last executing test programs:

1m18.653482492s ago: executing program 4 (id=1357):
socket$netlink(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11cad, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_config_ext={0x9, 0x3}, 0x1000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x40000000}, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r4 = socket$kcm(0x10, 0x3, 0x10)
recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000000)
perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x48)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000001, 0xac49}, 0x2002, 0x0, 0xa65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@cgroup=r2, r3, 0x27, 0x1, r2, @void, @value=r3}, 0x20)
r7 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000007142c582cbd7000fcdbdf2509000200737a310000000008000100010000000900020073797a302da30a425fed64882348221c88"], 0x38}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4008004)
socket$kcm(0x2, 0x922000000001, 0x106)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x10024, 0x2, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111d0000000020006009500"/32], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r8 = gettid()
write$cgroup_pid(r2, &(0x7f00000001c0)=r8, 0x12)
write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[], 0x8)

1m17.591050508s ago: executing program 4 (id=1367):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r4, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b04c84e21020af32c6e0a0675f800250002500100000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m15.201974129s ago: executing program 4 (id=1372):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0), 0x4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2101, 0xc36d43c917a627e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x100904, 0x0, 0x0, 0x6}, 0x0, 0x10, 0xffffffffffffffff, 0x2) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) (async)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300)}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e0028000f00000002800000121f", 0x2e}], 0x1}, 0x20) (async)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040001000400000012000000000000e5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0)
sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) (async)
r6 = socket$kcm(0x29, 0x7, 0x0) (async, rerun: 32)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300) (async, rerun: 32)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x1d, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0xffffffed}], 0x1, 0x0, 0x3298}, 0x0) (async, rerun: 32)
close(r9) (async, rerun: 32)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r10, &(0x7f0000000440)="59d6d06a24f9a37d817af88abf23561cf7f9bac033b366d8e9dcf73afec6582ed6661b855a5cc674a1dd166e4b7395d1741d3c9ff60e3cea9690ba935f6a12d59d9ea46f1baa90924f96d67db728a83bda4ae8ea5a42e77be6caef9c9bcf5cc6a4d68421f83be38a76d8305748bdb8319acb3c455ed928a8314c06e1fac59673d503a0432b91fda3f325f014292c12e72982b8a95bd4a9d725c09cfa2cb32fc7e463b8e9f31e"}, 0x20)
setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) (async)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001a0081044e81f782db4cb904fd1d0800fe007cfe55a115001d000200142603600e12080005007a010401a8001600200003400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e282125ce831b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5f096eb2e027bb1d6089b807d87b31c7a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9", 0xd8}], 0x1}, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000140)={<r12=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000180)={r6}) (async)
close(r7) (async)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1m14.799048977s ago: executing program 4 (id=1376):
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400000]}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x20008040)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020605000000000000000000070000000c09078008001140000000000500010006000000050005000200000005000400000000000900020073797a31bc2cd20000000014000300686173683a69702c706f72742c5f5b769e6a8e0b518a7e8b07aa9ff2737ff9f24b5b726b4c8af760e000e2c149c1b436b230f6f2349a99f40aca73009173ca8e4f0a9c4ffe9f717b8e77d1d0ff530cc96c165b7228e73f8017a5c88ecc8ca51743f3dc1ab4d1ee7432c63568f7868d23d5311fbbb4e2614c241b3c7a4e732550383a4b78c6d43f37fde1a0b032e59fa5a41b61b415d59a1827cf1fbaf0bf36fd1576e2959b724a0afaba0d37bd8dee687fe4ecd0f66cce43bde336f4e25282e2601bea90928050ff76b7b2be60468527726394c9a9e508b2bcb5dacd3252f23ec85b7f39db06a38500d501cc682c63077b5101"], 0x58}}, 0x20004000)
write$cgroup_pid(r4, 0x0, 0x3e80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="dbaa00fe4000000071101d000000000095000000000000008ae23bd5b8f269b707bff3a723f68ee1a025a3e44c46591a979cdc71a36508e0bb8268cae20dbf7e3c40df9f706c9dc7e0703749d403f0c40a823e74f77e414b00d6e60693d11898c7878bc6eb26217daf30b0a14152e50aa82771359f4097d479f406347d5940a1ed7de51f83f1d8fd2f5e83d2e8e6807716ee0e2aa2fc785f361278b12c8ce51e807783392d3d15a7c5"], &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94)

1m13.933900522s ago: executing program 4 (id=1383):
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)}], 0x2}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080))

1m12.471791684s ago: executing program 4 (id=1391):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000300000000fc0200000000000000000000000000003c000a1b"], 0xec}}, 0x0)

1m12.124654685s ago: executing program 32 (id=1391):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="ec00000021000100fcffffff000000000a010101000000000000000000000000fc02000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00001000000000009c00110000000000000000000000ffffac1414aaff0100000000000000000000000000010a010102000000000000000300000000fc0200000000000000000000000000003c000a1b"], 0xec}}, 0x0)

6.997678128s ago: executing program 2 (id=1856):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = gettid()
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001640))
sendmsg$nl_generic(r0, &(0x7f0000001600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000015c0)={&(0x7f0000004000)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="2fa0249c7b1c46427deec2e73c46792a0665ad650239aef94e30b7d0d688cf5191f8a1023e95fcbcc9114e9a7f3079aba1fcfefbc3ae0608d2aea395029d4490170ccda6bfc630c32a24c3e5f55e0f991b2bcc0cfa987baf5cef29ae7fde7fd5b3e2dc1f937f5187bb3c22057ffcbc78c3a5c77ac838d5e995228e4e3c2ac58efd54b057fca5d841ad03251529307ed01ef396b7b0eeaebe12e961b0362ce29ee982d6b97dbefe0c0000b0b92aab4d6e580f26f0bdbf87d3f4989ea02deb78156551a35b831882fe0336a838de833e0fcabeca6d7d578b1903610604005e701e3977961b20b2a014f9e86570359473b1d36721b58e27e6c8b57e0fd3521194eb266442c7665f6103bcc508b18f9b1c5427bbf494688e52ce4153107812392e74b80cc3829f45a5eb36e01ba2969122e661b76613be232290e353e3b13ee6a1fc34eae172f66dbb1a5b2e8c56f65687ab081f00a0a9291342ba17c12012f2ffdfcbeea784b41f6b38726c086f5f1487f67739c278df074bf88a24807b3cf38807abc7de936b80e7abf2ba48c6f760e3b4c3db9dddc6225b4e5a39c81f4de7950b235717cdae22b883db36b4c802d6c0cd2f865e309a790892a3c186a72ee9c3a7770bcfbd920067af857e3a5f286a60bd8d15cd4d56e9a57a219b635b445264087f85a4397de4a218255ea1996e47a225a5b1c14c9b734f63917e27a98cec574ad18ba5705c62d38da44e79097ca9c826658f2a08a7bc05c89a45503a2aef40de3c898392c9cb368a0b1ad216ea222742e7fd16281a2b4aafefe86d14034f2e8985dc4dc5682c2483bfd3abac23092b304672e1c682ca476a668acfb1f37172ceee860ec387e6708d6cc17d6f86142caed91a1f5f558ba83b890364aa729eaa84b3414b11125f38c4a42b207f7600a18f0f7d7681296e1d2b3c09c7166cb7271478ee0060c202ab1e44b848613a79b3a206bcd2c62a9e4b6603bab5897be5b2df61aed8e5ecd69b0e129f7dfe6ad4b13d70afe1b852b58eb5ebaf43c85c7d1bb8ba33ee0ffa590ebba35219347a37ec1cb86e33624b6646534e51413f83f11e5ba264b0ce91ef23088e3ccc95029b13470791137864f40073bb8fc68f6ece4d23aa7e12280bdd643da71e835f05e8b9ad5b93159c952bd13b8b6a8af05061b8426399a52b210291bbe4835b1fe76a71e317acc2167be63cf8d5d16896d2874bf296a6d3e48347d2f8f902483b6e0fc69a89e21a7752dab4b1e07d398fa8b488e5bb9d9cbea5fa77df1ba5a6fb3b94840c3b1954093435f01b1887dc5e6518fdd679f1ef6cefe489785ac85fbd6df4623034798ea98ad645653505d95a543a597f91ad4187e595d7bdd20c2a159e03dc2a192327b8ec38cf2532931bbaf2f3db5c054f434c393960817034763b294032de945710b53156a869f46b71671b10430c73cf3be28404ea2289031a431643be4de201944a479a82c7ca15e3fa7ec5438b53d74ea579cba485f1f6eeeff9cf8bda3977cb6912b05786d80b7ac7b169f03833ffcd92803843f69a2c04f838f2875df424e6409e716622390b2de80c3eb4426fbd1c1e784e74e0464fdbe5409aaeb182c1ae7ba089106d3d4a3d732aafee02240c75e4428864bfcbb39424b1d0f76fe2d2c5b6e9efaa66c789b9a94a6a1e0ae888debd3659b8afefc3330068914843495bb87136364ff003297a522fdfc250b6423c168ffa63b227b3745f6f80e93299b00c97128ed060c137b69cb449878f6b64343a1724fd7350531292ba9482ebd97bd16cba57659c8a374ae2f25054aacc94b8d3b7dd74ed213dcdace0ceb249c946956581d06aeddc3f8d9529c8231ffcbae68121e2a8946647144ece3003b43b3590a05b07818f3535be4b6c1487460e2786c6c3216bfbd8f23ff4ff9a85a9a6666218f9c78b9248db6c87e9574e2ac1a4f27830c27af45e05a02f842086bcd48236811378c22f6f0cde4ab38dbd583094eab95905c7b88bc1a9425ce45c4a9539a90a0f13c4f02956a4e48669125a0987fde7b87aaa8eea23a9a114bb4d36b7aa9e59a372518e8158590588b483dfea1c3f3cb9092f49f24c64e962f57a4c33d0b98ef044ac442f60421d14f765a5d0356fb192896dec066732f1313955c2a8bf6e696f074015fa2db278aab86afcdcc8e8c05144d0bf65eaf5b7d7558088235b3e43a9fd43aaf2fa9722e63a4d44f70acd7bfb588e3df907552b9805f23c432372d3b9f008db2782020641aa8c09037e81cadabb88f1c3ab71e88b9ef31b9e1fdcb81c6c8b6066495a5a0442a6f978e249e61de3e91495621f82cba8a4302b56ee3a13b289440942001ff4c7abda932228af4db7feb4255efcd81a3f68f6cffcfdfd6ab18ba0c305895bac4d1d904a62cc2a42530a5e1d2d4fddd70ec7077ff0c89b591e9de499170bb5e0c8febdf4d4c917a8185397de5c3d99a0366506a09898e0c5c9766c932fbf8e9851f79e58a8b4fc17550478f8c485f4ed0b66477795ec59a13cf03476c0117d5b50433d4b867da5c227b730d82d2d1a09f3fbb357953a1ef7a134d3e9df3c259799a637cb6071cd3e0daf6a5d675a06a2d06de7f403a1df09ccb94f75b0a309741f945da1785d8af8b663582f3a14bd9bc4956584d4eb3c21405813290e8e6439e049bfb056f294969159ac9d33f53b29b78c6f400e48cab787d1c55322f8494beec7a1eb12d7101cbb47f08c1e91cf4ff87ce60f24c383b7ce4733e9e4aa68eca285761e56c2c01ed6ac639203fa88f532f6c4f6ac7bc5f1cde5523a8ab53834253889ab7269f95dd313fcea3a478fd56685d2402a55dd8f6a48c2a4bda7f0265d8e969b8a52f1e58c82022d3d721c73f59b8dd802b3c410dc462dce9ca90c5d006570cf747da4d44ccadb581f612538a986fbe8eae0211813b638883133b6ce8dd2e6d096d1f32826ea26204dc89f1a12e5da0885ee6212eb51dfcba0856efe08753d1c63b5336977b8bfb7a8a1d542cae23d1d10e1cd9139cb5e86e1b3be7505c0722e6c953d80f1ffbdfd1fc665b9ba686c1bee9a9b91d93c4ba73555dc7577fb837a0d89442245c5cbcda84e914f3d2a0bc45ee6900025976f728e24d37adc01806591ee9d3f40c00bde5bcd3507dfbe2395fa0edf2caa3612aded5dffcb9c2b6ea6409398a8dae27ab5590d80e1d95664df9aac7cabe7171d3feb5a3b57814119f569daa2958e1e6e21a095c12f8e545e929987bca2702d4508b6981f699085e5f0a42cf5171a3a635b1d7a801a2507e560980fd6c3713064f363d542ee37677bcfb20188396bab9495c6cbd3ed3494727e697696bd9f927e56e0dc60f012b13e82bd8106b716634aa3519472796550ecd309bc57705aab2f7fc925fd2586072dc49ab5a4f54869a48cb4fcbdb271b91707688b8cdeb5c5e89d3a445efe60f134cc8dbcd9a940449ab3013bf8ace25ef0871ced9310db953b7b71b2c2b0e39bcb8322e8df47647ec6a9864bbf970f41865571ce10dd9753ea1a6cbf0615509f6e7a888ea5708656d346a22887b7570c6b7cef0a4a207aa0369dada2586ea97a4277b7abc937f2d7a33bd1baaa34d467503db8ed9271ddc20753cb098263b50572b4555aa6934fd4c048033f8e515f547c926c6a1ec3fd6d74ee1156aea653aeb357c9916da9d66d1a9f3af3aaa87309a7a5258f91f2812e50513cb6f2317cca2ffdd15a5c233fa1c0bbc9fc4f568ca08940368191e2fd4431e74c5df273dfd5206151ad90a33a35044ee1ef5ea6ac81f017a4bbcdb7ab81f1d6bf6aca4a845789add85cb4b2c9dbe53666da5f71e43af9b9bbefcec4fb200f3a386f3a0122207b543d50570ac99b4ce41c46f48c9321b9db65ef791812c304a75d45c0c5588270f2ea8e4f02dd55510ae1d278c17ebcbb5c14241f7eadd2fe089b7e9dfeb2db877906332d90e6456ddeeb3ef19699b43fa05e48abeece6249325fa434863554cde22c562cd232e8a0622001106221d89b6dc3348750c96181ada6020b2a7dcefbbc250513f8a67722cefc913788fdb88e4e04453d54c1f3ad05f9764b2bea8dfe1180c7251f10f04ff0e7fde68086da5dc9848dfdcd5185aa7754e865e0db71912e6d2c99ac1d61a04f61cd78187ac436b971277102d39f28682323dd950d2750a2182df538634017b8a19358ffdff6d6f2246f1a53454832c512c7ca712223bdb63bc1a7e42745c360cfabe99f520ff3841194c0b1b6f81a160a196c7a94c0e5549109e5c281b64fb8a31af7327e6f89d97e776d04c7c6f38c4e3fd1d8b3b2894819edcd60c24785ff44942b805da362a3679a43082522c0de90aeefd532653862883d8f106d950bcf7d1f3c44c8bbaa1eb03c34c4261c020d2227176101905223fb68a50da79da724d52eb96237e84beac770268d99dc15d0715400e0023f3046f9ce7d302b642f7ec0a4aa1f933bcbb7fe123902e118431bfa69619b86f98fb2232b214ca111ceadb6e239c5345703fd988bef96199250b1a61074ccc62e1cff4aded14870ee3e635bcecc519fb5cd7532aa207766b392536e93c5d4c90ff3a74d809359f40603fbc2621d5611ac63f338cda4a528592c10bec21ec87473704432a137fbe6bb47fc0568c019fb84d889105ec19044738d0f236e657b89081d6235322937e0adfc5966adb0b512ad6c4438e7b1c880d282be6f7f964ea0d8f7a0f3bea50ca37206dd25853b83f6eb409d520255a2d3713c69153ee594c638ae95ad003e121a7826e4e09ae8951ebced67471be752dfa5a643a2732c6c3ebe62521ef4000cd207bb000f63eb999542df8e8ea5bd4c9275968e22f52adf74611df70e2be56beb827b631d0bcb8274216652e7aa7beaae23be75afc10db69330132903ac84960e3c604c43dd987184557c21458833923c1df438d9a7f9b6df9ec64e3d58c93167b6a47a5155144bae27d878354b4de4df9f7d57e32742f8c8a2dad11fd179c106c9a88dde36da998daa2ce16ca4a40b9a0f236a20e3fece414c27f1b7059724d15b2b2ea27b6d44725ffb41d24f856f7f12730f21311fd3d8d063a706dfccd90d44325269591ee85d945d0834b46f5c05be8810f791ffcf43dc3fd2a737c5d659232ae0830c70640350122d0c1a0406d80e047523b1739b48a7050655157baa9a65a5ebd8cef3890fa161c9ec62fd252e93e54baeff381dfecda467cb1eb52ae19e4414ae5e39f39b1e7fce3342f00c88ee909d8b346ccd13c74461bb8cb82388564793a36924449fde1bda9929391e72230dd2a143be9ab0b49b75efc3b85ff76b9bb5dc83c68df1aa55c561775aab4aaad19ee3b2f19a443dd9fba35698eff5ad4c343a1dec774fcca0735d0f679353577a4f9d5202a1c7aaaa76c03dec14fad9727f39ec349d830ec2599bd77cfdd863ae9ac267503754660649c265a97a75820e35713e88317f3cc39c74ab84f5323a55f1148822925bced98faa6caf56174cbb8d79b7abfb541b66503068c8094ae6324e4ee888fa6c21b3485f3651e4b4d5676b23d4668648b4ec3dee07ddfc7d1d23156a6e1c946207415587926fa19735700bd1e9822f093f6b899c1e07595293f3002c49b32dce72550b85aed2703873ca8a8a002f8c7da3df97c82e9aea06cfd66303013039cf9a350c252d241c358cdd54dd90432a1aac104ad48dfabeaa07633aee0fa164f147e2462ec50eeea9af3566bbaa90c0a61f404712b422fcf647d480a763f6a31fe2a575cfb4a3bd2d35c387f643ccf0fff3d02832ee124c2633a3133c4a5d00b26508e3b37cdd00efd7b3fe5e2cdf3b95104a891af3daf25db43650d45a0ee36dee6c8bbedbc73327ef21b03d87af45344e784a653ab7db707785ec477b0d1d55c78d99647515d5cabc2dfa5968628598e5a5d1f727e4889c42a83f56ac5cf31cbae0eb40b06f8d6e88577a28bf0f7609f6ee745f1f45679dd0b9c60c4912122e2ff81aacc6fe8a66c3f8f6513e77bf48d3782d198a24f621ac0f13318f0684a2f84e79fc6e1972b8fa59e50465cb1d9bccbf649f0b79d21c6ea9dc2182f80f48d0d7f2e919a2a81de4fafe596eddd5a7e1546b34be639923157c482d000c4c4d5e42c99d5947c5651b8c735ec23d8fcc59001899dd864401ebd0743b92b8bbb3b753c793cda3efcfecc095be770d11528e851bc1b2e171f73c382882922d0040366628140f4a2b861d74cd6bf2d581c0e2382a65852a90e85ae8fe6f8320637223d8b9f0c7a51509fb0ad5a8f4d2c566fd130fd73d1af3816160b125eb41601b53055d55c72473277b1a49d09ea1af122595a18415901bb348024fb9e3b94d05c01aadbf1f48cc0de27299427af6384201df154d73eebd64170486d7f59ab82c0380f547cb883258c81ecdf48b80f4cb97208384e1d58ebbed46ba52af0b6d579a10164abc9f9eb21c8c0400c6800400b7801400b50000000000000000000000ffffac1414aa5900cb80bdfabbd0df40ae047ebcd368c30227558d8c4ef63327afa45ff601055a533f189c74c471e8472da2cdf9cfa2d27512f459621e5be4cad2e91318ed4d984b517485f6579b490800af00b275a5160186d488aa09c97b2c01cb45efc02acc2a2e9a63091725d8f7bcd5253afeb57d3252d620a398c1bce37ed3edc7128a02c04d57d2f58b4e81f31f2291cb1769b17f0958db2ea093f18e2e07fe1c32d479b546c9fb34e61a022301c0319fcc2b5d90d477a4171f4df3e868d9311fbc6d64845e2b1b169179068fa9894a5026655f71a76c96e14bb824f49f26a424240c2c39e1c3ea0e3935e0bc1efa633d42fcf41e74415354688437510d5a0a423879c11de933e7ff08adeee8181fe1ff76c69afe1eb3f5b13ea4729c3664fc59396b1df3f1f99726fa3a9908960b556c955e4fa915013c752ecfae3e", @ANYRES32=r2, @ANYBLOB="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"], 0x1478}, 0x1, 0x0, 0x0, 0x4}, 0x80)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110b000000000006301340000006f364a13090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000002c00)=ANY=[], 0x11c4}, 0x1, 0x0, 0x0, 0x24004000}, 0x200008c0)
ioctl$TUNSETLINK(r4, 0x400454cd, 0x3)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200202, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x100c0)
r7 = perf_event_open$cgroup(&(0x7f00000002c0)={0x2, 0x80, 0x8, 0x4d, 0x1, 0xf5, 0x0, 0xc59, 0x4, 0xd, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x70, 0x7}, 0x204, 0x4, 0x200, 0x2, 0x3, 0x32, 0xfff8, 0x0, 0x3}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x2)
ioctl$PERF_EVENT_IOC_RESET(r7, 0x2403, 0x401)
openat$tun(0xffffffffffffff9c, 0x0, 0x7e7483, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x2, 0x1, 0x100, &(0x7f0000000440))
getpid()
ioctl$TUNGETVNETBE(r4, 0x800454df, &(0x7f0000000340))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.events\x00', 0x26e1, 0x0)

6.592667461s ago: executing program 2 (id=1862):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, 0x2b, 0xb, 0x20000000, 0x0, {0x7}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xe8, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r1 = socket$kcm(0x1e, 0x4, 0x0)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x28, 0x1, 0x28, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}}, 0x8020)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84d23c44d09305222fd3a0ec4be3e563112f0b39bd87afe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6ee82a73b787046b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b4000000000000072c57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced91180604b6dd2499d16d7d9158ffffffff00000000d6069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c1c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000022000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69f865ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9c42b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5c97947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd878e0b3bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fadb85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ff0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c2ed8a8e1538560f2be7d4cca6539277505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47e00000000000000000000000000000002928efeae918fc0a8169a3c965af4a789e5d8f5a51d00d9deb18086071556a0a4d1c562f721450807b770449f6affc91e7f9dbe0ec29c1bf00632ec723262c665af7c56a8538bb99a5b9733a34ef2bb36a2cb72c7bc7052f89809a375825cc4cb42837e07df102dc16a4e422ab0f8865a26cdd4597aca429d7f1ae655de15ad84ff77589ea56ca53190dc65c9ea21c375c2659c854ae12d16ccbd84753230dc8ed63ef4e245ef42884485811f26dcd1c40a193bbbf39931afa4d8c6b9202b4bc15d20cf20608fb81b70180e6c754b4f771b0a3bdf5c22d8d15bd518bbf4ee73a54786cb6d353a360677ac"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x18000000000002a0, 0xe80, 0x5a1c2b02, &(0x7f0000000100)="b9ff03316844268cb89e14f008004cfe050000000000002f77fbac141416e000030a9407050000000000000010e0845013f2325f003909050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff0a000000b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0x1000002, 0x60000000, 0x0, 0xffffff3e, &(0x7f0000000080)="8e6038dd27192ee698b199c3e601baa39da28eb8d9519c02006096f73355b9b8ce652686eece79570000000000000700000000a980000000000000000000568891a7b5d243b7320000000000000010c833f797e0ae329e2d0139789fb0941900006374b7f3d1f2f7c2223141913e", &(0x7f0000000000), 0x0, 0x0, 0x1}, 0x2c)

2.996051105s ago: executing program 2 (id=1874):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0100001600010029bd7000fedbdf25e00000010000000000000000000000007f0000010000000000000000000000004e2200004e2047060000003002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="64010102000000000000000000000000000004d233000000e0000001000000000000000000000800070000000000000008000000000000000400000000000000ffffffff00000000000000000000000040340000000000000300000000000000d73b000000000000ffffffffffffffff0500000000000000010000800000000001800000000000000000000400000000000000002abd7000000000000a00040412000000e900000000000000931a0000050019002b0000002c001300fc"], 0x12c}, 0x1, 0x0, 0x0, 0x24000090}, 0x0)

