last executing test programs: 5m37.370883098s ago: executing program 32 (id=2985): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000000c0), 0x66) sendmsg$kcm(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000000)="d29ebf4f05db1da6bf18ff62338e81bca04fa95fe4b85596b0a22c2ecbb8968e6c51a7b8c18bef54625f3139c104209872421c13e939051efa32333f6db32f255ef58d4af09b2cdf5b9549e01ab7b739492d5056736957a7aeb159718193942c3d62e2298788ed6d265078b0763030fc330dded4f18af4d84eb0781c4d2d0db107b4586fd28d8ebd1dab735ca783a592c56d71270cea80edd1bef133c6220d0485b133fb89c7dac18d9f440e86b61526400d1efda32d0f2528ce", 0xba}, {&(0x7f0000000100)="1cb34b332d83a45504912c7435de000d537c6e2ffcd48cb85e5da9cce937ceadc301b08ca74b080d5900e144fecb2c429ec074825df4b930eef0c1b8427166ed74820b879dc90c52ed81735961a698404400d4457b1965d57e307b9334edbb", 0x5f}, {&(0x7f0000000180)="ecdbafb32b5b79", 0x7}, {&(0x7f0000000240)="65f6f3703315bfcad4e73ed88b069b8d921107ef7163811ec95e20118a61eb4e5e261eecad1b6d6fa8ed2155b3a5179f0265b1930b903ffc6b27632675775059584effee6463d12525cb462209c6574aa784481e6262adb9ee34ddf869def715256aed", 0x63}, {&(0x7f0000000340)="3c3e77b85f3e683b8b4dccdfe862a03ed2f7c980014a5eaffe17be68ea53844c8797f125487aa0fc404346028ea62c2f6b604ea8c0", 0x35}, {&(0x7f0000000380)="429095623cb618bbba975acd0d58d8bd1bd95f4a18e2c7183b567ad304c8697eb71a9af45c97b4f9cf3f8e500dbe6ec9224fb112c4fccce58cf51b2f07bb596f0ed4f24051293cb35813ab09b8", 0x4d}, {&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="20637be7dece41b925bc50258f10eb70546dedc600201ebdc605335303b440838a9af5d765e5cf8605433dfc7daddbbe757c356c4aa4789935c9239d99f6e7f3f501d5fb61f8b92dfd0c87161a553f293ec35e1d54d483ea12ee7479f05eaf28cb318ce8f3f79a8d16cb3322949a62ad76b996b82254c03deee635cd92b3aeea39d0ab22a9a0ed882915f70ebad9929bd2654afc01cda49e432d66489602eac66250f879d70acf58bf90115b6130", 0xae}, {0x0}], 0x9, &(0x7f0000001ac0)=[{0xb0, 0x118, 0x83, "3cdcf35bf0edcefc75b901434d10770723cb6cd80b6e40fa4d6d8a5f84adc75986ed4c338fa84b89ecea782103f1bc037c392b0a1748f5aa128300a85041827cc933a21a6ce70fead2197533d7e0d5421dd11cf9025e335bd649bf8df1e51d28931f0634e4f9c7b9db30f29120536e7866ed5e75b4dbae700a555ae68123afa98afce2b8c64a0d87c3f0cc8a6b864fbd869040a90894bb10e51327cf3b1c9295"}], 0xb0}, 0x4) close(0x3) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000790040000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0xa}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x28, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xe8, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000050000005fa81000f8ffffffc55c9b3ad8075489c7544cdc711288", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000201a0c00100000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x5, 0x51, &(0x7f0000000200)=""/81, 0x41100, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x1, 0x5, 0x5, 0xb}], 0x10, 0x2}, 0x94) 3m36.590871706s ago: executing program 33 (id=4060): socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYRES32=0x0], 0x50) r1 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x84102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) recvmsg$kcm(r1, &(0x7f0000000a40)={&(0x7f0000000200)=@xdp, 0x80, 0x0, 0x0, &(0x7f00000009c0)=""/84, 0x54}, 0x2) r2 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x55) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000250009012abd7000f9ffffff9200000f0800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) close(r5) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, 0x0, 0x200a4800) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a0000000500000002000000071000000000000068daf5b9a7150a3d", @ANYRES32=0x1, @ANYBLOB="00000100"/15, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) recvmsg$kcm(r7, 0x0, 0x120) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m18.031559232s ago: executing program 34 (id=4186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000027c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0b00000009000000030000004f0c000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000004000000000000000000000000000000000000055a0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r1}, 0x38) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x8, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x4, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000340)=""/211, &(0x7f0000000180), &(0x7f0000000440), 0x3, r1}, 0x38) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRES8=r1, @ANYRESHEX=r0], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000001000000b708000000000000dbaaf8fff1000000b5080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008000000850000006a0000000100000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) fstat(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000a80)={r0}, 0x8) recvmsg$unix(r12, &(0x7f0000000f00)={&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b40)=""/60, 0x3c}, {&(0x7f0000000b80)=""/117, 0x75}, {&(0x7f0000000d80)=""/211, 0xd3}], 0x3, &(0x7f0000000ec0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x12000) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000a40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb0, 0x0, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_LABELS_MASK={0x1c, 0x17, [0x9, 0xffffffff, 0x7, 0x3, 0x5, 0xff]}, @CTA_TUPLE_MASTER={0x80, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0xc044) fstat(r5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000440), 0x3000000, &(0x7f00000007c0)={[{@uid={'uid', 0x3d, r7}}, {@uid={'uid', 0x3d, 0xee00}}, {@uid={'uid', 0x3d, r8}}, {@gid={'gid', 0x3d, r9}}, {@gid={'gid', 0x3d, r10}}, {@uid={'uid', 0x3d, r11}}, {@gid={'gid', 0x3d, r14}}], [{@smackfsdef={'smackfsdef', 0x3d, '\'&'}}, {@obj_type={'obj_type', 0x3d, '\x00'}}]}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r6}, 0xc) 2m51.351866665s ago: executing program 35 (id=4322): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x14, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRESOCT], 0x158}, 0x1, 0x0, 0x0, 0x11}, 0x4c080) 1m50.698904198s ago: executing program 5 (id=4523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x40000000000, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc) 1m49.273037042s ago: executing program 5 (id=4530): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238d1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) close(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1m48.797773217s ago: executing program 36 (id=4530): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x238d1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) close(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$tipc(0x1e, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 1m41.145855737s ago: executing program 8 (id=4578): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003b0009002bbd7000fbdbdf250200000008000180de"], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4004014) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0xffff}, {{}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x6, 0x20000000000001af, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0xcb}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffda4, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xe, 0xd}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRESDEC], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044014) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r8) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b011002ff00040004"], 0x28}, 0x4004004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="c3aa10fef100000071101a00000000009500000000000000e1f663ed881f6787fd1e27c18724275dc7364e7d13988301ab06e4b2035c52981b4690eca75756e083af2876caaea635d1dc144e7503ce4894c808686f3da80b32d90f28b7832ab8be12164bae51bbf3612f07a80d24697b56eff5fa098657309d500fd1"], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x48}, 0x94) 1m40.064901114s ago: executing program 8 (id=4582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x34, 0x6, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, r1, 0x2, 0x3, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000500), 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x14, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}}, 0x14}}, 0x20048844) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x48000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x20000000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x1, 0x8}, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xff00) recvmsg$kcm(r5, &(0x7f00000012c0)={&(0x7f0000000340)=@ax25={{0x3, @rose}, [@null, @remote, @bcast, @default, @rose, @netrom, @bcast, @netrom]}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000a40)=""/218, 0xda}, {&(0x7f0000000b40)=""/134, 0x86}, {&(0x7f0000000c00)=""/60, 0x3c}, {&(0x7f0000000c40)=""/213, 0xd5}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000e00)=""/98, 0x62}, {&(0x7f0000000e80)=""/161, 0xa1}], 0x9, &(0x7f0000001280)=""/18, 0x12}, 0x20) 1m39.481716629s ago: executing program 37 (id=4584): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, 0x0, 0x24004850) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x2db, &(0x7f0000000680)=ANY=[@ANYRESOCT=r1, @ANYRES64=0x0, @ANYBLOB="5dcc839b9807ccc00438c9dfee394ec53bad8d8c3adc8a238552b8cf008492daf0cf769d0f688ef46f3cfa9a9f6d01f91a32c70b4f8197f9b98e4d0dc9e57d27fcce22f6ef9828ee9c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x485, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x60000000000) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x142, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) 1m39.036854661s ago: executing program 8 (id=4587): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}, 0x0, 0x0, 0x2}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010"], 0x7c}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0x3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="c80100002500090122bd7008f9ffffff0200000024003d80200022801c007c8015004f80eba1f4040003800400a580ac0c1ec276390000000800030047000000880169"], 0x1c8}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x94020, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 1m38.702215173s ago: executing program 8 (id=4589): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xc, 0x9, 0x9, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x8}, 0x10d830, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m38.508118324s ago: executing program 8 (id=4590): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x40305839, 0x0) 1m38.245851585s ago: executing program 8 (id=4591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe40, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m37.661380113s ago: executing program 38 (id=4591): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0xe40, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m27.19034346s ago: executing program 2 (id=4617): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000004c0)={0x4, 0x80, 0x6, 0x6, 0x10, 0x9, 0x0, 0x1ff, 0x10400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000480), 0x4}, 0x130, 0xffffffffffff7fff, 0x26f10001, 0x9, 0x7, 0x2, 0x6, 0x0, 0xa, 0x0, 0x3}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2602) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f00000004c0)=ANY=[], 0xfdef) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000140)=r8) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001700)={0x30, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x24040800) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x80, 0x0}, 0x0) 1m26.163393645s ago: executing program 2 (id=4619): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x1000000}, 0x20) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) socket$kcm(0xa, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xdaaf}, 0x929, 0x0, 0x0, 0xe, 0x2, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500002000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) close(r2) r3 = gettid() perf_event_open(0x0, r3, 0x7, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m25.900658751s ago: executing program 2 (id=4620): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0x26, 0x1, 0x6, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) getpid() sendmsg$nl_netfilter(r2, &(0x7f0000001bc0)={&(0x7f00000001c0), 0xc, 0x0}, 0x81) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b", 0x4e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) 1m25.397647732s ago: executing program 2 (id=4621): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xc, 0x9, 0x9, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x8}, 0x10d830, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m25.199914701s ago: executing program 2 (id=4623): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r2, 0xc040ff0b, 0x1) 1m24.785756523s ago: executing program 2 (id=4625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) 1m24.142521745s ago: executing program 39 (id=4625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x28, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) 1m15.645656954s ago: executing program 9 (id=4658): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001800050027bd70d400fedbdf54"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) close(r3) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xe02a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r6) 1m15.181583897s ago: executing program 9 (id=4659): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x11, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000711008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 1m14.998363463s ago: executing program 9 (id=4660): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x200a4800) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2cbf000b7030000008900000085a30031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4}, 0x90) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0x10, 0x2, 0x7, 0x2, 0x0, 0x70bd27, 0x25dfdbfd}, 0x10}}, 0x2000c841) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m14.284730177s ago: executing program 9 (id=4662): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x10000, 0xf}, 0xa38, 0x0, 0x0, 0x7, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m14.15601482s ago: executing program 9 (id=4663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1m13.689298836s ago: executing program 9 (id=4665): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000150000000c0000002bc50a6d6844f23c000000006100"], 0x0, 0x2b, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c27ee14abeb23c45e38c07a0df8f784b5b6b7ff97f0383ce2fc2269146c98ee0b7c50095ce94847ea0b8ef4f506328e8d96c6c9a8a4792334937fd8070183d59b511ee5919fba845ce40a40348", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x48) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0xffffff7e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xd6f, '\x00', 0x0, r5, 0x2, 0x5, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x111812, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000280)={0x2, 0x80, 0x40, 0xe, 0x1, 0x23, 0x0, 0xfffffffffffffff8, 0x200e, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3, 0x81}, 0x1004, 0x0, 0x1ff, 0x2, 0x800, 0xfffffffb, 0x9, 0x0, 0xff, 0x0, 0x5}) 1m13.13871474s ago: executing program 40 (id=4665): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000150000000c0000002bc50a6d6844f23c000000006100"], 0x0, 0x2b, 0x0, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c27ee14abeb23c45e38c07a0df8f784b5b6b7ff97f0383ce2fc2269146c98ee0b7c50095ce94847ea0b8ef4f506328e8d96c6c9a8a4792334937fd8070183d59b511ee5919fba845ce40a40348", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000100"/28], 0x48) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0xffffff7e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xd6f, '\x00', 0x0, r5, 0x2, 0x5, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x111812, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x1000b0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000280)={0x2, 0x80, 0x40, 0xe, 0x1, 0x23, 0x0, 0xfffffffffffffff8, 0x200e, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3, 0x81}, 0x1004, 0x0, 0x1ff, 0x2, 0x800, 0xfffffffb, 0x9, 0x0, 0xff, 0x0, 0x5}) 1m10.842082385s ago: executing program 3 (id=4680): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0xd, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) close(0xffffffffffffffff) socket$kcm(0x2, 0x5, 0x84) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140800002e000701fcffffff04000300017c0000308c72e20bb9a781fc755b3808ae08568c5f2738d460dc9ba923b40c9c2b00926a66ebda603539686ffb539dda0d95a64a2375397e52d9"], 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0x2400c080) close(r6) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305828, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076001f03000000000000000055dd280939c1e9940afc6e7c000000000005000d80760000003fb6c0706c30d8a10402f217a3d6639b8c324ce087d901ab0d5650291332180564acc15ca8e1cbe335646677d83dc95a866e8938b21d57eb288369d534a27b59e2957da8d3bd184b2bc47ec9bbc8738fdc149c9897144031b5df810803f4c15de0a0ecf76d072559a02476b197e5b100d4d5050b47bf1c349368552cd30f1bbf8573619478952627f9e5b2b8946ffdf22fc1e222a167000000000000"], 0x20}], 0x1}, 0x0) openat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, 0x0, 0x100002, 0x0) 1m10.477544784s ago: executing program 3 (id=4683): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0xfffffffd, 0x1, 0x4, 0x0, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xb, 0x9, 0x6, 0x2}, {0x1000, 0x8, 0x1, 0x5}, {0x3ff, 0x8, 0xe6, 0x3}, {0x1, 0x7c, 0x8, 0x4}]}) 1m9.861589524s ago: executing program 3 (id=4684): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.701130745s ago: executing program 3 (id=4687): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m9.553767508s ago: executing program 3 (id=4688): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0x80) 1m9.065528969s ago: executing program 3 (id=4692): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x40, 0x6, 0x9, 0x0, 0x3, 0x17270, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000040)}, 0x24c8, 0x100000000, 0xffff8000, 0x1, 0x6, 0xb, 0xf741, 0x0, 0xb9, 0x0, 0x80000000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000070000000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m8.65072416s ago: executing program 41 (id=4692): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x40, 0x6, 0x9, 0x0, 0x3, 0x17270, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000040)}, 0x24c8, 0x100000000, 0xffff8000, 0x1, 0x6, 0xb, 0xf741, 0x0, 0xb9, 0x0, 0x80000000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0b000000070000000100", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 51.898390076s ago: executing program 5 (id=4693): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/4089, 0xff9}], 0x1}, 0x2000) 50.90280741s ago: executing program 5 (id=4767): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 48.089076774s ago: executing program 5 (id=4771): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x402000a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) setsockopt$sock_attach_bpf(r1, 0x107, 0x8, 0x0, 0x4a) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000009c0)=@generic={&(0x7f0000000bc0)='./file0\x00', r2}, 0x18) socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000300000000000000000000008500000087000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x36, 0x0, &(0x7f0000000240)="e027429b49dcd4ff9782762f86dd21e91717c73f9ae529df2043ca50862bc9797b8fff68c17bd529bf996f5e3acc9c39914d6afb75cd", 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f00000002c0), 0x3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x4000884) socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x9, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000800)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000050000000300000005000093090000000200000005000000020000000d00000000100000050000000e00000005355175b07e22e3734ea00000000f00000001000000ff0100ffff00000000000000000307000000030000000400000006000000020000000000001201000000005f2e300000"], &(0x7f00000008c0)=""/157, 0x89, 0x9d, 0x0, 0x3, 0x10000}, 0x28) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000009b207662861b6d1f4a1dd8bfd5ee05b6f52ad1778d4081250d073b03936ad4c11210b53414b63ff89d132ec3cfce4ffaf100b5976afb24704b8ac19af067c685ac8c7b264ef9e94eab44ef811a9428da16582a20d1504ce54bc2dbab4a0fce8286f480487a462a4d662c2f99d3ae1d56fa226ccb", @ANYRES32=r5, @ANYBLOB='\t\x00'/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="01000000020000000200"/28], 0x50) r9 = socket$kcm(0x29, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000140)={r1}) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="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"], 0x50) 45.588328538s ago: executing program 5 (id=4784): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="0c0000800500010098"], 0x2c}], 0x1}, 0x0) (fail_nth: 1) 45.218958416s ago: executing program 42 (id=4784): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0xee00, @ANYBLOB="0c0000800500010098"], 0x2c}], 0x1}, 0x0) (fail_nth: 1) 9.392980762s ago: executing program 1 (id=4972): socketpair(0x18, 0x1, 0xf2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008080}, 0x14) getpid() r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000d080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400"/20], 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 9.148660109s ago: executing program 1 (id=4976): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4e6}, 0x114244, 0x0, 0xafe8, 0x9, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x48, &(0x7f0000000180)=r4, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000004700245cfcff00"/20], 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0x400c800) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8, 0x0, 0x2a}]}}, 0x0, 0x2a, 0x0, 0x3}, 0x28) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x800) 9.072567709s ago: executing program 6 (id=4978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000000)={0x38, 0x4, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x10004040) 8.828923325s ago: executing program 6 (id=4981): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001480)=@delchain={0xa84, 0x65, 0x300, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x7}, {0x5, 0xd}, {0xe, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x56a}, @TCA_RATE={0x6, 0x5, {0x5, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0xa10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x1, 0xba, 0x9, 0x3}, {0xb01d, 0x10, 0xe, 0xffffffff}, {0x3, 0x3, 0x7, 0x1}, {0x2, 0x8, 0x6, 0x101}, {0x61, 0x2, 0x9, 0x1}, {0x100, 0x5, 0x9, 0x8}, {0x3, 0x6, 0x1, 0x9}]}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_POLICE={0x454, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7fff}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x33, 0xfffffff9, 0x8, 0x24d, 0x3, 0x1, 0x2, 0x3, 0xfffe, 0x2, 0x8, 0x6, 0xff, 0x5000, 0xce3, 0x80, 0x3ff, 0xfffffff8, 0x0, 0x103a, 0x8000, 0x8001, 0x9, 0xc, 0xfffff970, 0x3, 0x9, 0x6, 0x4, 0x4, 0x4, 0x7fffffff, 0x3, 0x2, 0x1, 0x4, 0x80000001, 0x9, 0x3, 0x88, 0x2, 0xffffffff, 0x99e, 0x1, 0x0, 0xc00, 0xffff0001, 0xfff, 0xc6b, 0x4, 0x200, 0x3, 0x6, 0x8, 0x4, 0x4, 0x8de, 0x3, 0xff1, 0x3, 0x9, 0xd2, 0x4, 0x6, 0x2, 0x6, 0x3, 0x3, 0x3, 0x9, 0x0, 0x56, 0x7fff, 0x8, 0x1, 0x4, 0x6, 0x0, 0x7, 0x94, 0x3, 0x7, 0x1, 0x9, 0x5, 0xffffffff, 0x6, 0x200, 0x95, 0x1, 0x9, 0x6, 0x1000, 0x1, 0x9, 0x800, 0xd4, 0x7fffffff, 0xc5, 0x91e, 0x78, 0xfff, 0x3, 0x0, 0x7fffffff, 0x80000001, 0x5, 0x8, 0x345a, 