b6afb9a0d0868bddff9368e7926eeaf7c22da2c767fa88f3a53c77aa8da355fa8314ace2e24709c8cd9650f090337b9c56a6c1245aef4629fc72fceabc67fde0c64e9b36846c4346d4aedbcdfb818f83410e668aaafe506b3dff72065f696dddd5404bf40e2c75c80161f54aac738ff05fec2dba5b576df61044738a85887b966459dde63277eae910c415f1d204e97ecfe0f9d66d860874d09bbe30a6480e19313aa5a22a594938cf1b9e2011473eb8340c5874a3290a10bc8c780b214ce077b5dcddfa0e541ee9cd0c06d717561a83f240e69b57330c23ef6ffd161283016c2d98edf28b9baea6881a4173386d964a26a0c07edcf9f6e7c32587f5f098b38c661c67c7d7cbeb36d821b4d0fc5fc8bec6576c8b593123f3cccfec841ef4669caf1d86ab15aee806a0cb28b7613d5841612a24a9f7a170bc5e248b2d579db255fd004c1c2ea22ca987dbdc287ca665e87e0ab7fd5d6ebdcbae29e4d5873db99426e16f9ed2215d42e2d84db5d7c6f77b6720123ab78b2c97528800c4a3089f4867ffd012d3e9560e37e0f083ee4c4c3aedd4eeb4aa5d0b1ff952dd6df8bab438852cb3f5bae21474e27b21657a9ad1d75da2b656a83187e158b19998b2cc549e98ba324ebc9cbb0f696bdbb9ef9813883313a778a0793956bacb11a923d069ad93ca996b2fbb5d917d8bc22ae1971f361b2eccce3ec6084467f4474a7536d4e2e63f24634f8d2f10c3b8d12a31c3f76ee264a313db0f3bcc6d75a0f3bbc6940cbb3b1d71cf0b3e97b66ed982f1b45280592bfe34eb3bb2551e3e57c82e8d3471255138d7c430faa9e430906aa896d4a70cbb92f22219eca42ce8d8391c9838aa8883e94bbd5e1610764371347bc1c9a9d7985b14027f5a83db582dc17a8f1303f481c054fa2ea27990f81fa5f5ee28242a021a12538134cbadebec2d1289880b7220eda3e0cdd41fd9ee883ef646ebb65df40a4d5174548180cee878a600"], 0x25b8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004) sendmsg$inet_sctp(r1, &(0x7f0000000900)={&(0x7f00000002c0)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000500)="46a1c79c70fdda026c235c1cfd0496d1a2c484807a4fbd2ef57b27579129b62c374b695345f892a8191ec21e6e1086b2560938ac432a5c1b2ade0d2c5f1c1cf646e98c74f698bf6530a67a9259e2351e64c04df6d1d1da5fc8ca31192f8f247751edf9d6a125197d790202e1b17b4aacfd714019c5a31ec65c9eaa61209fb8d42d87b09cf5e61d8cc69b9489a0ea41419b766364939d25788c6eadf728f0cb64d01cc5290e482b199e3f9a5244fa509b437af2373201b595fdc5ba9be4c560e853069cd38922e3920d7621934c0ea7061f0ce7931c341ee8", 0xd8}, {&(0x7f00000006c0)="65a59048104c04970d587301f2a771d59de1fd3e56c258a990b415a7ffa18db87fe9a60d9f94c4acd0d7c0e4ed2b99d221a37bc55c68d567171265e21aeeb4fb2f844b16a90b9e1475d34798eb6a0945a3671fddba515c3ddf6073daafe41b6b998dbf9c8ee5c9699b42c9dfbdfecaf65a43cdb32a53d68f4b0d64eea5e0ce5a3ffe8d6c6cccfee9391fe47d18cdebded217ffefd3d8214b595871dc3c5542bf73485dcae77cd538ece67598f0dbc98259356771e2d2a7600de037b49d2b55693b46c06eb5c739ee50ee856b91dbde12d23f", 0xd2}, {&(0x7f00000007c0)="001a6577ab76e0d58358dbeaa7ad3a720f5e9748b0a2892105d01e39061d0500a2908d548b52768cc3e404d07f8e3a9ca89750ebb1b7eb3b2a522eb6c4252aafd27b8e507dad3848123e608ee4f84cc309b32bef3e7e0f26b014e0139ff75b771ad55c704180c8b526a3a121b006ae7a69fde177923c3d57eb12f8fcc1388c16f91a5f1af3469ea5a29a5539a4f34c1e1cfe82ef3e9aa98593a51b49c5c4c710ff2ae1e73676e28f", 0xa8}], 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800abd15f0000000000000000000000000000f709eeb89c97f981eb2fd9d60e1c3d5eae85c044af420866a649a1bda08bb0c4dae8600cbaef470a929193b4662976970f015bea69f3680b56bdaa8966e6398a15310f5014797e4b2f64963952", @ANYRES32=0x0], 0x38, 0x8844}, 0x20008020) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000006000000000008000000000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000bc02000000000000850000008300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f008000de0ffff00184000632c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x3f, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3, 0x80000000}, 0x50) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0xfc, 0x0, 0xfd, 0x0, 0x0, 0xffffffffffffffff, 0x514d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x4, 0x1}, 0x11efe, 0x4, 0x98, 0x9, 0x2, 0xfffff270, 0x7fff, 0x0, 0xc, 0x0, 0x5}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) 639.738567ms ago: executing program 1 (id=3352): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a80016002000014003000008", 0x3c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x700, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000001", @ANYRES32=r0, @ANYBLOB], 0x50) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3f6, 0x200, 0x6, 0x25dfdbff, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) 404.268218ms ago: executing program 0 (id=3353): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x154, 0x24, 0x8, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xe}, {0xd}, {0x4, 0x3}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x8, 0x9, 0x3, 0x1, 0xa, 0x4, 0x6}}, {0x10, 0x2, [0x40, 0x9, 0x4, 0x9, 0x1, 0x0]}}, {{0x1c, 0x1, {0xc, 0x3, 0x1, 0x4, 0x2, 0x4, 0x5f3, 0x1}}, {0x6, 0x2, [0x4f]}}, {{0x1c, 0x1, {0xf, 0x3, 0x5, 0x5, 0x2, 0x0, 0x0, 0x6}}, {0x10, 0x2, [0x1, 0x0, 0x6, 0x8001, 0x1, 0xfff]}}, {{0x1c, 0x1, {0x4, 0x1, 0x7, 0x0, 0x2, 0x9, 0xfffffc00, 0x4}}, {0xc, 0x2, [0x7fea, 0x80, 0x2, 0x9]}}]}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1, 0x2, 0xfff, 0x2, 0x8, 0x10000, 0x7}}, {0x12, 0x2, [0x0, 0x7, 0xff, 0x5, 0x4, 0x2, 0x0]}}, {{0x1c, 0x1, {0xc, 0x6, 0x7, 0x2, 0x2, 0x400, 0x1, 0x2}}, {0x8, 0x2, [0x0, 0xf0]}}]}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7fff, 0xe, 0x0, 0x0, 0xfffffffa, 0x2}}, {0x8, 0x2, [0x3, 0x3ff]}}]}, @TCA_RATE={0x6, 0x5, {0x1, 0x5}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 403.917876ms ago: executing program 3 (id=3354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0xfffffffe}, 0x1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x10, &(0x7f0000000200)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x439}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 356.000415ms ago: executing program 2 (id=3355): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x800, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002600)={r2, &(0x7f0000000180)="fafd17", &(0x7f0000001600)=""/4096}, 0x20) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0016000140020003600e41b0000900ac0006e01100000016e00500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e900feff", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) socket$l2tp(0x2, 0x2, 0x73) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000080), 0x800, r2}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002600)={r2, &(0x7f0000000180)="fafd17", &(0x7f0000001600)=""/4096}, 0x20) (async) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000003c0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0016000140020003600e41b0000900ac0006e01100000016e00500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e900feff", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 355.183018ms ago: executing program 1 (id=3356): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830a}, 0x1680, 0x8, 0x3, 0x0, 0x5, 0xa4d, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500), 0x50) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={{0x14, 0x3eb, 0x1f, 0x0, 0x0, {0x5}}, [], {0x14, 0x3eb}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe, 0x2}, 0x80, 0x0}, 0x20040010) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f00000003c0)}, 0x10) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, 0x0}, 0x20008000) 237.287264ms ago: executing program 3 (id=3357): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x520}, 0x48) perf_event_open$cgroup(&(0x7f0000000000)={0x3, 0x80, 0x1, 0x4, 0x1, 0x9, 0x0, 0x0, 0x8000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x42b}, 0x0, 0x6, 0x9fda, 0x8, 0x84, 0x1000000, 0xf, 0x0, 0x2, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r0 = getpid() perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 189.875744ms ago: executing program 5 (id=3358): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040002000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, 0x0, 0x4000010) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x200, 0xb, 0x69838, r0, 0x7a9fc915, '\x00', r3, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x8, @value=r4}, 0x50) socket$netlink(0x10, 0x3, 0x0) r5 = getpid() r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext, 0x1306, 0x2, 0xfffffffd, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000006000000000000000000fd8510000006000000180000000000000000000000000000006d00000000000000180000000000002000000000000000009500000000000000a4030000fcffffff95"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r10, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888ca", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 589.783µs ago: executing program 0 (id=3359): r0 = gettid() perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0xec, 0x40, 0x0, 0x0, 0x0, 0x0, 0x3b4b876f43e780af, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, r0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4404, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x500, 0x0, 0x0, 0x1, 0x3fe, 0xfffffffc}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000002600090722bd7008fedbdf2505000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000040)=@allocspi={0x170, 0x16, 0x209, 0x70bd22, 0x25dfdbff, {{{@in6=@empty, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x3, 0x2, 0x20, 0xa0, 0x3a}, {@in6=@private1, 0x4d5, 0x32}, @in=@empty, {0x1, 0xf, 0x4, 0x8001, 0x8, 0x7f9, 0xaaec, 0x2}, {0x500020, 0x4, 0x7fffffff, 0x2}, {0xc90a, 0x1, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x4, 0x10}, 0xff, 0x80000002}, [@migrate={0x50, 0x11, [{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x33, 0x2, 0x0, 0x3501, 0xa, 0x2}]}, @address_filter={0x28, 0x1a, {@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa, 0x1, 0x4c}}]}, 0x170}}, 0x48000) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}]}]}, 0x78}}, 0x80c4) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x8c, 0x1, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x9e1}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xbed}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x634d}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40004}, 0x22004801) 0s ago: executing program 2 (id=3360): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14924, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={&(0x7f0000000400)}, 0x0, 0x0, 0x40, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0xfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000002400870367237000fbdbdf25037c000004000180080004"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mount$bpf(0x0, 0x0, 0x0, 0x4a081a, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r1, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x6c, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x50) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0xd}, 0x11eea, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x40000020}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="29000000a0fddbdf25052000000c0002000f000000edffffff0000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c0c1}, 0x4008094) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe49, 0x2, @perf_bp={0x0}, 0x1c08, 0x0, 0x20000, 0x3, 0x3, 0x1, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=ANY=[@ANYBLOB="e00000001100110e26bd7000ffdbdf25726d643332300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004ad8d80e9736de638829881f72732e54a6d33fd052acb8d981465cb8d27599495ec127d9042bffb58bd19eaa29a1943182e8ea2b06e5acfdc19759eefbdb34d8d32d758fdcb252daef8afd4359318485e6b10b1e0cc21ebcc834f3bfcde1b12fbcea1a1161cde5cf5e9195285216dfb0e2f9fce28789be5e3e5cbeb0093d1b944a49a768d88dd6df097a496dc17f60f0e57ea41466506b816f467f04817d76c5b0de7eda9327dc"], 0xe0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18080000000000000000000000000020851000000600000018100000", @ANYRES32=r9, @ANYBLOB="00000000000000006100000a0000000018440000f9ffffff00000000000000009500000000000000180000000600000000000000090000009500000000000000d541007134eda352d55a"], &(0x7f0000000000)='GPL\x00', 0x5, 0xde, &(0x7f0000000340)=""/222}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): id length. [ 470.930540][T14083] netlink: 'syz.0.2303': attribute type 2 has an invalid length. [ 471.019361][T14085] netlink: 'syz.5.2304': attribute type 10 has an invalid length. [ 471.066089][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 471.105296][T14085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 471.151085][T14085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.171095][T14085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 471.589610][T14104] netlink: 'syz.0.2308': attribute type 1 has an invalid length. [ 472.084240][T14110] bpf: Bad value for 'uid' [ 472.158714][T14110] bpf: Bad value for 'mode' [ 472.172178][T14110] netlink: 'syz.2.2310': attribute type 1 has an invalid length. [ 472.686968][T14132] tap0: tun_chr_ioctl cmd 2147767506 [ 473.528784][ T5286] veth1_vlan: left promiscuous mode [ 474.030687][T14179] netlink: 'syz.3.2324': attribute type 6 has an invalid length. [ 474.064479][T14179] netlink: 'syz.3.2324': attribute type 23 has an invalid length. [ 474.072347][T14179] IPv6: NLM_F_CREATE should be specified when creating new route [ 474.634443][T14197] netlink: 'syz.0.2328': attribute type 10 has an invalid length. [ 474.678129][T14197] team0: Device wg2 is of different type [ 476.888232][T14253] __nla_validate_parse: 4 callbacks suppressed [ 476.888266][T14253] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.2340'. [ 477.105556][T14259] netlink: 'syz.0.2342': attribute type 5 has an invalid length. [ 477.156178][T14259] netlink: 'syz.0.2342': attribute type 6 has an invalid length. [ 477.182790][T14259] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2342'. [ 477.204093][T14259] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.2342'. [ 477.218491][T14256] netlink: 176 bytes leftover after parsing attributes in process `syz.3.2341'. [ 477.547377][T14275] netlink: 71 bytes leftover after parsing attributes in process `syz.3.2346'. [ 480.122366][T14264] ipvlan1: entered allmulticast mode [ 480.127946][T14264] veth0_vlan: entered allmulticast mode [ 480.594804][T14297] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2351'. [ 480.742066][T14304] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2354'. [ 481.511074][T14318] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2357'. [ 481.989214][T14345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2365'. [ 482.392672][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2370'. [ 482.836377][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2372'. [ 483.124811][ T5626] Bluetooth: hci3: command 0x2016 tx timeout [ 483.329724][T14376] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2374'. [ 484.090578][T14407] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2385'. [ 484.829241][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2391'. [ 485.904358][T14457] FAULT_INJECTION: forcing a failure. [ 485.904358][T14457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.952470][T14457] CPU: 0 UID: 0 PID: 14457 Comm: syz.5.2400 Not tainted syzkaller #0 PREEMPT(full) [ 485.952496][T14457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.952508][T14457] Call Trace: [ 485.952514][T14457] [ 485.952521][T14457] dump_stack_lvl+0xe8/0x150 [ 485.952563][T14457] should_fail_ex+0x40c/0x560 [ 485.952775][T14457] _copy_from_user+0x2d/0xb0 [ 485.952825][T14457] __sys_bpf+0x2e7/0xd90 [ 485.952869][T14457] ? __pfx___sys_bpf+0x10/0x10 [ 485.952891][T14457] ? lock_acquire+0x106/0x350 [ 485.952927][T14457] ? ktime_get+0x45/0x220 [ 485.952986][T14457] ? __pfx_clockevents_program_event+0x10/0x10 [ 485.953019][T14457] __x64_sys_bpf+0xba/0xd0 [ 485.953042][T14457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.953079][T14457] do_syscall_64+0x174/0x580 [ 485.953137][T14457] ? clear_bhb_loop+0x40/0x90 [ 485.953160][T14457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.953178][T14457] RIP: 0033:0x7f6ac7f9e019 [ 485.953196][T14457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.953211][T14457] RSP: 002b:00007f6ac8e51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.953230][T14457] RAX: ffffffffffffffda RBX: 00007f6ac8225fa0 RCX: 00007f6ac7f9e019 [ 485.953242][T14457] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 485.953253][T14457] RBP: 00007f6ac8e51090 R08: 0000000000000000 R09: 0000000000000000 [ 485.953265][T14457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.953276][T14457] R13: 00007f6ac8226038 R14: 00007f6ac8225fa0 R15: 00007ffd9433ad08 [ 485.953309][T14457] [ 486.122977][T14465] netlink: 'syz.3.2399': attribute type 21 has an invalid length. [ 486.591666][T14481] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2407'. [ 