last executing test programs: 2.420985473s ago: executing program 2 (id=1791): r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb141fb220cf", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0x5, @loopback, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="ce0c9eebeed4ab332d2c53855adee3c8f115f29dab12bab6ed29f51ce8a11406cc09001adfb3a6f9acf34d04a64433df5def9fb5f4d74b07926eb13cf30fca5a20dc91bd7c142678d6636f759c3cb7393b952add5aa042e99dbfd310f04b9bca6ab7bd46bdc61d200fd6ef06ceb83064459da8592d2064564a1f2c3d51550b2c257d52e315704601296a8411c3654e78", 0x90}, {&(0x7f0000000200)="56053fcb81da96ed7c180b718637fc1623df82cfddf3c74e99644b225632ef1af3ada427dcaf6278ae005c81f2b7ac7a7cee50f0a0947f9092f9854b96f2a4486b610a930ec8dd1b526f2d084da1fe55e5af97b649e5bbeac94f03b098a5413a449e7c1d05faa3ca88cb4dca4588d86eadca9b0651a33005ab0bd2faabaf9d1223fd480a34c443858adb077d3844a400e9a54ccb68596b792243442cb0dd8483175c3ad550d82cbcedea9a2af9903307", 0xb0}, {&(0x7f0000000340)="b34186139c8d53043e8b2caf40b4e5fc3015c484ecdaa3dbfc7c3279f3d2a2f9ba02cd88d7d61222f918744e9ee1da755cdc85ee8d1bdf9300f6a4750a17acb500fa8d8588a04d4e015fd2ef2a3a18b45281cb0e2a80eac37b623e9ef9e5ad38c3883ed2b4e65aef4daf4d1f1fcecc5f0cbb3ca63813c15012a27b22498be0f18884556a60dfe37709638e99d68c00aaa035274bc66e9aa2868a90b2bbccbd48d6bec2db676f75c70787835129feae7737aeeb60096d043be3f61f7e7a31cd88d1d7", 0xc2}], 0x3, &(0x7f0000000580)=[{0x78, 0x10a, 0x10000, "d5e06ea0344a3185ec81aa64ecbf8202332004c4006f117a5287c6da0b7d5d31c2b661cf13ddfac3b8571b4bfa6f846aa6481f8f55592ed789d3af7dc9474f42948108cff4041d940d97ca9b2f89912f5e41170a47b887a4ed9124169fe45cb0a72bc3a4bf772628"}, {0xe0, 0x10f, 0x7, "d3f3345f12735ee5442bfeeff7bd93683fc27baf17a8223c63aca64e3e2c28e43a84c6bca2fdb6f7687b5485ef22604712e3a432f6b9b8660b65dd94e9801c922cac06cbf2b45840247b77ac4547d2a382a8b134eea42fe0e17cebfc46acca9fab5c89d3e91b8e8d4109c00c88c9b155b058807be64d3f84997508817e552b753afa6eb8269115e6397127d5f565813a3e53a26ba301afb8aa5516adf5f9fd55710099ba96c77891ca15c6f75391ca103b57342e775e1c51ddac89a234a7167ea12a1f168d9269f99160ea778d896449"}, {0x70, 0x115, 0x5, "47654ea0e5c486b3dac7ffc844aaaaee997793c5f4a1c7a2e54f35bfe892920ebcecb0c40a13a5e6e704a4d70649a58dc4b86ad147358dc0ddce8a0c0392edad6ac1a33944a604cd1680eea2d4d27d1891a37f54f1add11527a2b81e2f"}, {0x108, 0xff, 0xf8, "c62b0e2e0605ed4052f0c6050b1f488c9acce959cd4b3c272dad40d5582b22f500364e761e0b1b959f4fc878d8c92b474d4f4b5a2c8726b6f9cf1107830997b36fc8959b5ea36741688d3a91d1ae4dbcbecac90d372fc552185d79baec9b1d3619750690498e3755c04e2b20481cdf9b3c4020582a4d96d30ecd1253a678abccfc36ffe16d7adc5a01d9e39277880e2f5af984b2e773c32d7249654f09eb22ca6b9c2ea3388a9f62a0ce24805365bafe0c4deb49ee0f96ae1b79c7e5f966c711f6ca8847ae6d9d8c191d737b6be2b8c4e2c75c2f2295a0fc4922101a66c4e3190ba513dfb20fb7f4b90337ba4c75f9d13315fc3a9f"}, {0x30, 0x1, 0x7, "ceae46a6b054468a207afee61db38ede601ceff12fa46f8282"}, {0x10, 0x102, 0x2}, {0x1010, 0x111, 0x400, "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"}, {0x70, 0x88, 0xfffffffc, "88942f78ad06abfee79bef1b9cad7eb8b1e27437c52df38420a8a86965b3a8299d899bd130acdfbfd413c6a01678bba9a32c8a37faa9ab4b96f90551dd8e3a2ba70d246f4c581f94071dc95e9cc4efcfaf4ad86242e4b81932e024135f"}, {0x100, 0x112, 0x8001, "b9c7a3ac60de0eee402b9f75852a79bb4d1958431c0b5fce0c550ea51ce357268a4f26359598be057ae71489effcaa06bfda18ad0da50106f718c132c15a681aa79ff9c45485d7c7ab7541e1cefdc2e807dc45a598da04a054a917cb08f438fbd391bdbf4d2cab3129fe7b07cacd6c61a3b036cfbce06d4e195b732eb743b9937ad4b29dd58db09c95a5fca2d220c24b7259c0dcba37506cc3bb62d9a03f0e817515c6fa98e9c0b9b89158b787691c6965f8635784003d2645d5b68e0127e2c23eb46305816563a2cca9ccbfde4a987c67f5885270213f0ef5b4d78e3be807d09cf892bd9d0caac375"}], 0x1490}, 0x94) 2.280795792s ago: executing program 2 (id=1794): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x28, 0x1, 0x0) (async) socket$kcm(0x28, 0x1, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x1c}], 0x1}, 0x480c0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) (async) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0xb3) (async, rerun: 32) socket$kcm(0x21, 0x2, 0x2) (rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x23, 0x107, 0x70bd2a, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r2}, 0x8) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@migrate={0x50, 0x21, 0x1, 0xfffffffc, 0x0, {{@in=@private=0xa010101, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x100000}}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) r6 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, &(0x7f0000000640)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x2d, 0x0, 0x6}, 0x28) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x582}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2.279832062s ago: executing program 1 (id=1795): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xa) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x9, 0x7, 0x0, 0xeff, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xa0000001}]}, 0x38}, 0x1, 0x7}, 0x0) (async) r1 = socket$kcm(0x10, 0x400000002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000091401ffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4008010}, 0x8004) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002040)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0xb}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1c, 0x2}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@newsa={0x11c, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {0x0, 0x40, 0x0, 0x0, 0x0, 0x100}, {}, {}, 0x200, 0x3506, 0xa, 0x0, 0x0, 0x40}, [@replay_esn_val={0x24, 0x17, {0x2, 0x70bd27, 0x70bd2a, 0x70bd2a, 0x70bd29, 0x80000001, [0x8001, 0x81]}}, @tfcpad={0x8, 0x16, 0x80}]}, 0x11c}}, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x6060, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) gettid() ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 2.275447326s ago: executing program 0 (id=1796): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x8, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x800000009, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f00000000c0)={'some', 0x20, 0x3, 0x20, 0x2}, 0x2f) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000c00)=@newtaction={0x3b8, 0x30, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{0x2dc, 0x1, [@m_ipt={0x44, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0x12, 0x6, "b7e405d16a818984e343e5a4e111"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0xe8, 0x13, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}]}, {0xb8, 0x6, "9060ca23e5a41be7650e169f5024fee6762f8fcb4800da50e5283fc38f00040aced6408ad0e85988876ea9b7f266eda0e13aedb30c24ff74cd840a452621de2f841aa266db7c5f6391b1b6fd5875d014ff2d8d8a30a2265874ed5e5bef6f13a366a3df5f47d0ebe7c773cb96216d490b8b4d6e8db597774a3cb98d93bbe13dba1b1146fb1c82a326f561ea8a3b9406c0a914d5217eadf7d82d9e4884dc9158b6e264b812c39abc89605fbcac82e8aeb90758c1b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x1ac, 0x19, 0x0, 0x0, {{0x8}, {0x100, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd0, 0x6, {0x4, 'mangle\x00', 0x5, 0x8, "fae0346f7294a163f3f448c35e32968469d87692386423bbb12de784c0e927fa93fc758ab3191dc6dd29bd2dcc3aadcc3c9bd64a8cf1b961f5b8810489c6a64a2352519b64d28b343fddb986c17718a9e515118a8b8cb8c802ddeb91a285fda32c5f857a3858a66a432ed0233be7d7f2afe465dede198cf176058b8eab515958d264c0391c51222187c28d92826d0ef57aadd9c7c699f79ab7578a4be925fda5c171d642ce21"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xf0}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x85, 0x6, "0b9d671e4fa7c6ba96b26d69e607b262e133b346a222e667997930deadf441c7f7acf3b793c2e2654c6770438d08ec10160db6157284b1f828a979bfe1ee48fdb8c663e2f159b12c44b2a16db6f94e58e926ce16350526e7aeb1861c26e1c597f0638bfd97bb4017f0bc1c3d25a88f698abbb68310173645ae87fd8b39727aab9f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, {0xc8, 0x1, [@m_ipt={0xc4, 0x7, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xefbb}, @TCA_IPT_INDEX={0x8, 0x3, 0xd}]}, {0x67, 0x6, "188ae1184bd63dc3ed9e0af2e5febfac78054e97da99252742872d724199eb041c604655718816cc459d9168ca88193dd1606851c30a26f9f4a4b4a3cb4756f4b10b890474b2c3b46503895689d6949ed0ddb7ec27428d05002ba238a0244a3c3b6f54"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x7, 0x3}}}}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x20048000}, 0x1aa1bfb54987e1d8) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x7, &(0x7f0000000000)=r4, 0x4) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000800fc80040008801400018006070600800a0000050025000000000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x2000c001}, 0x200040c0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$kcm(0x11, 0x20000000000000a, 0x300) setsockopt$sock_attach_bpf(r8, 0x1, 0x28, &(0x7f0000000000), 0x4) recvmsg(r8, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x20) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x10000000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0x2}, {0x3d}, {0x2, 0x0, 0xd, 0x7}, {0x6}]}) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000100)=[{0xb1, 0x0, 0x3, 0xffffeffc}, {0x6}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8940, &(0x7f0000000080)) 2.09170703s ago: executing program 2 (id=1797): socket$kcm(0x11, 0x2, 0x0) (async) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x13, &(0x7f0000000800), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000240), 0xf}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socket$kcm(0x2, 0x5, 0x84) (async) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x3f, 0x4, 0x80000000000000, 0x10000003, 0xffff, 0x0, 0x0, 0x0, 0x8000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x3f, 0x4, 0x80000000000000, 0x10000003, 0xffff, 0x0, 0x0, 0x0, 0x8000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="340000003e000701fcffffff00000000017c0000040042800c00018006000600ab230000100002800c001780080001800400", @ANYRES64=r5], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) sendmsg$inet6(r3, &(0x7f0000000880)={&(0x7f0000000040)={0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x40000008}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000200)="8000e859667fbc13", 0x8}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="240000000000000001"], 0x28}, 0x4008040) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0xc048) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="020000000400000005000000aa"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000200), 0x40a78, r8, 0x4}, 0x38) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041000f3fe80000000000000110880febb0007aafe8000000000000027bfa7b09303960e2b80"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[], 0x0, 0x3a, 0x0, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238000, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)='\a', 0x3, 0x0, 0x25e}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 2.088382566s ago: executing program 1 (id=1798): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="9feb010018000000000000002c0000a55c4f060002000000000000000100000d0000000000000000000000000000000000000000000000000000000004000000000000000000"], &(0x7f0000000a80)=""/172, 0x46, 0xac, 0xc}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x2000, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a44000000090a090400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) close(0x4) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)={r2}) (async) socket$kcm(0x11, 0xa, 0x300) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000070000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000010000000000000000000000000000000000000a72075f59ad172a8c0088d"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d40)={@map=r3, 0x7, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) close(r5) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, r4, 0x4, r4}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7f800000"], 0x4) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="66db45242fdf544e90fbe1beb4245957fa0ec51f85995e1aa717c081d08179ff25c8dafc077efae1f673e057a9b6987843dad10b28e979df7057e49a8d08c6536276ace8153eb85c52e68950080bae24222feb0dbcf345ffa4ee"], 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x60044010) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd31, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x8}, {0xc, 0xffff}, {0x6, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48804}, 0x40040094) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4000000000000, 0x480e0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x3}, 0x0, 0x0, 0x3, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x1, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 1.980745622s ago: executing program 4 (id=1799): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x31) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000000000000007000000c6e415796226070b0700000000000000004414"], 0x30}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) (async) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async, rerun: 32) r7 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x7, 0x20000000be}, 0x0, 0x0, 0x4082c5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_REFRESH(r7, 0x2402, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0xc000) recvmsg$kcm(r8, &(0x7f0000003c00)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 64) r9 = socket$kcm(0xa, 0x1, 0x106) (rerun: 64) setsockopt$sock_attach_bpf(r9, 0x29, 0x3e, 0x0, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500090000000d000300686173683a6d6163"], 0x5c}}, 0x4000000) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r10, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x10) (async, rerun: 32) gettid() mkdir(&(0x7f0000000040)='./file0\x00', 0x3) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x4000000) 1.922283072s ago: executing program 2 (id=1801): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4a, 0x1, 0x0, 0xf, 0x0, 0x4000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000100), 0xc}, 0x100, 0x0, 0x0, 0x4, 0x7f, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x100a}, 0x18) r2 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r2}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'netpci0\x00', 0x800}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xcc, 0xa5}, 0x10000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r1) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00590200000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000840)='oG ', 0x3}], 0x4}, 0x0) sendmsg$inet(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}, @ip_tos_u8={{0x11, 0x110}}], 0x38}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40020000) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f90324fc602f1b02000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x3, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6], 0x9c}}, 0x40040) 1.800285779s ago: executing program 1 (id=1802): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@newqdisc={0x84, 0x24, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x5, 0x5}, {0xc, 0x1}, {0x4, 0x6}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}]}}]}, 0x84}}, 0x20008051) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) (rerun: 32) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@union={0xc, 0x8, 0x0, 0x5, 0x0, 0x2, [{0xb, 0x0, 0x1000}, {0x1, 0x4, 0x2}, {0x9, 0x3, 0x4}, {0xd, 0x4, 0x5df}, {0xe, 0x1, 0x4}, {0x4, 0x3, 0x8001}, {0xe, 0x5, 0x7a0}, {0x2, 0x0, 0x2fd}]}]}, {0x0, [0x5f, 0x30, 0x30, 0x5f, 0x5f]}}, &(0x7f0000000340)=""/85, 0x8b, 0x55, 0x0, 0x2, 0x10000}, 0x28) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x45c, '\x00', r1, r3, 0x5, 0x4, 0x5}, 0x50) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9def, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000500)=""/4096, 0x41100, 0x4, '\x00', r1, 0x1b, r3, 0x8, &(0x7f0000001500)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r4, r4, r4, r4, r4, r4, r4], 0x0, 0x10, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x13, 0x20, &(0x7f0000001640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8000}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x8000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001740)='syzkaller\x00', 0xfffffffd, 0x71, &(0x7f0000001780)=""/113, 0x41000, 0x31, '\x00', r1, @fallback=0xa3b67c9627bb0628, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000001840)={0x5, 0x3, 0x7, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, &(0x7f0000001880)=[r4], &(0x7f00000018c0)=[{0x1, 0x5, 0xa, 0xddf206421b519796}, {0x3, 0x2, 0x9, 0x1}, {0x0, 0x2, 0xb, 0x8}], 0x10, 0x1000}, 0x94) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001ac0)={@fallback=r3, 0x1e, 0x0, 0xfffffffd, &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001a00)=[0x0, 0x0], &(0x7f0000001a40)=[0x0], &(0x7f0000001a80)=[0x0], 0x0}, 0x40) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b40)='rdma.current\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001b00)={@map=r4, r5, 0x2b, 0x2009, r6, @value=r9, @void, @void, @void, r8}, 0x20) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000001b80), 0x4) (async) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001bc0)={r0, 0xcd3, 0x216f4b70af284c50}, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x2c, 0x7, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8081) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d80)={{r10, 0xffffffffffffffff}, &(0x7f0000001d00), &(0x7f0000001d40)=r9}, 0x20) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001fc0)={0x57, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000020c0)=@bpf_lsm={0x1d, 0x18, &(0x7f0000001dc0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd, @jmp={0x5, 0x1, 0x4, 0xc, 0xb, 0xc, 0x10}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}], &(0x7f0000001e80)='syzkaller\x00', 0x6a2, 0xed, &(0x7f0000001ec0)=""/237, 0x40f00, 0x0, '\x00', r1, 0x1b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r12, 0x0, 0x5, &(0x7f0000002000)=[0xffffffffffffffff], &(0x7f0000002040)=[{0x2, 0x1, 0x8, 0x2}, {0x5, 0x2, 0x2, 0x4}, {0x3, 0x4, 0xb, 0x2}, {0x2, 0x1, 0x10, 0xb}, {0x5, 0x3, 0x5, 0x6}], 0x10, 0x5}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000023c0)={r7, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002400)={&(0x7f0000002180), &(0x7f00000021c0)=""/169, &(0x7f0000002280)="f6c44251c6a7c7a58af0a0b3ff24032a5f1fbcf5af922ea9c40d24fab28fbec1775bc5331107919ec647ac496e694f4070c287122762b99dbf2ff404102fc4336419da948750c62e9da5b569f6c78aa8486d2e6e54dd12aa42fe6df13388161f8ff48e517874b18ca002917a5901d9f6805675653a0d3300dfde6ef913ac55fff0151ab84755e76839f14b0426b69d74a3f20c791335497a3ab2567989a2a4bec2de132b459f51e8bd609765add26f98eb98c3e571c1ab184bc1b22392172ad8", &(0x7f0000002340)="d417a08b3478766a57535d747407dcc852ad5d92035564c9f1cb8f8f05c45115d4f10d9aa0ce38d2276438d8353a2eb8e10f15f61bab75aef9291768f263d018f185ee0ef2666a41a767bbb6652e24", 0x4, r13}, 0x38) (async, rerun: 32) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002480)=@generic={&(0x7f0000002440)='./file0\x00', 0x0, 0x10}, 0x18) (async, rerun: 32) openat$cgroup_procs(r9, &(0x7f00000024c0)='cgroup.threads\x00', 0x2, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000002540)=@o_path={&(0x7f0000002500)='./file0\x00', r7, 0x4000, r2}, 0x18) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000002580)) (async, rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000025c0)={r6, r1, 0x25, 0x1, @val=@perf_event={0x3}}, 0x18) (async, rerun: 32) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r9) (async) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002800)={&(0x7f0000002700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@union={0x2, 0x1, 0x0, 0x5, 0x0, 0x1, [{0x8, 0x3, 0x7fffffff}]}]}, {0x0, [0x30]}}, &(0x7f0000002740)=""/161, 0x33, 0xa1, 0x0, 0x0, 0x10000, @value=r9}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000002980)={0xb, 0xb, &(0x7f0000002600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xfffffffffffffff9}, @generic={0x81, 0x2, 0xf, 0x3ff, 0x8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x6}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000002680)='GPL\x00', 0x5, 0x23, &(0x7f00000026c0)=""/35, 0x41100, 0x6d, '\x00', r1, @fallback=0x11, r15, 0x8, &(0x7f0000002840)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000002880)={0x3, 0x3, 0x2, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000028c0)=[r9, r13], &(0x7f0000002900)=[{0x2, 0x1, 0x7, 0xb}, {0x5, 0x2, 0x10, 0xc}, {0x5, 0x1, 0x8, 0x2}, {0x5, 0x3, 0xe, 0xa}, {0x1, 0x3, 0x10, 0x5}, {0x1, 0x5, 0x0, 0x2}, {0x1, 0x1, 0x4}], 0x10, 0x7d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c00)={0x6, 0x11, &(0x7f0000002a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@generic={0x9, 0x3, 0x5, 0x5, 0x5}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002b00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, 0x25, r9, 0x8, &(0x7f0000002b40)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002b80)=[r11, r11, r7], &(0x7f0000002bc0)=[{0x0, 0x4, 0xd, 0x6}], 0x10, 0x6}, 0x94) (async) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$DCCPDIAG_GETSOCK(r9, &(0x7f0000003ec0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003e80)={&(0x7f0000002d00)={0x114c, 0x13, 0x200, 0x70bd2d, 0x25dfdbfc, {0x15, 0x0, 0xd, 0xfd, {0x4e23, 0x4e22, [0xc, 0x7, 0x3], [0x7, 0x4, 0x7, 0x7], 0x0, [0x1, 0xda5]}, 0x6c4cc4b1, 0x2}, [@INET_DIAG_REQ_BYTECODE={0xfc, 