0xda2b, 0x4, 0x3e, 0x101, 0x7, 0xe, 0x2, 0x101, 0xfffffff9, 0xfffffff1, 0x1, 0x0, 0x4, 0x5, 0xb04, 0x8a, 0x3, 0x2, 0x2, 0x5, 0x5, 0x1, 0x6, 0x6, 0x190000, 0x6, 0x1, 0x8, 0x5, 0x8, 0x4, 0x4, 0x81, 0xf, 0x7, 0x10001, 0x80000, 0x2f, 0x1c9c, 0x81, 0x87c9, 0x611, 0x8, 0xa, 0xdaa9, 0x10, 0x8, 0x1, 0xfff, 0x3, 0x8, 0xe6, 0x40, 0x8, 0x1, 0x80000000, 0x7, 0x33ba, 0xfffffffa, 0x1000, 0x5, 0x5, 0xc, 0x80000001, 0x2000000, 0x10, 0x7ff, 0x1, 0x0, 0x0, 0x5, 0xcb, 0x6, 0xe, 0x800, 0x5, 0x7, 0x34eb, 0x401, 0x2, 0x9, 0x8, 0xff, 0x2, 0x8001, 0xfffff828, 0x2, 0xffffffff, 0x0, 0x7, 0x6, 0x2, 0x101, 0x9, 0x6, 0x2, 0x7f, 0x5, 0xc860, 0x5, 0x100, 0x4, 0x9, 0x2, 0xa2, 0x6, 0x9, 0xb4df, 0x4, 0x0, 0x1, 0x6, 0x4, 0x5, 0x7, 0x1, 0x148, 0x7a, 0x5, 0x3, 0xffffffff, 0x7, 0x0, 0xffffffff, 0xfff, 0x0, 0xb6b, 0xb76e, 0x1, 0x4, 0x0, 0x10, 0x1, 0x3, 0x7f, 0x3, 0x0, 0x4, 0x4, 0x7fff, 0x1, 0xc44, 0xaf7, 0x9, 0x8, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7fff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x20000000, 0x1, 0x8, 0x1, {0x9, 0x2, 0x7, 0x5, 0x9, 0x10000}, {0x4, 0x2, 0x7ff, 0x1, 0x8a9f, 0x9}, 0x2, 0x3, 0x6}}]}, @TCA_BPF_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x6, 0x5, 0x200, 0x9, 0xe, 0x4, 0x7ee3, 0x3, 0x6, 0x8000, 0x3, 0xa2d5, 0x8, 0x2, 0x1, 0x5, 0xb, 0xd3, 0x90, 0x7, 0xb351, 0xf9, 0x60, 0x6562, 0x80000000, 0x7, 0xa08, 0x5, 0x1, 0x7, 0x1, 0x3, 0x3, 0x8, 0x9ad4, 0x8, 0x0, 0xe, 0x4, 0xd, 0x6, 0x3, 0x1, 0x6, 0x176, 0x1, 0xfffffffe, 0x8cf, 0x7, 0xd, 0x4, 0xe762, 0x10, 0x5, 0x0, 0x1, 0xa7, 0x9, 0x9, 0x10, 0x4, 0x247eb193, 0x6, 0x8, 0x4, 0x6, 0x342, 0x80000000, 0x5, 0xce9, 0x28f, 0x2, 0x10000, 0x21, 0x5867, 0x8001, 0x5, 0xf, 0x9223, 0x400, 0x1, 0x5e537da9, 0x1f7, 0x80000001, 0x6, 0x31, 0xfffffff9, 0x9df, 0x8, 0xc, 0x9, 0x80, 0xd, 0x1ff, 0x80000000, 0x8, 0x7, 0x22d3, 0x1, 0x4, 0x4, 0x8000, 0x2, 0x5, 0x4b1a, 0x3, 0x5, 0x1000, 0xff, 0x8, 0x6, 0x0, 0x6, 0x2, 0x6, 0xc, 0x9, 0x6, 0x6, 0x0, 0xd, 0x4, 0x7fffffff, 0x0, 0x7, 0x1, 0x9, 0x2, 0x7, 0x1, 0x5fc, 0xeffffffe, 0x5, 0x200, 0xffff, 0x83b3, 0x3, 0x0, 0x4, 0x401, 0x4, 0x144, 0x8000, 0x58e, 0x808, 0x6, 0x1, 0xff, 0x7, 0xdfa, 0x1, 0xc, 0xfffffff9, 0x5, 0x6, 0xfffffffe, 0x372, 0x6, 0x5, 0x8, 0xfffffffd, 0x2, 0x69d, 0x527, 0x2, 0x5, 0xfe000000, 0x1, 0x8, 0x2, 0xffff0001, 0x9bf, 0x5, 0x8, 0x5, 0x5dde, 0x0, 0x1, 0x5, 0x8, 0x7ff, 0xe33a, 0x1, 0x92e, 0xffffffff, 0x7fff, 0x9, 0x80000001, 0xc, 0x9, 0x3, 0x10, 0x9, 0x6a, 0x80000000, 0x3, 0x2, 0x1, 0x3, 0xb8, 0x7, 0x40, 0x1, 0x143, 0xffffffbe, 0x7, 0x40000000, 0x81, 0x2, 0x3, 0x3, 0x5, 0xfffffff9, 0xb, 0x7, 0xfff, 0x0, 0x2, 0xe2f, 0xf1, 0x5, 0x2, 0x0, 0x7, 0x3, 0x6, 0x0, 0x4, 0x2, 0xa, 0x3, 0x7f, 0x3a000000, 0x1000, 0x5, 0x5, 0x8, 0x7, 0x0, 0x8, 0x3, 0x4, 0x800, 0xadb, 0x3, 0x5, 0xd, 0x10001, 0x400, 0x9, 0x4, 0x0, 0x8, 0x6, 0x34]}]}, @TCA_BPF_ACT={0x144, 0x1, [@m_simple={0x140, 0x18, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xe, 0x3, 'syzkaller\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffe, 0x10000, 0x1, 0x5, 0xd22b}}, @TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}]}, {0xd9, 0x6, "21bb90f435016bef18743bfaf515b30de924ddefdd76c638b313b3dfb4b775d2283325aef7099e1e598ab552570e40bd6678765f6cf4c84ad43250ffe2dab0bc1fd035ee9f670321eb091aa21482220f463922434d48420ab49141a3c0377ffdc924096ba6411283547a38fb07068357135609d22982a8663319887b2b0c27823e8605082c6c284c9275545a419e849b8904f25d874fcfbe5109c27fce796a5f82c87c812a27a2cf56cbdbe9b58a929ee649c619f70f13bef656d2cbbe87bf01313a59a6dfbe565b22304b5cfe9792ff8be49e1195"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE_MASK={0x5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast2}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}]}}]}, 0xa84}, 0x1, 0x0, 0x0, 0x1c01c041}, 0x890) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x4000) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x15, &(0x7f00000000c0), 0xb9) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="184a0000010000000000000000000000c2860600080000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000040000850000000600000018190000", @ANYRES32=r0, @ANYBLOB="00000000000000008520000001000000"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x74, &(0x7f00000004c0)=""/116, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x9, 0x80000000, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000600)=[{0x5, 0x1, 0x7, 0x6}, {0x1, 0x2, 0x4, 0x4}, {0x4, 0x4, 0x6, 0x7}], 0x10, 0x7}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r9, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x15, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x4, 0x0, 0x1, 0x1, 0x1, 0xffffffffffffffc0, 0xfffffffffffffffc}, @map_fd={0x18, 0x7, 0x1, 0x0, r10}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000940)=ANY=[@ANYBLOB="74b763cd57b25e79aa1800"/26, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x1ff, 0x5f, &(0x7f0000000200)=""/95, 0x41000, 0x5, '\x00', r3, 0x18, r6, 0x8, &(0x7f0000000280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0xf, 0x1, 0x3c0}, 0x10, 0x13c81, r8, 0x5, &(0x7f0000000700)=[r0, r0, r0, r10, 0xffffffffffffffff, 0x1], &(0x7f0000000740)=[{0x4, 0x5, 0x10, 0x8}, {0x0, 0x5, 0xa, 0xa}, {0x4, 0x3, 0x3, 0xc}, {0x1, 0x3, 0x8, 0xf}, {0x3, 0x1, 0x9, 0x9}], 0x10, 0x4}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r11, 0x0, 0xe, 0xffffff40, &(0x7f0000000400)="14fd54ab72df97e6256c00000000", 0x0, 0xa43, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x3, 0x0, 0x0, 0x0, 0x5, 0x400, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x2400, 0x60000000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r13 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r13, 0x28, 0x8, 0x0, 0xff79) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 8.583678053s ago: executing program 1 (id=4982): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x40, 0x6, 0x9, 0x0, 0x3, 0x17270, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x24c8, 0x100000000, 0xffff8000, 0x1, 0x6, 0xb, 0xf741, 0x0, 0xb9, 0x0, 0x80000000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xd) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0xd, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x1ff, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.689069354s ago: executing program 6 (id=4985): perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 7.572713717s ago: executing program 6 (id=4987): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x10000, 0xf}, 0xa38, 0x0, 0x0, 0x7, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 6.758595961s ago: executing program 1 (id=4989): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x4, 0xf}, 0xa38, 0x0, 0x0, 0x7, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f00000002c0)=ANY=[@ANYRES8=r2, @ANYRES8=r4], 0x12) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 6.676813123s ago: executing program 6 (id=4991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x8000000}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 6.490901121s ago: executing program 1 (id=4993): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001480)=@newqdisc={0x468, 0x24, 0xf0b, 0x70bd31, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x1, 0x8000, 0x4, 0x2, 0xe3c, 0x10000, 0x9, 0x6, 0xa, 0x8001, 0x7, 0x1000, 0x7, 0x3, 0x1c, 0x6, 0x6, 0x8, 0xa6b, 0xbb3, 0x5, 0x5, 0xbb, 0x5, 0x2800000, 0xff, 0x0, 0x8, 0x80000000, 0x9, 0xeb63f97, 0x8001, 0x0, 0x3, 0x5, 0xb5, 0x1, 0xfffffe00, 0x1, 0x6, 0x6, 0x5, 0x0, 0x8, 0x7, 0x1, 0x5, 0x1, 0x4, 0x80000001, 0x4aa7fc5d, 0xeec, 0x8000, 0x506, 0x4, 0x80000000, 0x5e, 0x0, 0x4, 0x1, 0xe, 0x7fff, 0x0, 0x8, 0x8, 0x4, 0xd5, 0x5e6, 0x66b, 0xffff2e6b, 0x15a, 0x8, 0x3, 0x3, 0xff800000, 0x400, 0x8000, 0x6, 0x7, 0x40, 0x4, 0x7, 0x7f, 0x8dd, 0x7fff, 0x3, 0x4, 0x9, 0x8, 0x15b, 0x4e, 0x0, 0x1000, 0x3ff80000, 0x401, 0x3ff, 0x3a07c072, 0x7, 0x9, 0x9, 0x7fff, 0xba5d, 0x2, 0x9, 0x4, 0x8, 0x9, 0x2, 0xd, 0x400, 0x5, 0xff, 0x8, 0xb7, 0x9, 0x81d4, 0x2188, 0x10005, 0x8, 0x7, 0x0, 0x4, 0x9, 0x8, 0xd, 0x7, 0x8001, 0x5, 0x4, 0x7ff, 0x8, 0x6, 0xa, 0xa000000, 0x81, 0x8, 0xfffffffb, 0x80000001, 0xd, 0x9, 0x6, 0x401, 0xffff, 0x8, 0x0, 0x5, 0xa83, 0x3, 0x1, 0x7, 0x1, 0x2, 0x4, 0x9, 0xb, 0x10000, 0x5, 0xe, 0x5, 0x9, 0xffffffc2, 0x8, 0x8, 0x7, 0x9, 0x7, 0x1, 0xfffffffe, 0x6, 0x6, 0x80010, 0x6, 0x1, 0x3, 0x6, 0xfffffff8, 0x4, 0xffff, 0x81, 0x1, 0x7, 0x2, 0x0, 0x65f6, 0x800, 0x7, 0x7f, 0xb9, 0x6, 0x9, 0x8, 0x3, 0xd, 0x8, 0xff, 0x0, 0x0, 0xb, 0x5, 0x6, 0x7ff, 0xfffffffa, 0x6, 0x800, 0x9, 0x12c8, 0x1, 0x401, 0x5, 0xfffffffc, 0xeec, 0x1, 0xb, 0x8, 0xf, 0x49bde11c, 0xd, 0x7fff, 0x2, 0x3, 0x118f, 0x2, 0x6, 0x9, 0xffff24f7, 0x3, 0xfffffffb, 0x401, 0xf37, 0x200, 0x3ff, 0x7f, 0x4ddfa981, 0x401, 0x6, 0x6, 0xe69, 0xffffffc0, 0x40, 0x4, 0x4, 0x8, 0x62f0, 0x10001, 0x2, 0x1, 0x6, 0x5, 0x8001, 0x4, 0xfffffffb, 0x1, 0x8, 0xb3, 0x10008b]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x9, 0x6, 0x9, 0x70}, {0x2, 0x0, 0x7f, 0x7, 0xf, 0x7}, 0x5, 0x3, 0x17a4}}, @TCA_TBF_RATE64={0xc, 0x4, 0xb463a6f054ba64e7}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x3c000001}, 0x20040) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x1, 0x400, 0x3394f879, 0x4810, r1, 0x94, '\x00', r3, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0xd1c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_val={0x18, 0x4, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @cgroup_sock_addr=0xb, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0xd, 0x9, 0x2}, 0x10, 0x0, r5, 0x4, 0x0, &(0x7f0000000240)=[{0x5, 0x3, 0x7, 0x6}, {0x0, 0x1, 0x5, 0x5}, {0x0, 0x3, 0xe, 0x8}, {0x1, 0x2, 0x4, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback=r4, 0xffffffffffffffff, 0x1b, 0x8, 0xffffffffffffffff, @void, @value=r6}, 0x20) 6.182820546s ago: executing program 6 (id=4995): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100727865001400"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 5.103894193s ago: executing program 43 (id=4995): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100727865001400"], 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 5.08867677s ago: executing program 1 (id=5000): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8048805) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0xfd, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1577, 0x3}, {0x3}, {0xe, 0x14}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x40f4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r4, 0x8b15, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socketpair(0x22, 0x2, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x50) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x104, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfe, "bac4f58d0dc743a75cd7c6ff6d5f1de846501d19b3fb915d5d78954878f393f8614c50b36710efd721ef95b8d8dbf06fc118cbc321943dd37df62b10df91369100c56f169111517761ffcded9fd23fce7800443d98338a0b532f92fa901524c09665712e20353fa117a260d43d2a668b01010ece937c7eba5eb936674efeaa6f3f00c8bd4ab4a01f82684717dcabf4623c821b1fd069a250f80833d3a4df069d064bef2825c9b09e82e2f9f466876dcc949b7a1bff4b0cbc810885adfceb5242cddffd193b8970a00880fb924f0c24c6a3b9ea0bfa19742b6acf7a626518bf215bf55f4904740def6f6ed0056438db0407a8", [""]}, 0x104}, 0x1, 0x0, 0x0, 0x881}, 0x20000000) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200008d4}, 0x44084) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x30, 0x0, 0x20000) 4.952710697s ago: executing program 44 (id=5000): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8048805) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0xfd, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x6, 0x0, 0x8100, 0x0, {0x1577, 0x3}, {0x3}, {0xe, 0x14}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x2, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x40f4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x5f, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) ioctl$SIOCSIFHWADDR(r4, 0x8b15, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socketpair(0x22, 0x2, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008840}, 0x50) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r6, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x104, 0x3ed, 0x400, 0x70bd26, 0x25dfdbfe, "bac4f58d0dc743a75cd7c6ff6d5f1de846501d19b3fb915d5d78954878f393f8614c50b36710efd721ef95b8d8dbf06fc118cbc321943dd37df62b10df91369100c56f169111517761ffcded9fd23fce7800443d98338a0b532f92fa901524c09665712e20353fa117a260d43d2a668b01010ece937c7eba5eb936674efeaa6f3f00c8bd4ab4a01f82684717dcabf4623c821b1fd069a250f80833d3a4df069d064bef2825c9b09e82e2f9f466876dcc949b7a1bff4b0cbc810885adfceb5242cddffd193b8970a00880fb924f0c24c6a3b9ea0bfa19742b6acf7a626518bf215bf55f4904740def6f6ed0056438db0407a8", [""]}, 0x104}, 0x1, 0x0, 0x0, 0x881}, 0x20000000) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200008d4}, 0x44084) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x30, 0x0, 0x20000) 2.692839415s ago: executing program 4 (id=5019): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)={0x2, 0x13, 0xb1, 0x0, 0x5, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_address={0x3, 0x7, 0x32, 0x20, 0x0, @in={0x2, 0x4e20, @multicast2}}]}, 0x28}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_1\x00', 0x420}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50}, 0x28) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x10c002, 0xac59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000700)={0x150, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_FILTER={0x4c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x2}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x200}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x300}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5c7}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x320}, @CTA_FILTER_ORIG_FLAGS={0x8}]}, @CTA_TUPLE_ORIG={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @local}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4008004}, 0x4051) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) socket$kcm(0xa, 0x2, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bdac, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xffffffffffffff82, 0x21, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a"], 0xf8}, 0x1, 0x0, 0x0, 0x40911}, 0x20044900) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8970, &(0x7f0000000080)) 2.062614228s ago: executing program 4 (id=5023): socket$kcm(0x2, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x8, 0x0, 0xc9cd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x84, 0x0, 0x400000, 0x8, 0x3fb, 0x7fffffff, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], 0x0, 0x4, 0xa6, &(0x7f00000001c0)=""/166, 0x41000, 0xa}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3, 0xffffffffffffffff}, 0x4) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f00000000c0)=@qipcrtr, 0x80, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000f000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRES32=r4, @ANYBLOB="00000000030000008510000008000055256b0000fcffffff18170000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000110000002000000000000f10000fa000000040000"], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mkdir(0x0, 0x18b) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000800000000000000000000000850000001700000018010000b600000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feff20ff850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x7, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x8, 0x0, 0x0}}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a80040005"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001480)=@newqdisc={0x68, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0xfffc, 0xfff9, 0x8}, {0x6, 0x0, 0x1, 0x91, 0xf5e3, 0x1000}, 0x0, 0x0, 0x25b}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PBURST={0x8, 0x7, 0x50a}]}}]}, 0x68}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf251b7c00000c00018008000100", @ANYRES32=r13, @ANYBLOB="246c8a5c84f139cc8e7fe1dce7187a7b602f232c0ed3c327"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 1.986160512s ago: executing program 7 (id=5024): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecb", 0xd7}], 0x1}, 0x0) 1.901184588s ago: executing program 7 (id=5025): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x40, 0x6, 0x9, 0x0, 0x3, 0x17270, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x24c8, 0x100000000, 0xffff8000, 0x1, 0x6, 0xb, 0xf741, 0x0, 0xb9, 0x0, 0x80000000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xd) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0xd, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x1ff, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.80374636s ago: executing program 4 (id=5026): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f0000000680), &(0x7f0000000700)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.639220708s ago: executing program 4 (id=5027): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0xc7c) (fail_nth: 8) 1.51788562s ago: executing program 7 (id=5028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @func={0x2, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x50}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) 1.141333314s ago: executing program 4 (id=5030): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3e, 0x0, 0x2000000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140e, 0x800, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x20008014) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x140e, 0x800, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000804}, 0x20008014) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x675919c624d23be1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002140)=ANY=[@ANYBLOB="280000001100010000800000fedbdf250c1100001e0000000000000008000000", @ANYRES32, @ANYBLOB="04004080"], 0x28}], 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002140)=ANY=[@ANYBLOB="280000001100010000800000fedbdf250c1100001e0000000000000008000000", @ANYRES32, @ANYBLOB="04004080"], 0x28}], 0x1, 0x0, 0x0, 0x41}, 0x0) 1.016275964s ago: executing program 7 (id=5031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xeb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x810) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x28, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9a4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x61ef}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x1, 0x4, 0x6, 0x30, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @alu={0x7, 0x1, 0x7, 0x1, 0xb, 0xffffffffffffffc0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x2, 0x1000, &(0x7f0000000280)=""/4096, 0x41000, 0x1e, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000012c0)={0x3, 0x2, 0x9, 0x151}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000001300)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001340)=[{0x1, 0x3, 0xe, 0x6}, {0x1, 0x1, 0xf, 0x8}, {0x3, 0x4, 0xe}, {0x2, 0x1, 0xd, 0x1}, {0x1, 0x2, 0x7}], 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001740)={r1, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000014c0)=[0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xda, &(0x7f0000001540)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001580), &(0x7f00000015c0), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000001600)}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0x25, 0x80000, 0x10000) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x460000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x10, 0x3f2, 0x8, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) r8 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000001cc0), 0x2, 0x0) r9 = getpid() fstat(r4, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = syz_clone(0x11000, &(0x7f0000001e00)="436c2de4067b1e78a5ef970de7a5374741e51a342ab7bf604901353e40ecd56ebbcb433be61ad0885ff1ac792c6f80861c36bfd3067fae29902017e2d2f62acc109757859ea34719c2d366b769d587f266f46e6f887f90969d1ede35538184e6c1dad18e20d4c7e112aeca3da5f871363a976862fbbaf1358e49a9a7af89833b0ec507e91dba493861d29e5c581ab804011e2ad33e27b809f57321f9f31392b2615626f53f22a7d18558bff3f872ecab197648063614d5160d5a72589190da8461b98e8db8d4603eeccec345d9ccfd59e860f549aeee117d2579cdd3e254f022f907ef30a26ee0f90fbbced229414036f1ca116c177de6351f77cf6bc4dad7bb1795f3606125aeb35d7acf877810adf48835cd272cb45ec4850d3d01b79a023bc3195c6dc3de5934e439018fe24de79a74c5e277beea691ea97db938712f2a7612a9909803bc20e0e26dd418500a372bee29bc4407bb3f01130763c35b46f97e9d52629e771874d31d4bfbc8a0851062a4409b0fdb8fcca7bbf9a77a4f3aa345fb2da7592e99f7329a00eb212ab7aad12b432c7a87ad36733375f6d0e9e3eae3b658c90d89c89ae3875a500a9c26e5a7dfe44d3b0bf9b1a901560b0243badd6a82bd1b1c86eb37a735d06ed8e2a10d9885f17a09575908041de5ed17d0c23c5db817706bc69efab54a97a21214adee27b8e2624de696a318dacdf4216551afaef7bfce79d954c59fb2dad5ee9bb65642ea746f8750669144d30b81c231a6914358d93ea9e3026ac04e36fe6b68e3c4b7a88c1d3d8b88c2ba610b91ee1a8a4e2d8838afa2ce916ad3e12750bb5756b45e8dd10e7a8501178292b19bb2acc58d7b981b0dc2c02634e4f0aa154b68928e3a63b8878d553778bdd4538a3bb576f3cb2de77c812aac182b996872d4e9cfc0c07cbb00aed8dcc38752b2e2be185584ba6983c8cb1ecfc7f847992d60a670d650d824c8528d1a5e3801658fa38c210ca682b1726e10d3dac457cc93b0fab5f11702eb2016d67820c6f0de781d6266dd1c5d8cda97c4a09169d6bb41453289c73d7ce3ebae927fa8f0296c919525a7604f7edfd7a2708d68297199c0ed9351fdc82440c5058eaf6bd2f92532667f753bb8fc7801275cb0a57e1396505b8e2fff7aa44e22ed97f57f8f3a1b09e1bf5806bdbf98bcc0ab6c81d27530deba2f5bc040f899a4c720b5c7894bb19314962e11ccf48031709f33b575fc623913c359ba16b0654339771eebbaf12dabcde56acd5154c0254a6baf6b5df7d5e26c899c116790105f3a6c94cac1a952a0e4041445d36a0c53046af9bda5f527ca32c9508172e325c8cf865dd0daffab5d88a79fef74a23bc3406b01ed7c84fc2e30289c83b1e71dc04dfedc7a96bdff46e3ea9efaec45a9454eb0cdabbbc6dc00a2d40c37095f8a076245fa13c5dfcd8b2b291c6d7d9646f175762d622f4a79762ebc0a4f4033cc1ae39c21366a7f7c9c04a771bc7f86405c4cf0c657a1a367fd15088c0ec0a97682598164b4c26300ae211dcb8db89214b9e98c92aaca27dc2d1e8eae80be9f22e5a2564f845ba06a51430cdf09b8ffc7137d1be655796420a02ecbec71fb40630881d7317888807d256aba559d12efef0f273be1df39f0f09814b0aa2276dd72fdb1d22e6acd6988c4fdf6d7c999a040b32dccd767ace9fa0ef73ab873d3a47887d806817c505790d977f856cb198ef1e788f6bb41c08414f6c61a35d9532c29c81977e4bfc2d00e38e3a61c67b199649feafa160813fe30d330b3ab5f77a745581d2b7355fe6da99a19f858c7a08c275525310cf25a5f0c2d319c006c45a25e987e90d4656495da1d0250c8b1d1f1a63a2ab676e58e36132c96b99888bf6ba65732c5118c487f1b855f7be5a86b4d840e46f913cd8a7da446e0aae508099b7ec24c683482d436b87253c5eefdfe9d77c45530bf78f5f56157e59509a82ef8c4cca22d87b84e9f96871fa406a46d74428a64317cb08b1ed0d8b49abacf426112dda61dbb701a55f9d1586cb668e10e9a32a91d5300e0fd4743f358b717c2324407d4e29460b25e7c0ea5264c856753d6e8270cbbf679b390a49dd1b26d7c7fd22a5ea7e17533ee2fe1dc31e8862e13527334c9e341b697b37ac180b884f7c2f89e0b7ec4d8b2669e14d744f87ec984fb4ac217e8184a2538dc636979cbabc555f7dc8202e6f205bc95d5d08b750e80669e03807d51e961c30a459fd37999eeb1f43807310ca38d7cf61635b484cd69b0f5070070cc522480be596cb2ef08f654e653400dd8ad5709d070fc18639e4f8cf33979cb63cd4dace72e5e152f31cab85a61776629f8719165ff5652892e6f5511bd6884285bb69cab8fabb2c74ee3f69b0cc8e63e148ccdf2f67f277261561afb6939c78597f683186006ed750803f33d89f8a2afa14a4f8b50d3626f178946c223ba370ec4d2feaada919748c6cb5c58bf59854376f6d8fb5ff26ec55c6c8efa6640861b662386439286535e64a01103466234b0aa3f5bb170994a51243875266be2e671c1ac75964f90b8cb23410bd3504494386fdbffafd4ba3492599caddeed98c4c26a07fc82b00aaadea138487f15e7403f21f799a7b162068512fd8d9cee4f10450bd360aca9c2942b2c13c1ce207b556e3afcbe99b6b233537c2f4c7a1860336838ba853a6c71685d05fce80b830ede2ff8a86aaf37f710e620d805e311d75df55f0b9e281e97de11f5