486.747073][T14491] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2409'. [ 487.013619][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 487.269934][T14508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2413'. [ 487.276202][T14505] FAULT_INJECTION: forcing a failure. [ 487.276202][T14505] name failslab, interval 1, probability 0, space 0, times 0 [ 487.304691][T14505] CPU: 1 UID: 0 PID: 14505 Comm: syz.5.2415 Not tainted syzkaller #0 PREEMPT(full) [ 487.304716][T14505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.304734][T14505] Call Trace: [ 487.304741][T14505] [ 487.304749][T14505] dump_stack_lvl+0xe8/0x150 [ 487.304781][T14505] should_fail_ex+0x40c/0x560 [ 487.304807][T14505] should_failslab+0xa8/0x100 [ 487.304879][T14505] __kmalloc_noprof+0xfe/0x720 [ 487.304914][T14505] ? bpf_test_init+0x9f/0x150 [ 487.305015][T14505] ? bpf_test_init+0x9f/0x150 [ 487.305038][T14505] bpf_test_init+0x9f/0x150 [ 487.305061][T14505] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 487.305098][T14505] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 487.305125][T14505] ? __fget_files+0x2a/0x420 [ 487.305166][T14505] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 487.305189][T14505] bpf_prog_test_run+0x2c5/0x340 [ 487.305220][T14505] __sys_bpf+0xa22/0xd90 [ 487.305253][T14505] ? __pfx___sys_bpf+0x10/0x10 [ 487.305275][T14505] ? lock_acquire+0x106/0x350 [ 487.305310][T14505] ? ktime_get+0x45/0x220 [ 487.305351][T14505] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 487.305395][T14505] __x64_sys_bpf+0xba/0xd0 [ 487.305419][T14505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.305440][T14505] do_syscall_64+0x174/0x580 [ 487.305462][T14505] ? clear_bhb_loop+0x40/0x90 [ 487.305486][T14505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.305504][T14505] RIP: 0033:0x7f6ac7f9e019 [ 487.305522][T14505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.305538][T14505] RSP: 002b:00007f6ac8e51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.305559][T14505] RAX: ffffffffffffffda RBX: 00007f6ac8225fa0 RCX: 00007f6ac7f9e019 [ 487.305572][T14505] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 487.305583][T14505] RBP: 00007f6ac8e51090 R08: 0000000000000000 R09: 0000000000000000 [ 487.305593][T14505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.305603][T14505] R13: 00007f6ac8226038 R14: 00007f6ac8225fa0 R15: 00007ffd9433ad08 [ 487.305630][T14505] [ 487.525754][T14508] netlink: 'syz.1.2413': attribute type 17 has an invalid length. [ 487.667240][T14514] netlink: 'syz.5.2417': attribute type 1 has an invalid length. [ 487.718394][T14508] lo: left promiscuous mode [ 487.732817][T14508] gre0: left promiscuous mode [ 487.839219][T14508] gretap0: left promiscuous mode [ 487.859971][T14508] erspan0: left promiscuous mode [ 487.887767][T14508] ip_vti0: left promiscuous mode [ 487.997954][T14508] ip6_vti0: left promiscuous mode [ 488.036121][T14508] sit0: left allmulticast mode [ 488.041485][T14508] ip6tnl0: left promiscuous mode [ 488.064062][T14508] ip6gre0: left promiscuous mode [ 488.119888][T14508] ip6gretap0: left promiscuous mode [ 488.142654][T14508] bridge0: port 2(.@ÿ) entered disabled state [ 488.149513][T14508] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.184445][T14508] bridge0: left promiscuous mode [ 488.287572][T14508] vcan0: left promiscuous mode [ 488.463852][T14508] bond0: left promiscuous mode [ 488.473433][T14508] veth0_to_bond: left promiscuous mode [ 488.498464][T14508] team0: left promiscuous mode [ 488.523426][T14508] geneve1: left promiscuous mode [ 488.544247][T14508] batman_adv: batadv0: Interface deactivated: dummy0 [ 488.570894][T14508] dummy0: left promiscuous mode [ 488.605019][T14508] nlmon0: left promiscuous mode [ 488.640760][T14508] batadv0: left promiscuous mode [ 488.679458][T14508] vxcan0: left promiscuous mode [ 488.710099][T14508] vxcan1: left promiscuous mode [ 488.737049][T14508] veth0: left promiscuous mode [ 488.798168][T14508] veth1: left promiscuous mode [ 488.858596][T14508] wg0: left promiscuous mode [ 488.915959][T14508] wg1: left promiscuous mode [ 488.952957][T14508] wg2: left promiscuous mode [ 489.007605][T14508] veth0_to_bridge: left promiscuous mode [ 489.106733][T14508] veth1_to_bridge: left promiscuous mode [ 489.213310][T14508] bond_slave_0: left promiscuous mode [ 489.247891][T14508] veth1_to_bond: left promiscuous mode [ 489.311603][T14508] bond_slave_1: left promiscuous mode [ 489.338021][T14508] veth0_to_team: left promiscuous mode [ 489.378166][T14508] team_slave_0: left promiscuous mode [ 489.424958][T14508] veth1_to_team: left promiscuous mode [ 489.455828][T14508] team_slave_1: left promiscuous mode [ 489.476868][T14508] veth0_to_batadv: left promiscuous mode [ 489.508996][T14508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.533176][T14508] batadv_slave_0: left promiscuous mode [ 489.549903][T14508] veth1_to_batadv: left promiscuous mode [ 489.567965][T14508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.594698][T14508] batadv_slave_1: left promiscuous mode [ 489.643885][T14508] veth0_to_hsr: left promiscuous mode [ 489.722793][T14508] veth1_to_hsr: left promiscuous mode [ 489.818476][T14508] hsr0: left promiscuous mode [ 489.835665][T14508] veth1_virt_wifi: left promiscuous mode [ 489.862724][T14508] veth0_virt_wifi: left promiscuous mode [ 489.893964][T14508] virt_wifi0: left promiscuous mode [ 489.974525][T14508] macvtap0: left promiscuous mode [ 490.002025][T14508] macsec0: left promiscuous mode [ 490.036663][T14508] geneve0: left promiscuous mode [ 490.117678][T14508] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 490.161039][T14508] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 490.228081][T14508] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 490.259037][T14508] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 490.290208][T14508] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 490.316328][T14508] ip6tnl1: left promiscuous mode [ 490.359368][T14536] netlink: 'syz.2.2421': attribute type 29 has an invalid length. [ 490.428061][T12066] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.472117][T12066] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.520034][T12066] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.558240][T12066] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.671974][T14542] netlink: 416 bytes leftover after parsing attributes in process `syz.0.2424'. [ 490.987944][T14544] netlink: 'syz.3.2425': attribute type 1 has an invalid length. [ 491.048756][T14544] netlink: 'syz.3.2425': attribute type 2 has an invalid length. [ 491.169015][T14548] FAULT_INJECTION: forcing a failure. [ 491.169015][T14548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.184126][T14548] CPU: 1 UID: 0 PID: 14548 Comm: syz.5.2427 Not tainted syzkaller #0 PREEMPT(full) [ 491.184150][T14548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.184161][T14548] Call Trace: [ 491.184171][T14548] [ 491.184182][T14548] dump_stack_lvl+0xe8/0x150 [ 491.184238][T14548] should_fail_ex+0x40c/0x560 [ 491.184303][T14548] _copy_from_user+0x2d/0xb0 [ 491.184336][T14548] bpf_test_init+0xd8/0x150 [ 491.184390][T14548] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 491.184501][T14548] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 491.184562][T14548] ? __fget_files+0x2a/0x420 [ 491.184624][T14548] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 491.184664][T14548] bpf_prog_test_run+0x2c5/0x340 [ 491.184722][T14548] __sys_bpf+0xa22/0xd90 [ 491.184804][T14548] ? __pfx___sys_bpf+0x10/0x10 [ 491.184901][T14548] ? __fget_files+0x2a/0x420 [ 491.185033][T14548] ? ksys_write+0x242/0x270 [ 491.185113][T14548] ? __pfx_ksys_write+0x10/0x10 [ 491.185171][T14548] __x64_sys_bpf+0xba/0xd0 [ 491.185207][T14548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.185241][T14548] do_syscall_64+0x174/0x580 [ 491.185268][T14548] ? trace_irq_disable+0x3b/0x140 [ 491.185301][T14548] ? clear_bhb_loop+0x40/0x90 [ 491.185347][T14548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.185371][T14548] RIP: 0033:0x7f6ac7f9e019 [ 491.185398][T14548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.185415][T14548] RSP: 002b:00007f6ac8e51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 491.185434][T14548] RAX: ffffffffffffffda RBX: 00007f6ac8225fa0 RCX: 00007f6ac7f9e019 [ 491.185448][T14548] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 491.185460][T14548] RBP: 00007f6ac8e51090 R08: 0000000000000000 R09: 0000000000000000 [ 491.185471][T14548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.185481][T14548] R13: 00007f6ac8226038 R14: 00007f6ac8225fa0 R15: 00007ffd9433ad08 [ 491.185577][T14548] [ 494.852673][T14585] : entered promiscuous mode [ 495.536580][T14591] FAULT_INJECTION: forcing a failure. [ 495.536580][T14591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.593530][T14591] CPU: 1 UID: 0 PID: 14591 Comm: syz.0.2438 Not tainted syzkaller #0 PREEMPT(full) [ 495.593560][T14591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.593570][T14591] Call Trace: [ 495.593581][T14591] [ 495.593593][T14591] dump_stack_lvl+0xe8/0x150 [ 495.593640][T14591] should_fail_ex+0x40c/0x560 [ 495.593702][T14591] _copy_from_user+0x2d/0xb0 [ 495.593736][T14591] bpf_test_init+0xd8/0x150 [ 495.593791][T14591] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 495.593898][T14591] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 495.593957][T14591] ? __fget_files+0x2a/0x420 [ 495.594019][T14591] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 495.594057][T14591] bpf_prog_test_run+0x2c5/0x340 [ 495.594113][T14591] __sys_bpf+0xa22/0xd90 [ 495.594195][T14591] ? __pfx___sys_bpf+0x10/0x10 [ 495.594290][T14591] ? __fget_files+0x2a/0x420 [ 495.594410][T14591] ? ksys_write+0x242/0x270 [ 495.594454][T14591] ? __pfx_ksys_write+0x10/0x10 [ 495.594521][T14591] __x64_sys_bpf+0xba/0xd0 [ 495.594555][T14591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.594587][T14591] do_syscall_64+0x174/0x580 [ 495.594623][T14591] ? clear_bhb_loop+0x40/0x90 [ 495.594666][T14591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.594689][T14591] RIP: 0033:0x7faa4379e019 [ 495.594717][T14591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.594734][T14591] RSP: 002b:00007faa446e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.594754][T14591] RAX: ffffffffffffffda RBX: 00007faa43a25fa0 RCX: 00007faa4379e019 [ 495.594768][T14591] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 495.594779][T14591] RBP: 00007faa446e8090 R08: 0000000000000000 R09: 0000000000000000 [ 495.594791][T14591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.594802][T14591] R13: 00007faa43a26038 R14: 00007faa43a25fa0 R15: 00007ffddc4f9cb8 [ 495.594903][T14591] [ 498.501150][T14637] netlink: 'syz.3.2453': attribute type 10 has an invalid length. [ 498.533334][T14637] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2453'. [ 499.794992][T14658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2462'. [ 501.537431][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.544480][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.935036][T14679] netlink: 'syz.0.2467': attribute type 12 has an invalid length. [ 501.942930][T14679] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.2467'. [ 502.790411][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2473'. [ 502.819227][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2474'. [ 503.328280][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 503.373734][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 503.437652][T14703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2477'. [ 503.583815][T14709] netlink: 'syz.0.2476': attribute type 21 has an invalid length. [ 503.702195][T14711] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2478'. [ 504.292469][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2480'. [ 504.337140][T14719] netlink: 'syz.5.2480': attribute type 1 has an invalid length. [ 504.344913][T14715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2480'. [ 504.594136][T14715] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2480'. [ 505.129979][T14729] netlink: 'syz.3.2484': attribute type 16 has an invalid length. [ 505.137939][T14729] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2484'. [ 506.580960][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 507.585326][T14763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2493'. [ 507.979562][T14766] netlink: 'syz.5.2495': attribute type 12 has an invalid length. [ 508.302123][T14769] mac80211_hwsim hwsim16 wlan0: left promiscuous mode [ 508.336378][T14769] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 512.157941][T14792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'. [ 512.365118][T14799] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2505'. [ 512.397472][T14799] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 512.892044][T14810] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2507'. [ 513.201632][T14824] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2511'. [ 513.595278][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2515'. [ 513.721368][T14837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2517'. [ 513.757100][T14837] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2517'. [ 513.804598][T14843] netlink: 'syz.5.2520': attribute type 2 has an invalid length. [ 514.153231][T14858] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2526'. [ 514.182654][T14858] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2526'. [ 514.530138][T14869] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 514.562926][T14866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2527'. [ 514.571855][T14866] tipc: Started in network mode [ 514.576941][T14866] tipc: Node identity 5e0004, cluster identity 4711 [ 514.583576][T14866] tipc: Node number set to 6160388 [ 515.041534][ T5634] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 517.128528][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 517.536797][ T5634] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 517.658661][T14928] __nla_validate_parse: 2 callbacks suppressed [ 517.658697][T14928] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2549'. [ 518.711956][T14958] netlink: 'syz.0.2558': attribute type 21 has an invalid length. [ 519.226928][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 519.838153][T14986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.334697][T14993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 521.570497][T14993] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 521.583296][T14993] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 521.621449][T14993] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 521.823803][T15007] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2569'. [ 522.421357][T15021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2575'. [ 522.447589][T15017] netlink: 5440 bytes leftover after parsing attributes in process `syz.5.2574'. [ 522.497728][T15020] netlink: 'syz.1.2576': attribute type 11 has an invalid length. [ 522.898649][T15041] netlink: 'syz.3.2580': attribute type 13 has an invalid length. [ 522.942438][T15042] netlink: 'syz.3.2580': attribute type 13 has an invalid length. [ 523.034476][T15046] proc: Unknown parameter 'fow‘ r<00000000000000000000' [ 523.184384][T15053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2585'. [ 523.467982][T15064] netlink: 'syz.0.2587': attribute type 21 has an invalid length. [ 523.477551][T15064] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2587'. [ 523.486966][T15064] netlink: 'syz.0.2587': attribute type 5 has an invalid length. [ 523.498278][T15064] netlink: 'syz.0.2587': attribute type 6 has an invalid length. [ 523.513401][T15064] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2587'. [ 523.563351][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2590'. [ 523.586304][T15065] netlink: 'syz.1.2589': attribute type 10 has an invalid length. [ 523.600192][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2590'. [ 523.612032][T15065] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2589'. [ 523.633182][T15071] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2590'. [ 524.618993][T15102] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2601'. [ 524.648645][T15102] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2601'. [ 526.004435][T15130] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 