0x1, "bca357606aea1af087d9ba520d7dde7740b1b4689a19764db85d2bd2cce300f5727eeaace998dc3abba6906a98c1dc93af4c7060f1f0330cdc3196b2a3ff2bea2c8d10bac5667258df4814b1f701d2c8331487d671c5115073b6d3aff84542b4514d5598df017b504ed0708ccf7d9d8a53b3cb220874abab56cacd92a1b76a2450ee8fe2000077584922434ba730aa909b1a32d6e54010c53022e0565b871a6990f6acc6e5ffdfef141153087464003e7aa050cc761ce43c63c76646ceea950c2fa0c08423578065f7e805ea18f857135859e04deadb46fc47aa0e9fdf58de7fb53ff7f465bb7453e944c6c195bb33146eca0ae5ee907997"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "6e13f0bb06b0462b0f877a89fb7e9060f171e0848e182d309b751e9221c991fcb714eadef91f041a27ec317cf7c5668ef9c122d9c7974fab2fa8c01d789ff350af9abcdd2ae76cb29ff1c3c9cc089e78a70d5cd0c85c509344b4ed11e93bfb7d6a39e5b312ea157b3eb1c55feeead70a4359e0fff7af521a014e890ff82b8351744600f1d148b57410bfa7fb6b51e19e6386d8269929be5109a62a86da9ab728193bd8559be514355f4f39f06064712bc0a6503524f23b7970a6fd31df914b1e1377331d4f63bb6dc53d1076bf51366277cd6b947e58acbc2048ea2a5e7bdd2b49e77bad876433cb21f392ba0b838967f6b0375097ffe8827f07042a8672ddab0013a92fd39e9708f67dbd020c77150d047731af9d4e999fbb4a502ee02caf079f22a08e911c0d0d675427ab737cfcfda0d3cabeb13a7001d38d90ccde288bfe64c1a68b80f7584b8c92c1bf33c1798e99ff6badd6be656204478e6c781198087163b0b33132476b83cc8ea764f6b8d9f5aaea9a1cac038bc8f60ef132bbcdd7ffb6d7cbabe1482e54bdf5197991ec60e424927052c339e981ecf13dad0e500d888f14e8e05f8f30aae9ee3e38d29c89f04d505f2c0daa2585d2060da058aab3df11f4a5ce03f4b7cabe766dbeaf0fe8a9662afe3f58d866181b07dd086108a086c7bcfb777e5823146a6a2e7605ab87bbe401ae846ca4449051167210660aa4d187a6e3167cffc77193195833fad6ddea7bb3f9fc49bb7b4459442348db61ab1a3418f233c1a61905b2335518f924061af87b80db7cf8530aaefe364b53d5da7c5513c1b317f5e454bcd1568d73e4bf13d38bb0716e87d1e2b30d4428e314e7a189ba725e1ce974ea7ed08aeb0871897951e83ecc5f62e2e0a15eaf71f5f270eee088e4b921c72a78fa7206b79849c79922909f62fa8c78d714db6eb96ce29cfaa101bd58be75d8da44b6be464b87f71ae460dc4531f2d3e597fbd87a335006c2d60062494188e8d64b32f5f77763ed0dc010ec55211ef50653ce6f984200832fa958fb47f5cce926c017732eeaff6c275fee562435d061c93ff045c82d2ec4c394399c9398a20394ca4276d78192ca4a21bdcbd651f66f6e6fc5f9e97e19e9541d98035cb7b780b854cf04757e3dd87985c9964ae07dc662efdd92d0f6246ded96a502e50f4719479d690abad4bacb8bb4a6aac19b9975eb58e758c86b1fe5d3bc035f4e08777d4ea0b51abc3ef0195fd33858c1f7bca4bf3aadb0b69a0f11ab19df7a5bd96dc936084dd22c6df39343b89e3a1e29229ab708c7512f4297ae893fae1096bb45180b99d40e2f32fb7b9b664ed77cbd207a2069b02ed0df54f85bca98920e8c9c769f733e5fcf320c45b0ad701d0f4ccd51dfe43c64b1c44e62a4e58bbcce9e4f73b3fc6d470185a2e5a7c11aaabf81de4dd618fec5817ff887fb3c48ceb5b3667a4bb87e281765b61f1113f365a93dbd28d69bd7e3cf813572dc3fc78bcfca09c02ee5dd83a8f866c2507f1cd85b351dd09cc032d8657d1fc4a035814015a3039230cd1d53987c7ee052ef442a6f8953d86b5d0f7971c5788b533298bc27c1630a0805b01a529e480a6186b5ffa90983bcd793c4fef51de90a4e77c56c196711c157f390c6aadba02a09279abaf6532c7778353f9925014870e956795251140e7756895e55c51301aa8114ef1f7e1e8c28cc19ddfcf143199c0556d9adf465320af9f0f39b374168cd49440964f1716e7d18fe22b055c2a2fb263992293ed677454b51eaf4fdfa8ce8853484eeb65b1627888e6a26b4e4229d86a97f7268355ab9928cd644110976126b5c188d00a8874b114691f85b686b79f512763da7322694740891ce5b326f4232ec2b1cadedc00f13fc5475c5a87b966ba87b63ce281e4490b33361c364ea47248f8ba675e505cdd12112e680c74041748b8cd7c2128de8a2add3e7fb038fc3ac10fd6e0e1d30d179cefe99986b889d27fa8912b6608a3c11a798397d33f66390170d104c962e73b1358660bcce488ec0af297fc93e6d7315e13ff96ee0cdd3248f013beeeb89f9d03ee126c0e5f9d46685743e27f69bdbc882339a3ae15d796f3eae9aa4b10af245a6a1aa36475314e728be643d5e3ba48665d04e1e4855e6b3c573b05361712f4d12a31a3694a8152733441ba9fc7421c05c9d9959b05fbe03d580fb3089af7a2242bba6236501d2dd04ee27199d1e27be50a5602b68ad1b27652f858974830579b16d4293aa951327bda9fabafc60740b804456fb688d235786533ae4ac75f45c8e79b5e0bbece5836c5e4159dc5f50864f492a4b37e6525467f13615803a64837a91a26831756c03739bcc3917dd5fb65652a691ff2dd81c44d2e547d43026fc437ffdb79cf89798115723b350295f40cf881edd3aae9b7d05d999091d16d9d0245bb0bee76b2005bd4c28fc51f592ff815834c508ef5a5b1b841d48abb2736f8c8029b824ecacf035aac702b57262e6d56d4b85d6715d3b81e3b5b86ad6b3dac6fff65066b93f3d2d17c5c561d8c8b8ac68682d383e2a2a1752c3393625403b9e598edd724c6514dc8275616393a96a16def2e88c334a16e768df99881a3625e100fb23ce63d455b98f6e5c01b9cf5764a56a3c1f921a48acab6055d024e90276a7f93a1e0514ccd7f9bc6f3e65088132d38abe57ce58429cf95ee9e12770961747a592b7b1db64cba598683c14ae6c1549ecd5d874a7592f9048baf927f05b0bcc174f0d95998197a7a00d6619c0da30a54262a1e41c2724b7cd08b81efa8053b608e51d7c22260add9cab9605b986a40b57b34eaa1730022b5a452d226f60fd1bf0a04da51754e52d3b7dd3e7c31a07c6fe5caf877cc3fe45f75e312924976c362a19cd64320c6501adf326ddeb9519bf6dd61e39dece3e6805b04f5ba8069ad3284d270da5af9e567ab9d512edc26e3894703bebbca3c27727266b56d8500cc014393ca11b73d54ca63ed42ca19cf6301e4478b41799c96ae2cfce3007e2fb7edcffe535b94d8cc8545cc9f2e4459f0f00a99add08e94cd32a451fb9884a3cd9f7f0c029ab5c31c313fb0708e6c13c78720e40d2d84194502e0cec418d5fda57dd966beb9c6502294a451b6e32719f61c880dd30ed20d4d28c4d835b754f54e585fd4e876788856511aa6809a449ca7d0140cc6fd18a1840f21ce5fa89341747748828baae8bcccf6572228cd9c6b3a4acf0ce26c25b27cb7510aefae3079a057d9a5446208e1b21f94787906af31f8b1364c869e237e6fe0aca0affae0ff0c97e54423e3e9b1b666556a6e15a2a5ece98313d8169c034bb9f256c48817a4397f0b85de7dcf14e8a79dc98cd3cadbd5745ebaa99dd9d568a0410148807679bed8184fdb7f144b08e2f44a896e8b34a63ac153d105fd0a050028b82092d829f2eed73f6fff1e56cc2348dd9c8239e292fc284240a4093c4115c9b163e2ec8c1379b4072142891d002ad30c6bb99f1054494fd2885334810627e1b690470a919999be785f1fcc5199041cbb38bdda823dea4ddcca6ca0381e34ff3d1d89fbc917010b9f1a7d49c2fb1a92e3094679e7d041d4cfdd014dd1b15895f9913e7e493caf4ba8568a75903c7d8dc296fd514acdc681f7f706e4445e929b1668111bda9287030e1eb8fec1482aaa1d0c386531b487dcdff5a6f41c775ac9279154258454f6ee6d754d64fee6f39720c3062894041f49f40d9aada3745e9ab06bd65a8e4e7711350dca6439e037e2aeeff1d202709c49fbedc8630acb63f7e9f509c838673b1d322e3bffe261a0ad79d6fcc9cba339e285fb2a3b45d93e8a0e3b119305e3e68fe263f7e16df6a4f31c8b7db24f8e07b14f589adf1fbb3d27b60cd9d946fe1437932e1d3c01165bf480e4e4a10b8194335c48edb499843d661843bd61a821bcf64067703fbc795df57fbb89adc34037e508cc9e969ed5ebe9570bef442f65a9a883899351607665ba5cdcc8587455b4bd1ea73887b2b90155b379fbe29f932dab6a6e6f8f3aa579391ba0acbdc3bab683da0b276a82c079e909c5af89e9b90d1a688ade53b112ce7ce1e52dcf5fdf23f3c0c99affd1a6380e76cf037fd8ebedc48e66067c6fc308d703b70b08433f74c397c32148c42a9ce882a9c0f0eeaa55d06ddfd77a196120ce560fa7bfb511fa4ee548ca3f4bac63f76201eea0f34abebfb0f3ba4f13fd770816d205fd687a429139703dcd5a1e37a63b9cf1e7612796579cce7cd5e7f2bf77a114981e8f81bf6818a92b2731013f041513cd0e93ea58c3934b574470bccd1af2aa8daff49449ff36f470bc70c2430f5952a805b14d044f065b45bb96c9a8e84510aaff9868a58c20e6ce246788582c4a93d759e20e043d0c3e738a20c6d5bc8e71448e2079e0fa65d70ea7ad6f94a656a5ac75c4c4b645ae4754ea559d636cf2404f975a2b8dcce779c8a01509b8b81e205366fc0f1acc5a5b3f3b3c5f23faa564105e4d9f6dd5bb954a5adaf26e1f3f24d2e5aada4282e250c1f280fec4a9f4cb0f02b5668735c604c3f3f1742a486fba253c04ac0057c432bdb9164f3384ca783a82b50284a2bd5ba16db362882763ed3c843bef9b779f03e467bd91f0e6863d7ef4580d618235553177a14bfa997cbaecc075baaee19644990d98d1beb8eb11ed88b1cddceececd76ad1daf46cb56143d8383db242c532ee5dea325c55f8ac704f793c90e43a7a13a5576d3e16ef52ef9f1fdbca048aa4e12cf3ac37ce9012f34e2eb76415075e9e31d0e5e3cfe003bd2fcafdd602161e606cb20fb651461d0437fc60cb9cf023cede3b04176ba78d1946efd03c401567acb29268ab40584d688d7ccb0bc397392d2f1f43da4e7749156afe16b4ad8442b2474f0542b89cfebe296a0516e1c8e09bb44c30ae7ce7f9444e8bbb270efb0a4688506bff11c2d8d89851b28afd1116f328f5f5e4dba53ddf8036e92d71318c3d80120bc499bde7ef58fc3b0b3233ac04ca8924a8a8380572e5daebdddcf621cdf4ae8c21a50a9146a91e26ff9943a5083e4b9fcd920bac9b2d0d3608d9dd2790c9a9a84a75dad5c11a60dd67c6dac90fc3feceadbf0fc7cbe761f3a109b0214771258264b82739d3d7973bd14c8e1d57553d069d7820cce3dc8cd4449d4abcd2e63d9db792f989debc780e9dca725d2a2878d63fabe6709e604bcca5bb02a47e874ad6939cbdb13d12cd7a28ff4f8149f32b17ea70ea96c306ae5c0edc867f71cf3c8d9ea3358c91f8729d265b0bf52c2c1e494fa722f7c51b75b56a70c63e2e410e22667ea1ecf3baf04398f585989548d8ecf780f4c80f4759425e50a2c50aa6ede8358e32e642c35a2dc7882a8631eb3039edb78b0b154905a163395840cb2dda756f47f5e8f59e3b425f3a3d43600c0cf130a7a0ade506f4df2c7cdc6e819aa23fd81a398f55c67e368133ae983e6b00d12ac1b4ad9d04d85994e0b6180f8a9c1edd1623e6b71167380cc55e0339c286e42cfb84d605db32422aeab0d8ae31e358f12b2a3ea56ef96aa230892227a4c131096cf33c6217fa2a5162fc60bb145bd42b385857bf179cdbb0df36154ad6f589ec83eeac515ded977eb3a430ad3d9f63e67b83dde5f1be1272153a25b042b51f5c7fa7f2bb5cf5499f3c7a6c61df3cd49a96c5272ec17b40525b93941c6a46268e0e0bba32e28b2d84ad5d324b27b0842c50ce5c558b136506f689d0f429e9c836add8485141da0edb4bcaddcd81f073f189b64a34804f1b822c19f3f4185e88f157413937815963505b4483cbb1"}]}, 0x114c}, 0x1, 0x0, 0x0, 0x4}, 0x8800) 1.781075761s ago: executing program 0 (id=1803): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)=""/33, 0x21}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/157, 0x9d}], 0x3, &(0x7f00000011c0)=""/1, 0x1}, 0xd613cf64c2bb20e7) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x10, 0x9, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x6}, [@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x3, 0x5, 0x4, 0xffffffffffffffff, 0xfffffffffffffff0}]}, &(0x7f00000012c0)='syzkaller\x00', 0xff, 0x0, 0x0, 0x60780, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001340)={0x2, 0xb, 0x1, 0x10}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001380)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001580)={@fallback=0xffffffffffffffff, 0x20, 0x1, 0x6, &(0x7f0000001480)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0], &(0x7f0000001540)=[0x0, 0x0], 0x0}, 0x40) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001640)=@o_path={&(0x7f0000001600)='./file0\x00', 0x0, 0x10}, 0x18) (async) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001680)={0xffffffffffffffff, 0xffffffffffffffff, 0x2f, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000015c0)={@map=r3, 0xffffffffffffffff, 0x2c, 0x2006, r0, @value=r4, @void, @void, @void, r2}, 0x20) (async) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001700)={r0, r1, 0xc, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x1, 0x0, &(0x7f00000016c0)=[0x8], 0x4}}, 0x30) (async) sendmsg$sock(r1, &(0x7f0000001800)={&(0x7f0000001740)=@caif=@util={0x25, "7e8aa8b04ddac8f25681d79d5782b1c7"}, 0x80, &(0x7f00000017c0)}, 0x80) r6 = gettid() (async) r7 = gettid() sendmsg$AUDIT_SET(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x3c, 0x3e9, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x1, 0x1, r7, 0x1, 0x0, 0xf, 0x1, 0x0, 0x3, 0x8}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000001940)={'team_slave_0\x00', 0x20}) sendmsg$unix(r1, &(0x7f0000001dc0)={&(0x7f0000001980)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001d40)=[{&(0x7f0000001a00)="070557c7223eea23f5399eeb7fdef041f18a7e93ce21b394ee183462a05fb44830054719ce85651a9a01f0d7b058d5c74653167c8fb665acc5097713b399fd5b87f0ef24f33bc428cbaf6e0de2156759b1af9afec10c77623cc1b7d17734f32b783e2ee0a58481e6c884780f8680fc311643305793e42c1fc1e62181cf829f8710ab02f95c8107be1a4c0906e946bba9abe3994fa03045f358f0e8233055df3bc1450dc692be40b783f9e4c96e8c5903d1d772764bcc217458c0a73f4035b7795d377c", 0xc3}, {&(0x7f0000001b00)="01e1c18941e4a65647319eede7f69710393ab9c0", 0x14}, {&(0x7f0000001b40)="1bf5ba18a689572e7e032a2a88d6ba8fcb8b93c3f7b62e6d576a9ceaf32920caf372055a04cac5c468b7b7bc70fc9cbbb21a063be6bd1666c8002d3a6b56d73e73567aa6b092360bff73f7d5d5012456bd58b5ffbad839693a19b1db9da72be293c9dde73a9333b9c527c4ccf080bf0ed55676b65042859f4a2ea051a41c4fc3fb8cc4fb4aa59793fdccac38de744cab894b734c50aa2bfd003986446565dd28c4a3dcafa1db6242bd", 0xa9}, {&(0x7f0000001c00)="18e53abd8f537f6704109b05", 0xc}, {&(0x7f0000001c40)="037c353e46f30e91b124830b6f2ddfa30ed9541816c369bad2bd3b71451d66f1045dc2d71fef64f65a54883a64d1863b0b007d29", 0x34}, {&(0x7f0000001c80)="42f7ef6138ff620cc350dbb4568611f3bbf36855fd7b9d15ac138a0b772c02fc414552ed885e8209935dcc8c6c4cbb8f77ec820e753fd311f9fa9424665a0f1d61cdaa2ebc649671f41262ab3c4636faab71c1530dc0c19c807db47c2ca5825c47a1a7021177dfdc4a762008c8722d749a9046df0951c4b76fd817cc9e03a4a217900e119b975536b1a40a0bc15946985e7b0e1764c3896d23d9f08f9c2db33c7d4e7add74b84792bac46d4014ab60d17b79936a79b0631ad488343c1636", 0xbe}], 0x6, 0x0, 0x0, 0x20040084}, 0x8011) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002100)={0x6, 0x21, &(0x7f0000001e00)=@raw=[@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000001f40)='GPL\x00', 0x5, 0xa6, &(0x7f0000001f80)=""/166, 0x41100, 0x20, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002040)={0x0, 0x5, 0x1ff, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000002080)=[r1, r3, r1], &(0x7f00000020c0)=[{0x5, 0x5, 0x6, 0xc}, {0x1, 0x4, 0xb, 0x6}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000024c0)={r8, 0x0, 0x51, 0xc3, &(0x7f00000021c0)="cdd3b3ca14f5712f601faa00db7324c2f9d830406c355aee44396e2a31a12bb2dbc84d056a78d001c04d13df71470ae6e3b642e393c8fad9125755987d3b32a42c9be12e4d4894dc5a950cfbf9d01c15ed", &(0x7f0000002240)=""/195, 0x1000, 0x0, 0xcb, 0x7f, &(0x7f0000002340)="dcd3fe95eebd1a3b23a345982791acd36cc2219828240d649f47f014c4ff35c7117bc1c45e9eae913eeb4f19b6eb5d9c19b5d79a5e2bc89c536937ca7e525a548069fa83c091dd29c90d33aacc6485495a01ee56338833a60fe04c07b22943dc82c7dab35cb3990e67d45fb927542375aeb99fbdb41f71b65b36876792a6aed777a74a18386c75431f55ceddeefd6e1ebd959746e53fc945345c0c5c6d516ccbcf8930f228c85076b488988e04c4469fa717165a1f986b3aed0c3ecd63c44d176c81355e902d66f2104066", &(0x7f0000002440)="0688adaf43179f52bb284468609dee00505dc0c2e85a9bfdd49d57363aedbeb72614f7cf9d1dddfefb02d67dd1f3919398e528963b800695422d63828b9f3cfbc6da3b32fc026bb8e44620942d5debd5de6c13b8e566af0fb429c965f2bc61ceee17c01219a2b925a2dd07bc579772d20cd7d6a461f3b9ef1c11bd80eb8476", 0x6, 0x0, 0x7}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002800)={r0, 0xe0, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000002540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000002580)=[0x0, 0x0, 0x0], &(0x7f00000025c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000002600)=[{}], 0x8, 0x10, &(0x7f0000002640), &(0x7f0000002680), 0x8, 0xd9, 0x8, 0x8, &(0x7f00000026c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002840)=@bloom_filter={0x1e, 0x10, 0x9, 0x7, 0x6081, r1, 0x200, '\x00', r9, r1, 0x2, 0x4, 0x2, 0x8}, 0x50) (async) r10 = getpid() (async) socket$kcm(0x29, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x80, 0x0, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x400000}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xe7d2}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x4041895) (async) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) r11 = perf_event_open(&(0x7f0000002a00)={0x1, 0x80, 0x2, 0xf1, 0x1, 0x80, 0x0, 0x7f, 0x80004, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x400}, 0x1002, 0x7, 0x4, 0x1, 0x400000, 0x10000, 0xcb, 0x0, 0x1, 0x0, 0x50}, r6, 0xb, r1, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f0000002a80)='syz1\x00') (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000002b00)={0x2, &(0x7f0000002ac0)=[{0x20fb, 0x3, 0xfd, 0x7}, {0x4, 0x6, 0x1, 0x3}]}) close(r5) (async) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000002b40)={r4}, 0x8) sendmsg$unix(r12, &(0x7f0000002d40)={&(0x7f0000002b80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002c00)="19c2943bdfc29724027c6e9f6cabc94a4b3cd887f879005726a3bf2edb2c62e95bdee75a4a33245b8cb4e8aa857c38289ad9f19470818bbc2b5b5830ffb828a59484ccdf21fc77e2e3abd83d666e7fcae7506e305437a7b7497bc3c502d8eafcee7308a54cab19d6", 0x68}, {&(0x7f0000002c80)="5ac98aea800590f60b37daebb389f31851a38e0e3ff32b1e882f04d034525e8b1da68aa52a3331efa7a232adb27c124750bb630fdb458b29598da4451a033fcb08255b8373c38522d61e32527547b7a69b6021efa40b5bbb5f2e16ad932486f3a7b0703ef6cb423ec67f26c347c6555b453eba2f51", 0x75}], 0x2, 0x0, 0x0, 0x4000000}, 0x0) (async) perf_event_open(&(0x7f0000002d80)={0x3, 0x80, 0xfb, 0x1, 0x7, 0x2, 0x0, 0x8, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x4, 0xfffffffffffffffd}, 0x4, 0x100000001, 0x1, 0x9, 0x80000000, 0x1ff, 0x2, 0x0, 0x9, 0x0, 0x5bd4}, r10, 0x4, 0xffffffffffffffff, 0x8) 1.751019023s ago: executing program 4 (id=1804): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x1200, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32], 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xb7}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x1a}, 0x90) 1.568704525s ago: executing program 1 (id=1805): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x39, &(0x7f00000011c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYRES32], 0x50) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xd8b1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0xe}, 0x5000, 0x0, 0x3, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203ff0200000000000000000a0000010800010001000001"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="0001100003030103000000000000000002000001d8c3448af9e3a3823f6f5d5ff66961b8060829dbaecf8cb959e8f6ffd1b880f441db6fccba34e2c1643867666c8735d2a3112f08e9bc5d0ffca436a80dbd25372b0bc412aa648b64183c7a5cf02c215101aeafe6f16d83182763c5ff69efd358701fe91825"], 0x14}, 0x1, 0x0, 0x0, 0x4c880}, 0x884) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r6, r5, 0x0, r5}, 0x10) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8004d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x4a, 0x5, 0x0, 0x0, 0x0, 0x3, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x100000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffd}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0xa, 0x922000000003, 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c0001"], 0xf8}, 0x1, 0x0, 0x0, 0x4048040}, 0xc000) (async) r8 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r8, 0x0, 0x20040010) 1.56795363s ago: executing program 0 (id=1806): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4093, 0xffd}, {&(0x7f0000000840)=""/4074, 0xfea}, {&(0x7f0000003540)=""/4130, 0x1022}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000140)=""/181, 0xb5}], 0x6}, 0x102) r1 = socket$kcm(0xa, 0x2, 0x88) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0xfffe, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @rand_addr=0x64010101}}}], 0x20}, 0x8000) sendmsg$inet(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="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", 0xfdef}], 0x1}, 0x48800) 1.54487216s ago: executing program 4 (id=1807): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000000000000850000009c00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.528814696s ago: executing program 2 (id=1808): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x81, 0xe, 0x8, 0x7, 0x0, 0x0, 0x881c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46c, 0x5, @perf_bp={0x0, 0x4}, 0x1000, 0xd, 0x0, 0x1, 0x0, 0xfffffffc, 0x4}, 0x0, 0xfffffffffffdffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000038000b63d25a", 0x46}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x40000000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="afc16873c8458b050a07985e912cddf18b89eca549958fbd29ab40c03f7becac513222e2b477defed57c091383f6f22e14f50bddfa182cac7e880566941fcb6836c3dc708fc8ce11a2dea747e6c4027acdbcd0075b3a38ecc0e8b3d26ecc98fcb06c2a5106164cf64771db4d7b14a3b335ba861585623e476bd24a7f6dac094e", @ANYBLOB="38d59559a0fe98b4e20f3983e0198b37d4620035161e0a9a219193d271629aaf71f265f65f79bf3a4f96ca5f184e0a8785c57fcf0ffad34404ab416b8160e001801170dbe86491e5cd5153623d4fd554ed7ffb75555c2da996202fe3160a6932fee8572d0852d635ba488dece0df4006bef81d"], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="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", 0x125}, {&(0x7f0000000140)="78cafb73fc020107", 0x8}], 0x2}, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) sendmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="bf139f9b6ec72b509b2f4b93be0adb155a7556809aed2278c6896c030d02a8776b51014a1a9a6671800d525f443ee57f4fa8c8971dde7501d39ffa246e4555319253050f69472b7039", 0x49}, {&(0x7f00000002c0)="d65ef76cddeebf5eb7232849bfc103", 0xf}], 0x2, &(0x7f0000001580)=ANY=[@ANYRES32=r2], 0x1320}, 0x20004084) r3 = socket$kcm(0x1e, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffffffff8cdaea20, 0x3f4fd11e}, 0x11192c, 0x0, 0x800005, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x11, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003c0007010000000000000000027c00000400fc800c00018006000600800a000056e8302295de860e4aca5e6a038eb67c9fd4a8f35ac4d3d010e268856a91ac689fee96ceec29a02ef5c4e9784912a191f87437328d71dfa636512e3323e48ee3caa057d2e8ee30bc3debacd3191eaba065b6b9b40c2e9cd0b0b10ab09ba968f38c94299b986b533313c3be49"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1c000000000000000000008b08000000429ace68218f9f59", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000140000000000000000000000070000009404000000000000"], 0x38}, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r7}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.440647984s ago: executing program 3 (id=1809): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\xec\xff\xffm\x01v\x8b\xbbik\xe9\x1e\xefS\f'}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, r1, 0x4, 0x0, @val=@netkit}, 0x1c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r3, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xd, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf1, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="11000000000080ff020000004900000000200000", @ANYRES32=r3, @ANYBLOB="0300"/20, @ANYRES32=r4, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) r7 = socket$kcm(0xa, 0x2, 0x3a) recvmsg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40010040) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000a, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1ef8, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) openat$cgroup_ro(r2, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x5, 0x10000000000002, 0xfffffffd, 0x6, 0x0, 0x10000, 0x0, 0xa9e6}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.439528626s ago: executing program 0 (id=1810): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19f5, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x0, 0x0, 0x0, 0x6, 0x400000000000000, 0x8, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x80086601, 0x0) socket$kcm(0x29, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0xc7, 0x0}, 0x20040010) close(0xffffffffffffffff) socket$kcm(0x1e, 0x5, 0x0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_config_ext={0x1, 0x1944}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1d, 0x2, 0x8, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000640)={&(0x7f0000000480), 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x40, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x22}, @NFQA_CFG_CMD={0x8, 0x1, {0x7, 0x0, 0x18}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}]}, 0x40}}, 0x4000800) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) recvmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)}], 0x1}, 0x24000044) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) 1.438858882s ago: executing program 4 (id=1811): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x32, &(0x7f0000000180)=""/50, 0x41000, 0x33, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffe00}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000080)=r4, 0x4) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000000c, 0x42002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x2000, 0xc8, 0x2, 0x0, 0x6, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[], 0xfdef) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r9 = socket$kcm(0x29, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) write$cgroup_type(r10, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000001800000042a0"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r11, 0x0, 0x0}, 0x20) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b00000000000000000000000000800004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00600300"/25], 0x50) r14 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r14, 0x8924, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r11, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4c}, [@generic={0xfd, 0x9, 0x7, 0x8a6, 0x7}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r15, @fallback=0x7, r12, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="05000000fcffffff080000000d00000040400100", @ANYRES32=r13, @ANYBLOB="0200"/20, @ANYRES32=r15, @ANYRES32, @ANYBLOB="054a2ae30e45c17b64b9e7a7e78f841c8c430004000000040000000036be4e66266cb46b523d3a", @ANYRES32=r14, @ANYBLOB], 0x50) sendmsg$inet(r9, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000080)="8bd3f098a7281cb9ceee3c4dc1d713c7754bb8e3c1ed2fa27809b74fa25e48997c22d0073251ef5588325df91fb66d3a4155a65f349ad8b8858859bed7", 0x3d}, {&(0x7f0000000300)="e5f63b4238f9e4392ba9f53314c5c32891e164b82cb0350caf90ace5546ec7f56de033c4e525c013140b467565d412f766d1ed64eab83a3e1497c692829170390b71be296e3db02605cdb70f265546bffcfc2d487161642ca31b03", 0x5b}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000580)="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", 0xfd}, {&(0x7f0000000680)="00a81f5a5c04dbd3257dd79653719cef7fb47566c52fee9a741696e57489333e6c72dc56126cd92eca632a6b75467098eff93964026c5a0cb467c28469976c6c08e9fdc96deec73063cc24d3ed091bc6d972726ff61c7894cd5299d15878a8a9c7695c3637df8a32dc11c80246bc2f5abd44078c89e75adcb5938f2e8427301f606e1b5b6bef077a8e653eb06d6589a8c982ba57278c0663449bd4072580dcbf2fa383b5e31e3f609f88995b329453cae9f0677f5da7e4189a20fb312206f0074033e34a6c88d5b521c23ce6ccfd5ee2b83bbe977646b10c", 0xd8}, {&(0x7f0000000380)="da2f204336267043838e75c1457844119cd4890dcfbf75a2cd5bc2974b8fbaf51877fa9696593b004f98f5252277749484201109b5fe4642962553f80a39022f1cd33d7fe05dbe246829bcb1c4ed6313e0548b12391d38413ca80ab4a28994a076df894b41fbd44a7d86b0cb5809ed6cdc5501563545c0", 0x77}, {&(0x7f0000001940)="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", 0xff}], 0x8, &(0x7f0000001a40)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0xdd, [@local, @local, @broadcast, @empty]}, @timestamp_prespec={0x44, 0xc, 0x80, 0x3, 0x7, [{@broadcast, 0x4}]}, @rr={0x7, 0x17, 0x27, [@loopback, @broadcast, @broadcast, @empty, @remote]}, @timestamp={0x44, 0x10, 0x8e, 0x0, 0x1, [0x10, 0xe, 0x3d1]}, @ra={0x94, 0x4, 0x1}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @broadcast, @local}}}], 0xb0}, 0x0) sendmsg$kcm(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000000), 0x1000000000000146}, 0x96) 1.43756372s ago: executing program 1 (id=1812): socket$kcm(0x2, 0x1, 0x84) (async) r0 = socket$kcm(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1946}, 0x4520, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x1f00, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) (async) socketpair(0x1e, 0x1, 0x0, 0x0) unlink(0x0) perf_event_open(&(0x7f0000000840)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x9, 0x9, 0x1, 0xffffffff, 0x0, 0x0, 0x4b3e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x9}, {0x0}], 0x2}, 0x4000000) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) socketpair(0x2a, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}, 0x2040, 0x1000, 0xe, 0x1, 0x0, 0x800, 0x1002, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x8) 1.319910998s ago: executing program 4 (id=1813): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xf9, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x400, 0x4, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x7, 0x6, 0x0, 0x1}, 0x6b) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0x25) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) r3 = socket$kcm(0x2, 0x922000000001, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f00000002c0)=r4, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xf8e2, '\x00', r8, r4, 