d5c687d6cff4cca8773bfc2775541e14d2f23c951f9671bbb8d3ad9cdc87310edf1966649ebc9bbb5069d7de4f04ec137fc8496d487197a402a234215a7b9168dc56e8f0aa7286ad5b591d4fe13605bc0955c0893b09116247cf8c9519c1b0276f49341721b0a0715ff5dfb049ef356dffd2ba219a6314aef2834f0a27b10c84693f4909ff4398d03dbb1abc9b16201ffa2a32e00b3b0deb007f9c818727b1112cc70c85cf0df7b19ae9d8b49891d9f2f3ac7c49f929f6d7d5725a276ae6fe470a9c991bb327c2aca9e838f1a2415daf275d83e609939f9373d82202307edf19d12729fd1a46256ef44f5a0bf7e677de6b9bec8c015fc890bcb2b04e0b70a9d5d2cc3eeb42e40083dc02b55ed21cac7aa6cbce88469c47f128359568da645d1469b9457da2f844c8c58943aab43f25819ad352e02f0189e967379835f37e35b7cbda2ac0d47169093667a18a73e4aa00bded145074d3ce3d4907e9c901a885e9b2a5618970791d9d2f39c60bbc8c2307416ab36ddea74797f57755e69ebef739603c5cb3c349045efd7ed4236c97c896ca2c6304410d086acee896ac54e3dceb7b52e98c654eb104c3fbde8eef4d841d9f262d4c0cea731a37de7b5f08f7f67903f7f2df7da9d4363386e2f371bb0a36bc31077c0125e86f214037c8aa6e659fbbfbaec87a41037a9223addc37c2d77cc7af15c1c1ddb12c6a77ff65b6d687af27ebb1d4cc4181c029636412559083a7636fbb8dfb87efd4e389ab77f2fd48bf3b74eb49ddb4d643b0c1ec489c2de08c61e3d2a5b10a30fe4e00f5b51312442269a65761bf5ffa3153176e8f46d99e0ebcafeb011ecad174a75e85386885da7fc745c4e345417b4679452e5f1e20bd57dbef3a8120e135d670dcd6a292ee9b0321a8cf522a7a629801cc55a4ea8bd27602aaaaa4245aee060031a02f9efdffa4ecb21c0e77c7ba64c4ec3777e3599fe6413cdc259676b1f9d45091f850a074f367d43d4ffdad5cd310178fc44e3d64f54cbe188c439158c7ba83900aa57d3f7476063a07c09af5262b3cfdd2decb8e5fcaeedcb903872d04fa2fa43404e8d40443d335e4cfb88e4b15432c97f68fc87b5ca435aafdc3185632848bcef853d88e43fc8b6eb4be3399bc1b7b4eb850ad701dbf5af4dd7c48491cd2c31cc67b46b2b48ae0ececd678254da80bec9b8af0b0bd553258c087efb6e404657a00efae71dafa9a2ee61f4dad765cbd575515ff804a95cd0b7f8d32a37c0eae08c37b352611216ddc7965aafa5fb4868be1b86f35d67489fe54b363cacf9902492220429d512c6b7f158d64246da2bb141348febd92000391e14605046baeb6391f6843528ba3c64c9fb314e0339a5b4e8573a8b65e1b421cf64544514b65fd2d834577c532a872dbd647f055468fa6fca16d140aa0d90a7b14c905c30ec1e851b6bab60ab2b37a4108b58bf1ffd9bd94828806742a712041cf43d3c62a91a2348fec09cc724e83b354d1f94cdc1578fc8a038a95bf4b798d939d2e55d9f3e425bc1ef0686bcb87d536e0f7db6cc9affadf9df80d62c94ba2c99d03e39c4d0ec2c2233a189c6e29fe9a4247191a4916bb0a839712e0958896b6d5f3313622d4b0559ed43af436dfaac056d1e26569564a36a408960ae3c71ee7a963f8fb54699a9d26dbd8dc2dd5485d4ee5b7e13e284823c12eff4d3d2e8949e7020b83f3db2499edc8c50256e349d25d8c7e4a9a0dd459dcc01e42c524e72ed58a85bd093dee3c2076ca5f2d6d6c9658dd461ea10ae8b955bc796fdc4d9636c44ef187e6be45faa11200bdbde88142cf2dc9b04539ccab56a1f8478ed910b8b9ae5f4191d10d35f77b6d4968c11dee2b16e3ddb956f171f3e2558a8adbc644ac99b4cf6d1f1d7aca78019bf9523a2788c35a92d6c6c2f04b7dba5648858a5c63e4f20a11feb3e3b3a23ce197ad1a5b58e91926c8e504518b9e96bcd21827c1b2987a9ea5180f0fe211da0f6b043d55ea6eaf4cb1718d00020ef2f94f2bbc2708a0edb528851cc67c56bc20ebd0b3f560ceb1a1064105248ed7982e0e8696cf4d05cabb47b82838d23209f9e76b14a896947968404a3039986d135ad06163d60401098cf8a3d04f8e03d13fafa29d4cd8d0ea3944941fa7ab564d3ee82bc120fa23addf20ea2c08fbf30ea6da5c63249ae9bc9342fbd28ef85ea401c14ec9c847d39977667e5834eea82c9b0ddb78c4cd99e1fa9cdf5681ddadd9898b84b762337d6249dbe7d937e8b814fefc66b10e3502df437669c18a8ed519dba67466042c4cd11c7b287c7da7552f6ed0898d3fe854e4cbc8a5803ce928ccae01d97d5d2e1e13aac9fc74f15a5711e540856df9bbff758f16a2a2129977d02688f897da833f48a331d72eabf16a7abe8124619d1fe30db6642365babf8ab9856c8d9950f9436bfeafc904285fa77307580d20d817661f13d102c3accfe4139e827e21ea9cc7cb9b3cf1a0cf0ed362493a7b21b9a7e76672e243d97557240db506ce8947afd1cb3fa3de32468284327b1430891005b105eb08680dee37fa404bd464a54a26a56daf6e6794bf56bd61fbe50a212654c61d33853bd835f40deaf1bff5094e4e5257eb388b1b76f7a80c06f7f81b103f7a9b0353c3a02ff46228f14b939c765c2689c601bb64639d8f92d6c328b73631f6fd175547d3d21e9f9cbe48e04247ee4795759cd5da77b85771356f1fc8a97412fccc00ba6e67d3b0e29bc007ca19926fcfe2ae331c6d8b9b13ca78c320209eded21e69f3c87929acc1c2430b81c58211ee1eb41807195cfb6b503386e9f239126a34e3b41a8fc7f66346207fced3719105c42ce011a6bdaaf37fa3bfd30b594c147c0dc9f1a2dd01cdb275f6a22a5a949c8ff8ff0a55cc1445f885bac3e9156073d280a803c11d1bb24101aa00d615cf6d4ca431a1df2140f428b6e90d3cde9f0daef99fa12d2d6918315d48e026285d5216d6568a6639c64d9a935d41e21e398c9b805732c7cc44e7f432b9181634ed5abbee80cb9b230209034daeb7366018baccc1d3495dc24190", 0x1000, &(0x7f0000002e00), &(0x7f0000002e40), &(0x7f0000002e80)="8df0ff09cb6e6396ae7bc27b4a3aaa99c1a510e1cf423255f356b82592e0fcb92781fc26d6") fstat(r4, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000002f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = gettid() fstat(r5, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003040)={0xffffffffffffffff, 0xffffffffffffffff}) r18 = getpid() fstat(r5, &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = syz_clone(0x108000, &(0x7f0000003180)="29335693a01b233d755e46b445c527fff39e6ee470cf653cfa9fa30ff36238bb7abe70694e603199d8f5d538c176c2daaf9a530ae6ba48d9fa729ee87225a538b400b1d35c3ad47a39e2f515f9446a874f941ab88f0f6b1762738f1839b1afdc798c9eac0d48b25e198cf25a582a0d19bdeea0be7a26c8749bab95a60bf9a1c9cf4f833c7e463158493f985b38351dc059391cb59d8fce1b035a589b16d4fc85ff1ab97616c44cd6cd386f1145cf97b542d7b5149958ccd7438a1cf5f4a942f90f1f600d9b1ab6b4", 0xc8, &(0x7f0000003280), &(0x7f00000032c0), &(0x7f0000003300)="79e42cf618264913913c4cb0cf4228494fa95c1da91dc735630598f6d13f000e2c06b95226bbf9d97c74bbd0fd40c1a62592dfed3585") fstat(r6, &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r6, &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r6, &(0x7f00000035c0)={&(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001a40)="782132d79114cea5c07f164f2a92074b026b0bcbe18e9c5b09359dc75747946a1eee7048bb86b6d055beae9063026b3c2ced84bc25db83186611d19233c06ef17162fbdff68fe28b53dfb370307ea7c3ef4a6750362faa8946a96aa345a3f96796c9bc17de9cdb0c2af361d07799e1b3f0c5a40b28bfb12783ab9a6df2b52175cf", 0x81}, {&(0x7f0000001b00)="55e671806b778ae39b23f92b9107065a5d3f7f962d2ebf633ac62d1b91bfcba42eb13a19e8cf5587cbcf51e7c71e900ce4c5f1de5121dd35be1f5982aa07873832ac68d9c5a1f59d3472aa91e64e5f31de4070387f39a398d2da542a67ca91f8a51255a86f174322f02688f6cf5282669e8ec2332b5aa0abd253b48ef08423a82cbd9062a00e0cedf1d8b7d69261dca1fc3ac2b402181db84b32197f05f260fa47aee3a50c684d6aaab35c047bd876528eb4a27484f0ff59a30dfac4060a", 0xbe}, {&(0x7f0000001bc0)="044f4d201ec78cf703bbf58c8d59d830b5a132b8ddb3006e374001221824ec821d9bb9f945905da3dc23f7aaec6e30088ff44287aedce96a318eddbe7fc13e4c6ff8dfdae6f9af1195abd4c4f30ff0cb9e3d406472a2788308214df03467739d8f7b2afb1424328d8bcf2bb157aae3b58a732a7d64dce8a232d1152c83f71516b98e", 0x82}], 0x3, &(0x7f0000003440)=[@rights={{0x28, 0x1, 0x1, [r7, r0, r1, r6, 0xffffffffffffffff, r7]}}, @rights={{0x2c, 0x1, 0x1, [r6, r6, r8, r0, r6, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x20, 0x1, 0x1, [r4, r1, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r17, r0, r6]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x24, 0x1, 0x1, [r7, r0, r1, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r21, r22, r23}}}], 0x160, 0x200000c1}, 0x81) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000003700)={@fallback=r5, 0xe, 0x0, 0x80000001, &(0x7f0000003600)=[0x0], 0x1, 0x0, &(0x7f0000003640)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000036c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003740)={@ifindex=r3, r17, 0xf, 0x30, r1, @void, @void, @void, @value=r2, r25}, 0x20) sendmsg$nl_netfilter(r24, &(0x7f0000003940)={&(0x7f0000003780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003900)={&(0x7f00000037c0)={0x110, 0x12, 0x3, 0x201, 0x70bd26, 0x25dfdbfc, {0x7, 0x0, 0x7}, [@generic="72369fc5230233dd9a1f3380b9341b5c37848652bd860219c0c77a6a724d9786150c6064b27068edfbd23817a5204dee70a6823553434b875b2bb3a68833a2c49e6a869138a1b319a108b2165309a5511cea29b9da4086e77b18ba46c4a66d8ce281ab991644b454330b0232c46ea0a2d631b7033901a4ed79d0654409358021a2c7b2273bcf1a15f634ba67b561e7c7136a69539df7ce8c3e002933317fff21f73a9bef0e0cd3f7eedf74655a2a3fe8e07df26a9e8746f3da75b231ab4ab98758f751c3e6cf1c38770ea069a499ade41b92525d823472c41909064c8e3e979739260318c0", @typed={0x8, 0xed, 0x0, 0x0, @uid=r19}, @typed={0xc, 0x1e, 0x0, 0x0, @u64=0xbe}]}, 0x110}}, 0x8850) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000003980)=r24, 0x4) 894.973335ms ago: executing program 0 (id=5032): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40140, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x8, 0x4, 0x7fffffff}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000040), 0xe}, 0x0, 0x0, 0x0, 0x8, 0x2000000003fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000250cccfa70000000f0000008500"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000200, 0x2, @perf_bp={0x0, 0x3}, 0x8204, 0x2, 0x101, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00@\x00\x00\x00'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="2d637075205871ea49557e6b38d2ce0ea23ac20a791fa122ed898cf223265faa799e5b933f79a08b678791a9084803de76dae551071acad24448bc1fd463ebc64b36762dfc383a45b2f913a5165dae467583fc9460fded701dd87d69a1ff3a5d6dba0a32a9af612f0fe8043eb0"], 0x5) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r7, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r7, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) close(r7) 769.935646ms ago: executing program 0 (id=5033): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000a00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecb", 0xd7}], 0x1}, 0x0) 657.238032ms ago: executing program 0 (id=5034): socket$kcm(0x2, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x14) r1 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x8, 0x0, 0xc9cd, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340), 0x4}, 0x84, 0x0, 0x400000, 0x8, 0x3fb, 0x7fffffff, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pK \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], 0x0, 0x4, 0xa6, &(0x7f00000001c0)=""/166, 0x41000, 0xa}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r3, 0xffffffffffffffff}, 0x4) r5 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr={0x2a, 0xffffffff}, 0x80, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f0000001540)={&(0x7f00000000c0)=@qipcrtr, 0x80, 0x0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x15, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000f000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRES32=r4, @ANYBLOB="00000000030000008510000008000055256b0000fcffffff18170000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000110000002000000000000f10000fa000000040000"], &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2000000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) mkdir(0x0, 0x18b) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000800000000000000000000000850000001700000018010000b600000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000feff20ff850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0x7, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r10, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x8, 0x0, 0x0}}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a80040005"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001480)=@newqdisc={0x68, 0x24, 0xf0b, 0x70bd27, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0xfffc, 0xfff9, 0x8}, {0x6, 0x0, 0x1, 0x91, 0xf5e3, 0x1000}, 0x0, 0x0, 0x25b}}, @TCA_TBF_BURST={0x8, 0x6, 0x2}, @TCA_TBF_PBURST={0x8, 0x7, 0x50a}]}}]}, 0x68}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf251b7c00000c00018008000100", @ANYRES32=r13, @ANYBLOB="246c8a5c84f139cc8e7fe1dce7187a7b602f232c0ed3c327"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 578.322059ms ago: executing program 7 (id=5035): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2000000076001f03000000000000000008000000", @ANYRESOCT=r0, @ANYBLOB="080005002bf2efd0"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000a00)={&(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40018}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000002500000326bd0000000000000007df6f"], 0x14}, 0x1, 0x0, 0x0, 0x24}, 0x10048054) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000100070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000780000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004c0003804800008008000340000000023c"], 0x128}}, 0x0) 480.955204ms ago: executing program 4 (id=5036): r0 = perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0x6, 0x40, 0x6, 0x9, 0x0, 0x3, 0x17270, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x24c8, 0x100000000, 0xffff8000, 0x1, 0x6, 0xb, 0xf741, 0x0, 0xb9, 0x0, 0x80000000000}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xd) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x50) socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0xd, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x1ff, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 391.882622ms ago: executing program 7 (id=5037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000f80)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, r1, 0x2, 0x3, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getpid() perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x6002, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x12, &(0x7f0000000500), 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x14, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}}, 0x14}}, 0x20048844) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000001000)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x81}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004004}, 0x48000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}, 0x20000000) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x1, 0x8}, 0xc) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r5, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0xff00) recvmsg$kcm(r5, &(0x7f00000012c0)={&(0x7f0000000340)=@ax25={{0x3, @rose}, [@null, @remote, @bcast, @default, @rose, @netrom, @bcast, @netrom]}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/248, 0xf8}, {&(0x7f0000000a40)=""/218, 0xda}, {&(0x7f0000000b40)=""/134, 0x86}, {&(0x7f0000000c00)=""/60, 0x3c}, {&(0x7f0000000c40)=""/213, 0xd5}, {&(0x7f0000000d40)=""/166, 0xa6}, {&(0x7f0000000e00)=""/98, 0x62}, {&(0x7f0000000e80)=""/161, 0xa1}], 0x9, &(0x7f0000001280)=""/18, 0x12}, 0x20) 256.943057ms ago: executing program 0 (id=5038): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x90043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) recvmsg$unix(r3, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000003540)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x9a7, 0x800}, 0xc, &(0x7f0000003500)=[{&(0x7f00000006c0)={0x25c, 0x1c, 0x318, 0x70bd26, 0x25dfdbfb, "", [@generic="9a0aa4de96eeb70c6bbee51b08c5c43fe8c08683adc5e77c96110d0ead5646101e701b194a42fd4e890168954604342709c05330fd3b4fd4e7f4b7eaedf288ce7cca6c7ba802a5e6f55dcd651e76dc1e41e3a5c75edbe46b7409c0d0d5c6ab91f09d63873c62880525262db3d9a4e53647d2634863fcc7f063c491354fde0302", @generic="12195cca27904c28001e06daf9aee16207a8919ceb040cceb9", @generic="e1b2fd93840b573d1fdf13b6efd18cb6f5bad824a42c3848ff945409be7d2d7c1ffbb224270a8fede669bee9d23d0e01eca1ff266ab1aecdc57cee72486a0718d3c68a4ad311033a6c6ce301ed8d503712de7d877b3b5e9e017c4abbb697bf05bd9bf5759d672cedb579adc8d0c8320f6f5bfaa865fc07d6df098b7a0ff330534749d252adaf36a89ee5b3ad06654dea871ba7a381b957ccdfc6ddfd14f9c4b4158837e5d1", @nested={0x102, 0x4d, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @uid}, @generic="e18fc2985dbe417bf0a0c8c695d19432622986bbff5c45ce0c7cef8a78274a90ea7f327669f4996775e6e6952f1cc4cc0f472ee7aa16d7fb35c92eb042f7aa12153e445bd27a8ba69dddd4671e4e17d1b63150f6a79d3ea70d0fe8cc9e95f90b30b0d290570385ef08c7d0501685821c7e00fdad3c86f32316337a5e6548ac2336beae4558939a05ed43f28316e79ff610c5c3bc6637662577bc9266f29db086e87297aed554c0c10c3288af9b4cf4e84b35562a1090810904b36c6ba541f01db5ab062f972ddcee11262472cda1ed5c3eccc65ad0d7f098bb5fff0506257061625f4f64b8e7b5af1daf7ac8e5f8030e34d2305418cf"]}, @typed={0x8, 0x52, 0x0, 0x0, @u32=0x7}]}, 0x25c}, {&(0x7f0000001200)={0x22d0, 0x1f, 0x100, 0x70bd29, 0x25dfdbfd, "", [@typed={0x5, 0xed, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x154, 0x0, 0x1, [@nested={0x4, 0x116}, @nested={0x4, 0xe}]}, @nested={0x1120, 0x3a, 0x0, 0x1, [@generic="7183cc40de94f9368d1ff3e9b39afc202f1988fd859712170907ad84703f33986540425b0599c557d6f57e9e12bcfdbce9bbc952f4a34acf14a45745392eab63f3a9936b5f0d17c3e71d54541515f106dd176bef9a705c61b9fd77ebc7ee86aa79a72d921ddb16b7dd64f358dc836e8e7ae574b3e7889fd75d0b445c7cbd4c8d563e374edfe9da8bc357e832f9d9661288ebb59e03a970978105850231f3b93f90864124970e1f20eafd1609c72016c44a957d33e00916c2a607e41f8b3b0414c407", @generic="46fffc29cadc71acce8a0cfa43c2d88b360f1954ca14c5f3d588271d8a13ff86e3b342cbba381e816a7ea0f74d16f77bb85464617832d5a07724437bc2fc4231f5d5b8e99ffeafe0bdc53beabc14b6c0100b622a268669cf992f", @generic="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"]}, @nested={0x41, 0xb9, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @ipv4=@remote}, @generic="c2d489c51e812ad3ae2309664b", @nested={0x4, 0x61}, @typed={0x8, 0x1, 0x0, 0x0, @u32=0x2}, @typed={0x9, 0x12f, 0x0, 0x0, @str='syz0\x00'}, @nested={0x4, 0x1b}, @nested={0x4, 0x8f}, @nested={0x4, 0x14d}, @nested={0x4, 0xb1}]}, @generic="058fb1abca4ede24f447ecaa4cb2644f0ca1998301c2b9c712ffdfa4c0a2238f620309329abd0c6c0fd9915682711d0c8cbd1a9896d8a45e03ae04362f0f1721f52e1e2ccf08c7cc109fc5ffbde8429058fd5559765e1533dbc42ca2588595f6c3726aab9b1e0b7271480222b5793312d3565c84e6de826d7c2e17a1c025cddc94b07957aa81898343f959f102251e90cb", @typed={0x8, 0x73, 0x0, 0x0, @uid}, @nested={0x28, 0xc7, 0x0, 0x1, [@nested={0x4, 0x89}, @nested={0x4, 0x24}, @nested={0x4, 0x2b}, @typed={0x8, 0x4d, 0x0, 0x0, @fd=r3}, @typed={0x4, 0x153}, @typed={0xc, 0xa5, 0x0, 0x0, @u64=0x200}]}, @typed={0x7c, 0x96, 0x0, 0x0, @binary="9f16a6dedcd17acb6151ac8c9d422d90d5141570258db0537b39efedb466a08ec5c8a50270f168858ca0d7ecdd1fb1c20f1d25929b94e44454222aefc1e6541ada7c374769fda67bc90dd505bd9372302b92ef643edf91b244bccd146177c8dfb414fa9ec84452302a31aafc169310bd0018196c87c1cb13"}, @typed={0x8, 0xae, 0x0, 0x0, @u32=0xdd20}, @generic="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"]}, 0x22d0}], 0x2, 0x0, 0x0, 0x840}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', r3, 0x4000, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x18}], 0x1}, 0x200080d0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=0xee00, @ANYBLOB="0c0000800500010098"], 0x2c}], 0x1, 0x0, 0x0, 0x8001}, 0x0) 129.432415ms ago: executing program 0 (id=5039): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) close(r1) 0s ago: executing program 0 (id=5040): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xa00, 0x5, 0x7f, 0x1, 0x1, 0x3b}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000200), 0xcd, r1}, 0x38) close(r0) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) kernel console output (not intermixed with test programs): ing over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.207927][T19360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.336767][T19630] netlink: 'syz.2.4403': attribute type 4 has an invalid length. [ 792.356410][T19630] netlink: 'syz.2.4403': attribute type 3 has an invalid length. [ 792.411518][T19630] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4403'. [ 792.493438][T19360] hsr_slave_0: entered promiscuous mode [ 792.504971][T19360] hsr_slave_1: entered promiscuous mode [ 792.513597][T19360] debugfs: 'hsr0' already exists in 'hsr' [ 792.527573][T19360] Cannot create hsr debugfs directory [ 792.907534][T19651] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4412'. [ 793.348987][T19670] netlink: 6048 bytes leftover after parsing attributes in process `syz.5.4417'. [ 793.379139][T19360] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 793.411093][T19674] netlink: 'syz.5.4417': attribute type 10 has an invalid length. [ 793.422793][T19360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 793.491925][T19360] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 793.512757][T19670] netlink: 'syz.5.4417': attribute type 10 has an invalid length. [ 793.536349][T19360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 793.552583][T19360] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 793.577468][T19360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.601395][T19674] syz_tun: entered promiscuous mode [ 793.692693][T19674] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 793.790241][T19670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.817953][T19670] team0: Port device bond0 added [ 793.827781][T19360] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 793.848304][T19360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.920846][T19677] syzkaller0: entered promiscuous mode [ 793.926704][T19677] syzkaller0: entered allmulticast mode [ 793.935234][ T5293] 8021q: adding VLAN 0 to HW filter on device eth11 [ 793.949857][T15150] syzkaller0: tun_net_xmit 48 [ 793.981248][T19700] FAULT_INJECTION: forcing a failure. [ 793.981248][T19700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 794.026658][T19700] CPU: 1 UID: 0 PID: 19700 Comm: syz.5.4425 Not tainted syzkaller #0 PREEMPT(full) [ 794.026704][T19700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.026726][T19700] Call Trace: [ 794.026740][T19700] [ 794.026749][T19700] dump_stack_lvl+0xe8/0x150 [ 794.026772][T19700] should_fail_ex+0x412/0x560 [ 794.026800][T19700] _copy_from_user+0x2d/0xb0 [ 794.026816][T19700] wext_handle_ioctl+0xc7/0x1d0 [ 794.026838][T19700] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 794.026854][T19700] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 794.026884][T19700] sock_ioctl+0x159/0x7f0 [ 794.026901][T19700] ? __pfx_sock_ioctl+0x10/0x10 [ 794.026914][T19700] ? __fget_files+0x2a/0x420 [ 794.026929][T19700] ? __fget_files+0x3a0/0x420 [ 794.026942][T19700] ? __fget_files+0x2a/0x420 [ 794.026957][T19700] ? bpf_lsm_file_ioctl+0x9/0x20 [ 794.026977][T19700] ? __pfx_sock_ioctl+0x10/0x10 [ 794.026992][T19700] __se_sys_ioctl+0xfc/0x170 [ 794.027012][T19700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.027030][T19700] do_syscall_64+0x174/0x580 [ 794.027050][T19700] ? trace_irq_disable+0x3b/0x140 [ 794.027074][T19700] ? clear_bhb_loop+0x40/0x90 [ 794.027089][T19700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.027102][T19700] RIP: 0033:0x7fe5d399ce59 [ 794.027116][T19700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.027126][T19700] RSP: 002b:00007fe5d48a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 794.027140][T19700] RAX: ffffffffffffffda RBX: 00007fe5d3c15fa0 RCX: 00007fe5d399ce59 [ 794.027149][T19700] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003 [ 794.027157][T19700] RBP: 00007fe5d48a1090 R08: 0000000000000000 R09: 0000000000000000 [ 794.027165][T19700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.027172][T19700] R13: 00007fe5d3c16038 R14: 00007fe5d3c15fa0 R15: 00007fff5ad57b38 [ 794.027192][T19700] [ 794.344125][T19711] netlink: 694 bytes leftover after parsing attributes in process `syz.5.4428'. [ 796.741789][ T5293] 8021q: adding VLAN 0 to HW filter on device eth12 [ 796.934092][T19360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.000222][T19747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4437'. [ 797.024123][T19360] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.066583][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.073813][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.146204][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.153435][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.870523][T19789] netlink: 