526.035947][T15130] syzkaller0: entered promiscuous mode [ 526.041478][T15130] syzkaller0: entered allmulticast mode [ 526.297601][T15147] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2616'. [ 526.656966][T15158] netlink: 'syz.5.2618': attribute type 2 has an invalid length. [ 526.674123][T15158] bpf: Bad value for 'uid' [ 526.684263][T15158] bpf: Bad value for 'mode' [ 526.748186][T15158] netlink: 'syz.5.2618': attribute type 1 has an invalid length. [ 527.000248][T15164] netlink: 'syz.0.2621': attribute type 3 has an invalid length. [ 527.102204][ T29] audit: type=1107 audit(1785639179.849:4): pid=15169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='§ÿDì†hÓ+°|[®g}±Bfˆ¼01OfŠPMþÍI&xó [ 527.102204][ T29] ”Í„ä¹W¿-Máì& ¾ô>½g‹¥€(¬Â‰à¾{w0\{ÏÑ ˜á¶I¬½ÙÓÝΦªÅTXµ$ꤞ`Ž1:ÛPßêE·Jí·Í¼‹s>I½r9ú' [ 528.235752][T15222] __nla_validate_parse: 6 callbacks suppressed [ 528.235771][T15222] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2638'. [ 528.266046][T15225] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 528.284897][T15222] pimreg: tun_chr_ioctl cmd 1074025681 [ 528.661906][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2642'. [ 528.810024][T15245] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2647'. [ 528.830395][T15245] netlink: 'syz.5.2647': attribute type 16 has an invalid length. [ 528.850274][T15245] netlink: 'syz.5.2647': attribute type 25 has an invalid length. [ 528.864790][T15245] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2647'. [ 528.881380][T15246] cgroup2: Unknown parameter 'fsname' [ 529.524801][T15256] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2651'. [ 529.946434][ T5626] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 529.946474][ T5626] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 529.946895][T15277] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2659'. [ 530.028678][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2659'. [ 530.052562][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2660'. [ 530.096740][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2660'. [ 530.572335][T15304] netlink: 'syz.2.2665': attribute type 39 has an invalid length. [ 530.883619][T15313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2668'. [ 531.302817][T15334] netlink: 'syz.2.2673': attribute type 10 has an invalid length. [ 531.315187][T15334] batman_adv: batadv0: Adding interface: dummy0 [ 531.321690][T15334] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.348049][T15334] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 531.461634][T15334] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 531.481556][T15342] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 533.488259][T15381] __nla_validate_parse: 5 callbacks suppressed [ 533.488298][T15381] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2690'. [ 534.478687][T15403] netlink: 'syz.2.2695': attribute type 22 has an invalid length. [ 534.526211][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2695'. [ 534.624685][T15400] netlink: 'syz.1.2697': attribute type 61 has an invalid length. [ 534.706306][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2698'. [ 535.128370][T15414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2701'. [ 536.429045][T15472] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2710'. [ 536.537236][T15475] netlink: 300 bytes leftover after parsing attributes in process `syz.5.2711'. [ 538.333348][T15472] batman_adv: batadv0: Interface deactivated: dummy0 [ 538.437942][T15472] batman_adv: batadv0: Removing interface: dummy0 [ 539.111478][T15512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2717'. [ 540.264330][T15542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2724'. [ 540.417470][T15541] netlink: 2584 bytes leftover after parsing attributes in process `syz.1.2724'. [ 540.710032][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2729'. [ 540.812555][T15548] netlink: 'syz.1.2727': attribute type 10 has an invalid length. [ 540.871636][T15551] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2727'. [ 540.931939][T15558] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2731'. [ 540.999149][T15556] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2728'. [ 541.003957][T15559] netlink: 'syz.1.2727': attribute type 21 has an invalid length. [ 541.046588][T15548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 541.055911][T15548] team0: Port device netdevsim1 added [ 541.123595][T15564] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2732'. [ 541.131665][ T29] audit: type=1107 audit(1785639193.869:5): pid=15560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='²È' [ 541.466723][T15580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.553494][T15582] FAULT_INJECTION: forcing a failure. [ 541.553494][T15582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.593699][T15582] CPU: 0 UID: 0 PID: 15582 Comm: syz.2.2739 Not tainted syzkaller #0 PREEMPT(full) [ 541.593726][T15582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.593738][T15582] Call Trace: [ 541.593745][T15582] [ 541.593753][T15582] dump_stack_lvl+0xe8/0x150 [ 541.593789][T15582] should_fail_ex+0x40c/0x560 [ 541.593822][T15582] _copy_from_iter+0x1d3/0x1660 [ 541.593967][T15582] ? kmem_cache_alloc_node_noprof+0x191/0x610 [ 541.593995][T15582] ? rcu_is_watching+0x15/0xb0 [ 541.594015][T15582] ? trace_kmem_cache_alloc+0x29/0xe0 [ 541.594039][T15582] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 541.594063][T15582] ? __pfx__copy_from_iter+0x10/0x10 [ 541.594088][T15582] ? __alloc_skb+0x276/0x7a0 [ 541.594108][T15582] ? __alloc_skb+0x276/0x7a0 [ 541.594131][T15582] ? netlink_sendmsg+0x650/0xb40 [ 541.594189][T15582] ? skb_put+0x112/0x210 [ 541.594209][T15582] netlink_sendmsg+0x6c0/0xb40 [ 541.594229][T15582] ? lockdep_hardirqs_on+0x7a/0x110 [ 541.594259][T15582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.594278][T15582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.594300][T15582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.594322][T15582] ? sock_sendmsg_nosec+0x128/0x180 [ 541.594408][T15582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.594428][T15582] sock_sendmsg_nosec+0x13a/0x180 [ 541.594457][T15582] ____sys_sendmsg+0x54e/0x850 [ 541.594485][T15582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.594513][T15582] ? import_iovec+0x73/0xa0 [ 541.594534][T15582] ___sys_sendmsg+0x2a5/0x360 [ 541.594553][T15582] ? __lock_acquire+0x683/0x2cf0 [ 541.594583][T15582] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.594610][T15582] ? __pfx_trace_call_bpf+0x10/0x10 [ 541.594655][T15582] ? __fget_files+0x2a/0x420 [ 541.594679][T15582] ? __fget_files+0x3a2/0x420 [ 541.594712][T15582] __x64_sys_sendmsg+0x1b1/0x290 [ 541.594736][T15582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.594776][T15582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.594799][T15582] do_syscall_64+0x174/0x580 [ 541.594820][T15582] ? clear_bhb_loop+0x40/0x90 [ 541.594842][T15582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.594860][T15582] RIP: 0033:0x7fe8e279e019 [ 541.594877][T15582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.594893][T15582] RSP: 002b:00007fe8e3660028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.594913][T15582] RAX: ffffffffffffffda RBX: 00007fe8e2a25fa0 RCX: 00007fe8e279e019 [ 541.594935][T15582] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 541.594947][T15582] RBP: 00007fe8e3660090 R08: 0000000000000000 R09: 0000000000000000 [ 541.594958][T15582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.594969][T15582] R13: 00007fe8e2a26038 R14: 00007fe8e2a25fa0 R15: 00007fff73e591c8 [ 541.594999][T15582] [ 542.135554][T15596] netlink: 'syz.0.2744': attribute type 1 has an invalid length. [ 542.172652][T15596] netlink: 'syz.0.2744': attribute type 8 has an invalid length. [ 542.176805][T15600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'. [ 542.472027][T15596] gretap0 speed is unknown, defaulting to 1000 [ 542.496508][T15596] gretap0 speed is unknown, defaulting to 1000 [ 542.526179][T15596] gretap0 speed is unknown, defaulting to 1000 [ 542.602107][T15596] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 542.633155][T15596] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 542.703073][T15596] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 542.797874][T15596] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 542.899531][T15596] gretap0 speed is unknown, defaulting to 1000 [ 542.907968][T15596] gretap0 speed is unknown, defaulting to 1000 [ 542.916360][T15596] gretap0 speed is unknown, defaulting to 1000 [ 542.929557][T15596] gretap0 speed is unknown, defaulting to 1000 [ 542.937990][T15596] gretap0 speed is unknown, defaulting to 1000 [ 543.380266][T15639] FAULT_INJECTION: forcing a failure. [ 543.380266][T15639] name failslab, interval 1, probability 0, space 0, times 0 [ 543.393632][T15639] CPU: 1 UID: 0 PID: 15639 Comm: syz.0.2754 Not tainted syzkaller #0 PREEMPT(full) [ 543.393659][T15639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 543.393671][T15639] Call Trace: [ 543.393678][T15639] [ 543.393686][T15639] dump_stack_lvl+0xe8/0x150 [ 543.393721][T15639] should_fail_ex+0x40c/0x560 [ 543.393751][T15639] should_failslab+0xa8/0x100 [ 543.393781][T15639] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 543.393807][T15639] ? skb_clone+0x212/0x3a0 [ 543.393827][T15639] ? skb_clone+0x212/0x3a0 [ 543.393862][T15639] skb_clone+0x212/0x3a0 [ 543.393887][T15639] __netlink_deliver_tap+0x413/0x860 [ 543.393923][T15639] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.393946][T15639] netlink_deliver_tap+0x19c/0x1b0 [ 543.393969][T15639] netlink_unicast+0x77f/0x940 [ 543.394001][T15639] netlink_sendmsg+0x813/0xb40 [ 543.394033][T15639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.394054][T15639] ? __pfx___sanitizer_cov_trace_switch+0x10/0x10 [ 543.394082][T15639] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.394244][T15639] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.394265][T15639] sock_sendmsg_nosec+0x13a/0x180 [ 543.394294][T15639] ____sys_sendmsg+0x54e/0x850 [ 543.394322][T15639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.394395][T15639] ? import_iovec+0x73/0xa0 [ 543.394419][T15639] ___sys_sendmsg+0x2a5/0x360 [ 543.394439][T15639] ? __lock_acquire+0x683/0x2cf0 [ 543.394470][T15639] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.394489][T15639] ? perf_trace_preemptirq_template+0xb2/0x350 [ 543.394568][T15639] ? __fget_files+0x2a/0x420 [ 543.394593][T15639] ? __fget_files+0x3a2/0x420 [ 543.394629][T15639] __x64_sys_sendmsg+0x1b1/0x290 [ 543.394654][T15639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 543.394694][T15639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.394715][T15639] do_syscall_64+0x174/0x580 [ 543.394739][T15639] ? clear_bhb_loop+0x40/0x90 [ 543.394763][T15639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.394782][T15639] RIP: 0033:0x7faa4379e019 [ 543.394801][T15639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.394817][T15639] RSP: 002b:00007faa446c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 543.394837][T15639] RAX: ffffffffffffffda RBX: 00007faa43a26090 RCX: 00007faa4379e019 [ 543.394850][T15639] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000006 [ 543.394862][T15639] RBP: 00007faa446c7090 R08: 0000000000000000 R09: 0000000000000000 [ 543.394874][T15639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.394885][T15639] R13: 00007faa43a26128 R14: 00007faa43a26090 R15: 00007ffddc4f9cb8 [ 543.394917][T15639] [ 543.395457][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 545.251481][T15654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2759'. [ 545.291739][T15654] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2759'. [ 545.445456][T15664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2762'. [ 545.995004][T15673] Ÿë: port 1(veth1_to_hsr) entered blocking state [ 546.001927][T15673] Ÿë: port 1(veth1_to_hsr) entered disabled state [ 546.041437][T15673] veth1_to_hsr: entered allmulticast mode [ 546.050253][T15677] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2765'. [ 546.070838][T15673] veth1_to_hsr: entered promiscuous mode [ 546.429312][T15690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2770'. [ 546.578411][T15698] netlink: 'syz.5.2767': attribute type 21 has an invalid length. [ 546.596719][T15698] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2767'. [ 546.632505][T15694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2772'. [ 546.932722][T15709] ©: renamed from sit0 [ 546.974206][T15713] netlink: 'syz.5.2779': attribute type 21 has an invalid length. [ 546.993459][T15713] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2779'. [ 548.679556][T15709] A link change request failed with some changes committed already. Interface © may have been left with an inconsistent configuration, please check. [ 548.798526][T15713] netlink: 'syz.5.2779': attribute type 4 has an invalid length. [ 548.807121][T15713] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2779'. [ 549.617229][T15727] syzkaller0: entered promiscuous mode [ 549.630966][T15727] syzkaller0: entered allmulticast mode [ 549.748843][T15744] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2787'. [ 554.077243][T15755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2789'. [ 554.337102][T15778] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2795'. [ 554.396412][T15778] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2795'. [ 554.445181][T15778] xt_l2tp: missing protocol rule (udp|l2tpip) [ 554.606140][T15770] netlink: 'syz.5.2792': attribute type 2 has an invalid length. [ 554.629114][T15770] netlink: 'syz.5.2792': attribute type 1 has an invalid length. [ 554.650602][T15770] netlink: 'syz.5.2792': attribute type 2 has an invalid length. [ 557.532667][T15795] nft_compat: unsupported protocol 0 [ 557.873707][T15811] netlink: 'syz.2.2805': attribute type 8 has an invalid length. [ 558.004621][T15806] gretap0 speed is unknown, defaulting to 1000 [ 558.448354][T15821] netlink: 'syz.5.2808': attribute type 21 has an invalid length. [ 558.483270][T15821] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2808'. [ 558.642688][T15821] netlink: 'syz.5.2808': attribute type 4 has an invalid length. [ 558.684907][T15821] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2808'. [ 558.777385][T15827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2810'. [ 559.736115][T15852] syz.1.2819 (15852) used obsolete PPPIOCDETACH ioctl [ 559.805795][T15856] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2820'. [ 560.255435][T15864] netlink: 'syz.3.2823': attribute type 11 has an invalid length. [ 560.413409][ T29] audit: type=1107 audit(1785639213.169:6): pid=15865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='™Î¸,CÍZõ' [ 562.121832][T15882] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.2829'. [ 563.055714][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.062685][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.466658][T15891] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 563.707738][T15914] FAULT_INJECTION: forcing a failure. [ 563.707738][T15914] name failslab, interval 1, probability 0, space 0, times 0 [ 563.760962][T15914] CPU: 0 UID: 0 PID: 15914 Comm: syz.2.2840 Not tainted syzkaller #0 PREEMPT(full) [ 563.760987][T15914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 563.760998][T15914] Call Trace: [ 563.761005][T15914] [ 563.761013][T15914] dump_stack_lvl+0xe8/0x150 [ 563.761043][T15914] should_fail_ex+0x40c/0x560 [ 563.761068][T15914] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 563.761093][T15914] should_failslab+0xa8/0x100 [ 563.761118][T15914] __kvmalloc_node_noprof+0x176/0x860 [ 563.761143][T15914] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 563.761205][T15914] ? 0xffffffffa0205480 [ 563.761219][T15914] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 563.761244][T15914] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 563.761266][T15914] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 563.761293][T15914] ? __mutex_unlock_slowpath+0x731/0x900 [ 563.761317][T15914] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 563.761340][T15914] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 563.761361][T15914] ? 