0x5, 0x4, 0x5}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440), &(0x7f00000007c0)="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"}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009e00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) 1.269031224s ago: executing program 3 (id=1814): socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000240), 0x1}, 0x100400, 0x4, 0x8, 0x8, 0x3fe, 0xff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x2000, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}, 0x0) (async, rerun: 32) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) (async, rerun: 32) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x100) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02"], 0x10}, 0x1f, 0x7}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20071, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a00016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7b}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x58}}, 0x20000004) (async) r7 = perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x5}, 0x104101, 0x4, 0xfb, 0x9, 0x0, 0x7f, 0x3, 0x0, 0x0, 0x0, 0xa59}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 64) close(0x3) (rerun: 64) 1.000232694s ago: executing program 3 (id=1815): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8917, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9c1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff6}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x3500000000000000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x33fe0) socketpair(0x26, 0x4, 0xfffffffc, &(0x7f0000000540)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2b6e65745f7072696f202b706572665f657665a548f26e7420"], 0x16) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}}, 0x0) 895.901831ms ago: executing program 3 (id=1816): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x4, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x3) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2, 0x0, 0x5, 0x9, 0x2b, 0x0, 0x70bd27, 0x25dfdbfd, [@sadb_sa={0x2, 0x1, 0x4d2, 0xae, 0x0, 0xad, 0x1, 0xe0000000}, @sadb_key={0x5, 0x8, 0xf0, 0x0, "894218821de0f62937189be688fc49ee58a7ac992ffdff6c8d2657eede9a"}, @sadb_x_sec_ctx={0x11, 0x18, 0x6c, 0x8, 0x79, "9cb540be8a482e921fdf7a129403ef5906997f8206660e7871fc2491f718030e9fe52fcec560c42643f930f5559af2e0e2c687e14a140818d756df6ea9e78420784584a786a0519d4a24fb3593423a419365225bbf496a5af7e79b855bee3ac34fc8324da7a20c322953afdbaee28d00bc167aa94fc29eff10"}, @sadb_x_sec_ctx={0x11, 0x18, 0x9, 0x8, 0x7f, "d988be25418df3a5aaaf1db0b25823d2b4cd6fc76a97e1278abc64c2d9ef44784b1e30a218f38d2fd25dda74e3bed7bfc186e0a90ed4e1a726206bfc279e5e1bdcad8783460ce15bf6b9cd2b5dc8d3ff8ea6c626384a1df90c326d9cbf4302d4f0817d38d2b7615c0fd3f21514823f9bf6ce3a7d85ea6e6f5a4266a2267f6e"}]}, 0x158}}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) 557.70192ms ago: executing program 3 (id=1817): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000c06010400000000000000000a00804b9209020073797a32000059facb8f020073797a30000000000900020073797a300000000005000100070000000900020073797a3100000000050001000700000005000100078756186da42bf8e887c3ef"], 0x64}, 0x1, 0x0, 0x0, 0x20040005}, 0x4000000) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8ea3a}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x74, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x60, 0x1, [@m_police={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "13e342b01a4edd1b00000030236f9a442c4a2c0e2c0e6675c0c3f79e416b0a8853ab9b88d3c2bff885"}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8800}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818e10000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040000) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000c06010400000000000000000a00804b9209020073797a32000059facb8f020073797a30000000000900020073797a300000000005000100070000000900020073797a3100000000050001000700000005000100078756186da42bf8e887c3ef"], 0x64}, 0x1, 0x0, 0x0, 0x20040005}, 0x4000000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_LABEL={0x8, 0x5, 0x8ea3a}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x74, 0x32, 0x1, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x11}, [{0x60, 0x1, [@m_police={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "13e342b01a4edd1b00000030236f9a442c4a2c0e2c0e6675c0c3f79e416b0a8853ab9b88d3c2bff885"}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818e10000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48) (async) syz_clone(0x1e48c9600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) 359.892257ms ago: executing program 2 (id=1818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97172b33d4fec877f1b6d76745b686154bbcfe8875afdef00010000000029"], 0x280) 207.550249ms ago: executing program 1 (id=1819): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r1 = perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x15, 0x3, 0xffffff80, 0x4, 0x20d4, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000340)=r0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x3f, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x66, 0x66, 0x4, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x3}, @datasec={0xb, 0x2, 0x0, 0xf, 0x2, [{0x1, 0xffffffff, 0x1ff}, {0x2, 0x8001, 0x1}], "1cf6"}, @float={0xe, 0x0, 0x0, 0x10, 0x4}, @decl_tag={0xd, 0x0, 0x0, 0x11, 0x2, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x1, 0x2}]}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000a00)=""/66, 0x84, 0x42, 0x1, 0x5, 0x10000}, 0x28) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={0x0, 0x4, 0x10}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4000800) r9 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r9, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r0}, 0x20) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r15 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r15, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r15, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) sendmsg$inet(r15, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r14}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x15, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x8, 0x88, &(0x7f0000000580)=""/136, 0x41100, 0x1, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000000ac0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000b00)={0x4, 0x2, 0xf, 0x3f0}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[r6, r7, r11, r12, r13, r14], &(0x7f0000000d40), 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000c0ff00000900000000", @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0xa, &(0x7f0000000240)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3, 0x1000000}, @ringbuf_query, @jmp={0x5, 0x0, 0x2}, @jmp={0x5, 0x1, 0xc, 0x7, 0x3, 0x20, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 205.448434ms ago: executing program 0 (id=1820): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f0000000000000100000000000000000000001400000000000000000000000200000000000000140000000000000000000000020000000000000000000000110000070000000000000000010000000000000000000000110000000000000002000000010000000000000000001300000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a00000000000000"], 0xf}, 0x0) 176.982577ms ago: executing program 4 (id=1821): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, 0xffffffffffffffff, 0x0, 0x11000000}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x100}, 0x12020) sendmsg$IPSET_CMD_DEL(r7, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x78, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x8}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004001}, 0x2001c014) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x11, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x711d, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x9, 0xe, 0x10001}, 0x10, 0xffffffffffffffff, r3, 0x4, &(0x7f0000000700)=[0xffffffffffffffff, r7], &(0x7f0000000740)=[{0x0, 0x4, 0x3, 0x3}, {0x0, 0x3, 0x1, 0xb}, {0x2, 0x5, 0x8, 0x5}, {0x4, 0x5, 0x8}], 0x10, 0x7c60}, 0x94) sendmsg$inet6(r5, &(0x7f0000000780)={&(0x7f0000000240)={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c, 0x0}, 0x840) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) unlink(0x0) close(0xffffffffffffffff) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x2c}}, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x140f, 0x4, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24000091) 604.241µs ago: executing program 0 (id=1822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0xa2028, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x80000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xd, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x8, 0x0, @val=@netfilter={0x7, 0x1, 0x8}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000185e000000050000000000000100"/37], 0x18}, 0x20040000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x7400}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400faff04000000000000001280000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, &(0x7f0000000340)}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x4084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000, 0x4}, 0x2980, 0x2, 0x0, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000600)='mm_page_alloc\x00', r9}, 0x18) syz_clone(0x55001000, 0x0, 0xffcf, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000003060108000000000000000000000007090002ec72797a32000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000004) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000090000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000a06700007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=1823): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="58007ec80206010200004000000000000a000000050004000004eaf10000000000000c0007800800064000000000050005000200000029c940dd804ba64c14000300686173683a69702c70faff742c000000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x80820}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xdec422813438ef76, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@allocspi={0x110, 0x16, 0x401, 0xfffffffd, 0x0, {{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x20, 0xd0, 0x0, 0xffffffffffffffff}, {@in6=@dev={0xfe, 0x80, '\x00', 0x10}, 0x20000000, 0x33}, @in6=@empty, {0x4, 0xfffffffffffffffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8200000000000}, {0x4, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x3}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x8, 0xfffffffd}, [@srcaddr={0x14, 0xd, @in=@private=0xa010102}, @migrate={0x4, 0x1b}]}, 0x110}}, 0x4808) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x0, 0x80}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r5}, 0x18) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x4}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b71d5decf66cc00"/40, 0x28}, {&(0x7f00000004c0)="a32309c4b93981e7600dc22d211d7cea2e0e48cd90a376d29c129c7364bc2c4ad8bb65b11c7aaf8320147cd1d09770ae4563b21fb7f2ad37f057eb1a1ab907d9c50df9ee2b8806eb2f65fac98e3fd30a1fa097a96a635b7036f751e4579f2ba6bdb39892c6da0bddb6fb523e81f7128f67cd4fb1e96b5b84c9bf84f173b7103d0a463f066225fa279ad405a45411d1859769200aa8eeada107f2262de01a63fcb96194cef7fd63ff3b47d3934b09ecb3fcd23ce71f3351d05aaf82db3579578a325bc701a65de38b3e3df5130f0bd7d113400d469959f39bd681e3ab4e5ffea6408d48212e0199be5dfbb6d142bb81", 0xef}], 0x2}, 0x0) kernel console output (not intermixed with test programs): 32': attribute type 29 has an invalid length. [ 81.566821][ T6060] netlink: 'syz.0.32': attribute type 29 has an invalid length. [ 81.855905][ T6067] netlink: 20 bytes leftover after parsing attributes in process `syz.4.36'. [ 81.862706][ T6070] gretap0 speed is unknown, defaulting to 1000 [ 81.892643][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 81.920682][ T6070] gretap0 speed is unknown, defaulting to 1000 [ 81.965689][ T6072] netlink: 'syz.4.36': attribute type 2 has an invalid length. [ 81.988626][ T6072] netlink: 'syz.4.36': attribute type 1 has an invalid length. [ 81.996538][ T6070] gretap0 speed is unknown, defaulting to 1000 [ 82.020269][ T6070] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.078571][ T6070] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 82.288989][ T6080] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.336788][ T6070] gretap0 speed is unknown, defaulting to 1000 [ 82.359904][ T6070] gretap0 speed is unknown, defaulting to 1000 [ 82.377459][ T6070] gretap0 speed is unknown, defaulting to 1000 [ 82.399743][ T6070] gretap0 speed is unknown, defaulting to 1000 [ 82.431571][ T6070] gretap0 speed is unknown, defaulting to 1000 [ 82.616600][ T6084] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.39'. [ 82.781757][ T6088] netlink: 48 bytes leftover after parsing attributes in process `syz.2.41'. [ 82.855927][ T6086] netlink: 'syz.0.40': attribute type 46 has an invalid length. [ 83.558527][ T6121] ======================================================= [ 83.558527][ T6121] WARNING: The mand mount option has been deprecated and [ 83.558527][ T6121] and is ignored by this kernel. Remove the mand [ 83.558527][ T6121] option from the mount to silence this warning. [ 83.558527][ T6121] ======================================================= [ 83.616933][ T6123] netlink: 'syz.0.50': attribute type 13 has an invalid length. [ 83.650522][ T6123] netlink: 'syz.0.50': attribute type 17 has an invalid length. [ 83.668741][ T6121] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 84.068205][ T6134] Illegal XDP return value 4280120755 on prog (id 36) dev N/A, expect packet loss! [ 84.108481][ T6141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.52'. [ 84.206057][ T6123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 84.356191][ T5930] gretap0 speed is unknown, defaulting to 1000 [ 85.724423][ T6178] netlink: 'syz.2.62': attribute type 21 has an invalid length. [ 85.733025][ T6178] netlink: 132 bytes leftover after parsing attributes in process `syz.2.62'. [ 86.579849][ T6205] netlink: 'syz.2.71': attribute type 15 has an invalid length. [ 86.587627][ T6205] netlink: 'syz.2.71': attribute type 5 has an invalid length. [ 86.595187][ T6205] netlink: 144 bytes leftover after parsing attributes in process `syz.2.71'. [ 86.670061][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 86.870359][ T1213] cfg80211: failed to load regulatory.db [ 87.235601][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.79'. [ 87.306959][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.79'. [ 87.346353][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.79'. [ 88.093822][ T6235] delete_channel: no stack [ 88.401318][ T6250] netlink: 'syz.2.83': attribute type 10 has an invalid length. [ 88.425858][ T6250] netlink: 'syz.2.83': attribute type 16 has an invalid length. [ 88.444986][ T6250] netlink: 156 bytes leftover after parsing attributes in process `syz.2.83'. [ 90.177141][ T6269] netlink: 'syz.2.88': attribute type 10 has an invalid length. [ 90.534499][ T6269] macvlan0: entered promiscuous mode [ 90.546610][ T6269] macvlan0: entered allmulticast mode [ 90.583888][ T6269] veth1_vlan: entered allmulticast mode [ 90.609413][ T6269] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 90.655819][ T6279] netlink: 'syz.3.92': attribute type 2 has an invalid length. [ 90.672148][ T6279] netlink: 'syz.3.92': attribute type 2 has an invalid length. [ 90.680326][ T6279] netlink: 51 bytes leftover after parsing attributes in process `syz.3.92'. [ 91.052759][ T6286] netlink: 'syz.0.95': attribute type 10 has an invalid length. [ 91.095446][ T6286] netlink: 55 bytes leftover after parsing attributes in process `syz.0.95'. [ 91.965686][ T6293] delete_channel: no stack [ 92.166988][ T6321] netlink: 'syz.2.99': attribute type 10 has an invalid length. [ 92.175130][ T6321] netlink: 55 bytes leftover after parsing attributes in process `syz.2.99'. [ 92.362767][ T6313] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.100'. [ 92.464084][ T6315] _Z`Ԁ@Y: entered promiscuous mode [ 92.697537][ T6321] veth1_vlan (unregistering): left allmulticast mode [ 92.761541][ T6321] bond0: (slave macvlan0): Releasing backup interface [ 92.828705][ T6328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 92.838190][ T6328] netlink: 108 bytes leftover after parsing attributes in process `syz.1.102'. [ 92.859429][ T6328] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 92.880594][ T6332] netlink: 'syz.4.104': attribute type 29 has an invalid length. [ 92.907478][ T6336] netlink: 'syz.4.104': attribute type 29 has an invalid length. [ 93.524142][ T6363] netlink: 'syz.0.113': attribute type 1 has an invalid length. [ 93.563061][ T6367] : renamed from veth0_vlan (while UP) [ 93.803253][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 94.230354][ T6359] delete_channel: no stack [ 94.251515][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.120'. [ 94.279371][ T6389] delete_channel: no stack [ 94.525497][ T6405] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 94.797671][ T6405] team0 (unregistering): Port device team_slave_0 removed [ 94.832277][ T6425] netlink: 'syz.2.128': attribute type 21 has an invalid length. [ 94.843152][ T6405] team0 (unregistering): Port device team_slave_1 removed [ 94.919461][ T6425] netlink: 132 bytes leftover after parsing attributes in process `syz.2.128'. [ 95.024465][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.072272][ T6428] team0: Port device bond0 added [ 95.393713][ T6443] validate_nla: 1 callbacks suppressed [ 95.393731][ T6443] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 101.824842][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.141'. [ 101.857146][ T6473] netlink: 32 bytes leftover after parsing attributes in process `syz.0.141'. [ 102.038853][ T6476] netlink: 144 bytes leftover after parsing attributes in process `syz.3.142'. [ 104.354881][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.154'. [ 104.750389][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 104.839282][ T6543] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 104.885735][ T6543] netlink: 'syz.0.163': attribute type 2 has an invalid length. [ 104.893861][ T6497] delete_channel: no stack [ 105.214587][ T6555] netlink: 'syz.1.164': attribute type 10 has an invalid length. [ 105.277287][ T6557] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.166'. [ 105.308463][ T6557] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 105.880980][ T6589] netlink: 'syz.3.176': attribute type 2 has an invalid length. [ 105.916217][ T6589] netlink: 'syz.3.176': attribute type 1 has an invalid length. [ 109.211810][ T6604] _Z`Ԁ@Y: entered promiscuous mode [ 109.520097][ T6630] netlink: 228 bytes leftover after parsing attributes in process `syz.2.188'. [ 110.126498][ T6649] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.193'. [ 110.675836][ T6668] netlink: 'syz.0.200': attribute type 29 has an invalid length. [ 110.841804][ T6671] netlink: 132 bytes leftover after parsing attributes in process `syz.3.199'. [ 111.284760][ T6697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.770773][ T6712] netlink: 146932 bytes leftover after parsing attributes in process `syz.4.213'. [ 111.798601][ T6712] openvswitch: netlink: Message has 6 unknown bytes. [ 111.833183][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 111.842885][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'. [ 112.863519][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.871598][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.881585][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.895174][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.943366][ T6724] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 113.120610][ T6710] gretap0 speed is unknown, defaulting to 1000 [ 114.585594][ T6755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.227'. [ 114.755854][ T6761] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.230'. [ 115.304089][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.231'. [ 115.439894][ T6769] netlink: 'syz.3.231': attribute type 39 has an invalid length. [ 115.476136][ T6768] netlink: 'syz.3.231': attribute type 4 has an invalid length. [ 115.529600][ T6769] veth0_macvtap: left promiscuous mode [ 115.850311][ T6776] netlink: 72 bytes leftover after parsing attributes in process `syz.2.234'. [ 115.856120][ T6780] netlink: 'syz.4.237': attribute type 5 has an invalid length. [ 116.273373][ T6779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 117.331873][ T6825] netlink: 132 bytes leftover after parsing attributes in process `syz.2.250'. [ 117.360234][ T6823] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 117.377059][ T6822] netlink: 72 bytes leftover after parsing attributes in process `syz.0.249'. [ 117.385392][ T6823] netlink: 55 bytes leftover after parsing attributes in process `syz.4.248'. [ 117.410373][ T6826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.250'. [ 117.488747][ T6832] netlink: 'syz.3.251': attribute type 16 has an invalid length. [ 117.500395][ T6832] netlink: 152 bytes leftover after parsing attributes in process `syz.3.251'. [ 117.780225][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 117.979250][ T6853] openvswitch: netlink: Message has 1 unknown bytes. [ 118.001607][ T6852] openvswitch: netlink: Message has 1 unknown bytes. [ 118.017318][ T6852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.032677][ T6853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.057656][ T6856] netlink: 'syz.3.260': attribute type 3 has an invalid length. [ 118.062124][ T6850] gretap0 speed is unknown, defaulting to 1000 [ 118.384255][ T6867] netlink: 'syz.3.264': attribute type 21 has an invalid length. [ 119.637528][ T6897] __nla_validate_parse: 5 callbacks suppressed [ 119.637551][ T6897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.268'. [ 119.751904][ T6897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 121.048237][ T6912] gretap0 speed is unknown, defaulting to 1000 [ 122.469950][ T6919] netlink: 72 bytes leftover after parsing attributes in process `syz.2.276'. [ 122.600345][ T6931] netlink: 'syz.2.279': attribute type 2 has an invalid length. [ 122.611340][ T6931] netlink: 132 bytes leftover after parsing attributes in process `syz.2.279'. [ 122.627775][ T6932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.279'. [ 123.051352][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 123.062954][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 123.382402][ T6962] netlink: 72 bytes leftover after parsing attributes in process `syz.2.290'. [ 123.415390][ T6969] netlink: 'syz.1.292': attribute type 10 has an invalid length. [ 123.458640][ T6974] netlink: 'syz.4.294': attribute type 21 has an invalid length. [ 123.490195][ T6969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.292'. [ 123.534055][ T6978] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 123.607844][ T6969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.292'. [ 124.038934][ T6998] syzkaller0: entered promiscuous mode [ 124.055156][ T6998] syzkaller0: entered allmulticast mode [ 124.313752][ T7009] netlink: 'syz.4.301': attribute type 39 has an invalid length. [ 124.500988][ T7016] netlink: 'syz.3.305': attribute type 1 has an invalid length. [ 124.659521][ T7023] __nla_validate_parse: 3 callbacks suppressed [ 124.659574][ T7023] netlink: 72 bytes leftover after parsing attributes in process `syz.4.306'. [ 125.099743][ T7047] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 125.231277][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.317'. [ 125.240805][ T7053] netlink: 'syz.0.317': attribute type 2 has an invalid length. [ 125.382631][ T7057] netlink: 72 bytes leftover after parsing attributes in process `syz.4.319'. [ 125.388470][ T7060] netlink: 268 bytes leftover after parsing attributes in process `syz.1.318'. [ 125.410612][ T7062] netlink: 'syz.0.320': attribute type 10 has an invalid length. [ 125.427693][ T7060] unsupported nla_type 65024 [ 125.435050][ T7062] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.320'. [ 125.619584][ T7071] tmpfs: Unknown parameter '' [ 125.639237][ T7071] netlink: 'syz.2.322': attribute type 22 has an invalid length. [ 125.647443][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 125.826774][ T7076] gretap0 speed is unknown, defaulting to 1000 [ 126.045014][ T7089] gretap0 speed is unknown, defaulting to 1000 [ 