336 bytes leftover after parsing attributes in process `syz.4.4448'. [ 799.873764][T19783] syzkaller0: entered promiscuous mode [ 799.892486][T19783] syzkaller0: entered allmulticast mode [ 799.926647][T19783] syzkaller0: tun_net_xmit 1280 [ 799.939159][T19785] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4448'. [ 799.963052][T19783] syzkaller0: create flow: hash 1410424696 index 1 [ 800.186301][T19801] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4452'. [ 800.841366][T19780] syzkaller0: delete flow: hash 1410424696 index 1 [ 805.210273][T19835] netlink: 'syz.4.4462': attribute type 21 has an invalid length. [ 805.232819][T19832] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4461'. [ 805.667606][T19839] netlink: 694 bytes leftover after parsing attributes in process `syz.6.4463'. [ 805.931868][T19854] netlink: 'syz.4.4467': attribute type 21 has an invalid length. [ 805.995627][T19852] syzkaller0: entered promiscuous mode [ 806.002745][T19857] netlink: 'syz.6.4468': attribute type 13 has an invalid length. [ 806.012990][T19852] syzkaller0: entered allmulticast mode [ 806.032139][T19854] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4467'. [ 806.348186][T19857] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.356123][T19857] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.581248][T19857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 806.599645][T19857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 806.948956][T19868] syzkaller0: entered promiscuous mode [ 806.954790][T19868] syzkaller0: entered allmulticast mode [ 808.484998][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.491432][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.764746][ T64] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.775328][ T64] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.789753][T19360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.964177][T19889] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4474'. [ 812.770763][ T64] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 812.781299][ T64] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.001510][T19901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4477'. [ 813.221483][T19360] veth0_vlan: entered promiscuous mode [ 813.240494][T19360] veth1_vlan: entered promiscuous mode [ 813.277855][T19360] veth0_macvtap: entered promiscuous mode [ 813.295417][T19360] veth1_macvtap: entered promiscuous mode [ 813.320425][T19360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.337051][T19360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.357538][T15459] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.375091][T15459] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.388910][T15459] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.407278][T15459] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.500367][T15461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.510465][T15461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.545785][T15459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.554299][T15459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.711209][T19927] netlink: 'syz.6.4479': attribute type 1 has an invalid length. [ 813.750771][T19927] nbd: couldn't find device at index -2138570156 [ 813.993600][T19939] netlink: 'syz.8.4483': attribute type 4 has an invalid length. [ 814.156043][T19941] netlink: 2120 bytes leftover after parsing attributes in process `syz.6.4484'. [ 814.226359][T19941] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4484'. [ 814.255945][T19941] netlink: 604 bytes leftover after parsing attributes in process `syz.6.4484'. [ 834.123932][T15459] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.205085][T15459] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.281340][T15459] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.376744][T15459] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.527373][T15459] bridge_slave_1: left allmulticast mode [ 834.534245][T15459] bridge_slave_1: left promiscuous mode [ 834.539987][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.549701][T15459] bridge_slave_0: left allmulticast mode [ 834.555766][T15459] bridge_slave_0: left promiscuous mode [ 834.561557][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.573279][T15459] vlan1: left allmulticast mode [ 834.578135][T15459] veth0_vlan: left allmulticast mode [ 834.585685][T15459] vlan1: left promiscuous mode [ 834.592512][T15459] : port 1(vlan1) entered disabled state [ 834.828340][T15459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 834.839183][T15459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.849101][T15459] bond0 (unregistering): Released all slaves [ 835.335698][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13 [ 835.637532][T15459] hsr_slave_0: left promiscuous mode [ 835.643889][T15459] hsr_slave_1: left promiscuous mode [ 835.673288][T15459] veth0_macvtap: left promiscuous mode [ 835.678947][T15459] veth1_vlan: left promiscuous mode [ 835.684705][T15459] veth0_vlan: left promiscuous mode [ 835.950040][T15459] team0 (unregistering): Port device team_slave_1 removed [ 835.964105][T15459] team0 (unregistering): Port device team_slave_0 removed [ 836.071977][ T5293] 8021q: adding VLAN 0 to HW filter on device eth14 [ 836.485856][ T5293] 8021q: adding VLAN 0 to HW filter on device eth16 [ 836.829395][ T5293] 8021q: adding VLAN 0 to HW filter on device eth15 [ 838.929967][T15070] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 838.942108][T15070] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 838.954732][T15070] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 838.970008][T15070] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 838.978712][T15070] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 839.601467][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4494'. [ 839.654095][T20093] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4493'. [ 839.686506][T20093] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 840.028866][T20106] netlink: 'syz.6.4500': attribute type 10 has an invalid length. [ 840.065967][T15459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.117496][T20102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4498'. [ 840.242289][T20117] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.4501'. [ 840.276080][T20117] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4501'. [ 840.289690][T20108] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 840.371215][T15459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.516822][T20122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.756381][T15459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.812300][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4507'. [ 841.047133][ T5642] Bluetooth: hci5: command tx timeout [ 841.176230][T20143] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4512'. [ 841.208817][T20143] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4512'. [ 841.342035][T15459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.953530][T20159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4518'. [ 841.964489][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4519'. [ 842.173439][T15459] bridge_slave_1: left allmulticast mode [ 842.189114][T15459] bridge_slave_1: left promiscuous mode [ 842.209560][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.245026][T15459] bridge_slave_0: left allmulticast mode [ 842.250900][T15459] bridge_slave_0: left promiscuous mode [ 842.257472][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.284390][T15459] vlan1: left allmulticast mode [ 842.304393][T15459] veth0_vlan: left allmulticast mode [ 842.335159][T15459] vlan1: left promiscuous mode [ 842.355835][T15459] : port 1(vlan1) entered disabled state [ 843.124268][ T5642] Bluetooth: hci5: command tx timeout [ 843.191449][T15459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 843.205097][T15459] bond0 (unregistering): Released all slaves [ 843.268102][T20170] netlink: 'syz.8.4521': attribute type 2 has an invalid length. [ 843.276601][T20193] netlink: 'syz.4.4526': attribute type 10 has an invalid length. [ 843.283621][T20170] tipc: Started in network mode [ 843.309734][T20170] tipc: Node identity 1340008, cluster identity 4711 [ 843.318254][T20170] tipc: Node number set to 20185096 [ 843.394787][T15069] bond0: (slave syz_tun): Releasing backup interface [ 843.470647][ T5293] 8021q: adding VLAN 0 to HW filter on device eth17 [ 843.710563][T20193] team0: Port device geneve1 added [ 843.996486][T20073] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.009027][T20073] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.026254][T20073] bridge_slave_0: entered allmulticast mode [ 844.035877][T20073] bridge_slave_0: entered promiscuous mode [ 844.073506][T20073] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.112989][T20073] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.128364][T20073] bridge_slave_1: entered allmulticast mode [ 844.144172][T20073] bridge_slave_1: entered promiscuous mode [ 844.682273][T20220] __nla_validate_parse: 5 callbacks suppressed [ 844.682291][T20220] netlink: 136 bytes leftover after parsing attributes in process `syz.8.4533'. [ 844.739092][T15070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 844.784277][T15070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 844.803319][T15070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 844.832825][T15070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 844.842580][T15070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 845.021642][T20073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.042798][T20238] netlink: 'syz.4.4536': attribute type 10 has an invalid length. [ 845.067759][T20073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.202062][T15070] Bluetooth: hci5: command tx timeout [ 845.213106][T20241] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 845.448822][T20073] team0: Port device team_slave_0 added [ 845.470906][T20073] team0: Port device team_slave_1 added [ 845.884340][T20073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.901214][T20073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.969027][T20073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.146989][T20073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.157722][T20073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 846.189700][T20073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.215562][ T5293] 8021q: adding VLAN 0 to HW filter on device eth18 [ 846.250152][T20275] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4545'. [ 846.502704][T20073] hsr_slave_0: entered promiscuous mode [ 846.526324][T20286] netlink: 'syz.8.4548': attribute type 10 has an invalid length. [ 846.545952][T20073] hsr_slave_1: entered promiscuous mode [ 846.567048][T20073] debugfs: 'hsr0' already exists in 'hsr' [ 846.581879][T20073] Cannot create hsr debugfs directory [ 846.781024][T20286] veth1_macvtap: left promiscuous mode [ 846.839375][T20288] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 846.941315][T15459] hsr_slave_0: left promiscuous mode [ 846.965831][T15070] Bluetooth: hci2: command tx timeout [ 846.973270][T15459] hsr_slave_1: left promiscuous mode [ 847.006022][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.033300][T15459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.057049][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 847.081152][T15459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.121557][T15459] veth0_macvtap: left promiscuous mode [ 847.137026][T15459] veth1_vlan: left promiscuous mode [ 847.157837][T15459] veth0_vlan: left promiscuous mode [ 847.282306][T15070] Bluetooth: hci5: command tx timeout [ 847.906462][T15459] team0 (unregistering): Port device team_slave_1 removed [ 847.934040][T15459] team0 (unregistering): Port device team_slave_0 removed [ 848.245796][ T5293] 8021q: adding VLAN 0 to HW filter on device eth19 [ 848.602922][T20335] netlink: 'syz.8.4558': attribute type 10 has an invalid length. [ 848.743360][T20337] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 849.042009][T15070] Bluetooth: hci2: command tx timeout [ 849.058144][T20343] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4560'. [ 849.099477][T20350] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4560'. [ 849.457968][T20354] netlink: 'syz.6.4559': attribute type 21 has an invalid length. [ 849.489075][T20354] IPv6: NLM_F_CREATE should be specified when creating new route [ 849.720895][T20362] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4562'. [ 849.807549][T15459] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.144640][T15459] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.147284][T20377] netlink: 'syz.6.4568': attribute type 10 has an invalid length. [ 850.229988][T20375] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4567'. [ 850.350369][T15459] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.506403][T15459] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.121995][T15070] Bluetooth: hci2: command tx timeout [ 851.555395][T20228] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.573387][T20228] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.580692][T20228] bridge_slave_0: entered allmulticast mode [ 851.596451][T20228] bridge_slave_0: entered promiscuous mode [ 851.630371][T20228] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.662023][T20228] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.681361][T20228] bridge_slave_1: entered allmulticast mode [ 851.700574][T20228] bridge_slave_1: entered promiscuous mode [ 851.827596][T20439] netlink: 'syz.6.4577': attribute type 21 has an invalid length. [ 851.854593][T20440] netlink: 'syz.8.4578': attribute type 13 has an invalid length. [ 851.866305][T20439] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4577'. [ 851.876562][T20440] netlink: 14532 bytes leftover after parsing attributes in process `syz.8.4578'. [ 851.882497][T20073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 851.899935][T20073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 851.909012][T20442] netlink: 'syz.8.4578': attribute type 10 has an invalid length. [ 851.920081][T15459] bridge_slave_1: left allmulticast mode [ 851.928928][T15459] bridge_slave_1: left promiscuous mode [ 851.935351][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.947301][T15459] bridge_slave_0: left allmulticast mode [ 851.957372][T15459] bridge_slave_0: left promiscuous mode [ 851.967480][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.278672][T15459] team0: Port device bond0 removed [ 852.296209][T15459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.327116][T15459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.337916][T15459] bond0 (unregistering): Released all slaves [ 852.403094][T20439] netlink: 'syz.6.4577': attribute type 4 has an invalid length. [ 852.412238][T20439] netlink: 'syz.6.4577': attribute type 3 has an invalid length. [ 852.459123][T20439] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4577'. [ 852.480621][T20073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 852.501420][T20073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.527834][T20442] team0 (unregistering): Port device team_slave_0 removed [ 852.558273][T20442] team0 (unregistering): Port device team_slave_1 removed [ 852.595469][T20228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.628752][T20228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.669676][T20073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 852.690419][T20073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 852.705832][T20073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 852.748865][T20073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.757453][T15459] tipc: Left network mode [ 852.947604][T20228] team0: Port device team_slave_0 added [ 852.984014][T20228] team0: Port device team_slave_1 added [ 853.059548][T20475] netlink: 'syz.6.4583': attribute type 32 has an invalid length. [ 853.177455][T20228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.189029][T20475] netlink: 'syz.6.4583': attribute type 13 has an invalid length. [ 853.207467][T15070] Bluetooth: hci2: command tx timeout [ 853.209112][T20228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.286056][T20228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.318238][T20228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.336493][T20228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.398159][T20228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.623385][T20228] hsr_slave_0: entered promiscuous mode [ 853.638620][T20228] hsr_slave_1: entered promiscuous mode [ 853.652735][T20228] debugfs: 'hsr0' already exists in 'hsr' [ 853.665335][T20228] Cannot create hsr debugfs directory [ 853.693783][ T5642] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 853.716583][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 853.725236][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 853.739643][ T5642] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 853.747603][ T5642] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 853.984838][T20498] netlink: 'syz.8.4587': attribute type 61 has an invalid length. [ 853.995656][T20498] netlink: 'syz.8.4587': attribute type 105 has an invalid length. [ 854.107598][T20503] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4588'. [ 854.167713][T20503] bond0: (slave bond_slave_0): Releasing backup interface [ 854.280219][T20503] bond_slave_0: entered promiscuous mode [ 854.286602][T20503] bond_slave_0: entered allmulticast mode [ 854.833469][T20073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 854.934037][T20073] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.106525][T15456] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.113736][T15456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.176425][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.192025][T15459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.216094][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.232291][T15459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.255047][T20527] netlink: 'syz.6.4593': attribute type 21 has an invalid length. [ 855.266174][T15459] veth0_macvtap: left promiscuous mode [ 855.271791][T15459] veth1_vlan: left promiscuous mode [ 855.271963][T20527] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4593'. [ 855.309370][T15459] veth0_vlan: left promiscuous mode [ 855.370592][ T5642] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 855.379437][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 855.391354][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 855.401358][ T5642] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 855.416929][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 855.676718][T15459] team0 (unregistering): Port device team_slave_1 removed [ 855.706405][T15459] team0 (unregistering): Port device team_slave_0 removed [ 855.842439][ T5642] Bluetooth: hci1: command tx timeout [ 855.842693][T20527] netlink: 'syz.6.4593': attribute type 4 has an invalid length. [ 855.877141][T20527] netlink: 'syz.6.4593': attribute type 3 has an invalid length. [ 855.888241][T20527] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4593'. [ 855.985914][T15461] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.993139][T15461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 856.069712][T20228] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 856.108158][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.176594][T20228] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 856.230767][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.263336][T20228] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 856.285305][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.328527][T20228] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 856.347089][T20228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.829278][T15459] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.055241][T15459] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.256817][T20228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 857.353092][T15459] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.507683][T20592] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4597'. [ 857.533685][ T5642] Bluetooth: hci0: command tx timeout [ 857.656079][T15459] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.733731][T20228] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.794816][T20491] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.822694][T20491] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.830725][T20491] bridge_slave_0: entered allmulticast mode [ 857.838557][T20491] bridge_slave_0: entered promiscuous mode [ 857.849643][ T181] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.856864][ T181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.870878][T20491] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.878807][T20491] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.886739][T20491] bridge_slave_1: entered allmulticast mode [ 857.902552][T20491] bridge_slave_1: entered promiscuous mode [ 857.917892][T20073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.925384][ T5642] Bluetooth: hci1: command tx timeout [ 858.018077][T15461] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.025327][T15461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.126105][T20491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.179541][T20491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.194669][T20613] netlink: 'syz.6.4600': attribute type 21 has an invalid length. [ 858.203921][T20613] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4600'. [ 858.272383][T20613] netlink: 'syz.6.4600': attribute type 4 has an invalid length. [ 858.288023][T20613] netlink: 'syz.6.4600': attribute type 3 has an invalid length. [ 858.299395][T20613] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4600'. [ 858.397084][T20491] team0: Port device team_slave_0 added [ 858.462342][T20491] team0: Port device team_slave_1 added [ 858.579108][T20491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.599111][T20491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.643834][T20491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.659876][T20491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.669256][T20491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.699633][T20491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.777908][T15459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.998187][T15459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.053687][T20491] hsr_slave_0: entered promiscuous mode [ 859.065983][T20491] hsr_slave_1: entered promiscuous mode [ 859.077708][T20491] debugfs: 'hsr0' already exists in 'hsr' [ 859.085317][T20491] Cannot create hsr debugfs directory [ 859.136568][T20528] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.145471][T20528] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.153752][T20528] bridge_slave_0: entered allmulticast mode [ 859.162036][T20528] bridge_slave_0: entered promiscuous mode [ 859.233332][T15459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.300118][T20073] veth0_vlan: entered promiscuous mode [ 