0xffffffffa0205480 [ 563.761414][T15914] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 563.761505][T15914] ? _copy_from_user+0x94/0xb0 [ 563.761524][T15914] ? bpf_test_init+0x113/0x150 [ 563.761542][T15914] ? xdp_convert_md_to_buff+0x5b/0x330 [ 563.761566][T15914] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 563.761594][T15914] ? lockdep_hardirqs_on+0x7a/0x110 [ 563.761615][T15914] ? irqentry_exit+0x218/0x8f0 [ 563.761631][T15914] ? trace_irq_disable+0x3b/0x140 [ 563.761654][T15914] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 563.761682][T15914] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 563.761703][T15914] bpf_prog_test_run+0x2c5/0x340 [ 563.761729][T15914] __sys_bpf+0xa22/0xd90 [ 563.761759][T15914] ? __pfx___sys_bpf+0x10/0x10 [ 563.761779][T15914] ? lock_acquire+0x106/0x350 [ 563.761813][T15914] ? ktime_get+0x45/0x220 [ 563.761862][T15914] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 563.761900][T15914] __x64_sys_bpf+0xba/0xd0 [ 563.761924][T15914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.761945][T15914] do_syscall_64+0x174/0x580 [ 563.761967][T15914] ? clear_bhb_loop+0x40/0x90 [ 563.761989][T15914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.762007][T15914] RIP: 0033:0x7fe8e279e019 [ 563.762024][T15914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.762039][T15914] RSP: 002b:00007fe8e3660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 563.762058][T15914] RAX: ffffffffffffffda RBX: 00007fe8e2a25fa0 RCX: 00007fe8e279e019 [ 563.762071][T15914] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 563.762083][T15914] RBP: 00007fe8e3660090 R08: 0000000000000000 R09: 0000000000000000 [ 563.762096][T15914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.762107][T15914] R13: 00007fe8e2a26038 R14: 00007fe8e2a25fa0 R15: 00007fff73e591c8 [ 563.762139][T15914] [ 564.297436][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2847'. [ 564.350172][T15935] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2847'. [ 564.582542][T15942] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 564.756664][T15947] netlink: 'syz.5.2849': attribute type 4 has an invalid length. [ 564.796158][T15947] netlink: 64883 bytes leftover after parsing attributes in process `syz.5.2849'. [ 565.301339][T15969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2854'. [ 565.641866][T15971] FAULT_INJECTION: forcing a failure. [ 565.641866][T15971] name failslab, interval 1, probability 0, space 0, times 0 [ 565.675802][T15971] CPU: 1 UID: 0 PID: 15971 Comm: syz.1.2855 Not tainted syzkaller #0 PREEMPT(full) [ 565.675830][T15971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 565.675841][T15971] Call Trace: [ 565.675848][T15971] [ 565.675857][T15971] dump_stack_lvl+0xe8/0x150 [ 565.675889][T15971] should_fail_ex+0x40c/0x560 [ 565.675914][T15971] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 565.675939][T15971] should_failslab+0xa8/0x100 [ 565.675969][T15971] __kvmalloc_node_noprof+0x176/0x860 [ 565.675998][T15971] ? __kvmalloc_node_noprof+0x35c/0x860 [ 565.676022][T15971] ? bpf_test_run_xdp_live+0x220/0x1c20 [ 565.676049][T15971] bpf_test_run_xdp_live+0x220/0x1c20 [ 565.676075][T15971] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 565.676107][T15971] ? __mutex_unlock_slowpath+0x731/0x900 [ 565.676135][T15971] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 565.676161][T15971] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 565.676183][T15971] ? bpf_dispatcher_xdp+0x800/0x1000 [ 565.676248][T15971] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 565.676280][T15971] ? xdp_convert_md_to_buff+0x277/0x330 [ 565.676302][T15971] ? xdp_convert_md_to_buff+0x5b/0x330 [ 565.676327][T15971] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 565.676364][T15971] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 565.676391][T15971] ? __fget_files+0x2a/0x420 [ 565.676422][T15971] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 565.676445][T15971] bpf_prog_test_run+0x2c5/0x340 [ 565.676476][T15971] __sys_bpf+0xa22/0xd90 [ 565.676508][T15971] ? __pfx___sys_bpf+0x10/0x10 [ 565.676530][T15971] ? lock_acquire+0x106/0x350 [ 565.676565][T15971] ? __pfx_trace_call_bpf+0x10/0x10 [ 565.676588][T15971] ? ktime_get+0x45/0x220 [ 565.676628][T15971] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 565.676665][T15971] __x64_sys_bpf+0xba/0xd0 [ 565.676687][T15971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.676708][T15971] do_syscall_64+0x174/0x580 [ 565.676730][T15971] ? clear_bhb_loop+0x40/0x90 [ 565.676753][T15971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.676772][T15971] RIP: 0033:0x7f4f1339e019 [ 565.676789][T15971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.676805][T15971] RSP: 002b:00007f4f142f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 565.676824][T15971] RAX: ffffffffffffffda RBX: 00007f4f13625fa0 RCX: 00007f4f1339e019 [ 565.676838][T15971] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 565.676850][T15971] RBP: 00007f4f142f5090 R08: 0000000000000000 R09: 0000000000000000 [ 565.676860][T15971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.676871][T15971] R13: 00007f4f13626038 R14: 00007f4f13625fa0 R15: 00007fffa4eaf1d8 [ 565.676903][T15971] [ 566.337486][T15980] FAULT_INJECTION: forcing a failure. [ 566.337486][T15980] name failslab, interval 1, probability 0, space 0, times 0 [ 566.352493][T15980] CPU: 1 UID: 0 PID: 15980 Comm: syz.3.2860 Not tainted syzkaller #0 PREEMPT(full) [ 566.352519][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 566.352530][T15980] Call Trace: [ 566.352539][T15980] [ 566.352548][T15980] dump_stack_lvl+0xe8/0x150 [ 566.352594][T15980] should_fail_ex+0x40c/0x560 [ 566.352659][T15980] should_failslab+0xa8/0x100 [ 566.352708][T15980] __kmalloc_cache_noprof+0xa8/0x660 [ 566.352746][T15980] ? tipc_net+0x45/0x270 [ 566.352896][T15980] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 566.352919][T15980] ? tipc_topsrv_queue_evt+0xeb/0x2a0 [ 566.352987][T15980] tipc_topsrv_queue_evt+0xeb/0x2a0 [ 566.353041][T15980] tipc_sub_report_overlap+0x4bd/0x8b0 [ 566.353154][T15980] tipc_nametbl_remove_publ+0xd00/0x1ac0 [ 566.353251][T15980] tipc_nametbl_withdraw+0x7e/0x280 [ 566.353303][T15980] tipc_release+0x14a0/0x24d0 [ 566.353341][T15980] ? sock_close+0x82/0x220 [ 566.353425][T15980] ? __pfx_tipc_release+0x10/0x10 [ 566.353472][T15980] ? down_write+0x16d/0x200 [ 566.353541][T15980] ? __pfx_down_write+0x10/0x10 [ 566.353627][T15980] sock_close+0xad/0x220 [ 566.353668][T15980] ? __pfx_sock_close+0x10/0x10 [ 566.353702][T15980] __fput+0x418/0xa50 [ 566.353785][T15980] fput_close_sync+0x11f/0x240 [ 566.353822][T15980] ? __pfx_fput_close_sync+0x10/0x10 [ 566.353888][T15980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.353931][T15980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.353965][T15980] __x64_sys_close+0x7e/0x110 [ 566.354008][T15980] do_syscall_64+0x174/0x580 [ 566.354040][T15980] ? trace_irq_disable+0x3b/0x140 [ 566.354075][T15980] ? clear_bhb_loop+0x40/0x90 [ 566.354123][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.354146][T15980] RIP: 0033:0x7fddeaf9e019 [ 566.354172][T15980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.354188][T15980] RSP: 002b:00007fddebe7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 566.354208][T15980] RAX: ffffffffffffffda RBX: 00007fddeb225fa0 RCX: 00007fddeaf9e019 [ 566.354220][T15980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 566.354230][T15980] RBP: 00007fddebe7a090 R08: 0000000000000000 R09: 0000000000000000 [ 566.354242][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.354253][T15980] R13: 00007fddeb226038 R14: 00007fddeb225fa0 R15: 00007ffddbd71f58 [ 566.354361][T15980] [ 566.778564][T15977] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2858'. [ 566.794569][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2857'. [ 566.805713][T15977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2858'. [ 567.384377][T16009] netlink: 'syz.1.2867': attribute type 4 has an invalid length. [ 567.392466][T16009] netlink: 'syz.1.2867': attribute type 17 has an invalid length. [ 567.461979][T16010] netlink: 'syz.0.2866': attribute type 10 has an invalid length. [ 567.518565][T16010] team0: Device vxcan0 is of different type [ 567.665332][T16015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2869'. [ 567.696846][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2869'. [ 567.742053][T16020] netlink: 'syz.5.2869': attribute type 1 has an invalid length. [ 567.751155][T16015] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2869'. [ 568.696193][T16033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2874'. [ 568.869117][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 568.884680][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 568.896217][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 568.906930][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 568.914865][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.557673][T16049] syzkaller0: entered promiscuous mode [ 569.563563][T16049] syzkaller0: entered allmulticast mode [ 569.583488][T16068] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2884'. [ 570.984806][ T5634] Bluetooth: hci5: command tx timeout [ 573.053684][ T5634] Bluetooth: hci5: command tx timeout [ 573.104196][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2888'. [ 573.310700][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2890'. [ 573.340538][T16100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2890'. [ 573.432468][T16040] gretap0 speed is unknown, defaulting to 1000 [ 573.456147][T16100] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2890'. [ 573.591618][T16116] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2894'. [ 573.667723][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2894'. [ 573.868271][T16124] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2895'. [ 573.891619][T16124] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 573.970572][T16129] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2898'. [ 573.983670][T16121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2895'. [ 574.414906][T16141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2902'. [ 575.153066][ T5634] Bluetooth: hci5: command tx timeout [ 575.392247][ T9240] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.419227][ T9240] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 575.442415][ T9240] bond0 (unregistering): (slave batadv_slave_1): Releasing backup interface [ 575.474743][ T9240] bond0 (unregistering): Released all slaves [ 575.761404][ T9240] : left promiscuous mode [ 575.935503][T16194] netlink: 'syz.1.2915': attribute type 16 has an invalid length. [ 575.984823][T16194] netlink: 'syz.1.2915': attribute type 17 has an invalid length. [ 576.043761][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 576.126576][T16194] lo: entered promiscuous mode [ 576.138956][T16194] tunl0: entered promiscuous mode [ 576.149907][T16194] gre0: entered promiscuous mode [ 576.170723][T16194] gretap0: entered promiscuous mode [ 576.197722][T16194] erspan0: entered promiscuous mode [ 576.229381][T16194] ip_vti0: entered promiscuous mode [ 576.249364][T16194] ip6_vti0: entered promiscuous mode [ 576.269357][T16194] sit0: entered promiscuous mode [ 576.313762][T16194] ip6tnl0: entered promiscuous mode [ 576.339709][T16194] ip6gre0: entered promiscuous mode [ 576.352905][T16194] ip6gretap0: entered promiscuous mode [ 576.381422][T16194] bridge0: entered promiscuous mode [ 576.402834][T16194] vcan0: entered promiscuous mode [ 576.417656][T16194] bond0: entered promiscuous mode [ 576.443979][T16194] bond_slave_0: entered promiscuous mode [ 576.458622][T16194] bond_slave_1: entered promiscuous mode [ 576.473656][T16194] veth0_to_bond: entered promiscuous mode [ 576.497073][T16194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.512643][T16194] team0: entered promiscuous mode [ 576.518523][T16194] team_slave_0: entered promiscuous mode [ 576.525952][T16194] team_slave_1: entered promiscuous mode [ 576.532442][T16194] geneve1: entered promiscuous mode [ 576.539388][T16194] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 576.559390][T16194] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.604169][T16194] dummy0: entered promiscuous mode [ 576.627756][T16194] batman_adv: batadv0: Interface activated: dummy0 [ 576.637641][T16194] nlmon0: entered promiscuous mode [ 576.652533][T16194] batadv0: entered promiscuous mode [ 576.675011][T16194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.698452][T16194] vxcan0: entered promiscuous mode [ 576.713478][T16194] vxcan1: entered promiscuous mode [ 576.753115][T16194] veth0: entered promiscuous mode [ 576.761999][T16194] veth1: entered promiscuous mode [ 577.228883][ T5634] Bluetooth: hci5: command tx timeout [ 577.313885][T16194] wg0: entered promiscuous mode [ 577.374160][T16194] wg1: entered promiscuous mode [ 577.412936][T16194] wg2: entered promiscuous mode [ 577.439017][T16194] veth0_to_bridge: entered promiscuous mode [ 577.470989][T16194] veth1_to_bridge: entered promiscuous mode [ 577.489547][T16194] veth1_to_bond: entered promiscuous mode [ 577.500801][T16194] veth0_to_team: entered promiscuous mode [ 577.599762][T16194] veth1_to_team: entered promiscuous mode [ 577.611375][T16194] veth0_to_batadv: entered promiscuous mode [ 577.704373][T16194] batadv_slave_0: entered promiscuous mode [ 577.712813][T16194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.720900][T16194] veth1_to_batadv: entered promiscuous mode [ 577.760631][T16194] batadv_slave_1: entered promiscuous mode [ 577.769062][T16194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.777207][T16194] veth0_to_hsr: entered promiscuous mode [ 577.795787][T16194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.846297][T16194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.873644][T16194] hsr0: entered promiscuous mode [ 577.902476][T16194] veth1_virt_wifi: entered promiscuous mode [ 577.919701][T16194] veth0_virt_wifi: entered promiscuous mode [ 577.938918][T16194] virt_wifi0: entered promiscuous mode [ 577.950595][T16194] veth1_macvtap: left promiscuous mode [ 577.956864][T16194] veth1_macvtap: entered promiscuous mode [ 577.967475][T16194] veth0_macvtap: left promiscuous mode [ 577.977188][T16194] veth0_macvtap: entered promiscuous mode [ 577.991254][T16194] macvtap0: entered promiscuous mode [ 578.002105][T16194] macsec0: entered promiscuous mode [ 578.014522][T16194] geneve0: entered promiscuous mode [ 578.047732][T16194] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 578.064398][T16194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 578.146668][T16194] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 578.166548][T16194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 578.176157][T16194] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 578.184911][T16194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 578.194221][T16194] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 578.201853][T16194] mac80211_hwsim hwsim13 wlan0: left allmulticast mode [ 578.211348][T16194] ip6tnl1: entered promiscuous mode [ 578.250238][T16194] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 578.278216][T16194] Ÿë: entered promiscuous mode [ 578.541435][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.548918][ T9245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.608447][ T9245] bridge0: port 2(.@ÿ) entered blocking state [ 578.615102][ T9245] bridge0: port 2(.