2.535699279s ago: executing program 0 (id=1875):
perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x56, 0x1, 0x10, 0x0, 0x0, 0x1000, 0x42640, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0xfffffffffffffffe, 0xb}, 0x14185, 0x20032, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000200), 0x8}, 0x1, 0x33b, 0x3, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x19a7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x1, @perf_config_ext={0x407fff, 0x8}, 0x1012d, 0x2e, 0x6, 0x3, 0x2, 0x100, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="2d667265657a65722023bec8b1282873048f4c46b081d807b391bfe2ea8438607454908dd64465cce5a7ecc7888edcd0d602dac682d82d4220f26fddc626169f6bbcdb6581713fb28cebae7275c9b34ef6e1283a639e659ec7d1ca1e5cb57185bc37878c9e248b25643cac069cca12220188ec7975406e18baabed2efc4c488d736cba2b5dc8594815fa38b720f1a7a2876d0000000000000000"], 0x9)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async)
r2 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffe, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xf}}, 0x80, 0x0, 0x64, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000363385d119e0d9809ef6ff7f9b31b732bfd9362f59478615110ce36474863281b619bc4a8b98d435ceaed91cbae9151369ee201ecabab92f0bca7abc77cf99adce6e8552f57ffb622b90ed5d7381be1fa7fd9b10fba4e49c2690c6e31cd29afe1fcd2e365bc29c80ea5a407e75d908866f7bad501dceffded9fa667c25e7cc290f44d3b9911920dd1abef5dca4a344f335549a97792ade4440b46b85a21a8716d4e0e5"], 0x18}, 0xfc00) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) (async, rerun: 32)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES16, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) (async, rerun: 32)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fe9cb7907021175f37538e486dd6317ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000"], 0xfdef) (async)
r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={0x0, 0x0, 0x8}, 0x18) (async)
socket$kcm(0x2, 0x5, 0x84)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000004c0)={'sit0\x00', @local})
perf_event_open(&(0x7f0000000440)={0x0, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a48d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0}, 0x1018, 0x3c7, 0x0, 0x8, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x9, r3, 0x1) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={<r6=>0xffffffffffffffff}) (async, rerun: 32)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) (async, rerun: 32)
r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) (rerun: 32)
perf_event_open$cgroup(&(0x7f0000000380)={0x4, 0x80, 0x26, 0x74, 0x3, 0x2, 0x0, 0x1, 0x41, 0x9, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x1040, 0x22d, 0x100, 0x9, 0x8, 0x5b60, 0x1, 0x0, 0x9, 0x0, 0x9}, r10, 0x8, r1, 0x1)
write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000300)='FREEZING\x00', 0x9) (async, rerun: 64)
socket$isdn_base(0x22, 0x3, 0x0) (rerun: 64)
sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0xfffffffffffffe77, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES16=r4, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYRESDEC=0x0, @ANYRESOCT=r7, @ANYRESOCT=r4], 0x9c}}, 0x200000d4)

2.421525713s ago: executing program 2 (id=1877):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000000000218010000202070250000000000202020db1af8ff00000000bfa1000000000000070c000000ffffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x1, 0x3, &(0x7f0000000440)=""/224}, 0x90)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x24, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x0], 0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
close(0x3)
socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000040), 0xb}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x2}, 0x20, 0x10001, 0xb, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4048040}, 0x40014)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007ca20e0000a115001f00ff11142603600e12080005007a010401a80016002000034004000000035c0461c9c67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b3d7a37077646f948017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a56e2b0137bdfc65025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d9345", 0xd8}], 0x1}, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x9, 0x0, 0x0, 0x0, 0x1, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@broadcast}, {{@in=@remote, 0x4d2, 0x33}, 0xa, @in6=@private0, 0x0, 0x5, 0x0, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l')
r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080))
write$cgroup_subtree(r5, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000003000000040122000b00000001"], 0x50)

2.205241015s ago: executing program 0 (id=1881):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000dbdf350800030000000000080001000100000008004b0013000000adf15d0c694a2a5dc7e63b01e9a79d20e3c180cbf67dc41b8b215cd066afca278b8d20a4562bd8a85e2b6764fbe748a080fa14959d7d21db1731c386e11c3ad66b0cfe5f9ba45adb29af4a082233c075c05d40"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000f14010029000000000000000400450072646d615f636d00"], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x4, 0x0, 0x11, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000a00050015"], 0x64}}, 0x20008040)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000000214000426bd7000fbdbdf2508004400", @ANYRES32, @ANYBLOB="0900020073090000000000000000020073797a3200000000336341bd0660b77b812a2212ad7b0396034ea1f06141d9ebe9c06d01367e0f75321fa6858170e2bc1896b87e2d8bf597f290e506a3cc3c599068a296cde84c1cd131bd7fa04bc4dc417ab557bd9b24e1def6e1ea554a20021b9097303af5cec20045f6d5bf9c29a4bf36b1b2a200974a36e3aa28bce1face7f731956bc7975395d001694cb6a4f98b908b277c49494084bf84a78925939350e93a8a938d13671f5a3dbe4a454a27fc41cbe611ead55c55c756abbcac539943db199bd9ae02edf8a70324b"], 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x81)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x2fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffffb, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')

2.142300882s ago: executing program 2 (id=1883):
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff53)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800703636a2cab72a", @ANYRES32=0x0, @ANYBLOB], 0x48)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000de45e0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0x14, 0x29}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_prefetch_bitmaps\x00', 0xffffffffffffffff, 0x0, 0x370b}, 0x18)

1.815308673s ago: executing program 0 (id=1887):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000000000070400a5f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.64336904s ago: executing program 5 (id=1888):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0xfd, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x98, 0x7}, 0x0, 0x0, 0x4, 0x2, 0x3fe, 0x7fffffff, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
socketpair(0x2b, 0x80000, 0xfffffff9, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x2, 0x1000000000000002, 0x0) (async)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socket$kcm(0x2, 0x1, 0x84) (async)
socket$kcm(0x2, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r8, &(0x7f0000000140), 0x12)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
gettid() (async)
gettid()
syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000206f7070000000000000000000000400500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000000206f7070000000000000000000000400500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000002030102000000000000000007000002080004400000000208000440000000100800034000000009080004400000002e080001000000001808000100030000050800010004000026"], 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4008800) (async)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000002030102000000000000000007000002080004400000000208000440000000100800034000000009080004400000002e080001000000001808000100030000050800010004000026"], 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x4008800)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e00280010000700028000001294", 0x2e}], 0x1}, 0x0)

1.549862884s ago: executing program 0 (id=1889):
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f", 0x7}], 0x1}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x30000, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
write$cgroup_subtree(r3, 0x0, 0x66)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x20000080)
ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x2300, 0x0, 0x0, 0x2}, 0x0, 0xffeffffffffffbff, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844)
r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r5, r7})

1.523490357s ago: executing program 3 (id=1890):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x4e28, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x3000000000000000, 0x0, 0x1000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x1de}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xfe, 0x7fffffff, 0x0, 0x2000000}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x0, @in=@remote, 0x0, 0x1, 0x0, 0x10, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@private1, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

1.409488573s ago: executing program 3 (id=1891):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000700110000000a600e41b0000900ac00060411000000160005000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (fail_nth: 5)

1.362296857s ago: executing program 5 (id=1892):
socket$kcm(0x11, 0x200000000000002, 0x300) (async)
r0 = perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x8003ffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0), 0x4)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x6, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000840)={[{0x2b, 'freezer'}, {0x2b, 'memory'}, {0x2d, 'cpuacct'}, {0x2d, 'blkio'}]}, 0x21)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3ff}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r2 = socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$kcm(0x10, 0x3, 0x10) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async)
r5 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x32}, 0x41}, 0x80, 0x0}, 0x60000c5)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="140000002b000b6c000000000000000007003725", 0x14}], 0x1}, 0x48880) (async)
write$cgroup_subtree(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="004000003a0091468cd934e3ea81e8"], 0xfe33) (async)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000002c0)) (async)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x20000000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f7000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000bdb200b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000540)={0x2, 0x80, 0xe, 0x9, 0x81, 0x0, 0x0, 0x986, 0x80, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x8001, 0x400000000}, 0x100004, 0x6, 0xc, 0x9, 0xb57f, 0x8, 0x0, 0x0, 0x2, 0x0, 0xd5cc}) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendmsg$inet(r2, &(0x7f0000000740)={&(0x7f0000000500)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, 0x0}, 0x4004040) (async)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0)
socket$kcm(0xa, 0x5, 0x0)

1.360662837s ago: executing program 1 (id=1893):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc02000000000000000000000000000064010102000000000000fffffffd000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000aca000000000000fe8000000000000000000000000000aa3c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.297620503s ago: executing program 0 (id=1894):
perf_event_open(0x0, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000580), 0x4)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r0=>0x0, 0x0})
close(r0)
perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x20, 0x2, 0x0, 0xffff, 0x1005, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={&(0x7f0000000180), 0x17}, 0x8018, 0x10000000000, 0xffffffff, 0x3, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, 0x11, 0xffffffffffffffff, 0xa)
perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf3, 0x0, 0x0, 0x2, 0x0, 0x6, 0x10150, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x1, 0x8, 0x80000000000000, 0x1020002, 0x4, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf)
sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80)
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={<r5=>0xffffffffffffffff})
recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r6, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x69)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair(0x1, 0x20000000000001, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8923, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5<J\x1f\xba\xfc\x90(\x985\x93\xa8\xd4\xf0\xbdTy\x18\xc8\xa0\xbb\x99\x8c\xe0Q\xffCl\xbdX~3\xa1\xa2\xf4\xd9\xf7\xc7\xfb\xce\x959x\xfeW\r\xf0{\xcaT\xecp)=\x9d\xdfG8\xa1\xe3=\xa6\x00\x98\xc1\xb3\x91-\xab\'W\x8al?d<JN\xcb\xd4H\xb0_jO\xf3\x90\xe8/l\xdfg)\x8d#\xfdo\xa9L\xdeA*\xec\xa1\x14,\xe8\x8d^\xb9r=\xc0\x18\xd4\x11dU[Ry\xed\xd6\x97\x8a\xe8\xca\x99\x10\x8e\xc8P\xa3\xae/\xdaof\x06\x7f\xf7\x80$f\b\x92\xae\xeb\xdd\"\x89\xb8\xf0\xc3\b\x00\x00\x00\x00\a\xf6\xfc\x1d\xd4\x893\xeb)\xc1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00O!\xd2q\xda}\xe2\xa2\xfe\xfd)\\\xdf\x9aN\\\xaeyc\xe4g\xc0\x8a\n\v{\xa9H\\\xd1\x9d')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r7)
perf_event_open(&(0x7f00000003c0)={0x1, 0xffffffffffffff94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x834d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x22, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x80044943, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg$unix(r9, 0x0, 0x140)
setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000), 0x10)
sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1)

692.989206ms ago: executing program 1 (id=1895):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x6, &(0x7f0000000080)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r3 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890c, &(0x7f0000000000))

684.524197ms ago: executing program 2 (id=1896):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50)
close(r0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xa36, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0x1}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5d, &(0x7f0000000680)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xa8, 0x8, 0x8, &(0x7f0000000740)}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r5}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
r7 = socket$kcm(0x2, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0xe, &(0x7f00000013c0)=ANY=[@ANYRES32=r6], &(0x7f0000000580)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r8, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0xfef, 0x5d5e}, 0x100404, 0x0, 0x0, 0x8, 0x3fe, 0xb9, 0x0, 0x0, 0xffffffff}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
r9 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r12 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000007000000080000002d0301000000000095000000000000007126000000000000bf670000000000005601000000ff07ad67060000020000006a0200000ee60000bf250000000000003d350000000000006507000002000000070700004c0000001f75000000000000bf54000000000000160400000400f9ffad3001000000000084000000000000004500000001f0ffff95000000000000006e8ad524a56601a5585b7351ca1136aef2e9407e5c2501d11900db85604036883647b1fb3f1403b816f511c8c56e56e40b01005505f8a89dae4293b10f3631b25fc9f189084c7fddccff01361d355f6cce8ec2abcdf1bc9040daef2cfa2046e2091e269f4734ffa55eb2d4e8de20b38c8808b365b46bd54c68cd30139a8c3827a7dd6d6e2b5fea3906f8456b0000000000ff07efffffff0047018ae79db613d2aec070f718ab629b4975320dd7a7da532281fd22c7b835005bf52715396669836db6000000005b4f0591ee7c8cd263dd172b28d01c4d8d4fee81e3cdd5daf2cdad3d1a74a2f078aa6402483856a6e494408d0b33047f06aec2cc590df28efc7dbec6857db922195a271af103f03e1155197e067b2ebf4e2dae060959c9639564f000fc3cdd05a1575c91cf5ba8b2db403681ee48f5287123a0d246c0c4c00fe979dbc09ed4db22d7172adc6ae8faa5f9ad188e07000000000000008d88a0b4684559d46cae41db1b914e93f1f8000000000000000000e33de432e488ad0e724c2d14a1e770e116984a5700afb8a1f3d47277ef0e33e7e00ec5f74e10937ba0e321346977b7d1b18013f509675b5b0f352e30dffda780e95c301f4fc7d5a76475ace6b128b02bfd71023daffdf748a6bd356fcba6ec96373d1101000736ac0bbcb5f4836bddfe8bf46308000000ade9e59fcf271bb98bd0b8b5216b858b414c31682f9f3db2e4d8e5898e445fe55ac56c0d642986f8bbc7340bc6393f774318c9fc9b05788de2c6e601b50777e8dff581de1d5ae3d801ead7eba31126e2172fa1eadf5f3bec81004d00000000c8e4692e051c731f9ac766b7fd66278d40f0760f23e8c7d1f47cd8e02504e85e152955ad8acd989c0b2eea71414f533f5685c3904bfe1d0011ffc1ba5398f3d6812467c1a4186edd036f15bf847c50f79e1a0ad3d2b5080ecb0148e2b86177869884ae62420c9f1b534e969fce97ffff070000000000dbbfe0ed7c5853a665c0805752dca0e571d75cac5a5d8e4f6e05055b6dec5a9a5696f053a92d81fd9e5f2b9dbbe24f38e745b5a95d45003d0600e413dc623f3e6b096c8b0ad7438c6631388892c55b0671140afbfb83bba415f729fea4c8a8a86189dceedad84cdd17c46bdd847a1f4b0facd3744f5bbb06abb319204fca4bcd4297fe7b4cee75abf43e14fe861224799c0f12702964fc890a176fdafa2c9387280b5693c000c0304cece48642649375dae0b7979b229f708a97349e96e783af9a23cd3980a2c29d3d62875e5319cd51bdd224878a0b25edf0e83c930633bd9a0c3e28f359608ea326c77a1aa17318f392a0ec6c188916f452533d4327feccfd68ec8278a90252693fb133c4615801077e1d75420017c03990b855fe481a20b4919bb11c6d737b6545ef140a0fc339bb53953662f1454f9852e7c4e17eb8668f076c659f56d6c7f97a96d6cdf45cfe88b30c170000000001000000effbf33bd1becb0de0a080931f137967de563c29d81aacb3d48226a4e4b6670900000000000000fa68bff3693afc44db223f2be09295e4a8da03d23b48bb38b31a14ffcddd92c38f6b6d86a0e5ed47a82bad5d2a6dce4c4d353261260c9d7a6bd9f2c872c4172a3d2ac80dfb718cc159e6423065624f130000000000000000000000000000000000000000002a37163e8d7ef2f3c58d045f0700000094029acbe333aebd10f2118fbfeda3fa5500d52cd5241588d2b68a332edfef6d701c8936a25d68b841f982511392cc0d3a78616f8ce0f2877d099258bf85866d0ee7f803fa50fd41ef62b028d12028a7b497d92f544523290f520b0d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48)
r13 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380), 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup=r9, r12, 0x18, 0x0, r13, @void, @value=r12}, 0x20)
sendmsg$sock(r7, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)='3', 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x24, 0x0, 0x0)

581.732071ms ago: executing program 5 (id=1897):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x18, 0x7, 0x0, &(0x7f0000000140)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8}, 0x94)
socket$kcm(0x2, 0x922000000001, 0x106)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000dbdf350800030000000000080001000100000008004b0013000000adf15d0c694a2a5dc7e63b01e9a79d20e3c180cbf67dc41b8b215cd066afca278b8d20a4562bd8a85e2b6764fbe748a080fa14959d7d21db1731c386e11c3ad66b0cfe5f9ba45adb29af4a082233c075c05d40"], 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$kcm(0x11, 0x2, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200), 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000f14010029000000000000000400450072646d615f636d00"], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0)
socket$kcm(0x10, 0x2, 0x4)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x4, 0x0, 0x11, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r2=>0x0, 0x0})
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a000000140007800800124000000a00050015"], 0x64}}, 0x20008040)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000000214000426bd7000fbdbdf2508004400", @ANYRES32, @ANYBLOB="0900020073090000000000000000020073797a3200000000336341bd0660b77b812a2212ad7b0396034ea1f06141d9ebe9c06d01367e0f75321fa6858170e2bc1896b87e2d8bf597f290e506a3cc3c599068a296cde84c1cd131bd7fa04bc4dc417ab557bd9b24e1def6e1ea554a20021b9097303af5cec20045f6d5bf9c29a4bf36b1b2a200974a36e3aa28bce1face7f731956bc7975395d001694cb6a4f98b908b277c49494084bf84a78925939350e93a8a938d13671f5a3dbe4a454a27fc41cbe611ead55c55c756abbcac539943db199bd9ae02edf8a70324b"], 0x30}, 0x1, 0x0, 0x0, 0x4040001}, 0x81)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x2fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffffb, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')

520.063132ms ago: executing program 3 (id=1898):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ffffff8000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008401050000000000000000000000000000000000000000006c0000000000000000000000000000000000ffff000000000000000000000000000000000000000000000000fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003c00000002000000ac1414bb0000000000000000000000000000000001000000000000000000000000000000e0000002000000000000000000000000000000003300000002000000fe800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003300000002"], 0x23c}}, 0x0)

478.055616ms ago: executing program 3 (id=1899):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYBLOB="3eca0d"], 0x9a)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0)
socket$kcm(0x10, 0x2, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r3, 0x400454cd, 0x6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x9, 0x5a, 0x0, 0x7, 0x10082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={&(0x7f0000000180), 0x9}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e3}, 0x0, 0xa, r0, 0x9)
perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xee, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb836d5cecbe03301, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x302d43e6}, 0x390, 0x0, 0x6, 0x7, 0x4, 0x2, 0x2, 0x0, 0x6, 0x0, 0xfffffffbfffffffd}, 0x0, 0xf, 0xffffffffffffffff, 0x4)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050)
r4 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$kcm(0x2, 0x5, 0x84)

436.785835ms ago: executing program 1 (id=1900):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10482, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100004, 0x0, 0x802, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRESOCT=r2, @ANYRES32=<r5=>0x0, @ANYRES32=0x0, @ANYBLOB="00ac000000fee9070b340000ff0000000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000018110000b340e416ebed20ed688d4420f1f3587a7a87da79e32d1692288226f992301e229472a81d05b682ae6aa1bde97849989459485a6eaa7f16ee2e50138f3849e5cec42208dd51f118beb7dbdcc1fa8a8e44be421db1e0503362084051612cc429cc2654f8e7ebba29470ed1660e25adb862e4a1c51ec07af810ec9f6710f2563e904f94449befa8b46dff030000000000003afacfb895b610cde7ef41030847ef0835433996b55b0076da6bfbf96916a0bb03ca4ddb7e353f6c7a594365ec376d898d47241501eba806396b9440230e9058345228f5fa74c644de995a2a5a2e858b8a97744edcf328f3ac21584a51e89e24b4299f15a2840b65cdb05b4df6d48f6f2d75acebbc1afabc890074329651c35ca2d62a9efed61845c6e9f48e0519af2fef48afd033f79c40f9eca9f46f0f4d3810edd8094afba5cbaba2ab1f9b52a6028d143a3a6faddf4c149a72d42830222ea519f8a42dd6c567db3798cf1a88fb42f4c56ed4091ad0fa754689eb38e1c1a52e86b450c32d9c893efd4cffb1387f30798d8d2c37371258ce55071a0ef82262b7e44286dcc7e0b4ad20d290051587a50d560ffd0a2b8f61f90a29d7989e42d5cae2b2fd2e41366ad7a5304e175bffc83a6613e07693b511823426e550265f0841e5c1", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="85000000220000f508000000000000006c9bd1a63619"], 0x0}, 0x94)
write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00910006000000000000000a"], 0xfe33)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r8 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1bee, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x5}, 0x200, 0x1, 0x0, 0x8}, 0x0, 0xb, r3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000090)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r9 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r9, &(0x7f0000000280)=ANY=[@ANYRESHEX=r6], 0x33fe0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYRES16=r5, @ANYRES16=r10, @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="16000b42312997563dcb054341c49b7ba97081150d8bff04a4a98b80fd5059e7e98177f97abc4c5624b5c8699bea30ec26a8d1dc2cb28e5366e743acb96e09aa3eda30569f341473a444f41e64a58c5d16a6c63c337adda3d41dbe49c321f7990c662d4d1c36d907854479142f4d4c7c667e77ffc277fd992cfe4e5053b32b29de3fdf4da4b9d072417ebebc61e36b875e0034d0f3b2ffc06f2c465c471146c55b913946a1c0de514e0aa61feaea594c0c63c54ff3250577185f05fd1386e800170dcadb321461e7310a7c6b435bbe3e5580e3125c3130d79bafa0b6f3e1"], 0x0, 0xfffffffffffffe54, 0x0, 0x0, 0x7fd}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x89a0, &(0x7f0000000080))
socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89a2, &(0x7f0000000080))
sendmsg$inet(r2, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0)
sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8040)
ioctl$SIOCSIFHWADDR(r1, 0x541b, &(0x7f0000000340)={'veth0_virt_wifi\x00', @remote})

301.952896ms ago: executing program 1 (id=1901):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000029c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x4e28, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x30, 0x1000000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x1de}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x104, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xfe, 0x7fffffff, 0x0, 0x2000000}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x0, @in=@remote, 0x0, 0x1, 0x0, 0x10, 0x0, 0xffffffff}, {{@in6=@loopback, 0x0, 0x2b}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6}, {{@in6=@private1, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

275.709213ms ago: executing program 1 (id=1902):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000090000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