859.321594][T20528] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.340058][T20528] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.348822][T20528] bridge_slave_1: entered allmulticast mode [ 859.358676][T20528] bridge_slave_1: entered promiscuous mode [ 859.414979][T20653] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 859.532150][T15459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.605238][T20528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.614772][ T5642] Bluetooth: hci0: command tx timeout [ 859.643215][T20528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.754981][T20073] veth1_vlan: entered promiscuous mode [ 859.829200][T20528] team0: Port device team_slave_0 added [ 859.874565][T20528] team0: Port device team_slave_1 added [ 859.988681][T20672] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4604'. [ 860.003207][T15070] Bluetooth: hci1: command tx timeout [ 860.071619][T20528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.079442][T20528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.116943][T20528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.129986][T20528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.137975][T20528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.188840][T20528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.459233][T20073] veth0_macvtap: entered promiscuous mode [ 860.622592][T20528] hsr_slave_0: entered promiscuous mode [ 860.630063][T20528] hsr_slave_1: entered promiscuous mode [ 860.637189][T20528] debugfs: 'hsr0' already exists in 'hsr' [ 860.644301][T20528] Cannot create hsr debugfs directory [ 860.656931][T20073] veth1_macvtap: entered promiscuous mode [ 860.682406][T20228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.721362][T15459] bridge_slave_1: left allmulticast mode [ 860.738996][T15459] bridge_slave_1: left promiscuous mode [ 860.749074][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.764384][T15459] bridge_slave_0: left allmulticast mode [ 860.770067][T15459] bridge_slave_0: left promiscuous mode [ 860.780240][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.810772][T15459] bridge_slave_1: left allmulticast mode [ 860.816754][T15459] bridge_slave_1: left promiscuous mode [ 860.823862][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.839063][T15459] bridge_slave_0: left allmulticast mode [ 860.845339][T15459] bridge_slave_0: left promiscuous mode [ 860.851110][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.150734][T15459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.170022][T15459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.181019][T15459] bond0 (unregistering): Released all slaves [ 861.325125][T15459] team0: Port device geneve1 removed [ 861.397496][T15459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.408887][T15459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.420386][T15459] bond0 (unregistering): Released all slaves [ 861.611773][T20723] netlink: 'syz.6.4606': attribute type 2 has an invalid length. [ 861.683220][T15070] Bluetooth: hci0: command tx timeout [ 861.713867][T15459] tipc: Left network mode [ 861.764700][T15070] Bluetooth: hci4: command 0x0406 tx timeout [ 861.791902][T20727] netlink: 'syz.6.4607': attribute type 21 has an invalid length. [ 861.800884][T20727] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4607'. [ 861.909663][T20727] netlink: 'syz.6.4607': attribute type 4 has an invalid length. [ 861.918838][T20727] netlink: 'syz.6.4607': attribute type 3 has an invalid length. [ 861.928475][T20727] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4607'. [ 861.944551][T20073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.995534][T20073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.083814][ T5642] Bluetooth: hci1: command tx timeout [ 862.136377][T15443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.145741][T15443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.187831][T15443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.295313][T15443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.599357][T20228] veth0_vlan: entered promiscuous mode [ 862.692764][T20491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 862.705311][T20491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 862.738356][T20491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 862.746672][T15452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.760078][T15452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.761753][T20491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 862.868478][T20491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 862.905611][T20491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 862.932733][T20491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 862.954834][T20491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 862.977888][T20228] veth1_vlan: entered promiscuous mode [ 863.036323][T20757] netlink: 'syz.6.4609': attribute type 10 has an invalid length. [ 863.125166][T20759] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 863.152420][T15150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.164216][T15150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.520587][T20228] veth0_macvtap: entered promiscuous mode [ 863.567783][T20228] veth1_macvtap: entered promiscuous mode [ 863.762100][ T5642] Bluetooth: hci0: command tx timeout [ 864.194970][T20785] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4611'. [ 864.222890][ T5293] 8021q: adding VLAN 0 to HW filter on device eth17 [ 864.497566][T20228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.553459][T20228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.590291][T20789] netlink: 'syz.2.4612': attribute type 21 has an invalid length. [ 864.599270][T20789] IPv6: NLM_F_CREATE should be specified when creating new route [ 864.615019][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4612'. [ 864.659428][T15452] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.680342][T15452] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.731284][T15452] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.749084][T15452] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.025222][T20491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 865.288625][T20805] netlink: 'syz.2.4616': attribute type 10 has an invalid length. [ 865.351775][T20805] veth1_macvtap: left promiscuous mode [ 865.531748][T20806] sch_tbf: peakrate 7 is lower than or equals to rate 12998416500665246951 ! [ 865.557654][ T181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.570399][T20491] 8021q: adding VLAN 0 to HW filter on device team0 [ 865.582300][ T181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.609210][T20528] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 865.637504][T20528] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.670089][T15459] hsr_slave_0: left promiscuous mode [ 865.677069][T15459] hsr_slave_1: left promiscuous mode [ 865.685687][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.702252][T15459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.717402][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.741915][T15459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.757896][T15459] hsr_slave_0: left promiscuous mode [ 865.768042][T15459] hsr_slave_1: left promiscuous mode [ 865.774499][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.784171][T15459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.796602][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.806214][T15459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.834444][T15459] veth0_macvtap: left promiscuous mode [ 865.840106][T15459] veth1_vlan: left promiscuous mode [ 865.846572][T15459] veth0_vlan: left promiscuous mode [ 865.855949][T15459] veth0_macvtap: left promiscuous mode [ 865.861581][T15459] veth1_vlan: left promiscuous mode [ 865.867594][T15459] veth0_vlan: left promiscuous mode [ 866.976913][T20826] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4620'. [ 867.082970][T15456] smc: removing ib device syz0 [ 867.114734][T15459] team0 (unregistering): Port device team_slave_1 removed [ 867.132191][T15459] team0 (unregistering): Port device team_slave_0 removed [ 867.261706][T20528] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 867.271362][T20528] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 867.304568][ T5293] 8021q: adding VLAN 0 to HW filter on device eth18 [ 867.321893][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.329106][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.361697][T15456] smbdirect: ib_dev[syz0] removed [ 867.382543][T20528] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 867.408607][T20528] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 867.418899][T20528] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 867.452827][T20528] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 867.476260][ T5753] syz0: Port: 1 Link DOWN [ 867.578514][T15443] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.585715][T15443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.610056][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 867.621526][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.791375][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4622'. [ 868.119983][T20528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.339044][T20528] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.396829][T15461] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.404037][T15461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.520899][T15461] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.528089][T15461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.624195][T20845] syzkaller0: entered promiscuous mode [ 868.629788][T20845] syzkaller0: entered allmulticast mode [ 868.786138][T20855] netlink: 'syz.6.4628': attribute type 10 has an invalid length. [ 868.807847][T20855] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4628'. [ 868.995037][T15070] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 869.022130][T15070] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 869.044234][T15070] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 869.061459][T15070] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 869.070944][T15070] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 869.925999][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.932526][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.074050][T20855] vxcan0: entered promiscuous mode [ 871.079200][T20855] vxcan0: entered allmulticast mode [ 871.084725][T20855] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 871.203303][T15070] Bluetooth: hci3: command tx timeout [ 871.438770][T20871] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4631'. [ 871.491774][T15459] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.588627][T20875] sctp: [Deprecated]: syz.9.4632 (pid 20875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 871.588627][T20875] Use struct sctp_sack_info instead [ 871.638444][T20491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.645928][T20879] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4633'. [ 871.821547][T15459] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.171500][T15459] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.192676][T20491] veth0_vlan: entered promiscuous mode [ 872.205350][T20491] veth1_vlan: entered promiscuous mode [ 872.331535][T15459] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 872.552162][T20898] syzkaller0: entered promiscuous mode [ 872.557698][T20898] syzkaller0: entered allmulticast mode [ 872.577498][T20491] veth0_macvtap: entered promiscuous mode [ 872.600357][T20528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.610183][T15456] syzkaller0: tun_net_xmit 48 [ 872.630873][T20491] veth1_macvtap: entered promiscuous mode [ 872.866274][T20908] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4639'. [ 873.297550][T15070] Bluetooth: hci3: command tx timeout [ 874.832492][T20914] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4641'. [ 874.865611][T20491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.910232][T20918] sctp: [Deprecated]: syz.6.4642 (pid 20918) Use of struct sctp_assoc_value in delayed_ack socket option. [ 874.910232][T20918] Use struct sctp_sack_info instead [ 874.940210][T15459] bridge_slave_1: left allmulticast mode [ 874.957602][T15459] bridge_slave_1: left promiscuous mode [ 874.966752][T20920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.980452][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.999266][T15459] bridge_slave_0: left allmulticast mode [ 875.007345][T15459] bridge_slave_0: left promiscuous mode [ 875.014735][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.370595][T15070] Bluetooth: hci3: command tx timeout [ 875.500699][T15459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.512521][T15459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.523924][T15459] bond0 (unregistering): Released all slaves [ 875.562151][T20491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 875.608048][T20927] openvswitch: netlink: IP tunnel dst address not specified [ 875.668617][ T181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.699269][ T181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.842560][ T181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.900983][T20941] FAULT_INJECTION: forcing a failure. [ 875.900983][T20941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.915096][T20941] CPU: 1 UID: 0 PID: 20941 Comm: syz.6.4649 Not tainted syzkaller #0 PREEMPT(full) [ 875.915119][T20941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 875.915131][T20941] Call Trace: [ 875.915137][T20941] [ 875.915146][T20941] dump_stack_lvl+0xe8/0x150 [ 875.915174][T20941] should_fail_ex+0x412/0x560 [ 875.915202][T20941] _copy_from_user+0x2d/0xb0 [ 875.915220][T20941] vmemdup_user+0x5e/0xd0 [ 875.915275][T20941] map_lookup_and_delete_elem+0x349/0xa70 [ 875.915299][T20941] ? bpf_lsm_bpf+0x9/0x20 [ 875.915324][T20941] __sys_bpf+0xb98/0xd90 [ 875.915355][T20941] ? __pfx___sys_bpf+0x10/0x10 [ 875.915382][T20941] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 875.915429][T20941] ? ksys_write+0x242/0x270 [ 875.915454][T20941] ? __pfx_ksys_write+0x10/0x10 [ 875.915478][T20941] __x64_sys_bpf+0xba/0xd0 [ 875.915500][T20941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.915516][T20941] do_syscall_64+0x174/0x580 [ 875.915538][T20941] ? trace_irq_disable+0x3b/0x140 [ 875.915563][T20941] ? clear_bhb_loop+0x40/0x90 [ 875.915584][T20941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.915601][T20941] RIP: 0033:0x7f2e2219ce59 [ 875.915624][T20941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.915638][T20941] RSP: 002b:00007f2e22f88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 875.915658][T20941] RAX: ffffffffffffffda RBX: 00007f2e22415fa0 RCX: 00007f2e2219ce59 [ 875.915670][T20941] RDX: 0000000000000020 RSI: 0000200000000240 RDI: 0000000000000015 [ 875.915680][T20941] RBP: 00007f2e22f88090 R08: 0000000000000000 R09: 0000000000000000 [ 875.915691][T20941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 875.915701][T20941] R13: 00007f2e22416038 R14: 00007f2e22415fa0 R15: 00007ffd46c38998 [ 875.915729][T20941] [ 876.236427][ T181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.782616][T20965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.907854][T20856] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.928864][T20856] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.956323][T20856] bridge_slave_0: entered allmulticast mode [ 876.979738][T20856] bridge_slave_0: entered promiscuous mode [ 877.021198][T15459] hsr_slave_0: left promiscuous mode [ 877.049601][T15459] hsr_slave_1: left promiscuous mode [ 877.062694][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.076269][T15459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.089989][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.095317][T20975] sctp: [Deprecated]: syz.6.4656 (pid 20975) Use of struct sctp_assoc_value in delayed_ack socket option. [ 877.095317][T20975] Use struct sctp_sack_info instead [ 877.111754][T15459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.145218][T15459] veth0_macvtap: left promiscuous mode [ 877.158050][T15459] veth1_vlan: left promiscuous mode [ 877.172260][T15459] veth0_vlan: left promiscuous mode [ 877.442038][T15070] Bluetooth: hci3: command tx timeout [ 877.954609][T15459] team0 (unregistering): Port device team_slave_1 removed [ 878.422851][T15459] team0 (unregistering): Port device team_slave_0 removed [ 878.741764][T20528] veth0_vlan: entered promiscuous mode [ 878.756680][T20856] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.779752][T20856] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.788669][T20856] bridge_slave_1: entered allmulticast mode [ 878.796877][T20856] bridge_slave_1: entered promiscuous mode [ 878.910090][T20856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.951424][T20856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.017420][T20856] team0: Port device team_slave_0 added [ 879.028474][T15461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.032497][T20528] veth1_vlan: entered promiscuous mode [ 879.059237][T15461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.071489][T20856] team0: Port device team_slave_1 added [ 879.271437][T15456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.273019][T20856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.302571][T15456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.310103][T20856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.310139][T20856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.337018][T20856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.399970][T20856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.461868][T20856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.604772][T20856] hsr_slave_0: entered promiscuous mode [ 879.611385][T20856] hsr_slave_1: entered promiscuous mode [ 879.724896][T15459] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.938194][T15459] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.954716][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 879.967476][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 879.978062][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 879.988890][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 879.998448][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 880.020147][T21038] sctp: [Deprecated]: syz.3.4668 (pid 21038) Use of struct sctp_assoc_value in delayed_ack socket option. [ 880.020147][T21038] Use struct sctp_sack_info instead [ 880.126971][T20528] veth0_macvtap: entered promiscuous mode [ 880.293422][T15459] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.980282][T20528] veth1_macvtap: entered promiscuous mode [ 881.297388][T15459] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.563518][T20528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.588413][T20528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.622848][T21089] netlink: 8063 bytes leftover after parsing attributes in process `syz.6.4675'. [ 881.721224][ T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.745337][ T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.945547][ T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.975763][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.082444][ T5642] Bluetooth: hci2: command tx timeout [ 882.244200][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 882.292753][T15459] bridge_slave_1: left allmulticast mode [ 882.305067][T15459] bridge_slave_1: left promiscuous mode [ 882.319107][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.336398][T15459] bridge_slave_0: left allmulticast mode [ 882.349623][T15459] bridge_slave_0: left promiscuous mode [ 882.362816][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.646217][T15459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.658388][T15459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.669106][T15459] bond0 (unregistering): Released all slaves [ 882.883061][T15454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.893748][T15454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.261408][T21149] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4686'. [ 883.591548][T15459] hsr_slave_0: left promiscuous mode [ 883.608623][T15459] hsr_slave_1: left promiscuous mode [ 883.622306][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.645414][T15459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.659612][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.667147][T15459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.685257][T15459] veth1_macvtap: left promiscuous mode [ 883.690798][T15459] veth0_macvtap: left promiscuous mode [ 883.700188][T15459] veth1_vlan: left promiscuous mode [ 883.705698][T15459] veth0_vlan: left promiscuous mode [ 884.163040][ T5642] Bluetooth: hci2: command tx timeout [ 884.338043][T15459] team0 (unregistering): Port device team_slave_1 removed [ 884.350929][T15070] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 884.365737][T15070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 884.365865][T15459] team0 (unregistering): Port device team_slave_0 removed [ 884.385872][T15070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 884.396929][T15070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 884.406452][T15070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 884.556187][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.564949][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.305835][T20856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 885.325442][T20856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.408915][T20856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 885.771141][T20856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.792922][T20856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 885.859859][T20856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.886645][T20856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 886.177785][T20856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 886.242687][ T5642] Bluetooth: hci2: command tx timeout [ 886.385295][T21034] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.415090][T21034] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.442043][T21034] bridge_slave_0: entered allmulticast mode [ 886.465675][T21034] bridge_slave_0: entered promiscuous mode [ 886.481926][ T5642] Bluetooth: hci1: command tx timeout [ 886.494378][T21034] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.501530][T21034] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.513781][T21232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 886.548750][T21034] bridge_slave_1: entered allmulticast mode [ 886.576602][T21034] bridge_slave_1: entered promiscuous mode [ 886.765365][T21034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 886.817873][T21034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 886.890462][T21034] team0: Port device team_slave_0 added [ 886.912457][T21034] team0: Port device team_slave_1 added [ 886.976112][T21034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.984157][T21034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.047439][T21034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.078924][T21034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.101025][T21034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.160102][T21034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.876887][T15459] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.151312][T15459] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.239666][T21034] hsr_slave_0: entered promiscuous mode [ 888.247725][T21034] hsr_slave_1: entered promiscuous mode [ 888.254946][T21034] debugfs: 'hsr0' already exists in 'hsr' [ 888.260781][T21034] Cannot create hsr debugfs directory [ 888.323729][ T5642] Bluetooth: hci2: command tx timeout [ 888.373059][T15459] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.553951][T15459] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.563714][ T5642] Bluetooth: hci1: command tx timeout [ 888.848620][T21170] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.856646][T21170] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.864154][T21170] bridge_slave_0: entered allmulticast mode [ 888.872103][T21170] bridge_slave_0: entered promiscuous mode [ 888.892971][T20856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.956121][T21170] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.969982][T21170] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.977408][T21170] bridge_slave_1: entered allmulticast mode [ 888.985291][T21170] bridge_slave_1: entered promiscuous mode [ 889.131628][T21170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.146567][T21170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.291353][T21306] infiniband syz2: set down [ 889.296562][T21306] infiniband syz2: added ipvlan0 [ 889.331504][T21318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4705'. [ 889.335768][T21306] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 889.359988][T21170] team0: Port device team_slave_0 added [ 889.365995][T21306] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 889.373772][T20856] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.383718][T21306] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 889.417515][T21170] team0: Port device team_slave_1 added [ 889.431635][T15459] bridge_slave_1: left allmulticast mode [ 889.441864][T15459] bridge_slave_1: left promiscuous mode [ 889.450006][T21320] netlink: 'syz.0.4705': attribute type 10 has an invalid length. [ 889.452081][T15459] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.478451][T21306] RDS/IB: syz2: added [ 889.488266][T15459] bridge_slave_0: left allmulticast mode [ 889.500085][T15459] bridge_slave_0: left promiscuous mode [ 889.506392][T21306] smc: adding ib device syz2 with port count 1 [ 889.513286][T15459] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.520881][T21306] smc: ib device syz2 port 1 has no pnetid [ 889.889094][T15459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.913442][T15459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.941360][T15459] bond0 (unregistering): Released all slaves [ 890.030339][T21170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.049449][T21170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.079164][T21170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.094488][T21320] geneve1: entered promiscuous mode [ 890.116912][T21320] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 890.140512][T15456] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.147720][T15456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 890.169143][T21170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.189796][T21170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 890.231648][T21170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.351384][T15456] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.358585][T15456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 890.643126][ T5642] Bluetooth: hci1: command tx timeout [ 890.824047][T21170] hsr_slave_0: entered promiscuous mode [ 890.830932][T21170] hsr_slave_1: entered promiscuous mode [ 890.837505][T21170] debugfs: 'hsr0' already exists in 'hsr' [ 890.843443][T21170] Cannot create hsr debugfs directory [ 891.486916][T21034] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 891.505869][T21034] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.560958][T21367] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 891.674658][T21034] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 891.713329][T21034] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 891.732459][T21034] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 891.765546][T21034] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 891.785710][T21034] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 891.810956][T21034] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 891.853240][T21374] FAULT_INJECTION: forcing a failure. [ 891.853240][T21374] name failslab, interval 1, probability 0, space 0, times 0 [ 891.888849][T21374] CPU: 1 UID: 0 PID: 21374 Comm: syz.0.4708 Not tainted syzkaller #0 PREEMPT(full) [ 891.888874][T21374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 891.888884][T21374] Call Trace: [ 891.888893][T21374] [ 891.888903][T21374] dump_stack_lvl+0xe8/0x150 [ 891.888939][T21374] should_fail_ex+0x412/0x560 [ 891.888989][T21374] should_failslab+0xa8/0x100 [ 891.889025][T21374] __kmalloc_noprof+0xe8/0x760 [ 891.889056][T21374] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.889102][T21374] tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.889171][T21374] ? tomoyo_path_number_perm+0x219/0x630 [ 891.889199][T21374] tomoyo_path_number_perm+0x246/0x630 [ 891.889236][T21374] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 891.889259][T21374] ? __lock_acquire+0x6b5/0x2cf0 [ 891.889335][T21374] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 891.889434][T21374] ? __fget_files+0x2a/0x420 [ 891.889469][T21374] ? __fget_files+0x2a/0x420 [ 891.889489][T21374] ? __fget_files+0x3a0/0x420 [ 891.889511][T21374] ? __fget_files+0x2a/0x420 [ 891.889555][T21374] security_file_ioctl+0xc3/0x2a0 [ 891.889590][T21374] __se_sys_ioctl+0x47/0x170 [ 891.889619][T21374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.889645][T21374] do_syscall_64+0x174/0x580 [ 891.889670][T21374] ? trace_irq_disable+0x3b/0x140 [ 891.889699][T21374] ? clear_bhb_loop+0x40/0x90 [ 891.889732][T21374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.889752][T21374] RIP: 0033:0x7f78d319ce59 [ 891.889775][T21374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.889790][T21374] RSP: 002b:00007f78d4096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.889808][T21374] RAX: ffffffffffffffda RBX: 00007f78d3415fa0 RCX: 00007f78d319ce59 [ 891.889824][T21374] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 000000000000000f [ 891.889835][T21374] RBP: 00007f78d4096090 R08: 0000000000000000 R09: 0000000000000000 [ 891.889845][T21374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.889856][T21374] R13: 00007f78d3416038 R14: 00007f78d3415fa0 R15: 00007ffdad141a18 [ 891.889921][T21374] [ 891.902447][T21374] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.438490][T20856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.613585][T21034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.645834][T20856] veth0_vlan: entered promiscuous mode [ 892.699916][T20856] veth1_vlan: entered promiscuous mode [ 892.722868][ T5642] Bluetooth: hci1: command tx timeout [ 892.757162][T21034] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.859041][T15150] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.866254][T15150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.999343][T21170] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 893.020970][T21170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 893.032306][T21170] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 893.045653][T21170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 893.079010][T21170] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 893.111548][T21170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 893.129682][T15461] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.136878][T15461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 893.156314][T21170] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 893.193552][T21170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 893.254662][T20856] veth0_macvtap: entered promiscuous mode [ 893.287109][T20856] veth1_macvtap: entered promiscuous mode [ 893.374016][T20856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.456183][T20856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.526646][T15461] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.552584][T15461] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.579635][T15461] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.602834][T15461] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.850216][T15454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 893.884719][T21170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 893.896650][T15454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 893.993244][T21170] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.105990][T15456] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.113254][T15456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.181018][T15456] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.188251][T15456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.295214][T15447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.336095][T15447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.522808][T21443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.624042][T15459] hsr_slave_0: left promiscuous mode [ 894.653262][T21446] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4716'. [ 894.676798][T21453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4627'. [ 894.690590][T15459] hsr_slave_1: left promiscuous mode [ 894.696895][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.713366][T15459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.765556][T15459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.782611][T15459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.830843][T15459] veth1_macvtap: left promiscuous mode [ 894.842144][T15459] veth0_macvtap: left promiscuous mode [ 894.861097][T15459] veth1_vlan: left promiscuous mode [ 894.879691][T15459] veth0_vlan: left promiscuous mode [ 895.352626][T15459] team0 (unregistering): Port device team_slave_1 removed [ 895.369092][T21477] netlink: 'syz.0.4720': attribute type 10 has an invalid length. [ 895.380835][T15459] team0 (unregistering): Port device team_slave_0 removed [ 895.549358][T21474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4720'. [ 895.657518][T21477] team0 (unregistering): Port device team_slave_0 removed [ 895.680004][T21477] team0 (unregistering): Port device team_slave_1 removed [ 895.695880][T21034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.074747][T21493] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4723'. [ 896.357024][T21509] P: entered promiscuous mode [ 897.261309][T21527] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4728'. [ 897.629603][T21170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.713355][T21530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4729'. [ 897.750035][T21034] veth0_vlan: entered promiscuous mode [ 897.766341][T21034] veth1_vlan: entered promiscuous mode [ 897.807419][T21034] veth0_macvtap: entered promiscuous mode [ 897.874197][T21034] veth1_macvtap: entered promiscuous mode [ 897.988728][T21034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.038759][T21034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.093881][T15150] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.118250][T15150] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.168730][T15150] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.205806][T15150] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.455404][T21558] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4733'. [ 898.481463][T15454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.507934][T15454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.597659][T21170] veth0_vlan: entered promiscuous mode [ 898.625540][T15447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.641681][T21170] veth1_vlan: entered promiscuous mode [ 898.657176][T15447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.696325][T21569] FAULT_INJECTION: forcing a failure. [ 898.696325][T21569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 898.725150][T21569] CPU: 1 UID: 0 PID: 21569 Comm: syz.0.4736 Not tainted syzkaller #0 PREEMPT(full) [ 898.725174][T21569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 898.725184][T21569] Call Trace: [ 898.725191][T21569] [ 898.725198][T21569] dump_stack_lvl+0xe8/0x150 [ 898.725221][T21569] should_fail_ex+0x412/0x560 [ 898.725247][T21569] _copy_from_iter+0x1d3/0x1670 [ 898.725274][T21569] ? rcu_is_watching+0x15/0xb0 [ 898.725325][T21569] ? __pfx__copy_from_iter+0x10/0x10 [ 898.725356][T21569] ? __alloc_skb+0x4e5/0x7d0 [ 898.725375][T21569] ? skb_put+0x11b/0x210 [ 898.725399][T21569] pfkey_sendmsg+0x265/0x1120 [ 898.725422][T21569] ? unwind_next_frame+0xa6/0x2550 [ 898.725466][T21569] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 898.725493][T21569] ? aa_sk_perm+0x6d5/0x900 [ 898.725522][T21569] ? __pfx_aa_sk_perm+0x10/0x10 [ 898.725539][T21569] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 898.725568][T21569] ? aa_sock_msg_perm+0xf1/0x1b0 [ 898.725592][T21569] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 898.725615][T21569] ____sys_sendmsg+0x972/0x9f0 [ 898.725644][T21569] ? __might_fault+0xaf/0x130 [ 898.725670][T21569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 898.725702][T21569] ? import_iovec+0x73/0xa0 [ 898.725721][T21569] ___sys_sendmsg+0x2a5/0x360 [ 898.725742][T21569] ? __lock_acquire+0x6b5/0x2cf0 [ 898.725764][T21569] ? __pfx____sys_sendmsg+0x10/0x10 [ 898.725818][T21569] ? __fget_files+0x2a/0x420 [ 898.725836][T21569] ? __fget_files+0x3a0/0x420 [ 898.725862][T21569] __x64_sys_sendmsg+0x1bd/0x2a0 [ 898.725888][T21569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 898.725920][T21569] ? __pfx_ksys_write+0x10/0x10 [ 898.725948][T21569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.725966][T21569] do_syscall_64+0x174/0x580 [ 898.725987][T21569] ? trace_irq_disable+0x3b/0x140 [ 898.726010][T21569] ? clear_bhb_loop+0x40/0x90 [ 898.726031][T21569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.726048][T21569] RIP: 0033:0x7f78d319ce59 [ 898.726064][T21569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.726078][T21569] RSP: 002b:00007f78d4096028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 898.726095][T21569] RAX: ffffffffffffffda RBX: 00007f78d3415fa0 RCX: 00007f78d319ce59 [ 898.726108][T21569] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005 [ 898.726119][T21569] RBP: 00007f78d4096090 R08: 0000000000000000 R09: 0000000000000000 [ 898.726129][T21569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 898.726139][T21569] R13: 00007f78d3416038 R14: 00007f78d3415fa0 R15: 00007ffdad141a18 [ 898.726167][T21569] [ 898.729642][T21571] netlink: 7060 bytes leftover after parsing attributes in process `syz.1.4737'. [ 898.744958][T21170] veth0_macvtap: entered promiscuous mode [ 899.016975][T21170] veth1_macvtap: entered promiscuous mode [ 899.162947][T21170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.180467][T21581] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4666'. [ 899.196467][T21581] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 899.198851][T21583] netlink: 'syz.1.4739': attribute type 13 has an invalid length. [ 899.234320][T21585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4740'. [ 899.257780][T21170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 899.537573][T21583] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.545363][T21583] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.546929][T21593] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.707407][T21583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.736417][T21583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.940525][T15456] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.979025][T15456] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.995683][T21606] __nla_validate_parse: 1 callbacks suppressed [ 899.995717][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4748'. [ 900.014986][T15456] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.069435][T15456] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.098071][T21606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4748'. [ 900.109953][T15456] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.140331][T15456] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.221665][T15456] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.235199][T15456] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.248954][T21614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4751'. [ 900.449988][T21620] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4753'. [ 900.465222][T21618] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4752'. [ 900.497827][T15459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.500317][T21620] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4753'. [ 900.520379][T15459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.598708][T15454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.627959][T15454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.629190][T21623] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 900.720787][T21630] FAULT_INJECTION: forcing a failure. [ 900.720787][T21630] name failslab, interval 1, probability 0, space 0, times 0 [ 900.767176][T21630] CPU: 0 UID: 0 PID: 21630 Comm: syz.6.4756 Not tainted syzkaller #0 PREEMPT(full) [ 900.767201][T21630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 900.767212][T21630] Call Trace: [ 900.767219][T21630] [ 900.767226][T21630] dump_stack_lvl+0xe8/0x150 [ 900.767253][T21630] should_fail_ex+0x412/0x560 [ 900.767282][T21630] should_failslab+0xa8/0x100 [ 900.767307][T21630] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 900.767329][T21630] ? __alloc_skb+0x186/0x7d0 [ 900.767349][T21630] ? __alloc_skb+0x1d0/0x7d0 [ 900.767367][T21630] ? __local_bh_enable_ip+0xd0/0x130 [ 900.767414][T21630] __alloc_skb+0x1d0/0x7d0 [ 900.767439][T21630] netlink_sendmsg+0x5d4/0xb40 [ 900.767471][T21630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.767496][T21630] ? lockdep_hardirqs_on+0x7a/0x110 [ 900.767519][T21630] ? aa_sock_msg_perm+0xf1/0x1b0 [ 900.767543][T21630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 900.767567][T21630] ____sys_sendmsg+0x972/0x9f0 [ 900.767599][T21630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 900.767631][T21630] ? import_iovec+0x73/0xa0 [ 900.767653][T21630] ___sys_sendmsg+0x2a5/0x360 [ 900.767675][T21630] ? __lock_acquire+0x6b5/0x2cf0 [ 900.767698][T21630] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.767755][T21630] ? __fget_files+0x2a/0x420 [ 900.767773][T21630] ? __fget_files+0x3a0/0x420 [ 900.767806][T21630] __x64_sys_sendmsg+0x1bd/0x2a0 [ 900.767832][T21630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 900.767864][T21630] ? __pfx_ksys_write+0x10/0x10 [ 900.767899][T21630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.767918][T21630] do_syscall_64+0x174/0x580 [ 900.767942][T21630] ? clear_bhb_loop+0x40/0x90 [ 900.767963][T21630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.767981][T21630] RIP: 0033:0x7f2e2219ce59 [ 900.767997][T21630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.768011][T21630] RSP: 002b:00007f2e22f88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.768031][T21630] RAX: ffffffffffffffda RBX: 00007f2e22415fa0 RCX: 00007f2e2219ce59 [ 900.768043][T21630] RDX: 0000000020040000 RSI: 0000200000000200 RDI: 0000000000000006 [ 900.768054][T21630] RBP: 00007f2e22f88090 R08: 0000000000000000 R09: 0000000000000000 [ 900.768065][T21630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.768076][T21630] R13: 00007f2e22416038 R14: 00007f2e22415fa0 R15: 00007ffd46c38998 [ 900.768105][T21630] [ 900.868401][T21636] netlink: 'syz.1.4757': attribute type 17 has an invalid length. [ 901.188967][T21636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.208951][T21636] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.218940][T21654] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4759'. [ 901.240797][T21636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.379564][T21636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.393964][T21636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.429199][T21636] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 901.440467][T21636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 901.503155][T21636] veth1_vlan: left promiscuous mode [ 901.535305][T21636] veth0_vlan: left promiscuous mode [ 901.548860][T21636] veth0_vlan: entered promiscuous mode [ 901.578439][T21636] veth1_vlan: entered promiscuous mode [ 901.607989][T21636] veth1_macvtap: left promiscuous mode [ 901.616903][T21636] veth0_macvtap: left promiscuous mode [ 901.631231][T21636] veth0_macvtap: entered promiscuous mode [ 901.649740][T21636] veth1_macvtap: entered promiscuous mode [ 901.677941][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 901.696921][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 901.706074][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 901.714788][T21636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 901.758392][T21666] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4764'. [ 901.774522][T15459] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.793991][T15459] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.831458][T15459] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.854190][T15459] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.118065][T21675] syzkaller0: entered promiscuous mode [ 902.139043][T21680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 902.154414][T21675] syzkaller0: entered allmulticast mode [ 902.401331][T21693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4769'. [ 902.437011][T21693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4769'. [ 904.903646][T21717] sctp: [Deprecated]: syz.0.4773 (pid 21717) Use of struct sctp_assoc_value in delayed_ack socket option. [ 904.903646][T21717] Use struct sctp_sack_info instead [ 905.198093][T21726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4776'. [ 906.149035][T21730] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 907.204102][T21738] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4781'. [ 907.437134][ T181] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.584066][ T181] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.759423][ T181] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.994718][T15070] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 908.006699][T15070] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 908.016835][T15070] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 908.025992][T15070] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 908.035659][T21773] netlink: 'syz.6.4792': attribute type 16 has an invalid length. [ 908.039996][T15070] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 908.077996][T21773] netlink: 'syz.6.4792': attribute type 17 has an invalid length. [ 908.112084][ T181] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 908.370370][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4794'. [ 