@ÿ) entered forwarding state [ 578.779292][ T9245] Ÿë: port 1(veth1_to_hsr) entered blocking state [ 578.786276][ T9245] Ÿë: port 1(veth1_to_hsr) entered forwarding state [ 579.023324][T12068] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.063680][T16234] __nla_validate_parse: 4 callbacks suppressed [ 579.063701][T16234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'. [ 579.064597][T12068] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.381553][T12068] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.425884][T12068] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.519436][T16040] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.538031][T16040] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.556840][T16040] bridge_slave_0: entered allmulticast mode [ 579.589017][T16040] bridge_slave_0: entered promiscuous mode [ 579.894638][T16040] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.913271][T16040] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.933273][T16040] bridge_slave_1: entered allmulticast mode [ 579.956523][T16040] bridge_slave_1: entered promiscuous mode [ 580.014179][T16245] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2929'. [ 580.713459][T16040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.796911][T16040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.858783][T16268] netlink: 'syz.1.2934': attribute type 10 has an invalid length. [ 580.914437][T16242] gretap0 speed is unknown, defaulting to 1000 [ 580.920930][T16268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.978859][T16268] batadv_slave_1: left promiscuous mode [ 581.017649][T16268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.047902][T16268] batadv_slave_1: entered promiscuous mode [ 581.075512][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2936'. [ 581.091439][T16268] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 581.199068][ T9240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.239850][ T9240] batman_adv: batadv0: Removing interface: dummy0 [ 581.838479][ T9240] team0 (unregistering): Port device team_slave_1 removed [ 581.859161][T16296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2941'. [ 581.890963][ T9240] team0 (unregistering): Port device team_slave_0 removed [ 582.146584][T16040] team0: Port device team_slave_0 added [ 582.161939][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 582.195640][T16040] team0: Port device team_slave_1 added [ 582.310882][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2947'. [ 582.340338][T16040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.347739][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.397800][T16040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.410769][T16040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 582.418543][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.446239][T16040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 582.524708][T16306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2946'. [ 582.533813][T16306] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2946'. [ 582.711926][T16040] hsr_slave_0: entered promiscuous mode [ 582.758362][T16040] hsr_slave_1: entered promiscuous mode [ 582.778620][T16040] debugfs: 'hsr0' already exists in 'hsr' [ 582.792094][T16040] Cannot create hsr debugfs directory [ 583.735519][T16340] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2954'. [ 583.797766][T16340] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2954'. [ 583.904288][T16340] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2954'. [ 583.977302][T16350] netlink: 'syz.1.2957': attribute type 10 has an invalid length. [ 584.508049][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7 [ 585.399295][T16400] __nla_validate_parse: 3 callbacks suppressed [ 585.399330][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2970'. [ 586.112931][T16382] gretap0 speed is unknown, defaulting to 1000 [ 586.224764][T16418] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2971'. [ 586.570192][T16429] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2973'. [ 588.209809][T16040] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 589.197341][T16040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.205757][T16040] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 589.300796][T16040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 589.377779][T16040] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 589.432783][T16040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 589.472067][T16040] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 589.809103][T16040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 592.528607][T16040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.581124][T16040] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.617868][T12063] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.625083][T12063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.658308][ T9247] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.665547][ T9247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.742491][T16551] netlink: 'syz.0.2981': attribute type 4 has an invalid length. [ 592.788388][T16551] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2981'. [ 592.810211][T16555] netlink: 'syz.5.2984': attribute type 58 has an invalid length. [ 592.858512][T16555] tunl0: left promiscuous mode [ 592.891770][T16555] gre0: left promiscuous mode [ 592.940633][T16555] netlink: 'syz.5.2984': attribute type 1 has an invalid length. [ 593.436364][T16575] netlink: 'syz.3.2987': attribute type 1 has an invalid length. [ 593.475157][T16576] netlink: 'syz.3.2987': attribute type 1 has an invalid length. [ 593.977672][T16598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2994'. [ 594.018274][T16598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2994'. [ 594.050177][T16040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.224234][T16609] FAULT_INJECTION: forcing a failure. [ 594.224234][T16609] name failslab, interval 1, probability 0, space 0, times 0 [ 594.241168][T16040] veth0_vlan: entered promiscuous mode [ 594.250543][T16609] CPU: 1 UID: 0 PID: 16609 Comm: syz.3.2998 Not tainted syzkaller #0 PREEMPT(full) [ 594.250569][T16609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.250580][T16609] Call Trace: [ 594.250588][T16609] [ 594.250596][T16609] dump_stack_lvl+0xe8/0x150 [ 594.250630][T16609] should_fail_ex+0x40c/0x560 [ 594.250660][T16609] should_failslab+0xa8/0x100 [ 594.250690][T16609] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 594.250714][T16609] ? skb_clone+0x212/0x3a0 [ 594.250733][T16609] ? skb_clone+0x212/0x3a0 [ 594.250760][T16609] skb_clone+0x212/0x3a0 [ 594.250784][T16609] __netlink_deliver_tap+0x413/0x860 [ 594.250817][T16609] ? netlink_deliver_tap+0x2e/0x1b0 [ 594.250841][T16609] netlink_deliver_tap+0x19c/0x1b0 [ 594.250863][T16609] netlink_unicast+0x77f/0x940 [ 594.250904][T16609] netlink_sendmsg+0x813/0xb40 [ 594.250935][T16609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.250962][T16609] ? aa_sock_msg_perm+0xf1/0x1b0 [ 594.250989][T16609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 594.251009][T16609] sock_sendmsg_nosec+0x13a/0x180 [ 594.251037][T16609] ____sys_sendmsg+0x54e/0x850 [ 594.251064][T16609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 594.251094][T16609] ? import_iovec+0x73/0xa0 [ 594.251115][T16609] ___sys_sendmsg+0x2a5/0x360 [ 594.251135][T16609] ? __lock_acquire+0x683/0x2cf0 [ 594.251167][T16609] ? __pfx____sys_sendmsg+0x10/0x10 [ 594.251224][T16609] ? __fget_files+0x2a/0x420 [ 594.251248][T16609] ? __fget_files+0x3a2/0x420 [ 594.251283][T16609] __x64_sys_sendmsg+0x1b1/0x290 [ 594.251307][T16609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 594.251346][T16609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.251367][T16609] do_syscall_64+0x174/0x580 [ 594.251386][T16609] ? trace_irq_disable+0x3b/0x140 [ 594.251410][T16609] ? clear_bhb_loop+0x40/0x90 [ 594.251434][T16609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.251453][T16609] RIP: 0033:0x7fddeaf9e019 [ 594.251471][T16609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.251487][T16609] RSP: 002b:00007fddebe7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 594.251507][T16609] RAX: ffffffffffffffda RBX: 00007fddeb225fa0 RCX: 00007fddeaf9e019 [ 594.251521][T16609] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 594.251536][T16609] RBP: 00007fddebe7a090 R08: 0000000000000000 R09: 0000000000000000 [ 594.251547][T16609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.251558][T16609] R13: 00007fddeb226038 R14: 00007fddeb225fa0 R15: 00007ffddbd71f58 [ 594.251590][T16609] [ 594.252855][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2998'. [ 594.329572][T16040] veth1_vlan: entered promiscuous mode [ 594.598605][T16040] veth0_macvtap: entered promiscuous mode [ 594.624327][T16040] veth1_macvtap: entered promiscuous mode [ 594.687981][T16040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.734955][T16040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.775061][ T9247] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.799582][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3003'. [ 594.811006][ T9247] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.838079][T16626] netlink: 'syz.5.3004': attribute type 3 has an invalid length. [ 594.887117][ T9247] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.895920][ T9247] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.905031][T16626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3004'. [ 594.915013][T16626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3004'. [ 595.336572][T12063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.355617][T12063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.558467][ T9247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.580327][ T9247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.303340][T16649] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3008'. [ 596.561812][T16639] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 596.584200][T16639] syzkaller1: persist disabled [ 596.642445][T16658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3012'. [ 596.674324][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3011'. [ 596.674781][T16658] FAULT_INJECTION: forcing a failure. [ 596.674781][T16658] name failslab, interval 1, probability 0, space 0, times 0 [ 596.738482][T16658] CPU: 0 UID: 0 PID: 16658 Comm: syz.2.3012 Not tainted syzkaller #0 PREEMPT(full) [ 596.738509][T16658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.738519][T16658] Call Trace: [ 596.738527][T16658] [ 596.738535][T16658] dump_stack_lvl+0xe8/0x150 [ 596.738570][T16658] should_fail_ex+0x40c/0x560 [ 596.738602][T16658] should_failslab+0xa8/0x100 [ 596.738634][T16658] __kmalloc_cache_noprof+0xa8/0x660 [ 596.738665][T16658] ? timer_init_key+0x41/0x2c0 [ 596.738692][T16658] ? xfrm_policy_alloc+0x78/0x2b0 [ 596.738824][T16658] ? xfrm_policy_alloc+0x78/0x2b0 [ 596.738861][T16658] xfrm_policy_alloc+0x78/0x2b0 [ 596.738892][T16658] xfrm_policy_construct+0x39/0x6b0 [ 596.738968][T16658] ? __raw_spin_lock_init+0x45/0x100 [ 596.738994][T16658] ? verify_newpolicy_info+0x31b/0x4c0 [ 596.739018][T16658] xfrm_add_acquire+0x3dd/0xdd0 [ 596.739065][T16658] ? __pfx_xfrm_add_acquire+0x10/0x10 [ 596.739090][T16658] ? __nla_parse+0x40/0x60 [ 596.739124][T16658] xfrm_user_rcv_msg+0x7a8/0xf30 [ 596.739153][T16658] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 596.739213][T16658] ? __mutex_trylock_common+0x15f/0x270 [ 596.739239][T16658] ? __pfx___mutex_trylock_common+0x10/0x10 [ 596.739264][T16658] ? rcu_is_watching+0x15/0xb0 [ 596.739284][T16658] ? trace_contention_end+0x3d/0x140 [ 596.739316][T16658] netlink_rcv_skb+0x226/0x4a0 [ 596.739342][T16658] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 596.739365][T16658] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 596.739407][T16658] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.739429][T16658] ? netlink_deliver_tap+0x2e/0x1b0 [ 596.739454][T16658] xfrm_netlink_rcv+0x79/0x90 [ 596.739475][T16658] netlink_unicast+0x7bb/0x940 [ 596.739511][T16658] netlink_sendmsg+0x813/0xb40 [ 596.739546][T16658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.739575][T16658] ? aa_sock_msg_perm+0xf1/0x1b0 [ 596.739605][T16658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.739626][T16658] sock_sendmsg_nosec+0x13a/0x180 [ 596.739665][T16658] ____sys_sendmsg+0x54e/0x850 [ 596.739695][T16658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.739730][T16658] ? import_iovec+0x73/0xa0 [ 596.739754][T16658] ___sys_sendmsg+0x2a5/0x360 [ 596.739774][T16658] ? __lock_acquire+0x683/0x2cf0 [ 596.739807][T16658] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.739859][T16658] ? __fget_files+0x2a/0x420 [ 596.739900][T16658] ? __fget_files+0x2a/0x420 [ 596.739924][T16658] ? __fget_files+0x3a2/0x420 [ 596.739964][T16658] __x64_sys_sendmsg+0x1b1/0x290 [ 596.739991][T16658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 596.740037][T16658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.740060][T16658] do_syscall_64+0x174/0x580 [ 596.740080][T16658] ? trace_irq_disable+0x3b/0x140 [ 596.740105][T16658] ? clear_bhb_loop+0x40/0x90 [ 596.740131][T16658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.740149][T16658] RIP: 0033:0x7f37ffb9e019 [ 596.740168][T16658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.740184][T16658] RSP: 002b:00007f3800a1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.740205][T16658] RAX: ffffffffffffffda RBX: 00007f37ffe25fa0 RCX: 00007f37ffb9e019 [ 596.740218][T16658] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 596.740230][T16658] RBP: 00007f3800a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 596.740241][T16658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.740252][T16658] R13: 00007f37ffe26038 R14: 00007f37ffe25fa0 R15: 00007ffe49f049f8 [ 596.740288][T16658] [ 596.790664][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 597.106310][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.119875][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 597.140748][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 597.151253][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 597.378897][T16673] syzkaller0: entered promiscuous mode [ 597.385301][T16673] syzkaller0: entered allmulticast mode [ 597.719870][ T9245] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.026029][T16704] __nla_validate_parse: 2 callbacks suppressed [ 598.026047][T16704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3025'. [ 598.046883][T16705] sit0: left promiscuous mode [ 598.060090][T16705] netlink: 'syz.5.3024': attribute type 1 has an invalid length. [ 598.071582][T16704] FAULT_INJECTION: forcing a failure. [ 598.071582][T16704] name failslab, interval 1, probability 0, space 0, times 0 [ 598.093126][T16704] CPU: 0 UID: 0 PID: 16704 Comm: syz.3.3025 Not tainted syzkaller #0 PREEMPT(full) [ 598.093152][T16704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 598.093162][T16704] Call Trace: [ 598.093170][T16704] [ 598.093178][T16704] dump_stack_lvl+0xe8/0x150 [ 598.093213][T16704] should_fail_ex+0x40c/0x560 [ 598.093243][T16704] should_failslab+0xa8/0x100 [ 598.093273][T16704] __kmalloc_cache_noprof+0xa8/0x660 [ 598.093301][T16704] ? xfrm_policy_alloc+0x78/0x2b0 [ 598.093328][T16704] ? xfrm_policy_alloc+0x78/0x2b0 [ 598.093362][T16704] xfrm_policy_alloc+0x78/0x2b0 [ 598.093390][T16704] xfrm_policy_construct+0x39/0x6b0 [ 598.093413][T16704] ? __raw_spin_lock_init+0x45/0x100 [ 598.093437][T16704] ? verify_newpolicy_info+0x31b/0x4c0 [ 598.093459][T16704] xfrm_add_acquire+0x3dd/0xdd0 [ 598.093500][T16704] ? __pfx_xfrm_add_acquire+0x10/0x10 [ 598.093523][T16704] ? __nla_parse+0x40/0x60 [ 598.093554][T16704] xfrm_user_rcv_msg+0x7a8/0xf30 [ 598.093580][T16704] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 598.093633][T16704] ? __mutex_trylock_common+0x15f/0x270 [ 598.093658][T16704] ? __pfx___mutex_trylock_common+0x10/0x10 [ 598.093681][T16704] ? rcu_is_watching+0x15/0xb0 [ 598.093701][T16704] ? trace_contention_end+0x3d/0x140 [ 598.093729][T16704] netlink_rcv_skb+0x226/0x4a0 [ 598.093753][T16704] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 598.093775][T16704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.093814][T16704] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.093835][T16704] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.093863][T16704] xfrm_netlink_rcv+0x79/0x90 [ 598.093890][T16704] netlink_unicast+0x7bb/0x940 [ 598.093922][T16704] netlink_sendmsg+0x813/0xb40 [ 598.093954][T16704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.093981][T16704] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.094008][T16704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.094028][T16704] sock_sendmsg_nosec+0x13a/0x180 [ 598.094058][T16704] ____sys_sendmsg+0x54e/0x850 [ 598.094090][T16704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.094121][T16704] ? import_iovec+0x73/0xa0 [ 598.094144][T16704] ___sys_sendmsg+0x2a5/0x360 [ 598.094164][T16704] ? __lock_acquire+0x683/0x2cf0 [ 598.094194][T16704] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.094252][T16704] ? __fget_files+0x2a/0x420 [ 598.094277][T16704] ? __fget_files+0x3a2/0x420 [ 598.094313][T16704] __x64_sys_sendmsg+0x1b1/0x290 [ 598.094335][T16704] ? perf_trace_preemptirq_template+0x26f/0x350 [ 