270.11088ms ago: executing program 5 (id=1903):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000}, 0x18)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], <r3=>0x0, 0xb4, &(0x7f0000000380)=[{}, {}], 0x10, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000000440)}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xd, 0xc, &(0x7f0000000600)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xc4}], &(0x7f0000000680)='syzkaller\x00', 0x400, 0x7c, &(0x7f00000006c0)=""/124, 0x41000, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x0, 0xc, 0x6, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000007c0)=[{0x5, 0x5, 0xa, 0x3}, {0x5, 0x2, 0xf, 0x5}], 0x10, 0x80}, 0x94)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x22, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x1, 0x4, 0x9, 0xb, 0xfffffffffffffffc, 0x10}, @alu={0x7, 0x1, 0x9, 0x0, 0x2, 0x20, 0xffffffffffffffff}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @alu={0x4, 0x1, 0x4, 0x2, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3ff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x4, 0x1, 0x8, 0x3, 0x2, 0x80, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x3ff, 0xc, &(0x7f0000000280)=""/12, 0x40f00, 0x3, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xb574, r4, 0x0, 0x0, 0x0, 0x10, 0xf7f}, 0x94)
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r3, 0x4)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x100, '\x00', r2, r6, 0x3, 0x3, 0x3}, 0x50)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x108, 0x9, 0x6, 0x201, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0xffff}}]}, @IPSET_ATTR_ADT={0x70, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x200}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x14}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IFACE={0x14, 0x17, 'erspan0\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000dc0)={r7, &(0x7f0000000c40)="38ee5282315c9b1d8f13689e02a7b5368eedd547fc2c9300b4b63c86c771a9023695e3dc2717ea6c1656635b65315bd3796157bcda5720e378aa50ef0d45861e445fc68355d469a9d14448982ce5a699bcaa861609a648fb8e6b29a613f3e483c6e0d3a51af2ee82f13c49cc558b8f6e29c8cbf1018f4393c7f308530a41f79e4d2f858d47091fc3446ceebc1cc610e752e5a72a65c526e7ecccf0480fcf4110ac15dfc744f71e276dcf15d1858af19df7b32f9977d5dbd14af424bf595c5ca83b2415f5c9997f8f41266b755c9ab460e7631146b22afdf8dd485e344081", &(0x7f0000000d40)=""/76, 0x4}, 0x20)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000e00)='syz1\x00')
sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x20040094)
sendmsg$sock(r8, &(0x7f0000001240)={&(0x7f0000000f40)=@sco={0x1f, @none}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000fc0)="f9b07e6fe3", 0x5}, {&(0x7f0000001000)="efe89592d62fcab9a6c5221f04799ca7e5e3866777d16d30e3e26b9dd4da21331df5a919c822c1ae1b8942a8c4c1192ff03dc6f4a8ecb660aa564d7516a8b589e0223b1112a844d0d560d24f", 0x4c}, {&(0x7f0000001080)="aef74926e56dc833f5a9f0d911baaa974c70990cb6951562620ee631d752adbf8b11cd01b63e6fea7adca0bbcdace9fc89a9687b49ff2f64260684cee57cfce1ec8494745ea5a02722f015e2e2d1210661aad6e1fdd1ccc2ed1384d4645c57", 0x5f}], 0x3, &(0x7f0000001140)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0xac}}, @timestamping={{0x14, 0x1, 0x25, 0x2c9de6b5}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x153}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x821}}], 0xd8}, 0x20004096)
sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000001340)={&(0x7f0000001280), 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, 0x1401, 0x400, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20004040)
sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x2c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffffb}]}, 0x2c}}, 0x4000010)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x18, 0x1409, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400d081}, 0x408a0)
r10 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001580), 0x2, 0x0)
write$cgroup_type(r10, &(0x7f00000015c0), 0x9)
syz_open_procfs$namespace(0x0, &(0x7f0000001600)='ns/mnt\x00')
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{r1, <r11=>0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)=r5}, 0x20)
r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001880)=r3, 0x4)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001900)={0xffffffffffffffff, 0x7, 0x18}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x20, &(0x7f0000001700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x36}, @map_val={0x18, 0x1, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2800000}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @printk={@lx}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0xff}]}, &(0x7f0000001800)='GPL\x00', 0xacef, 0x13, &(0x7f0000001840)=""/19, 0x41000, 0xa, '\x00', r2, @fallback=0x2b, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f00000018c0)={0x2, 0x0, 0x5}, 0x10, r3, r4, 0x0, &(0x7f0000001940)=[r13, r0, r7, r1, r1], 0x0, 0x10, 0x81}, 0x94)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a80)={0x50, 0x1405, 0x200, 0x70bd25, 0x25dfdbfe, "", [{{0x8}, {0x8, 0x3, 0x8aa}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8}, {0x8, 0x3, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x894}, 0x20000000)
sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x20, 0x7, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg(r9, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c80)="4a2423e876b3fc5309dba76beee9f667c9e1aae3", 0x14}, {&(0x7f0000001cc0)="37d1d19c8b689b7dc67d9d8b95c5520b6e00e0c175b55b0bc2a16635caa9f1c34adef79f29eef33dd84ea7f2ac9a54d970544261b59129b66a178e5493bc3329f2870ca024ab05e11665dadfdbab40afaa4c84b2b98df9bb3834feb534cd5775becda854ce3dd9c55828ad113e6f5202ebb100f4d016eb1571e7f60e97807d", 0x7f}, {&(0x7f0000001d40)="712107f80a1b6b82332a4df012c0fb276cb0cc432e4be5b8cff0528371a37b8915c63fe8ade394f0455f73248e6aab1507da600bb34f6ac6ab0706ee45fe3c112d440501fb150cff6ca71cfee332f9fb27ce3757642f4c51fb56b85a0c2096cc3b7c1b87fdfb17a46ab235e047931019a6924fb408703e0e25226e0c108eac", 0x7f}, {&(0x7f0000001dc0)="a049aa7ce7fc9dc0f083094e4e3289205f3e650b547c8a6d7c0d2a792d96ec30e9d3103a49078d9e2ddd16449232b3d199ece366fea8d6227d6e669731e07e651f0fb19143241ec830f32cb03eb2fba607c1d267db2a5024d48c1918", 0x5c}, {&(0x7f0000001e40)="e4b17ca084b4f1ddb39eb43f3c0d6a016a994fea09a1c26a952310b314fde096fe6eb76969646f857303052b983277104433d3e61c58b252354c3067b9984f9aeb4bffb5331f3f65022c2b63f93069af559012737cc76307fae19c643beaf2ea10c05f744732e0adf60a74", 0x6b}, {&(0x7f0000001ec0)="6bfe0538fccd8b8b1354f1265f74aadc6ca8c38d930f33ced605d7e45d118326fbe93e6befe7c66b6130f2864f3677d7ca8c1b709c7bdd4d7688e9a0375bc0ec3e274fbcc65f2c524d1300203400b09e8d11c18a4d3555773c777aa6af472156cc4445a780af8642306b30c2daf30e8a31fb3b856bcef8b122ccbe99306abaa00d88ea530906195a24cf01989e736382104e870ea23e99e578b6e6ea26978819f028e19a0c8863261b27a75d8f78891a040a2b598d8cc25848b5172f78ea24683f414b8f986ed481f2c3192f362e1d1f3e1835f038b5fd8132912ee08ddf11061c02547944bbee681ef599cf83a021c6d9bd", 0xf2}, {&(0x7f0000001fc0)="d8cca574754669339e50ecebe6bb26ab75e62e29ee4576874d9d33648d06fe4318390ebf3da1e139206fd2491c7507bcdef5ec9dc7585a56008c0d3cc2292619d27cb6b0c1a41615b9e28cdfa5ec2623ece6a3f87e8ed7e63597d11a832c51b8db6b2bbff52fff0467", 0x69}], 0x7, &(0x7f00000020c0)=[{0xf0, 0x119, 0xa91f, "ee924960cda47cc62bade2a010096e042830c34aef8ddc0c06d6453acaa9be1670636a2933fe85ed16f8e5bf84a1ecc1960b30aec674ae931570e633f414a0c51e052111b5aa46d16bb4b9558473d40abbced6a3173cf38b6b2e6b3285960f1c05e6a5615b4129b1f99fbbf30c5ce76dd01be51ff7c2a09128d25666baf9a6ef787101b3d01ac970e046d1934e0ebfad8cc84357cd7c737a8f0f0a98561d479b3083e955739015d955b49cf14aa11f7f1544a9c0dae55f70eb61f48ad149f3b9bf6c356775bcf0fe35519ff384be4f31f5bd91533b9a969adfbeaaa2407b"}, {0x68, 0x103, 0x1ff, "ef88033a9a2802d020bb291f43677f80b01c8f74af44655489e9dc28224b58ac4a778ce736f7dad7d0b54fb46ae7285b9f68ef478146ceb54c33e66b6b2a838fc0e571256aab5597b227ef922ad83a29f9"}, {0x110, 0x108, 0x4, "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"}, {0x80, 0x1af, 0x7, "0f2a5c37e376f5869e7cab90ff02f9e9ecf33c7bf372b7ae2105c11395b703f7ef4f707dbc8724f57f415675afcd696870c971f5f011ad552d18a0c501b30847072ae8a4455d72a2f8d154a8893a0bdad7e5abfb2e77acd01f5d469681d22aba17935e35880dda280fe68f59"}], 0x2e8}, 0x20040010)
sendmsg$NFNL_MSG_ACCT_DEL(r8, &(0x7f00000024c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xbd}]}, 0x20}, 0x1, 0x0, 0x0, 0x10040}, 0x3000c040)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002580)={r11, 0x58, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r14=>0x0}}, 0x10)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000025c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0xfffffffe, '\x00', r14, r6, 0x3, 0x0, 0x2}, 0x50)

255.753067ms ago: executing program 0 (id=1904):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r2, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x2000, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0xb54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x4, 0x30f7cb41, 0xffff, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0)

133.995358ms ago: executing program 3 (id=1905):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000020000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000084010500ac1414aa000000000000000000000000000000003300000000000000640101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac141443000000000000000000000000000000003300000000000000ac1414bb000000000000000000000000000000000000000000000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000000000000100000000000000000c0000000000000000000000ac1414bb000000000000000000000000000004d2330000000a090000000000000000000000000000000000000000000005"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

126.52183ms ago: executing program 5 (id=1906):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a0000000000c000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc02000000000000000000000000000064010102000000000000fdffffff000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff000000000000000000000000e0000002000000000aca000000000000fe8000000000000000000000000000aa3c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

106.986264ms ago: executing program 1 (id=1907):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x10c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa89}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1d0}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xa7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9b6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2d9}]}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@generic={0x9, 0x9, 0x0, 0x2d1, 0xe1e5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000900)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x10, 0xffff, 0x8, 0x18040, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x3, 0x0, 0x5, 0x0, @value=r3}, 0x50) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x13, 0x10, 0xffff, 0x8, 0x18040, 0xffffffffffffffff, 0x9, '\x00', 0x0, r3, 0x3, 0x0, 0x5, 0x0, @value=r3}, 0x50)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000008, 0x1, &(0x7f00000000c0), &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xa5, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2000000000000008, 0x1, &(0x7f00000000c0), &(0x7f0000000600)=[0x0, 0x0], 0x0, 0xa5, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000280)}}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32=r4, @ANYBLOB='\n\x00\x00\a\x00\x00', @ANYRES32=r5, @ANYRES32, @ANYBLOB="050000000200"/28], 0x50)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socket$nl_route(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0xa, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000300), 0x8, 0xf3, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000001000100680900000002000000080000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0100000000000000020000000200"/28], 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000001000100680900000002000000080000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0100000000000000020000000200"/28], 0x50)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x70bd26, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2000000}}}]}, {0xfffb}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (async)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xffff, '\x00', r5, r9, 0x5, 0x5, 0x4}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

33.179334ms ago: executing program 3 (id=1908):
socket$kcm(0x2d, 0x2, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x428, 0x7f, 0x4c}, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x581, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4)
perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x20, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
close(r5)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0)
close(r6)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="111100000002"})
close(0x3)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = socket$kcm(0x2a, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

0s ago: executing program 5 (id=1909):
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000700110000000a600e41b0000900ac00060411000000160005000a0003000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) (fail_nth: 6)

kernel console output (not intermixed with test programs):