908.380158][T21783] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4793'. [ 908.385318][T21773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 908.393905][T21782] netlink: 312 bytes leftover after parsing attributes in process `syz.7.4794'. [ 908.404796][T21773] 8021q: adding VLAN 0 to HW filter on device team0 [ 908.416210][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4794'. [ 908.444659][T21773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.458001][T21773] vxcan0: left promiscuous mode [ 908.463734][T21773] vxcan0: left allmulticast mode [ 908.778032][T21773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.790445][T21773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.810862][T21773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 908.822776][T21773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 908.855366][T21773] veth1_vlan: left promiscuous mode [ 908.861664][T21773] veth0_vlan: left promiscuous mode [ 908.868893][T21773] veth0_vlan: entered promiscuous mode [ 908.877735][T21773] veth1_vlan: entered promiscuous mode [ 908.889051][T21773] veth1_macvtap: left promiscuous mode [ 908.896151][T21773] veth0_macvtap: left promiscuous mode [ 908.904990][T21773] veth0_macvtap: entered promiscuous mode [ 908.917691][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 908.925681][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 908.933836][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 908.941786][T21773] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 908.983119][ T5293] 8021q: adding VLAN 0 to HW filter on device eth21 [ 909.014253][T15461] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.021490][T15461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.070651][T15461] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.077899][T15461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.239725][T21800] netlink: 'syz.1.4799': attribute type 1 has an invalid length. [ 909.255091][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4799'. [ 909.267075][T21791] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4797'. [ 909.295686][T18607] syz2: Port: 1 Link ACTIVE [ 909.302176][T15150] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.320884][T15150] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.385953][T15150] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.414955][T15150] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.458202][T15459] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 909.481636][T15459] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 909.491274][T11549] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 909.622867][T11327] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 909.792065][T21821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4802'. [ 909.819288][T15150] ip6_tunnel:  xmit: Local address not yet configured! [ 909.854087][ T30] audit: type=1107 audit(1780678651.620:3): pid=21822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I3I}~*@X#2F44vo#wt#„:^TK{ [ 909.854087][ T30] ҉oeZ#]AGsv9[^d^( βh߀(;YVt3' [ 909.858628][T18607] ip6_tunnel:  xmit: Local address not yet configured! [ 909.886367][T15150] ip6_tunnel:  xmit: Local address not yet configured! [ 909.981611][T21823] netlink: 40227 bytes leftover after parsing attributes in process `syz.7.4805'. [ 910.016035][ T181] bridge_slave_1: left allmulticast mode [ 910.026045][ T181] bridge_slave_1: left promiscuous mode [ 910.045323][ T181] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.082576][T15070] Bluetooth: hci1: command tx timeout [ 910.111529][ T181] bridge_slave_0: left allmulticast mode [ 910.150819][ T181] bridge_slave_0: left promiscuous mode [ 910.178956][ T181] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.192682][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 910.200154][T21837] netlink: 'syz.6.4807': attribute type 17 has an invalid length. [ 910.270968][T21841] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4808'. [ 910.369225][T21845] netlink: 'syz.1.4810': attribute type 17 has an invalid length. [ 910.505286][ T181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 910.521157][ T181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 910.533120][ T181] bond0 (unregistering): Released all slaves [ 910.563580][ T5739] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 910.633246][ T5739] ip6_tunnel:  xmit: Local address not yet configured! [ 910.649620][ T5293] 8021q: adding VLAN 0 to HW filter on device eth22 [ 911.251090][T21869] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4816'. [ 911.366239][T21864] netlink: 'syz.7.4815': attribute type 10 has an invalid length. [ 911.439361][T21864] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4815'. [ 911.635393][T21864] team0: Port device geneve1 added [ 911.962654][T21886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4820'. [ 912.165630][T15070] Bluetooth: hci1: command tx timeout [ 912.893256][T21898] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4822'. [ 913.151620][T21905] netlink: 'syz.6.4825': attribute type 17 has an invalid length. [ 913.161861][ T181] hsr_slave_0: left promiscuous mode [ 913.208903][ T181] hsr_slave_1: left promiscuous mode [ 913.221937][ T181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.243765][ T181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.255377][T21910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.274346][ T181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.294966][ T181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 913.336303][ T181] veth1_macvtap: left promiscuous mode [ 913.342668][ T181] veth0_macvtap: left promiscuous mode [ 913.353133][ T181] veth1_vlan: left promiscuous mode [ 913.381996][ T181] veth0_vlan: left promiscuous mode [ 914.136289][ T181] team0 (unregistering): Port device team_slave_1 removed [ 914.212354][ T181] team0 (unregistering): Port device team_slave_0 removed [ 914.244866][T15070] Bluetooth: hci1: command tx timeout [ 914.972489][ C1] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 914.972526][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 915.169971][ T5293] 8021q: adding VLAN 0 to HW filter on device eth23 [ 915.182479][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 915.216447][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 915.412086][ T5364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 916.242632][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 916.332010][T15070] Bluetooth: hci1: command tx timeout [ 917.466987][ T5293] 8021q: adding VLAN 0 to HW filter on device eth24 [ 917.966132][T21768] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.980764][T21976] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 917.982480][T21768] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.012132][T21768] bridge_slave_0: entered allmulticast mode [ 918.048905][T21768] bridge_slave_0: entered promiscuous mode [ 918.073863][T21768] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.104570][T21768] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.115406][T21768] bridge_slave_1: entered allmulticast mode [ 918.132521][T21768] bridge_slave_1: entered promiscuous mode [ 918.363989][T21768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.381117][T21988] netlink: 'syz.1.4841': attribute type 17 has an invalid length. [ 918.477942][T21768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.944624][T22007] FAULT_INJECTION: forcing a failure. [ 918.944624][T22007] name failslab, interval 1, probability 0, space 0, times 0 [ 918.958183][T22007] CPU: 0 UID: 0 PID: 22007 Comm: syz.1.4846 Not tainted syzkaller #0 PREEMPT(full) [ 918.958216][T22007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 918.958226][T22007] Call Trace: [ 918.958233][T22007] [ 918.958241][T22007] dump_stack_lvl+0xe8/0x150 [ 918.958268][T22007] should_fail_ex+0x412/0x560 [ 918.958299][T22007] should_failslab+0xa8/0x100 [ 918.958322][T22007] ? skb_clone+0x212/0x3a0 [ 918.958347][T22007] kmem_cache_alloc_noprof+0x87/0x650 [ 918.958367][T22007] ? apparmor_capable+0x126/0x170 [ 918.958399][T22007] skb_clone+0x212/0x3a0 [ 918.958421][T22007] ? nfnetlink_rcv+0x4b0/0x27b0 [ 918.958444][T22007] nfnetlink_rcv+0x4de/0x27b0 [ 918.958475][T22007] ? lockdep_hardirqs_on+0x7a/0x110 [ 918.958499][T22007] ? __local_bh_enable_ip+0xd0/0x130 [ 918.958516][T22007] ? __dev_queue_xmit+0x2b6/0x3950 [ 918.958538][T22007] ? __dev_queue_xmit+0x1fe5/0x3950 [ 918.958560][T22007] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 918.958592][T22007] ? __dev_queue_xmit+0x2b6/0x3950 [ 918.958622][T22007] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 918.958664][T22007] ? ref_tracker_free+0x693/0x840 [ 918.958686][T22007] ? __pfx_ref_tracker_free+0x10/0x10 [ 918.958701][T22007] ? __asan_memcpy+0x40/0x70 [ 918.958719][T22007] ? __skb_clone+0x63/0x7a0 [ 918.958746][T22007] ? perf_trace_lock+0xff/0x410 [ 918.958774][T22007] ? __pfx_perf_trace_lock+0x10/0x10 [ 918.958805][T22007] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.958836][T22007] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.958857][T22007] ? netlink_deliver_tap+0x2e/0x1b0 [ 918.958887][T22007] netlink_unicast+0x75c/0x8e0 [ 918.958923][T22007] netlink_sendmsg+0x813/0xb40 [ 918.958958][T22007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 918.958985][T22007] ? aa_sock_msg_perm+0xf1/0x1b0 [ 918.959007][T22007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 918.959031][T22007] ____sys_sendmsg+0x972/0x9f0 [ 918.959052][T22007] ? __pfx_perf_trace_lock+0x10/0x10 [ 918.959080][T22007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 918.959116][T22007] ? import_iovec+0x73/0xa0 [ 918.959141][T22007] ___sys_sendmsg+0x2a5/0x360 [ 918.959163][T22007] ? __lock_acquire+0x6b5/0x2cf0 [ 918.959188][T22007] ? __pfx____sys_sendmsg+0x10/0x10 [ 918.959224][T22007] ? trace_call_bpf+0xc2/0xb70 [ 918.959261][T22007] ? __fget_files+0x2a/0x420 [ 918.959294][T22007] ? __fget_files+0x2a/0x420 [ 918.959311][T22007] ? __fget_files+0x3a0/0x420 [ 918.959343][T22007] __x64_sys_sendmsg+0x1bd/0x2a0 [ 918.959370][T22007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 918.959406][T22007] ? __pfx_ksys_write+0x10/0x10 [ 918.959440][T22007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.959459][T22007] do_syscall_64+0x174/0x580 [ 918.959485][T22007] ? trace_irq_disable+0x3b/0x140 [ 918.959510][T22007] ? clear_bhb_loop+0x40/0x90 [ 918.959533][T22007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.959551][T22007] RIP: 0033:0x7f8a2a39ce59 [ 918.959569][T22007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.959583][T22007] RSP: 002b:00007f8a2b309028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 918.959602][T22007] RAX: ffffffffffffffda RBX: 00007f8a2a615fa0 RCX: 00007f8a2a39ce59 [ 918.959614][T22007] RDX: 0000000000000c7c RSI: 0000200000009b40 RDI: 0000000000000003 [ 918.959624][T22007] RBP: 00007f8a2b309090 R08: 0000000000000000 R09: 0000000000000000 [ 918.959634][T22007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.959643][T22007] R13: 00007f8a2a616038 R14: 00007f8a2a615fa0 R15: 00007ffcd189e368 [ 918.959670][T22007] [ 919.310276][T21768] team0: Port device team_slave_0 added [ 919.321491][T21768] team0: Port device team_slave_1 added [ 919.430904][ T5293] 8021q: adding VLAN 0 to HW filter on device eth25 [ 919.491190][T22004] netlink: 'syz.6.4845': attribute type 2 has an invalid length. [ 919.511421][T21768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.539561][T21768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.601983][T21768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.614868][T21768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.625618][T21768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.688614][T21768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.784020][T21768] hsr_slave_0: entered promiscuous mode [ 919.793951][T21768] hsr_slave_1: entered promiscuous mode [ 919.808063][T21768] debugfs: 'hsr0' already exists in 'hsr' [ 919.813817][T21768] Cannot create hsr debugfs directory [ 919.823424][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4850'. [ 919.836024][T22019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4850'. [ 919.857594][T22019] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4850'. [ 920.242655][T22034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4853'. [ 920.295018][T22040] netlink: 'syz.6.4855': attribute type 17 has an invalid length. [ 920.455024][T20569] ip6_tunnel:  xmit: Local address not yet configured! [ 920.462720][T20569] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 920.933519][T22058] netlink: 'syz.0.4861': attribute type 2 has an invalid length. [ 920.957425][T22058] tipc: Started in network mode [ 920.977812][T22058] tipc: Node identity 1340008, cluster identity 4711 [ 920.995253][T22058] tipc: Node number set to 20185096 [ 921.108292][T22065] netlink: 'syz.7.4863': attribute type 2 has an invalid length. [ 921.203856][T20569] ip6_tunnel:  xmit: Local address not yet configured! [ 921.362242][T18607] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 921.454767][T21768] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 921.489976][T21768] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 921.523168][T21768] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 921.562336][T22083] IPv6: NLM_F_CREATE should be specified when creating new route [ 921.567936][T21768] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 921.580874][T22082] netlink: 'syz.1.4869': attribute type 17 has an invalid length. [ 921.615509][T21768] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 921.664539][T21768] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 921.694716][T21768] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 921.732212][T21768] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 922.076240][T22109] netlink: 5204 bytes leftover after parsing attributes in process `syz.6.4874'. [ 922.120701][T21768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 922.146438][T22115] netlink: 'syz.1.4876': attribute type 2 has an invalid length. [ 922.158075][T22109] sctp: [Deprecated]: syz.6.4874 (pid 22109) Use of struct sctp_assoc_value in delayed_ack socket option. [ 922.158075][T22109] Use struct sctp_sack_info instead [ 922.182901][T22115] tipc: Started in network mode [ 922.207459][T22115] tipc: Node identity 1340008, cluster identity 4711 [ 922.245612][T22115] tipc: Node number set to 20185096 [ 922.339464][T21768] 8021q: adding VLAN 0 to HW filter on device team0 [ 922.372809][T15443] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.380015][T15443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 922.401999][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 922.402122][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 922.456701][T15443] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.463933][T15443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 922.977871][T22136] syzkaller0: entered promiscuous mode [ 922.998048][T22136] syzkaller0: entered allmulticast mode [ 923.052444][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 923.070561][T22136] syzkaller0: tun_net_xmit 1280 [ 923.092095][T22136] syzkaller0: create flow: hash 1410424696 index 1 [ 923.121318][T22150] netlink: 'syz.6.4885': attribute type 17 has an invalid length. [ 923.577364][T20569] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 923.594122][T20569] ip6_tunnel:  xmit: Local address not yet configured! [ 923.637967][T22134] syzkaller0: delete flow: hash 1410424696 index 1 [ 924.099029][ T5364] ip6_tunnel:  xmit: Local address not yet configured! [ 926.584282][T22176] netlink: 'syz.6.4888': attribute type 2 has an invalid length. [ 926.851126][T22208] netlink: 'syz.1.4897': attribute type 17 has an invalid length. [ 927.366624][T21768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.526120][T22233] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4900'. [ 928.064587][T21768] veth0_vlan: entered promiscuous mode [ 928.120080][T21768] veth1_vlan: entered promiscuous mode [ 928.210847][T21768] veth0_macvtap: entered promiscuous mode [ 928.241435][T21768] veth1_macvtap: entered promiscuous mode [ 928.326247][T22253] netlink: 'syz.6.4903': attribute type 2 has an invalid length. [ 928.378216][T21768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.437262][T21768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.503757][T15443] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.560511][T15443] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.601952][T15443] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.617519][T15443] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.763785][T22265] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 928.810766][T22260] syzkaller0: entered promiscuous mode [ 928.835858][T22260] syzkaller0: entered allmulticast mode [ 928.865692][T22260] syzkaller0: create flow: hash 1410424696 index 1 [ 928.880108][ T181] syzkaller0: tun_net_xmit 48 [ 929.103163][T22259] syzkaller0: delete flow: hash 1410424696 index 1 [ 931.353285][T15454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.364750][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.374596][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.405926][T15454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.511369][T15447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 931.585410][T15447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.647712][T22300] netlink: 'syz.0.4913': attribute type 17 has an invalid length. [ 931.847561][T22304] netlink: 'syz.7.4914': attribute type 2 has an invalid length. [ 931.895047][T22304] tipc: Started in network mode [ 931.917716][T22304] tipc: Node identity 1340008, cluster identity 4711 [ 931.992514][T22304] tipc: Node number set to 20185096 [ 932.279009][ T181] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 932.279030][ T181] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 933.200279][T22328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 933.512336][T22342] FAULT_INJECTION: forcing a failure. [ 933.512336][T22342] name failslab, interval 1, probability 0, space 0, times 0 [ 933.536963][T22336] syzkaller0: entered promiscuous mode [ 933.573270][T22342] CPU: 1 UID: 0 PID: 22342 Comm: syz.6.4920 Not tainted syzkaller #0 PREEMPT(full) [ 933.573297][T22342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 933.573308][T22342] Call Trace: [ 933.573315][T22342] [ 933.573323][T22342] dump_stack_lvl+0xe8/0x150 [ 933.573350][T22342] should_fail_ex+0x412/0x560 [ 933.573382][T22342] should_failslab+0xa8/0x100 [ 933.573410][T22342] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 933.573433][T22342] ? __alloc_skb+0x186/0x7d0 [ 933.573454][T22342] ? __alloc_skb+0x1d0/0x7d0 [ 933.573472][T22342] ? __local_bh_enable_ip+0xd0/0x130 [ 933.573497][T22342] __alloc_skb+0x1d0/0x7d0 [ 933.573518][T22342] ? pfkey_spddump+0x17e/0x260 [ 933.573541][T22342] pfkey_sendmsg+0xd42/0x1120 [ 933.573567][T22342] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 933.573604][T22342] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 933.573663][T22342] ? aa_sock_msg_perm+0xf1/0x1b0 [ 933.573688][T22342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 933.573715][T22342] ____sys_sendmsg+0x972/0x9f0 [ 933.573739][T22342] ? __might_fault+0xaf/0x130 [ 933.573769][T22342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.573805][T22342] ? import_iovec+0x73/0xa0 [ 933.573828][T22342] ___sys_sendmsg+0x2a5/0x360 [ 933.573851][T22342] ? __lock_acquire+0x6b5/0x2cf0 [ 933.573874][T22342] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.573943][T22342] ? __fget_files+0x2a/0x420 [ 933.573961][T22342] ? __fget_files+0x3a0/0x420 [ 933.573995][T22342] __x64_sys_sendmsg+0x1bd/0x2a0 [ 933.574023][T22342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 933.574060][T22342] ? __pfx_ksys_write+0x10/0x10 [ 933.574095][T22342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.574142][T22342] do_syscall_64+0x174/0x580 [ 933.574164][T22342] ? trace_irq_disable+0x3b/0x140 [ 933.574189][T22342] ? clear_bhb_loop+0x40/0x90 [ 933.574212][T22342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.574228][T22342] RIP: 0033:0x7f2e2219ce59 [ 933.574246][T22342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.574260][T22342] RSP: 002b:00007f2e22f88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.574277][T22342] RAX: ffffffffffffffda RBX: 00007f2e22415fa0 RCX: 00007f2e2219ce59 [ 933.574292][T22342] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000005 [ 933.574303][T22342] RBP: 00007f2e22f88090 R08: 0000000000000000 R09: 0000000000000000 [ 933.574314][T22342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.574324][T22342] R13: 00007f2e22416038 R14: 00007f2e22415fa0 R15: 00007ffd46c38998 [ 933.574359][T22342] [ 933.626382][T22336] syzkaller0: entered allmulticast mode [ 933.881636][T15150] syzkaller0: tun_net_xmit 48 [ 935.537237][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 935.685380][T22381] netlink: 'syz.4.4924': attribute type 6 has an invalid length. [ 935.706072][T22381] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4924'. [ 935.917966][T22388] netlink: 'syz.0.4927': attribute type 17 has an invalid length. [ 936.002084][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 936.235425][T22397] netlink: 'syz.6.4926': attribute type 21 has an invalid length. [ 936.250660][T22397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4926'. [ 936.341675][T22401] netlink: 'syz.4.4930': attribute type 21 has an invalid length. [ 936.351511][T22401] IPv6: NLM_F_CREATE should be specified when creating new route [ 936.359782][T22401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4930'. [ 937.146303][T22405] netlink: 'syz.1.4932': attribute type 10 has an invalid length. [ 937.161873][T22405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4932'. [ 937.693998][T22415] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4936'. [ 937.772169][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 939.042955][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 939.043372][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 939.277040][T22405] team0: Port device geneve1 added [ 939.623969][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4945'. [ 939.667995][T22443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4946'. [ 939.676848][T22440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4945'. [ 939.847617][T22449] netlink: 'syz.7.4944': attribute type 21 has an invalid length. [ 939.859145][T22449] IPv6: NLM_F_CREATE should be specified when creating new route [ 939.890998][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4944'. [ 940.464513][T22466] netlink: 'syz.6.4950': attribute type 21 has an invalid length. [ 940.549247][T22466] FAULT_INJECTION: forcing a failure. [ 940.549247][T22466] name failslab, interval 1, probability 0, space 0, times 0 [ 940.572702][T22466] CPU: 1 UID: 0 PID: 22466 Comm: syz.6.4950 Not tainted syzkaller #0 PREEMPT(full) [ 940.572725][T22466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 940.572734][T22466] Call Trace: [ 940.572741][T22466] [ 940.572749][T22466] dump_stack_lvl+0xe8/0x150 [ 940.572775][T22466] should_fail_ex+0x412/0x560 [ 940.572805][T22466] should_failslab+0xa8/0x100 [ 940.572830][T22466] __kmalloc_noprof+0xe8/0x760 [ 940.572852][T22466] ? fib_create_info+0x1723/0x31f0 [ 940.572876][T22466] fib_create_info+0x1723/0x31f0 [ 940.572907][T22466] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 940.572939][T22466] fib_table_insert+0xc8/0x1b50 [ 940.572973][T22466] ? fib_trie_table+0x142/0x1d0 [ 940.572996][T22466] ? fib_new_table+0x27f/0x2d0 [ 940.573023][T22466] inet_rtm_newroute+0x14f/0x250 [ 940.573038][T22466] ? __local_bh_enable_ip+0xd0/0x130 [ 940.573055][T22466] ? __dev_queue_xmit+0x2b6/0x3950 [ 940.573081][T22466] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 940.573119][T22466] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 940.573135][T22466] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 940.573160][T22466] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 940.573180][T22466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.573200][T22466] ? ref_tracker_free+0x693/0x840 [ 940.573220][T22466] ? __pfx_ref_tracker_free+0x10/0x10 [ 940.573236][T22466] ? __asan_memcpy+0x40/0x70 [ 940.573253][T22466] ? __skb_clone+0x63/0x7a0 [ 940.573284][T22466] netlink_rcv_skb+0x232/0x4b0 [ 940.573309][T22466] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.573332][T22466] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 940.573366][T22466] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.573387][T22466] ? netlink_deliver_tap+0x2e/0x1b0 [ 940.573414][T22466] netlink_unicast+0x75c/0x8e0 [ 940.573444][T22466] netlink_sendmsg+0x813/0xb40 [ 940.573476][T22466] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.573500][T22466] ? aa_sock_msg_perm+0xf1/0x1b0 [ 940.573526][T22466] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 940.573547][T22466] ____sys_sendmsg+0x972/0x9f0 [ 940.573569][T22466] ? __might_fault+0xaf/0x130 [ 940.573594][T22466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 940.573622][T22466] ? import_iovec+0x73/0xa0 [ 940.573641][T22466] ___sys_sendmsg+0x2a5/0x360 [ 940.573660][T22466] ? __lock_acquire+0x6b5/0x2cf0 [ 940.573687][T22466] ? __pfx____sys_sendmsg+0x10/0x10 [ 940.573739][T22466] ? __fget_files+0x2a/0x420 [ 940.573756][T22466] ? __fget_files+0x3a0/0x420 [ 940.573781][T22466] __x64_sys_sendmsg+0x1bd/0x2a0 [ 940.573801][T22466] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 940.573832][T22466] ? __pfx_ksys_write+0x10/0x10 [ 940.573861][T22466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.573880][T22466] do_syscall_64+0x174/0x580 [ 940.573903][T22466] ? trace_irq_disable+0x3b/0x140 [ 940.573927][T22466] ? clear_bhb_loop+0x40/0x90 [ 940.573946][T22466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.573961][T22466] RIP: 0033:0x7f2e2219ce59 [ 940.573977][T22466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.573990][T22466] RSP: 002b:00007f2e22f88028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.574007][T22466] RAX: ffffffffffffffda RBX: 00007f2e22415fa0 RCX: 00007f2e2219ce59 [ 940.574019][T22466] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 940.574028][T22466] RBP: 00007f2e22f88090 R08: 0000000000000000 R09: 0000000000000000 [ 940.574038][T22466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.574048][T22466] R13: 00007f2e22416038 R14: 00007f2e22415fa0 R15: 00007ffd46c38998 [ 940.574075][T22466] [ 941.095989][T22474] netlink: 'syz.7.4952': attribute type 17 has an invalid length. [ 941.401892][T22483] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4943'. [ 941.438982][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 941.459988][T22488] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4943'. [ 941.494944][T22488] openvswitch: netlink: Flow key attr not present in new flow. [ 941.655688][T15459] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 942.015628][T22507] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4961'. [ 942.368152][T22521] netlink: 'syz.0.4962': attribute type 21 has an invalid length. [ 942.397402][T22521] IPv6: NLM_F_CREATE should be specified when creating new route [ 942.428954][T22521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4962'. [ 942.709699][T22528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4965'. [ 943.090240][T22540] netlink: 'syz.6.4969': attribute type 17 has an invalid length. [ 943.226749][T22547] netlink: 'syz.0.4970': attribute type 32 has an invalid length. [ 943.255679][T18607] ip6_tunnel:  xmit: Local address not yet configured! [ 943.288242][ T5364] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 943.522037][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 943.600149][T22556] C: renamed from veth1_to_team (while UP) [ 943.631456][T22556] netlink: 164 bytes leftover after parsing attributes in process `syz.6.4973'. [ 943.657354][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 943.662125][T22560] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4975'. [ 943.740933][T22558] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4974'. [ 943.783872][T22566] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 943.814337][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 943.838908][T22569] netlink: 'syz.1.4976': attribute type 10 has an invalid length. [ 943.849035][ T9] ip6_tunnel:  xmit: Local address not yet configured! [ 943.869494][T22566] syz_tun: entered promiscuous mode [ 943.965019][T22566] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 944.025526][T22569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 944.078516][T22569] team0: Port device bond0 added [ 944.172185][T22584] netlink: 'syz.4.4977': attribute type 10 has an invalid length. [ 944.210866][T22584] veth1_macvtap: left promiscuous mode [ 944.378762][T22592] netlink: 'syz.7.4980': attribute type 21 has an invalid length. [ 944.410288][T22592] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4980'. [ 944.570377][T22597] netlink: 'syz.4.4983': attribute type 17 has an invalid length. [ 945.442321][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 946.371124][T22653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4992'. [ 946.474338][T22653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4992'. [ 947.151729][T20856] bond0: (slave syz_tun): Releasing backup interface [ 947.458843][T15150] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.508545][T22666] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4997'. [ 947.674799][T15150] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.840896][T15150] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.973378][T22687] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 947.984645][T22687] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 947.994696][T22687] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 948.011610][T22687] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 948.024173][T22687] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 948.182582][T22690] openvswitch: netlink: IPv4 tun info is not correct [ 948.326738][T15150] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.405636][T15070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 948.419180][T15070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 948.428019][T15070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 948.443800][T15070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 948.452894][T15070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 948.913360][T22724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5006'. [ 948.941310][T15150] bridge_slave_1: left allmulticast mode [ 948.947936][T15150] bridge_slave_1: left promiscuous mode [ 948.950638][T22724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5006'. [ 948.953901][T15150] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.986287][T15150] bridge_slave_0: left allmulticast mode [ 948.992318][T15150] bridge_slave_0: left promiscuous mode [ 948.998470][T15150] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.293354][T15150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.316080][T15150] bond0 (unregistering): Released all slaves [ 949.484738][T15150] P: left promiscuous mode [ 949.867644][T15150] tipc: Left network mode [ 949.871046][T22752] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5015'. [ 950.090828][T15070] Bluetooth: hci3: command tx timeout [ 950.250317][T22766] netlink: 'syz.4.5019': attribute type 21 has an invalid length. [ 950.265921][T22766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5019'. [ 950.336881][T22766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5019'. [ 950.483556][T15070] Bluetooth: hci4: command tx timeout [ 950.759006][ T5293] 8021q: adding VLAN 0 to HW filter on device eth13 [ 951.287637][T22796] FAULT_INJECTION: forcing a failure. [ 951.287637][T22796] name failslab, interval 1, probability 0, space 0, times 0 [ 951.336422][T22796] CPU: 1 UID: 0 PID: 22796 Comm: syz.4.5027 Not tainted syzkaller #0 PREEMPT(full) [ 951.336445][T22796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 951.336455][T22796] Call Trace: [ 951.336462][T22796] [ 951.336469][T22796] dump_stack_lvl+0xe8/0x150 [ 951.336496][T22796] should_fail_ex+0x412/0x560 [ 951.336527][T22796] should_failslab+0xa8/0x100 [ 951.336555][T22796] __kmalloc_cache_noprof+0x88/0x660 [ 951.336578][T22796] ? nfnetlink_rcv+0xfdf/0x27b0 [ 951.336605][T22796] nfnetlink_rcv+0xfdf/0x27b0 [ 951.336660][T22796] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 951.336697][T22796] ? ref_tracker_free+0x693/0x840 [ 951.336741][T22796] ? __netlink_deliver_tap+0x807/0x850 [ 951.336773][T22796] ? netlink_deliver_tap+0x2e/0x1b0 [ 951.336793][T22796] ? netlink_deliver_tap+0x2e/0x1b0 [ 951.336821][T22796] netlink_unicast+0x75c/0x8e0 [ 951.336852][T22796] netlink_sendmsg+0x813/0xb40 [ 951.336884][T22796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.336910][T22796] ? aa_sock_msg_perm+0xf1/0x1b0 [ 951.336941][T22796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 951.336965][T22796] ____sys_sendmsg+0x972/0x9f0 [ 951.336989][T22796] ? __might_fault+0xaf/0x130 [ 951.337014][T22796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.337048][T22796] ? import_iovec+0x73/0xa0 [ 951.337070][T22796] ___sys_sendmsg+0x2a5/0x360 [ 951.337091][T22796] ? __lock_acquire+0x6b5/0x2cf0 [ 951.337113][T22796] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.337166][T22796] ? __fget_files+0x2a/0x420 [ 951.337185][T22796] ? __fget_files+0x3a0/0x420 [ 951.337213][T22796] __x64_sys_sendmsg+0x1bd/0x2a0 [ 951.337239][T22796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 951.337271][T22796] ? __pfx_ksys_write+0x10/0x10 [ 951.337301][T22796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.337321][T22796] do_syscall_64+0x174/0x580 [ 951.337344][T22796] ? trace_irq_disable+0x3b/0x140 [ 951.337369][T22796] ? clear_bhb_loop+0x40/0x90 [ 951.337390][T22796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.337407][T22796] RIP: 0033:0x7fc5c779ce59 [ 951.337423][T22796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.337437][T22796] RSP: 002b:00007fc5c86df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.337455][T22796] RAX: ffffffffffffffda RBX: 00007fc5c7a15fa0 RCX: 00007fc5c779ce59 [ 951.337467][T22796] RDX: 0000000000000c7c RSI: 0000200000009b40 RDI: 0000000000000003 [ 951.337478][T22796] RBP: 00007fc5c86df090 R08: 0000000000000000 R09: 0000000000000000 [ 951.337489][T22796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.337499][T22796] R13: 00007fc5c7a16038 R14: 00007fc5c7a15fa0 R15: 00007fff18881fa8 [ 951.337528][T22796] [ 951.870856][T22819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5030'. [ 951.871020][T22815] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5030'. [ 952.034027][T22819] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.112782][T22819] bridge_slave_1 (unregistering): left allmulticast mode [ 952.131468][T22819] bridge_slave_1 (unregistering): left promiscuous mode [ 952.138998][T22819] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.164893][T15070] Bluetooth: hci3: command tx timeout [ 952.349864][ T5293] 8021q: adding VLAN 0 to HW filter on device eth14 [ 952.381181][T22833] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5035'. [ 952.561949][T15070] Bluetooth: hci4: command tx timeout [ 952.615680][T15150] hsr_slave_0: left promiscuous mode [ 952.633146][T15150] hsr_slave_1: left promiscuous mode [ 952.648702][T15150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 952.656243][T15150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 952.665057][T15150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 952.681939][T15150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 952.723848][T15150] veth0_macvtap: left promiscuous mode [ 952.736150][T15150] veth1_vlan: left promiscuous mode [ 952.748464][T15150] veth0_vlan: left promiscuous mode [ 952.981574][T15447] smc: removing ib device syz2 [ 953.122027][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 953.149416][T15150] team0 (unregistering): Port device team_slave_1 removed [ 953.176645][T15150] team0 (unregistering): Port device team_slave_0 removed [ 953.315229][T22685] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.322480][T22685] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.329649][T22685] bridge_slave_0: entered allmulticast mode [ 953.339496][T22685] bridge_slave_0: entered promiscuous mode [ 953.388348][ T808] ================================================================== [ 953.396479][ T808] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 953.405270][ T808] Read of size 8 at addr ffff8880979a62f0 by task kworker/1:2/808 [ 953.413105][ T808] [ 953.415444][ T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 953.415477][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 953.415489][ T808] Workqueue: infiniband ib_cache_event_task [ 953.415506][ T808] Call Trace: [ 953.415511][ T808] [ 953.415516][ T808] dump_stack_lvl+0xe8/0x150 [ 953.415528][ T808] print_address_description+0x55/0x1e0 [ 953.415546][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 953.415556][ T808] print_report+0x58/0x70 [ 953.415565][ T808] kasan_report+0x117/0x150 [ 953.415579][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 953.415590][ T808] __ethtool_get_link_ksettings+0x5e/0x170 [ 953.415600][ T808] ib_get_eth_speed+0x180/0x7f0 [ 953.415612][ T808] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 953.415625][ T808] ? do_raw_spin_unlock+0xf5/0x210 [ 953.415640][ T808] ? rxe_query_port+0x6b/0x3d0 [ 953.415651][ T808] rxe_query_port+0x93/0x3d0 [ 953.415662][ T808] ib_query_port+0x170/0x830 [ 953.415675][ T808] ib_cache_update+0x1ba/0xc70 [ 953.415685][ T808] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 953.415701][ T808] ? __pfx_ib_cache_update+0x10/0x10 [ 953.415710][ T808] ? perf_trace_preemptirq_template+0xb2/0x350 [ 953.415724][ T808] ? _raw_spin_unlock_irq+0x23/0x50 [ 953.415737][ T808] ? process_scheduled_works+0xa70/0x1860 [ 953.415752][ T808] ? process_scheduled_works+0xa70/0x1860 [ 953.415767][ T808] ib_cache_event_task+0xe0/0x1d0 [ 953.415777][ T808] ? process_scheduled_works+0xa70/0x1860 [ 953.415787][ T808] process_scheduled_works+0xb5d/0x1860 [ 953.415803][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 953.415813][ T808] ? assign_work+0x3d5/0x5e0 [ 953.415823][ T808] worker_thread+0xa53/0xfc0 [ 953.415839][ T808] kthread+0x389/0x470 [ 953.415851][ T808] ? __pfx_worker_thread+0x10/0x10 [ 953.415860][ T808] ? __pfx_kthread+0x10/0x10 [ 953.415872][ T808] ret_from_fork+0x514/0xb70 [ 953.415891][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 953.415900][ T808] ? __switch_to+0xc79/0x1410 [ 953.415915][ T808] ? __pfx_kthread+0x10/0x10 [ 953.415927][ T808] ret_from_fork_asm+0x1a/0x30 [ 953.415941][ T808] [ 953.415945][ T808] [ 953.625730][ T808] Allocated by task 18420: [ 953.630202][ T808] kasan_save_track+0x3e/0x80 [ 953.634875][ T808] __kasan_kmalloc+0x93/0xb0 [ 953.639449][ T808] __kvmalloc_node_noprof+0x528/0x8a0 [ 953.644803][ T808] alloc_netdev_mqs+0xa8/0x1210 [ 953.649634][ T808] rtnl_create_link+0x31f/0xd70 [ 953.654463][ T808] rtnl_newlink_create+0x277/0xb70 [ 953.659558][ T808] rtnl_newlink+0x166a/0x1bb0 [ 953.664215][ T808] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 953.669135][ T808] netlink_rcv_skb+0x232/0x4b0 [ 953.673882][ T808] netlink_unicast+0x75c/0x8e0 [ 953.678626][ T808] netlink_sendmsg+0x813/0xb40 [ 953.683371][ T808] __sys_sendto+0x672/0x710 [ 953.687856][ T808] __x64_sys_sendto+0xde/0x100 [ 953.692603][ T808] do_syscall_64+0x174/0x580 [ 953.697178][ T808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.703053][ T808] [ 953.705356][ T808] Freed by task 15150: [ 953.709402][ T808] kasan_save_track+0x3e/0x80 [ 953.714063][ T808] kasan_save_free_info+0x46/0x50 [ 953.719068][ T808] __kasan_slab_free+0x5c/0x80 [ 953.723813][ T808] kfree+0x1c5/0x640 [ 953.727689][ T808] device_release+0xc4/0x1f0 [ 953.732262][ T808] kobject_put+0x228/0x560 [ 953.736657][ T808] netdev_run_todo+0xc75/0xde0 [ 953.741404][ T808] default_device_exit_batch+0x967/0x9e0 [ 953.747020][ T808] ops_undo_list+0x52b/0x940 [ 953.751594][ T808] cleanup_net+0x56b/0x800 [ 953.755994][ T808] process_scheduled_works+0xb5d/0x1860 [ 953.761522][ T808] worker_thread+0xa53/0xfc0 [ 953.766092][ T808] kthread+0x389/0x470 [ 953.770144][ T808] ret_from_fork+0x514/0xb70 [ 953.774715][ T808] ret_from_fork_asm+0x1a/0x30 [ 953.779462][ T808] [ 953.781767][ T808] The buggy address belongs to the object at ffff8880979a6000 [ 953.781767][ T808] which belongs to the cache kmalloc-cg-4k of size 4096 [ 953.796129][ T808] The buggy address is located 752 bytes inside of [ 953.796129][ T808] freed 4096-byte region [ffff8880979a6000, ffff8880979a7000) [ 953.809992][ T808] [ 953.812298][ T808] The buggy address belongs to the physical page: [ 953.818756][ T808] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x979a0 [ 953.827498][ T808] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 953.835975][ T808] memcg:ffff8880979a1011 [ 953.840194][ T808] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 953.847723][ T808] page_type: f5(slab) [ 953.851689][ T808] raw: 00fff00000000040 ffff88813fe34500 dead000000000100 dead000000000122 [ 953.860254][ T808] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff8880979a1011 [ 953.868820][ T808] head: 00fff00000000040 ffff88813fe34500 dead000000000100 dead000000000122 [ 953.877486][ T808] head: 0000000000000000 0000200000040004 00000000f5000000 ffff8880979a1011 [ 953.886154][ T808] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 953.894817][ T808] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 953.903475][ T808] page dumped because: kasan: bad access detected [ 953.909891][ T808] page_owner tracks the page as allocated [ 953.915591][ T808] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18420, tgid 18420 (syz-executor), ts 739177446100, free_ts 739130457323 [ 953.939019][ T808] post_alloc_hook+0x22d/0x280 [ 953.943786][ T808] get_page_from_freelist+0x24ba/0x2540 [ 953.949332][ T808] __alloc_frozen_pages_noprof+0x18d/0x380 [ 953.955132][ T808] allocate_slab+0x77/0x660 [ 953.959625][ T808] refill_objects+0x339/0x3d0 [ 953.964294][ T808] __pcs_replace_empty_main+0x321/0x720 [ 953.969824][ T808] __kvmalloc_node_noprof+0x657/0x8a0 [ 953.975181][ T808] alloc_netdev_mqs+0xa8/0x1210 [ 953.980018][ T808] rtnl_create_link+0x31f/0xd70 [ 953.984848][ T808] rtnl_newlink_create+0x277/0xb70 [ 953.989944][ T808] rtnl_newlink+0x166a/0x1bb0 [ 953.994603][ T808] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 953.999525][ T808] netlink_rcv_skb+0x232/0x4b0 [ 954.004271][ T808] netlink_unicast+0x75c/0x8e0 [ 954.009017][ T808] netlink_sendmsg+0x813/0xb40 [ 954.013763][ T808] __sys_sendto+0x672/0x710 [ 954.018252][ T808] page last free pid 16770 tgid 16770 stack trace: [ 954.024729][ T808] __free_frozen_pages+0xbc7/0xd30 [ 954.029825][ T808] __slab_free+0x274/0x2c0 [ 954.034225][ T808] qlist_free_all+0x99/0x100 [ 954.038798][ T808] kasan_quarantine_reduce+0x148/0x160 [ 954.044240][ T808] __kasan_slab_alloc+0x22/0x80 [ 954.049078][ T808] kmem_cache_alloc_noprof+0x2bc/0x650 [ 954.054520][ T808] do_getname+0x2e/0x250 [ 954.058749][ T808] do_sys_openat2+0xca/0x200 [ 954.063318][ T808] __x64_sys_openat+0x138/0x170 [ 954.068154][ T808] do_syscall_64+0x174/0x580 [ 954.072830][ T808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.078726][ T808] [ 954.081033][ T808] Memory state around the buggy address: [ 954.086715][ T808] ffff8880979a6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 954.094760][ T808] ffff8880979a6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 954.102806][ T808] >ffff8880979a6280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 954.110902][ T808] ^ [ 954.118594][ T808] ffff8880979a6300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 954.126633][ T808] ffff8880979a6380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 954.134671][ T808] ================================================================== [ 954.173287][ T808] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 954.180532][ T808] CPU: 1 UID: 0 PID: 808 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 954.189822][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 954.199885][ T808] Workqueue: infiniband ib_cache_event_task [ 954.205793][ T808] Call Trace: [ 954.209078][ T808] [ 954.212011][ T808] vpanic+0x56c/0xa60 [ 954.216000][ T808] ? __pfx_vpanic+0x10/0x10 [ 954.220510][ T808] ? __pfx___schedule+0x10/0x10 [ 954.225371][ T808] panic+0xc5/0xd0 [ 954.229101][ T808] ? __pfx_panic+0x10/0x10 [ 954.233527][ T808] ? preempt_schedule_common+0x82/0xd0 [ 954.238994][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 954.244964][ T808] check_panic_on_warn+0x89/0xb0 [ 954.249893][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 954.255852][ T808] end_report+0x73/0x170 [ 954.260081][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 954.266041][ T808] kasan_report+0x128/0x150 [ 954.270534][ T808] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 954.276503][ T808] __ethtool_get_link_ksettings+0x5e/0x170 [ 954.282295][ T808] ib_get_eth_speed+0x180/0x7f0 [ 954.287142][ T808] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 954.292508][ T808] ? do_raw_spin_unlock+0xf5/0x210 [ 954.297606][ T808] ? rxe_query_port+0x6b/0x3d0 [ 954.302352][ T808] rxe_query_port+0x93/0x3d0 [ 954.306927][ T808] ib_query_port+0x170/0x830 [ 954.311503][ T808] ib_cache_update+0x1ba/0xc70 [ 954.316247][ T808] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 954.322826][ T808] ? __pfx_ib_cache_update+0x10/0x10 [ 954.328090][ T808] ? perf_trace_preemptirq_template+0xb2/0x350 [ 954.334231][ T808] ? _raw_spin_unlock_irq+0x23/0x50 [ 954.339415][ T808] ? process_scheduled_works+0xa70/0x1860 [ 954.345115][ T808] ? process_scheduled_works+0xa70/0x1860 [ 954.350817][ T808] ib_cache_event_task+0xe0/0x1d0 [ 954.355822][ T808] ? process_scheduled_works+0xa70/0x1860 [ 954.361521][ T808] process_scheduled_works+0xb5d/0x1860 [ 954.367059][ T808] ? __pfx_process_scheduled_works+0x10/0x10 [ 954.373022][ T808] ? assign_work+0x3d5/0x5e0 [ 954.377595][ T808] worker_thread+0xa53/0xfc0 [ 954.382181][ T808] kthread+0x389/0x470 [ 954.386236][ T808] ? __pfx_worker_thread+0x10/0x10 [ 954.391332][ T808] ? __pfx_kthread+0x10/0x10 [ 954.395908][ T808] ret_from_fork+0x514/0xb70 [ 954.400482][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 954.405575][ T808] ? __switch_to+0xc79/0x1410 [ 954.410239][ T808] ? __pfx_kthread+0x10/0x10 [ 954.414814][ T808] ret_from_fork_asm+0x1a/0x30 [ 954.419567][ T808] [ 954.423147][ T808] Kernel Offset: disabled [ 954.427462][ T808] Rebooting in 86400 seconds..