126.143958][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 126.189829][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 126.669539][ T7110] netlink: 28 bytes leftover after parsing attributes in process `syz.2.335'. [ 126.689984][ T7108] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 127.035440][ T7132] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 127.105920][ T7132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 129.071823][ T7191] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 129.121838][ T7208] validate_nla: 2 callbacks suppressed [ 129.121857][ T7208] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 129.159638][ T7208] netlink: 'syz.2.360': attribute type 1 has an invalid length. [ 129.667312][ T7223] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 129.742430][ T7195] delete_channel: no stack [ 129.842936][ T7235] netlink: 'syz.2.373': attribute type 10 has an invalid length. [ 129.857375][ T7235] __nla_validate_parse: 2 callbacks suppressed [ 129.857396][ T7235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.373'. [ 130.181599][ T7246] netlink: 'syz.3.378': attribute type 1 has an invalid length. [ 132.892592][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.903012][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.048046][ T7266] openvswitch: netlink: Message has 1 unknown bytes. [ 134.055042][ T7266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.213510][ T7268] openvswitch: netlink: Message has 1 unknown bytes. [ 134.221369][ T7268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.650160][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 134.660175][ T7274] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 134.673909][ T7274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.898300][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 135.060037][ T7283] netlink: 'syz.3.389': attribute type 21 has an invalid length. [ 135.080099][ T7283] netlink: 128 bytes leftover after parsing attributes in process `syz.3.389'. [ 135.342081][ T7291] netlink: 'syz.4.388': attribute type 6 has an invalid length. [ 135.350296][ T7291] netlink: 164 bytes leftover after parsing attributes in process `syz.4.388'. [ 135.649863][ T7303] openvswitch: netlink: Message has 1 unknown bytes. [ 135.657038][ T7303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.404104][ T7300] delete_channel: no stack [ 137.341804][ T7308] delete_channel: no stack [ 137.356792][ T7350] openvswitch: netlink: Message has 1 unknown bytes. [ 137.363637][ T7350] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.812649][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 137.854597][ T7355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 138.198785][ T7363] netlink: 72 bytes leftover after parsing attributes in process `syz.4.411'. [ 138.838732][ T7386] netlink: 'syz.0.416': attribute type 3 has an invalid length. [ 138.883978][ T7386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.416'. [ 139.264082][ T7376] tap0: tun_chr_ioctl cmd 1074025673 [ 139.845066][ T7407] netlink: 104 bytes leftover after parsing attributes in process `syz.4.423'. [ 140.060512][ T7424] netlink: 'syz.4.428': attribute type 6 has an invalid length. [ 140.078982][ T7423] netlink: 14 bytes leftover after parsing attributes in process `syz.2.427'. [ 140.162022][ T7425] netlink: 'syz.2.427': attribute type 2 has an invalid length. [ 140.442079][ T7436] net_ratelimit: 2 callbacks suppressed [ 140.442106][ T7436] openvswitch: netlink: Message has 1 unknown bytes. [ 140.455142][ T7436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.829388][ T7452] gretap0 speed is unknown, defaulting to 1000 [ 141.265656][ T7437] delete_channel: no stack [ 142.081229][ T7479] syzkaller0: entered promiscuous mode [ 143.329667][ T7497] openvswitch: netlink: Message has 1 unknown bytes. [ 143.336815][ T7497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.992753][ T7528] netlink: 'syz.3.452': attribute type 2 has an invalid length. [ 146.034148][ T7528] netlink: 'syz.3.452': attribute type 8 has an invalid length. [ 146.059198][ T7528] netlink: 132 bytes leftover after parsing attributes in process `syz.3.452'. [ 146.685623][ T7522] delete_channel: no stack [ 146.943489][ T7536] netlink: 72 bytes leftover after parsing attributes in process `syz.4.456'. [ 147.119320][ T7542] openvswitch: netlink: Message has 1 unknown bytes. [ 147.131707][ T7542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.171998][ T7546] netlink: 'syz.3.461': attribute type 2 has an invalid length. [ 147.185476][ T7546] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.461'. [ 147.215714][ T7546] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 147.308065][ T7552] netlink: 148 bytes leftover after parsing attributes in process `syz.0.462'. [ 147.873136][ T7577] netlink: 3224 bytes leftover after parsing attributes in process `syz.1.470'. [ 147.875653][ T7576] netlink: 'syz.2.469': attribute type 39 has an invalid length. [ 147.897933][ T7577] netlink: 36 bytes leftover after parsing attributes in process `syz.1.470'. [ 147.916975][ T7577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.470'. [ 147.933859][ T7576] veth0_macvtap: left promiscuous mode [ 148.155151][ T7583] openvswitch: netlink: Message has 1 unknown bytes. [ 148.174623][ T7583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.320423][ T7593] IPv6: NLM_F_CREATE should be specified when creating new route [ 148.330175][ T7593] IPv6: Can't replace route, no match found [ 148.421350][ T30] audit: type=1107 audit(1759956408.367:2): pid=7596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 148.797249][ T7606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.478'. [ 149.700882][ T7627] openvswitch: netlink: Message has 1 unknown bytes. [ 149.708275][ T7627] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.229657][ T7640] netlink: 'syz.0.490': attribute type 10 has an invalid length. [ 150.320265][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 150.719279][ T7647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.491'. [ 151.834801][ T7640] team0 (unregistering): Port device team_slave_0 removed [ 151.852248][ T7640] team0 (unregistering): Port device team_slave_1 removed [ 151.876485][ T7640] team0 (unregistering): Port device bond0 removed [ 152.108538][ T7660] openvswitch: netlink: Message has 1 unknown bytes. [ 152.152659][ T7660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.477305][ T7679] netlink: 'syz.2.502': attribute type 10 has an invalid length. [ 152.560083][ T7679] batman_adv: batadv0: Adding interface: team0 [ 152.590591][ T7679] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.622370][ T7679] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 153.027507][ T7692] syzkaller0: entered promiscuous mode [ 153.039944][ T7692] syzkaller0: entered allmulticast mode [ 154.073126][ T7725] netlink: 'syz.0.514': attribute type 13 has an invalid length. [ 154.462738][ T7730] rdma_rxe: rxe_newlink: failed to add erspan0 [ 154.798935][ T7733] netlink: 48 bytes leftover after parsing attributes in process `syz.4.516'. [ 154.843877][ T7733] netlink: 'syz.4.516': attribute type 1 has an invalid length. [ 154.852071][ T7733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.516'. [ 155.167760][ T7707] C: renamed from team_slave_0 (while UP) [ 155.176232][ T7707] netlink: 'syz.2.508': attribute type 3 has an invalid length. [ 155.183887][ T7707] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 155.199070][ T7713] netlink: 'syz.2.508': attribute type 3 has an invalid length. [ 155.208040][ T7713] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 155.231395][ T7691] syz.3.503 (7691) used greatest stack depth: 15448 bytes left [ 156.328527][ T7735] delete_channel: no stack [ 156.447660][ T7761] netlink: 'syz.4.521': attribute type 39 has an invalid length. [ 156.549684][ T7740] netlink: 100 bytes leftover after parsing attributes in process `syz.3.518'. [ 157.217567][ T7745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 157.902110][ T7779] netlink: 72 bytes leftover after parsing attributes in process `syz.2.525'. [ 158.105891][ T7783] netlink: 'syz.1.528': attribute type 39 has an invalid length. [ 158.380211][ T7800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.533'. [ 158.517626][ T7802] netlink: 72 bytes leftover after parsing attributes in process `syz.3.534'. [ 158.534003][ T7806] netlink: 'syz.1.535': attribute type 29 has an invalid length. [ 158.543851][ T7806] netlink: 'syz.1.535': attribute type 29 has an invalid length. [ 158.648651][ T7776] delete_channel: no stack [ 158.989667][ T7814] netlink: 32 bytes leftover after parsing attributes in process `syz.3.536'. [ 159.518320][ T7841] netlink: 'syz.1.545': attribute type 5 has an invalid length. [ 159.662965][ T7847] netlink: 40 bytes leftover after parsing attributes in process `syz.1.545'. [ 160.420690][ T7856] netlink: 72 bytes leftover after parsing attributes in process `syz.2.546'. [ 160.614402][ T7865] netlink: 'syz.1.550': attribute type 29 has an invalid length. [ 160.705561][ T7869] netlink: 14 bytes leftover after parsing attributes in process `syz.2.551'. [ 160.769524][ T7872] netlink: 14 bytes leftover after parsing attributes in process `syz.2.551'. [ 160.983027][ T7857] delete_channel: no stack [ 161.036939][ T7879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.553'. [ 161.086225][ T7879] netlink: 130900 bytes leftover after parsing attributes in process `syz.1.553'. [ 161.117316][ T7879] netlink: 'syz.1.553': attribute type 28 has an invalid length. [ 161.149756][ T7815] syz.3.536: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 161.193094][ T7815] CPU: 1 UID: 0 PID: 7815 Comm: syz.3.536 Not tainted syzkaller #0 PREEMPT(full) [ 161.193120][ T7815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.193137][ T7815] Call Trace: [ 161.193144][ T7815] [ 161.193154][ T7815] dump_stack_lvl+0x189/0x250 [ 161.193191][ T7815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.193211][ T7815] ? __pfx__printk+0x10/0x10 [ 161.193232][ T7815] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 161.193256][ T7815] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 161.193283][ T7815] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 161.193310][ T7815] warn_alloc+0x214/0x310 [ 161.193343][ T7815] ? __pfx_warn_alloc+0x10/0x10 [ 161.193381][ T7815] ? __get_vm_area_node+0x28f/0x300 [ 161.193405][ T7815] ? hash_ipport4_resize+0x1ec/0x1a50 [ 161.193435][ T7815] __vmalloc_node_range_noprof+0x690/0x12d0 [ 161.193496][ T7815] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 161.193518][ T7815] ? hash_ipport4_resize+0x1ec/0x1a50 [ 161.193546][ T7815] ? rcu_is_watching+0x15/0xb0 [ 161.193565][ T7815] ? hash_ipport4_resize+0x1ec/0x1a50 [ 161.193589][ T7815] __kvmalloc_node_noprof+0x674/0x910 [ 161.193614][ T7815] ? hash_ipport4_resize+0x1ec/0x1a50 [ 161.193651][ T7815] hash_ipport4_resize+0x1ec/0x1a50 [ 161.193686][ T7815] ? __pfx_hash_ipport4_add+0x10/0x10 [ 161.193740][ T7815] call_ad+0x44e/0xb00 [ 161.193772][ T7815] ? __pfx_call_ad+0x10/0x10 [ 161.193812][ T7815] ? __nla_parse+0x40/0x60 [ 161.193838][ T7815] ip_set_ad+0x791/0x930 [ 161.193872][ T7815] ? __pfx_ip_set_ad+0x10/0x10 [ 161.193889][ T7815] ? is_bpf_text_address+0x26/0x2b0 [ 161.193981][ T7815] nfnetlink_rcv_msg+0xb4a/0x1130 [ 161.194004][ T7815] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 161.194047][ T7815] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 161.194064][ T7815] ? kasan_save_track+0x4f/0x80 [ 161.194119][ T7815] ? perf_trace_preemptirq_template+0xa3/0x340 [ 161.194146][ T7815] ? kasan_quarantine_put+0xdd/0x220 [ 161.194191][ T7815] netlink_rcv_skb+0x205/0x470 [ 161.194216][ T7815] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 161.194239][ T7815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.194272][ T7815] ? bpf_lsm_capable+0x9/0x20 [ 161.194291][ T7815] ? security_capable+0x7e/0x2e0 [ 161.194317][ T7815] nfnetlink_rcv+0x282/0x2590 [ 161.194339][ T7815] ? __dev_queue_xmit+0x27b/0x3b50 [ 161.194368][ T7815] ? __dev_queue_xmit+0x1d79/0x3b50 [ 161.194392][ T7815] ? kasan_save_track+0x3e/0x80 [ 161.194411][ T7815] ? __kasan_slab_alloc+0x6c/0x80 [ 161.194445][ T7815] ? __dev_queue_xmit+0x27b/0x3b50 [ 161.194485][ T7815] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 161.194503][ T7815] ? __pfx___dev_queue_xmit+0x10/0x10 [ 161.194547][ T7815] ? ref_tracker_free+0x63a/0x7d0 [ 161.194566][ T7815] ? __asan_memcpy+0x40/0x70 [ 161.194586][ T7815] ? __pfx_ref_tracker_free+0x10/0x10 [ 161.194599][ T7815] ? __skb_clone+0x63/0x7a0 [ 161.194627][ T7815] ? __skb_clone+0x483/0x7a0 [ 161.194659][ T7815] ? skb_clone+0x246/0x3a0 [ 161.194688][ T7815] ? __netlink_deliver_tap+0x807/0x850 [ 161.194710][ T7815] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.194740][ T7815] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.194772][ T7815] netlink_unicast+0x82c/0x9e0 [ 161.194805][ T7815] ? __pfx_netlink_unicast+0x10/0x10 [ 161.194828][ T7815] ? netlink_sendmsg+0x642/0xb30 [ 161.194848][ T7815] ? skb_put+0x11b/0x210 [ 161.194874][ T7815] netlink_sendmsg+0x805/0xb30 [ 161.194907][ T7815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.194942][ T7815] ? aa_sock_msg_perm+0xf1/0x1d0 [ 161.194966][ T7815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.194989][ T7815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.195012][ T7815] __sock_sendmsg+0x219/0x270 [ 161.195036][ T7815] ____sys_sendmsg+0x505/0x830 [ 161.195068][ T7815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.195105][ T7815] ? import_iovec+0x74/0xa0 [ 161.195133][ T7815] ___sys_sendmsg+0x21f/0x2a0 [ 161.195161][ T7815] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.195235][ T7815] ? __fget_files+0x2a/0x420 [ 161.195254][ T7815] ? __fget_files+0x3a0/0x420 [ 161.195287][ T7815] __x64_sys_sendmsg+0x19b/0x260 [ 161.195312][ T7815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.195331][ T7815] ? perf_trace_preemptirq_template+0xa3/0x340 [ 161.195372][ T7815] ? do_syscall_64+0xbe/0xfa0 [ 161.195398][ T7815] do_syscall_64+0xfa/0xfa0 [ 161.195419][ T7815] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.195440][ T7815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.195457][ T7815] ? clear_bhb_loop+0x60/0xb0 [ 161.195479][ T7815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.195496][ T7815] RIP: 0033:0x7fe16398eec9 [ 161.195522][ T7815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.195537][ T7815] RSP: 002b:00007fe164791038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.195556][ T7815] RAX: ffffffffffffffda RBX: 00007fe163be6180 RCX: 00007fe16398eec9 [ 161.195569][ T7815] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 000000000000000b [ 161.195581][ T7815] RBP: 00007fe163a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 161.195591][ T7815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.195600][ T7815] R13: 00007fe163be6218 R14: 00007fe163be6180 R15: 00007ffcc090d918 [ 161.195632][ T7815] [ 161.723165][ T7815] Mem-Info: [ 161.727042][ T7815] active_anon:10075 inactive_anon:0 isolated_anon:0 [ 161.727042][ T7815] active_file:14340 inactive_file:39909 isolated_file:0 [ 161.727042][ T7815] unevictable:768 dirty:252 writeback:0 [ 161.727042][ T7815] slab_reclaimable:10376 slab_unreclaimable:110210 [ 161.727042][ T7815] mapped:33208 shmem:5646 pagetables:1151 [ 161.727042][ T7815] sec_pagetables:0 bounce:0 [ 161.727042][ T7815] kernel_misc_reclaimable:0 [ 161.727042][ T7815] free:1303181 free_pcp:13146 free_cma:0 [ 161.780940][ T7815] Node 0 active_anon:40500kB inactive_anon:0kB active_file:57360kB inactive_file:159436kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132932kB dirty:1004kB writeback:0kB shmem:21248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11980kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.817777][ T7815] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 161.875459][ T7815] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 161.909297][ T7891] netlink: 72 bytes leftover after parsing attributes in process `syz.0.555'. [ 161.935506][ T7892] netlink: 72 bytes leftover after parsing attributes in process `syz.0.555'. [ 162.053350][ T7895] netlink: 'syz.1.557': attribute type 10 has an invalid length. [ 162.083147][ T7895] netlink: 152 bytes leftover after parsing attributes in process `syz.1.557'. [ 162.093656][ T7815] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 162.110610][ T7815] Node 0 DMA32 free:1290800kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60456kB inactive_anon:0kB active_file:57360kB inactive_file:159444kB unevictable:1536kB writepending:1004kB zspages:0kB present:3129332kB managed:2561888kB mlocked:0kB bounce:0kB free_pcp:34100kB local_pcp:15044kB free_cma:0kB [ 162.236473][ T7897] netlink: 'syz.2.558': attribute type 39 has an invalid length. [ 162.285415][ T7815] lowmem_reserve[]: 0 0 1 1 1 [ 162.292545][ T7907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.560'. [ 162.327967][ T7815] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 162.400352][ T7815] lowmem_reserve[]: 0 0 0 0 0 [ 162.405612][ T7815] Node 1 Normal free:3886656kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19168kB local_pcp:10176kB free_cma:0kB [ 162.468431][ T7815] lowmem_reserve[]: 0 0 0 0 0 [ 162.476699][ T7815] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 162.490069][ T7815] Node 0 DMA32: 212*4kB (UM) 226*8kB (U) 214*16kB (UME) 511*32kB (UME) 89*64kB (U) 11*128kB (UM) 0*256kB 7*512kB (UME) 6*1024kB (UM) 4*2048kB (UM) 299*4096kB (M) = 1272160kB [ 162.512035][ T7815] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 162.528515][ T7815] Node 1 Normal: 190*4kB (UE) 51*8kB (UME) 47*16kB (UME) 66*32kB (UME) 20*64kB (UME) 7*128kB (UM) 6*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 946*4096kB (ME) = 3886656kB [ 162.578005][ T7815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.589792][ T7911] netlink: 72 bytes leftover after parsing attributes in process `syz.0.561'. [ 162.622538][ T7815] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.622585][ T7815] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 162.622605][ T7815] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 162.622624][ T7815] 69660 total pagecache pages [ 162.622650][ T7815] 0 pages in swap cache [ 162.622661][ T7815] Free swap = 124996kB [ 162.622673][ T7815] Total swap = 124996kB [ 162.622693][ T7815] 2097051 pages RAM [ 162.622704][ T7815] 0 pages HighMem/MovableOnly [ 162.622715][ T7815] 424489 pages reserved [ 162.622726][ T7815] 0 pages cma reserved [ 163.288201][ T7927] debugfs: '!' already exists in 'ieee80211' [ 163.798904][ T7943] netlink: 'syz.1.571': attribute type 4 has an invalid length. [ 163.812287][ T7943] netlink: 'syz.1.571': attribute type 17 has an invalid length. [ 164.003033][ T7920] delete_channel: no stack [ 164.563721][ T7962] netlink: 'syz.0.577': attribute type 27 has an invalid length. [ 164.613983][ T7962] netlink: 'syz.0.577': attribute type 4 has an invalid length. [ 164.674706][ T7967] tap0: tun_chr_ioctl cmd 1074025684 [ 164.732013][ T7967] netlink: 'syz.4.580': attribute type 2 has an invalid length. [ 164.753882][ T7967] netlink: 'syz.4.580': attribute type 7 has an invalid length. [ 164.792239][ T7967] netlink: 'syz.4.580': attribute type 2 has an invalid length. [ 164.855958][ T7976] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 164.923724][ T7967] netlink: 'syz.4.580': attribute type 7 has an invalid length. [ 166.301362][ T8017] __nla_validate_parse: 5 callbacks suppressed [ 166.301375][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.584'. [ 166.639943][ T8030] netlink: 72 bytes leftover after parsing attributes in process `syz.3.589'. [ 166.828515][ T8040] netlink: 60 bytes leftover after parsing attributes in process `syz.2.592'. [ 167.307136][ T8022] delete_channel: no stack [ 167.763531][ T8062] netlink: 'syz.4.599': attribute type 3 has an invalid length. [ 167.871866][ T8062] netlink: 'syz.4.599': attribute type 1 has an invalid length. [ 167.880637][ T8062] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.599'. [ 168.518276][ T8067] netlink: 152 bytes leftover after parsing attributes in process `syz.0.602'. [ 169.030557][ T8082] netlink: 72 bytes leftover after parsing attributes in process `syz.1.604'. [ 169.290242][ T8095] validate_nla: 1 callbacks suppressed [ 169.290271][ T8095] netlink: 'syz.3.609': attribute type 21 has an invalid length. [ 169.319889][ T8098] bridge_slave_1: left allmulticast mode [ 169.326348][ T8098] bridge_slave_1: left promiscuous mode [ 169.333740][ T8098] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.801807][ T8098] bridge_slave_0: left allmulticast mode [ 169.813409][ T8098] bridge_slave_0: left promiscuous mode [ 169.820313][ T8098] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.249056][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.620'. [ 170.315607][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 170.328469][ T8131] Can't find ip_set type hash:i [ 170.342242][ T8136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.402290][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 170.469992][ T8135] netlink: 52 bytes leftover after parsing attributes in process `syz.4.617'. [ 170.556024][ T8124] infiniband syj1: RDMA CMA: cma_listen_on_dev, error -98 [ 170.657856][ T8142] syzkaller0: entered promiscuous mode [ 170.663567][ T8142] syzkaller0: entered allmulticast mode [ 170.693157][ T8113] delete_channel: no stack [ 170.834593][ T8146] bridge_slave_1: left allmulticast mode [ 170.841299][ T8146] bridge_slave_1: left promiscuous mode [ 170.849571][ T8146] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.883535][ T8146] bridge_slave_0: left allmulticast mode [ 170.893495][ T8146] bridge_slave_0: left promiscuous mode [ 170.901100][ T8146] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.033917][ T8151] wg2: entered promiscuous mode [ 171.043441][ T8151] wg2: entered allmulticast mode [ 171.369491][ T8164] netlink: 'syz.4.629': attribute type 21 has an invalid length. [ 171.377813][ T8164] netlink: 128 bytes leftover after parsing attributes in process `syz.4.629'. [ 171.789316][ T8164] netlink: 'syz.4.629': attribute type 4 has an invalid length. [ 171.860221][ T8174] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.630'. [ 172.262511][ T8197] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 172.286750][ T8197] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 172.311297][ T5845] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 172.509221][ T8202] raw_sendmsg: syz.2.639 forgot to set AF_INET. Fix it! [ 173.338402][ T8198] delete_channel: no stack [ 173.386652][ T8205] netlink: 72 bytes leftover after parsing attributes in process `syz.1.640'. [ 173.504297][ T8212] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.643'. [ 173.580298][ T8212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.588814][ T8212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.612999][ T8212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.630456][ T8212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.010323][ T8215] debugfs: '!' already exists in 'ieee80211' [ 174.352379][ T8245] netlink: 14 bytes leftover after parsing attributes in process `syz.0.652'. [ 174.394466][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.654'. [ 174.432047][ T8248] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.654'. [ 174.608070][ T8258] netlink: 'syz.3.657': attribute type 1 has an invalid length. [ 174.631674][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.657'. [ 174.648563][ T8260] netlink: 72 bytes leftover after parsing attributes in process `syz.0.656'. [ 174.662119][ T8258] netlink: 'syz.3.657': attribute type 27 has an invalid length. [ 174.672776][ T8258] netlink: 164 bytes leftover after parsing attributes in process `syz.3.657'. [ 175.044543][ T8278] netlink: 'syz.0.664': attribute type 7 has an invalid length. [ 175.069148][ T8276] net veth1_virt_wifi : renamed from virt_wifi0 [ 175.234471][ T8291] netlink: 'syz.1.666': attribute type 2 has an invalid length. [ 175.310437][ T8294] netlink: 'syz.1.666': attribute type 2 has an invalid length. [ 175.668313][ T8306] delete_channel: no stack [ 176.247982][ T8340] tmpfs: Unknown parameter 'X! 0xffffffffffffffff' [ 176.260209][ T8342] netlink: 'syz.1.683': attribute type 1 has an invalid length. [ 176.835097][ T8356] __nla_validate_parse: 5 callbacks suppressed [ 176.835117][ T8356] netlink: 72 bytes leftover after parsing attributes in process `syz.4.686'. [ 177.111961][ T8372] netlink: 10 bytes leftover after parsing attributes in process `syz.1.691'. [ 177.240735][ T8383] xt_HMARK: spi-set and port-set can't be combined [ 177.543287][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.699'. [ 177.748037][ T8363] delete_channel: no stack [ 177.767304][ T8407] netlink: 'syz.4.699': attribute type 13 has an invalid length. [ 177.776858][ T8407] netlink: 'syz.4.699': attribute type 17 has an invalid length. [ 177.918511][ T8417] netlink: 72 bytes leftover after parsing attributes in process `syz.3.704'. [ 178.382754][ T8426] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 178.389640][ T8426] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 178.428435][ T8426] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 178.665028][ T8440] netlink: 60 bytes leftover after parsing attributes in process `syz.1.710'. [ 178.794479][ T8453] netlink: 56 bytes leftover after parsing attributes in process `syz.1.714'. [ 178.822025][ T8445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.711'. [ 178.843689][ T8454] netlink: 'syz.3.713': attribute type 13 has an invalid length. [ 178.873922][ T8454] netlink: 'syz.3.713': attribute type 17 has an invalid length. [ 179.232344][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 179.339201][ T8454] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.509519][ T8487] netlink: 72 bytes leftover after parsing attributes in process `syz.0.720'. [ 179.661052][ T8491] netlink: 830 bytes leftover after parsing attributes in process `syz.0.723'. [ 180.225381][ T8518] openvswitch: netlink: Flow actions attr not present in new flow. [ 180.233967][ T8518] netlink: 'syz.2.731': attribute type 16 has an invalid length. [ 180.399196][ T8520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.436043][ T8524] sctp: [Deprecated]: syz.2.736 (pid 8524) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.436043][ T8524] Use struct sctp_sack_info instead [ 181.909690][ T8596] __nla_validate_parse: 15 callbacks suppressed [ 181.909708][ T8596] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 182.071720][ T8599] netlink: 'syz.4.757': attribute type 3 has an invalid length. [ 182.098131][ T8599] netlink: 'syz.4.757': attribute type 4 has an invalid length. [ 182.126948][ T8599] netlink: 168 bytes leftover after parsing attributes in process `syz.4.757'. [ 182.275708][ T8600] netlink: 'syz.4.757': attribute type 5 has an invalid length. [ 182.639559][ T8623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.764'. [ 182.661282][ T8623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.792377][ T8613] gretap0 speed is unknown, defaulting to 1000 [ 182.994409][ T8634] netlink: 72 bytes leftover after parsing attributes in process `syz.2.767'. [ 183.544657][ T8641] netlink: 'syz.3.769': attribute type 10 has an invalid length. [ 183.613398][ T8641] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 183.639908][ T8641] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 183.653924][ T8641] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 183.974499][ T8654] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 184.118439][ T8665] netlink: 'syz.4.777': attribute type 2 has an invalid length. [ 184.130266][ T8665] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.777'. [ 184.136109][ T8668] netlink: 'syz.3.778': attribute type 1 has an invalid length. [ 184.179729][ T8668] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 184.389988][ T8670] netlink: 72 bytes leftover after parsing attributes in process `syz.4.780'. [ 185.724907][ T8710] FAULT_INJECTION: forcing a failure. [ 185.724907][ T8710] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 185.759606][ T8710] CPU: 0 UID: 0 PID: 8710 Comm: syz.0.788 Not tainted syzkaller #0 PREEMPT(full) [ 185.759630][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 185.759639][ T8710] Call Trace: [ 185.759646][ T8710] [ 185.759653][ T8710] dump_stack_lvl+0x189/0x250 [ 185.759676][ T8710] ? __pfx____ratelimit+0x10/0x10 [ 185.759697][ T8710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.759714][ T8710] ? __pfx__printk+0x10/0x10 [ 185.759730][ T8710] ? __might_fault+0xb0/0x130 [ 185.759758][ T8710] should_fail_ex+0x414/0x560 [ 185.759786][ T8710] _copy_from_user+0x2d/0xb0 [ 185.759807][ T8710] __sys_bpf+0x1e3/0x860 [ 185.759832][ T8710] ? __pfx___sys_bpf+0x10/0x10 [ 185.759883][ T8710] __x64_sys_bpf+0x7c/0x90 [ 185.759905][ T8710] do_syscall_64+0xfa/0xfa0 [ 185.759927][ T8710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.759942][ T8710] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 185.759958][ T8710] ? clear_bhb_loop+0x60/0xb0 [ 185.759978][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.759994][ T8710] RIP: 0033:0x7f9f03f8eec9 [ 185.760010][ T8710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.760023][ T8710] RSP: 002b:00007f9f04ed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.760042][ T8710] RAX: ffffffffffffffda RBX: 00007f9f041e5fa0 RCX: 00007f9f03f8eec9 [ 185.760053][ T8710] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 185.760064][ T8710] RBP: 00007f9f04ed4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.760073][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.760083][ T8710] R13: 00007f9f041e6038 R14: 00007f9f041e5fa0 R15: 00007ffc77cd71f8 [ 185.760112][ T8710] [ 186.167256][ T8714] netlink: 72 bytes leftover after parsing attributes in process `syz.3.791'. [ 186.418633][ T8728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.796'. [ 186.546968][ T8732] debugfs: '!' already exists in 'ieee80211' [ 186.652971][ T8729] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.794'. [ 186.903498][ T8740] netlink: 182 bytes leftover after parsing attributes in process `syz.3.799'. [ 187.398303][ T8751] FAULT_INJECTION: forcing a failure. [ 187.398303][ T8751] name failslab, interval 1, probability 0, space 0, times 1 [ 187.425458][ T8751] CPU: 0 UID: 0 PID: 8751 Comm: syz.4.804 Not tainted syzkaller #0 PREEMPT(full) [ 187.425483][ T8751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 187.425493][ T8751] Call Trace: [ 187.425499][ T8751] [ 187.425507][ T8751] dump_stack_lvl+0x189/0x250 [ 187.425530][ T8751] ? __pfx____ratelimit+0x10/0x10 [ 187.425551][ T8751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.425569][ T8751] ? __pfx__printk+0x10/0x10 [ 187.425587][ T8751] ? __pfx___might_resched+0x10/0x10 [ 187.425603][ T8751] ? fs_reclaim_acquire+0x7d/0x100 [ 187.425629][ T8751] should_fail_ex+0x414/0x560 [ 187.425657][ T8751] should_failslab+0xa8/0x100 [ 187.425682][ T8751] __kmalloc_noprof+0xcb/0x7f0 [ 187.425700][ T8751] ? perf_trace_run_bpf_submit+0xee/0x170 [ 187.425720][ T8751] ? bpf_test_init+0x9f/0x150 [ 187.425745][ T8751] bpf_test_init+0x9f/0x150 [ 187.425769][ T8751] bpf_prog_test_run_xdp+0x49e/0x10e0 [ 187.425801][ T8751] ? irqentry_exit+0x74/0x90 [ 187.425825][ T8751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 187.425859][ T8751] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 187.425880][ T8751] bpf_prog_test_run+0x2c7/0x340 [ 187.425908][ T8751] __sys_bpf+0x562/0x860 [ 187.425931][ T8751] ? __pfx___sys_bpf+0x10/0x10 [ 187.425967][ T8751] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 187.425990][ T8751] ? irqentry_exit_to_user_mode+0xce/0x110 [ 187.426012][ T8751] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 187.426041][ T8751] __x64_sys_bpf+0x7c/0x90 [ 187.426062][ T8751] do_syscall_64+0xfa/0xfa0 [ 187.426086][ T8751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.426102][ T8751] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 187.426118][ T8751] ? clear_bhb_loop+0x60/0xb0 [ 187.426136][ T8751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.426152][ T8751] RIP: 0033:0x7f583cd8eec9 [ 187.426169][ T8751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.426181][ T8751] RSP: 002b:00007f583dc5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.426200][ T8751] RAX: ffffffffffffffda RBX: 00007f583cfe5fa0 RCX: 00007f583cd8eec9 [ 187.426212][ T8751] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 187.426222][ T8751] RBP: 00007f583dc5b090 R08: 0000000000000000 R09: 0000000000000000 [ 187.426232][ T8751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.426241][ T8751] R13: 00007f583cfe6038 R14: 00007f583cfe5fa0 R15: 00007ffca59725d8 [ 187.426292][ T8751] [ 187.702282][ T8750] gretap0 speed is unknown, defaulting to 1000 [ 188.120272][ T8767] netlink: 72 bytes leftover after parsing attributes in process `syz.4.806'. [ 188.363616][ T30] audit: type=1107 audit(1759956448.317:3): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 188.386746][ T8778] netlink: 'syz.2.809': attribute type 2 has an invalid length. [ 188.564126][ T8782] netlink: 'syz.4.812': attribute type 2 has an invalid length. [ 188.573218][ T8782] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.812'. [ 188.832752][ T8800] netlink: 180 bytes leftover after parsing attributes in process `syz.2.818'. [ 188.941917][ T8805] IPv6: Can't replace route, no match found [ 189.356511][ T8819] netlink: 332 bytes leftover after parsing attributes in process `syz.4.825'. [ 189.541405][ T8833] netlink: 72 bytes leftover after parsing attributes in process `syz.0.827'. [ 189.553926][ T8833] Q6\bY4: renamed from lo [ 189.600938][ T8838] netlink: 32 bytes leftover after parsing attributes in process `syz.3.829'. [ 190.724133][ T8876] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 190.865952][ T8883] netlink: 68 bytes leftover after parsing attributes in process `syz.4.844'. [ 193.345401][ T8920] FAULT_INJECTION: forcing a failure. [ 193.345401][ T8920] name failslab, interval 1, probability 0, space 0, times 0 [ 193.361445][ T8920] CPU: 1 UID: 0 PID: 8920 Comm: syz.1.855 Not tainted syzkaller #0 PREEMPT(full) [ 193.361470][ T8920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.361480][ T8920] Call Trace: [ 193.361487][ T8920] [ 193.361495][ T8920] dump_stack_lvl+0x189/0x250 [ 193.361519][ T8920] ? __pfx____ratelimit+0x10/0x10 [ 193.361542][ T8920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.361560][ T8920] ? __pfx__printk+0x10/0x10 [ 193.361585][ T8920] ? __pfx___might_resched+0x10/0x10 [ 193.361600][ T8920] ? fs_reclaim_acquire+0x7d/0x100 [ 193.361629][ T8920] should_fail_ex+0x414/0x560 [ 193.361668][ T8920] should_failslab+0xa8/0x100 [ 193.361694][ T8920] __kvmalloc_node_noprof+0x158/0x910 [ 193.361717][ T8920] ? bpf_test_run_xdp_live+0x193/0x1b20 [ 193.361748][ T8920] bpf_test_run_xdp_live+0x193/0x1b20 [ 193.361769][ T8920] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 193.361797][ T8920] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 193.361830][ T8920] ? synchronize_rcu+0x11a/0x310 [ 193.361848][ T8920] ? __pfx_synchronize_rcu+0x10/0x10 [ 193.361872][ T8920] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 193.361892][ T8920] ? synchronize_rcu+0x10/0x310 [ 193.361932][ T8920] ? 0xffffffffa0201a10 [ 193.361983][ T8920] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 193.362024][ T8920] ? xdp_convert_md_to_buff+0x5b/0x330 [ 193.362048][ T8920] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 193.362088][ T8920] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 193.362115][ T8920] ? __fget_files+0x2a/0x420 [ 193.362144][ T8920] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 193.362166][ T8920] bpf_prog_test_run+0x2c7/0x340 [ 193.362195][ T8920] __sys_bpf+0x562/0x860 [ 193.362220][ T8920] ? __pfx___sys_bpf+0x10/0x10 [ 193.362262][ T8920] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 193.362286][ T8920] ? irqentry_exit_to_user_mode+0xce/0x110 [ 193.362311][ T8920] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 193.362343][ T8920] __x64_sys_bpf+0x7c/0x90 [ 193.362365][ T8920] do_syscall_64+0xfa/0xfa0 [ 193.362388][ T8920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.362405][ T8920] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 193.362421][ T8920] ? clear_bhb_loop+0x60/0xb0 [ 193.362443][ T8920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.362459][ T8920] RIP: 0033:0x7fdda3b8eec9 [ 193.362474][ T8920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.362487][ T8920] RSP: 002b:00007fdda4a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 193.362506][ T8920] RAX: ffffffffffffffda RBX: 00007fdda3de5fa0 RCX: 00007fdda3b8eec9 [ 193.362518][ T8920] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 193.362528][ T8920] RBP: 00007fdda4a8a090 R08: 0000000000000000 R09: 0000000000000000 [ 193.362538][ T8920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.362547][ T8920] R13: 00007fdda3de6038 R14: 00007fdda3de5fa0 R15: 00007ffd87dcb5c8 [ 193.362582][ T8920] [ 193.773308][ T8929] netlink: 56 bytes leftover after parsing attributes in process `syz.1.858'. [ 193.797317][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.858'. [ 193.899028][ T8937] netlink: 16 bytes leftover after parsing attributes in process `syz.0.859'. [ 194.345408][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.357970][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.529170][ T5847] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 194.538082][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 194.548675][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: kworker/u9:7 Not tainted syzkaller #0 PREEMPT(full) [ 194.548701][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 194.548713][ T5847] Workqueue: hci3 hci_rx_work [ 194.548738][ T5847] Call Trace: [ 194.548747][ T5847] [ 194.548756][ T5847] dump_stack_lvl+0x189/0x250 [ 194.548784][ T5847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.548804][ T5847] ? __pfx__printk+0x10/0x10 [ 194.548832][ T5847] ? kernfs_path_from_node+0x250/0x290 [ 194.548850][ T5847] ? kernfs_path_from_node+0x2f/0x290 [ 194.548874][ T5847] sysfs_create_dir_ns+0x259/0x280 [ 194.548898][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 194.548921][ T5847] ? do_raw_spin_unlock+0x122/0x240 [ 194.548949][ T5847] kobject_add_internal+0x59f/0xb40 [ 194.548979][ T5847] kobject_add+0x155/0x220 [ 194.549012][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 194.549039][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 194.549066][ T5847] ? get_device_parent+0x366/0x3a0 [ 194.549092][ T5847] device_add+0x408/0xb50 [ 194.549118][ T5847] hci_conn_add_sysfs+0xd5/0x1e0 [ 194.549144][ T5847] le_conn_complete_evt+0xf39/0x1500 [ 194.549188][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 194.549214][ T5847] ? __pfx_bt_warn+0x10/0x10 [ 194.549235][ T5847] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 194.549270][ T5847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 194.549292][ T5847] ? skb_pull_data+0xfb/0x200 [ 194.549315][ T5847] hci_le_conn_complete_evt+0x187/0x450 [ 194.549351][ T5847] hci_event_packet+0x78f/0x1200 [ 194.549379][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 194.549408][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 194.549433][ T5847] ? kcov_remote_start+0x4d3/0x7f0 [ 194.549457][ T5847] ? lockdep_hardirqs_on+0x70/0x150 [ 194.549492][ T5847] ? hci_send_to_monitor+0xe2/0x570 [ 194.549515][ T5847] hci_rx_work+0x46a/0xe80 [ 194.549549][ T5847] ? process_scheduled_works+0x9ef/0x17b0 [ 194.549581][ T5847] process_scheduled_works+0xade/0x17b0 [ 194.549647][ T5847] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.549696][ T5847] worker_thread+0x8a0/0xda0 [ 194.549749][ T5847] kthread+0x70e/0x8a0 [ 194.549775][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 194.549792][ T5847] ? __pfx_kthread+0x10/0x10 [ 194.549816][ T5847] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.549837][ T5847] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.549858][ T5847] ? __pfx_kthread+0x10/0x10 [ 194.549880][ T5847] ret_from_fork+0x4bc/0x870 [ 194.549910][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 194.549946][ T5847] ? __switch_to_asm+0x39/0x70 [ 194.549965][ T5847] ? __switch_to_asm+0x33/0x70 [ 194.549982][ T5847] ? __pfx_kthread+0x10/0x10 [ 194.550005][ T5847] ret_from_fork_asm+0x1a/0x30 [ 194.550049][ T5847] [ 194.550081][ T5847] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 194.829934][ T5847] Bluetooth: hci3: failed to register connection device [ 194.930457][ T8971] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.867'. [ 194.973993][ T8971] netlink: 36 bytes leftover after parsing attributes in process `syz.3.867'. [ 194.994342][ T8974] netlink: 'syz.0.868': attribute type 21 has an invalid length. [ 195.004405][ T8974] netlink: 128 bytes leftover after parsing attributes in process `syz.0.868'. [ 195.221575][ T8974] netlink: 'syz.0.868': attribute type 4 has an invalid length. [ 195.232350][ T8974] netlink: 'syz.0.868': attribute type 3 has an invalid length. [ 195.243473][ T8974] netlink: 3 bytes leftover after parsing attributes in process `syz.0.868'. [ 195.254177][ T8975] netlink: 'syz.3.867': attribute type 1 has an invalid length. [ 195.550746][ T8997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.875'. [ 196.382478][ T9018] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.880'. [ 196.420424][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 196.420483][ T5148] Bluetooth: hci0: command 0x0406 tx timeout [ 196.431704][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 196.432903][ T5849] Bluetooth: hci4: command 0x0406 tx timeout [ 196.439308][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 196.453556][ T9019] netlink: 'syz.2.880': attribute type 10 has an invalid length. [ 197.174702][ T9033] netlink: 'syz.4.883': attribute type 2 has an invalid length. [ 197.223734][ T9033] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.883'. [ 197.277253][ T9036] netlink: 'syz.4.883': attribute type 8 has an invalid length. [ 197.285108][ T9036] netlink: 'syz.4.883': attribute type 3 has an invalid length. [ 198.346802][ T9054] netlink: 'syz.2.888': attribute type 40 has an invalid length. [ 198.355011][ T9060] netlink: 'syz.3.891': attribute type 1 has an invalid length. [ 198.370940][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.561107][ T9068] FAULT_INJECTION: forcing a failure. [ 198.561107][ T9068] name failslab, interval 1, probability 0, space 0, times 0 [ 198.587542][ T9068] CPU: 1 UID: 0 PID: 9068 Comm: syz.4.894 Not tainted syzkaller #0 PREEMPT(full) [ 198.587568][ T9068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.587578][ T9068] Call Trace: [ 198.587584][ T9068] [ 198.587592][ T9068] dump_stack_lvl+0x189/0x250 [ 198.587615][ T9068] ? __pfx____ratelimit+0x10/0x10 [ 198.587637][ T9068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.587654][ T9068] ? __pfx__printk+0x10/0x10 [ 198.587673][ T9068] ? __pfx___might_resched+0x10/0x10 [ 198.587690][ T9068] ? fs_reclaim_acquire+0x7d/0x100 [ 198.587715][ T9068] should_fail_ex+0x414/0x560 [ 198.587745][ T9068] should_failslab+0xa8/0x100 [ 198.587775][ T9068] __kvmalloc_node_noprof+0x158/0x910 [ 198.587794][ T9068] ? __kmalloc_cache_node_noprof+0x471/0x6f0 [ 198.587811][ T9068] ? page_pool_create_percpu+0x314/0xbc0 [ 198.587826][ T9068] ? page_pool_create_percpu+0xb2/0xbc0 [ 198.587844][ T9068] page_pool_create_percpu+0x314/0xbc0 [ 198.587859][ T9068] ? bpf_test_run_xdp_live+0x1bf/0x1b20 [ 198.587888][ T9068] bpf_test_run_xdp_live+0x1d4/0x1b20 [ 198.587909][ T9068] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 198.587936][ T9068] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 198.587969][ T9068] ? synchronize_rcu+0x11a/0x310 [ 198.587986][ T9068] ? __pfx_synchronize_rcu+0x10/0x10 [ 198.588002][ T9068] ? 0xffffffffa0205540 [ 198.588021][ T9068] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 198.588042][ T9068] ? 0xffffffffa0205540 [ 198.588054][ T9068] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 198.588094][ T9068] ? 0xffffffffa0201a4c [ 198.588136][ T9068] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 198.588167][ T9068] ? _copy_from_user+0x94/0xb0 [ 198.588188][ T9068] ? bpf_test_init+0x113/0x150 [ 198.588204][ T9068] ? xdp_convert_md_to_buff+0x5b/0x330 [ 198.588224][ T9068] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 198.588247][ T9068] ? __fget_files+0x2a/0x420 [ 198.588277][ T9068] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 198.588302][ T9068] ? __fget_files+0x2a/0x420 [ 198.588329][ T9068] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 198.588350][ T9068] bpf_prog_test_run+0x2c7/0x340 [ 198.588384][ T9068] __sys_bpf+0x562/0x860 [ 198.588410][ T9068] ? __pfx___sys_bpf+0x10/0x10 [ 198.588452][ T9068] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 198.588476][ T9068] ? irqentry_exit_to_user_mode+0xce/0x110 [ 198.588500][ T9068] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 198.588529][ T9068] __x64_sys_bpf+0x7c/0x90 [ 198.588551][ T9068] do_syscall_64+0xfa/0xfa0 [ 198.588572][ T9068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.588587][ T9068] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 198.588601][ T9068] ? clear_bhb_loop+0x60/0xb0 [ 198.588621][ T9068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.588637][ T9068] RIP: 0033:0x7f583cd8eec9 [ 198.588651][ T9068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.588664][ T9068] RSP: 002b:00007f583dc5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 198.588682][ T9068] RAX: ffffffffffffffda RBX: 00007f583cfe5fa0 RCX: 00007f583cd8eec9 [ 198.588693][ T9068] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 198.588703][ T9068] RBP: 00007f583dc5b090 R08: 0000000000000000 R09: 0000000000000000 [ 198.588713][ T9068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.588721][ T9068] R13: 00007f583cfe6038 R14: 00007f583cfe5fa0 R15: 00007ffca59725d8 [ 198.588754][ T9068] [ 198.588799][ T9068] page_pool_create_percpu() gave up with errno -12 [ 199.214792][ T9094] __nla_validate_parse: 3 callbacks suppressed [ 199.214828][ T9094] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.901'. [ 199.277883][ T9097] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.901'. [ 199.440461][ T9104] netlink: 72 bytes leftover after parsing attributes in process `syz.1.904'. [ 199.462021][ T9100] netlink: 56 bytes leftover after parsing attributes in process `syz.4.905'. [ 199.475611][ T9100] netlink: 56 bytes leftover after parsing attributes in process `syz.4.905'. [ 200.195719][ T9123] validate_nla: 5 callbacks suppressed [ 200.195738][ T9123] netlink: 'syz.1.909': attribute type 8 has an invalid length. [ 201.153170][ T9159] netlink: 'syz.0.917': attribute type 2 has an invalid length. [ 201.181608][ T9159] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.917'. [ 201.204456][ T9155] netlink: 'syz.0.917': attribute type 8 has an invalid length. [ 201.221422][ T9155] netlink: 'syz.0.917': attribute type 3 has an invalid length. [ 201.248971][ T9162] netlink: 72 bytes leftover after parsing attributes in process `syz.3.919'. [ 201.261488][ T9155] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.917'. [ 201.407904][ T9176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.920'. [ 201.783807][ T9173] delete_channel: no stack [ 201.798788][ T9172] gretap0 speed is unknown, defaulting to 1000 [ 202.431080][ T9187] netlink: 'syz.1.925': attribute type 10 has an invalid length. [ 202.463256][ T9187] netlink: 56823 bytes leftover after parsing attributes in process `syz.1.925'. [ 202.800855][ T9201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.885722][ T9190] gretap0 speed is unknown, defaulting to 1000 [ 203.337303][ T9219] netlink: 'syz.0.932': attribute type 28 has an invalid length. [ 203.879349][ T9220] delete_channel: no stack [ 204.267686][ T9252] __nla_validate_parse: 2 callbacks suppressed [ 204.267720][ T9252] netlink: 8 bytes leftover after parsing attributes in process `syz.2.941'. [ 204.811545][ T9265] netlink: 'syz.0.948': attribute type 2 has an invalid length. [ 204.817858][ T9266] netlink: 'syz.3.947': attribute type 2 has an invalid length. [ 204.838577][ T9265] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.948'. [ 204.847705][ T9266] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.947'. [ 204.868937][ T9267] netlink: 'syz.3.947': attribute type 8 has an invalid length. [ 204.889404][ T9267] netlink: 'syz.3.947': attribute type 3 has an invalid length. [ 204.897977][ T9267] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.947'. [ 204.933582][ T9268] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.948'. [ 206.170729][ T9315] validate_nla: 3 callbacks suppressed [ 206.170760][ T9315] netlink: 'syz.3.964': attribute type 2 has an invalid length. [ 206.188449][ T9315] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.964'. [ 206.220831][ T9315] netlink: 'syz.3.964': attribute type 8 has an invalid length. [ 206.245109][ T9315] netlink: 'syz.3.964': attribute type 3 has an invalid length. [ 206.253433][ T9315] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.964'. [ 206.281118][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.966'. [ 206.282620][ T9313] netlink: 40 bytes leftover after parsing attributes in process `syz.1.962'. [ 206.583775][ T9328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 207.731928][ T9362] netlink: 'syz.3.978': attribute type 2 has an invalid length. [ 207.749663][ T9362] netlink: 'syz.3.978': attribute type 8 has an invalid length. [ 207.765505][ T9362] netlink: 'syz.3.978': attribute type 3 has an invalid length. [ 208.602938][ T9411] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 208.721820][ T9413] netlink: 'syz.2.993': attribute type 2 has an invalid length. [ 208.739145][ T9413] netlink: 'syz.2.993': attribute type 8 has an invalid length. [ 208.750157][ T9413] netlink: 'syz.2.993': attribute type 3 has an invalid length. [ 212.153531][ T9429] __nla_validate_parse: 10 callbacks suppressed [ 212.153551][ T9429] netlink: 40 bytes leftover after parsing attributes in process `syz.2.997'. [ 212.332871][ T9445] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1002'. [ 212.549269][ T9463] netlink: 'syz.2.1007': attribute type 2 has an invalid length. [ 212.557940][ T9463] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1007'. [ 212.574817][ T9463] netlink: 'syz.2.1007': attribute type 8 has an invalid length. [ 212.587983][ T9463] netlink: 'syz.2.1007': attribute type 3 has an invalid length. [ 212.596354][ T9463] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1007'. [ 212.782418][ T9474] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1010'. [ 212.816221][ T9476] netlink: 'syz.4.1012': attribute type 1 has an invalid length. [ 212.889676][ T9480] netlink: 'syz.1.1013': attribute type 7 has an invalid length. [ 213.020928][ T9488] netlink: 'syz.4.1016': attribute type 21 has an invalid length. [ 213.029090][ T9488] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1016'. [ 213.061746][ T9488] netlink: 'syz.4.1016': attribute type 4 has an invalid length. [ 213.089510][ T9488] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1016'. [ 213.237826][ T9493] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1015'. [ 213.495775][ T9502] netlink: 'syz.1.1022': attribute type 2 has an invalid length. [ 213.549882][ T9506] netlink: 'syz.1.1022': attribute type 8 has an invalid length. [ 213.593333][ T9502] netlink: 4856 bytes leftover after parsing attributes in process `syz.1.1022'. [ 213.603926][ T9506] netlink: 'syz.1.1022': attribute type 3 has an invalid length. [ 213.612226][ T9506] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1022'. [ 213.705752][ T9511] IPv6: Can't replace route, no match found [ 215.208429][ T9568] delete_channel: no stack [ 215.223134][ T9568] delete_channel: no stack [ 216.186419][ T9607] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.198422][ T9607] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.230992][ T9607] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.238982][ T9607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.247424][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.254957][ T9607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.283862][ T9607] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 216.996952][ T9648] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.159094][ T9692] __nla_validate_parse: 11 callbacks suppressed [ 218.159116][ T9692] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1077'. [ 218.221962][ T9700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1080'. [ 219.686336][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 219.712100][ T9712] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1083'. [ 220.018490][ T9734] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1090'. [ 220.029799][ T9733] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1090'. [ 220.241371][ T9736] validate_nla: 2 callbacks suppressed [ 220.241503][ T9736] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 222.054468][ T9794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1109'. [ 222.364244][ T9802] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 222.386705][ T9802] netlink: 'syz.2.1112': attribute type 2 has an invalid length. [ 222.436296][ T9802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1112'. [ 222.589355][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1112'. [ 222.822525][ T9825] netlink: 26 bytes leftover after parsing attributes in process `syz.4.1118'. [ 222.935439][ T9834] netlink: 'syz.1.1120': attribute type 13 has an invalid length. [ 222.968967][ T9834] netlink: 'syz.1.1120': attribute type 58 has an invalid length. [ 223.221806][ T9845] __nla_validate_parse: 1 callbacks suppressed [ 223.221830][ T9845] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1124'. [ 223.278336][ T9847] sock: sock_timestamping_bind_phc: sock not bind to device [ 223.291804][ T9847] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1125'. [ 223.389356][ T9853] netlink: 'syz.2.1126': attribute type 3 has an invalid length. [ 223.401846][ T9853] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1126'. [ 223.473677][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 223.948484][ T9870] netlink: 'syz.0.1131': attribute type 21 has an invalid length. [ 224.062796][ T9878] netlink: 'syz.2.1132': attribute type 2 has an invalid length. [ 224.082751][ T9878] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1132'. [ 224.122377][ T9874] netlink: 'syz.2.1132': attribute type 8 has an invalid length. [ 224.125986][ T9880] netlink: 'syz.3.1134': attribute type 11 has an invalid length. [ 224.155370][ T9874] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1132'. [ 224.401860][ T9891] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1137'. [ 224.454146][ T9898] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 224.463559][ T9898] dvmrp1: linktype set to 6 [ 224.542798][ T9901] openvswitch: netlink: Message has 16 unknown bytes. [ 224.559324][ T9901] netlink: 872 bytes leftover after parsing attributes in process `syz.2.1141'. [ 224.573381][ T9901] netlink: 872 bytes leftover after parsing attributes in process `syz.2.1141'. [ 224.698716][ T9906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1142'. [ 225.640924][ T9932] validate_nla: 8 callbacks suppressed [ 225.640956][ T9932] netlink: 'syz.3.1150': attribute type 2 has an invalid length. [ 225.678878][ T9932] netlink: 'syz.3.1150': attribute type 8 has an invalid length. [ 225.694299][ T9932] netlink: 'syz.3.1150': attribute type 3 has an invalid length. [ 225.866313][ T9930] netlink: 'syz.0.1151': attribute type 1 has an invalid length. [ 226.631394][ T9969] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.649051][ T9969] batman_adv: batadv0: Interface activated: team0 [ 226.669221][ T9969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 226.884902][ T9982] netlink: 'syz.1.1168': attribute type 2 has an invalid length. [ 226.937992][ T9987] netlink: 'syz.1.1168': attribute type 8 has an invalid length. [ 226.946674][ T9987] netlink: 'syz.1.1168': attribute type 3 has an invalid length. [ 228.020010][T10022] netlink: 'syz.4.1181': attribute type 10 has an invalid length. [ 228.176069][T10027] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 228.208208][T10024] netlink: 'syz.2.1182': attribute type 8 has an invalid length. [ 228.255364][T10024] __nla_validate_parse: 19 callbacks suppressed [ 228.255383][T10024] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1182'. [ 228.381290][T10033] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1184'. [ 229.327425][T10051] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1189'. [ 229.521412][T10061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.689828][T10061] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1192'. [ 229.792621][T10079] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1196'. [ 229.833534][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1197'. [ 230.377051][T10088] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.1198'. [ 230.409261][T10088] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1198'. [ 230.564311][T10100] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1204'. [ 230.686518][T10106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1206'. [ 231.049422][T10106] gretap0 speed is unknown, defaulting to 1000 [ 231.825828][T10135] validate_nla: 7 callbacks suppressed [ 231.825860][T10135] netlink: 'syz.0.1214': attribute type 2 has an invalid length. [ 231.879453][T10135] netlink: 'syz.0.1214': attribute type 8 has an invalid length. [ 231.897574][T10135] netlink: 'syz.0.1214': attribute type 3 has an invalid length. [ 231.965019][T10139] netlink: 'syz.2.1212': attribute type 21 has an invalid length. [ 232.025094][T10139] netlink: 'syz.2.1212': attribute type 5 has an invalid length. [ 232.140241][T10144] netlink: 'syz.1.1216': attribute type 21 has an invalid length. [ 232.377011][T10144] netlink: 'syz.1.1216': attribute type 6 has an invalid length. [ 233.041480][T10157] netlink: 'syz.4.1219': attribute type 6 has an invalid length. [ 233.339134][T10181] __nla_validate_parse: 11 callbacks suppressed [ 233.339154][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 233.380965][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 233.390234][T10182] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 233.398917][T10181] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 233.406865][T10182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.417363][T10181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.631756][T10195] netlink: 'syz.4.1228': attribute type 2 has an invalid length. [ 233.647524][T10195] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.1228'. [ 233.674391][T10195] netlink: 'syz.4.1228': attribute type 8 has an invalid length. [ 233.682680][T10195] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.1228'. [ 234.045655][T10219] netlink: 16054 bytes leftover after parsing attributes in process `syz.1.1235'. [ 235.005822][T10221] delete_channel: no stack [ 237.363963][T10279] validate_nla: 2 callbacks suppressed [ 237.363981][T10279] netlink: 'syz.4.1250': attribute type 8 has an invalid length. [ 237.388928][T10279] netlink: 'syz.4.1250': attribute type 3 has an invalid length. [ 237.405318][T10279] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.1250'. [ 237.632354][T10277] netlink: 'syz.4.1250': attribute type 2 has an invalid length. [ 237.651467][T10277] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.1250'. [ 237.694460][T10282] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1249'. [ 237.863546][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 238.251396][T10294] netlink: 'syz.2.1254': attribute type 3 has an invalid length. [ 238.268679][T10294] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.1254'. [ 238.650452][T10305] __nla_validate_parse: 2 callbacks suppressed [ 238.650472][T10305] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1258'. [ 238.948158][T10316] netlink: 146932 bytes leftover after parsing attributes in process `syz.0.1259'. [ 238.958039][T10316] openvswitch: netlink: Message has 6 unknown bytes. [ 239.581875][T10327] syz.0.1262 (10327) used obsolete PPPIOCDETACH ioctl [ 239.728369][T10330] netlink: 'syz.3.1263': attribute type 2 has an invalid length. [ 239.749335][T10330] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.1263'. [ 239.764453][T10330] netlink: 'syz.3.1263': attribute type 8 has an invalid length. [ 239.777811][T10330] netlink: 'syz.3.1263': attribute type 3 has an invalid length. [ 239.819928][T10330] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1263'. [ 240.051398][T10351] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1269'. [ 240.054939][T10355] netlink: 3224 bytes leftover after parsing attributes in process `syz.0.1270'. [ 240.233446][T10365] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1272'. [ 240.247251][T10364] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1272'. [ 240.306404][T10375] netlink: 'syz.0.1275': attribute type 1 has an invalid length. [ 240.471021][T10388] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1278'. [ 240.500738][T10387] netlink: 'syz.2.1279': attribute type 2 has an invalid length. [ 240.508881][T10387] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1279'. [ 240.529658][T10387] netlink: 'syz.2.1279': attribute type 8 has an invalid length. [ 241.659145][T10430] gretap0 speed is unknown, defaulting to 1000 [ 242.137317][T10443] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.199265][T10443] bridge_slave_0 (unregistering): left allmulticast mode [ 242.207545][T10443] bridge_slave_0 (unregistering): left promiscuous mode [ 242.214927][T10443] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.440337][T10468] tmpfs: Bad value for 'gid' [ 242.445704][T10468] tmpfs: Bad value for 'gid' [ 242.617204][T10491] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 242.767775][T10499] validate_nla: 5 callbacks suppressed [ 242.767806][T10499] netlink: 'syz.3.1307': attribute type 2 has an invalid length. [ 243.662170][T10524] __nla_validate_parse: 12 callbacks suppressed [ 243.662219][T10524] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1315'. [ 244.110886][T10540] netlink: 'syz.1.1321': attribute type 12 has an invalid length. [ 244.131433][T10540] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1321'. [ 244.179819][T10542] netlink: 'syz.2.1320': attribute type 2 has an invalid length. [ 244.199183][T10542] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1320'. [ 244.409286][T10547] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1322'. [ 245.200746][T10581] netlink: 'syz.4.1334': attribute type 32 has an invalid length. [ 245.215374][T10581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'. [ 245.888000][T10603] netlink: 'syz.2.1337': attribute type 2 has an invalid length. [ 245.897785][T10603] netlink: 4856 bytes leftover after parsing attributes in process `syz.2.1337'. [ 246.203767][T10609] netlink: 'syz.4.1338': attribute type 1 has an invalid length. [ 246.930521][T10619] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1340'. [ 247.404784][T10649] netlink: 'syz.3.1349': attribute type 5 has an invalid length. [ 247.719464][T10665] netlink: 'syz.1.1353': attribute type 21 has an invalid length. [ 247.731537][T10665] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1353'. [ 247.750855][T10653] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 247.969401][T10676] netlink: 'syz.1.1356': attribute type 21 has an invalid length. [ 248.007381][T10676] mac80211_hwsim hwsim4 .3c: renamed from wlan1 [ 248.126428][T10680] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 248.603611][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1364'. [ 248.619076][T10700] pimreg: tun_chr_ioctl cmd 1074025677 [ 248.637113][T10700] pimreg: linktype set to 804 [ 248.772891][T10707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1366'. [ 248.799924][T10707] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1366'. [ 248.818292][T10707] netlink: 46 bytes leftover after parsing attributes in process `syz.3.1366'. [ 249.584313][T10739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1376'. [ 249.790978][T10745] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1378'. [ 250.178160][T10764] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 250.205355][T10764] syzkaller1: ignored: set checksum enabled [ 250.422594][T10769] netlink: 'syz.1.1388': attribute type 10 has an invalid length. [ 251.196381][T10775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1392'. [ 251.312917][T10786] netlink: 'syz.3.1394': attribute type 2 has an invalid length. [ 251.323051][T10786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 251.401231][T10786] : entered promiscuous mode [ 251.427761][T10790] C: renamed from team_slave_0 [ 251.435580][T10790] netlink: 'syz.0.1396': attribute type 3 has an invalid length. [ 251.457650][T10790] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 251.989161][T10815] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1403'. [ 252.204521][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1409'. [ 252.276154][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1409'. [ 252.503952][T10835] netlink: 'syz.2.1408': attribute type 21 has an invalid length. [ 252.559114][T10835] netlink: 'syz.2.1408': attribute type 5 has an invalid length. [ 252.806678][T10835] : entered promiscuous mode [ 252.814593][T10854] netlink: 'syz.1.1414': attribute type 3 has an invalid length. [ 253.266830][T10884] netlink: 'syz.1.1424': attribute type 8 has an invalid length. [ 253.275621][T10884] netlink: 'syz.1.1424': attribute type 3 has an invalid length. [ 253.669531][T10909] netlink: 'syz.1.1432': attribute type 10 has an invalid length. [ 253.699733][T10909] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 253.962186][T10918] netlink: 'syz.2.1437': attribute type 8 has an invalid length. [ 253.976595][T10918] netlink: 'syz.2.1437': attribute type 3 has an invalid length. [ 253.984725][T10918] __nla_validate_parse: 12 callbacks suppressed [ 253.984757][T10918] netlink: 153952 bytes leftover after parsing attributes in process `syz.2.1437'. [ 254.736374][T10946] netlink: 440 bytes leftover after parsing attributes in process `syz.3.1445'. [ 254.833703][T10955] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1448'. [ 255.280253][T10968] netlink: 'syz.0.1451': attribute type 8 has an invalid length. [ 255.289578][T10968] netlink: 'syz.0.1451': attribute type 3 has an invalid length. [ 255.371116][T10968] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.1451'. [ 255.504966][T10967] tmpfs: Unknown parameter 'X! 0xffffffffffffffff' [ 256.001197][T10978] gretap0 speed is unknown, defaulting to 1000 [ 256.049558][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.057219][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.116099][T10989] netlink: 'syz.0.1456': attribute type 5 has an invalid length. [ 256.456803][T10989] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1456'. [ 256.878285][T11001] bridge_slave_1: left allmulticast mode [ 256.923312][T11001] bridge_slave_1: left promiscuous mode [ 256.995654][T11001] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.022534][T11001] bridge_slave_0: left allmulticast mode [ 257.075577][T11001] bridge_slave_0: left promiscuous mode [ 257.081733][T11001] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.817705][ T5942] infiniband syz2: ib_query_port failed (-19) [ 258.932708][T11024] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1465'. [ 259.245656][T11029] netlink: 'syz.3.1466': attribute type 2 has an invalid length. [ 259.278944][T11029] netlink: 'syz.3.1466': attribute type 11 has an invalid length. [ 259.435490][T11029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1466'. [ 259.630300][T11032] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1467'. [ 259.702296][T11036] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1470'. [ 259.869794][T11044] netlink: 'syz.1.1472': attribute type 33 has an invalid length. [ 259.885649][T11044] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1472'. [ 259.913476][T11044] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1472'. [ 260.411183][T11045] tmpfs: Unknown parameter 'X! 0xffffffffffffffff' [ 260.458900][T11056] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1474'. [ 260.593963][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1474'. [ 260.866436][T11056] gretap0 speed is unknown, defaulting to 1000 [ 261.370262][T11077] netlink: 'syz.4.1479': attribute type 2 has an invalid length. [ 261.398750][T11077] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.1479'. [ 261.424250][T11079] netlink: 'syz.4.1479': attribute type 8 has an invalid length. [ 261.468336][T11079] netlink: 'syz.4.1479': attribute type 3 has an invalid length. [ 261.496632][T11079] netlink: 153952 bytes leftover after parsing attributes in process `syz.4.1479'. [ 261.904001][T11093] netlink: 'syz.3.1482': attribute type 10 has an invalid length. [ 261.917017][T11096] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1483'. [ 261.966761][T11093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.983415][T11093] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 262.080697][T11100] netlink: 'syz.4.1485': attribute type 8 has an invalid length. [ 262.198679][T11107] netlink: 'syz.1.1484': attribute type 10 has an invalid length. [ 262.222998][T11109] netlink: 'syz.3.1497': attribute type 39 has an invalid length. [ 262.887659][T11109] hsr_slave_1 (unregistering): left promiscuous mode [ 262.994377][T11107] bond0: (slave .3c): Enslaving as an active interface with an up link [ 263.724731][T11168] warn_alloc: 1 callbacks suppressed [ 263.724752][T11168] syz.0.1504: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 263.732283][T11152] syzkaller0: entered promiscuous mode [ 263.739297][T11168] ,cpuset= [ 263.769915][T11152] syzkaller0: entered allmulticast mode [ 263.777674][T11168] /,mems_allowed=0-1 [ 263.812277][T11168] CPU: 0 UID: 0 PID: 11168 Comm: syz.0.1504 Not tainted syzkaller #0 PREEMPT(full) [ 263.812304][T11168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.812329][T11168] Call Trace: [ 263.812337][T11168] [ 263.812346][T11168] dump_stack_lvl+0x189/0x250 [ 263.812374][T11168] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 263.812409][T11168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.812432][T11168] ? __pfx__printk+0x10/0x10 [ 263.812451][T11168] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 263.812473][T11168] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 263.812503][T11168] warn_alloc+0x214/0x310 [ 263.812526][T11168] ? stack_depot_save_flags+0x41b/0x860 [ 263.812557][T11168] ? __pfx_warn_alloc+0x10/0x10 [ 263.812582][T11168] ? kasan_save_track+0x3e/0x80 [ 263.812602][T11168] ? __kasan_kmalloc+0x93/0xb0 [ 263.812625][T11168] ? xsk_setsockopt+0x57b/0x8d0 [ 263.812645][T11168] ? do_sock_setsockopt+0x17c/0x1b0 [ 263.812665][T11168] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 263.812685][T11168] ? do_syscall_64+0xfa/0xfa0 [ 263.812708][T11168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.812737][T11168] __vmalloc_node_range_noprof+0x125/0x12d0 [ 263.812791][T11168] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 263.812816][T11168] ? __kasan_kmalloc+0x93/0xb0 [ 263.812842][T11168] vmalloc_user_noprof+0xad/0xf0 [ 263.812864][T11168] ? xskq_create+0xbf/0x170 [ 263.812886][T11168] xskq_create+0xbf/0x170 [ 263.812919][T11168] xsk_init_queue+0xb0/0x110 [ 263.812940][T11168] xsk_setsockopt+0x57b/0x8d0 [ 263.812962][T11168] ? __pfx_xsk_setsockopt+0x10/0x10 [ 263.812990][T11168] ? __pfx_aa_sk_perm+0x10/0x10 [ 263.813012][T11168] ? aa_sock_opt_perm+0xff/0x1b0 [ 263.813036][T11168] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 263.813059][T11168] ? __pfx_xsk_setsockopt+0x10/0x10 [ 263.813081][T11168] do_sock_setsockopt+0x17c/0x1b0 [ 263.813108][T11168] __x64_sys_setsockopt+0x13f/0x1b0 [ 263.813136][T11168] do_syscall_64+0xfa/0xfa0 [ 263.813158][T11168] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.813181][T11168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.813197][T11168] ? clear_bhb_loop+0x60/0xb0 [ 263.813219][T11168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.813236][T11168] RIP: 0033:0x7f9f03f8eec9 [ 263.813253][T11168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.813267][T11168] RSP: 002b:00007f9f04ed4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.813289][T11168] RAX: ffffffffffffffda RBX: 00007f9f041e5fa0 RCX: 00007f9f03f8eec9 [ 263.813301][T11168] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 263.813319][T11168] RBP: 00007f9f04011f91 R08: 0000000000000004 R09: 0000000000000000 [ 263.813329][T11168] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 263.813339][T11168] R13: 00007f9f041e6038 R14: 00007f9f041e5fa0 R15: 00007ffc77cd71f8 [ 263.813368][T11168] [ 263.814709][T11168] Mem-Info: [ 264.115932][T11168] active_anon:5734 inactive_anon:0 isolated_anon:0 [ 264.115932][T11168] active_file:20200 inactive_file:39952 