 T6051] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   82.421741][ T6051] CPU: 1 UID: 0 PID: 6051 Comm: syz.3.17 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[   82.421774][ T6051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[   82.421791][ T6051] Call Trace:
[   82.421799][ T6051]  <TASK>
[   82.421807][ T6051]  dump_stack_lvl+0x189/0x250
[   82.421838][ T6051]  ? __pfx____ratelimit+0x10/0x10
[   82.421862][ T6051]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.421883][ T6051]  ? __pfx__printk+0x10/0x10
[   82.421906][ T6051]  ? __might_fault+0xb0/0x130
[   82.421942][ T6051]  should_fail_ex+0x414/0x560
[   82.421970][ T6051]  _copy_from_iter+0x1db/0x16f0
[   82.421994][ T6051]  ? rcu_is_watching+0x15/0xb0
[   82.422014][ T6051]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[   82.422038][ T6051]  ? __pfx__copy_from_iter+0x10/0x10
[   82.422058][ T6051]  ? __build_skb_around+0x257/0x3e0
[   82.422087][ T6051]  ? netlink_sendmsg+0x642/0xb30
[   82.422109][ T6051]  ? skb_put+0x11b/0x210
[   82.422138][ T6051]  netlink_sendmsg+0x6b2/0xb30
[   82.422172][ T6051]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.422199][ T6051]  ? aa_sock_msg_perm+0xf1/0x1d0
[   82.422228][ T6051]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   82.422247][ T6051]  ? __pfx_netlink_sendmsg+0x10/0x10
[   82.422272][ T6051]  __sock_sendmsg+0x21c/0x270
[   82.422298][ T6051]  ____sys_sendmsg+0x505/0x830
[   82.422322][ T6051]  ? __pfx_____sys_sendmsg+0x10/0x10
[   82.422350][ T6051]  ? import_iovec+0x74/0xa0
[   82.422373][ T6051]  ___sys_sendmsg+0x21f/0x2a0
[   82.422393][ T6051]  ? __pfx____sys_sendmsg+0x10/0x10
[   82.422449][ T6051]  ? __fget_files+0x2a/0x420
[   82.422465][ T6051]  ? __fget_files+0x3a0/0x420
[   82.422492][ T6051]  __x64_sys_sendmsg+0x19b/0x260
[   82.422513][ T6051]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   82.422529][ T6051]  ? perf_trace_preemptirq_template+0xa3/0x340
[   82.422564][ T6051]  ? rcu_is_watching+0x15/0xb0
[   82.422587][ T6051]  ? do_syscall_64+0xbe/0x3b0
[   82.422614][ T6051]  do_syscall_64+0xfa/0x3b0
[   82.422638][ T6051]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.422655][ T6051]  ? asm_sysvec_call_function_single+0x1a/0x20
[   82.422672][ T6051]  ? clear_bhb_loop+0x60/0xb0
[   82.422694][ T6051]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.422714][ T6051] RIP: 0033:0x7f641a18ebe9
[   82.422735][ T6051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   82.422750][ T6051] RSP: 002b:00007f641af26038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   82.422778][ T6051] RAX: ffffffffffffffda RBX: 00007f641a3b6090 RCX: 00007f641a18ebe9
[   82.422791][ T6051] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000008
[   82.422802][ T6051] RBP: 00007f641af26090 R08: 0000000000000000 R09: 0000000000000000
[   82.422813][ T6051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   82.422824][ T6051] R13: 00007f641a3b6128 R14: 00007f641a3b6090 R15: 00007ffd62a1a018
[   82.422854][ T6051]  </TASK>
[   82.997441][ T6046] netlink: 183676 bytes leftover after parsing attributes in process `syz.0.14'.
[   83.011383][ T6023] team0: Port device geneve1 added
[   83.394741][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'.
[   83.519431][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'.
[   84.007644][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.30'.
[   84.042725][ T6090] netlink: 1088 bytes leftover after parsing attributes in process `syz.2.29'.
[   86.790601][    T9] cfg80211: failed to load regulatory.db
[   87.061697][ T6143] netlink: 80 bytes leftover after parsing attributes in process `syz.3.44'.
[   87.095263][ T6158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'.
[   87.399318][ T6161] 
@ÿ: renamed from veth0_vlan (while UP)
[   90.434403][ T6200] netlink: 'syz.3.58': attribute type 3 has an invalid length.
[   90.447144][ T6200] netlink: 135800 bytes leftover after parsing attributes in process `syz.3.58'.
[   90.927219][ T6213] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check.
[   91.029011][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.62'.
[   91.245410][ T6224] netlink: 'syz.4.64': attribute type 23 has an invalid length.
[   91.673728][ T6232] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[   92.183777][ T6245] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.70'.
[   92.472090][ T6260] netlink: 212256 bytes leftover after parsing attributes in process `syz.0.77'.
[   92.491961][ T6260] netlink: zone id is out of range
[   92.499247][ T6260] netlink: zone id is out of range
[   92.504983][ T6260] netlink: get zone limit has 8 unknown bytes
[   95.256805][ T6274] netlink: 72 bytes leftover after parsing attributes in process `syz.2.79'.
[   95.636226][ T6282] Zero length message leads to an empty skb
[   99.587939][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'.
[   99.656488][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'.
[   99.691790][ T6322] netlink: 2 bytes leftover after parsing attributes in process `syz.3.92'.
[   99.741341][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'.
[   99.811485][ T6322] netlink: 2 bytes leftover after parsing attributes in process `syz.3.92'.
[  102.330876][ T5920] sched: DL replenish lagged too much
[  102.369884][ T6343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'.
[  102.385954][ T6343] netlink: 60 bytes leftover after parsing attributes in process `syz.1.99'.
[  102.943512][ T6354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.101'.
[  107.308078][ T6426] bridge0: port 3(ip6gretap0) entered blocking state
[  107.315016][ T6426] bridge0: port 3(ip6gretap0) entered disabled state
[  107.346402][ T6426] ip6gretap0: entered allmulticast mode
[  107.412908][ T6426] ip6gretap0: entered promiscuous mode
[  107.420427][ T6430] netlink: 'syz.1.115': attribute type 1 has an invalid length.
[  107.451008][ T6426] bridge0: port 3(ip6gretap0) entered blocking state
[  107.458174][ T6426] bridge0: port 3(ip6gretap0) entered forwarding state
[  109.026620][ T6440] lo speed is unknown, defaulting to 1000
[  109.032720][ T6440] lo speed is unknown, defaulting to 1000
[  109.049123][ T6440] lo speed is unknown, defaulting to 1000
[  109.073477][ T6440] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  109.112157][ T6440] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  109.276964][ T6440] lo speed is unknown, defaulting to 1000
[  109.328482][ T6440] lo speed is unknown, defaulting to 1000
[  109.363621][ T6440] lo speed is unknown, defaulting to 1000
[  109.400706][ T6440] lo speed is unknown, defaulting to 1000
[  109.419853][ T6440] lo speed is unknown, defaulting to 1000
[  109.480354][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'.
[  109.490321][ T6460] netlink: 7 bytes leftover after parsing attributes in process `syz.3.127'.
[  109.564317][ T6460] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  109.666840][ T6466] netlink: 'syz.1.129': attribute type 2 has an invalid length.
[  109.695868][ T6466] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.129'.
[  109.877859][ T6480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'.
[  110.558613][ T6485] netlink: 2 bytes leftover after parsing attributes in process `syz.4.133'.
[  110.618059][ T6486] netlink: 'syz.4.133': attribute type 2 has an invalid length.
[  110.625955][ T6486] netlink: 'syz.4.133': attribute type 3 has an invalid length.
[  110.634704][ T6486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.133'.
[  111.035978][ T6494] netlink: 'syz.3.135': attribute type 23 has an invalid length.
[  111.185470][ T6505] netlink: 60 bytes leftover after parsing attributes in process `syz.4.137'.
[  112.145123][ T6533] netlink: 'syz.2.148': attribute type 11 has an invalid length.
[  112.350879][ T6540] netlink: 'syz.4.152': attribute type 11 has an invalid length.
[  112.370015][ T6540] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.152'.
[  112.414183][ T6538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  112.764112][ T6554] lo speed is unknown, defaulting to 1000
[  112.838008][ T6555] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  113.041217][ T6555] lo speed is unknown, defaulting to 1000
[  114.711263][ T6592] netlink: 'syz.2.166': attribute type 29 has an invalid length.
[  114.873390][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'.
[  114.877120][   T13] wlan1: Trigger new scan to find an IBSS to join
[  115.112322][ T6607] netlink: 60 bytes leftover after parsing attributes in process `syz.1.168'.
[  115.217297][ T6609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.168'.
[  115.288561][ T6612] netlink: 60 bytes leftover after parsing attributes in process `syz.1.168'.
[  115.492660][ T6623] netlink: 17 bytes leftover after parsing attributes in process `syz.2.175'.
[  115.566821][ T6623] netlink: zone id is out of range
[  115.606430][ T6623] netlink: zone id is out of range
[  115.626440][ T6623] netlink: zone id is out of range
[  115.631590][ T6623] netlink: zone id is out of range
[  115.657597][ T6623] netlink: zone id is out of range
[  115.670473][ T6623] netlink: zone id is out of range
[  115.675617][ T6623] netlink: zone id is out of range
[  115.687479][ T6629] openvswitch: netlink: Message has 16 unknown bytes.
[  115.694704][ T6629] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  115.695027][ T6623] netlink: zone id is out of range
[  115.812434][ T6636] netlink: 'syz.0.178': attribute type 26 has an invalid length.
[  115.885992][ T6630] netlink: 'syz.4.176': attribute type 7 has an invalid length.
[  116.009662][ T6643] netlink: 'syz.3.180': attribute type 5 has an invalid length.
[  116.407150][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'.
[  116.544646][ T6656] netlink: 172 bytes leftover after parsing attributes in process `syz.1.186'.
[  118.013547][ T6674] netlink: 'syz.1.189': attribute type 11 has an invalid length.
[  118.060899][ T6674] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.189'.
[  118.136707][ T6673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  118.333619][ T6684] netlink: 'syz.2.193': attribute type 2 has an invalid length.
[  118.841356][ T6697] netlink: 'syz.3.198': attribute type 11 has an invalid length.
[  118.860763][ T6697] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.198'.
[  118.944266][ T6694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.233664][ T6701] netlink: 'syz.4.200': attribute type 21 has an invalid length.
[  119.271591][ T6701] IPv6: NLM_F_REPLACE set, but no existing node found!
[  119.279261][ T6705] netlink: 40 bytes leftover after parsing attributes in process `syz.2.201'.
[  119.290073][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  119.304775][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_0
[  119.426459][ T6701] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  119.608371][ T6701] batman_adv: batadv0: Removing interface: batadv_slave_1
[  119.828376][   T36] wlan1: Trigger new scan to find an IBSS to join
[  119.924665][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'.
[  120.184397][ T6730] netlink: 'syz.3.207': attribute type 11 has an invalid length.
[  120.203315][ T6730] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.207'.
[  120.301049][ T6721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  120.907523][ T4427] wlan1: Creating new IBSS network, BSSID b2:82:14:2e:85:a7
[  122.519620][ T6786] FAULT_INJECTION: forcing a failure.
[  122.519620][ T6786] name failslab, interval 1, probability 0, space 0, times 1
[  122.609677][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.0.225 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  122.609705][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  122.609716][ T6786] Call Trace:
[  122.609723][ T6786]  <TASK>
[  122.609731][ T6786]  dump_stack_lvl+0x189/0x250
[  122.609758][ T6786]  ? __pfx____ratelimit+0x10/0x10
[  122.609783][ T6786]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.609804][ T6786]  ? __pfx__printk+0x10/0x10
[  122.609834][ T6786]  ? __pfx___might_resched+0x10/0x10
[  122.609851][ T6786]  ? fs_reclaim_acquire+0x7d/0x100
[  122.609882][ T6786]  should_fail_ex+0x414/0x560
[  122.609910][ T6786]  should_failslab+0xa8/0x100
[  122.609937][ T6786]  kmem_cache_alloc_noprof+0x73/0x3c0
[  122.609960][ T6786]  ? skb_clone+0x212/0x3a0
[  122.609994][ T6786]  skb_clone+0x212/0x3a0
[  122.610017][ T6786]  pfkey_sendmsg+0x44b/0x1090
[  122.610051][ T6786]  ? __lock_acquire+0xab9/0xd20
[  122.610085][ T6786]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  122.610138][ T6786]  ? aa_sock_msg_perm+0xf1/0x1d0
[  122.610167][ T6786]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  122.610186][ T6786]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  122.610212][ T6786]  __sock_sendmsg+0x21c/0x270
[  122.610237][ T6786]  ____sys_sendmsg+0x505/0x830
[  122.610262][ T6786]  ? __pfx_____sys_sendmsg+0x10/0x10
[  122.610290][ T6786]  ? import_iovec+0x74/0xa0
[  122.610314][ T6786]  ___sys_sendmsg+0x21f/0x2a0
[  122.610335][ T6786]  ? __pfx____sys_sendmsg+0x10/0x10
[  122.610392][ T6786]  ? __fget_files+0x2a/0x420
[  122.610407][ T6786]  ? __fget_files+0x3a0/0x420
[  122.610434][ T6786]  __x64_sys_sendmsg+0x19b/0x260
[  122.610456][ T6786]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  122.610485][ T6786]  ? __pfx_ksys_write+0x10/0x10
[  122.610505][ T6786]  ? rcu_is_watching+0x15/0xb0
[  122.610528][ T6786]  ? do_syscall_64+0xbe/0x3b0
[  122.610556][ T6786]  do_syscall_64+0xfa/0x3b0
[  122.610578][ T6786]  ? lockdep_hardirqs_on+0x9c/0x150
[  122.610600][ T6786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.610617][ T6786]  ? clear_bhb_loop+0x60/0xb0
[  122.610639][ T6786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.610657][ T6786] RIP: 0033:0x7fe5da58ebe9
[  122.610673][ T6786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.610687][ T6786] RSP: 002b:00007fe5db417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  122.610706][ T6786] RAX: ffffffffffffffda RBX: 00007fe5da7b5fa0 RCX: 00007fe5da58ebe9
[  122.610719][ T6786] RDX: 0000000004040080 RSI: 0000200000002f00 RDI: 0000000000000003
[  122.610730][ T6786] RBP: 00007fe5db417090 R08: 0000000000000000 R09: 0000000000000000
[  122.610741][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.610751][ T6786] R13: 00007fe5da7b6038 R14: 00007fe5da7b5fa0 R15: 00007ffd55a741d8
[  122.610786][ T6786]  </TASK>
[  124.193146][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.233'.
[  124.224624][ T6812] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode
[  124.673248][ T6826] FAULT_INJECTION: forcing a failure.
[  124.673248][ T6826] name failslab, interval 1, probability 0, space 0, times 0
[  124.746274][ T6826] CPU: 1 UID: 0 PID: 6826 Comm: syz.1.237 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  124.746301][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  124.746311][ T6826] Call Trace:
[  124.746318][ T6826]  <TASK>
[  124.746326][ T6826]  dump_stack_lvl+0x189/0x250
[  124.746353][ T6826]  ? __pfx____ratelimit+0x10/0x10
[  124.746376][ T6826]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.746397][ T6826]  ? __pfx__printk+0x10/0x10
[  124.746426][ T6826]  ? __pfx___might_resched+0x10/0x10
[  124.746443][ T6826]  ? fs_reclaim_acquire+0x7d/0x100
[  124.746473][ T6826]  should_fail_ex+0x414/0x560
[  124.746501][ T6826]  should_failslab+0xa8/0x100
[  124.746528][ T6826]  __kmalloc_noprof+0xcb/0x4f0
[  124.746549][ T6826]  ? kfree+0x4d/0x440
[  124.746567][ T6826]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  124.746591][ T6826]  tomoyo_realpath_from_path+0xe3/0x5d0
[  124.746611][ T6826]  ? tomoyo_domain+0xd9/0x130
[  124.746636][ T6826]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  124.746659][ T6826]  tomoyo_path_number_perm+0x1e8/0x5a0
[  124.746692][ T6826]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  124.746716][ T6826]  ? trace_call_bpf+0xb7/0x850
[  124.746735][ T6826]  ? trace_call_bpf+0xb7/0x850
[  124.746761][ T6826]  ? __lock_acquire+0xab9/0xd20
[  124.746807][ T6826]  ? __fget_files+0x2a/0x420
[  124.746826][ T6826]  ? __fget_files+0x2a/0x420
[  124.746840][ T6826]  ? __fget_files+0x3a0/0x420
[  124.746855][ T6826]  ? __fget_files+0x2a/0x420
[  124.746875][ T6826]  security_file_ioctl+0xcb/0x2d0
[  124.746900][ T6826]  __se_sys_ioctl+0x47/0x170
[  124.746924][ T6826]  do_syscall_64+0xfa/0x3b0
[  124.746954][ T6826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.746971][ T6826]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  124.746988][ T6826]  ? clear_bhb_loop+0x60/0xb0
[  124.747008][ T6826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.747024][ T6826] RIP: 0033:0x7f7bb658ebe9
[  124.747041][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.747055][ T6826] RSP: 002b:00007f7bb73cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  124.747073][ T6826] RAX: ffffffffffffffda RBX: 00007f7bb67b5fa0 RCX: 00007f7bb658ebe9
[  124.747086][ T6826] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 000000000000000a
[  124.747098][ T6826] RBP: 00007f7bb73cf090 R08: 0000000000000000 R09: 0000000000000000
[  124.747108][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.747118][ T6826] R13: 00007f7bb67b6038 R14: 00007f7bb67b5fa0 R15: 00007ffe6b59d1e8
[  124.747149][ T6826]  </TASK>
[  124.747177][ T6826] ERROR: Out of memory at tomoyo_realpath_from_path.
[  125.091278][ T6835] FAULT_INJECTION: forcing a failure.
[  125.091278][ T6835] name failslab, interval 1, probability 0, space 0, times 0
[  125.185709][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.4.240 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  125.185735][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  125.185745][ T6835] Call Trace:
[  125.185753][ T6835]  <TASK>
[  125.185761][ T6835]  dump_stack_lvl+0x189/0x250
[  125.185786][ T6835]  ? __pfx____ratelimit+0x10/0x10
[  125.185810][ T6835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.185831][ T6835]  ? __pfx__printk+0x10/0x10
[  125.185857][ T6835]  ? __pfx___might_resched+0x10/0x10
[  125.185875][ T6835]  ? fs_reclaim_acquire+0x7d/0x100
[  125.185906][ T6835]  should_fail_ex+0x414/0x560
[  125.185934][ T6835]  should_failslab+0xa8/0x100
[  125.185961][ T6835]  __kmalloc_cache_noprof+0x70/0x3d0
[  125.185983][ T6835]  ? pfkey_dump+0x246/0x6c0
[  125.186005][ T6835]  pfkey_dump+0x246/0x6c0
[  125.186032][ T6835]  pfkey_sendmsg+0xbfb/0x1090
[  125.186077][ T6835]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  125.186129][ T6835]  ? aa_sock_msg_perm+0xf1/0x1d0
[  125.186157][ T6835]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  125.186175][ T6835]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  125.186200][ T6835]  __sock_sendmsg+0x21c/0x270
[  125.186225][ T6835]  ____sys_sendmsg+0x505/0x830
[  125.186249][ T6835]  ? __pfx_____sys_sendmsg+0x10/0x10
[  125.186278][ T6835]  ? import_iovec+0x74/0xa0
[  125.186302][ T6835]  ___sys_sendmsg+0x21f/0x2a0
[  125.186321][ T6835]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.186379][ T6835]  ? __fget_files+0x2a/0x420
[  125.186403][ T6835]  ? __fget_files+0x3a0/0x420
[  125.186430][ T6835]  __x64_sys_sendmsg+0x19b/0x260
[  125.186446][ T6835]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  125.186468][ T6835]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  125.186497][ T6835]  ? __pfx_ksys_write+0x10/0x10
[  125.186517][ T6835]  ? rcu_is_watching+0x15/0xb0
[  125.186540][ T6835]  ? do_syscall_64+0xbe/0x3b0
[  125.186568][ T6835]  do_syscall_64+0xfa/0x3b0
[  125.186590][ T6835]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.186612][ T6835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.186629][ T6835]  ? clear_bhb_loop+0x60/0xb0
[  125.186649][ T6835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  125.186666][ T6835] RIP: 0033:0x7f3d9738ebe9
[  125.186682][ T6835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  125.186696][ T6835] RSP: 002b:00007f3d98200038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  125.186715][ T6835] RAX: ffffffffffffffda RBX: 00007f3d975b5fa0 RCX: 00007f3d9738ebe9
[  125.186728][ T6835] RDX: 0000000004040080 RSI: 0000200000002f00 RDI: 0000000000000003
[  125.186740][ T6835] RBP: 00007f3d98200090 R08: 0000000000000000 R09: 0000000000000000
[  125.186750][ T6835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  125.186760][ T6835] R13: 00007f3d975b6038 R14: 00007f3d975b5fa0 R15: 00007ffe45af41e8
[  125.186791][ T6835]  </TASK>
[  126.304422][ T6843] netlink: 52 bytes leftover after parsing attributes in process `syz.2.242'.
[  126.330631][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.242'.
[  126.394105][ T6843] netlink: 40 bytes leftover after parsing attributes in process `syz.2.242'.
[  126.424487][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'.
[  127.200720][ T6873] netlink: 'syz.2.252': attribute type 2 has an invalid length.
[  127.236370][ T6873] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.252'.
[  127.306561][ T6874] netlink: 'syz.2.252': attribute type 2 has an invalid length.
[  127.314242][ T6874] netlink: 137592 bytes leftover after parsing attributes in process `syz.2.252'.
[  127.588471][ T6882] FAULT_INJECTION: forcing a failure.
[  127.588471][ T6882] name failslab, interval 1, probability 0, space 0, times 0
[  127.605364][ T6882] CPU: 0 UID: 0 PID: 6882 Comm: syz.1.254 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  127.605389][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  127.605398][ T6882] Call Trace:
[  127.605406][ T6882]  <TASK>
[  127.605414][ T6882]  dump_stack_lvl+0x189/0x250
[  127.605438][ T6882]  ? __pfx____ratelimit+0x10/0x10
[  127.605468][ T6882]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.605488][ T6882]  ? __pfx__printk+0x10/0x10
[  127.605514][ T6882]  ? __pfx___might_resched+0x10/0x10
[  127.605532][ T6882]  ? fs_reclaim_acquire+0x7d/0x100
[  127.605561][ T6882]  should_fail_ex+0x414/0x560
[  127.605588][ T6882]  should_failslab+0xa8/0x100
[  127.605613][ T6882]  __kmalloc_noprof+0xcb/0x4f0
[  127.605635][ T6882]  ? tomoyo_encode+0x28b/0x550
[  127.605658][ T6882]  tomoyo_encode+0x28b/0x550
[  127.605678][ T6882]  tomoyo_realpath_from_path+0x58d/0x5d0
[  127.605696][ T6882]  ? tomoyo_domain+0xd9/0x130
[  127.605717][ T6882]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  127.605740][ T6882]  tomoyo_path_number_perm+0x1e8/0x5a0
[  127.605764][ T6882]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  127.605786][ T6882]  ? trace_call_bpf+0xb7/0x850
[  127.605805][ T6882]  ? trace_call_bpf+0xb7/0x850
[  127.605827][ T6882]  ? __lock_acquire+0xab9/0xd20
[  127.605870][ T6882]  ? __fget_files+0x2a/0x420
[  127.605887][ T6882]  ? __fget_files+0x2a/0x420
[  127.605900][ T6882]  ? __fget_files+0x3a0/0x420
[  127.605912][ T6882]  ? __fget_files+0x2a/0x420
[  127.605929][ T6882]  security_file_ioctl+0xcb/0x2d0
[  127.605952][ T6882]  __se_sys_ioctl+0x47/0x170
[  127.605975][ T6882]  do_syscall_64+0xfa/0x3b0
[  127.605997][ T6882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.606013][ T6882]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  127.606034][ T6882]  ? clear_bhb_loop+0x60/0xb0
[  127.606054][ T6882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.606070][ T6882] RIP: 0033:0x7f7bb658ebe9
[  127.606085][ T6882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.606098][ T6882] RSP: 002b:00007f7bb73cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  127.606116][ T6882] RAX: ffffffffffffffda RBX: 00007f7bb67b5fa0 RCX: 00007f7bb658ebe9
[  127.606128][ T6882] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 000000000000000a
[  127.606139][ T6882] RBP: 00007f7bb73cf090 R08: 0000000000000000 R09: 0000000000000000
[  127.606149][ T6882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.606159][ T6882] R13: 00007f7bb67b6038 R14: 00007f7bb67b5fa0 R15: 00007ffe6b59d1e8
[  127.606189][ T6882]  </TASK>
[  127.617663][ T6887] FAULT_INJECTION: forcing a failure.
[  127.617663][ T6887] name failslab, interval 1, probability 0, space 0, times 0
[  127.639328][ T6882] ERROR: Out of memory at tomoyo_realpath_from_path.
[  127.643781][ T6887] CPU: 1 UID: 0 PID: 6887 Comm: syz.3.256 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  127.643803][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  127.643813][ T6887] Call Trace:
[  127.643820][ T6887]  <TASK>
[  127.643828][ T6887]  dump_stack_lvl+0x189/0x250
[  127.643854][ T6887]  ? __pfx____ratelimit+0x10/0x10
[  127.643877][ T6887]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.643898][ T6887]  ? __pfx__printk+0x10/0x10
[  127.643930][ T6887]  ? __lock_acquire+0xab9/0xd20
[  127.643958][ T6887]  should_fail_ex+0x414/0x560
[  127.643986][ T6887]  should_failslab+0xa8/0x100
[  127.644013][ T6887]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  127.644036][ T6887]  ? __alloc_skb+0x112/0x2d0
[  127.644064][ T6887]  __alloc_skb+0x112/0x2d0
[  127.644092][ T6887]  __pfkey_xfrm_state2msg+0x495/0x3d30
[  127.644128][ T6887]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  127.644156][ T6887]  dump_sa+0xad/0x590
[  127.644177][ T6887]  xfrm_state_walk+0x295/0xa60
[  127.644203][ T6887]  ? __pfx_dump_sa+0x10/0x10
[  127.644231][ T6887]  pfkey_do_dump+0x5f/0x420
[  127.644255][ T6887]  pfkey_sendmsg+0xbfb/0x1090
[  127.644296][ T6887]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  127.644348][ T6887]  ? aa_sock_msg_perm+0xf1/0x1d0
[  127.644376][ T6887]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  127.644395][ T6887]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  127.644421][ T6887]  __sock_sendmsg+0x21c/0x270
[  127.644446][ T6887]  ____sys_sendmsg+0x505/0x830
[  127.644469][ T6887]  ? __pfx_____sys_sendmsg+0x10/0x10
[  127.644497][ T6887]  ? import_iovec+0x74/0xa0
[  127.644522][ T6887]  ___sys_sendmsg+0x21f/0x2a0
[  127.644543][ T6887]  ? __pfx____sys_sendmsg+0x10/0x10
[  127.644600][ T6887]  ? __fget_files+0x2a/0x420
[  127.644616][ T6887]  ? __fget_files+0x3a0/0x420
[  127.644642][ T6887]  __x64_sys_sendmsg+0x19b/0x260
[  127.644659][ T6887]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  127.644680][ T6887]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  127.644709][ T6887]  ? __pfx_ksys_write+0x10/0x10
[  127.644729][ T6887]  ? rcu_is_watching+0x15/0xb0
[  127.644752][ T6887]  ? do_syscall_64+0xbe/0x3b0
[  127.644780][ T6887]  do_syscall_64+0xfa/0x3b0
[  127.644801][ T6887]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.644822][ T6887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.644840][ T6887]  ? clear_bhb_loop+0x60/0xb0
[  127.644862][ T6887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  127.644878][ T6887] RIP: 0033:0x7f641a18ebe9
[  127.644895][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  127.644909][ T6887] RSP: 002b:00007f641af47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  127.644928][ T6887] RAX: ffffffffffffffda RBX: 00007f641a3b5fa0 RCX: 00007f641a18ebe9
[  127.644941][ T6887] RDX: 0000000004040080 RSI: 0000200000002f00 RDI: 0000000000000003
[  127.644952][ T6887] RBP: 00007f641af47090 R08: 0000000000000000 R09: 0000000000000000
[  127.644963][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  127.644973][ T6887] R13: 00007f641a3b6038 R14: 00007f641a3b5fa0 R15: 00007ffd62a1a018
[  127.645004][ T6887]  </TASK>
[  127.795237][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'.
[  128.472108][ T6903] : renamed from gre0 (while UP)
[  128.604875][ T5182] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  128.605083][ T5182] Bluetooth: hci1: connection err: -111
[  128.751536][ T6915] 
@ÿÿÿ: renamed from bond_slave_0 (while UP)
[  129.633843][ T6934] C: renamed from team_slave_0 (while UP)
[  129.754122][ T6934] netlink: 'syz.3.269': attribute type 8 has an invalid length.
[  129.798341][ T6934] net_ratelimit: 76 callbacks suppressed
[  129.798360][ T6934] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  130.208612][ T6926] delete_channel: no stack
[  130.235346][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.275'.
[  131.062844][ T6963] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[  131.096883][ T6963] netlink: 'syz.0.279': attribute type 2 has an invalid length.
[  131.138410][ T6963] netlink: 'syz.0.279': attribute type 7 has an invalid length.
[  131.219143][ T6964] netlink: 'syz.0.279': attribute type 16 has an invalid length.
[  131.231455][ T6963] netlink: 37 bytes leftover after parsing attributes in process `syz.0.279'.