598.094363][T16704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.094402][T16704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.094424][T16704] do_syscall_64+0x174/0x580 [ 598.094446][T16704] ? trace_irq_disable+0x3b/0x140 [ 598.094469][T16704] ? clear_bhb_loop+0x40/0x90 [ 598.094493][T16704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.094512][T16704] RIP: 0033:0x7fddeaf9e019 [ 598.094530][T16704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.094546][T16704] RSP: 002b:00007fddebe7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.094566][T16704] RAX: ffffffffffffffda RBX: 00007fddeb225fa0 RCX: 00007fddeaf9e019 [ 598.094580][T16704] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 598.094592][T16704] RBP: 00007fddebe7a090 R08: 0000000000000000 R09: 0000000000000000 [ 598.094605][T16704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.094616][T16704] R13: 00007fddeb226038 R14: 00007fddeb225fa0 R15: 00007ffddbd71f58 [ 598.094648][T16704] [ 598.577593][ T9245] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.756274][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3028'. [ 598.886773][ T9245] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.956644][T16722] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3031'. [ 598.957279][T16717] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3029'. [ 598.972087][T16663] gretap0 speed is unknown, defaulting to 1000 [ 599.126029][ T9245] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.213177][ T5634] Bluetooth: hci2: command tx timeout [ 599.371544][T16740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3035'. [ 599.967189][T16663] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.978614][T16663] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.993930][T16663] bridge_slave_0: entered allmulticast mode [ 600.008218][T16663] bridge_slave_0: entered promiscuous mode [ 600.025170][T16663] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.032362][T16663] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.039601][T16663] bridge_slave_1: entered allmulticast mode [ 600.047836][T16663] bridge_slave_1: entered promiscuous mode [ 600.361113][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3042'. [ 600.506082][T16663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 600.547182][T16763] netlink: 'syz.5.3043': attribute type 2 has an invalid length. [ 600.592711][T16663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 600.912245][T16763] H: entered promiscuous mode [ 601.032002][T16663] team0: Port device team_slave_0 added [ 601.046392][T16663] team0: Port device team_slave_1 added [ 601.112918][T16663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 601.127266][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.166851][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 601.181928][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 601.191475][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 601.201127][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 601.215000][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.263152][T16663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 601.283237][ T5626] Bluetooth: hci2: command tx timeout [ 601.752672][T16663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.765153][T16663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 601.818304][T16663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.870338][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 601.923929][ T9245] bridge0: port 3(batadv0) entered disabled state [ 601.936329][ T9245] bridge_slave_1: left allmulticast mode [ 601.942299][ T9245] bridge_slave_1: left promiscuous mode [ 601.949139][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.981322][ T9245] bridge_slave_0: left allmulticast mode [ 601.991281][ T9245] bridge_slave_0: left promiscuous mode [ 602.008831][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.126443][T16801] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3048'. [ 602.150496][T16801] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3048'. [ 602.399643][T16809] openvswitch: netlink: IP tunnel attribute has 236 unknown bytes. [ 602.549352][T12063] smbdirect: ib_dev[syz0] removed [ 602.627350][ T9245] team0: Port device geneve1 removed [ 602.731032][ T9245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 602.751986][ T9245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 602.794047][ T9245] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 602.822288][ T9245] bond0 (unregistering): Released all slaves [ 602.981929][T16824] netlink: 260 bytes leftover after parsing attributes in process `syz.1.3054'. [ 603.146329][T12373] gretap0 speed is unknown, defaulting to 1000 [ 603.160055][T12373] infiniband syz0: ib_query_port failed (-19) [ 603.283492][ T5626] Bluetooth: hci1: command tx timeout [ 603.375612][ T5626] Bluetooth: hci2: command tx timeout [ 603.385020][ T9245] H: left promiscuous mode [ 603.809755][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 603.826156][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 603.849107][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 603.870443][T16832] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3055'. [ 603.908594][T16663] hsr_slave_0: entered promiscuous mode [ 603.939005][T16663] hsr_slave_1: entered promiscuous mode [ 603.959194][T16663] debugfs: 'hsr0' already exists in 'hsr' [ 603.974453][T16663] Cannot create hsr debugfs directory [ 604.104231][ T9245] team0: Port device wlan0 removed [ 604.109233][T16844] netlink: 'syz.3.3057': attribute type 21 has an invalid length. [ 604.207122][T16848] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3059'. [ 604.312191][ T9245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.344439][ T9245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.390259][ T9245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.418295][ T9245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.534552][T16866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3063'. [ 604.738514][ T9245] team0 (unregistering): Port device team_slave_1 removed [ 604.766703][ T9245] team0 (unregistering): Port device team_slave_0 removed [ 604.973491][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 605.201254][T16886] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3067'. [ 605.254741][T16886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3067'. [ 605.264230][T16886] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3067'. [ 605.363095][ T5626] Bluetooth: hci1: command tx timeout [ 605.453993][ T5626] Bluetooth: hci2: command tx timeout [ 605.644730][T16898] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3069'. [ 606.094317][T16782] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.101738][T16782] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.109987][T16782] bridge_slave_0: entered allmulticast mode [ 606.118523][T16782] bridge_slave_0: entered promiscuous mode [ 606.128515][T16782] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.136295][T16782] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.144596][T16782] bridge_slave_1: entered allmulticast mode [ 606.152806][T16782] bridge_slave_1: entered promiscuous mode [ 606.216670][T16782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.230451][T16782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.288555][T16782] team0: Port device team_slave_0 added [ 606.301840][T16782] team0: Port device team_slave_1 added [ 606.348550][T16782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.355929][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.384806][T16782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.665491][T16782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.672532][T16782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.780139][T16782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.824046][ T5286] 8021q: adding VLAN 0 to HW filter on device eth7 [ 606.919808][T16935] netlink: 'syz.3.3074': attribute type 1 has an invalid length. [ 607.341203][ T9245] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.442251][T16782] hsr_slave_0: entered promiscuous mode [ 607.449280][T16782] hsr_slave_1: entered promiscuous mode [ 607.456279][T16782] debugfs: 'hsr0' already exists in 'hsr' [ 607.462177][T16782] Cannot create hsr debugfs directory [ 607.546582][ T5626] Bluetooth: hci1: command tx timeout [ 607.682261][ T9245] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.966294][T16963] netlink: 'syz.1.3084': attribute type 10 has an invalid length. [ 608.387977][ T9245] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.492852][T16966] netlink: 'syz.1.3084': attribute type 4 has an invalid length. [ 608.693690][ T9245] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.957687][T16663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 609.009146][T16663] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 609.064903][T16663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 609.131108][T16663] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 609.308591][T16663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 609.335534][T17009] netlink: 'syz.1.3093': attribute type 51 has an invalid length. [ 609.366419][T16663] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 609.481041][T16663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 609.527198][T16663] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 609.603172][ T5634] Bluetooth: hci1: command tx timeout [ 609.932817][ T9245] bridge_slave_1: left allmulticast mode [ 609.946128][ T9245] bridge_slave_1: left promiscuous mode [ 609.958659][ T9245] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.979193][ T9245] bridge_slave_0: left allmulticast mode [ 609.991658][ T9245] bridge_slave_0: left promiscuous mode [ 610.013948][ T9245] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.308153][T17048] netlink: 'syz.1.3100': attribute type 10 has an invalid length. [ 610.332880][T17048] netlink: 'syz.1.3100': attribute type 8 has an invalid length. [ 610.837236][ T9245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.848770][ T9245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.859345][ T9245] bond0 (unregistering): Released all slaves [ 611.056678][T16663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.076039][T17055] __nla_validate_parse: 4 callbacks suppressed [ 611.076057][T17055] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3102'. [ 611.101752][T17055] netlink: 90 bytes leftover after parsing attributes in process `syz.5.3102'. [ 611.155831][T17055] netlink: 90 bytes leftover after parsing attributes in process `syz.5.3102'. [ 611.203533][T17059] bridge_slave_0: Caught tx_queue_len zero misconfig [ 611.371097][T17071] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 611.425970][T16663] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.637083][T17077] netlink: 'syz.5.3107': attribute type 46 has an invalid length. [ 611.662456][T12063] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.669755][T12063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.682118][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3107'. [ 611.809308][T12063] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.816600][T12063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.987545][ T9245] hsr_slave_0: left promiscuous mode [ 612.011555][ T9245] hsr_slave_1: left promiscuous mode [ 612.028820][ T9245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.045125][ T9245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.073361][ T9245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.089499][ T9245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.131773][ T9245] veth1_macvtap: left promiscuous mode [ 612.148526][ T9245] veth0_macvtap: left promiscuous mode [ 612.169273][ T9245] veth1_vlan: left promiscuous mode [ 612.180924][ T9245] veth0_vlan: left promiscuous mode [ 612.230069][T17093] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3110'. [ 612.581470][ T9245] team0 (unregistering): Port device team_slave_1 removed [ 612.615217][ T9245] team0 (unregistering): Port device team_slave_0 removed [ 613.162931][T16663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.467849][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3113'. [ 613.482619][T17116] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3113'. [ 613.657252][T16782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 613.675822][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 613.690245][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3115'. [ 613.708183][T16782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 613.711748][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3115'. [ 613.746545][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.778660][T16782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 613.826836][T17124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3116'. [ 613.827165][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.858133][T16782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 613.880078][T16782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 614.675992][T16782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.735807][T16782] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.750823][ T9245] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.758052][ T9245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.788959][T12064] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.796213][T12064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.958010][T16663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.128022][T17155] syz.3.3123: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 615.145519][T17155] CPU: 0 UID: 0 PID: 17155 Comm: syz.3.3123 Not tainted syzkaller #0 PREEMPT(full) [ 615.145549][T17155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 615.145561][T17155] Call Trace: [ 615.145582][T17155] [ 615.145591][T17155] dump_stack_lvl+0xe8/0x150 [ 615.145629][T17155] warn_alloc+0x24c/0x270 [ 615.145672][T17155] ? stack_depot_save_flags+0x3ec/0x800 [ 615.145817][T17155] ? __pfx_warn_alloc+0x10/0x10 [ 615.145848][T17155] ? kasan_save_track+0x3e/0x80 [ 615.145873][T17155] ? __kasan_kmalloc+0x93/0xb0 [ 615.145902][T17155] ? xsk_setsockopt+0x5e0/0x960 [ 615.146001][T17155] ? do_sock_setsockopt+0x17c/0x1b0 [ 615.146021][T17155] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 615.146040][T17155] ? do_syscall_64+0x174/0x580 [ 615.146061][T17155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.146095][T17155] __vmalloc_node_range_noprof+0x12c/0x1730 [ 615.146164][T17155] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 615.146195][T17155] ? __kasan_kmalloc+0x93/0xb0 [ 615.146223][T17155] ? __kmalloc_cache_noprof+0x32d/0x660 [ 615.146249][T17155] ? __kmalloc_cache_noprof+0x150/0x660 [ 615.146279][T17155] vmalloc_user_noprof+0xad/0xe0 [ 615.146309][T17155] ? xskq_create+0xbf/0x170 [ 615.146330][T17155] xskq_create+0xbf/0x170 [ 615.146369][T17155] xsk_init_queue+0x8a/0xe0 [ 615.146393][T17155] xsk_setsockopt+0x5e0/0x960 [ 615.146420][T17155] ? __fget_files+0x2a/0x420 [ 615.146449][T17155] ? __pfx_xsk_setsockopt+0x10/0x10 [ 615.146477][T17155] ? __pfx_aa_sk_perm+0x10/0x10 [ 615.146502][T17155] ? __fget_files+0x2a/0x420 [ 615.146525][T17155] ? aa_sock_opt_perm+0xff/0x1a0 [ 615.146550][T17155] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 615.146569][T17155] ? __pfx_xsk_setsockopt+0x10/0x10 [ 615.146600][T17155] do_sock_setsockopt+0x17c/0x1b0 [ 615.146628][T17155] __x64_sys_setsockopt+0x13d/0x1b0 [ 615.146652][T17155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.146674][T17155] do_syscall_64+0x174/0x580 [ 615.146699][T17155] ? clear_bhb_loop+0x40/0x90 [ 615.146723][T17155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.146742][T17155] RIP: 0033:0x7fddeaf9e019 [ 615.146762][T17155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.146779][T17155] RSP: 002b:00007fddebe7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 615.146799][T17155] RAX: ffffffffffffffda RBX: 00007fddeb225fa0 RCX: 00007fddeaf9e019 [ 615.146812][T17155] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 615.146824][T17155] RBP: 00007fddeb03500c R08: 0000000000000004 R09: 0000000000000000 [ 615.146836][T17155] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 615.146849][T17155] R13: 00007fddeb226038 R14: 00007fddeb225fa0 R15: 00007ffddbd71f58 [ 615.146888][T17155] [ 615.147850][T17155] Mem-Info: [ 615.173892][T16663] veth0_vlan: entered promiscuous mode [ 615.186557][T17155] active_anon:6271 inactive_anon:0 isolated_anon:0 [ 615.186557][T17155] active_file:0 inactive_file:62410 isolated_file:0 [ 615.186557][T17155] unevictable:768 dirty:373 writeback:0 [ 615.186557][T17155] slab_reclaimable:10805 slab_unreclaimable:95024 [ 615.186557][T17155] mapped:29860 shmem:1297 pagetables:1471 [ 615.186557][T17155] sec_pagetables:0 bounce:0 [ 615.186557][T17155] kernel_misc_reclaimable:0 [ 615.186557][T17155] free:1306625 free_pcp:9997 free_cma:0 [ 615.490304][T17155] Node 0 active_anon:25284kB inactive_anon:0kB active_file:0kB inactive_file:249436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119540kB dirty:1492kB writeback:0kB shmem:3652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13468kB pagetables:5536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 615.524226][T16663] veth1_vlan: entered promiscuous mode [ 615.564605][T17155] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 615.601102][T17155] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 615.670459][T17155] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 615.678135][T16663] veth0_macvtap: entered promiscuous mode [ 615.678912][T17155] Node 0 DMA32 free:1265096kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25284kB inactive_anon:0kB active_file:0kB inactive_file:249436kB unevictable:1536kB writepending:1492kB zspages:0kB present:3129332kB managed:2548600kB mlocked:0kB bounce:0kB free_pcp:38196kB local_pcp:18608kB free_cma:0kB [ 615.698300][T16663] veth1_macvtap: entered promiscuous mode [ 615.732576][T17155] lowmem_reserve[]: 0 0 0 0 0 [ 615.744220][T17155] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 615.792743][T16663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.794977][T17155] lowmem_reserve[]: 0 0 0 0 0 [ 615.805374][T17155] Node 1 Normal free:3945844kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 615.852011][T17155] lowmem_reserve[]: 0 0 0 0 0 [ 615.856997][T17155] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 615.868768][T16663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.874026][T17155] Node 0 DMA32: 469*4kB (ME) 1137*8kB (UME) 1557*16kB (UM) 1109*32kB (UM) 491*64kB (UME) 222*128kB (UME) 104*256kB (UME) 45*512kB (UME) 26*1024kB (UME) 12*2048kB (UME) 252*4096kB (UM) [ 615.901263][ T6699] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.907251][T17155] = 1264268kB [ 615.972380][ T6699] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.980336][T17155] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 616.010222][ T6699] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.035027][ T6699] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.059546][T17155] Node 1 Normal: 5*4kB (UM) 6*8kB (UM) 9*16kB (UM) 5*32kB (UM) 6*64kB (UM) 5*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 961*4096kB (M) = 3945844kB [ 616.121722][T17155] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.190567][T17155] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.225109][T17155] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 616.236517][T17155] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 616.263958][T17155] 63703 total pagecache pages [ 616.268732][T17155] 0 pages in swap cache [ 616.272897][T17155] Free swap = 124996kB [ 616.280999][ T9245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.294546][T17155] Total swap = 124996kB [ 616.305448][T17155] 2097051 pages RAM [ 616.311887][T17155] 0 pages HighMem/MovableOnly [ 616.321365][ T9245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.332767][T17155] 428221 pages reserved [ 616.356541][T17155] 0 pages cma reserved [ 616.421402][ T9251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.440277][T17178] __nla_validate_parse: 1 callbacks suppressed [ 616.440310][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3127'. [ 616.476697][ T9251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.518615][T17178] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3127'. [ 616.633870][T16782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.782394][T16782] veth0_vlan: entered promiscuous mode [ 616.904065][T16782] veth1_vlan: entered promiscuous mode [ 617.030345][T16782] veth0_macvtap: entered promiscuous mode [ 617.060845][T16782] veth1_macvtap: entered promiscuous mode [ 617.139487][T16782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.220192][T16782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.282887][ T6699] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.315048][ T6699] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.349092][ T6699] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.368317][T17214] netlink: 'syz.0.3139': attribute type 10 has an invalid length. [ 617.376684][ T6699] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.438788][T17214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.468778][T17214] team0: Port device netdevsim1 added [ 617.502292][T17214] netlink: 'syz.0.3139': attribute type 10 has an invalid length. [ 617.680069][T17214] team0: Port device netdevsim1 removed [ 617.709463][T17214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 617.740102][T17214] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 617.979925][ T9247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.010516][ T9247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.321762][ T9251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.344872][ T9251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.382475][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 620.398859][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 620.413004][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 620.430806][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 620.447597][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 622.571053][ T5634] Bluetooth: hci5: command tx timeout [ 624.295801][ T5623] team0: Port device syz_tun removed [ 624.405946][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.412359][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.643191][ T5634] Bluetooth: hci5: command tx timeout [ 624.802052][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3164'. [ 625.664581][T17342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3167'. [ 625.872587][T17346] tc_dump_action: action bad kind [ 626.556113][T17373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3176'. [ 626.773020][ T5634] Bluetooth: hci5: command tx timeout [ 626.946465][T17280] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.955622][T17280] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.964719][T17280] bridge_slave_0: entered allmulticast mode [ 626.992919][T17280] bridge_slave_0: entered promiscuous mode [ 627.022806][T17280] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.049729][T17280] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.080401][T17280] bridge_slave_1: entered allmulticast mode [ 627.123400][T17280] bridge_slave_1: entered promiscuous mode [ 627.315912][T17280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 627.342579][T17280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.383846][T17393] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3183'. [ 627.398762][T17393] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 627.447289][T17393] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3183'. [ 627.471903][T17397] netlink: 'syz.5.3184': attribute type 10 has an invalid length. [ 627.493136][T17397] netlink: 3531 bytes leftover after parsing attributes in process `syz.5.3184'. [ 627.510057][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3183'. [ 627.524149][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 627.556050][T17393] batadv0: left promiscuous mode [ 627.638156][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3183'. [ 627.673380][T17403] netlink: 'syz.5.3184': attribute type 21 has an invalid length. [ 627.683831][T17280] team0: Port device team_slave_0 added [ 627.713104][T17403] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3184'. [ 627.722808][T17280] team0: Port device team_slave_1 added [ 627.762000][T17403] netlink: 'syz.5.3184': attribute type 4 has an invalid length. [ 627.770637][T17403] netlink: 'syz.5.3184': attribute type 3 has an invalid length. [ 627.861616][T17280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.871882][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.908110][T17280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.927900][T17280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.935420][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.970162][T17280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.077581][T17280] hsr_slave_0: entered promiscuous mode [ 628.084695][T17280] hsr_slave_1: entered promiscuous mode [ 628.091230][T17280] debugfs: 'hsr0' already exists in 'hsr' [ 628.098883][T17280] Cannot create hsr debugfs directory [ 628.329171][T17424] netlink: 'syz.2.3193': attribute type 61 has an invalid length. [ 628.774654][T17443] nbd: must specify a device to reconfigure [ 628.809666][ T5634] Bluetooth: hci5: command tx timeout [ 629.110962][T17280] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.308526][T17461] netlink: 'syz.0.3201': attribute type 2 has an invalid length. [ 629.434705][T17280] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.693796][T17280] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.813745][T17475] netlink: 'syz.1.3205': attribute type 7 has an invalid length. [ 629.888271][T17475] netlink: 'syz.1.3205': attribute type 8 has an invalid length. [ 629.961023][T17486] netlink: 'syz.0.3209': attribute type 2 has an invalid length. [ 629.977665][T17475] netlink: 'syz.1.3205': attribute type 15 has an invalid length. [ 630.436216][T17280] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 630.478847][T17280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 630.495198][T17499] __nla_validate_parse: 2 callbacks suppressed [ 630.495220][T17499] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3213'. [ 630.497518][T17496] netlink: 184 bytes leftover after parsing attributes in process `syz.1.3210'. [ 630.529646][T17280] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 630.639497][T17280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 630.753094][T17280] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 630.787645][T17280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 630.820304][T17280] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 630.843376][T17280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.095051][T17526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3221'. [ 631.113434][T17529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3220'. [ 631.178436][T17531] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3223'. [ 631.286926][T17531] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3223'. [ 631.826577][T17280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.088345][T17280] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.142498][T12063] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.149823][T12063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.181192][T12068] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.188437][T12068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.712767][T17569] netlink: 300 bytes leftover after parsing attributes in process `syz.5.3233'. [ 633.507679][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3238'. [ 634.014340][T17280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.058779][T17620] validate_nla: 4 callbacks suppressed [ 634.058816][T17620] netlink: 'syz.5.3244': attribute type 21 has an invalid length. [ 634.098373][T17620] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3244'. [ 634.128338][T17620] netlink: 'syz.5.3244': attribute type 4 has an invalid length. [ 634.163595][T17620] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3244'. [ 634.240750][T17280] veth0_vlan: entered promiscuous mode [ 634.268442][T17280] veth1_vlan: entered promiscuous mode [ 634.432457][T17280] veth0_macvtap: entered promiscuous mode [ 634.477527][T17280] veth1_macvtap: entered promiscuous mode [ 634.520703][T17634] netlink: 'syz.2.3249': attribute type 1 has an invalid length. [ 634.549876][T17634] netlink: 'syz.2.3249': attribute type 2 has an invalid length. [ 634.564507][T14523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.599587][T17280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.680192][T17280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.729378][T12066] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.749198][T12066] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.780852][T12066] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.822409][T12066] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.129811][T12068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.150195][T12068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.204869][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.246752][T17655] netlink: 'syz.5.3256': attribute type 21 has an invalid length. [ 635.390352][T17655] netlink: 'syz.5.3256': attribute type 4 has an invalid length. [ 635.622843][T14524] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.104912][T12068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 636.145802][T12068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 636.683257][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.840959][T17683] __nla_validate_parse: 3 callbacks suppressed [ 636.840981][T17683] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3264'. [ 637.203831][T17697] netlink: 'syz.5.3267': attribute type 21 has an invalid length. [ 637.212639][T17697] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3267'. [ 637.223287][T17697] netlink: 'syz.5.3267': attribute type 4 has an invalid length. [ 637.231347][T17697] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3267'. [ 637.600783][T17712] netlink: 'syz.0.3273': attribute type 28 has an invalid length. [ 637.626360][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3273'. [ 637.788581][T17712] openvswitch: netlink: Actions may not be safe on all matching packets [ 637.893737][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.253402][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.825000][T17744] netlink: 'syz.2.3281': attribute type 21 has an invalid length. [ 638.874947][T17744] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3281'. [ 638.917422][T17744] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3281'. [ 639.024474][T14523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.396092][T17765] validate_nla: 1 callbacks suppressed [ 639.396124][T17765] netlink: 'syz.0.3290': attribute type 2 has an invalid length. [ 639.410456][T17765] netlink: 'syz.0.3290': attribute type 8 has an invalid length. [ 639.424984][T17765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3290'. [ 639.743997][T17778] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3293'. [ 639.990429][T17780] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3295'. [ 640.041978][T17786] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3295'. [ 640.233128][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.359599][T17789] IPv6: NLM_F_CREATE should be specified when creating new route [ 640.394018][T17789] IPv6: NLM_F_REPLACE set, but no existing node found! [ 640.417710][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.464006][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.290987][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.299296][T14523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.334875][T14523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.372471][T14523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.558603][T17787] batman_adv: batadv0: Interface deactivated: dummy0 [ 643.635516][T17787] batman_adv: batadv0: Removing interface: dummy0 [ 643.637439][T17793] netlink: 'syz.0.3297': attribute type 21 has an invalid length. [ 643.650319][T17793] __nla_validate_parse: 2 callbacks suppressed [ 643.650350][T17793] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3297'. [ 643.684119][T17793] netlink: 'syz.0.3297': attribute type 4 has an invalid length. [ 643.701069][T17793] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3297'. [ 