isolated_file:0 [ 264.115932][T11168] unevictable:768 dirty:180 writeback:0 [ 264.115932][T11168] slab_reclaimable:11457 slab_unreclaimable:150570 [ 264.115932][T11168] mapped:29334 shmem:1356 pagetables:1143 [ 264.115932][T11168] sec_pagetables:0 bounce:0 [ 264.115932][T11168] kernel_misc_reclaimable:0 [ 264.115932][T11168] free:1252122 free_pcp:21005 free_cma:0 [ 264.162959][T11168] Node 0 active_anon:22936kB inactive_anon:0kB active_file:80800kB inactive_file:159608kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117336kB dirty:720kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12840kB pagetables:4356kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.212604][T11168] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 264.253758][T11168] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.284836][T11168] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 264.322631][T11168] Node 0 DMA32 free:1105928kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22936kB inactive_anon:0kB active_file:80800kB inactive_file:159608kB unevictable:1536kB writepending:720kB zspages:0kB present:3129332kB managed:2561888kB mlocked:0kB bounce:0kB free_pcp:65084kB local_pcp:28980kB free_cma:0kB [ 264.363716][T11168] lowmem_reserve[]: 0 0 1 1 1 [ 264.370777][T11168] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 264.402775][T11168] lowmem_reserve[]: 0 0 0 0 0 [ 264.408149][T11168] Node 1 Normal free:3886912kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18912kB local_pcp:9920kB free_cma:0kB [ 264.447270][T11168] lowmem_reserve[]: 0 0 0 0 0 [ 264.452446][T11168] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 264.473106][T11168] Node 0 DMA32: 1302*4kB (UM) 994*8kB (UME) 874*16kB (UME) 620*32kB (UM) 242*64kB (UME) 138*128kB (UME) 70*256kB (UM) 25*512kB (UM) 4*1024kB (M) 4*2048kB (UM) 240*4096kB (UM) = 1106184kB [ 264.507983][T11168] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 264.529446][T11168] Node 1 Normal: 190*4kB (UE) 51*8kB (UME) 47*16kB (UME) 72*32kB (UME) 21*64kB (UME) 7*128kB (UM) 6*256kB (UME) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 946*4096kB (ME) = 3886912kB [ 264.550675][T11168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.582029][T11168] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.593448][T11168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 264.607660][T11168] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 264.630553][T11168] 61506 total pagecache pages [ 264.635760][T11168] 0 pages in swap cache [ 264.639947][T11168] Free swap = 124996kB [ 264.644252][T11168] Total swap = 124996kB [ 264.648563][T11168] 2097051 pages RAM [ 264.652406][T11168] 0 pages HighMem/MovableOnly [ 264.660494][T11168] 424489 pages reserved [ 264.671883][T11168] 0 pages cma reserved [ 266.115933][T11193] : renamed from team_slave_1 (while UP) [ 266.126536][T11206] validate_nla: 8 callbacks suppressed [ 266.126552][T11206] netlink: 'syz.0.1515': attribute type 4 has an invalid length. [ 266.516984][T11221] netlink: 'syz.0.1519': attribute type 21 has an invalid length. [ 266.544925][T11221] __nla_validate_parse: 12 callbacks suppressed [ 266.544944][T11221] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1519'. [ 267.143420][T11221] netlink: 'syz.0.1519': attribute type 4 has an invalid length. [ 267.406651][T11243] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1524'. [ 267.430003][T11246] netlink: 'syz.1.1525': attribute type 2 has an invalid length. [ 267.449219][T11246] netlink: 4856 bytes leftover after parsing attributes in process `syz.1.1525'. [ 267.490903][T11246] netlink: 'syz.1.1525': attribute type 8 has an invalid length. [ 267.539659][T11239] netlink: 'syz.4.1523': attribute type 7 has an invalid length. [ 267.555164][T11239] netlink: 'syz.4.1523': attribute type 6 has an invalid length. [ 267.575464][T11246] netlink: 'syz.1.1525': attribute type 3 has an invalid length. [ 267.583526][T11246] netlink: 153952 bytes leftover after parsing attributes in process `syz.1.1525'. [ 268.001892][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 268.012106][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1530'. [ 268.234505][T11276] bridge_slave_1: left allmulticast mode [ 268.240718][T11276] bridge_slave_1: left promiscuous mode [ 268.246682][T11276] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.286854][T11276] bridge_slave_0: left promiscuous mode [ 268.293766][T11276] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.357855][T11276] bond0: (slave bridge0): Releasing backup interface [ 268.454856][T11286] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1538'. [ 268.812098][T11303] netlink: 'syz.2.1545': attribute type 1 has an invalid length. [ 268.824774][T11303] netlink: 'syz.2.1545': attribute type 2 has an invalid length. [ 268.838830][T11303] netlink: 130080 bytes leftover after parsing attributes in process `syz.2.1545'. [ 269.081887][T11316] sctp: [Deprecated]: syz.1.1549 (pid 11316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.081887][T11316] Use struct sctp_sack_info instead [ 269.197038][T11322] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1551'. [ 269.341641][T11331] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1554'. [ 270.809196][T11385] syzkaller0: entered promiscuous mode [ 270.814781][T11385] syzkaller0: entered allmulticast mode [ 270.977042][T11391] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 270.984820][T11391] CPU: 0 UID: 0 PID: 11391 Comm: syz.4.1572 Not tainted syzkaller #0 PREEMPT(full) [ 270.984845][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 270.984856][T11391] Call Trace: [ 270.984864][T11391] [ 270.984873][T11391] dump_stack_lvl+0x189/0x250 [ 270.984903][T11391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.984924][T11391] ? __pfx__printk+0x10/0x10 [ 270.984949][T11391] ? kernfs_path_from_node+0x2f/0x290 [ 270.984968][T11391] ? kernfs_path_from_node+0x250/0x290 [ 270.984982][T11391] ? kernfs_path_from_node+0x2f/0x290 [ 270.985003][T11391] sysfs_warn_dup+0x8e/0xa0 [ 270.985024][T11391] sysfs_do_create_link_sd+0xc0/0x110 [ 270.985046][T11391] device_add_class_symlinks+0x1cf/0x240 [ 270.985069][T11391] device_add+0x475/0xb50 [ 270.985094][T11391] wiphy_register+0x1c81/0x2aa0 [ 270.985143][T11391] ? __pfx_wiphy_register+0x10/0x10 [ 270.985162][T11391] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 270.985206][T11391] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 270.985236][T11391] ieee80211_register_hw+0x3473/0x40d0 [ 270.985256][T11391] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 270.985303][T11391] ? ieee80211_register_hw+0x1411/0x40d0 [ 270.985344][T11391] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 270.985363][T11391] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 270.985396][T11391] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 270.985419][T11391] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 270.985457][T11391] ? __hrtimer_setup+0x187/0x210 [ 270.985474][T11391] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 270.985499][T11391] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 270.985570][T11391] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 270.985588][T11391] ? trace_kmalloc+0x1f/0xd0 [ 270.985602][T11391] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 270.985620][T11391] ? kstrndup+0xbf/0x160 [ 270.985650][T11391] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 270.985680][T11391] ? __pfx___nla_validate_parse+0x10/0x10 [ 270.985718][T11391] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 270.985748][T11391] ? rcu_is_watching+0x15/0xb0 [ 270.985769][T11391] ? __nla_parse+0x40/0x60 [ 270.985790][T11391] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 270.985818][T11391] genl_family_rcv_msg_doit+0x215/0x300 [ 270.985852][T11391] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 270.985894][T11391] ? bpf_lsm_capable+0x9/0x20 [ 270.985908][T11391] ? security_capable+0x7e/0x2e0 [ 270.985935][T11391] genl_rcv_msg+0x60e/0x790 [ 270.985968][T11391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.985987][T11391] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 270.986010][T11391] ? perf_trace_lock_acquire+0xf5/0x410 [ 270.986041][T11391] netlink_rcv_skb+0x205/0x470 [ 270.986056][T11391] ? __lock_acquire+0xab9/0xd20 [ 270.986076][T11391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 270.986099][T11391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 270.986148][T11391] ? down_read+0x1ad/0x2e0 [ 270.986166][T11391] genl_rcv+0x28/0x40 [ 270.986184][T11391] netlink_unicast+0x82c/0x9e0 [ 270.986222][T11391] ? __pfx_netlink_unicast+0x10/0x10 [ 270.986242][T11391] ? netlink_sendmsg+0x642/0xb30 [ 270.986257][T11391] ? skb_put+0x11b/0x210 [ 270.986283][T11391] netlink_sendmsg+0x805/0xb30 [ 270.986317][T11391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.986341][T11391] ? aa_sock_msg_perm+0xf1/0x1d0 [ 270.986361][T11391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.986379][T11391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.986398][T11391] __sock_sendmsg+0x219/0x270 [ 270.986420][T11391] ____sys_sendmsg+0x505/0x830 [ 270.986449][T11391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.986483][T11391] ? import_iovec+0x74/0xa0 [ 270.986508][T11391] ___sys_sendmsg+0x21f/0x2a0 [ 270.986531][T11391] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.986610][T11391] ? __fget_files+0x2a/0x420 [ 270.986627][T11391] ? __fget_files+0x3a0/0x420 [ 270.986663][T11391] __x64_sys_sendmsg+0x19b/0x260 [ 270.986687][T11391] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.986734][T11391] ? do_syscall_64+0xbe/0xfa0 [ 270.986759][T11391] do_syscall_64+0xfa/0xfa0 [ 270.986775][T11391] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.986794][T11391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.986807][T11391] ? clear_bhb_loop+0x60/0xb0 [ 270.986827][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.986840][T11391] RIP: 0033:0x7f583cd8eec9 [ 270.986856][T11391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.986868][T11391] RSP: 002b:00007f583dc5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.986883][T11391] RAX: ffffffffffffffda RBX: 00007f583cfe5fa0 RCX: 00007f583cd8eec9 [ 270.986893][T11391] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000003 [ 270.986903][T11391] RBP: 00007f583ce11f91 R08: 0000000000000000 R09: 0000000000000000 [ 270.986913][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.986928][T11391] R13: 00007f583cfe6038 R14: 00007f583cfe5fa0 R15: 00007ffca59725d8 [ 270.986969][T11391] [ 271.551385][T11403] __nla_validate_parse: 5 callbacks suppressed [ 271.551409][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1571'. [ 272.002188][T11421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1579'. [ 272.012440][T11422] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1578'. [ 273.803173][T11457] netlink: 208192 bytes leftover after parsing attributes in process `syz.3.1588'. [ 273.815428][T11457] validate_nla: 10 callbacks suppressed [ 273.815450][T11457] netlink: 'syz.3.1588': attribute type 1 has an invalid length. [ 274.178051][T11465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1587'. [ 274.263652][T11465] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1587'. [ 274.281002][T11464] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1590'. [ 275.160825][T11491] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1595'. [ 275.244913][T11496] sit0: entered allmulticast mode [ 275.357246][T11503] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.1600'. [ 275.376092][T11492] netlink: 304 bytes leftover after parsing attributes in process `syz.4.1596'. [ 275.570920][T11517] netlink: 'syz.1.1602': attribute type 2 has an invalid length. [ 275.599684][T11517] netlink: 'syz.1.1602': attribute type 8 has an invalid length. [ 275.617302][T11517] netlink: 'syz.1.1602': attribute type 3 has an invalid length. [ 275.682543][T11528] netlink: 'syz.2.1607': attribute type 39 has an invalid length. [ 275.957225][T11538] netlink: 'syz.4.1610': attribute type 1 has an invalid length. [ 275.993861][T11550] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 276.540873][T11578] netlink: 'syz.2.1618': attribute type 5 has an invalid length. [ 276.626217][T11575] __nla_validate_parse: 5 callbacks suppressed [ 276.626236][T11575] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1619'. [ 276.903380][T11575] bond0: (slave dummy0): Releasing backup interface [ 277.110963][T11596] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1624'. [ 277.122270][T11594] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1624'. [ 277.134061][T11595] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1624'. [ 277.310635][T11608] netlink: 'syz.0.1628': attribute type 2 has an invalid length. [ 277.336500][T11608] netlink: 4856 bytes leftover after parsing attributes in process `syz.0.1628'. [ 277.369562][T11613] netlink: 'syz.0.1628': attribute type 8 has an invalid length. [ 277.387439][T11613] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1628'. [ 277.571726][T11620] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1632'. [ 277.663711][T11624] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1634'. [ 277.932984][T11640] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1639'. [ 278.749668][T11680] netlink: 191264 bytes leftover after parsing attributes in process `syz.4.1652'. [ 279.021569][T11687] validate_nla: 7 callbacks suppressed [ 279.021589][T11687] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 279.068082][T11687] netlink: 'syz.4.1654': attribute type 1 has an invalid length. [ 280.025067][T11713] debugfs: '!' already exists in 'ieee80211' [ 280.307963][T11725] x_tables: ip_tables: udp match: only valid for protocol 17 [ 280.333645][T11727] netlink: 'syz.4.1667': attribute type 1 has an invalid length. [ 280.593004][ T5942] infiniband syj1: ib_query_port failed (-19) [ 280.605882][T11735] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 280.615403][T11735] CPU: 0 UID: 0 PID: 11735 Comm: syz.0.1669 Not tainted syzkaller #0 PREEMPT(full) [ 280.615429][T11735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 280.615441][T11735] Call Trace: [ 280.615451][T11735] [ 280.615461][T11735] dump_stack_lvl+0x189/0x250 [ 280.615489][T11735] ? kernfs_path_from_node+0x2f/0x290 [ 280.615516][T11735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.615544][T11735] ? __pfx__printk+0x10/0x10 [ 280.615585][T11735] ? kernfs_path_from_node+0x2f/0x290 [ 280.615606][T11735] ? kernfs_path_from_node+0x250/0x290 [ 280.615624][T11735] ? kernfs_path_from_node+0x2f/0x290 [ 280.615660][T11735] sysfs_warn_dup+0x8e/0xa0 [ 280.615686][T11735] sysfs_do_create_link_sd+0xc0/0x110 [ 280.615717][T11735] device_add_class_symlinks+0x1cf/0x240 [ 280.615753][T11735] device_add+0x475/0xb50 [ 280.615792][T11735] wiphy_register+0x1c81/0x2aa0 [ 280.615872][T11735] ? __pfx_wiphy_register+0x10/0x10 [ 280.615898][T11735] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 280.615944][T11735] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 280.615982][T11735] ieee80211_register_hw+0x3473/0x40d0 [ 280.616049][T11735] ? ieee80211_register_hw+0x1411/0x40d0 [ 280.616103][T11735] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 280.616122][T11735] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 280.616161][T11735] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 280.616186][T11735] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.616234][T11735] ? __hrtimer_setup+0x187/0x210 [ 280.616260][T11735] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 280.616292][T11735] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 280.616417][T11735] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 280.616438][T11735] ? trace_kmalloc+0x1f/0xd0 [ 280.616457][T11735] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 280.616482][T11735] ? kstrndup+0xbf/0x160 [ 280.616532][T11735] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 280.616581][T11735] ? __pfx___nla_validate_parse+0x10/0x10 [ 280.616644][T11735] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 280.616693][T11735] ? rcu_is_watching+0x15/0xb0 [ 280.616733][T11735] ? __nla_parse+0x40/0x60 [ 280.616769][T11735] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 280.616815][T11735] genl_family_rcv_msg_doit+0x215/0x300 [ 280.616867][T11735] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 280.616936][T11735] ? bpf_lsm_capable+0x9/0x20 [ 280.616954][T11735] ? security_capable+0x7e/0x2e0 [ 280.616997][T11735] genl_rcv_msg+0x60e/0x790 [ 280.617050][T11735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.617078][T11735] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 280.617113][T11735] ? perf_trace_lock_acquire+0xf5/0x410 [ 280.617169][T11735] netlink_rcv_skb+0x205/0x470 [ 280.617189][T11735] ? __lock_acquire+0xab9/0xd20 [ 280.617219][T11735] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.617262][T11735] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.617350][T11735] ? down_read+0x1ad/0x2e0 [ 280.617380][T11735] genl_rcv+0x28/0x40 [ 280.617406][T11735] netlink_unicast+0x82c/0x9e0 [ 280.617461][T11735] ? __pfx_netlink_unicast+0x10/0x10 [ 280.617494][T11735] ? netlink_sendmsg+0x642/0xb30 [ 280.617513][T11735] ? skb_put+0x11b/0x210 [ 280.617551][T11735] netlink_sendmsg+0x805/0xb30 [ 280.617602][T11735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.617640][T11735] ? aa_sock_msg_perm+0xf1/0x1d0 [ 280.617670][T11735] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.617696][T11735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.617735][T11735] __sock_sendmsg+0x219/0x270 [ 280.617766][T11735] ____sys_sendmsg+0x505/0x830 [ 280.617812][T11735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.617871][T11735] ? import_iovec+0x74/0xa0 [ 280.617911][T11735] ___sys_sendmsg+0x21f/0x2a0 [ 280.617943][T11735] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.618032][T11735] ? __fget_files+0x2a/0x420 [ 280.618093][T11735] ? __fget_files+0x2a/0x420 [ 280.618116][T11735] ? __fget_files+0x3a0/0x420 [ 280.618174][T11735] __x64_sys_sendmsg+0x19b/0x260 [ 280.618205][T11735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.618230][T11735] ? perf_trace_preemptirq_template+0xa3/0x340 [ 280.618321][T11735] ? do_syscall_64+0xbe/0xfa0 [ 280.618357][T11735] do_syscall_64+0xfa/0xfa0 [ 280.618380][T11735] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.618406][T11735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.618426][T11735] ? clear_bhb_loop+0x60/0xb0 [ 280.618458][T11735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.618476][T11735] RIP: 0033:0x7f9f03f8eec9 [ 280.618497][T11735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.618511][T11735] RSP: 002b:00007f9f04ed4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.618530][T11735] RAX: ffffffffffffffda RBX: 00007f9f041e5fa0 RCX: 00007f9f03f8eec9 [ 280.618544][T11735] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000005 [ 280.618555][T11735] RBP: 00007f9f04011f91 R08: 0000000000000000 R09: 0000000000000000 [ 280.618566][T11735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.618577][T11735] R13: 00007f9f041e6038 R14: 00007f9f041e5fa0 R15: 00007ffc77cd71f8 [ 280.618646][T11735] [ 281.694423][T11757] netlink: 'syz.3.1675': attribute type 1 has an invalid length. [ 281.825636][T11757] netlink: 'syz.3.1675': attribute type 11 has an invalid length. [ 281.833936][T11757] __nla_validate_parse: 8 callbacks suppressed [ 281.833954][T11757] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1675'. [ 281.906625][T11775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1681'. [ 281.921989][T11773] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 281.945126][T11775] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1681'. [ 282.422140][T11789] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1687'. [ 282.747536][T11800] netlink: 'syz.4.1689': attribute type 2 has an invalid length. [ 282.755858][T11800] netlink: 4856 bytes leftover after parsing attributes in process `syz.4.1689'. [ 282.838076][T11806] netlink: 'syz.1.1693': attribute type 3 has an invalid length. [ 282.943579][T11816] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1694'. [ 283.057612][T11819] netlink: zone id is out of range [ 283.062941][T11816] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1694'. [ 283.075378][T11819] netlink: zone id is out of range [ 283.080559][T11819] netlink: zone id is out of range [ 283.100932][T11819] netlink: zone id is out of range [ 283.105865][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1698'. [ 283.120137][T11819] netlink: zone id is out of range [ 283.136238][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1698'. [ 283.170561][T11819] netlink: zone id is out of range [ 283.180538][T11828] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1698'. [ 283.190822][T11819] netlink: zone id is out of range [ 283.238217][T11819] netlink: zone id is out of range [ 283.243387][T11819] netlink: zone id is out of range [ 283.262779][T11819] netlink: zone id is out of range [ 283.571552][T11857] netlink: 'syz.3.1706': attribute type 2 has an invalid length. [ 283.904274][T11876] gretap0 speed is unknown, defaulting to 1000 [ 284.149205][T11878] gretap0 speed is unknown, defaulting to 1000 [ 284.366305][T11887] netlink: 'syz.0.1716': attribute type 15 has an invalid length. [ 284.546150][T11902] netlink: 'syz.2.1720': attribute type 2 has an invalid length. [ 284.864282][T11916] netlink: 'syz.3.1724': attribute type 5 has an invalid length. [ 284.922459][T11919] netlink: 'syz.3.1724': attribute type 2 has an invalid length. [ 284.940897][T11919] netlink: 'syz.3.1724': attribute type 8 has an invalid length. [ 286.036690][T11947] netlink: 'syz.2.1734': attribute type 2 has an invalid length. [ 286.048288][T11949] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 286.066125][T11949] CPU: 0 UID: 0 PID: 11949 Comm: syz.0.1735 Not tainted syzkaller #0 PREEMPT(full) [ 286.066153][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.066164][T11949] Call Trace: [ 286.066172][T11949] [ 286.066181][T11949] dump_stack_lvl+0x189/0x250 [ 286.066211][T11949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.066230][T11949] ? __pfx__printk+0x10/0x10 [ 286.066256][T11949] ? kernfs_path_from_node+0x2f/0x290 [ 286.066277][T11949] ? kernfs_path_from_node+0x250/0x290 [ 286.066312][T11949] ? kernfs_path_from_node+0x2f/0x290 [ 286.066335][T11949] sysfs_warn_dup+0x8e/0xa0 [ 286.066354][T11949] sysfs_do_create_link_sd+0xc0/0x110 [ 286.066377][T11949] device_add_class_symlinks+0x1cf/0x240 [ 286.066403][T11949] device_add+0x475/0xb50 [ 286.066428][T11949] wiphy_register+0x1c81/0x2aa0 [ 286.066478][T11949] ? __pfx_wiphy_register+0x10/0x10 [ 286.066503][T11949] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 286.066530][T11949] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 286.066553][T11949] ieee80211_register_hw+0x3473/0x40d0 [ 286.066587][T11949] ? ieee80211_register_hw+0x1411/0x40d0 [ 286.066617][T11949] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 286.066639][T11949] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 286.066666][T11949] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 286.066688][T11949] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 286.066713][T11949] ? __hrtimer_setup+0x187/0x210 [ 286.066728][T11949] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 286.066749][T11949] mac80211_hwsim_new_radio+0x2f7a/0x5210 [ 286.066803][T11949] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 286.066825][T11949] ? trace_kmalloc+0x1f/0xd0 [ 286.066843][T11949] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 286.066865][T11949] ? kstrndup+0xbf/0x160 [ 286.066892][T11949] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 286.066924][T11949] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.066961][T11949] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 286.066993][T11949] ? rcu_is_watching+0x15/0xb0 [ 286.067015][T11949] ? __nla_parse+0x40/0x60 [ 286.067038][T11949] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 286.067067][T11949] genl_family_rcv_msg_doit+0x215/0x300 [ 286.067102][T11949] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.067143][T11949] ? bpf_lsm_capable+0x9/0x20 [ 286.067161][T11949] ? security_capable+0x7e/0x2e0 [ 286.067189][T11949] genl_rcv_msg+0x60e/0x790 [ 286.067222][T11949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.067247][T11949] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 286.067281][T11949] ? __asan_memcpy+0x40/0x70 [ 286.067302][T11949] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.067329][T11949] netlink_rcv_skb+0x205/0x470 [ 286.067349][T11949] ? __lock_acquire+0xab9/0xd20 [ 286.067376][T11949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.067405][T11949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.067449][T11949] ? down_read+0x1ad/0x2e0 [ 286.067477][T11949] genl_rcv+0x28/0x40 [ 286.067501][T11949] netlink_unicast+0x82c/0x9e0 [ 286.067532][T11949] ? __pfx_netlink_unicast+0x10/0x10 [ 286.067552][T11949] ? netlink_sendmsg+0x642/0xb30 [ 286.067569][T11949] ? skb_put+0x11b/0x210 [ 286.067594][T11949] netlink_sendmsg+0x805/0xb30 [ 286.067624][T11949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.067646][T11949] ? aa_sock_msg_perm+0xf1/0x1d0 [ 286.067667][T11949] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.067690][T11949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.067710][T11949] __sock_sendmsg+0x219/0x270 [ 286.067731][T11949] ____sys_sendmsg+0x505/0x830 [ 286.067759][T11949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.067791][T11949] ? import_iovec+0x74/0xa0 [ 286.067817][T11949] ___sys_sendmsg+0x21f/0x2a0 [ 286.067843][T11949] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.067908][T11949] ? __fget_files+0x2a/0x420 [ 286.067929][T11949] ? __fget_files+0x3a0/0x420 [ 286.067965][T11949] __x64_sys_sendmsg+0x19b/0x260 [ 286.067992][T11949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.068031][T11949] ? do_syscall_64+0xbe/0xfa0 [ 286.068058][T11949] do_syscall_64+0xfa/0xfa0 [ 286.068080][T11949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.068095][T11949] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.068111][T11949] ? clear_bhb_loop+0x60/0xb0 [ 286.068130][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.068147][T11949] RIP: 0033:0x7f9f03f8eec9 [ 286.068164][T11949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.068179][T11949] RSP: 002b:00007f9f04ed4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.068199][T11949] RAX: ffffffffffffffda RBX: 00007f9f041e5fa0 RCX: 00007f9f03f8eec9 [ 286.068212][T11949] RDX: 0000000000000310 RSI: 0000200000000040 RDI: 0000000000000005 [ 286.068224][T11949] RBP: 00007f9f04011f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.068235][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.068246][T11949] R13: 00007f9f041e6038 R14: 00007f9f041e5fa0 R15: 00007ffc77cd71f8 [ 286.068282][T11949] [ 286.600138][T11947] netlink: 'syz.2.1734': attribute type 8 has an invalid length. [ 286.613949][T11947] netlink: 'syz.2.1734': attribute type 3 has an invalid length. [ 286.732702][T11959] netlink: 'syz.4.1736': attribute type 39 has an invalid length. [ 287.093735][T11972] __nla_validate_parse: 22 callbacks suppressed [ 287.093777][T11972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1742'. [ 287.102383][T11964] netlink: 'syz.2.1740': attribute type 3 has an invalid length. [ 287.165895][T11974] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1742'. [ 287.353710][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1742'. [ 287.838374][T11979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1745'. [ 288.072360][T11992] netlink: 4856 bytes leftover after parsing attributes in process `syz.3.1750'. [ 288.091883][T11992] netlink: 153952 bytes leftover after parsing attributes in process `syz.3.1750'. [ 288.260398][T11995] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1753'. [ 288.280045][T11995] IPv6: NLM_F_CREATE should be specified when creating new route [ 288.336420][T12004] veth1_macvtap: left promiscuous mode [ 288.366388][T11998] gretap0 speed is unknown, defaulting to 1000 [ 288.381220][T12004] veth1_macvtap: entered promiscuous mode [ 288.389417][T12004] macsec0: entered promiscuous mode [ 288.396516][T12004] macsec0: entered allmulticast mode [ 288.406264][T12004] veth1_macvtap: entered allmulticast mode [ 288.525878][T12008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1754'. [ 288.871435][T12012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1758'. [ 288.943697][T12022] net_ratelimit: 124 callbacks suppressed [ 288.943720][T12022] openvswitch: netlink: Flow actions attr not present in new flow. [ 288.978860][T12024] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1761'. [ 289.291525][ T5830] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 289.750899][T12051] validate_nla: 11 callbacks suppressed [ 289.750920][T12051] netlink: 'syz.4.1770': attribute type 13 has an invalid length. [ 289.779082][T12051] netlink: 'syz.4.1770': attribute type 17 has an invalid length. [ 289.801824][T12051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.714228][T12097] IPv6: : Disabled Multicast RS [ 290.751314][T12099] netlink: 'syz.4.1784': attribute type 3 has an invalid length. [ 290.811427][T12100] netlink: 'syz.4.1784': attribute type 3 has an invalid length. [ 291.617786][T12120] netlink: zone id is out of range [ 291.635461][T12120] netlink: zone id is out of range [ 291.642003][T12120] netlink: zone id is out of range [ 291.653420][T12120] netlink: zone id is out of range [ 291.659346][T12120] netlink: zone id is out of range [ 291.664583][T12120] netlink: zone id is out of range [ 291.671996][T12120] netlink: zone id is out of range [ 291.677836][T12120] netlink: zone id is out of range [ 291.895782][T12141] netlink: 'syz.0.1796': attribute type 2 has an invalid length. [ 292.213436][T12166] netlink: 'syz.2.1801': attribute type 10 has an invalid length. [ 292.339937][T12171] __nla_validate_parse: 13 callbacks suppressed [ 292.339983][T12171] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.1801'. [ 292.379179][T12166] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 292.402649][T12171] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1801'. [ 293.441814][T12218] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1817'. [ 294.223052][T12236] ================================================================== [ 294.231177][T12236] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x677/0xcf0 [ 294.239270][T12236] Write of size 8 at addr ffff88805980b648 by task syz.0.1822/12236 [ 294.247341][T12236] [ 294.249687][T12236] CPU: 1 UID: 0 PID: 12236 Comm: syz.0.1822 Not tainted syzkaller #0 PREEMPT(full) [ 294.249706][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.249716][T12236] Call Trace: [ 294.249725][T12236] [ 294.249733][T12236] dump_stack_lvl+0x189/0x250 [ 294.249753][T12236] ? __virt_addr_valid+0x1c8/0x5c0 [ 294.249770][T12236] ? rcu_is_watching+0x15/0xb0 [ 294.249784][T12236] ? __kasan_check_byte+0x12/0x40 [ 294.249802][T12236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.249814][T12236] ? rcu_is_watching+0x15/0xb0 [ 294.249827][T12236] ? lock_release+0x4b/0x3e0 [ 294.249845][T12236] ? __virt_addr_valid+0x1c8/0x5c0 [ 294.249865][T12236] ? __virt_addr_valid+0x4a5/0x5c0 [ 294.249880][T12236] print_report+0xca/0x240 [ 294.249895][T12236] ? __bpf_get_stackid+0x677/0xcf0 [ 294.249910][T12236] kasan_report+0x118/0x150 [ 294.249927][T12236] ? __bpf_get_stackid+0x677/0xcf0 [ 294.249943][T12236] ? netlink_sendmsg+0x805/0xb30 [ 294.249960][T12236] __bpf_get_stackid+0x677/0xcf0 [ 294.249981][T12236] ? bpf_prog_4f1a55a5b93b961c+0x2a/0x32 [ 294.249994][T12236] bpf_get_stackid_raw_tp+0x196/0x210 [ 294.250012][T12236] bpf_prog_4f1a55a5b93b961c+0x2a/0x32 [ 294.250023][T12236] bpf_trace_run4+0x3ef/0x4a0 [ 294.250040][T12236] ? bpf_trace_run4+0x19c/0x4a0 [ 294.250056][T12236] ? __pfx_bpf_trace_run4+0x10/0x10 [ 294.250075][T12236] ? __pfx_get_page_from_freelist+0x10/0x10 [ 294.250095][T12236] ? prepare_alloc_pages+0x213/0x610 [ 294.250113][T12236] trace_mm_page_alloc+0x129/0x150 [ 294.250133][T12236] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 294.250152][T12236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.250172][T12236] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 294.250193][T12236] alloc_pages_bulk_noprof+0x560/0x710 [ 294.250213][T12236] ? alloc_pages_noprof+0xbe/0x190 [ 294.250231][T12236] kasan_populate_vmalloc+0xd1/0x270 [ 294.250247][T12236] ? do_raw_spin_unlock+0x122/0x240 [ 294.250268][T12236] alloc_vmap_area+0xd7a/0x14c0 [ 294.250288][T12236] ? __pfx_alloc_vmap_area+0x10/0x10 [ 294.250305][T12236] ? __kasan_kmalloc+0x93/0xb0 [ 294.250321][T12236] ? __get_vm_area_node+0x13f/0x300 [ 294.250336][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 294.250349][T12236] __get_vm_area_node+0x1f8/0x300 [ 294.250366][T12236] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 294.250384][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 294.250396][T12236] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 294.250419][T12236] ? policy_nodemask+0x27c/0x720 [ 294.250445][T12236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.250461][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 294.250475][T12236] ? rcu_is_watching+0x15/0xb0 [ 294.250488][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 294.250501][T12236] __kvmalloc_node_noprof+0x674/0x910 [ 294.250520][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 294.250532][T12236] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 294.250548][T12236] ? hash_ipmac_create+0x2fe/0xfe0 [ 294.250562][T12236] hash_ipmac_create+0x358/0xfe0 [ 294.250578][T12236] ? __nla_parse+0x40/0x60 [ 294.250598][T12236] ? __pfx_hash_ipmac_create+0x10/0x10 [ 294.250612][T12236] ip_set_create+0xa97/0x1940 [ 294.250632][T12236] ? ip_set_create+0x4a2/0x1940 [ 294.250650][T12236] ? __pfx_ip_set_create+0x10/0x10 [ 294.250677][T12236] nfnetlink_rcv_msg+0xb4a/0x1130 [ 294.250691][T12236] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 294.250715][T12236] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 294.250739][T12236] ? irqentry_exit+0x74/0x90 [ 294.250772][T12236] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 294.250798][T12236] netlink_rcv_skb+0x205/0x470 [ 294.250814][T12236] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 294.250829][T12236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.250853][T12236] ? bpf_lsm_capable+0x9/0x20 [ 294.250874][T12236] ? security_capable+0x7e/0x2e0 [ 294.250896][T12236] nfnetlink_rcv+0x282/0x2590 [ 294.250911][T12236] ? __dev_queue_xmit+0x27b/0x3b50 [ 294.250932][T12236] ? __dev_queue_xmit+0x1d79/0x3b50 [ 294.250949][T12236] ? kasan_save_track+0x3e/0x80 [ 294.250968][T12236] ? __kasan_slab_alloc+0x6c/0x80 [ 294.250987][T12236] ? __dev_queue_xmit+0x27b/0x3b50 [ 294.251009][T12236] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 294.251021][T12236] ? __pfx___dev_queue_xmit+0x10/0x10 [ 294.251047][T12236] ? ref_tracker_free+0x63a/0x7d0 [ 294.251061][T12236] ? __asan_memcpy+0x40/0x70 [ 294.251074][T12236] ? __pfx_ref_tracker_free+0x10/0x10 [ 294.251086][T12236] ? __skb_clone+0x63/0x7a0 [ 294.251104][T12236] ? __skb_clone+0x483/0x7a0 [ 294.251122][T12236] ? skb_clone+0x246/0x3a0 [ 294.251139][T12236] ? __netlink_deliver_tap+0x807/0x850 [ 294.251154][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.251171][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.251188][T12236] netlink_unicast+0x82c/0x9e0 [ 294.251205][T12236] ? __pfx_netlink_unicast+0x10/0x10 [ 294.251219][T12236] ? netlink_sendmsg+0x642/0xb30 [ 294.251233][T12236] ? skb_put+0x11b/0x210 [ 294.251249][T12236] netlink_sendmsg+0x805/0xb30 [ 294.251268][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.251284][T12236] ? aa_sock_msg_perm+0xf1/0x1d0 [ 294.251298][T12236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 294.251315][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.251330][T12236] __sock_sendmsg+0x219/0x270 [ 294.251345][T12236] ____sys_sendmsg+0x505/0x830 [ 294.251370][T12236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.251389][T12236] ? import_iovec+0x74/0xa0 [ 294.251407][T12236] ___sys_sendmsg+0x21f/0x2a0 [ 294.251429][T12236] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.251460][T12236] ? __fget_files+0x2a/0x420 [ 294.251476][T12236] ? __fget_files+0x3a0/0x420 [ 294.251495][T12236] __x64_sys_sendmsg+0x19b/0x260 [ 294.251512][T12236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 294.251535][T12236] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 294.251561][T12236] ? do_syscall_64+0xbe/0xfa0 [ 294.251583][T12236] do_syscall_64+0xfa/0xfa0 [ 294.251603][T12236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.251618][T12236] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.251632][T12236] ? clear_bhb_loop+0x60/0xb0 [ 294.251652][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.251672][T12236] RIP: 0033:0x7f9f03f8eec9 [ 294.251686][T12236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.251699][T12236] RSP: 002b:00007f9f04ed4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.251716][T12236] RAX: ffffffffffffffda RBX: 00007f9f041e5fa0 RCX: 00007f9f03f8eec9 [ 294.251727][T12236] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 294.251737][T12236] RBP: 00007f9f04011f91 R08: 0000000000000000 R09: 0000000000000000 [ 294.251746][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.251754][T12236] R13: 00007f9f041e6038 R14: 00007f9f041e5fa0 R15: 00007ffc77cd71f8 [ 294.251771][T12236] [ 294.251777][T12236] [ 294.915089][T12236] Allocated by task 12236: [ 294.919494][T12236] kasan_save_track+0x3e/0x80 [ 294.924297][T12236] __kasan_kmalloc+0x93/0xb0 [ 294.928887][T12236] __kmalloc_node_noprof+0x56d/0x800 [ 294.934164][T12236] bpf_map_area_alloc+0x64/0x180 [ 294.939093][T12236] prealloc_elems_and_freelist+0x86/0x1d0 [ 294.944891][T12236] stack_map_alloc+0x33f/0x4c0 [ 294.949663][T12236] map_create+0xaa3/0x1640 [ 294.954082][T12236] __sys_bpf+0x5f0/0x860 [ 294.958314][T12236] __x64_sys_bpf+0x7c/0x90 [ 294.962722][T12236] do_syscall_64+0xfa/0xfa0 [ 294.967303][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.973186][T12236] [ 294.975501][T12236] The buggy address belongs to the object at ffff88805980b000 [ 294.975501][T12236] which belongs to the cache kmalloc-cg-2k of size 2048 [ 294.989982][T12236] The buggy address is located 8 bytes to the right of [ 294.989982][T12236] allocated 1600-byte region [ffff88805980b000, ffff88805980b640) [ 295.004730][T12236] [ 295.007057][T12236] The buggy address belongs to the physical page: [ 295.013468][T12236] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59808 [ 295.022234][T12236] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 295.030741][T12236] memcg:ffff88802c903401 [ 295.035079][T12236] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 295.042729][T12236] page_type: f5(slab) [ 295.046742][T12236] raw: 00fff00000000040 ffff88813ffb03c0 dead000000000100 dead000000000122 [ 295.055424][T12236] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88802c903401 [ 295.064028][T12236] head: 00fff00000000040 ffff88813ffb03c0 dead000000000100 dead000000000122 [ 295.073134][T12236] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88802c903401 [ 295.081795][T12236] head: 00fff00000000003 ffffea0001660201 00000000ffffffff 00000000ffffffff [ 295.090546][T12236] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 295.099287][T12236] page dumped because: kasan: bad access detected [ 295.106301][T12236] page_owner tracks the page as allocated [ 295.112001][T12236] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 8174, tgid 8172 (syz.2.630), ts 171803359487, free_ts 171800216408 [ 295.135178][T12236] post_alloc_hook+0x240/0x2a0 [ 295.140038][T12236] get_page_from_freelist+0x2365/0x2440 [ 295.145576][T12236] __alloc_frozen_pages_noprof+0x181/0x370 [ 295.151371][T12236] alloc_pages_mpol+0x232/0x4a0 [ 295.156210][T12236] allocate_slab+0x96/0x3a0 [ 295.160697][T12236] ___slab_alloc+0xe94/0x1920 [ 295.165360][T12236] __slab_alloc+0x65/0x100 [ 295.169766][T12236] __kmalloc_cache_noprof+0x411/0x6f0 [ 295.175128][T12236] bpf_prog_alloc_no_stats+0xdb/0x4d0 [ 295.180492][T12236] bpf_prog_alloc+0x3c/0x1a0 [ 295.185075][T12236] bpf_prog_load+0x735/0x19e0 [ 295.189738][T12236] __sys_bpf+0x507/0x860 [ 295.194055][T12236] __x64_sys_bpf+0x7c/0x90 [ 295.198456][T12236] do_syscall_64+0xfa/0xfa0 [ 295.202950][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.208926][T12236] page last free pid 8174 tgid 8172 stack trace: [ 295.215238][T12236] __free_frozen_pages+0xbc4/0xd30 [ 295.220428][T12236] free_large_kmalloc+0x13a/0x1f0 [ 295.225447][T12236] bpf_check+0x134f5/0x1d720 [ 295.230040][T12236] bpf_prog_load+0x13ba/0x19e0 [ 295.234984][T12236] __sys_bpf+0x507/0x860 [ 295.239268][T12236] __x64_sys_bpf+0x7c/0x90 [ 295.243686][T12236] do_syscall_64+0xfa/0xfa0 [ 295.248900][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.254798][T12236] [ 295.257107][T12236] Memory state around the buggy address: [ 295.262729][T12236] ffff88805980b500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 295.270866][T12236] ffff88805980b580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 295.278914][T12236] >ffff88805980b600: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 295.286957][T12236] ^ [ 295.293355][T12236] ffff88805980b680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 295.301430][T12236] ffff88805980b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 295.309486][T12236] ================================================================== [ 295.322019][T12236] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 295.329320][T12236] CPU: 1 UID: 0 PID: 12236 Comm: syz.0.1822 Not tainted syzkaller #0 PREEMPT(full) [ 295.338701][T12236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.348771][T12236] Call Trace: [ 295.352063][T12236] [ 295.355022][T12236] dump_stack_lvl+0x99/0x250 [ 295.359616][T12236] ? __asan_memcpy+0x40/0x70 [ 295.364211][T12236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.369418][T12236] ? __pfx__printk+0x10/0x10 [ 295.374021][T12236] vpanic+0x237/0x6d0 [ 295.378028][T12236] ? __pfx_vpanic+0x10/0x10 [ 295.382528][T12236] ? irqentry_exit+0x74/0x90 [ 295.387198][T12236] panic+0xb9/0xc0 [ 295.390910][T12236] ? __pfx_panic+0x10/0x10 [ 295.395316][T12236] ? __bpf_get_stackid+0x677/0xcf0 [ 295.400447][T12236] ? __bpf_get_stackid+0x677/0xcf0 [ 295.405652][T12236] check_panic_on_warn+0x89/0xb0 [ 295.410600][T12236] ? __bpf_get_stackid+0x677/0xcf0 [ 295.415805][T12236] end_report+0x78/0x160 [ 295.420042][T12236] kasan_report+0x129/0x150 [ 295.424535][T12236] ? __bpf_get_stackid+0x677/0xcf0 [ 295.429674][T12236] ? netlink_sendmsg+0x805/0xb30 [ 295.434719][T12236] __bpf_get_stackid+0x677/0xcf0 [ 295.439681][T12236] ? bpf_prog_4f1a55a5b93b961c+0x2a/0x32 [ 295.445310][T12236] bpf_get_stackid_raw_tp+0x196/0x210 [ 295.450696][T12236] bpf_prog_4f1a55a5b93b961c+0x2a/0x32 [ 295.456159][T12236] bpf_trace_run4+0x3ef/0x4a0 [ 295.460872][T12236] ? bpf_trace_run4+0x19c/0x4a0 [ 295.465725][T12236] ? __pfx_bpf_trace_run4+0x10/0x10 [ 295.471023][T12236] ? __pfx_get_page_from_freelist+0x10/0x10 [ 295.476996][T12236] ? prepare_alloc_pages+0x213/0x610 [ 295.482361][T12236] trace_mm_page_alloc+0x129/0x150 [ 295.487463][T12236] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 295.493263][T12236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 295.499584][T12236] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 295.506258][T12236] alloc_pages_bulk_noprof+0x560/0x710 [ 295.511713][T12236] ? alloc_pages_noprof+0xbe/0x190 [ 295.516912][T12236] kasan_populate_vmalloc+0xd1/0x270 [ 295.522185][T12236] ? do_raw_spin_unlock+0x122/0x240 [ 295.527380][T12236] alloc_vmap_area+0xd7a/0x14c0 [ 295.532259][T12236] ? __pfx_alloc_vmap_area+0x10/0x10 [ 295.537547][T12236] ? __kasan_kmalloc+0x93/0xb0 [ 295.542316][T12236] ? __get_vm_area_node+0x13f/0x300 [ 295.547512][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 295.552611][T12236] __get_vm_area_node+0x1f8/0x300 [ 295.557643][T12236] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 295.563550][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 295.568651][T12236] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 295.574545][T12236] ? policy_nodemask+0x27c/0x720 [ 295.579486][T12236] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.585900][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 295.591019][T12236] ? rcu_is_watching+0x15/0xb0 [ 295.595823][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 295.600924][T12236] __kvmalloc_node_noprof+0x674/0x910 [ 295.606290][T12236] ? hash_ipmac_create+0x358/0xfe0 [ 295.611389][T12236] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 295.616936][T12236] ? hash_ipmac_create+0x2fe/0xfe0 [ 295.622049][T12236] hash_ipmac_create+0x358/0xfe0 [ 295.626983][T12236] ? __nla_parse+0x40/0x60 [ 295.631392][T12236] ? __pfx_hash_ipmac_create+0x10/0x10 [ 295.636839][T12236] ip_set_create+0xa97/0x1940 [ 295.641519][T12236] ? ip_set_create+0x4a2/0x1940 [ 295.646357][T12236] ? __pfx_ip_set_create+0x10/0x10 [ 295.651462][T12236] nfnetlink_rcv_msg+0xb4a/0x1130 [ 295.656482][T12236] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 295.661674][T12236] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 295.667127][T12236] ? irqentry_exit+0x74/0x90 [ 295.671795][T12236] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 295.678383][T12236] netlink_rcv_skb+0x205/0x470 [ 295.683137][T12236] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 295.688626][T12236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 295.693905][T12236] ? bpf_lsm_capable+0x9/0x20 [ 295.698571][T12236] ? security_capable+0x7e/0x2e0 [ 295.703505][T12236] nfnetlink_rcv+0x282/0x2590 [ 295.708173][T12236] ? __dev_queue_xmit+0x27b/0x3b50 [ 295.713283][T12236] ? __dev_queue_xmit+0x1d79/0x3b50 [ 295.718480][T12236] ? kasan_save_track+0x3e/0x80 [ 295.723409][T12236] ? __kasan_slab_alloc+0x6c/0x80 [ 295.728426][T12236] ? __dev_queue_xmit+0x27b/0x3b50 [ 295.733539][T12236] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 295.738672][T12236] ? __pfx___dev_queue_xmit+0x10/0x10 [ 295.744078][T12236] ? ref_tracker_free+0x63a/0x7d0 [ 295.749092][T12236] ? __asan_memcpy+0x40/0x70 [ 295.753763][T12236] ? __pfx_ref_tracker_free+0x10/0x10 [ 295.759123][T12236] ? __skb_clone+0x63/0x7a0 [ 295.763623][T12236] ? __skb_clone+0x483/0x7a0 [ 295.768383][T12236] ? skb_clone+0x246/0x3a0 [ 295.772793][T12236] ? __netlink_deliver_tap+0x807/0x850 [ 295.778341][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.783532][T12236] ? netlink_deliver_tap+0x2e/0x1b0 [ 295.788957][T12236] netlink_unicast+0x82c/0x9e0 [ 295.793715][T12236] ? __pfx_netlink_unicast+0x10/0x10 [ 295.798992][T12236] ? netlink_sendmsg+0x642/0xb30 [ 295.803929][T12236] ? skb_put+0x11b/0x210 [ 295.808165][T12236] netlink_sendmsg+0x805/0xb30 [ 295.812929][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.818209][T12236] ? aa_sock_msg_perm+0xf1/0x1d0 [ 295.823146][T12236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 295.828426][T12236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 295.833716][T12236] __sock_sendmsg+0x219/0x270 [ 295.838409][T12236] ____sys_sendmsg+0x505/0x830 [ 295.843259][T12236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 295.848534][T12236] ? import_iovec+0x74/0xa0 [ 295.853026][T12236] ___sys_sendmsg+0x21f/0x2a0 [ 295.857781][T12236] ? __pfx____sys_sendmsg+0x10/0x10 [ 295.862985][T12236] ? __fget_files+0x2a/0x420 [ 295.867565][T12236] ? __fget_files+0x3a0/0x420 [ 295.872242][T12236] __x64_sys_sendmsg+0x19b/0x260 [ 295.877179][T12236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 295.882649][T12236] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 295.889250][T12236] ? do_syscall_64+0xbe/0xfa0 [ 295.893921][T12236] do_syscall_64+0xfa/0xfa0 [ 295.898517][T12236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.904641][T12236] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.910806][T12236] ? clear_bhb_loop+0x60/0xb0 [ 295.915655][T12236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.921575][T12236] RIP: 0033:0x7f9f03f8eec9 [ 295.926075][T12236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.945849][T12236] RSP: 002b:00007f9f04ed4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.954255][T12236] RAX: ffffffffffffffda RBX: 00007f9f041e5fa0 RCX: 00007f9f03f8eec9 [ 295.962225][T12236] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 295.970279][T12236] RBP: 00007f9f04011f91 R08: 0000000000000000 R09: 0000000000000000 [ 295.978244][T12236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.986206][T12236] R13: 00007f9f041e6038 R14: 00007f9f041e5fa0 R15: 00007ffc77cd71f8 [ 295.994187][T12236] [ 295.997522][T12236] Kernel Offset: disabled [ 296.001841][T12236] Rebooting in 86400 seconds..