[  131.245530][ T6963] netlink: 'syz.0.279': attribute type 1 has an invalid length.
[  131.259371][ T6963] netlink: 'syz.0.279': attribute type 2 has an invalid length.
[  131.316313][ T6964] netlink: 156 bytes leftover after parsing attributes in process `syz.0.279'.
[  131.320886][ T6965] netlink: 'syz.0.279': attribute type 21 has an invalid length.
[  131.369925][ T6963] netlink: 130076 bytes leftover after parsing attributes in process `syz.0.279'.
[  131.389513][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'.
[  131.844148][ T6986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  132.230577][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'.
[  132.803070][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.809737][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  135.031908][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'.
[  135.994483][ T7069] netlink: 'syz.2.313': attribute type 10 has an invalid length.
[  136.025352][ T7069] team0: Device ipvlan1 failed to register rx_handler
[  136.520565][ T7083] netlink: 'syz.2.318': attribute type 29 has an invalid length.
[  136.577928][ T7084] netlink: 'syz.2.318': attribute type 29 has an invalid length.
[  136.627861][ T7083] netlink: 'syz.2.318': attribute type 29 has an invalid length.
[  136.809191][ T7090] netlink: 'syz.3.319': attribute type 11 has an invalid length.
[  136.886244][ T7090] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.319'.
[  137.001692][ T7087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.513572][ T7111] netlink: 'syz.1.326': attribute type 16 has an invalid length.
[  137.562951][ T7111] netlink: 156 bytes leftover after parsing attributes in process `syz.1.326'.
[  137.899739][ T7131] netlink: 188 bytes leftover after parsing attributes in process `syz.2.333'.
[  138.234431][ T7136] netlink: 'syz.4.334': attribute type 1 has an invalid length.
[  138.326395][ T7136] netlink: 'syz.4.334': attribute type 4 has an invalid length.
[  138.382385][ T7136] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.334'.
[  138.978817][ T7149] netlink: 'syz.2.338': attribute type 2 has an invalid length.
[  139.021231][ T7149] netlink: 'syz.2.338': attribute type 8 has an invalid length.
[  139.044296][ T7149] netlink: 132 bytes leftover after parsing attributes in process `syz.2.338'.
[  139.258298][ T7154] netlink: 'syz.1.341': attribute type 11 has an invalid length.
[  139.324119][ T7154] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.341'.
[  139.386956][ T7151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  139.603762][ T7159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.343'.
[  139.882424][ T7172] netlink: 'syz.1.347': attribute type 2 has an invalid length.
[  140.439118][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'.
[  140.853742][ T5182] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5
[  140.887615][ T5182] Bluetooth: hci1: ISO packet for unknown connection handle 62
[  141.339874][ T7219] netlink: 68 bytes leftover after parsing attributes in process `syz.4.361'.
[  141.431730][ T7219] validate_nla: 1 callbacks suppressed
[  141.431747][ T7219] netlink: 'syz.4.361': attribute type 9 has an invalid length.
[  142.614745][ T7229] sit0: entered allmulticast mode
[  143.109825][ T7247] wg2: entered promiscuous mode
[  143.125479][ T7247] wg2: entered allmulticast mode
[  143.793092][ T7258] syz.4.374 uses obsolete (PF_INET,SOCK_PACKET)
[  145.522164][ T7317] netlink: 'syz.0.394': attribute type 40 has an invalid length.
[  145.559244][ T7319] netlink: 64 bytes leftover after parsing attributes in process `syz.3.397'.
[  145.584690][ T7319] netlink: 'syz.3.397': attribute type 5 has an invalid length.
[  145.626962][ T7319] netlink: 130080 bytes leftover after parsing attributes in process `syz.3.397'.
[  145.666300][ T7316] : entered promiscuous mode
[  145.788192][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.104208][ T7341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.403'.
[  146.312436][ T7344] netlink: 'syz.2.404': attribute type 11 has an invalid length.
[  146.334385][ T7344] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.404'.
[  146.937887][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'.
[  147.302825][ T7379] netlink: 60 bytes leftover after parsing attributes in process `syz.4.417'.
[  147.430018][ T7375] netlink: 60 bytes leftover after parsing attributes in process `syz.4.417'.
[  147.547393][ T7386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.417'.
[  148.303299][ T7403] syzkaller0: entered promiscuous mode
[  148.390647][ T7403] syzkaller0: entered allmulticast mode
[  150.400602][ T7420] netlink: 'syz.2.432': attribute type 49 has an invalid length.
[  150.608751][ T7443] netlink: 'syz.4.438': attribute type 23 has an invalid length.
[  150.750020][ T7451] netlink: 992 bytes leftover after parsing attributes in process `syz.1.442'.
[  150.784872][ T7453] netlink: 144 bytes leftover after parsing attributes in process `syz.0.440'.
[  150.820428][ T7454] netlink: 60 bytes leftover after parsing attributes in process `syz.4.443'.
[  150.895763][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.444'.
[  151.003076][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  151.445342][ T7467] lo speed is unknown, defaulting to 1000
[  151.494714][ T7472] netlink: 'syz.2.451': attribute type 7 has an invalid length.
[  152.084569][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'.
[  152.493806][ T7506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.463'.
[  152.738756][ T7518] netlink: 'syz.0.466': attribute type 7 has an invalid length.
[  153.531795][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'.
[  153.777333][ T7547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.476'.
[  153.833626][ T7547] netlink: 'syz.1.476': attribute type 40 has an invalid length.
[  153.939122][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.419524][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.480'.
[  154.429435][ T7563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.480'.
[  154.443175][ T7563] netlink: 'syz.4.480': attribute type 4 has an invalid length.
[  154.736545][ T5182] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  154.892332][ T7584] netlink: 'syz.0.486': attribute type 10 has an invalid length.
[  154.907947][ T7584] team0: Device veth1_macvtap failed to register rx_handler
[  155.398772][ T7600] netlink: 'syz.4.490': attribute type 23 has an invalid length.
[  155.557835][ T7606] netlink: 'syz.2.493': attribute type 23 has an invalid length.
[  156.397763][ T7647] netlink: 'syz.3.509': attribute type 23 has an invalid length.
[  156.595951][ T7657] netlink: 'syz.1.511': attribute type 7 has an invalid length.
[  156.847495][ T7681] netlink: 'syz.1.516': attribute type 39 has an invalid length.
[  156.911878][ T7681] veth0_macvtap: left promiscuous mode
[  158.268652][ T7726] syzkaller0: refused to change device tx_queue_len
[  158.714986][ T7738] netlink: 'syz.0.530': attribute type 10 has an invalid length.
[  158.735254][ T7738] __nla_validate_parse: 5 callbacks suppressed
[  158.735281][ T7738] netlink: 55 bytes leftover after parsing attributes in process `syz.0.530'.
[  158.792895][ T7740] delete_channel: no stack
[  159.130783][ T7753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.538'.
[  160.231312][ T7776] FAULT_INJECTION: forcing a failure.
[  160.231312][ T7776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  160.266241][ T7776] CPU: 0 UID: 0 PID: 7776 Comm: syz.4.546 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  160.266266][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  160.266275][ T7776] Call Trace:
[  160.266281][ T7776]  <TASK>
[  160.266289][ T7776]  dump_stack_lvl+0x189/0x250
[  160.266314][ T7776]  ? __pfx____ratelimit+0x10/0x10
[  160.266337][ T7776]  ? __pfx_dump_stack_lvl+0x10/0x10
[  160.266358][ T7776]  ? __pfx__printk+0x10/0x10
[  160.266381][ T7776]  ? __might_fault+0xb0/0x130
[  160.266417][ T7776]  should_fail_ex+0x414/0x560
[  160.266445][ T7776]  _copy_to_user+0x31/0xb0
[  160.266467][ T7776]  bpf_copy_to_user+0xa5/0x180
[  160.266487][ T7776]  bpf_task_fd_query_copy+0x13e/0x310
[  160.266512][ T7776]  bpf_task_fd_query+0x5c1/0x670
[  160.266537][ T7776]  ? bpf_task_fd_query+0x19d/0x670
[  160.266559][ T7776]  ? __pfx_bpf_task_fd_query+0x10/0x10
[  160.266595][ T7776]  ? bpf_lsm_bpf+0x9/0x20
[  160.266616][ T7776]  ? security_bpf+0x7e/0x300
[  160.266641][ T7776]  __sys_bpf+0x4a0/0x870
[  160.266665][ T7776]  ? __pfx___sys_bpf+0x10/0x10
[  160.266702][ T7776]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  160.266726][ T7776]  ? __pfx_ksys_write+0x10/0x10
[  160.266746][ T7776]  ? rcu_is_watching+0x15/0xb0
[  160.266771][ T7776]  __x64_sys_bpf+0x7c/0x90
[  160.266792][ T7776]  do_syscall_64+0xfa/0x3b0
[  160.266814][ T7776]  ? lockdep_hardirqs_on+0x9c/0x150
[  160.266835][ T7776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.266853][ T7776]  ? clear_bhb_loop+0x60/0xb0
[  160.266882][ T7776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.266900][ T7776] RIP: 0033:0x7f3d9738ebe9
[  160.266916][ T7776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.266931][ T7776] RSP: 002b:00007f3d98200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  160.266950][ T7776] RAX: ffffffffffffffda RBX: 00007f3d975b5fa0 RCX: 00007f3d9738ebe9
[  160.266962][ T7776] RDX: 0000000000000011 RSI: 0000200000000280 RDI: 0000000000000014
[  160.266974][ T7776] RBP: 00007f3d98200090 R08: 0000000000000000 R09: 0000000000000000
[  160.266984][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  160.266994][ T7776] R13: 00007f3d975b6038 R14: 00007f3d975b5fa0 R15: 00007ffe45af41e8
[  160.267024][ T7776]  </TASK>
[  160.896606][ T7794] netlink: 'syz.0.548': attribute type 28 has an invalid length.
[  161.624215][ T7804] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.555'.
[  162.072792][ T7824] netlink: 'syz.4.561': attribute type 23 has an invalid length.
[  162.126747][ T7826] netlink: 36 bytes leftover after parsing attributes in process `syz.3.562'.
[  162.152542][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'.
[  162.180945][ T7828] netlink: 'syz.1.563': attribute type 37 has an invalid length.
[  162.198508][ T7826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'.
[  162.330497][ T7837] netlink: 'syz.4.565': attribute type 23 has an invalid length.
[  163.146753][ T7870] netlink: 202232 bytes leftover after parsing attributes in process `syz.0.575'.
[  163.194926][ T7870] netlink: zone id is out of range
[  163.235563][ T7870] netlink: zone id is out of range
[  163.272801][ T7870] netlink: zone id is out of range
[  163.289760][ T7870] netlink: zone id is out of range
[  163.306316][ T7870] netlink: zone id is out of range
[  163.323888][ T7870] netlink: zone id is out of range
[  163.337251][ T7870] netlink: zone id is out of range
[  163.366204][ T7870] netlink: zone id is out of range
[  163.385954][ T7870] netlink: zone id is out of range
[  163.395094][ T7870] netlink: zone id is out of range
[  163.408085][ T7866] syz.1.573 (7866) used greatest stack depth: 15472 bytes left
[  163.429603][ T7878] sit0: entered allmulticast mode
[  163.469236][ T7878] sit0: entered promiscuous mode
[  164.148356][ T7899] FAULT_INJECTION: forcing a failure.
[  164.148356][ T7899] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  164.202005][ T7899] CPU: 1 UID: 0 PID: 7899 Comm: syz.4.583 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  164.202032][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  164.202042][ T7899] Call Trace:
[  164.202049][ T7899]  <TASK>
[  164.202057][ T7899]  dump_stack_lvl+0x189/0x250
[  164.202082][ T7899]  ? __pfx____ratelimit+0x10/0x10
[  164.202106][ T7899]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.202127][ T7899]  ? __pfx__printk+0x10/0x10
[  164.202151][ T7899]  ? __might_fault+0xb0/0x130
[  164.202186][ T7899]  should_fail_ex+0x414/0x560
[  164.202214][ T7899]  _copy_from_iter+0x575/0x16f0
[  164.202250][ T7899]  ? __pfx__copy_from_iter+0x10/0x10
[  164.202278][ T7899]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  164.202302][ T7899]  skb_copy_datagram_from_iter+0xf5/0x720
[  164.202325][ T7899]  ? dev_get_by_index+0x22/0x2e0
[  164.202344][ T7899]  ? skb_put+0x11b/0x210
[  164.202373][ T7899]  packet_sendmsg+0x3797/0x5080
[  164.202403][ T7899]  ? aa_profile_af_perm+0x50/0x320
[  164.202447][ T7899]  ? __pfx___might_resched+0x10/0x10
[  164.202463][ T7899]  ? __lock_acquire+0xab9/0xd20
[  164.202502][ T7899]  ? __pfx_packet_sendmsg+0x10/0x10
[  164.202519][ T7899]  ? aa_sk_perm+0x81e/0x950
[  164.202550][ T7899]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  164.202574][ T7899]  ? __lock_acquire+0xab9/0xd20
[  164.202595][ T7899]  ? aa_sock_msg_perm+0xf1/0x1d0
[  164.202622][ T7899]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  164.202641][ T7899]  ? __pfx_packet_sendmsg+0x10/0x10
[  164.202661][ T7899]  __sock_sendmsg+0x21c/0x270
[  164.202686][ T7899]  ____sys_sendmsg+0x505/0x830
[  164.202710][ T7899]  ? __pfx_____sys_sendmsg+0x10/0x10
[  164.202746][ T7899]  ? import_iovec+0x74/0xa0
[  164.202770][ T7899]  ___sys_sendmsg+0x21f/0x2a0
[  164.202790][ T7899]  ? __pfx____sys_sendmsg+0x10/0x10
[  164.202845][ T7899]  ? __fget_files+0x2a/0x420
[  164.202861][ T7899]  ? __fget_files+0x3a0/0x420
[  164.202887][ T7899]  __x64_sys_sendmsg+0x19b/0x260
[  164.202909][ T7899]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  164.202937][ T7899]  ? __pfx_ksys_write+0x10/0x10
[  164.202957][ T7899]  ? rcu_is_watching+0x15/0xb0
[  164.202981][ T7899]  ? do_syscall_64+0xbe/0x3b0
[  164.203008][ T7899]  do_syscall_64+0xfa/0x3b0
[  164.203033][ T7899]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.203055][ T7899]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.203072][ T7899]  ? clear_bhb_loop+0x60/0xb0
[  164.203093][ T7899]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.203110][ T7899] RIP: 0033:0x7f3d9738ebe9
[  164.203126][ T7899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  164.203139][ T7899] RSP: 002b:00007f3d981df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  164.203159][ T7899] RAX: ffffffffffffffda RBX: 00007f3d975b6090 RCX: 00007f3d9738ebe9
[  164.203171][ T7899] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000005
[  164.203183][ T7899] RBP: 00007f3d981df090 R08: 0000000000000000 R09: 0000000000000000
[  164.203193][ T7899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  164.203204][ T7899] R13: 00007f3d975b6128 R14: 00007f3d975b6090 R15: 00007ffe45af41e8
[  164.203233][ T7899]  </TASK>
[  164.869773][ T7902] lo speed is unknown, defaulting to 1000
[  164.947344][ T7909] netlink: 'syz.0.587': attribute type 4 has an invalid length.
[  164.956691][ T7907] netlink: 44 bytes leftover after parsing attributes in process `syz.1.586'.
[  164.973685][ T7909] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.587'.
[  164.984282][ T7907] netlink: 43 bytes leftover after parsing attributes in process `syz.1.586'.
[  165.018138][ T7910] netlink: 60 bytes leftover after parsing attributes in process `syz.3.585'.
[  165.042958][ T7907] netlink: 'syz.1.586': attribute type 5 has an invalid length.
[  165.054397][ T7904] netlink: 60 bytes leftover after parsing attributes in process `syz.3.585'.
[  165.086960][ T7907] netlink: 43 bytes leftover after parsing attributes in process `syz.1.586'.
[  165.146564][ T7910] netlink: 'syz.3.585': attribute type 10 has an invalid length.
[  165.248543][ T7910] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  166.406721][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.4.602'.
[  166.436318][ T7953] netlink: 'syz.4.602': attribute type 2 has an invalid length.
[  166.448319][ T7954] netlink: 'syz.4.602': attribute type 4 has an invalid length.
[  166.466411][ T7954] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.602'.
[  166.498073][ T7953] netlink: 'syz.4.602': attribute type 4 has an invalid length.
[  166.505824][ T7953] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.602'.
[  166.910085][ T7979] netlink: 48 bytes leftover after parsing attributes in process `syz.4.611'.
[  167.927575][ T8005] hsr0: entered promiscuous mode
[  168.055149][ T8013] netlink: 'syz.0.620': attribute type 10 has an invalid length.
[  168.073755][ T8013] batman_adv: batadv0: Adding interface: hsr_slave_1
[  168.090645][ T8013] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.132113][ T8013] batman_adv: batadv0: Interface activated: hsr_slave_1
[  171.034147][ T8106] __nla_validate_parse: 2 callbacks suppressed
[  171.034177][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.648'.
[  171.126280][ T8112] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.650'.
[  171.182664][ T8087] infiniband syz1: set active
[  171.190645][ T8087] infiniband syz1: added bond0
[  171.241803][ T8087] RDS/IB: syz1: added
[  171.248414][ T8087] smc: adding ib device syz1 with port count 1
[  171.254858][ T8087] smc:    ib device syz1 port 1 has pnetid 
[  171.480021][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.653'.
[  172.809090][ T8144] lo speed is unknown, defaulting to 1000
[  172.953368][ T8161] lo speed is unknown, defaulting to 1000
[  173.370566][ T8173] netlink: 277 bytes leftover after parsing attributes in process `syz.2.662'.
[  173.781051][ T8185] C: renamed from team_slave_0 (while UP)
[  173.813191][ T8185] netlink: 'syz.1.665': attribute type 3 has an invalid length.
[  173.847439][ T8185] netlink: 152 bytes leftover after parsing attributes in process `syz.1.665'.
[  179.159877][ T8248] netlink: 'syz.0.680': attribute type 1 has an invalid length.
[  179.987832][ T8257] netlink: 'syz.4.682': attribute type 10 has an invalid length.
[  180.332522][ T8257] team0: Device ipvlan1 failed to register rx_handler
[  182.029981][ T7670] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  182.257162][ T8290] syzkaller0: create flow: hash 3839646980 index 1
[  182.558958][ T8300] netlink: 'syz.1.696': attribute type 7 has an invalid length.
[  182.886781][ T8290] syzkaller0: delete flow: hash 3839646980 index 1
[  183.821084][ T8335] netlink: 276 bytes leftover after parsing attributes in process `syz.3.706'.
[  184.031536][ T8344] netlink: 'syz.1.708': attribute type 7 has an invalid length.
[  184.233145][ T8348] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  184.250182][ T8348] netlink: 'syz.2.710': attribute type 4 has an invalid length.
[  184.267045][ T8348] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.710'.
[  184.288466][ T8348] netlink: 'syz.2.710': attribute type 1 has an invalid length.
[  184.305318][ T8348] netlink: 'syz.2.710': attribute type 4 has an invalid length.
[  184.313977][ T8348] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.710'.
[  184.556478][ T8351] net_ratelimit: 13 callbacks suppressed
[  184.556501][ T8351] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  185.764361][ T8358] netlink: 'syz.1.714': attribute type 10 has an invalid length.
[  185.816465][ T8358] netlink: 152 bytes leftover after parsing attributes in process `syz.1.714'.
[  185.850494][ T8367] pim6reg1: entered allmulticast mode
[  187.568194][ T8358] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  187.869005][ T8380] netlink: 152 bytes leftover after parsing attributes in process `syz.4.722'.
[  187.895416][ T8385] netlink: 'syz.1.724': attribute type 7 has an invalid length.
[  188.311246][ T8398] netlink: 'syz.4.729': attribute type 2 has an invalid length.
[  189.578163][ T8421] netlink: 152 bytes leftover after parsing attributes in process `syz.1.737'.
[  189.630382][ T8426] netlink: 'syz.2.739': attribute type 7 has an invalid length.
[  190.476006][ T8456] netlink: 'syz.4.746': attribute type 23 has an invalid length.
[  190.504391][ T8456] netlink: 'syz.4.746': attribute type 6 has an invalid length.
[  191.005430][ T8468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.752'.
[  191.095946][ T8449] delete_channel: no stack
[  191.158662][ T8470] netlink: 'syz.1.754': attribute type 7 has an invalid length.
[  191.187515][ T8472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.753'.
[  191.744145][ T8498] netlink: 92 bytes leftover after parsing attributes in process `syz.2.761'.
[  191.776373][ T8498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.761'.
[  191.785384][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.2.761'.
[  191.809471][ T8501] netlink: 'syz.4.762': attribute type 3 has an invalid length.
[  191.866323][ T8501] netlink: 'syz.4.762': attribute type 1 has an invalid length.
[  191.887691][ T8494] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.761'.
[  191.907528][ T8501] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.762'.
[  192.017894][ T8494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.761'.
[  192.089675][ T8518] netlink: 'syz.3.768': attribute type 7 has an invalid length.
[  192.449004][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'.
[  192.743805][ T8534] bridge_slave_1: left allmulticast mode
[  192.789320][ T8534] bridge_slave_1: left promiscuous mode
[  192.815781][ T8534] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.934151][ T8534] bridge_slave_0: left allmulticast mode
[  192.950331][ T8534] bridge_slave_0: left promiscuous mode
[  192.957969][ T8541] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1
[  192.988640][ T8534] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.965360][ T8543] lo speed is unknown, defaulting to 1000
[  193.984809][ T8559] netlink: 'syz.2.782': attribute type 11 has an invalid length.
[  194.144954][ T8561] netlink: 'syz.0.783': attribute type 7 has an invalid length.
[  194.278463][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.285895][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  196.310146][ T5882] Bluetooth: hci2: command 0x0406 tx timeout
[  196.310251][ T5880] Bluetooth: hci4: command 0x0406 tx timeout
[  196.316516][ T5882] Bluetooth: hci0: command 0x0406 tx timeout
[  196.316654][ T5882] Bluetooth: hci1: command 0x0406 tx timeout
[  196.316783][ T5874] Bluetooth: hci3: command 0x0406 tx timeout
[  196.464454][ T8584] __nla_validate_parse: 3 callbacks suppressed
[  196.464472][ T8584] netlink: 104 bytes leftover after parsing attributes in process `syz.0.792'.
[  197.489099][ T8611] netlink: 'syz.0.797': attribute type 7 has an invalid length.
[  198.078702][ T8616] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.799'.
[  198.189328][ T8616] netlink: 'syz.2.799': attribute type 10 has an invalid length.
[  198.567487][ T8616] team0: Port device geneve1 added
[  198.710335][ T8624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.801'.
[  199.026994][ T8635] netlink: 364 bytes leftover after parsing attributes in process `syz.3.805'.
[  199.706663][ T8643] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.809'.
[  200.106988][ T8638] lo speed is unknown, defaulting to 1000
[  200.149593][ T8650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.810'.
[  200.178917][ T8643] lo speed is unknown, defaulting to 1000
[  200.282122][ T8644] netlink: 'syz.4.807': attribute type 1 has an invalid length.
[  200.383548][ T8644] netlink: 17 bytes leftover after parsing attributes in process `syz.4.807'.
[  200.637074][ T8658] netlink: 'syz.2.811': attribute type 7 has an invalid length.
[  201.510357][ T8675] lo speed is unknown, defaulting to 1000
[  201.609945][ T8684] netlink: 'syz.2.819': attribute type 10 has an invalid length.
[  203.830091][ T8721] netlink: 'syz.2.829': attribute type 10 has an invalid length.
[  203.870918][ T8721] netlink: 55 bytes leftover after parsing attributes in process `syz.2.829'.
[  203.875726][ T8723] netlink: 32 bytes leftover after parsing attributes in process `syz.4.830'.
[  203.948980][ T8724] delete_channel: no stack
[  204.089228][ T8730] netlink: 17 bytes leftover after parsing attributes in process `syz.4.830'.
[  204.100164][ T8730] netlink: zone id is out of range
[  204.112571][ T8730] netlink: zone id is out of range
[  204.177045][ T8730] netlink: zone id is out of range
[  204.208133][ T8730] netlink: zone id is out of range
[  204.221589][ T8730] netlink: zone id is out of range
[  204.229004][ T8730] netlink: zone id is out of range
[  204.234388][ T8730] netlink: zone id is out of range
[  204.247595][ T8730] netlink: zone id is out of range
[  204.253167][ T8730] netlink: zone id is out of range
[  204.261959][ T8730] netlink: zone id is out of range
[  206.041864][ T8723] lo speed is unknown, defaulting to 1000
[  206.894082][ T8748] netlink: 'syz.3.837': attribute type 21 has an invalid length.
[  206.942556][ T8748] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.837'.
[  207.249174][ T8757] netlink: 'syz.2.840': attribute type 7 has an invalid length.
[  207.869672][ T8764] netlink: 'syz.0.841': attribute type 41 has an invalid length.
[  208.377712][ T8764] netlink: 'syz.0.841': attribute type 1 has an invalid length.
[  208.471192][ T8782] netlink: 'syz.4.845': attribute type 7 has an invalid length.
[  208.493832][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.847'.
[  208.705696][ T8791] FAULT_INJECTION: forcing a failure.
[  208.705696][ T8791] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.762559][ T8791] CPU: 0 UID: 0 PID: 8791 Comm: syz.4.849 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  208.762585][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  208.762595][ T8791] Call Trace:
[  208.762602][ T8791]  <TASK>
[  208.762610][ T8791]  dump_stack_lvl+0x189/0x250
[  208.762636][ T8791]  ? __pfx____ratelimit+0x10/0x10
[  208.762659][ T8791]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.762679][ T8791]  ? __pfx__printk+0x10/0x10
[  208.762720][ T8791]  should_fail_ex+0x414/0x560
[  208.762750][ T8791]  _copy_to_user+0x31/0xb0
[  208.762773][ T8791]  simple_read_from_buffer+0xe1/0x170
[  208.762804][ T8791]  proc_fail_nth_read+0x1b3/0x220
[  208.762829][ T8791]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  208.762853][ T8791]  ? rw_verify_area+0x2a6/0x4d0
[  208.762873][ T8791]  ? __lock_acquire+0xab9/0xd20
[  208.762894][ T8791]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  208.762917][ T8791]  vfs_read+0x1fd/0xa30
[  208.762938][ T8791]  ? fdget_pos+0x247/0x320
[  208.762959][ T8791]  ? __pfx___mutex_lock+0x10/0x10
[  208.762984][ T8791]  ? __pfx_vfs_read+0x10/0x10
[  208.763008][ T8791]  ? __fget_files+0x2a/0x420
[  208.763030][ T8791]  ? __fget_files+0x3a0/0x420
[  208.763045][ T8791]  ? __fget_files+0x2a/0x420
[  208.763080][ T8791]  ksys_read+0x145/0x250
[  208.763106][ T8791]  ? __pfx_ksys_read+0x10/0x10
[  208.763125][ T8791]  ? rcu_is_watching+0x15/0xb0
[  208.763151][ T8791]  ? do_syscall_64+0xbe/0x3b0
[  208.763180][ T8791]  do_syscall_64+0xfa/0x3b0
[  208.763201][ T8791]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.763223][ T8791]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.763240][ T8791]  ? clear_bhb_loop+0x60/0xb0
[  208.763264][ T8791]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  208.763281][ T8791] RIP: 0033:0x7f3d9738d5fc
[  208.763298][ T8791] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  208.763312][ T8791] RSP: 002b:00007f3d98200030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  208.763331][ T8791] RAX: ffffffffffffffda RBX: 00007f3d975b5fa0 RCX: 00007f3d9738d5fc
[  208.763344][ T8791] RDX: 000000000000000f RSI: 00007f3d982000a0 RDI: 0000000000000004
[  208.763354][ T8791] RBP: 00007f3d98200090 R08: 0000000000000000 R09: 0000000000000000
[  208.763365][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  208.763375][ T8791] R13: 00007f3d975b6038 R14: 00007f3d975b5fa0 R15: 00007ffe45af41e8
[  208.763408][ T8791]  </TASK>
[  209.114085][ T8802] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.851'.
[  209.129796][ T8802] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.851'.
[  209.146922][ T8801] netlink: 148 bytes leftover after parsing attributes in process `syz.4.853'.
[  209.163439][ T8801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.853'.
[  209.541781][ T8817] netlink: 'syz.3.859': attribute type 7 has an invalid length.
[  209.644064][ T8822] netlink: 'syz.4.861': attribute type 10 has an invalid length.
[  209.669348][ T8822] netlink: 763 bytes leftover after parsing attributes in process `syz.4.861'.
[  209.688111][ T5868] Bluetooth: hci2: Malformed HCI Event
[  209.901777][ T8834] netlink: 'syz.2.865': attribute type 2 has an invalid length.
[  210.697498][ T8848] delete_channel: no stack
[  210.721190][ T8850] netlink: 132 bytes leftover after parsing attributes in process `syz.2.870'.
[  210.780096][ T8853] netlink: 'syz.1.873': attribute type 7 has an invalid length.
[  210.923328][ T8857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.874'.
[  211.012320][ T8861] netlink: 296 bytes leftover after parsing attributes in process `syz.1.876'.
[  211.056909][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.273467][ T8857] bridge_slave_0 (unregistering): left promiscuous mode
[  211.316167][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.282771][ T8885] netlink: 'syz.1.884': attribute type 10 has an invalid length.
[  212.312605][ T8885] netlink: 'syz.1.884': attribute type 19 has an invalid length.
[  212.354544][ T8885] netlink: 156 bytes leftover after parsing attributes in process `syz.1.884'.
[  212.381187][ T8889] netlink: 'syz.3.886': attribute type 7 has an invalid length.
[  212.498788][ T8894] delete_channel: no stack
[  212.540158][ T8892] veth1_macvtap: left promiscuous mode
[  213.214574][ T7671] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  213.534572][ T8929] netlink: 'syz.1.898': attribute type 5 has an invalid length.
[  213.562386][ T8929] netlink: 130080 bytes leftover after parsing attributes in process `syz.1.898'.
[  213.597171][ T8931] netlink: 'syz.2.899': attribute type 7 has an invalid length.
[  213.848541][ T8940] netlink: 'syz.0.903': attribute type 21 has an invalid length.
[  214.009521][ T8945] syzkaller0: refused to change device tx_queue_len
[  214.233420][ T8951] __nla_validate_parse: 1 callbacks suppressed
[  214.233437][ T8951] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.907'.
[  215.834968][ T7671] wlan1: Trigger new scan to find an IBSS to join
[  216.603325][ T9000] netlink: 'syz.4.927': attribute type 2 has an invalid length.
[  216.620143][ T9004] netlink: 'syz.4.927': attribute type 2 has an invalid length.
[  216.647102][ T9007] netlink: 40 bytes leftover after parsing attributes in process `syz.3.924'.
[  216.689547][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'.
[  216.762446][ T9007] netlink: 56 bytes leftover after parsing attributes in process `syz.3.924'.
[  216.775305][ T9007] netlink: 56 bytes leftover after parsing attributes in process `syz.3.924'.
[  217.284217][ T9006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'.
[  217.733672][ T9038] netlink: 'syz.0.933': attribute type 40 has an invalid length.
[  218.872400][ T7671] wlan1: Trigger new scan to find an IBSS to join
[  220.720819][ T2966] wlan1: Creating new IBSS network, BSSID 1e:7b:59:28:a6:5c
[  220.962415][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'.
[  220.974666][ T9063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'.
[  221.026246][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'.
[  221.076778][ T9063] syzkaller1: tun_chr_ioctl cmd 1074025677
[  221.082808][ T9063] syzkaller1: linktype set to 776
[  221.254260][ T9068] netlink: 'syz.2.941': attribute type 2 has an invalid length.
[  222.336623][ T9068] lo speed is unknown, defaulting to 1000
[  223.466350][ T9092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.950'.
[  223.835369][ T9109] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.951'.
[  223.845696][ T9113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.955'.
[  223.872729][ T9113] unsupported nlmsg_type 40
[  224.169253][ T9120] netlink: 164 bytes leftover after parsing attributes in process `syz.1.958'.
[  224.225657][ T9120] netlink: 164 bytes leftover after parsing attributes in process `syz.1.958'.
[  224.911850][ T9139] netlink: 'syz.4.966': attribute type 9 has an invalid length.
[  224.932360][ T9139] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.966'.
[  224.979325][ T9145] netlink: 14 bytes leftover after parsing attributes in process `syz.0.969'.
[  225.243147][ T9157] : entered promiscuous mode
[  225.577228][ T9176] tap0: tun_chr_ioctl cmd 2147767521
[  226.297897][ T9174] delete_channel: no stack
[  226.660230][ T9209] __nla_validate_parse: 4 callbacks suppressed
[  226.660247][ T9209] netlink: 830 bytes leftover after parsing attributes in process `syz.2.982'.
[  227.124296][ T9218] syzkaller0: entered promiscuous mode
[  227.141030][ T9218] syzkaller0: entered allmulticast mode
[  227.618973][ T5868] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10
[  227.619046][ T5868] Bluetooth: hci2: connection err: -111
[  230.954754][ T9236] netlink: 128 bytes leftover after parsing attributes in process `syz.1.990'.
[  230.967602][ T9236] net_ratelimit: 18 callbacks suppressed
[  230.967630][ T9236] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  231.052179][ T9272] netlink: 'syz.3.999': attribute type 2 has an invalid length.
[  231.090397][ T9272] netlink: 16086 bytes leftover after parsing attributes in process `syz.3.999'.
[  231.294246][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'.
[  231.308752][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'.
[  231.344196][ T9281] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1004'.
[  232.763588][ T9304] netlink: 'syz.2.1001': attribute type 10 has an invalid length.
[  232.804646][ T9308] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1012'.
[  232.854308][ T9304] 8021q: adding VLAN 0 to HW filter on device team0
[  232.972636][ T9304] bond0: (slave team0): Enslaving as an active interface with an up link
[  233.055140][ T9310] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  234.213869][ T9335] rdma_rxe: rxe_newlink: failed to add bond0
[  234.460969][ T9349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1021'.
[  234.513830][ T9352] netlink: 'syz.4.1021': attribute type 10 has an invalid length.
[  234.524968][ T9352] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1021'.
[  235.048417][ T9363] FAULT_INJECTION: forcing a failure.
[  235.048417][ T9363] name failslab, interval 1, probability 0, space 0, times 0
[  235.209661][ T9363] CPU: 0 UID: 0 PID: 9363 Comm: syz.0.1027 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  235.209689][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  235.209700][ T9363] Call Trace:
[  235.209707][ T9363]  <TASK>
[  235.209715][ T9363]  dump_stack_lvl+0x189/0x250
[  235.209742][ T9363]  ? __pfx____ratelimit+0x10/0x10
[  235.209767][ T9363]  ? __pfx_dump_stack_lvl+0x10/0x10
[  235.209788][ T9363]  ? __pfx__printk+0x10/0x10
[  235.209817][ T9363]  ? __pfx___might_resched+0x10/0x10
[  235.209844][ T9363]  should_fail_ex+0x414/0x560
[  235.209872][ T9363]  should_failslab+0xa8/0x100
[  235.209899][ T9363]  __kmalloc_node_noprof+0xd1/0x4e0
[  235.209922][ T9363]  ? alloc_slab_obj_exts+0x39/0xa0
[  235.209949][ T9363]  alloc_slab_obj_exts+0x39/0xa0
[  235.209970][ T9363]  __memcg_slab_post_alloc_hook+0x31e/0x7f0
[  235.210009][ T9363]  kmem_cache_alloc_node_noprof+0x2bd/0x3c0
[  235.210033][ T9363]  ? __alloc_skb+0x112/0x2d0
[  235.210062][ T9363]  __alloc_skb+0x112/0x2d0
[  235.210091][ T9363]  alloc_skb_with_frags+0xca/0x890
[  235.210124][ T9363]  sock_alloc_send_pskb+0x857/0x990
[  235.210163][ T9363]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  235.210187][ T9363]  ? perf_trace_lock+0xec/0x3b0
[  235.210209][ T9363]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  235.210234][ T9363]  unix_dgram_sendmsg+0x461/0x1850
[  235.210257][ T9363]  ? __pfx_perf_trace_lock+0x10/0x10
[  235.210285][ T9363]  ? perf_trace_lock+0xec/0x3b0
[  235.210308][ T9363]  ? __pfx_perf_trace_lock+0x10/0x10
[  235.210325][ T9363]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  235.210346][ T9363]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  235.210376][ T9363]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  235.210394][ T9363]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[  235.210417][ T9363]  __sock_sendmsg+0x21c/0x270
[  235.210442][ T9363]  ____sys_sendmsg+0x505/0x830
[  235.210466][ T9363]  ? __pfx_____sys_sendmsg+0x10/0x10
[  235.210493][ T9363]  ? import_iovec+0x74/0xa0
[  235.210517][ T9363]  ___sys_sendmsg+0x21f/0x2a0
[  235.210538][ T9363]  ? __pfx____sys_sendmsg+0x10/0x10
[  235.210584][ T9363]  ? __fget_files+0x2a/0x420
[  235.210613][ T9363]  ? __fget_files+0x2a/0x420
[  235.210627][ T9363]  ? __fget_files+0x3a0/0x420
[  235.210654][ T9363]  __x64_sys_sendmsg+0x19b/0x260
[  235.210675][ T9363]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  235.210703][ T9363]  ? __pfx_ksys_write+0x10/0x10
[  235.210724][ T9363]  ? rcu_is_watching+0x15/0xb0
[  235.210747][ T9363]  ? do_syscall_64+0xbe/0x3b0
[  235.210775][ T9363]  do_syscall_64+0xfa/0x3b0
[  235.210797][ T9363]  ? lockdep_hardirqs_on+0x9c/0x150
[  235.210818][ T9363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.210836][ T9363]  ? clear_bhb_loop+0x60/0xb0
[  235.210858][ T9363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  235.210875][ T9363] RIP: 0033:0x7fe5da58ebe9
[  235.210891][ T9363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  235.210905][ T9363] RSP: 002b:00007fe5db417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  235.210924][ T9363] RAX: ffffffffffffffda RBX: 00007fe5da7b5fa0 RCX: 00007fe5da58ebe9
[  235.210937][ T9363] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000004
[  235.210948][ T9363] RBP: 00007fe5db417090 R08: 0000000000000000 R09: 0000000000000000
[  235.210959][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  235.210969][ T9363] R13: 00007fe5da7b6038 R14: 00007fe5da7b5fa0 R15: 00007ffd55a741d8
[  235.210999][ T9363]  </TASK>
[  237.025448][ T9357] lo speed is unknown, defaulting to 1000
[  237.039649][ T9428] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1033'.
[  237.059843][ T9431] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1033'.
[  237.070519][ T9433] netlink: 'syz.0.1038': attribute type 21 has an invalid length.
[  237.082099][ T9433] netlink: 14532 bytes leftover after parsing attributes in process `syz.0.1038'.
[  238.253876][ T9458] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1044'.
[  238.685493][ T9481] FAULT_INJECTION: forcing a failure.
[  238.685493][ T9481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  238.710069][ T9481] CPU: 1 UID: 0 PID: 9481 Comm: syz.2.1052 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  238.710096][ T9481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  238.710106][ T9481] Call Trace:
[  238.710113][ T9481]  <TASK>
[  238.710122][ T9481]  dump_stack_lvl+0x189/0x250
[  238.710148][ T9481]  ? __pfx____ratelimit+0x10/0x10
[  238.710173][ T9481]  ? __pfx_dump_stack_lvl+0x10/0x10
[  238.710194][ T9481]  ? __pfx__printk+0x10/0x10
[  238.710219][ T9481]  ? __might_fault+0xb0/0x130
[  238.710265][ T9481]  should_fail_ex+0x414/0x560
[  238.710297][ T9481]  _copy_from_user+0x2d/0xb0
[  238.710322][ T9481]  kstrtouint_from_user+0xc4/0x170
[  238.710352][ T9481]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  238.710401][ T9481]  proc_fail_nth_write+0x88/0x200
[  238.710422][ T9481]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  238.710450][ T9481]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  238.710472][ T9481]  vfs_write+0x27e/0xb30
[  238.710508][ T9481]  ? __pfx_vfs_write+0x10/0x10
[  238.710533][ T9481]  ? __fget_files+0x2a/0x420
[  238.710556][ T9481]  ? __fget_files+0x3a0/0x420
[  238.710571][ T9481]  ? __fget_files+0x2a/0x420
[  238.710599][ T9481]  ksys_write+0x145/0x250
[  238.710626][ T9481]  ? __pfx_ksys_write+0x10/0x10
[  238.710645][ T9481]  ? rcu_is_watching+0x15/0xb0
[  238.710672][ T9481]  ? do_syscall_64+0xbe/0x3b0
[  238.710700][ T9481]  do_syscall_64+0xfa/0x3b0
[  238.710722][ T9481]  ? lockdep_hardirqs_on+0x9c/0x150
[  238.710744][ T9481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.710761][ T9481]  ? clear_bhb_loop+0x60/0xb0
[  238.710784][ T9481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.710801][ T9481] RIP: 0033:0x7f94b6f8d69f
[  238.710825][ T9481] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  238.710845][ T9481] RSP: 002b:00007f94b7dd3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  238.710864][ T9481] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f94b6f8d69f
[  238.710876][ T9481] RDX: 0000000000000001 RSI: 00007f94b7dd30a0 RDI: 0000000000000003
[  238.710887][ T9481] RBP: 00007f94b7dd3090 R08: 0000000000000000 R09: 0000000000000000
[  238.710898][ T9481] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  238.710908][ T9481] R13: 00007f94b71b6038 R14: 00007f94b71b5fa0 R15: 00007ffe76510528
[  238.710943][ T9481]  </TASK>
[  239.008673][ T9477] lo speed is unknown, defaulting to 1000
[  240.788420][ T9533] netlink: 'syz.2.1068': attribute type 21 has an invalid length.
[  240.892606][ T9533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1068'.
[  240.992063][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1071'.
[  241.050984][ T9540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1071'.
[  241.552267][ T9553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1077'.
[  243.164645][ T9599] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1091'.
[  243.174500][ T9599] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.1091'.
[  244.735347][ T9632] netdevsim0: mtu less than device minimum
[  244.789311][ T9633] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1105'.
[  249.419779][ T9715] netlink: 'syz.4.1131': attribute type 21 has an invalid length.
[  249.989202][ T9735] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1138'.
[  250.075990][ T9735] netlink: 'syz.2.1138': attribute type 10 has an invalid length.
[  250.097729][ T9735] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1138'.
[  250.600356][ T9767] netlink: 'syz.1.1146': attribute type 3 has an invalid length.
[  250.609077][ T9767] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.1146'.
[  250.615454][ T9766] netlink: 'syz.3.1149': attribute type 13 has an invalid length.
[  250.726175][ T7675] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  251.141270][ T9766] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.151090][ T9789] netlink: 'syz.1.1155': attribute type 2 has an invalid length.
[  251.160206][ T9789] netlink: 'syz.1.1155': attribute type 1 has an invalid length.
[  251.189223][ T9789] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1155'.
[  251.631860][ T9805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1160'.
[  253.089146][ T9766] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.125744][ T9766] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.010828][ T9834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1168'.
[  254.047388][ T9834] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1168'.
[  254.077789][ T7676] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.094646][ T7676] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.150285][ T7676] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.177694][ T7676] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  254.207773][ T9826] lo speed is unknown, defaulting to 1000
[  254.247304][ T9847] lo speed is unknown, defaulting to 1000
[  254.301080][ T9855] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1172'.
[  254.342553][ T9855] netlink: 'syz.2.1172': attribute type 3 has an invalid length.
[  254.435852][ T9855] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1172'.
[  255.612704][ T9881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1179'.
[  255.671024][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  255.677587][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  257.456352][ T9920] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1194'.
[  257.687145][ T9931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'.
[  258.444067][ T9962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'.
[  258.447527][ T9967] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1211'.
[  258.751721][ T9958] netlink: 'syz.1.1210': attribute type 6 has an invalid length.
[  258.803611][ T9958] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1210'.
[  259.864633][T10004] netlink: 'syz.1.1224': attribute type 1 has an invalid length.
[  260.414502][T10018] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode
[  260.479426][T10018] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  260.713248][T10034] netlink: 'syz.4.1234': attribute type 12 has an invalid length.
[  260.742843][T10038] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1237'.
[  260.781278][T10034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1234'.
[  260.816941][T10038] netlink: 'syz.2.1237': attribute type 2 has an invalid length.
[  260.995310][T10049] netlink: 'syz.1.1241': attribute type 6 has an invalid length.
[  261.004435][T10049] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1241'.
[  261.099344][T10057] netlink: 'syz.2.1242': attribute type 21 has an invalid length.
[  261.149840][T10056] netlink: 'syz.0.1243': attribute type 10 has an invalid length.
[  261.293796][T10056] 8021q: adding VLAN 0 to HW filter on device team0
[  261.372347][T10056] bond0: (slave team0): Enslaving as an active interface with an up link
[  261.396788][T10058] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP)
[  262.319958][T10083] netlink: 'syz.1.1252': attribute type 4 has an invalid length.
[  262.619115][T10113] sctp: [Deprecated]: syz.1.1259 (pid 10113) Use of struct sctp_assoc_value in delayed_ack socket option.
[  262.619115][T10113] Use struct sctp_sack_info instead
[  264.330568][T10175] rdma_rxe: rxe_newlink: failed to add bond0
[  264.840235][T10200] sit0: entered allmulticast mode
[  265.023776][T10199] sit0: entered promiscuous mode
[  267.925474][T10240] netlink: 'syz.2.1299': attribute type 10 has an invalid length.
[  267.950593][T10240] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1299'.
[  267.971102][T10240] team0: entered promiscuous mode
[  267.996241][T10240] team_slave_0: entered promiscuous mode
[  268.002465][T10240] team_slave_1: entered promiscuous mode
[  268.029171][T10240] geneve1: entered promiscuous mode
[  268.035359][T10240] team0: entered allmulticast mode
[  268.041160][T10240] team_slave_0: entered allmulticast mode
[  268.053133][T10240] team_slave_1: entered allmulticast mode
[  268.079308][T10240] geneve1: entered allmulticast mode
[  268.118161][T10240] bond0: (slave team0): Releasing backup interface
[  268.149288][T10240] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  268.387517][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1307'.
[  268.423112][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1307'.
[  268.535762][T10271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1312'.
[  268.549194][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1307'.
[  268.565869][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1307'.
[  268.683296][T10268] netlink: 'syz.2.1311': attribute type 21 has an invalid length.
[  268.887295][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1307'.
[  268.935583][T10261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1307'.
[  269.001016][T10288] netlink: 628 bytes leftover after parsing attributes in process `syz.0.1316'.
[  269.032545][T10288] netlink: 731 bytes leftover after parsing attributes in process `syz.0.1316'.
[  269.868840][T10299] netlink: zone id is out of range
[  269.909445][T10299] netlink: zone id is out of range
[  269.936770][T10299] netlink: zone id is out of range
[  269.987404][T10308] netlink: del zone limit has 4 unknown bytes
[  270.025188][T10299] netlink: zone id is out of range
[  270.033481][T10299] netlink: zone id is out of range
[  270.041065][T10299] netlink: zone id is out of range
[  270.047069][T10299] netlink: zone id is out of range
[  270.139574][T10299] netlink: set zone limit has 4 unknown bytes
[  272.317522][T10348] lo speed is unknown, defaulting to 1000
[  272.908812][T10386] netlink: 'syz.2.1347': attribute type 15 has an invalid length.
[  272.922885][T10386] netlink: 'syz.2.1347': attribute type 7 has an invalid length.
[  272.958948][T10386] __nla_validate_parse: 1 callbacks suppressed
[  272.960008][T10386] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1347'.
[  273.021714][T10392] netlink: 'syz.4.1349': attribute type 10 has an invalid length.
[  273.052516][T10392] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1349'.
[  273.072008][T10392] team0: entered promiscuous mode
[  273.082947][T10392] team_slave_0: entered promiscuous mode
[  273.098468][T10392] team_slave_1: entered promiscuous mode
[  273.115263][T10392] geneve1: entered promiscuous mode
[  273.128301][T10392] team0: entered allmulticast mode
[  273.140384][T10392] team_slave_0: entered allmulticast mode
[  273.153406][T10392] team_slave_1: entered allmulticast mode
[  273.167357][T10392] geneve1: entered allmulticast mode
[  273.182027][T10392] bridge0: port 4(team0) entered blocking state
[  273.203560][T10392] bridge0: port 4(team0) entered disabled state
[  273.222697][T10392] bridge0: port 4(team0) entered blocking state
[  273.230137][T10392] bridge0: port 4(team0) entered forwarding state
[  274.201126][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'.
[  274.476582][T10435] debugfs: '!' already exists in 'ieee80211'
[  277.671547][T10487] netlink: 'syz.4.1372': attribute type 40 has an invalid length.
[  277.744873][T10487] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.293511][T10500] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1376'.
[  278.790964][T10517] netlink: 'syz.1.1380': attribute type 3 has an invalid length.
[  278.800069][T10517] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1380'.
[  278.824425][T10510] lo speed is unknown, defaulting to 1000
[  278.992102][T10520] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  279.026633][T10520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  280.149382][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'.
[  280.158656][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'.
[  280.821302][T10560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1394'.
[  280.915290][T10559] netlink: 'syz.3.1395': attribute type 1 has an invalid length.
[  281.641467][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  281.650909][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  281.659698][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  281.668004][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  281.677190][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  281.740432][T10587] lo speed is unknown, defaulting to 1000
[  282.344847][T10587] chnl_net:caif_netlink_parms(): no params data found
[  282.577863][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'.
[  282.663636][T10587] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.671353][T10587] bridge0: port 1(bridge_slave_0) entered disabled state
[  282.680033][T10587] bridge_slave_0: entered allmulticast mode
[  282.688728][T10587] bridge_slave_0: entered promiscuous mode
[  282.700323][T10587] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.707829][T10587] bridge0: port 2(bridge_slave_1) entered disabled state
[  282.716171][T10616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1407'.
[  282.731862][T10587] bridge_slave_1: entered allmulticast mode
[  282.738971][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1405'.
[  282.763480][T10587] bridge_slave_1: entered promiscuous mode
[  282.806302][T10616] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.752616][   T51] Bluetooth: hci0: command tx timeout
[  284.215011][T10616] bridge_slave_0 (unregistering): left allmulticast mode
[  284.242129][T10616] bridge_slave_0 (unregistering): left promiscuous mode
[  284.255379][T10616] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.508768][T10587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  284.511313][T10637] netlink: 'syz.0.1412': attribute type 16 has an invalid length.
[  284.536710][T10630] netlink: 731 bytes leftover after parsing attributes in process `syz.3.1406'.
[  284.542425][T10637] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1412'.
[  284.559527][T10587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  284.602591][T10587] team0: Port device team_slave_0 added
[  284.616880][T10587] team0: Port device team_slave_1 added
[  284.770033][T10587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  284.786268][T10587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.812410][T10587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  284.829575][T10587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  284.842252][T10587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  284.869485][T10587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  285.655943][T10587] hsr_slave_0: entered promiscuous mode
[  285.681860][T10587] hsr_slave_1: entered promiscuous mode
[  285.700781][T10587] debugfs: 'hsr0' already exists in 'hsr'
[  285.719098][T10587] Cannot create hsr debugfs directory
[  285.828934][   T51] Bluetooth: hci0: command tx timeout
[  286.779163][T10587] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  286.913395][T10587] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  286.973124][T10587] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  287.246868][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'.
[  287.255842][T10727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1434'.
[  287.640109][T10713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1430'.
[  287.655770][T10587] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  287.753469][T10719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1430'.
[  287.906684][   T51] Bluetooth: hci0: command tx timeout
[  287.915647][T10587] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.943307][T10745] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1438'.
[  288.003791][T10587] 8021q: adding VLAN 0 to HW filter on device team0
[  288.119353][ T7679] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.126811][ T7679] bridge0: port 1(bridge_slave_0) entered forwarding state
[  288.351978][ T7676] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.359456][ T7676] bridge0: port 2(bridge_slave_1) entered forwarding state
[  288.802648][T10587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  289.825526][T10791] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1450'.
[  289.986294][   T51] Bluetooth: hci0: command tx timeout
[  290.078869][T10587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.287922][T10798] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1451'.
[  291.788480][T10587] veth0_vlan: entered promiscuous mode
[  291.813207][T10587] veth1_vlan: entered promiscuous mode
[  291.857073][T10587] veth0_macvtap: entered promiscuous mode
[  291.921764][T10848] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1464'.
[  291.946298][T10587] veth1_macvtap: entered promiscuous mode
[  291.959052][T10848] netlink: 'syz.3.1464': attribute type 1 has an invalid length.
[  292.010668][T10587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.096698][T10587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.180899][ T7670] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  292.224477][ T7670] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  292.298391][ T7670] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  292.971754][ T7671] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.334943][ T7670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.370411][ T7670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.430734][ T7676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.467167][ T7676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.858800][T10889] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1474'.
[  294.634220][T10902] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1478'.
[  296.329885][T10924] siw: device registration error -23
[  296.339375][T10924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1485'.
[  296.573673][T10934] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1487'.
[  296.892125][T10939] netlink: 'syz.5.1491': attribute type 4 has an invalid length.
[  297.458488][T10951] delete_channel: no stack
[  298.305252][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1505'.
[  298.842225][T10999] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.1511'.
[  299.438890][T11027] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1520'.
[  299.452713][T11028] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1520'.
[  300.069387][T11056] netlink: zone id is out of range
[  300.105434][T11056] netlink: zone id is out of range
[  300.110948][T11056] netlink: zone id is out of range
[  300.116301][T11056] netlink: zone id is out of range
[  300.121686][T11056] netlink: zone id is out of range
[  300.127611][T11056] netlink: zone id is out of range
[  300.136543][T11056] netlink: zone id is out of range
[  300.154915][T11056] netlink: zone id is out of range
[  300.178732][T11056] netlink: zone id is out of range
[  300.193295][T11056] netlink: zone id is out of range
[  300.719991][T11074] rdma_rxe: rxe_newlink: failed to add lo
[  301.204446][T11083] netlink: 'syz.2.1537': attribute type 3 has an invalid length.
[  301.220428][T11083] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.1537'.
[  301.245361][   T51] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5
[  301.295952][T11085] netlink: 'syz.0.1538': attribute type 4 has an invalid length.
[  301.332098][T11096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'.
[  302.517099][T11103] lo speed is unknown, defaulting to 1000
[  302.640297][T11129] netlink: 'syz.5.1551': attribute type 10 has an invalid length.
[  302.673488][T11129] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1551'.
[  304.124306][T11168] lo speed is unknown, defaulting to 1000
[  305.131867][T11188] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1571'.
[  305.340075][T11198] net_ratelimit: 78 callbacks suppressed
[  305.340094][T11198] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.562954][T11206] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1571'.
[  307.302318][T11234] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1583'.
[  307.313761][T11234] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1583'.
[  307.346584][T11232] openvswitch: netlink: Flow key attr not present in new flow.
[  307.559873][T11245] netlink: 'syz.3.1588': attribute type 2 has an invalid length.
[  307.581949][T11245] netlink: 8196 bytes leftover after parsing attributes in process `syz.3.1588'.
[  308.072373][T11264] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1591'.
[  308.089957][T11264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1591'.
[  308.134523][T11264] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1591'.
[  308.146409][T11269] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1591'.
[  308.174897][T11268] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1592'.
[  308.187928][T11264] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1591'.
[  308.361677][T11276] netlink: 6955 bytes leftover after parsing attributes in process `syz.1.1595'.
[  308.382539][T11276] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1595'.
[  308.658739][T11292] netlink: 13 bytes leftover after parsing attributes in process `syz.1.1599'.
[  308.705762][T11292] bridge_slave_1: left allmulticast mode
[  308.712532][T11292] bridge_slave_1: left promiscuous mode
[  308.725254][T11292] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.735941][T11290] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1600'.
[  308.769243][T11292] bridge_slave_0: left promiscuous mode
[  308.777284][T11292] bridge0: port 1(bridge_slave_0) entered disabled state
[  309.095350][T11301] netlink: 'syz.5.1603': attribute type 27 has an invalid length.
[  310.659117][T11349] netlink: 'syz.5.1616': attribute type 21 has an invalid length.
[  310.906806][T11355] netlink: 'syz.3.1619': attribute type 10 has an invalid length.
[  311.037859][T11359] netlink: 'syz.0.1620': attribute type 13 has an invalid length.
[  312.852778][T11355] 8021q: adding VLAN 0 to HW filter on device team0
[  312.862356][T11355] bond0: (slave team0): Enslaving as an active interface with an up link
[  314.060750][T11399] lo speed is unknown, defaulting to 1000
[  314.533376][T11420] __nla_validate_parse: 5 callbacks suppressed
[  314.533399][T11420] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1636'.
[  314.555818][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1637'.
[  314.579536][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1635'.
[  314.590736][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1635'.
[  316.017495][T11466] lo speed is unknown, defaulting to 1000
[  317.137340][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.143760][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  318.491358][T11519] FAULT_INJECTION: forcing a failure.
[  318.491358][T11519] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  318.536235][T11519] CPU: 1 UID: 0 PID: 11519 Comm: syz.1.1671 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  318.536262][T11519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  318.536282][T11519] Call Trace:
[  318.536290][T11519]  <TASK>
[  318.536299][T11519]  dump_stack_lvl+0x189/0x250
[  318.536326][T11519]  ? __pfx____ratelimit+0x10/0x10
[  318.536350][T11519]  ? __pfx_dump_stack_lvl+0x10/0x10
[  318.536371][T11519]  ? __pfx__printk+0x10/0x10
[  318.536395][T11519]  ? __might_fault+0xb0/0x130
[  318.536422][T11519]  ? __might_fault+0xb0/0x130
[  318.536452][T11519]  should_fail_ex+0x414/0x560
[  318.536482][T11519]  _copy_from_user+0x2d/0xb0
[  318.536503][T11519]  __sys_bpf+0x1ed/0x870
[  318.536530][T11519]  ? __pfx___sys_bpf+0x10/0x10
[  318.536573][T11519]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  318.536598][T11519]  ? __pfx_ksys_write+0x10/0x10
[  318.536632][T11519]  __x64_sys_bpf+0x7c/0x90
[  318.536653][T11519]  do_syscall_64+0xfa/0x3b0
[  318.536675][T11519]  ? lockdep_hardirqs_on+0x9c/0x150
[  318.536698][T11519]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.536715][T11519]  ? clear_bhb_loop+0x60/0xb0
[  318.536738][T11519]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  318.536755][T11519] RIP: 0033:0x7f7bb658ebe9
[  318.536772][T11519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.536787][T11519] RSP: 002b:00007f7bb73cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  318.536807][T11519] RAX: ffffffffffffffda RBX: 00007f7bb67b5fa0 RCX: 00007f7bb658ebe9
[  318.536820][T11519] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  318.536832][T11519] RBP: 00007f7bb73cf090 R08: 0000000000000000 R09: 0000000000000000
[  318.536843][T11519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.536854][T11519] R13: 00007f7bb67b6038 R14: 00007f7bb67b5fa0 R15: 00007ffe6b59d1e8
[  318.536888][T11519]  </TASK>
[  319.393292][T11541] lo speed is unknown, defaulting to 1000
[  319.702802][T11556] FAULT_INJECTION: forcing a failure.
[  319.702802][T11556] name failslab, interval 1, probability 0, space 0, times 0
[  319.726347][T11556] CPU: 1 UID: 0 PID: 11556 Comm: syz.1.1685 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  319.726373][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  319.726384][T11556] Call Trace:
[  319.726391][T11556]  <TASK>
[  319.726399][T11556]  dump_stack_lvl+0x189/0x250
[  319.726425][T11556]  ? __pfx____ratelimit+0x10/0x10
[  319.726448][T11556]  ? __pfx_dump_stack_lvl+0x10/0x10
[  319.726469][T11556]  ? __pfx__printk+0x10/0x10
[  319.726498][T11556]  ? __pfx___might_resched+0x10/0x10
[  319.726521][T11556]  should_fail_ex+0x414/0x560
[  319.726549][T11556]  should_failslab+0xa8/0x100
[  319.726575][T11556]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  319.726599][T11556]  ? __get_vm_area_node+0x13f/0x300
[  319.726625][T11556]  __get_vm_area_node+0x13f/0x300
[  319.726652][T11556]  __vmalloc_node_range_noprof+0x301/0x12f0
[  319.726676][T11556]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  319.726700][T11556]  ? __lock_acquire+0xab9/0xd20
[  319.726751][T11556]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  319.726774][T11556]  ? __might_fault+0xb0/0x130
[  319.726799][T11556]  ? _parse_integer_limit+0x1ae/0x1f0
[  319.726829][T11556]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  319.726850][T11556]  __vmalloc_noprof+0xb1/0xf0
[  319.726881][T11556]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  319.726907][T11556]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  319.726936][T11556]  bpf_prog_alloc+0x3c/0x1a0
[  319.726961][T11556]  bpf_prog_load+0x735/0x1930
[  319.726997][T11556]  ? __pfx_bpf_prog_load+0x10/0x10
[  319.727043][T11556]  ? bpf_lsm_bpf+0x9/0x20
[  319.727063][T11556]  ? security_bpf+0x7e/0x300
[  319.727087][T11556]  __sys_bpf+0x528/0x870
[  319.727112][T11556]  ? __pfx___sys_bpf+0x10/0x10
[  319.727150][T11556]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  319.727174][T11556]  ? __pfx_ksys_write+0x10/0x10
[  319.727195][T11556]  ? rcu_is_watching+0x15/0xb0
[  319.727220][T11556]  __x64_sys_bpf+0x7c/0x90
[  319.727241][T11556]  do_syscall_64+0xfa/0x3b0
[  319.727264][T11556]  ? lockdep_hardirqs_on+0x9c/0x150
[  319.727286][T11556]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.727304][T11556]  ? clear_bhb_loop+0x60/0xb0
[  319.727326][T11556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.727342][T11556] RIP: 0033:0x7f7bb658ebe9
[  319.727359][T11556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.727374][T11556] RSP: 002b:00007f7bb73cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  319.727394][T11556] RAX: ffffffffffffffda RBX: 00007f7bb67b5fa0 RCX: 00007f7bb658ebe9
[  319.727408][T11556] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  319.727420][T11556] RBP: 00007f7bb73cf090 R08: 0000000000000000 R09: 0000000000000000
[  319.727431][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.727442][T11556] R13: 00007f7bb67b6038 R14: 00007f7bb67b5fa0 R15: 00007ffe6b59d1e8
[  319.727472][T11556]  </TASK>
[  319.727661][T11556] syz.1.1685: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  320.065477][T11556] CPU: 1 UID: 0 PID: 11556 Comm: syz.1.1685 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  320.065503][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  320.065514][T11556] Call Trace:
[  320.065522][T11556]  <TASK>
[  320.065529][T11556]  dump_stack_lvl+0x189/0x250
[  320.065559][T11556]  ? __pfx_dump_stack_lvl+0x10/0x10
[  320.065580][T11556]  ? __pfx__printk+0x10/0x10
[  320.065604][T11556]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  320.065626][T11556]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  320.065648][T11556]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  320.065672][T11556]  warn_alloc+0x214/0x310
[  320.065704][T11556]  ? __pfx_warn_alloc+0x10/0x10
[  320.065730][T11556]  ? __get_vm_area_node+0x13f/0x300
[  320.065758][T11556]  ? __get_vm_area_node+0x2b5/0x300
[  320.065794][T11556]  __vmalloc_node_range_noprof+0x326/0x12f0
[  320.065818][T11556]  ? __lock_acquire+0xab9/0xd20
[  320.065869][T11556]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  320.065891][T11556]  ? __might_fault+0xb0/0x130
[  320.065914][T11556]  ? _parse_integer_limit+0x1ae/0x1f0
[  320.065943][T11556]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  320.065967][T11556]  __vmalloc_noprof+0xb1/0xf0
[  320.065990][T11556]  ? bpf_prog_alloc_no_stats+0x4a/0x4b0
[  320.066013][T11556]  bpf_prog_alloc_no_stats+0x4a/0x4b0
[  320.066040][T11556]  bpf_prog_alloc+0x3c/0x1a0
[  320.066065][T11556]  bpf_prog_load+0x735/0x1930
[  320.066100][T11556]  ? __pfx_bpf_prog_load+0x10/0x10
[  320.066145][T11556]  ? bpf_lsm_bpf+0x9/0x20
[  320.066163][T11556]  ? security_bpf+0x7e/0x300
[  320.066189][T11556]  __sys_bpf+0x528/0x870
[  320.066214][T11556]  ? __pfx___sys_bpf+0x10/0x10
[  320.066251][T11556]  ? __pfx_perf_trace_preemptirq_template+0x10/0x10
[  320.066275][T11556]  ? __pfx_ksys_write+0x10/0x10
[  320.066294][T11556]  ? rcu_is_watching+0x15/0xb0
[  320.066318][T11556]  __x64_sys_bpf+0x7c/0x90
[  320.066340][T11556]  do_syscall_64+0xfa/0x3b0
[  320.066362][T11556]  ? lockdep_hardirqs_on+0x9c/0x150
[  320.066383][T11556]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.066399][T11556]  ? clear_bhb_loop+0x60/0xb0
[  320.066419][T11556]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.066435][T11556] RIP: 0033:0x7f7bb658ebe9
[  320.066451][T11556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  320.066466][T11556] RSP: 002b:00007f7bb73cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  320.066485][T11556] RAX: ffffffffffffffda RBX: 00007f7bb67b5fa0 RCX: 00007f7bb658ebe9
[  320.066498][T11556] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005
[  320.066509][T11556] RBP: 00007f7bb73cf090 R08: 0000000000000000 R09: 0000000000000000
[  320.066521][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.066531][T11556] R13: 00007f7bb67b6038 R14: 00007f7bb67b5fa0 R15: 00007ffe6b59d1e8
[  320.066560][T11556]  </TASK>
[  320.356338][T11556] Mem-Info:
[  320.360041][T11556] active_anon:8481 inactive_anon:0 isolated_anon:0
[  320.360041][T11556]  active_file:21577 inactive_file:39930 isolated_file:0
[  320.360041][T11556]  unevictable:768 dirty:183 writeback:0
[  320.360041][T11556]  slab_reclaimable:11196 slab_unreclaimable:132601
[  320.360041][T11556]  mapped:30778 shmem:1356 pagetables:1077
[  320.360041][T11556]  sec_pagetables:0 bounce:0
[  320.360041][T11556]  kernel_misc_reclaimable:0
[  320.360041][T11556]  free:1272339 free_pcp:15553 free_cma:0
[  320.443959][T11556] Node 0 active_anon:33924kB inactive_anon:0kB active_file:86308kB inactive_file:159516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123112kB dirty:728kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12752kB pagetables:4160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  320.476966][T11556] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  320.518880][T11556] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  320.597922][T11556] lowmem_reserve[]: 0 2497 2499 2499 2499
[  320.603819][T11556] Node 0 DMA32 free:1186896kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33580kB inactive_anon:0kB active_file:86308kB inactive_file:157944kB unevictable:1536kB writepending:728kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:41792kB local_pcp:20800kB free_cma:0kB
[  320.657241][T11556] lowmem_reserve[]: 0 0 1 1 1
[  320.662014][T11556] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[  320.691961][T11576] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1691'.
[  320.718548][T11556] lowmem_reserve[]: 0 0 0 0 0
[  320.723311][T11556] Node 1 Normal free:3887088kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20352kB local_pcp:9440kB free_cma:0kB
[  320.754684][T11556] lowmem_reserve[]: 0 0 0 0 0
[  320.761806][T11556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  320.785590][T11556] Node 0 DMA32: 1218*4kB (UME) 977*8kB (UM) 628*16kB (UME) 1139*32kB (UM) 404*64kB (UM) 247*128kB (UME) 149*256kB (UME) 78*512kB (UME) 31*1024kB (UME) 5*2048kB (UM) 232*4096kB (UM) = 1186992kB
[  320.866104][T11556] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[  320.938639][T11556] Node 1 Normal: 186*4kB (UME) 41*8kB (UME) 34*16kB (UME) 117*32kB (UME) 32*64kB (UME) 10*128kB (UME) 4*256kB (UME) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 945*4096kB (M) = 3887088kB
[  320.976645][T11556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  321.073149][T11556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  321.136313][T11556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  321.151202][T11556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  321.266501][T11556] 62860 total pagecache pages
[  321.271247][T11556] 0 pages in swap cache
[  321.275420][T11556] Free swap  = 124996kB
[  321.315707][T11556] Total swap = 124996kB
[  321.363170][T11556] 2097051 pages RAM
[  321.384349][T11556] 0 pages HighMem/MovableOnly
[  321.476250][T11556] 425654 pages reserved
[  321.480449][T11556] 0 pages cma reserved
[  322.584822][T11623] wg2: entered promiscuous mode
[  322.606088][T11623] wg2: entered allmulticast mode
[  325.097633][T11696] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1731'.
[  325.802151][T11726] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1741'.
[  325.844338][T11725] netlink: 'syz.0.1743': attribute type 17 has an invalid length.
[  325.852268][T11725] netlink: 'syz.0.1743': attribute type 16 has an invalid length.
[  325.861004][T11725] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1743'.
[  326.071512][T11728] tun0: tun_chr_ioctl cmd 1074025675
[  326.092232][T11728] tun0: persist enabled
[  326.108827][T11728] tun0: tun_chr_ioctl cmd 1074025675
[  326.115691][T11728] tun0: persist disabled
[  327.804849][T11767] xt_policy: too many policy elements
[  328.497028][T11782] netlink: 'syz.2.1756': attribute type 49 has an invalid length.
[  329.264290][T11793] pim6reg1: entered allmulticast mode
[  329.304779][T11798] netlink: 'syz.1.1766': attribute type 3 has an invalid length.
[  329.341575][T11797] netlink: 'syz.5.1767': attribute type 29 has an invalid length.
[  329.346351][T11798] netlink: 'syz.1.1766': attribute type 1 has an invalid length.
[  329.357335][T11797] netlink: 'syz.5.1767': attribute type 29 has an invalid length.
[  329.367530][T11792] netlink: 'syz.0.1764': attribute type 1 has an invalid length.
[  329.375791][T11798] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1766'.
[  329.417712][T11797] netlink: 'syz.5.1767': attribute type 29 has an invalid length.
[  329.427740][T11792] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1764'.
[  329.457049][T11797] netlink: 147608 bytes leftover after parsing attributes in process `syz.5.1767'.
[  329.469760][T11797] netlink: 62227 bytes leftover after parsing attributes in process `syz.5.1767'.
[  329.679048][T11805] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1769'.
[  329.754922][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'.
[  329.780273][T11812] netlink: 'syz.5.1771': attribute type 10 has an invalid length.
[  329.797085][T11812] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1771'.
[  329.816139][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'.
[  332.892662][T11859] __nla_validate_parse: 3 callbacks suppressed
[  332.892682][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'.
[  332.898131][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1783'.
[  332.903418][T11859] openvswitch: netlink: nsh attr 165 is out of range max 3
[  332.913686][T11855] netlink: 'syz.1.1783': attribute type 21 has an invalid length.
[  332.918038][T11859] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.924320][T11855] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1783'.
[  332.937135][T11859] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1785'.
[  333.258684][T11870] netlink: 'syz.2.1788': attribute type 10 has an invalid length.
[  333.437913][T11876] netlink: 'syz.0.1790': attribute type 4 has an invalid length.
[  333.459282][T11876] netlink: 'syz.0.1790': attribute type 3 has an invalid length.
[  333.479080][T11876] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.1790'.
[  333.817886][T11883] bridge0: entered allmulticast mode
[  333.829162][T11883] bridge0: entered promiscuous mode
[  334.094474][T11886] netlink: 'syz.1.1792': attribute type 10 has an invalid length.
[  334.245663][T11891] netlink: 'syz.2.1794': attribute type 10 has an invalid length.
[  334.255561][T11891] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1794'.
[  334.575671][T11886] team0 (unregistering): Port device C removed
[  334.627520][T11886] team0 (unregistering): Port device team_slave_1 removed
[  335.148975][T11920] netlink: 208192 bytes leftover after parsing attributes in process `syz.1.1804'.
[  335.178381][T11920] netlink: 'syz.1.1804': attribute type 1 has an invalid length.
[  335.189621][T11920] netlink: 'syz.1.1804': attribute type 2 has an invalid length.
[  339.353474][T11987] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1823'.
[  339.500425][T11993] netlink: 'syz.2.1824': attribute type 10 has an invalid length.
[  339.950681][T11993] netdevsim netdevsim2 ÿÿÿÿÿÿ: entered promiscuous mode
[  339.972934][T11993] netdevsim netdevsim2 ÿÿÿÿÿÿ: entered allmulticast mode
[  340.001109][T11993] team0: Port device ÿÿÿÿÿÿ added
[  340.434057][T12005] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1828'.
[  340.457942][T12000] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode
[  340.466738][T12000] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode
[  340.604966][T12010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1830'.
[  340.634883][T12010] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1830'.
[  341.311997][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'.
[  341.402546][T12020] syzkaller0: entered promiscuous mode
[  341.419773][T12020] syzkaller0: entered allmulticast mode
[  341.472344][T12036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1838'.
[  341.891048][T12043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1838'.
[  342.836888][T12053] FAULT_INJECTION: forcing a failure.
[  342.836888][T12053] name failslab, interval 1, probability 0, space 0, times 0
[  342.868746][T12053] CPU: 1 UID: 0 PID: 12053 Comm: syz.0.1841 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  342.868795][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  342.868814][T12053] Call Trace:
[  342.868821][T12053]  <TASK>
[  342.868829][T12053]  dump_stack_lvl+0x189/0x250
[  342.868855][T12053]  ? __pfx____ratelimit+0x10/0x10
[  342.868877][T12053]  ? __pfx_dump_stack_lvl+0x10/0x10
[  342.868896][T12053]  ? __pfx__printk+0x10/0x10
[  342.868925][T12053]  ? __pfx___might_resched+0x10/0x10
[  342.868945][T12053]  should_fail_ex+0x414/0x560
[  342.868971][T12053]  should_failslab+0xa8/0x100
[  342.868992][T12053]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  342.869011][T12053]  ? __alloc_skb+0x112/0x2d0
[  342.869033][T12053]  __alloc_skb+0x112/0x2d0
[  342.869055][T12053]  netlink_sendmsg+0x5c6/0xb30
[  342.869082][T12053]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.869103][T12053]  ? aa_sock_msg_perm+0xf1/0x1d0
[  342.869125][T12053]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  342.869140][T12053]  ? __pfx_netlink_sendmsg+0x10/0x10
[  342.869159][T12053]  __sock_sendmsg+0x21c/0x270
[  342.869178][T12053]  ____sys_sendmsg+0x505/0x830
[  342.869196][T12053]  ? __pfx_____sys_sendmsg+0x10/0x10
[  342.869217][T12053]  ? import_iovec+0x74/0xa0
[  342.869235][T12053]  ___sys_sendmsg+0x21f/0x2a0
[  342.869250][T12053]  ? __pfx____sys_sendmsg+0x10/0x10
[  342.869290][T12053]  ? __fget_files+0x2a/0x420
[  342.869302][T12053]  ? __fget_files+0x3a0/0x420
[  342.869321][T12053]  __x64_sys_sendmsg+0x19b/0x260
[  342.869337][T12053]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  342.869358][T12053]  ? __pfx_ksys_write+0x10/0x10
[  342.869374][T12053]  ? rcu_is_watching+0x15/0xb0
[  342.869391][T12053]  ? do_syscall_64+0xbe/0x3b0
[  342.869413][T12053]  do_syscall_64+0xfa/0x3b0
[  342.869429][T12053]  ? lockdep_hardirqs_on+0x9c/0x150
[  342.869447][T12053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.869460][T12053]  ? clear_bhb_loop+0x60/0xb0
[  342.869476][T12053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  342.869489][T12053] RIP: 0033:0x7fe5da58ebe9
[  342.869502][T12053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  342.869515][T12053] RSP: 002b:00007fe5db3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  342.869531][T12053] RAX: ffffffffffffffda RBX: 00007fe5da7b6090 RCX: 00007fe5da58ebe9
[  342.869541][T12053] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  342.869549][T12053] RBP: 00007fe5db3f6090 R08: 0000000000000000 R09: 0000000000000000
[  342.869558][T12053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.869566][T12053] R13: 00007fe5da7b6128 R14: 00007fe5da7b6090 R15: 00007ffd55a741d8
[  342.869594][T12053]  </TASK>
[  345.022464][T12061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1843'.
[  345.036291][T12072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1846'.
[  345.370044][T12084] pim6reg1: entered allmulticast mode
[  345.417877][T12091] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1853'.
[  345.500276][T12092] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  345.507099][T12092] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  345.527777][T12092] netlink: 'syz.1.1853': attribute type 2 has an invalid length.
[  345.535851][T12092] netlink: 'syz.1.1853': attribute type 1 has an invalid length.
[  347.151793][T12138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1869'.
[  349.862736][T12146] FAULT_INJECTION: forcing a failure.
[  349.862736][T12146] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.947458][T12146] CPU: 0 UID: 0 PID: 12146 Comm: syz.5.1873 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  349.947488][T12146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  349.947499][T12146] Call Trace:
[  349.947509][T12146]  <TASK>
[  349.947521][T12146]  dump_stack_lvl+0x189/0x250
[  349.947554][T12146]  ? __pfx____ratelimit+0x10/0x10
[  349.947587][T12146]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.947618][T12146]  ? __pfx__printk+0x10/0x10
[  349.947654][T12146]  ? __might_fault+0xb0/0x130
[  349.947698][T12146]  ? __might_fault+0xb0/0x130
[  349.947755][T12146]  should_fail_ex+0x414/0x560
[  349.947811][T12146]  _copy_from_iter+0x1db/0x16f0
[  349.947864][T12146]  ? rcu_is_watching+0x15/0xb0
[  349.947895][T12146]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  349.947928][T12146]  ? __pfx__copy_from_iter+0x10/0x10
[  349.947965][T12146]  ? __build_skb_around+0x257/0x3e0
[  349.948014][T12146]  ? netlink_sendmsg+0x642/0xb30
[  349.948036][T12146]  ? skb_put+0x11b/0x210
[  349.948087][T12146]  netlink_sendmsg+0x6b2/0xb30
[  349.948164][T12146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.948204][T12146]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  349.948226][T12146]  ? aa_sock_msg_perm+0xf1/0x1d0
[  349.948267][T12146]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  349.948289][T12146]  ? __pfx_netlink_sendmsg+0x10/0x10
[  349.948325][T12146]  __sock_sendmsg+0x21c/0x270
[  349.948372][T12146]  ____sys_sendmsg+0x505/0x830
[  349.948428][T12146]  ? __pfx_____sys_sendmsg+0x10/0x10
[  349.948499][T12146]  ? import_iovec+0x74/0xa0
[  349.948544][T12146]  ___sys_sendmsg+0x21f/0x2a0
[  349.948584][T12146]  ? __pfx____sys_sendmsg+0x10/0x10
[  349.948711][T12146]  ? __fget_files+0x2a/0x420
[  349.948803][T12146]  ? __fget_files+0x2a/0x420
[  349.948827][T12146]  ? __fget_files+0x3a0/0x420
[  349.948901][T12146]  __x64_sys_sendmsg+0x19b/0x260
[  349.948939][T12146]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  349.948956][T12146]  ? perf_trace_preemptirq_template+0xa3/0x340
[  349.949029][T12146]  ? __pfx_ksys_write+0x10/0x10
[  349.949049][T12146]  ? rcu_is_watching+0x15/0xb0
[  349.949096][T12146]  ? do_syscall_64+0xbe/0x3b0
[  349.949144][T12146]  do_syscall_64+0xfa/0x3b0
[  349.949168][T12146]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.949194][T12146]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.949216][T12146]  ? clear_bhb_loop+0x60/0xb0
[  349.949255][T12146]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  349.949274][T12146] RIP: 0033:0x7fbdd678ebe9
[  349.949297][T12146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  349.949312][T12146] RSP: 002b:00007fbdd759f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  349.949331][T12146] RAX: ffffffffffffffda RBX: 00007fbdd69b5fa0 RCX: 00007fbdd678ebe9
[  349.949344][T12146] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  349.949356][T12146] RBP: 00007fbdd759f090 R08: 0000000000000000 R09: 0000000000000000
[  349.949367][T12146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  349.949378][T12146] R13: 00007fbdd69b6038 R14: 00007fbdd69b5fa0 R15: 00007ffc3786f5c8
[  349.949468][T12146]  </TASK>
[  350.515620][T12158] netlink: 'syz.2.1877': attribute type 31 has an invalid length.
[  351.026236][   T51] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5
[  351.322482][T12203] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1889'.
[  351.555609][T12214] netlink: 'syz.3.1891': attribute type 7 has an invalid length.
[  351.575398][T12214] FAULT_INJECTION: forcing a failure.
[  351.575398][T12214] name failslab, interval 1, probability 0, space 0, times 0
[  351.619963][T12214] CPU: 1 UID: 0 PID: 12214 Comm: syz.3.1891 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  351.619991][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  351.620002][T12214] Call Trace:
[  351.620013][T12214]  <TASK>
[  351.620024][T12214]  dump_stack_lvl+0x189/0x250
[  351.620058][T12214]  ? __pfx____ratelimit+0x10/0x10
[  351.620091][T12214]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.620120][T12214]  ? __pfx__printk+0x10/0x10
[  351.620182][T12214]  ? __pfx___might_resched+0x10/0x10
[  351.620198][T12214]  ? fs_reclaim_acquire+0x7d/0x100
[  351.620251][T12214]  should_fail_ex+0x414/0x560
[  351.620303][T12214]  should_failslab+0xa8/0x100
[  351.620343][T12214]  __kmalloc_noprof+0xcb/0x4f0
[  351.620370][T12214]  ? fib_create_info+0x1728/0x3210
[  351.620421][T12214]  fib_create_info+0x1728/0x3210
[  351.620474][T12214]  ? rcu_is_watching+0x15/0xb0
[  351.620518][T12214]  ? __mutex_lock+0x335/0x1360
[  351.620540][T12214]  ? trace_call_bpf+0xb7/0x850
[  351.620563][T12214]  ? trace_call_bpf+0x5ba/0x850
[  351.620649][T12214]  fib_table_insert+0xc6/0x1b50
[  351.620683][T12214]  ? lwtunnel_valid_encap_type_attr+0x220/0x290
[  351.620722][T12214]  ? __pfx___mutex_lock+0x10/0x10
[  351.620744][T12214]  ? rtm_to_fib_config+0x107f/0x13c0
[  351.620866][T12214]  inet_rtm_newroute+0x12b/0x210
[  351.620896][T12214]  ? __pfx_perf_trace_lock+0x10/0x10
[  351.620922][T12214]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  351.621055][T12214]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  351.621083][T12214]  rtnetlink_rcv_msg+0x7cc/0xb70
[  351.621135][T12214]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  351.621165][T12214]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  351.621206][T12214]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  351.621292][T12214]  netlink_rcv_skb+0x208/0x470
[  351.621332][T12214]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  351.621372][T12214]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  351.621462][T12214]  ? netlink_deliver_tap+0x2e/0x1b0
[  351.621532][T12214]  netlink_unicast+0x82c/0x9e0
[  351.621607][T12214]  ? __pfx_netlink_unicast+0x10/0x10
[  351.621649][T12214]  ? netlink_sendmsg+0x642/0xb30
[  351.621677][T12214]  ? skb_put+0x11b/0x210
[  351.621730][T12214]  netlink_sendmsg+0x805/0xb30
[  351.621805][T12214]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.621847][T12214]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  351.621868][T12214]  ? aa_sock_msg_perm+0xf1/0x1d0
[  351.621911][T12214]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.621932][T12214]  ? __pfx_netlink_sendmsg+0x10/0x10
[  351.621969][T12214]  __sock_sendmsg+0x21c/0x270
[  351.622019][T12214]  ____sys_sendmsg+0x505/0x830
[  351.622073][T12214]  ? __pfx_____sys_sendmsg+0x10/0x10
[  351.622146][T12214]  ? import_iovec+0x74/0xa0
[  351.622193][T12214]  ___sys_sendmsg+0x21f/0x2a0
[  351.622233][T12214]  ? __pfx____sys_sendmsg+0x10/0x10
[  351.622362][T12214]  ? __fget_files+0x2a/0x420
[  351.622445][T12214]  ? __fget_files+0x2a/0x420
[  351.622462][T12214]  ? __fget_files+0x3a0/0x420
[  351.622536][T12214]  __x64_sys_sendmsg+0x19b/0x260
[  351.622577][T12214]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  351.622650][T12214]  ? __pfx_ksys_write+0x10/0x10
[  351.622675][T12214]  ? rcu_is_watching+0x15/0xb0
[  351.622725][T12214]  ? do_syscall_64+0xbe/0x3b0
[  351.622773][T12214]  do_syscall_64+0xfa/0x3b0
[  351.622797][T12214]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.622825][T12214]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.622845][T12214]  ? clear_bhb_loop+0x60/0xb0
[  351.622884][T12214]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.622903][T12214] RIP: 0033:0x7f641a18ebe9
[  351.622926][T12214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.622942][T12214] RSP: 002b:00007f641af47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.622962][T12214] RAX: ffffffffffffffda RBX: 00007f641a3b5fa0 RCX: 00007f641a18ebe9
[  351.622975][T12214] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  351.622987][T12214] RBP: 00007f641af47090 R08: 0000000000000000 R09: 0000000000000000
[  351.622997][T12214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.623008][T12214] R13: 00007f641a3b6038 R14: 00007f641a3b5fa0 R15: 00007ffd62a1a018
[  351.623101][T12214]  </TASK>
[  352.174187][T12222] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1896'.
[  352.213210][T12222] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1896'.
[  352.223775][T12222] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  352.414839][T12234] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.1900'.
[  352.467935][T12232] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1899'.
[  352.765161][T12241] netlink: 'syz.0.1904': attribute type 21 has an invalid length.
[  352.836793][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1907'.
[  352.851443][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1907'.
[  352.901902][T12255] netlink: 'syz.5.1909': attribute type 7 has an invalid length.
[  352.914915][T12255] FAULT_INJECTION: forcing a failure.
[  352.914915][T12255] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  352.916074][T12255] 
[  352.916082][T12255] ======================================================
[  352.916089][T12255] WARNING: possible circular locking dependency detected
[  352.916108][T12255] 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 Not tainted
[  352.916118][T12255] ------------------------------------------------------
[  352.916124][T12255] syz.5.1909/12255 is trying to acquire lock:
[  352.916133][T12255] ffffffff8e12e120 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40
[  352.916180][T12255] 
[  352.916180][T12255] but task is already holding lock:
[  352.916186][T12255] ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  352.916229][T12255] 
[  352.916229][T12255] which lock already depends on the new lock.
[  352.916229][T12255] 
[  352.916235][T12255] 
[  352.916235][T12255] the existing dependency chain (in reverse order) is:
[  352.916240][T12255] 
[  352.916240][T12255] -> #4 (&rq->__lock){-.-.}-{2:2}:
[  352.916257][T12255]        lock_acquire+0x120/0x360
[  352.916274][T12255]        _raw_spin_lock_nested+0x32/0x50
[  352.916290][T12255]        raw_spin_rq_lock_nested+0x2a/0x140
[  352.916307][T12255]        task_rq_lock+0xbc/0x470
[  352.916323][T12255]        cgroup_move_task+0x92/0x2a0
[  352.916336][T12255]        css_set_move_task+0x658/0x9e0
[  352.916349][T12255]        cgroup_post_fork+0x1ef/0x790
[  352.916362][T12255]        copy_process+0x3862/0x3c00
[  352.916375][T12255]        kernel_clone+0x21e/0x840
[  352.916387][T12255]        user_mode_thread+0xdd/0x140
[  352.916400][T12255]        rest_init+0x23/0x300
[  352.916411][T12255]        start_kernel+0x3a9/0x410
[  352.916422][T12255]        x86_64_start_reservations+0x24/0x30
[  352.916437][T12255]        x86_64_start_kernel+0x143/0x1c0
[  352.916452][T12255]        common_startup_64+0x13e/0x147
[  352.916468][T12255] 
[  352.916468][T12255] -> #3 (&p->pi_lock){-.-.}-{2:2}:
[  352.916485][T12255]        lock_acquire+0x120/0x360
[  352.916501][T12255]        _raw_spin_lock_irqsave+0xa7/0xf0
[  352.916515][T12255]        try_to_wake_up+0x67/0x12b0
[  352.916528][T12255]        __wake_up_common_lock+0x134/0x1f0
[  352.916543][T12255]        tty_port_default_wakeup+0xa2/0xf0
[  352.916556][T12255]        serial8250_tx_chars+0x72e/0x970
[  352.916573][T12255]        serial8250_handle_irq+0x633/0xbb0
[  352.916590][T12255]        serial8250_default_handle_irq+0xbf/0x1e0
[  352.916603][T12255]        serial8250_interrupt+0x8a/0x160
[  352.916618][T12255]        __handle_irq_event_percpu+0x28c/0x980
[  352.916633][T12255]        handle_irq_event+0x8b/0x1e0
[  352.916646][T12255]        handle_edge_irq+0x23b/0xa10
[  352.916658][T12255]        __common_interrupt+0x141/0x1f0
[  352.916676][T12255]        common_interrupt+0xb6/0xe0
[  352.916687][T12255]        asm_common_interrupt+0x26/0x40
[  352.916700][T12255]        pv_native_safe_halt+0x13/0x20
[  352.916714][T12255]        default_idle+0x13/0x20
[  352.916737][T12255]        default_idle_call+0x74/0xb0
[  352.916747][T12255]        do_idle+0x1e8/0x510
[  352.916757][T12255]        cpu_startup_entry+0x44/0x60
[  352.916768][T12255]        rest_init+0x2de/0x300
[  352.916778][T12255]        start_kernel+0x3a9/0x410
[  352.916789][T12255]        x86_64_start_reservations+0x24/0x30
[  352.916804][T12255]        x86_64_start_kernel+0x143/0x1c0
[  352.916818][T12255]        common_startup_64+0x13e/0x147
[  352.916833][T12255] 
[  352.916833][T12255] -> #2 (&tty->write_wait){-.-.}-{3:3}:
[  352.916849][T12255]        lock_acquire+0x120/0x360
[  352.916865][T12255]        _raw_spin_lock_irqsave+0xa7/0xf0
[  352.916880][T12255]        __wake_up_common_lock+0x2f/0x1f0
[  352.916894][T12255]        tty_port_default_wakeup+0xa2/0xf0
[  352.916905][T12255]        serial8250_tx_chars+0x72e/0x970
[  352.916922][T12255]        serial8250_handle_irq+0x633/0xbb0
[  352.916939][T12255]        serial8250_default_handle_irq+0xbf/0x1e0
[  352.916951][T12255]        serial8250_interrupt+0x8a/0x160
[  352.916965][T12255]        __handle_irq_event_percpu+0x28c/0x980
[  352.916980][T12255]        handle_irq_event+0x8b/0x1e0
[  352.916996][T12255]        handle_edge_irq+0x23b/0xa10
[  352.917009][T12255]        __common_interrupt+0x141/0x1f0
[  352.917022][T12255]        common_interrupt+0xb6/0xe0
[  352.917030][T12255]        asm_common_interrupt+0x26/0x40
[  352.917038][T12255]        pv_native_safe_halt+0x13/0x20
[  352.917049][T12255]        default_idle+0x13/0x20
[  352.917062][T12255]        default_idle_call+0x74/0xb0
[  352.917069][T12255]        do_idle+0x1e8/0x510
[  352.917076][T12255]        cpu_startup_entry+0x44/0x60
[  352.917084][T12255]        rest_init+0x2de/0x300
[  352.917092][T12255]        start_kernel+0x3a9/0x410
[  352.917100][T12255]        x86_64_start_reservations+0x24/0x30
[  352.917111][T12255]        x86_64_start_kernel+0x143/0x1c0
[  352.917121][T12255]        common_startup_64+0x13e/0x147
[  352.917132][T12255] 
[  352.917132][T12255] -> #1 (&port_lock_key){-.-.}-{3:3}:
[  352.917145][T12255]        lock_acquire+0x120/0x360
[  352.917156][T12255]        _raw_spin_lock_irqsave+0xa7/0xf0
[  352.917166][T12255]        serial8250_console_write+0x17e/0x1ba0
[  352.917175][T12255]        console_flush_all+0x728/0xc40
[  352.917184][T12255]        console_unlock+0xc4/0x270
[  352.917193][T12255]        vprintk_emit+0x5b7/0x7a0
[  352.917202][T12255]        _printk+0xcf/0x120
[  352.917213][T12255]        register_console+0xa8b/0xf90
[  352.917223][T12255]        univ8250_console_init+0x3a/0x70
[  352.917235][T12255]        console_init+0x10e/0x430
[  352.917245][T12255]        start_kernel+0x254/0x410
[  352.917252][T12255]        x86_64_start_reservations+0x24/0x30
[  352.917263][T12255]        x86_64_start_kernel+0x143/0x1c0
[  352.917274][T12255]        common_startup_64+0x13e/0x147
[  352.917285][T12255] 
[  352.917285][T12255] -> #0 (console_owner){-...}-{0:0}:
[  352.917297][T12255]        validate_chain+0xb9b/0x2140
[  352.917305][T12255]        __lock_acquire+0xab9/0xd20
[  352.917317][T12255]        lock_acquire+0x120/0x360
[  352.917329][T12255]        console_flush_all+0x6d2/0xc40
[  352.917339][T12255]        console_unlock+0xc4/0x270
[  352.917347][T12255]        vprintk_emit+0x5b7/0x7a0
[  352.917356][T12255]        _printk+0xcf/0x120
[  352.917366][T12255]        should_fail_ex+0x3f5/0x560
[  352.917377][T12255]        strncpy_from_user+0x36/0x290
[  352.917387][T12255]        strncpy_from_user_nofault+0x72/0x150
[  352.917398][T12255]        bpf_probe_read_compat_str+0xe2/0x180
[  352.917407][T12255]        bpf_prog_c1796171ffc7efef+0x3e/0x44
[  352.917418][T12255]        bpf_trace_run4+0x28e/0x4a0
[  352.917429][T12255]        __bpf_trace_sched_switch+0x17a/0x1e0
[  352.917440][T12255]        __traceiter_sched_switch+0x9a/0xd0
[  352.917451][T12255]        __schedule+0x238f/0x4cc0
[  352.917461][T12255]        preempt_schedule_common+0x83/0xd0
[  352.917473][T12255]        preempt_schedule+0xae/0xc0
[  352.917485][T12255]        preempt_schedule_thunk+0x16/0x30
[  352.917499][T12255]        vprintk_emit+0x69a/0x7a0
[  352.917508][T12255]        _printk+0xcf/0x120
[  352.917518][T12255]        __nla_validate_parse+0x1719/0x2d40
[  352.917532][T12255]        __nla_validate+0x40/0x60
[  352.917543][T12255]        rtm_to_fib_config+0x91/0x13c0
[  352.917555][T12255]        inet_rtm_newroute+0xf3/0x210
[  352.917564][T12255]        rtnetlink_rcv_msg+0x7cc/0xb70
[  352.917577][T12255]        netlink_rcv_skb+0x208/0x470
[  352.917589][T12255]        netlink_unicast+0x82c/0x9e0
[  352.917599][T12255]        netlink_sendmsg+0x805/0xb30
[  352.917611][T12255]        __sock_sendmsg+0x21c/0x270
[  352.917622][T12255]        ____sys_sendmsg+0x505/0x830
[  352.917630][T12255]        ___sys_sendmsg+0x21f/0x2a0
[  352.917638][T12255]        __x64_sys_sendmsg+0x19b/0x260
[  352.917646][T12255]        do_syscall_64+0xfa/0x3b0
[  352.917659][T12255]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.917667][T12255] 
[  352.917667][T12255] other info that might help us debug this:
[  352.917667][T12255] 
[  352.917670][T12255] Chain exists of:
[  352.917670][T12255]   console_owner --> &p->pi_lock --> &rq->__lock
[  352.917670][T12255] 
[  352.917685][T12255]  Possible unsafe locking scenario:
[  352.917685][T12255] 
[  352.917688][T12255]        CPU0                    CPU1
[  352.917691][T12255]        ----                    ----
[  352.917694][T12255]   lock(&rq->__lock);
[  352.917700][T12255]                                lock(&p->pi_lock);
[  352.917706][T12255]                                lock(&rq->__lock);
[  352.917712][T12255]   lock(console_owner);
[  352.917718][T12255] 
[  352.917718][T12255]  *** DEADLOCK ***
[  352.917718][T12255] 
[  352.917721][T12255] 4 locks held by syz.5.1909/12255:
[  352.917731][T12255]  #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  352.917757][T12255]  #1: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0
[  352.917780][T12255]  #2: ffffffff8e12e180 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120
[  352.917804][T12255]  #3: ffffffff8e015a50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40
[  352.917827][T12255] 
[  352.917827][T12255] stack backtrace:
[  352.917833][T12255] CPU: 1 UID: 0 PID: 12255 Comm: syz.5.1909 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  352.917845][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  352.917851][T12255] Call Trace:
[  352.917857][T12255]  <TASK>
[  352.917863][T12255]  dump_stack_lvl+0x189/0x250
[  352.917881][T12255]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.917895][T12255]  ? __pfx__printk+0x10/0x10
[  352.917915][T12255]  ? print_lock_name+0xde/0x100
[  352.917938][T12255]  print_circular_bug+0x2ee/0x310
[  352.917957][T12255]  check_noncircular+0x134/0x160
[  352.917981][T12255]  validate_chain+0xb9b/0x2140
[  352.918027][T12255]  __lock_acquire+0xab9/0xd20
[  352.918051][T12255]  ? console_flush_all+0x13a/0xc40
[  352.918062][T12255]  lock_acquire+0x120/0x360
[  352.918076][T12255]  ? console_flush_all+0x13a/0xc40
[  352.918100][T12255]  ? do_raw_spin_unlock+0x122/0x240
[  352.918112][T12255]  ? console_flush_all+0x13a/0xc40
[  352.918128][T12255]  console_flush_all+0x6d2/0xc40
[  352.918139][T12255]  ? console_flush_all+0x13a/0xc40
[  352.918155][T12255]  ? console_flush_all+0x13a/0xc40
[  352.918177][T12255]  ? __pfx_console_flush_all+0x10/0x10
[  352.918192][T12255]  ? perf_trace_buf_alloc+0x131/0x2a0
[  352.918213][T12255]  ? is_printk_cpu_sync_owner+0x32/0x40
[  352.918232][T12255]  console_unlock+0xc4/0x270
[  352.918248][T12255]  ? __pfx_console_unlock+0x10/0x10
[  352.918266][T12255]  ? is_printk_cpu_sync_owner+0x32/0x40
[  352.918285][T12255]  vprintk_emit+0x5b7/0x7a0
[  352.918301][T12255]  ? __pfx_vprintk_emit+0x10/0x10
[  352.918310][T12255]  ? trace_call_bpf+0x5ba/0x850
[  352.918322][T12255]  ? trace_call_bpf+0xb7/0x850
[  352.918333][T12255]  ? perf_trace_lock+0x18d/0x3b0
[  352.918347][T12255]  ? __pfx_trace_call_bpf+0x10/0x10
[  352.918368][T12255]  _printk+0xcf/0x120
[  352.918382][T12255]  ? __pfx____ratelimit+0x10/0x10
[  352.918401][T12255]  ? __pfx__printk+0x10/0x10
[  352.918420][T12255]  ? __pfx_perf_trace_lock+0x10/0x10
[  352.918429][T12255]  ? migrate_enable+0x29c/0x3c0
[  352.918450][T12255]  should_fail_ex+0x3f5/0x560
[  352.918471][T12255]  strncpy_from_user+0x36/0x290
[  352.918492][T12255]  strncpy_from_user_nofault+0x72/0x150
[  352.918510][T12255]  bpf_probe_read_compat_str+0xe2/0x180
[  352.918527][T12255]  bpf_prog_c1796171ffc7efef+0x3e/0x44
[  352.918539][T12255]  bpf_trace_run4+0x28e/0x4a0
[  352.918555][T12255]  ? bpf_trace_run4+0x19c/0x4a0
[  352.918571][T12255]  ? __pfx_bpf_trace_run4+0x10/0x10
[  352.918597][T12255]  ? __bpf_trace_sched_switch+0x15f/0x1e0
[  352.918618][T12255]  __bpf_trace_sched_switch+0x17a/0x1e0
[  352.918636][T12255]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  352.918652][T12255]  ? psi_group_change+0xab8/0x1050
[  352.918663][T12255]  ? __schedule+0x22e9/0x4cc0
[  352.918685][T12255]  ? __schedule+0x22e9/0x4cc0
[  352.918704][T12255]  ? tracing_record_taskinfo_sched_switch+0x7d/0x370
[  352.918718][T12255]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  352.918740][T12255]  __traceiter_sched_switch+0x9a/0xd0
[  352.918760][T12255]  __schedule+0x238f/0x4cc0
[  352.918788][T12255]  ? this_cpu_in_panic+0x4f/0x80
[  352.918799][T12255]  ? _prb_read_valid+0xa07/0xa90
[  352.918810][T12255]  ? console_flush_all+0x13a/0xc40
[  352.918832][T12255]  ? __pfx___schedule+0x10/0x10
[  352.918863][T12255]  ? __pfx___console_unlock+0x10/0x10
[  352.918880][T12255]  ? preempt_schedule+0xae/0xc0
[  352.918896][T12255]  preempt_schedule_common+0x83/0xd0
[  352.918911][T12255]  preempt_schedule+0xae/0xc0
[  352.918924][T12255]  ? __pfx_preempt_schedule+0x10/0x10
[  352.918935][T12255]  ? console_unlock+0x21b/0x270
[  352.918951][T12255]  ? __pfx_console_unlock+0x10/0x10
[  352.918965][T12255]  preempt_schedule_thunk+0x16/0x30
[  352.918984][T12255]  ? vprintk_emit+0x695/0x7a0
[  352.918999][T12255]  vprintk_emit+0x69a/0x7a0
[  352.919014][T12255]  ? __pfx_vprintk_emit+0x10/0x10
[  352.919024][T12255]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  352.919037][T12255]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  352.919074][T12255]  _printk+0xcf/0x120
[  352.919088][T12255]  ? __pfx____ratelimit+0x10/0x10
[  352.919106][T12255]  ? __pfx__printk+0x10/0x10
[  352.919126][T12255]  ? trace_call_bpf+0xb7/0x850
[  352.919146][T12255]  __nla_validate_parse+0x1719/0x2d40
[  352.919188][T12255]  ? __pfx___nla_validate_parse+0x10/0x10
[  352.919204][T12255]  ? trace_call_bpf+0xb7/0x850
[  352.919224][T12255]  ? trace_call_bpf+0xb7/0x850
[  352.919237][T12255]  ? trace_call_bpf+0xb7/0x850
[  352.919247][T12255]  ? trace_call_bpf+0x5ba/0x850
[  352.919255][T12255]  ? nlmon_xmit+0xb0/0x100
[  352.919266][T12255]  ? trace_call_bpf+0xb7/0x850
[  352.919284][T12255]  __nla_validate+0x40/0x60
[  352.919306][T12255]  rtm_to_fib_config+0x91/0x13c0
[  352.919326][T12255]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  352.919355][T12255]  inet_rtm_newroute+0xf3/0x210
[  352.919369][T12255]  ? __pfx_perf_trace_lock+0x10/0x10
[  352.919381][T12255]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  352.919422][T12255]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  352.919435][T12255]  rtnetlink_rcv_msg+0x7cc/0xb70
[  352.919456][T12255]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  352.919470][T12255]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  352.919490][T12255]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  352.919519][T12255]  netlink_rcv_skb+0x208/0x470
[  352.919535][T12255]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  352.919553][T12255]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  352.919584][T12255]  ? netlink_deliver_tap+0x2e/0x1b0
[  352.919610][T12255]  netlink_unicast+0x82c/0x9e0
[  352.919636][T12255]  ? __pfx_netlink_unicast+0x10/0x10
[  352.919654][T12255]  ? netlink_sendmsg+0x642/0xb30
[  352.919666][T12255]  ? skb_put+0x11b/0x210
[  352.919688][T12255]  netlink_sendmsg+0x805/0xb30
[  352.919715][T12255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.919737][T12255]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  352.919748][T12255]  ? aa_sock_msg_perm+0xf1/0x1d0
[  352.919768][T12255]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  352.919780][T12255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  352.919797][T12255]  __sock_sendmsg+0x21c/0x270
[  352.919815][T12255]  ____sys_sendmsg+0x505/0x830
[  352.919835][T12255]  ? __pfx_____sys_sendmsg+0x10/0x10
[  352.919859][T12255]  ? import_iovec+0x74/0xa0
[  352.919878][T12255]  ___sys_sendmsg+0x21f/0x2a0
[  352.919894][T12255]  ? __pfx____sys_sendmsg+0x10/0x10
[  352.919934][T12255]  ? __fget_files+0x2a/0x420
[  352.919961][T12255]  ? __fget_files+0x2a/0x420
[  352.919970][T12255]  ? __fget_files+0x3a0/0x420
[  352.919994][T12255]  __x64_sys_sendmsg+0x19b/0x260
[  352.920010][T12255]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  352.920035][T12255]  ? __pfx_ksys_write+0x10/0x10
[  352.920047][T12255]  ? rcu_is_watching+0x15/0xb0
[  352.920066][T12255]  ? do_syscall_64+0xbe/0x3b0
[  352.920086][T12255]  do_syscall_64+0xfa/0x3b0
[  352.920099][T12255]  ? lockdep_hardirqs_on+0x9c/0x150
[  352.920112][T12255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.920122][T12255]  ? clear_bhb_loop+0x60/0xb0
[  352.920139][T12255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.920148][T12255] RIP: 0033:0x7fbdd678ebe9
[  352.920160][T12255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.920169][T12255] RSP: 002b:00007fbdd759f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  352.920179][T12255] RAX: ffffffffffffffda RBX: 00007fbdd69b5fa0 RCX: 00007fbdd678ebe9
[  352.920186][T12255] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  352.920193][T12255] RBP: 00007fbdd759f090 R08: 0000000000000000 R09: 0000000000000000
[  352.920199][T12255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.920204][T12255] R13: 00007fbdd69b6038 R14: 00007fbdd69b5fa0 R15: 00007ffc3786f5c8
[  352.920234][T12255]  </TASK>
[  354.502023][T12255] CPU: 1 UID: 0 PID: 12255 Comm: syz.5.1909 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) 
[  354.502040][T12255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  354.502047][T12255] Call Trace:
[  354.502054][T12255]  <TASK>
[  354.502061][T12255]  dump_stack_lvl+0x189/0x250
[  354.502079][T12255]  ? __pfx____ratelimit+0x10/0x10
[  354.502096][T12255]  ? __pfx_dump_stack_lvl+0x10/0x10
[  354.502109][T12255]  ? __pfx__printk+0x10/0x10
[  354.502129][T12255]  ? __pfx_perf_trace_lock+0x10/0x10
[  354.502139][T12255]  ? migrate_enable+0x29c/0x3c0
[  354.502161][T12255]  should_fail_ex+0x414/0x560
[  354.502183][T12255]  strncpy_from_user+0x36/0x290
[  354.502203][T12255]  strncpy_from_user_nofault+0x72/0x150
[  354.502222][T12255]  bpf_probe_read_compat_str+0xe2/0x180
[  354.502241][T12255]  bpf_prog_c1796171ffc7efef+0x3e/0x44
[  354.502254][T12255]  bpf_trace_run4+0x28e/0x4a0
[  354.502271][T12255]  ? bpf_trace_run4+0x19c/0x4a0
[  354.502287][T12255]  ? __pfx_bpf_trace_run4+0x10/0x10
[  354.502313][T12255]  ? __bpf_trace_sched_switch+0x15f/0x1e0
[  354.502334][T12255]  __bpf_trace_sched_switch+0x17a/0x1e0
[  354.502352][T12255]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  354.502368][T12255]  ? psi_group_change+0xab8/0x1050
[  354.502384][T12255]  ? __schedule+0x22e9/0x4cc0
[  354.502407][T12255]  ? __schedule+0x22e9/0x4cc0
[  354.502426][T12255]  ? tracing_record_taskinfo_sched_switch+0x7d/0x370
[  354.502440][T12255]  ? __pfx___bpf_trace_sched_switch+0x10/0x10
[  354.502455][T12255]  __traceiter_sched_switch+0x9a/0xd0
[  354.502476][T12255]  __schedule+0x238f/0x4cc0
[  354.502505][T12255]  ? this_cpu_in_panic+0x4f/0x80
[  354.502516][T12255]  ? _prb_read_valid+0xa07/0xa90
[  354.502527][T12255]  ? console_flush_all+0x13a/0xc40
[  354.502550][T12255]  ? __pfx___schedule+0x10/0x10
[  354.502581][T12255]  ? __pfx___console_unlock+0x10/0x10
[  354.502598][T12255]  ? preempt_schedule+0xae/0xc0
[  354.502614][T12255]  preempt_schedule_common+0x83/0xd0
[  354.502629][T12255]  preempt_schedule+0xae/0xc0
[  354.502643][T12255]  ? __pfx_preempt_schedule+0x10/0x10
[  354.502654][T12255]  ? console_unlock+0x21b/0x270
[  354.502669][T12255]  ? __pfx_console_unlock+0x10/0x10
[  354.502684][T12255]  preempt_schedule_thunk+0x16/0x30
[  354.502703][T12255]  ? vprintk_emit+0x695/0x7a0
[  354.502718][T12255]  vprintk_emit+0x69a/0x7a0
[  354.502734][T12255]  ? __pfx_vprintk_emit+0x10/0x10
[  354.502744][T12255]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  354.502757][T12255]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  354.502794][T12255]  _printk+0xcf/0x120
[  354.502809][T12255]  ? __pfx____ratelimit+0x10/0x10
[  354.502827][T12255]  ? __pfx__printk+0x10/0x10
[  354.502846][T12255]  ? trace_call_bpf+0xb7/0x850
[  354.502867][T12255]  __nla_validate_parse+0x1719/0x2d40
[  354.502909][T12255]  ? __pfx___nla_validate_parse+0x10/0x10
[  354.502926][T12255]  ? trace_call_bpf+0xb7/0x850
[  354.502946][T12255]  ? trace_call_bpf+0xb7/0x850
[  354.502959][T12255]  ? trace_call_bpf+0xb7/0x850
[  354.502969][T12255]  ? trace_call_bpf+0x5ba/0x850
[  354.502977][T12255]  ? nlmon_xmit+0xb0/0x100
[  354.502988][T12255]  ? trace_call_bpf+0xb7/0x850
[  354.503006][T12255]  __nla_validate+0x40/0x60
[  354.503028][T12255]  rtm_to_fib_config+0x91/0x13c0
[  354.503050][T12255]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  354.503079][T12255]  inet_rtm_newroute+0xf3/0x210
[  354.503094][T12255]  ? __pfx_perf_trace_lock+0x10/0x10
[  354.503105][T12255]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  354.503147][T12255]  ? __pfx_inet_rtm_newroute+0x10/0x10
[  354.503160][T12255]  rtnetlink_rcv_msg+0x7cc/0xb70
[  354.503182][T12255]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  354.503196][T12255]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  354.503214][T12255]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  354.503243][T12255]  netlink_rcv_skb+0x208/0x470
[  354.503261][T12255]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  354.503278][T12255]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  354.503310][T12255]  ? netlink_deliver_tap+0x2e/0x1b0
[  354.503336][T12255]  netlink_unicast+0x82c/0x9e0
[  354.503363][T12255]  ? __pfx_netlink_unicast+0x10/0x10
[  354.503383][T12255]  ? netlink_sendmsg+0x642/0xb30
[  354.503396][T12255]  ? skb_put+0x11b/0x210
[  354.503417][T12255]  netlink_sendmsg+0x805/0xb30
[  354.503445][T12255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.503463][T12255]  ? perf_trace_run_bpf_submit+0xf9/0x170
[  354.503474][T12255]  ? aa_sock_msg_perm+0xf1/0x1d0
[  354.503493][T12255]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  354.503504][T12255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  354.503521][T12255]  __sock_sendmsg+0x21c/0x270
[  354.503540][T12255]  ____sys_sendmsg+0x505/0x830
[  354.503560][T12255]  ? __pfx_____sys_sendmsg+0x10/0x10
[  354.503585][T12255]  ? import_iovec+0x74/0xa0
[  354.503604][T12255]  ___sys_sendmsg+0x21f/0x2a0
[  354.503619][T12255]  ? __pfx____sys_sendmsg+0x10/0x10
[  354.503660][T12255]  ? __fget_files+0x2a/0x420
[  354.503687][T12255]  ? __fget_files+0x2a/0x420
[  354.503696][T12255]  ? __fget_files+0x3a0/0x420
[  354.503720][T12255]  __x64_sys_sendmsg+0x19b/0x260
[  354.503736][T12255]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  354.503761][T12255]  ? __pfx_ksys_write+0x10/0x10
[  354.503773][T12255]  ? rcu_is_watching+0x15/0xb0
[  354.503792][T12255]  ? do_syscall_64+0xbe/0x3b0
[  354.503813][T12255]  do_syscall_64+0xfa/0x3b0
[  354.503826][T12255]  ? lockdep_hardirqs_on+0x9c/0x150
[  354.503839][T12255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.503850][T12255]  ? clear_bhb_loop+0x60/0xb0
[  354.503866][T12255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  354.503877][T12255] RIP: 0033:0x7fbdd678ebe9
[  354.503890][T12255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  354.503898][T12255] RSP: 002b:00007fbdd759f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  354.503910][T12255] RAX: ffffffffffffffda RBX: 00007fbdd69b5fa0 RCX: 00007fbdd678ebe9
[  354.503917][T12255] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005
[  354.503923][T12255] RBP: 00007fbdd759f090 R08: 0000000000000000 R09: 0000000000000000
[  354.503930][T12255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  354.503936][T12255] R13: 00007fbdd69b6038 R14: 00007fbdd69b5fa0 R15: 00007ffc3786f5c8
[  354.503965][T12255]  </TASK>