644.324258][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.408900][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.457172][T14523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.121109][T17840] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3308'. [ 646.491269][T14523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.604542][T17851] netlink: 'syz.5.3311': attribute type 21 has an invalid length. [ 646.633805][T17851] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3311'. [ 646.657825][T17851] netlink: 'syz.5.3311': attribute type 4 has an invalid length. [ 646.710708][T17851] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3311'. [ 647.118132][T17868] FAULT_INJECTION: forcing a failure. [ 647.118132][T17868] name failslab, interval 1, probability 0, space 0, times 0 [ 647.151010][T17868] CPU: 1 UID: 0 PID: 17868 Comm: syz.0.3316 Not tainted syzkaller #0 PREEMPT(full) [ 647.151037][T17868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.151048][T17868] Call Trace: [ 647.151056][T17868] [ 647.151064][T17868] dump_stack_lvl+0xe8/0x150 [ 647.151101][T17868] should_fail_ex+0x40c/0x560 [ 647.151132][T17868] should_failslab+0xa8/0x100 [ 647.151162][T17868] __kmalloc_noprof+0xfe/0x720 [ 647.151187][T17868] ? ktime_get+0x1f5/0x220 [ 647.151212][T17868] ? bpf_test_init+0x9f/0x150 [ 647.151233][T17868] ? bpf_test_init+0x9f/0x150 [ 647.151253][T17868] ? __hrtimer_rearm_deferred+0x99/0x420 [ 647.151278][T17868] bpf_test_init+0x9f/0x150 [ 647.151303][T17868] bpf_prog_test_run_skb+0x31e/0x2230 [ 647.151328][T17868] ? irqentry_exit+0x218/0x8f0 [ 647.151350][T17868] ? lockdep_hardirqs_on+0x7a/0x110 [ 647.151370][T17868] ? irqentry_exit+0x218/0x8f0 [ 647.151388][T17868] ? trace_irq_disable+0x3b/0x140 [ 647.151431][T17868] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 647.151453][T17868] bpf_prog_test_run+0x2c5/0x340 [ 647.151483][T17868] __sys_bpf+0xa22/0xd90 [ 647.151512][T17868] ? send_sig_perf+0x140/0x1e0 [ 647.151532][T17868] ? __pfx___sys_bpf+0x10/0x10 [ 647.151585][T17868] ? __pfx_task_work_run+0x10/0x10 [ 647.151601][T17868] ? ksys_write+0x242/0x270 [ 647.151622][T17868] ? rcu_is_watching+0x15/0xb0 [ 647.151653][T17868] __x64_sys_bpf+0xba/0xd0 [ 647.151676][T17868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.151698][T17868] do_syscall_64+0x174/0x580 [ 647.151719][T17868] ? clear_bhb_loop+0x40/0x90 [ 647.151743][T17868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.151761][T17868] RIP: 0033:0x7fed8219e019 [ 647.151779][T17868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.151796][T17868] RSP: 002b:00007fed803f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.151816][T17868] RAX: ffffffffffffffda RBX: 00007fed82425fa0 RCX: 00007fed8219e019 [ 647.151830][T17868] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 647.151842][T17868] RBP: 00007fed803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 647.151854][T17868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.151865][T17868] R13: 00007fed82426038 R14: 00007fed82425fa0 R15: 00007fff46bdc4b8 [ 647.151896][T17868] [ 647.386310][ T5731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.622317][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.632374][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.085662][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.226999][T17889] netlink: 'syz.2.3323': attribute type 2 has an invalid length. [ 648.287468][T17896] netlink: 'syz.0.3325': attribute type 21 has an invalid length. [ 648.301617][T17896] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3325'. [ 648.314496][T17896] netlink: 'syz.0.3325': attribute type 4 has an invalid length. [ 648.322451][T17896] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3325'. [ 648.650925][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.922579][T17917] netlink: 'syz.0.3330': attribute type 10 has an invalid length. [ 649.003490][T17917] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3330'. [ 649.553581][T17934] FAULT_INJECTION: forcing a failure. [ 649.553581][T17934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.590246][T17934] CPU: 0 UID: 0 PID: 17934 Comm: syz.2.3337 Not tainted syzkaller #0 PREEMPT(full) [ 649.590273][T17934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 649.590284][T17934] Call Trace: [ 649.590291][T17934] [ 649.590299][T17934] dump_stack_lvl+0xe8/0x150 [ 649.590333][T17934] should_fail_ex+0x40c/0x560 [ 649.590361][T17934] _copy_from_user+0x2d/0xb0 [ 649.590381][T17934] bpf_test_init+0xd8/0x150 [ 649.590407][T17934] bpf_prog_test_run_skb+0x31e/0x2230 [ 649.590448][T17934] ? __fget_files+0x3a2/0x420 [ 649.590475][T17934] ? __fget_files+0x2a/0x420 [ 649.590505][T17934] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 649.590527][T17934] bpf_prog_test_run+0x2c5/0x340 [ 649.590559][T17934] __sys_bpf+0xa22/0xd90 [ 649.590591][T17934] ? __pfx___sys_bpf+0x10/0x10 [ 649.590627][T17934] ? __fget_files+0x2a/0x420 [ 649.590669][T17934] ? ksys_write+0x242/0x270 [ 649.590691][T17934] ? __pfx_ksys_write+0x10/0x10 [ 649.590715][T17934] __x64_sys_bpf+0xba/0xd0 [ 649.590738][T17934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.590759][T17934] do_syscall_64+0x174/0x580 [ 649.590779][T17934] ? trace_irq_disable+0x3b/0x140 [ 649.590804][T17934] ? clear_bhb_loop+0x40/0x90 [ 649.590828][T17934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.590846][T17934] RIP: 0033:0x7f1c9e59e019 [ 649.590871][T17934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.590888][T17934] RSP: 002b:00007f1c9f425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 649.590908][T17934] RAX: ffffffffffffffda RBX: 00007f1c9e825fa0 RCX: 00007f1c9e59e019 [ 649.590922][T17934] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 649.590934][T17934] RBP: 00007f1c9f425090 R08: 0000000000000000 R09: 0000000000000000 [ 649.590946][T17934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.590958][T17934] R13: 00007f1c9e826038 R14: 00007f1c9e825fa0 R15: 00007ffc293e1248 [ 649.590989][T17934] [ 649.719868][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.024796][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.045386][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.215309][T17950] netlink: 'syz.2.3341': attribute type 21 has an invalid length. [ 650.223200][T17950] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3341'. [ 650.271925][T17951] FAULT_INJECTION: forcing a failure. [ 650.271925][T17951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 650.312677][T17951] CPU: 0 UID: 0 PID: 17951 Comm: syz.2.3341 Not tainted syzkaller #0 PREEMPT(full) [ 650.312705][T17951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 650.312716][T17951] Call Trace: [ 650.312728][T17951] [ 650.312741][T17951] dump_stack_lvl+0xe8/0x150 [ 650.312798][T17951] should_fail_ex+0x40c/0x560 [ 650.312871][T17951] _copy_from_user+0x2d/0xb0 [ 650.312910][T17951] ___sys_sendmsg+0x1c6/0x360 [ 650.312943][T17951] ? __lock_acquire+0x683/0x2cf0 [ 650.313014][T17951] ? __pfx____sys_sendmsg+0x10/0x10 [ 650.313197][T17951] ? __fget_files+0x2a/0x420 [ 650.313295][T17951] ? __fget_files+0x2a/0x420 [ 650.313334][T17951] ? __fget_files+0x3a2/0x420 [ 650.313435][T17951] __x64_sys_sendmsg+0x1b1/0x290 [ 650.313490][T17951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 650.313638][T17951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.313677][T17951] do_syscall_64+0x174/0x580 [ 650.313720][T17951] ? clear_bhb_loop+0x40/0x90 [ 650.313773][T17951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.313799][T17951] RIP: 0033:0x7f1c9e59e019 [ 650.313830][T17951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.313846][T17951] RSP: 002b:00007f1c9f404028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 650.313864][T17951] RAX: ffffffffffffffda RBX: 00007f1c9e826090 RCX: 00007f1c9e59e019 [ 650.313878][T17951] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000009 [ 650.313890][T17951] RBP: 00007f1c9f404090 R08: 0000000000000000 R09: 0000000000000000 [ 650.313901][T17951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.313912][T17951] R13: 00007f1c9e826128 R14: 00007f1c9e826090 R15: 00007ffc293e1248 [ 650.314038][T17951] [ 650.494026][ T5644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.846049][T14523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.928614][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.980552][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.523292][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.031432][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.498133][T17950] netlink: 'syz.2.3341': attribute type 4 has an invalid length. [ 654.506092][T17950] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3341'. [ 654.694007][T17956] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3342'. [ 654.942246][T17963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3343'. [ 655.069701][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.208644][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.105663][T17975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3351'. [ 656.118460][T14523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.563243][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.951685][ T24] [ 656.954059][ T24] ============================================ [ 656.960201][ T24] WARNING: possible recursive locking detected [ 656.966346][ T24] syzkaller #0 Not tainted [ 656.970761][ T24] -------------------------------------------- [ 656.976900][ T24] kworker/1:0/24 is trying to acquire lock: [ 656.982780][ T24] ffff888054fe0038 (rhashtable_bucket){-.-.}-{0:0}, at: rht_lock+0x8b/0x180 [ 656.991517][ T24] [ 656.991517][ T24] but task is already holding lock: [ 656.998870][ T24] ffff888030264a38 (rhashtable_bucket){-.-.}-{0:0}, at: mem_allocator_disconnect+0x1c9/0xf90 [ 657.009181][ T24] [ 657.009181][ T24] other info that might help us debug this: [ 657.017337][ T24] Possible unsafe locking scenario: [ 657.017337][ T24] [ 657.024785][ T24] CPU0 [ 657.028057][ T24] ---- [ 657.031328][ T24] lock(rhashtable_bucket); [ 657.035917][ T24] lock(rhashtable_bucket); [ 657.040503][ T24] [ 657.040503][ T24] *** DEADLOCK *** [ 657.040503][ T24] [ 657.048651][ T24] May be due to missing lock nesting notation [ 657.048651][ T24] [ 657.056977][ T24] 9 locks held by kworker/1:0/24: [ 657.061998][ T24] #0: ffff88801b02b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 657.072995][ T24] #1: ffffc900001e7c40 ((work_completion)(&(&pool->release_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 657.086067][ T24] #2: ffffffff9003b920 (mem_id_lock){+.+.}-{4:4}, at: mem_allocator_disconnect+0xc0/0xf90 [ 657.096178][ T24] #3: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rhashtable_walk_start_check+0x64/0xcf0 [ 657.106632][ T24] #4: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: mem_allocator_disconnect+0x1c9/0xf90 [ 657.116909][ T24] #5: ffff888030264a38 (rhashtable_bucket){-.-.}-{0:0}, at: mem_allocator_disconnect+0x1c9/0xf90 [ 657.127534][ T24] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: trace_call_bpf+0xb6/0xb80 [ 657.136849][ T24] #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rhtab_map_delete_elem+0x21/0x190 [ 657.146783][ T24] #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: rhtab_delete_elem+0x15c/0x1b30 [ 657.156532][ T24] [ 657.156532][ T24] stack backtrace: [ 657.162447][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted syzkaller #0 PREEMPT(full) [ 657.162470][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 657.162497][ T24] Workqueue: events page_pool_release_retry [ 657.162642][ T24] Call Trace: [ 657.162652][ T24] [ 657.162669][ T24] dump_stack_lvl+0xe8/0x150 [ 657.162697][ T24] print_deadlock_bug+0x279/0x290 [ 657.162718][ T24] __lock_acquire+0x24df/0x2cf0 [ 657.162749][ T24] ? __lock_acquire+0x683/0x2cf0 [ 657.162771][ T24] ? perf_swevent_get_recursion_context+0xa5/0x100 [ 657.162793][ T24] ? perf_trace_buf_alloc+0x11b/0x280 [ 657.162819][ T24] ? rht_lock+0x8b/0x180 [ 657.162833][ T24] lock_acquire+0x106/0x350 [ 657.162855][ T24] ? rht_lock+0x8b/0x180 [ 657.162874][ T24] ? rhtab_delete_elem+0x15c/0x1b30 [ 657.162898][ T24] rht_lock+0xa3/0x180 [ 657.162912][ T24] ? rht_lock+0x8b/0x180 [ 657.162930][ T24] rhtab_delete_elem+0x404/0x1b30 [ 657.162948][ T24] ? rhtab_lookup_elem+0x29/0xd90 [ 657.162968][ T24] ? rhtab_delete_elem+0x15c/0x1b30 [ 657.162985][ T24] ? rhtab_map_delete_elem+0x21/0x190 [ 657.163008][ T24] ? rhtab_map_delete_elem+0x21/0x190 [ 657.163033][ T24] rhtab_map_delete_elem+0xe2/0x190 [ 657.163058][ T24] bpf_prog_a4f1e23443ac9f8e+0x4e/0x56 [ 657.163077][ T24] trace_call_bpf+0x3f0/0xb80 [ 657.163093][ T24] ? trace_call_bpf+0xb6/0xb80 [ 657.163114][ T24] ? __pfx_trace_call_bpf+0x10/0x10 [ 657.163140][ T24] perf_trace_run_bpf_submit+0x78/0x170 [ 657.163163][ T24] perf_trace_lock+0x32d/0x410 [ 657.163196][ T24] ? __pfx_perf_trace_lock+0x10/0x10 [ 657.163222][ T24] ? mem_allocator_disconnect+0x1c9/0xf90 [ 657.163244][ T24] ? lock_acquire+0x106/0x350 [ 657.163266][ T24] ? mem_allocator_disconnect+0x1c9/0xf90 [ 657.163289][ T24] ? mem_allocator_disconnect+0x1c9/0xf90 [ 657.163310][ T24] ? mem_allocator_disconnect+0x1c9/0xf90 [ 657.163331][ T24] lock_release+0x38e/0x3c0 [ 657.163360][ T24] mem_allocator_disconnect+0x976/0xf90 [ 657.163386][ T24] ? mem_allocator_disconnect+0x1c9/0xf90 [ 657.163415][ T24] ? __pfx_mem_allocator_disconnect+0x10/0x10 [ 657.163446][ T24] ? __local_bh_enable_ip+0xd0/0x130 [ 657.163469][ T24] ? __pfx_mem_allocator_disconnect+0x10/0x10 [ 657.163491][ T24] page_pool_release+0xbdc/0xd70 [ 657.163526][ T24] ? __pfx_page_pool_release+0x10/0x10 [ 657.163551][ T24] ? process_scheduled_works+0xa20/0x14e0 [ 657.163576][ T24] ? process_scheduled_works+0xa20/0x14e0 [ 657.163596][ T24] page_pool_release_retry+0x1f/0x270 [ 657.163620][ T24] ? process_scheduled_works+0xa20/0x14e0 [ 657.163640][ T24] process_scheduled_works+0xa8e/0x14e0 [ 657.163690][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 657.163716][ T24] ? assign_work+0x3cf/0x5d0 [ 657.163740][ T24] worker_thread+0xa47/0xfb0 [ 657.163786][ T24] kthread+0x388/0x470 [ 657.163811][ T24] ? __pfx_worker_thread+0x10/0x10 [ 657.163829][ T24] ? __pfx_kthread+0x10/0x10 [ 657.163854][ T24] ret_from_fork+0x514/0xb70 [ 657.163883][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 657.163907][ T24] ? __switch_to+0xc89/0x1420 [ 657.163931][ T24] ? __pfx_kthread+0x10/0x10 [ 657.163955][ T24] ret_from_fork_asm+0x1a/0x30 [ 657.163987][ T24] [ 657.758831][T14525] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.881886][T18001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.890702][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.899454][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.908575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.917675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.926837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.936140][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.095706][T18004] netlink: 'syz.2.3360': attribute type 39 has an invalid length. [ 658.633392][T18004] hsr_slave_0: left promiscuous mode [ 658.708706][T18004] hsr_slave_1: left promiscuous mode [ 661.122974][ C0] net_ratelimit: 35006 callbacks suppressed [ 661.122992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.137289][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.145526][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.153863][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.162062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.170311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.178568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.186814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.195050][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.203294][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.133000][ C0] net_ratelimit: 69916 callbacks suppressed [ 666.133020][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.147207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.155455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.163777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.171985][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.180225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.188469][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.196764][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.205006][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.213255][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog