last executing test programs: 9m39.45108712s ago: executing program 32 (id=529): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000001cb, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xc}, 0x8000, 0x0, 0x80000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000001cc0)=ANY=[@ANYBLOB='-', @ANYRESDEC], 0x27) r6 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r6, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) sendmsg$kcm(r6, 0x0, 0x4000080) recvmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2042) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}, {0x0}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x14, 0x29, 0x32}}, @ip_pktinfo={{0x1c, 0xe, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}}}}], 0x38}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) unlink(&(0x7f0000000080)='./file0\x00') r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 9m31.468438814s ago: executing program 33 (id=564): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ITER_CREATE(0xb, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x401}, 0x108b84, 0x520, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r2, 0x0, 0x300, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x70bd29, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0xfffffffc, 0xffffffffffffffff, 0x0, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x80001, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x36, 0x8, 0xfffffffffffffc76, &(0x7f00000002c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0x14, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@cb_func={0x18, 0x9}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x51}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r6, r4, 0x5, &(0x7f0000000200)=[r5, r5, r5, r5], &(0x7f0000000240)=[{0x0, 0x4, 0x10, 0x4}, {0x2, 0x2, 0x1, 0x6}, {0x4, 0x4, 0xe}, {0x2, 0x3, 0xd, 0xd}, {0x4, 0x2, 0xf, 0xa}], 0x10, 0xe}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 9m20.609681135s ago: executing program 34 (id=614): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="7a0a00ff40000000711088000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 9m20.509863823s ago: executing program 35 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40012100) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64841}, 0x40000) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_REVISION={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x80) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40041) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="1400000034000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x810) 9m17.240418229s ago: executing program 36 (id=625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000000b06010800000000000000000600000505000100070000001c0007801800015e14000240ff010000000000000000000000000001090002007379"], 0x44}}, 0x4800) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000080)=@raw=[@jmp={0x5, 0x1, 0x5, 0x6, 0xb, 0xfffffffffffffff0, 0xffffffffffffffff}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000380)=[{0x1, 0x3, 0x7, 0x6}, {0x5, 0x1, 0x6, 0x6}, {0x2, 0x2, 0x5, 0x9}], 0x10, 0xd}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000580)={r1, r2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="2e0000003c000511d25a80698c6394b9027c92b47795140d0124fc600700000000000000001eb69d3d07a9e71f24", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 8m58.466258693s ago: executing program 37 (id=668): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18010000000000000000000000000000850000002e00000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (fail_nth: 3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) 8m52.205456858s ago: executing program 38 (id=683): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = gettid() bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000e0ffffffffffffff", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x482, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x802, 0x2, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x28, 0x5, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) setsockopt$sock_attach_bpf(r1, 0x28, 0x8, 0x0, 0x0) r4 = getpid() syz_open_procfs$namespace(r4, &(0x7f0000000200)='ns/pid_for_children\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000400), 0x1}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b00)="140000003600fb50e35d3c4a0ed898a00a0c8c0082", 0x15}], 0x1}, 0x4044880) 5m58.750203737s ago: executing program 7 (id=1571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x6401010200000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0) 5m58.560065316s ago: executing program 7 (id=1574): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f00000000c0), 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xd, 0x70, 0x0, 0x3, 0x0, 0x8, 0x60, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6ba8, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0xa, 0x1, 0x9, 0x9, 0xcb, 0xe, 0x0, 0x2, 0x0, 0xf}, 0x0, 0x1, r0, 0x0) 5m58.358705831s ago: executing program 7 (id=1577): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x2}, 0xa900, 0x7, 0x5, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20020010) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x24, 0x9}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m54.981090303s ago: executing program 7 (id=1585): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x11, 0x65, &(0x7f0000000640), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xc1d7}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x20000000, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8a9efd29dff7fac0}, 0x20004080) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)}, 0x20000880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f00000003c0)=@phonet={0x23, 0x0, 0x2, 0xb}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)="27050200d40f00000600002f88a8", 0xe}], 0x1}, 0x0) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x40094) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 5m54.592905434s ago: executing program 7 (id=1590): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff8500000011000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x18, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0xc}, [@typed={0x4, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b30, &(0x7f0000000000)={'wlan1\x00', @random="0011002000"}) 5m54.040680213s ago: executing program 7 (id=1593): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8911, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair(0x26, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x2d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r4, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000500)}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000033000000788836275c1453c1d1b4d4f7bc", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000033000000788836275c1453c1d1b4d4f7bc", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x9c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x2, 0x6, 0xd, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(r6, 0x0, 0x20000800) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) 5m44.912245807s ago: executing program 39 (id=1565): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x4, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x80) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x2006, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x115}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x7ffffffe}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x12}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000000}, 0x44) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x8001}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 5m38.892437239s ago: executing program 40 (id=1593): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8911, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair(0x26, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[], 0x0, 0x2d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x96}]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r4, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8924, &(0x7f0000000080)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x804, 0x14c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x1}, 0x20a0, 0x58, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0x1, 0x58, &(0x7f0000000500)}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000033000000788836275c1453c1d1b4d4f7bc", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1800000033000000788836275c1453c1d1b4d4f7bc", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=0x0], 0x20) socket$kcm(0x10, 0x2, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x9c092, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb3e, 0xfffffffffffffff8}, 0x840, 0x2, 0x6, 0xd, 0x80000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x20, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$kcm(r6, 0x0, 0x20000800) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) 4m43.22849223s ago: executing program 2 (id=1883): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{0x3, @default}, [@rose, @null, @netrom, @netrom, @bcast, @bcast, @rose, @default]}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/96, 0x60}, {&(0x7f0000000580)=""/145, 0x91}, {&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000640)=""/207, 0xcf}, {0x0}], 0x5}, 0x2000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="140000002b000b6c69000000000000000a0000004dda", 0x16}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0x22, 0x0, &(0x7f00000005c0)="f8ad48cc02cb29dcc8007f5b0800a2e2bb1318263956e0375e9c9a058d7d9c3fa1a5", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x17, 0x0, 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x8d, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x0, 0x0, r3, 0x9, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x1dbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) r5 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="c18acdb63da8ba459aae5650e99868afa3983e95323c6057ded5fca68b265f83e340c0f8a3b3cc45136e4635ac", 0x2d}, {&(0x7f00000000c0)="1e556205cc98a6f133e7643a03d7f70fdbac107d88eb093a72ff89ad7bfb1f0b3188d95c36b25dff7a829c8e9399787c058fd00ae165bb59847dfaae2f51470b7d5a96570b8a899ed1fba2b1258e7f4ab44cf8bfb2c257d3b8c7cb3763bdb44ba8aef1be651a2d07de76e683", 0x6c}], 0x2}, 0x0) 4m42.471192891s ago: executing program 2 (id=1889): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xe, 0x80000000, 0x10000000, 0xdbe, 0x300}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair(0x25, 0x1, 0x23d, &(0x7f0000000580)) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x48420, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r6, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340), &(0x7f0000000500)=[0x0], 0x0, 0xb0, &(0x7f0000000540), 0x0, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xe0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x6, 0x64b, 0x7, 0x0, r4, 0x2, '\x00', 0x0, r2, 0x3, 0x0, 0x2, 0x8}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9c}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffff9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x8, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000005000000000000004000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014350d00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m40.598046111s ago: executing program 2 (id=1898): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xcc0d0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4", 0x36}], 0x1}, 0x0) 4m40.180377953s ago: executing program 2 (id=1902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) sendmsg$sock(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="eb2d3c0b98a44d8407ab44a75fcc6926ac44a37bc2855e3d06bd5636f72f7ff1c88a5b233416405c2f805cc1779cb0963d6b8255ef6ad206e9783cc99b3f08f1308d769b8313617cf689b0e790343ea0c0141d7efd97e7e6068335ccdbc2374a4972876ed4da0469d2b70dbc09055c4e5d", 0x71}, {&(0x7f0000000200)="3bbf23bd55948e27fdea8bd2f43281b26105663b3f2784a050af954fbaf97a80a0cca8d2e47686292c211e35e9aed6f62e83821f8e9a333cf8cee6960c22ccdbeee1d11c53fe6325d793508c87534a95b99ed0125ca63318d3f315d8dddb4e32a758f7a824f45647c2927996d3525c7c1e5e4dea4eb6ef54095071bb914f5035e51c97dee48e12487a9ff4b409f94406133cd81ae2cc8ff10c50f42ab02d22ab040dac5e3679013e7f", 0xa9}], 0x2, &(0x7f0000000300)}, 0x0) 4m39.881081344s ago: executing program 2 (id=1905): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000500000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a34b8580218ce740068720000074e8b1715807ea0ca469e468eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea70c2ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2204dd418c005479ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8f23e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae0000c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b400005a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a38400242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd9f140e5f00019be25b5910a3193e90be231a05fd82e6003969c31082ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a3d19c158a0aa9a821667c68549e9da89ad4274ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b884057aeb68f3d675a79907a72ace70902459f6950a06a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbd488f43f46b2536f175f46dfb27d5229467270246ab53616c46edf34c559d3de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc816df0000000000c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5da0f26126d4cf2c73e5f94030000040000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d044fa492aa38717481455e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62f858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1e3f5cd4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1abb901f866d9d629b4fb185f45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d780100358aa54b4b49926c4be9ee4659153d9fa95d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000000000000000000000000000000044ff72f96f084f4b6cdcb1b4a9d8e9f99f1b85497d0c3df704c8a0034c09caeeb0e34799b755649883539258a7b33dcef15d8fd1953ebaaa3cff81a0de7a05a440f20f6b273ceb8678f10378b670be7504dabd1471355d853292775d0366891f0bcf0a6087ed4f1f25ef52394db3e9d8318bbb9baff3db95bfd68a08ded502cc08a485c804e4fd107a7ca2a64ca081c6b2f7b895cdf98b763ebab9451c65eced6f5f97a541210806d885762ac3150225036c7eccd7a05593abd963f9a02df58085115e54f675e6a08d25b5722cabf989b4bbc562e073b81bae61f05c5e1f90e021340b60cc5fb8fdb09b6d20b0d87a6ed800000000000000000000000000000000006cc6f64f583a26a78f7f417f66c0af32f5194ddfce51e5aff28f621bb2fd2a5ab719823488d6e869b08d3d4ac7950c60144cf77437e29895a23282e3c65e015d1c334832a90ee77d93596e3f12e9ca8c67c7f3c9b66c9cb03edec184ad1d9544c7a3be250e471dca00000078544d79c0efe4094e561eeb26ee4c81106d03c004bc1589ef6e13648999c8735e2634e89aaa90c571fa3c07238697b1db783c52715055445e96995fe3273b0346b03fc742c06aa3947e0d9cf0c99b5e245ede85893112deea8bd3355a32ec15e1242f170a51f28cea4105541e96a52da4984d26bd29cb0623f00c6b0a4c00ad406d729babc9d1550a683c349017a340444000000000000000000000920ca49f7cc8194aaebdcae5a62bb7587b57f41f1c2034911f23e6bd0291b3319f03a0a15dea685a8ab75b3c60391afa5483231305402b52a8f9863800f127d6b4518f73a847ca583e855d70c6a4a53f61ad753d5e740db44afd32b019d9e8b41361c2c104fe52837a19dd6952fe2724c0105ab158a54a6a73000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000000)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m39.178343308s ago: executing program 2 (id=1910): socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000003900070125bd7000fcdbdf25027c0000546e872771350ca49cca3c40b5100001f5fe5d17c5c8979a52bce6550739c7bfb87a852e218175b08634bc74ffb8887b60907f9f30e80b6d3a9cfa5154b653f939f9ebdfcac4b22904ad998cafe59083cacd28c7f7878685b39e4e4f3c5971df352e5b79efe3b47bce3b5ec49f70024cff890a24eb780e4d94c4b479468158129b51f238b7eb8203ad7d42ee98d94d225da234638aa7abcdfbaf788d82a5c75607cab01b1844f692db61"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010020"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140005001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800a0001006d61746368000000100002800a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140400001100010000000000000000000000000a45a64fc35691b9e02fa4f6baa6c5ddbac02f0f8a461a317a7b3de28e19eee4e2c80ca8d2fd50bd96c7950a433b31010737b2bfe782e7e513862d72fdacd31880e71e5198a3d5a8a9d5bbedc37c566f6fd2c84a948927428eeb6b86"], 0x78}}, 0x4048010) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1943}, 0x0, 0x2, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x2c000010) 4m24.031216552s ago: executing program 41 (id=1910): socket$kcm(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x221, 0x0, 0x0, 0x8, 0x3fe, 0x7ffeffff, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000003900070125bd7000fcdbdf25027c0000546e872771350ca49cca3c40b5100001f5fe5d17c5c8979a52bce6550739c7bfb87a852e218175b08634bc74ffb8887b60907f9f30e80b6d3a9cfa5154b653f939f9ebdfcac4b22904ad998cafe59083cacd28c7f7878685b39e4e4f3c5971df352e5b79efe3b47bce3b5ec49f70024cff890a24eb780e4d94c4b479468158129b51f238b7eb8203ad7d42ee98d94d225da234638aa7abcdfbaf788d82a5c75607cab01b1844f692db61"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4010) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010020"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140005001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800a0001006d61746368000000100002800a0001006f776e65720000000900010073797a30000000000900020073797a3200000000140400001100010000000000000000000000000a45a64fc35691b9e02fa4f6baa6c5ddbac02f0f8a461a317a7b3de28e19eee4e2c80ca8d2fd50bd96c7950a433b31010737b2bfe782e7e513862d72fdacd31880e71e5198a3d5a8a9d5bbedc37c566f6fd2c84a948927428eeb6b86"], 0x78}}, 0x4048010) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) recvmsg(r6, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x64) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000022"], 0xd8}}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1943}, 0x0, 0x2, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x2c000010) 55.557207711s ago: executing program 8 (id=3332): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="3226721c9cd80836c004010581b0840c7605a028227f7253e32cc11f47e69b612d8436431ed43585ae241bb374a8c188780f2b34ee03a80444c789eeb45b84f9ed8a7931809ae6c398c777a3d77ebf7b6ca8997577a8179af3fc00fa458b1c444aaa94076c4776a5fe763c436f8329a4067fb90583eace0831789d88612da2b172bac43cec2fc47cf08d6270329310f6f92dd9a01c88a0112aeaf963bc2659606f7b0b5b0082c1f62ce64fefb8e02be0b0", 0xb1}, {&(0x7f0000000e00)="1ed5fbefe05ea3c13a6740bc44a154328d25b8d3b34cfa2eaaa62f47d2ec576443846e704cc83e718495e2cdcb6ef1e247c772f4be68479690a2d9ec40daeefadec663b980c37e8511d666b1413a5b883ed4feb82df92bb4b004d2ab673cd97796bab830383ec6fb64dee9e8d0cee7c60d8336170aa1c3f21c67f079783f94ae912a3c7989ecb686dadcc72e8d175749943328f2c6ae7c808e54285a0693a5fa51cb48e1edb38b6310873aeb3dc7920779442f17a59ed023f5baa1da0cbebd2ff5160efca1d1154442c6f06667e4ba9ae3a00c7e5f7c7c6d0cc1fd62db316b2b4902fd15120b53c18c45a352629dee", 0xef}, {&(0x7f0000000f00)="628b0e5842cf5b4831367f5b3e6ceb11c5bf10f0da04489e13bda5fa6c3c69ad52ff772193d486fed7aa8ea20b72e5f2a0aacbd6b87182fef99543369e469f2e4fc6322557a2b66e1ccff59f86dab094516c9103486e3c0cc4032c3316890184bddb156b4c07fc93c8f999870a5f10d56ce6558c0fd589b865c4f6aeea9a001e117a138fb0f3b9e158debbeccccd79ce2951e71e5782a3b9cceef80ebd8f13008f99c562cad293a8e1f42aa6fa5e07db4aa2835a8411e90c065a8179b041", 0xbe}, {&(0x7f0000000180)="08e5", 0x2}, {&(0x7f00000001c0)="149594b0f0ddefb487ec98", 0xb}, {&(0x7f0000000fc0)="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", 0x2c5}], 0x6}, 0x44000) 55.3828491s ago: executing program 8 (id=3335): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x1162, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x15) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000020000000400000000000000", @ANYRES32, @ANYBLOB="0000005100000000fdaffbc58800000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x17, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xbc, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 54.961225275s ago: executing program 8 (id=3337): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x1c}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="180000004000"], 0x18}, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x6, 0x5, 0xfa, 0x5}, {0x7, 0x5, 0x1, 0x5}, {0x4, 0x9, 0x1, 0x6}]}) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf, 0x8000, 0x1541b97ad6b5c05f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xc9c}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001200030200"/56, @ANYRES32=0x0, @ANYBLOB="81690000000008000000000000000000210003"], 0x70}}, 0x0) 54.326831036s ago: executing program 8 (id=3340): r0 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r0) 54.145639783s ago: executing program 8 (id=3343): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff8500000004000000850000000e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e13, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 49.727868149s ago: executing program 4 (id=3356): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31ac", 0x25}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r3, 0x0, 0x40880) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socket$unix(0x1, 0x1, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f00000000c0)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r.\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 48.537423265s ago: executing program 4 (id=3362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000020fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) 48.126249511s ago: executing program 4 (id=3368): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180400dcae450b69df00d9ca8f00000000000c0000000c00000007000400fbfffffff4ff1c6000f32d07aa14d7c4c6fe389ada67467645909dc8b5c1ea142a4c8b0ff09f199c7d4d0b1ffb06dbf31efe7f36bc7ca693b0d857fffffeffffffb3e41372c6778f0c35f6f392cc74ffffda9906bbcef8f2548b0cfc74b20361df703e"], 0x0, 0x2b, 0x0, 0x4}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b0000000600000004000000a703000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000251212b9590ee5d09bee8c36cebe58207d4200001c000c002a940bc8060000001000"], 0x48) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000380)='THAWED\x00', 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000006"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="182fdf92232cfc9ba6000000000000000000000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[], 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208002e000040a8001b000400014006000d00000000000000035c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2e18000000000000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab0000", 0xd8}], 0x1}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 47.040078424s ago: executing program 0 (id=3373): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x100000000, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xcc0d0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x23}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @empty, 0xac1}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, &(0x7f0000000000), 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 46.900777768s ago: executing program 4 (id=3374): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="070000000400000000004002f904000020000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000008b55042916c21faae65f95234c67400002d9ab279a55d888e3bf435e8d664ed000051703b5b7a8403c29182a960d53269f5a43169ec8cdf9b968a5c87c60303c5ca5b42b467b3082311b490dc3b090221e201035b12672870d9a6bf1ca4076d8a2dff2c714853755af4abcbe10270c4a5a5002df5ce67ad3ecc5e03544671f81a172846e7020bee8dbe4f01e25ece70b325b7591926978c8106c3e15a5d9e"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, ' '}]}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7f, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="b90000000044268cb89e14f086dd65e0ffff01032c00631177fbac141416e000030a44079f030000000000000000000000222f050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007346111960500000000000000000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x5, [@enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x3}, {0x5, 0x7}, {0xb, 0x7}]}, @var={0xa, 0x0, 0x0, 0xe, 0x2, 0x2}, @fwd={0x6}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x7}]}, {0x0, [0x0, 0x30, 0x5f]}}, &(0x7f0000000380)=""/40, 0x6d, 0x28, 0x0, 0x8cb}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x12, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0xb, 0x60, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[r4], &(0x7f0000000880)=[{0x3, 0x5, 0x6, 0x4}], 0x10, 0xa}, 0x94) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) 46.899989931s ago: executing program 0 (id=3375): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000009000000030000004f0d000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 46.702526089s ago: executing program 0 (id=3378): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000100)=[{&(0x7f0000001840)="b564", 0x2}], 0x1}, 0x0) 46.510767712s ago: executing program 0 (id=3379): r0 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/191, 0xbf}, {&(0x7f00000003c0)=""/95, 0x5f}], 0x2, &(0x7f0000001480)=""/200, 0xc8}, 0x0) 46.371728242s ago: executing program 4 (id=3382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/11, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"/28], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000086770000000000000000000009a500000d00000018170000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x106) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (fail_nth: 11) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a061bd3146325524a0000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4400000000080003400000004008000f4000000006140000001000010000000000000000000084000a"], 0x94}}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$sock(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001680)}, 0x6a5ef9290445fc1d) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32], 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x0, 0x10, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000080000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300000063b7447b090000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000919040005000000c9950000ffffffff8520000003000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 46.299367778s ago: executing program 0 (id=3383): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0), 0x1}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x40088d4) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000055009155090893b31b71a54a07"], 0xfe33) 45.987684195s ago: executing program 8 (id=3344): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 45.94465218s ago: executing program 4 (id=3384): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180400dcae450b69df00d9ca8f00000000000c0000000c00000007000400fbfffffff4ff1c6000f32d07aa14d7c4c6fe389ada67467645909dc8b5c1ea142a4c8b0ff09f199c7d4d0b1ffb06dbf31efe7f36bc7ca693b0d857fffffeffffffb3e41372c6778f0c35f6f392cc74ffffda9906bbcef8f2548b0cfc74b20361df703e"], 0x0, 0x2b, 0x0, 0x4}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b0000000600000004000000a703000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000251212b9590ee5d09bee8c36cebe58207d4200001c000c002a940bc8060000001000"], 0x48) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000380)='THAWED\x00', 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000006"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="182fdf92232cfc9ba6000000000000000000000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[], 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208002e000040a8001b000400014006000d00000000000000035c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2e18000000000000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab0000", 0xd8}], 0x1}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 45.514602151s ago: executing program 42 (id=3384): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180400dcae450b69df00d9ca8f00000000000c0000000c00000007000400fbfffffff4ff1c6000f32d07aa14d7c4c6fe389ada67467645909dc8b5c1ea142a4c8b0ff09f199c7d4d0b1ffb06dbf31efe7f36bc7ca693b0d857fffffeffffffb3e41372c6778f0c35f6f392cc74ffffda9906bbcef8f2548b0cfc74b20361df703e"], 0x0, 0x2b, 0x0, 0x4}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b0000000600000004000000a703000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000251212b9590ee5d09bee8c36cebe58207d4200001c000c002a940bc8060000001000"], 0x48) r2 = openat$cgroup_freezer_state(r1, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000380)='THAWED\x00', 0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000006"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="182fdf92232cfc9ba6000000000000000000000007000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[], 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000740)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014000000001208002e000040a8001b000400014006000d00000000000000035c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2e18000000000000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab0000", 0xd8}], 0x1}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 45.508684752s ago: executing program 43 (id=3344): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 45.501482876s ago: executing program 0 (id=3387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000580)="ddb9547ed38704", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f901", 0x39}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 45.294308365s ago: executing program 44 (id=3387): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x7, 0x0, &(0x7f0000000580)="ddb9547ed38704", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f901", 0x39}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 18.693765491s ago: executing program 1 (id=3547): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 3) 17.699353884s ago: executing program 1 (id=3548): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4020}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x30, 0x17, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(r10, 0x0, 0x12) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r10, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x64, 0x1, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffaa0}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x800000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4e0f}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc1b9}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd4fb}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x2001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)="2e0000002400810804fb7fec598f866b0a9a5972130000005e140608000000007a0000a71802dd", 0x27}, {0x0}], 0x2}, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d00", 0x28}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.680249329s ago: executing program 1 (id=3550): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20082, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, r2, 0x20}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d7010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) close(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, &(0x7f00000004c0)=""/245) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0xcd, &(0x7f0000000040), 0x5}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x800}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40) 7.371255636s ago: executing program 9 (id=3602): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0xa}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6, 0x0, 0x100}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe880000000000000000000000000001ac1414aa000000000000000000000000000127e64e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c61"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[], 0x0, 0x9, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x77, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x79}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x100}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000906010400000000f6786f9e781d08bea3d80627118f8e4bad9858690270f5b443b20d772a48855ddaddb364"], 0x14}, 0x1, 0x0, 0x0, 0x34000882}, 0x4004081) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r4, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x2}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0xee5}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r7, 0x78612a5a, 0x8}, 0xc) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r11) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 6.864843652s ago: executing program 3 (id=3607): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x2, 0x1000000000000004, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594b41fde1b60", 0x14}], 0x1}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r2, 0x4) socket$kcm(0x11, 0xa, 0x300) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2}, 0x10, &(0x7f0000000300), 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2}}}], 0x20}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000540)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0x1}, &(0x7f0000000600), 0x0}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r6}, &(0x7f0000000400), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="056dfdff05000000435800000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018420000060000000000000000000000799a0600fcffffff18220000", @ANYRES32, @ANYBLOB="000000000a04000018110000", @ANYRES32, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0xffff, 0x48, &(0x7f00000007c0)=""/72, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x3, 0x1, 0x44b, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[r6], &(0x7f0000000900)=[{0x3, 0x2, 0x8, 0x1}, {0x0, 0x80000001, 0x3, 0x4}], 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001a00)=ANY=[@ANYRES8=r1, @ANYBLOB="bc65e8a3b87bf0cbf82c1753804b83f5eedff156824aeb1dc1d7909d58553c9013b1d5d653ff175528801122987d4a4471c1ff879c5f9e35773c20bdf733ad72ceb00c0c2762d1affd944bcf6c4ee4b65018c444bebcb448864b3d4fe88e63bbc1e1d333a4c00618d12ccca2e1c020ff2aab20c8ddf1577554646ef79fc8070b6f9f7b583e96b36e5dd3930467074d11c0749de42b6a07a46ecec51d6902594ea5431f8038b749936010", @ANYRESDEC, @ANYBLOB="52fda20291d54430b1e4a6db325e1c9f50ecfab5d358ea1f7552bd8fb8104bd66912c277d5433bcabe2587385a7f3dba7a110b1079baaf1c794ea68c7b2bb638f3d0fc41fcc1b68f", @ANYRESHEX=r3, @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=r4], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c00018009000100"], 0x150}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x800000000000001}, 0x1c20, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="cc0000003600070100000000ff03000003"], 0xcc}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000038000000cb36d7e2f2ad2df832323800000003000000010000000000000e0300000000000000000000000000000105000000200000040000000000000003000000000200000002"], 0x0, 0x53}, 0x28) 6.380602851s ago: executing program 9 (id=3611): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0xa, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xb80b}], 0x1}, 0xd000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xffffff80, 0x1c}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="bcdcba1704cc0727aa0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full', 0x20, 0xa3, 0x20, 0xfffffffffffffffc}, 0x2f) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="3226721c9cd80836c004010581b0840c7605a028227f7253e32cc11f47e69b612d8436431ed43585ae241bb374a8c188780f2b34ee03a80444c789eeb45b84f9ed8a7931809ae6c398c777a3d77ebf7b6ca8997577a8179af3fc00fa458b1c444aaa94076c4776a5fe763c436f8329a4067fb90583eace0831789d88612da2b172bac43cec2fc47cf08d6270329310f6f92dd9a01c88a0112aeaf963bc2659606f7b0b5b0082c1f62ce64fefb8e02be0b0", 0xb1}, {&(0x7f0000000e00)="1ed5fbefe05ea3c13a6740bc44a154328d25b8d3b34cfa2eaaa62f47d2ec576443846e704cc83e718495e2cdcb6ef1e247c772f4be68479690a2d9ec40daeefadec663b980c37e8511d666b1413a5b883ed4feb82df92bb4b004d2ab673cd97796bab830383ec6fb64dee9e8d0cee7c60d8336170aa1c3f21c67f079783f94ae912a3c7989ecb686dadcc72e8d175749943328f2c6ae7c808e54285a0693a5fa51cb48e1edb38b6310873aeb3dc7920779442f17a59ed023f5baa1da0cbebd2ff5160efca1d1154442c6f06667e4ba9ae3a00c7e5f7c7c6d0cc1fd62db316b2b4902fd15120b53c18c45a352629dee", 0xef}, {&(0x7f0000000f00)="628b0e5842cf5b4831367f5b3e6ceb11c5bf10f0da04489e13bda5fa6c3c69ad52ff772193d486fed7aa8ea20b72e5f2a0aacbd6b87182fef99543369e469f2e4fc6322557a2b66e1ccff59f86dab094516c9103486e3c0cc4032c3316890184bddb156b4c07fc93c8f999870a5f10d56ce6558c0fd589b865c4f6aeea9a001e117a138fb0f3b9e158debbeccccd79ce2951e71e5782a3b9cceef80ebd8f13008f99c562cad293a8e1f42aa6fa5e07db4aa2835a8411e90c065a8179b041", 0xbe}, {&(0x7f0000000180)="08e5", 0x2}, {&(0x7f00000001c0)="149594b0f0ddefb487ec98", 0xb}, {&(0x7f0000000fc0)="170a911bce5e4302db032a9bbc21bc8489ec034f68769318a99e8ba45146e86a31c991bbeaed5563ebc62fc695dd8aae2a3f4cc10ffafb1366dd705855870f52875b788d7be01462aab362b7c4364c334a877242193c5ffff02738b6837714aaf40128b04a6452dff7a1aa6f90382e47eb0493f4f2c31cd6bbcf403f79b02c8913c910cf8c4b01fa865c728b7e53e0f2014e68ec74992422355ffc739d39b82d866e3d4f0d9aeeb99884c8a91f3350baba7bb9ff37b14d132e1f6e8e5e42510035889caf244daccf1394ecc2e8b92fb4e7257da60dc9e6099b5676ba105d43e7dca9fa5a232f852e38330594779cae0f3516bbb86d975bf147fb8b8a3a47acea1deafd7d647ed7a4fd38be03a2b4085ada7ffa0a940ef2f1930540a425a8d7435e65b432dc80cddcaddcc67e6bffc368f985f2ecc27e924fb4b70e10b34968eebfb17a37ffd68d038dab0c88fef457324841fc53993a9e4458c1c15e58954b90751178d9aafdf7f9e39133b615fff482b7b6fe8b8b7cd07d28fa9ebf819c8befd431a7e55690b2512f7931cb4ed1f2fce55cfb464ee8896de59822329b6e2ee43b9f6225926e05618ce3b1fbebbfcc8cb38546e7ddb0a5609f8a247374f6ebc13db8744e426e4f93b25c6e35c18399f4b7a4a56ba5c3d38780a8e65853eb029df1f4e980d240e0700a1f1351cf7ba94ae46f72f3f3aa39e43f0d9fecea03ac8498ee7b80ae1c82f5f1660d059ec9f79fa4ff43dc38514ba41ecb610febc00b8bfe944be903a3cb82049495da698773aad70747a85c827a2ce389266801c584d452058b4d6d3b2fd3230eb917f6a202750255452b28ddc6418b79431fcc65b26f3cd95dcab2dd3c7948835d7d801519d57d7960e04f3e16a0976e3585fdfd6a254c4971e978e0dfbb4358c0349d0b4bb62f21f2b7e052a4182e9fd286525d2479575ee97727624a3420474fe668e8a1796cade27b62f16df688c49a3473006ac18ddb35904c308f9d014af9b5aba33ed7c6d0ac67115f450b62f39ce7e5ee0cadbdc87332b6a6bd5ae3f23364ab34dd03eb59e05d19f66316cf0792b18b87a830b921bf7f8de164d16908b6bf1f3abe66ff51edb332fb2fb01560f46b48f0ca2d2840af6729e5205e390a", 0x32a}], 0x6}, 0x44000) 6.295213906s ago: executing program 3 (id=3612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0}, 0x100c0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x7fff, 0x420, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000002c0)={0x6, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x40047459, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="91104e000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x80000000, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x280, 0x0, 0x2, 0x4, 0x8, 0x8, 0x0, 0x0, 0x1, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x7f}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180800000001000700000046435632297dc883e102c24d02dd0000000000000095", @ANYRESDEC=r4, @ANYRES16=r6, @ANYRES64=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) socket$kcm(0x18, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r8) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000000000000000000000000000000000000000000000000000000000000000000ffff000000"]) socket$kcm(0x29, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) 5.846397356s ago: executing program 6 (id=3614): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000003f000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x400a, 0x0, 0x0, 0x8, 0x3fc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$kcm(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3}, &(0x7f00000007c0), &(0x7f0000000640), 0xc00}, 0x20) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6, 0x6}, 0x0, 0x4, 0xfffffffd, 0x2, 0x2, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 2.980977133s ago: executing program 3 (id=3615): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x1, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x60}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000080}, 0x1) 2.955263957s ago: executing program 5 (id=3616): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7f, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58f0225f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e20280e14700eb4acff907560500ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ad72a89a7f6d74126f327bf7dfa718d3e1e9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d7462c080c159ce40c14089c82759106f425a2554644b2582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e1000000b81b6790062e61cd000000acb1b33c38ddd302e28e8e30b5c180d38bb1cd770195799c541a7481f5d34ca75d74b3833d399371c8f09f6745d0e43d46f7c82ff1b7d6c04467d083fc708348f35ae9bb9b78f2984a0ee55647d4c4a63c4f438fdec726e7d8228eaff2374b2300b9c35f4259e3452b53ee114bb8a6c0ea6fc89a55fef6673013d7dd4597660865423e978dd6e41e201bb3a584d6fe6f24e290613b677271603c558ee2021be29c4a06a057b2acc5bfd34898afac0d839079bbcb3acd43532563367ac8ae6c4379fb5fdcdab5fe55e1a3a521284209871216817338073cbc4ec9903725b788a25b5a6003b579b8f0e20d78be3d885557292971e65f4f1daefad2c5ccbca608b46406ffff25610c3cbae9c3d6d47678f482e2c1f7cdfc5ce2a67c1545c1192f2ac3990f9c850788401469fbca801e73cd9efbcc6ea52ff414cdff5c49e706d699b5bfa75526f700c4e32611b826b2787f99532c02262a9c60e4b07a09377c38747c7f05e38b6db5d8cc625873af8fc5a7d362334c509f6bb4e36e1c9e08949679e0ed9f84e668588b9f1b21069bd5ffe263b191d1a7f5d4e85de1a2a46579d497000000000000000000000000000085890d719cfd2eef4805fc5ebd790e94908d24a9002b0e658d593da7811e099e1c7c5699331e98eda4c706a90e22047fe27cae6994f70772815879c3d6a16e769eb6a745ca0ebcd90d81d109c1569129c0f26bb037806c424ae349391b4a5723afeffdb940ac1de55b1022c7d9aee805706e8fcdfaf3ab14ca4eae5b534fea2565d4dfa5a0fe38d7aa7d9f3c7bc6e895852a9035283b89ddbc41c54dbf9392c8dcc65178726eae650e"], &(0x7f0000000340)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x50, 0x50, 0x5, [@enum={0x1, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x3}, {0x5, 0x7}, {0xb, 0x7}]}, @var={0xa, 0x0, 0x0, 0xe, 0x2, 0x2}, @fwd={0x6}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x4, 0x7}]}, {0x0, [0x0, 0x30, 0x5f]}}, &(0x7f0000000380)=""/40, 0x6d, 0x28, 0x0, 0x8cb}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000600), 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x12, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x1, 0xb, 0x60, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000840)=[r4], &(0x7f0000000880)=[{0x3, 0x5, 0x6, 0x4}], 0x10, 0xa}, 0x94) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) 2.953735367s ago: executing program 9 (id=3617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c0000000506010300000000000000000a0000030500010007000000055c010017000000050001000700000005000100070000000900030073797a31000000000900030073797a3200000000554147ed6be5554032c30d717fb6f764b22e8e481f3e3df51906183fe03d73f24bb5d8bec69550b25816bb07c2854a48dd8901f99a6fa402658549c8c45a8915eb3f3df657fc74f28a4f065faedc8c1f5bff8194832d2fc941ccd93ffa83a7656dcaac"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="9524c1e83bcc91e82d339fd2d75b6a393047437b9d2c793995839a704ce748804bb109bad0b01bb46953fe6b54e437bfc550cc2b783f8281181f98637d01d58bfabe020e84d0d647024b9f3d32c430d6bad784c2339d7635e695f462f1e14869f342362c18270ed7d17fbf61831b73d76aa0f3fb10555eb574e6fa0324a2bd03721d8ffe3aa4731b90c2b26bb9dcf75af6ab0cdf4a9a5a1eb598323c175a46d11532f28555264ad277005c3b2319d0bf7fb3d9f4dea73055e14839b1dd7aec75b2079a8c2e284cede2729500fed4f6b18d41f04748e11651f79f6f6a1ca248067be6"], 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f00000047c0)=""/4057, 0xfd9}, {&(0x7f0000000ec0)=""/4073, 0xfe9}, {&(0x7f0000000800)=""/247, 0xf7}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f00000002c0)=""/186, 0xba}, {&(0x7f0000000140)=""/158, 0x9e}], 0x8}, 0x0) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x59dc6d71776a1654}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x9c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001040)=ANY=[@ANYBLOB="a00000000001050500000000000000000a000005440002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c000280050001000000000006080000000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400200100000000000000000000000000010800074000000000040006"], 0xa0}}, 0x0) 2.480940427s ago: executing program 6 (id=3618): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3e, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x19}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xeb9ad}, 0x828, 0x8, 0x0, 0x0, 0x1, 0x800008, 0x401, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r1, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@getqdisc={0x50, 0x26, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xe}, {0x6, 0xc}, {0xd, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000300)=r0}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x0, &(0x7f0000011c00)='./file0\x00', &(0x7f0000011c40), 0x15, &(0x7f00000008c0)=ANY=[]) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000500), 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) socket$key(0xf, 0x3, 0x2) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.450057269s ago: executing program 5 (id=3619): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0), 0x1}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x40088d4) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90335fc6004001100040001", 0x1b}], 0x1}, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 2.425388843s ago: executing program 9 (id=3620): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'ccm_base(cbc(aes-aesni),md5-generic)\x00'}, 0x0, 0x200}}]}, 0x13c}}, 0x40) (async) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x13c, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_aead={0x4c, 0x12, {{'ccm_base(cbc(aes-aesni),md5-generic)\x00'}, 0x0, 0x200}}]}, 0x13c}}, 0x40) sendmsg$inet(r0, &(0x7f0000001b80)={&(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000000000000000000340000000100000040000000ad39df2b4df96b111c9872d45f079b06c57cc999a82cbf1c29236cd4d3e6cb1ed139e7bbda96ebae2effd8132ada59abf8c5f4443855891ad674d318861d991a0f727c261985e60dc7c4b352bcdd3917c4fe6da7c6b8247c06826d664938750fd539048940fd6fd556f8646faee336576c1edd57456eba10a366f358a79f73eae3"], 0x18}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.252938724s ago: executing program 3 (id=3621): r0 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x954b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0xa, 0x0, 0x0, 0x61000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8005, 0x9}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0xfd, 0x0, 0x0, 0x0, 0xc2812, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xbbb9, 0x100000009219}, 0x4a10, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="300000001114010026bd7000fcdbdf2508004a0002000000080003000100faff08004b0013000000080001"], 0x30}, 0x1, 0x0, 0x0, 0x4008844}, 0x80) 2.14325172s ago: executing program 1 (id=3553): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@func={0x5, 0x0, 0x0, 0xc, 0x5}, @union={0xa, 0x1, 0x0, 0x5, 0x0, 0x5, [{0x0, 0x0, 0x3}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x4}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x5}, @restrict={0xe, 0x0, 0x0, 0xb, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x5}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x38, 0x1}]}, {0x0, [0x2e, 0x30, 0x2e, 0x0]}}, &(0x7f0000000d40)=""/4096, 0x82, 0x1000, 0x0, 0x80000000, 0x10000}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x1e, 0x0, 0x9, 0x800, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r0, 0x4, 0x0, 0x5, 0xb}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000200)={0x2a, 0x1, 0x1}, 0xc, &(0x7f0000000640), 0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x190, 0x81}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000040)={'veth0_vlan\x00', @random="010000201000"}) socket$isdn_base(0x22, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) 2.095615588s ago: executing program 9 (id=3622): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1f}, [@ldst={0x1, 0x2, 0x3, 0x2, 0xa, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xb80b}], 0x1}, 0xd000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xffffff80, 0x1c}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="bcdcba1704cc0727aa0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r8) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="3226721c9cd80836c004010581b0840c7605a028227f7253e32cc11f47e69b612d8436431ed43585ae241bb374a8c188780f2b34ee03a80444c789eeb45b84f9ed8a7931809ae6c398c777a3d77ebf7b6ca8997577a8179af3fc00fa458b1c444aaa94076c4776a5fe763c436f8329a4067fb90583eace0831789d88612da2b172bac43cec2fc47cf08d6270329310f6f92dd9a01c88a0112aeaf963bc2659606f7b0b5b0082c1f62ce64fefb8e02be0b0", 0xb1}, {&(0x7f0000000e00)="1ed5fbefe05ea3c13a6740bc44a154328d25b8d3b34cfa2eaaa62f47d2ec576443846e704cc83e718495e2cdcb6ef1e247c772f4be68479690a2d9ec40daeefadec663b980c37e8511d666b1413a5b883ed4feb82df92bb4b004d2ab673cd97796bab830383ec6fb64dee9e8d0cee7c60d8336170aa1c3f21c67f079783f94ae912a3c7989ecb686dadcc72e8d175749943328f2c6ae7c808e54285a0693a5fa51cb48e1edb38b6310873aeb3dc7920779442f17a59ed023f5baa1da0cbebd2ff5160efca1d1154442c6f06667e4ba9ae3a00c7e5f7c7c6d0cc1fd62db316b2b4902fd15120b53c18c45a352629dee", 0xef}, {&(0x7f0000000f00)="628b0e5842cf5b4831367f5b3e6ceb11c5bf10f0da04489e13bda5fa6c3c69ad52ff772193d486fed7aa8ea20b72e5f2a0aacbd6b87182fef99543369e469f2e4fc6322557a2b66e1ccff59f86dab094516c9103486e3c0cc4032c3316890184bddb156b4c07fc93c8f999870a5f10d56ce6558c0fd589b865c4f6aeea9a001e117a138fb0f3b9e158debbeccccd79ce2951e71e5782a3b9cceef80ebd8f13008f99c562cad293a8e1f42aa6fa5e07db4aa2835a8411e90c065a8179b041", 0xbe}, {&(0x7f0000000180)="08e5", 0x2}, {&(0x7f00000001c0)="149594b0f0ddefb487ec98", 0xb}, {&(0x7f0000000fc0)="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", 0x32a}], 0x6}, 0x44000) 2.006136986s ago: executing program 6 (id=3623): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x446740, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000200)={'dvmrp0\x00'}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005740)=""/4108, 0x100c}, {&(0x7f00000018c0)=""/4154, 0x103a}, {&(0x7f0000000140)=""/165, 0xa5}], 0x3}, 0x40000000) 1.994815372s ago: executing program 5 (id=3624): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2, @perf_bp={&(0x7f0000000140), 0x1}, 0x14440, 0x5bc, 0x0, 0x8, 0x3, 0xfffffffa, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) getpid() r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xf, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd46", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0xfffffffe, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000004d80)={0xffffffffffffffff}) sendmsg$tipc(r9, 0x0, 0x2004c8c4) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x94}}, 0x0) close(0x3) 1.728968963s ago: executing program 1 (id=3625): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000800000f77f00000040a800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095", @ANYRESDEC=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffec2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x9, 0x3}, 0xc86, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x14, &(0x7f0000000080), 0x75bb17c2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="d8000000100081064e81f782db4cb904021d000000004000000855a10a00040011000c000a600e41b9000900ac00060411000000160012000a0003000248035c3b61c1d67f6f94017134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b07000000a6823a45f28fcb1d", 0xd8}], 0x1}, 0x4010000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x808}]}]}, 0x30}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000540)="764e00cbc223139ba59bbd02000000", 0x0, 0x804002, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.645408369s ago: executing program 6 (id=3626): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="1801000000050000000000000000ea0485000000d000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='f2fs_write_end\x00', r1, 0x0, 0xfffffffffffffffc}, 0xf) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, 0x29, 0x107, 0xfffffffe, 0x0, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048811}, 0xc010) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f", @ANYRES16=r2], 0xfe33) 1.477049015s ago: executing program 6 (id=3627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000500)={0xfffffffffffffffe, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x10}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x92}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x1) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000030000000300000004000000030000000000000000000005000000000000002e5f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) close(r5) (async) socket$key(0xf, 0x3, 0x2) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000000180)=r6, 0x4) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c00000000000000000000000700000044180503"], 0x30}, 0x40880) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000540)) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x8, 0x80000001, 0x3d0, 0x2000, r8, 0x9, '\x00', r9, r4, 0x0, 0x5, 0x4, 0x4}, 0x50) close(0xffffffffffffffff) 1.461352611s ago: executing program 3 (id=3628): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x0, 0x0, 0x2, 0x0, 0xb, 0x6}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x100000000000000) 840.061293ms ago: executing program 3 (id=3629): mkdir(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x28004841) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd4de7f9c764360000000100", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 733.288125ms ago: executing program 1 (id=3630): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0xa0d0}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x88, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc5, 0x0, 0xd, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x403}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c000480280001800b00010064796e73657400001800028008000340000000000900010073797a30000000000900020073797a320000000014000000110001000000"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$SIOCSIFHWADDR(r0, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 731.169885ms ago: executing program 5 (id=3631): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xcc0d0) socket$kcm(0xa, 0x5, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) (fail_nth: 5) 717.079356ms ago: executing program 9 (id=3632): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{0x3, @default}, [@rose, @null, @netrom, @netrom, @bcast, @bcast, @rose, @default]}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/96, 0x60}, {0x0}, {0x0}, {&(0x7f0000000640)=""/207, 0xcf}, {0x0}], 0x5}, 0x2000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="140000002b000b6c690000", 0xb}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x1dbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="c18acdb63da8ba459aae5650e99868afa3983e95323c6057ded5fca68b265f83e340c0f8a3b3cc45136e4635ac", 0x2d}, {&(0x7f00000000c0)="1e556205cc98a6f133e7643a03d7f70fdbac107d88eb093a72ff89ad7bfb1f0b3188d95c36b25dff7a829c8e9399787c058fd00ae165bb59847dfaae2f51470b7d5a96570b8a899ed1fba2b1258e7f4ab44cf8bfb2c257d3b8c7cb3763bdb44ba8aef1be651a2d07de76e683", 0x6c}], 0x2}, 0x0) 632.876202ms ago: executing program 6 (id=3633): socket$kcm(0x23, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = socket$kcm(0x10, 0x7, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x3, &(0x7f0000000040)=@framed={{}, [], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) close(0x3) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c00000001070101000000000000000001000005689f064000000000000008ff0900010073797a3000000000"], 0x2c}}, 0x4890) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r1, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0xff04}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400010002000000"], 0x20}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040845) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x88}, 0x1, 0x7}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRESOCT], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010f18000000000000001000000000000000020000050000200000000001000088000000000000002669ac8856c557cea43faafcb8b62d"], 0x0, 0x2a}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1e, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa2a, 0x0, 0x0, 0x0, 0xf}, {}, {}, [@jmp={0x5, 0x1, 0x5, 0x6, 0x8, 0xffffffffffffffc0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xa}, @map_fd={0x18, 0x6}, @exit, @generic={0x6, 0x7, 0x8, 0x3, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r5, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x1, 0x0, 0xa, 0x200}, 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0600000004000000400000000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b0b76e169bd3061289f826e685a08e9df06f7ee72bee34bdeec4c55e5fdccbdd77e791a91494b186763c09b314b820a27710732a457146db71cd8702f1a89e2e9a6210cc43b858ffbb0524aaf35e05fe45", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r6, 0x0, 0xa0028000}, 0x38) socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940), 0x0, 0xa7c}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x6d, 0x0, &(0x7f0000000240)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf5814ba672fa23f00957bbff9cfcce54b189458ebd85b3d7a53070f9a02e602e91266989267a269212fc3a8976b8c1257bae202ae07328b054f3ed7c370161e33cf4f6df15a14b237e461a9d03", 0x0, 0xa1b, 0x0, 0x2, 0x0, &(0x7f0000000700)="00f6", 0x0}, 0x50) 304.336908ms ago: executing program 5 (id=3634): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0), 0x1}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x40088d4) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90335fc6004001100040001", 0x1b}], 0x1}, 0x0) write$cgroup_subtree(r0, 0x0, 0xfe33) 0s ago: executing program 5 (id=3635): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xb80b}], 0x1}, 0xd000000) (fail_nth: 1) kernel console output (not intermixed with test programs): 97][T14387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 573.080224][T14387] ? __pfx__printk+0x10/0x10 [ 573.080264][T14387] ? __pfx___might_resched+0x10/0x10 [ 573.080292][T14387] should_fail_ex+0x414/0x560 [ 573.080334][T14387] should_failslab+0xa8/0x100 [ 573.080380][T14387] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 573.080413][T14387] ? __alloc_skb+0x112/0x2d0 [ 573.080444][T14387] __alloc_skb+0x112/0x2d0 [ 573.080475][T14387] netlink_sendmsg+0x5c6/0xb30 [ 573.080515][T14387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.080546][T14387] ? aa_sock_msg_perm+0xf1/0x1d0 [ 573.080572][T14387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 573.080597][T14387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.080624][T14387] __sock_sendmsg+0x219/0x270 [ 573.080664][T14387] ____sys_sendmsg+0x505/0x830 [ 573.080702][T14387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.080745][T14387] ? import_iovec+0x74/0xa0 [ 573.080781][T14387] ___sys_sendmsg+0x21f/0x2a0 [ 573.080814][T14387] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.080895][T14387] ? __fget_files+0x2a/0x420 [ 573.080915][T14387] ? __fget_files+0x3a0/0x420 [ 573.080953][T14387] __x64_sys_sendmsg+0x19b/0x260 [ 573.080985][T14387] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.081025][T14387] ? __pfx_ksys_write+0x10/0x10 [ 573.081052][T14387] ? rcu_is_watching+0x15/0xb0 [ 573.081083][T14387] ? do_syscall_64+0xbe/0x3b0 [ 573.081113][T14387] do_syscall_64+0xfa/0x3b0 [ 573.081137][T14387] ? lockdep_hardirqs_on+0x9c/0x150 [ 573.081160][T14387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.081182][T14387] ? clear_bhb_loop+0x60/0xb0 [ 573.081211][T14387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.081232][T14387] RIP: 0033:0x7f9d0f38eba9 [ 573.081252][T14387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.081272][T14387] RSP: 002b:00007f9d0d5d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.081295][T14387] RAX: ffffffffffffffda RBX: 00007f9d0f5d6090 RCX: 00007f9d0f38eba9 [ 573.081312][T14387] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 573.081326][T14387] RBP: 00007f9d0d5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 573.081340][T14387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.081354][T14387] R13: 00007f9d0f5d6128 R14: 00007f9d0f5d6090 R15: 00007ffecd705698 [ 573.081401][T14387] [ 574.644420][T14426] netlink: 'syz.8.2260': attribute type 1 has an invalid length. [ 574.721746][T14426] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2260'. [ 575.754753][T14458] netlink: 'syz.3.2272': attribute type 29 has an invalid length. [ 575.764214][T14458] netlink: 'syz.3.2272': attribute type 29 has an invalid length. [ 575.776092][T14458] netlink: 'syz.3.2272': attribute type 29 has an invalid length. [ 575.848022][T14462] netlink: 'syz.8.2271': attribute type 3 has an invalid length. [ 575.935388][T14470] netlink: 'syz.4.2270': attribute type 33 has an invalid length. [ 575.946672][T14470] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2270'. [ 576.346700][T14480] netlink: 'syz.3.2275': attribute type 5 has an invalid length. [ 576.354758][T14483] netlink: 'syz.3.2275': attribute type 5 has an invalid length. [ 576.363281][T14480] netlink: 'syz.3.2275': attribute type 15 has an invalid length. [ 577.009411][T14501] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2283'. [ 577.117760][T14501] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2283'. [ 577.873863][T14538] FAULT_INJECTION: forcing a failure. [ 577.873863][T14538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.887291][T14538] CPU: 0 UID: 0 PID: 14538 Comm: syz.4.2296 Not tainted syzkaller #0 PREEMPT(full) [ 577.887319][T14538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.887331][T14538] Call Trace: [ 577.887340][T14538] [ 577.887348][T14538] dump_stack_lvl+0x189/0x250 [ 577.887377][T14538] ? __pfx____ratelimit+0x10/0x10 [ 577.887399][T14538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.887423][T14538] ? __pfx__printk+0x10/0x10 [ 577.887457][T14538] ? __might_fault+0xb0/0x130 [ 577.887492][T14538] should_fail_ex+0x414/0x560 [ 577.887528][T14538] _copy_to_user+0x31/0xb0 [ 577.887558][T14538] simple_read_from_buffer+0xe1/0x170 [ 577.887595][T14538] proc_fail_nth_read+0x1b3/0x220 [ 577.887623][T14538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.887651][T14538] ? rw_verify_area+0x2a6/0x4d0 [ 577.887677][T14538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.887723][T14538] vfs_read+0x200/0xa30 [ 577.887750][T14538] ? fdget_pos+0x247/0x320 [ 577.887776][T14538] ? __pfx___mutex_lock+0x10/0x10 [ 577.887802][T14538] ? __pfx_vfs_read+0x10/0x10 [ 577.887832][T14538] ? __fget_files+0x2a/0x420 [ 577.887858][T14538] ? __fget_files+0x3a0/0x420 [ 577.887876][T14538] ? __fget_files+0x2a/0x420 [ 577.887915][T14538] ksys_read+0x145/0x250 [ 577.887948][T14538] ? __pfx_ksys_read+0x10/0x10 [ 577.887974][T14538] ? rcu_is_watching+0x15/0xb0 [ 577.888004][T14538] ? do_syscall_64+0xbe/0x3b0 [ 577.888034][T14538] do_syscall_64+0xfa/0x3b0 [ 577.888058][T14538] ? lockdep_hardirqs_on+0x9c/0x150 [ 577.888080][T14538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.888101][T14538] ? clear_bhb_loop+0x60/0xb0 [ 577.888128][T14538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.888149][T14538] RIP: 0033:0x7f6fad98d5bc [ 577.888169][T14538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 577.888188][T14538] RSP: 002b:00007f6fae865030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 577.888211][T14538] RAX: ffffffffffffffda RBX: 00007f6fadbd5fa0 RCX: 00007f6fad98d5bc [ 577.888227][T14538] RDX: 000000000000000f RSI: 00007f6fae8650a0 RDI: 0000000000000004 [ 577.888241][T14538] RBP: 00007f6fae865090 R08: 0000000000000000 R09: 0000000000000000 [ 577.888266][T14538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 577.888279][T14538] R13: 00007f6fadbd6038 R14: 00007f6fadbd5fa0 R15: 00007ffd7dfd8238 [ 577.888316][T14538] [ 578.226398][T14541] FAULT_INJECTION: forcing a failure. [ 578.226398][T14541] name failslab, interval 1, probability 0, space 0, times 0 [ 578.241077][T14541] CPU: 1 UID: 0 PID: 14541 Comm: syz.4.2297 Not tainted syzkaller #0 PREEMPT(full) [ 578.241106][T14541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 578.241120][T14541] Call Trace: [ 578.241128][T14541] [ 578.241137][T14541] dump_stack_lvl+0x189/0x250 [ 578.241169][T14541] ? __pfx____ratelimit+0x10/0x10 [ 578.241192][T14541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 578.241220][T14541] ? __pfx__printk+0x10/0x10 [ 578.241258][T14541] ? __pfx___might_resched+0x10/0x10 [ 578.241278][T14541] ? fs_reclaim_acquire+0x7d/0x100 [ 578.241306][T14541] should_fail_ex+0x414/0x560 [ 578.241346][T14541] should_failslab+0xa8/0x100 [ 578.241381][T14541] __kmalloc_noprof+0xcb/0x4f0 [ 578.241410][T14541] ? kfree+0x4d/0x440 [ 578.241435][T14541] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 578.241466][T14541] tomoyo_realpath_from_path+0xe3/0x5d0 [ 578.241493][T14541] ? tomoyo_domain+0xd9/0x130 [ 578.241525][T14541] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 578.241578][T14541] tomoyo_path_number_perm+0x1e8/0x5a0 [ 578.241619][T14541] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.241674][T14541] ? __lock_acquire+0xab9/0xd20 [ 578.241743][T14541] ? __fget_files+0x2a/0x420 [ 578.241767][T14541] ? __fget_files+0x2a/0x420 [ 578.241784][T14541] ? __fget_files+0x3a0/0x420 [ 578.241802][T14541] ? __fget_files+0x2a/0x420 [ 578.241825][T14541] security_file_ioctl+0xcb/0x2d0 [ 578.241858][T14541] __se_sys_ioctl+0x47/0x170 [ 578.241908][T14541] do_syscall_64+0xfa/0x3b0 [ 578.241931][T14541] ? lockdep_hardirqs_on+0x9c/0x150 [ 578.241953][T14541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.241975][T14541] ? clear_bhb_loop+0x60/0xb0 [ 578.242001][T14541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.242021][T14541] RIP: 0033:0x7f6fad98eba9 [ 578.242040][T14541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.242059][T14541] RSP: 002b:00007f6fae865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.242081][T14541] RAX: ffffffffffffffda RBX: 00007f6fadbd5fa0 RCX: 00007f6fad98eba9 [ 578.242097][T14541] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 578.242111][T14541] RBP: 00007f6fae865090 R08: 0000000000000000 R09: 0000000000000000 [ 578.242124][T14541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.242137][T14541] R13: 00007f6fadbd6038 R14: 00007f6fadbd5fa0 R15: 00007ffd7dfd8238 [ 578.242172][T14541] [ 578.242233][T14541] ERROR: Out of memory at tomoyo_realpath_from_path. [ 578.491693][T14545] validate_nla: 1 callbacks suppressed [ 578.491715][T14545] netlink: 'syz.0.2298': attribute type 1 has an invalid length. [ 578.752035][T14550] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2300'. [ 578.817714][T14552] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2299'. [ 578.888443][T14552] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2299'. [ 579.070095][T14543] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.2298'. [ 579.324365][T14563] netlink: 'syz.4.2304': attribute type 21 has an invalid length. [ 579.614425][T14580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.115666][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 580.175877][T14607] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2316'. [ 580.230207][T14607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 580.907706][T14618] netlink: 'syz.1.2319': attribute type 21 has an invalid length. [ 581.344418][T14634] netlink: 'syz.1.2323': attribute type 31 has an invalid length. [ 581.366009][T14632] netlink: 'syz.1.2323': attribute type 21 has an invalid length. [ 581.596814][T14645] netlink: 'syz.4.2324': attribute type 10 has an invalid length. [ 581.637425][T14645] __nla_validate_parse: 2 callbacks suppressed [ 581.637448][T14645] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2324'. [ 581.676792][T14645] bond0: entered promiscuous mode [ 581.682511][T14645] bond_slave_0: entered promiscuous mode [ 581.689199][T14645] bond_slave_1: entered promiscuous mode [ 581.702780][T14645] bridge0: port 3(bond0) entered blocking state [ 581.753429][T14645] bridge0: port 3(bond0) entered disabled state [ 581.760843][T14645] bond0: entered allmulticast mode [ 581.766210][T14645] bond_slave_0: entered allmulticast mode [ 581.773391][T14645] bond_slave_1: entered allmulticast mode [ 581.815631][T14645] bridge0: port 3(bond0) entered blocking state [ 581.822148][T14645] bridge0: port 3(bond0) entered forwarding state [ 581.916275][T14654] syz.0.2329: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 581.987471][T14654] CPU: 1 UID: 0 PID: 14654 Comm: syz.0.2329 Not tainted syzkaller #0 PREEMPT(full) [ 581.987504][T14654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 581.987527][T14654] Call Trace: [ 581.987536][T14654] [ 581.987546][T14654] dump_stack_lvl+0x189/0x250 [ 581.987585][T14654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.987614][T14654] ? __pfx__printk+0x10/0x10 [ 581.987648][T14654] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 581.987677][T14654] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 581.987707][T14654] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 581.987743][T14654] warn_alloc+0x214/0x310 [ 581.987767][T14654] ? stack_depot_save_flags+0x40/0x860 [ 581.987808][T14654] ? __pfx_warn_alloc+0x10/0x10 [ 581.987834][T14654] ? kasan_save_track+0x4f/0x80 [ 581.987865][T14654] ? xskq_create+0x56/0x170 [ 581.987886][T14654] ? xsk_init_queue+0xb0/0x110 [ 581.987905][T14654] ? xsk_setsockopt+0x57b/0x8d0 [ 581.987937][T14654] ? do_sock_setsockopt+0x179/0x1b0 [ 581.987964][T14654] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 581.987990][T14654] ? do_syscall_64+0xfa/0x3b0 [ 581.988014][T14654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.988049][T14654] __vmalloc_node_range_noprof+0x125/0x12f0 [ 581.988130][T14654] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 581.988175][T14654] ? __kasan_kmalloc+0x93/0xb0 [ 581.988211][T14654] vmalloc_user_noprof+0xad/0xf0 [ 581.988247][T14654] ? xskq_create+0xbf/0x170 [ 581.988272][T14654] xskq_create+0xbf/0x170 [ 581.988300][T14654] xsk_init_queue+0xb0/0x110 [ 581.988327][T14654] xsk_setsockopt+0x57b/0x8d0 [ 581.988369][T14654] ? __pfx_xsk_setsockopt+0x10/0x10 [ 581.988407][T14654] ? __pfx_aa_sk_perm+0x10/0x10 [ 581.988434][T14654] ? __fget_files+0x2a/0x420 [ 581.988452][T14654] ? aa_sock_opt_perm+0xff/0x1b0 [ 581.988482][T14654] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 581.988514][T14654] ? __pfx_xsk_setsockopt+0x10/0x10 [ 581.988554][T14654] do_sock_setsockopt+0x179/0x1b0 [ 581.988591][T14654] __x64_sys_setsockopt+0x13f/0x1b0 [ 581.988629][T14654] do_syscall_64+0xfa/0x3b0 [ 581.988653][T14654] ? lockdep_hardirqs_on+0x9c/0x150 [ 581.988678][T14654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.988701][T14654] ? clear_bhb_loop+0x60/0xb0 [ 581.988730][T14654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.988753][T14654] RIP: 0033:0x7fce5ef8eba9 [ 581.988773][T14654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.988794][T14654] RSP: 002b:00007fce5fe92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 581.988818][T14654] RAX: ffffffffffffffda RBX: 00007fce5f1d6090 RCX: 00007fce5ef8eba9 [ 581.988836][T14654] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 581.988849][T14654] RBP: 00007fce5f011e19 R08: 0000000000000004 R09: 0000000000000000 [ 581.988864][T14654] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 581.988878][T14654] R13: 00007fce5f1d6128 R14: 00007fce5f1d6090 R15: 00007ffefbaa0798 [ 581.988920][T14654] [ 581.989150][T14654] Mem-Info: [ 582.298036][T14659] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2327'. [ 582.332193][T14654] active_anon:4705 inactive_anon:0 isolated_anon:0 [ 582.332193][T14654] active_file:19915 inactive_file:40076 isolated_file:0 [ 582.332193][T14654] unevictable:768 dirty:172 writeback:0 [ 582.332193][T14654] slab_reclaimable:11591 slab_unreclaimable:130647 [ 582.332193][T14654] mapped:31889 shmem:1376 pagetables:1076 [ 582.332193][T14654] sec_pagetables:0 bounce:0 [ 582.332193][T14654] kernel_misc_reclaimable:0 [ 582.332193][T14654] free:1268754 free_pcp:16882 free_cma:0 [ 582.413258][T14646] macvlan0: entered promiscuous mode [ 582.431374][T14646] macvlan0: entered allmulticast mode [ 582.436977][T14646] veth1_vlan: entered allmulticast mode [ 582.453750][T14654] Node 0 active_anon:18620kB inactive_anon:0kB active_file:79660kB inactive_file:160104kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127556kB dirty:688kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11692kB pagetables:4124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 582.510372][T14654] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 582.550528][T14654] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 582.692177][T14654] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 582.735300][T14654] Node 0 DMA32 free:1174760kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18476kB inactive_anon:0kB active_file:79660kB inactive_file:158532kB unevictable:1536kB writepending:688kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:44096kB local_pcp:23392kB free_cma:0kB [ 582.778719][T14654] lowmem_reserve[]: 0 0 1 1 1 [ 582.784083][T14654] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1572kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 582.833734][T14654] lowmem_reserve[]: 0 0 0 0 0 [ 582.842300][T14654] Node 1 Normal free:3886672kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22528kB local_pcp:15232kB free_cma:0kB [ 582.882595][T14654] lowmem_reserve[]: 0 0 0 0 0 [ 582.889965][T14654] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 582.911685][T14654] Node 0 DMA32: 5393*4kB (UME) 2682*8kB (UME) 1501*16kB (UME) 983*32kB (UME) 329*64kB (UME) 67*128kB (UME) 32*256kB (U) 31*512kB (UME) 13*1024kB (UM) 9*2048kB (UM) 242*4096kB (UM) = 1175172kB [ 582.947896][T14654] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 582.986582][T14654] Node 1 Normal: 226*4kB (UME) 61*8kB (UME) 52*16kB (UME) 81*32kB (UME) 22*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3886672kB [ 583.005881][T14654] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.016643][T14654] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 583.026712][T14654] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 583.036824][T14654] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 583.046484][T14654] 61366 total pagecache pages [ 583.051640][T14654] 0 pages in swap cache [ 583.055829][T14654] Free swap = 124996kB [ 583.084221][T14654] Total swap = 124996kB [ 583.091308][T14654] 2097051 pages RAM [ 583.095377][T14654] 0 pages HighMem/MovableOnly [ 583.106958][T14654] 425672 pages reserved [ 583.115067][T14654] 0 pages cma reserved [ 583.252006][T14675] syzkaller0: entered promiscuous mode [ 583.268864][T14680] netlink: 'syz.3.2334': attribute type 1 has an invalid length. [ 583.276828][T14679] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2335'. [ 583.332759][T14675] syzkaller0: entered allmulticast mode [ 583.457660][T14679] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.814479][T14695] FAULT_INJECTION: forcing a failure. [ 583.814479][T14695] name failslab, interval 1, probability 0, space 0, times 0 [ 583.837578][T14695] CPU: 0 UID: 0 PID: 14695 Comm: syz.3.2340 Not tainted syzkaller #0 PREEMPT(full) [ 583.837606][T14695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.837617][T14695] Call Trace: [ 583.837625][T14695] [ 583.837632][T14695] dump_stack_lvl+0x189/0x250 [ 583.837663][T14695] ? lockdep_hardirqs_on+0x9c/0x150 [ 583.837687][T14695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.837731][T14695] should_fail_ex+0x414/0x560 [ 583.837769][T14695] should_failslab+0xa8/0x100 [ 583.837803][T14695] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 583.837832][T14695] ? __alloc_skb+0x112/0x2d0 [ 583.837860][T14695] __alloc_skb+0x112/0x2d0 [ 583.837882][T14695] netlink_sendmsg+0x5c6/0xb30 [ 583.837910][T14695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.837932][T14695] ? aa_sock_msg_perm+0xf1/0x1d0 [ 583.837950][T14695] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 583.837969][T14695] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.837989][T14695] __sock_sendmsg+0x219/0x270 [ 583.838017][T14695] ____sys_sendmsg+0x505/0x830 [ 583.838044][T14695] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.838073][T14695] ? import_iovec+0x74/0xa0 [ 583.838098][T14695] ___sys_sendmsg+0x21f/0x2a0 [ 583.838122][T14695] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.838148][T14695] ? irqentry_enter+0x3d/0x60 [ 583.838194][T14695] ? __x64_sys_sendmsg+0x101/0x260 [ 583.838221][T14695] __x64_sys_sendmsg+0x19b/0x260 [ 583.838245][T14695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.838283][T14695] ? do_syscall_64+0xbe/0x3b0 [ 583.838305][T14695] do_syscall_64+0xfa/0x3b0 [ 583.838324][T14695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.838340][T14695] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 583.838357][T14695] ? clear_bhb_loop+0x60/0xb0 [ 583.838377][T14695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.838393][T14695] RIP: 0033:0x7f24a238eba9 [ 583.838408][T14695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.838423][T14695] RSP: 002b:00007f24a31bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.838457][T14695] RAX: ffffffffffffffda RBX: 00007f24a25d5fa0 RCX: 00007f24a238eba9 [ 583.838469][T14695] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 583.838480][T14695] RBP: 00007f24a31bd090 R08: 0000000000000000 R09: 0000000000000000 [ 583.838490][T14695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.838500][T14695] R13: 00007f24a25d6038 R14: 00007f24a25d5fa0 R15: 00007fff8dfa38e8 [ 583.838526][T14695] [ 584.192934][T14700] netlink: 'syz.4.2342': attribute type 21 has an invalid length. [ 584.864058][T14724] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2350'. [ 585.134148][T14730] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2350'. [ 585.245803][T14732] netlink: 'syz.3.2353': attribute type 12 has an invalid length. [ 585.283020][T14732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2353'. [ 586.007875][T14742] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2356'. [ 586.311041][T14746] netlink: 'syz.1.2357': attribute type 21 has an invalid length. [ 586.793188][T14754] FAULT_INJECTION: forcing a failure. [ 586.793188][T14754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 586.827071][T14754] CPU: 1 UID: 0 PID: 14754 Comm: syz.1.2359 Not tainted syzkaller #0 PREEMPT(full) [ 586.827103][T14754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 586.827118][T14754] Call Trace: [ 586.827127][T14754] [ 586.827137][T14754] dump_stack_lvl+0x189/0x250 [ 586.827178][T14754] ? __pfx____ratelimit+0x10/0x10 [ 586.827202][T14754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 586.827232][T14754] ? __pfx__printk+0x10/0x10 [ 586.827262][T14754] ? __might_fault+0xb0/0x130 [ 586.827298][T14754] ? __might_fault+0xb0/0x130 [ 586.827336][T14754] should_fail_ex+0x414/0x560 [ 586.827377][T14754] _copy_from_user+0x2d/0xb0 [ 586.827408][T14754] __sys_bpf+0x1ed/0x870 [ 586.827442][T14754] ? __pfx___sys_bpf+0x10/0x10 [ 586.827493][T14754] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 586.827527][T14754] ? __pfx_ksys_write+0x10/0x10 [ 586.827567][T14754] __x64_sys_bpf+0x7c/0x90 [ 586.827594][T14754] do_syscall_64+0xfa/0x3b0 [ 586.827618][T14754] ? lockdep_hardirqs_on+0x9c/0x150 [ 586.827653][T14754] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.827673][T14754] ? clear_bhb_loop+0x60/0xb0 [ 586.827699][T14754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.827718][T14754] RIP: 0033:0x7fcdc2b8eba9 [ 586.827737][T14754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.827755][T14754] RSP: 002b:00007fcdc398d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.827776][T14754] RAX: ffffffffffffffda RBX: 00007fcdc2dd6090 RCX: 00007fcdc2b8eba9 [ 586.827792][T14754] RDX: 0000000000000020 RSI: 0000200000001d40 RDI: 0000000000000015 [ 586.827805][T14754] RBP: 00007fcdc398d090 R08: 0000000000000000 R09: 0000000000000000 [ 586.827818][T14754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.827830][T14754] R13: 00007fcdc2dd6128 R14: 00007fcdc2dd6090 R15: 00007ffd31231d78 [ 586.827866][T14754] [ 587.743875][T14760] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2360'. [ 587.824539][T14758] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2361'. [ 589.074700][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2370'. [ 589.113207][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2370'. [ 589.538277][T14797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.750528][T14802] FAULT_INJECTION: forcing a failure. [ 589.750528][T14802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.763989][T14802] CPU: 1 UID: 0 PID: 14802 Comm: syz.0.2375 Not tainted syzkaller #0 PREEMPT(full) [ 589.764021][T14802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.764035][T14802] Call Trace: [ 589.764046][T14802] [ 589.764057][T14802] dump_stack_lvl+0x189/0x250 [ 589.764090][T14802] ? __pfx____ratelimit+0x10/0x10 [ 589.764117][T14802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.764147][T14802] ? __pfx__printk+0x10/0x10 [ 589.764187][T14802] ? __might_fault+0xb0/0x130 [ 589.764232][T14802] should_fail_ex+0x414/0x560 [ 589.764277][T14802] _copy_to_user+0x31/0xb0 [ 589.764314][T14802] simple_read_from_buffer+0xe1/0x170 [ 589.764359][T14802] proc_fail_nth_read+0x1b3/0x220 [ 589.764393][T14802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.764427][T14802] ? rw_verify_area+0x2a6/0x4d0 [ 589.764458][T14802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 589.764488][T14802] vfs_read+0x200/0xa30 [ 589.764518][T14802] ? fdget_pos+0x247/0x320 [ 589.764546][T14802] ? __pfx___mutex_lock+0x10/0x10 [ 589.764573][T14802] ? __pfx_vfs_read+0x10/0x10 [ 589.764608][T14802] ? __fget_files+0x2a/0x420 [ 589.764637][T14802] ? __fget_files+0x3a0/0x420 [ 589.764657][T14802] ? __fget_files+0x2a/0x420 [ 589.764694][T14802] ksys_read+0x145/0x250 [ 589.764731][T14802] ? __pfx_ksys_read+0x10/0x10 [ 589.764778][T14802] ? do_syscall_64+0xbe/0x3b0 [ 589.764813][T14802] do_syscall_64+0xfa/0x3b0 [ 589.764837][T14802] ? lockdep_hardirqs_on+0x9c/0x150 [ 589.764867][T14802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.764890][T14802] ? clear_bhb_loop+0x60/0xb0 [ 589.764921][T14802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.764943][T14802] RIP: 0033:0x7fce5ef8d5bc [ 589.764965][T14802] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 589.764984][T14802] RSP: 002b:00007fce5feb3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 589.765007][T14802] RAX: ffffffffffffffda RBX: 00007fce5f1d5fa0 RCX: 00007fce5ef8d5bc [ 589.765024][T14802] RDX: 000000000000000f RSI: 00007fce5feb30a0 RDI: 0000000000000006 [ 589.765038][T14802] RBP: 00007fce5feb3090 R08: 0000000000000000 R09: 0000000000000000 [ 589.765052][T14802] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.765066][T14802] R13: 00007fce5f1d6038 R14: 00007fce5f1d5fa0 R15: 00007ffefbaa0798 [ 589.765111][T14802] [ 590.106425][T14807] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2376'. [ 590.117004][T14807] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2376'. [ 590.413900][T14809] ipvlan0: entered promiscuous mode [ 590.421244][T14809] ipvlan0: entered allmulticast mode [ 590.426661][T14809] veth0_vlan: entered allmulticast mode [ 590.622529][T14819] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2378'. [ 590.637746][T14818] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2380'. [ 590.825333][T14824] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.2382'. [ 592.782648][T14840] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2386'. [ 593.165933][T14862] netlink: 'syz.8.2392': attribute type 31 has an invalid length. [ 593.175765][T14862] netlink: 'syz.8.2392': attribute type 21 has an invalid length. [ 594.512027][T14894] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2403'. [ 594.903803][T14910] netlink: 'syz.0.2409': attribute type 21 has an invalid length. [ 594.953208][T14913] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2408'. [ 594.997793][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2406'. [ 595.383960][T14925] netlink: 'syz.8.2413': attribute type 5 has an invalid length. [ 595.395648][T14925] netlink: 'syz.8.2413': attribute type 7 has an invalid length. [ 595.934820][T14925] : entered promiscuous mode [ 596.260582][T14937] netlink: 'syz.1.2417': attribute type 12 has an invalid length. [ 596.320636][T14937] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2417'. [ 596.574431][T14948] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 596.942839][T14953] netlink: 'syz.1.2421': attribute type 21 has an invalid length. [ 596.953381][T14950] netlink: 'syz.3.2420': attribute type 4 has an invalid length. [ 597.003136][T14950] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2420'. [ 597.914240][T14964] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2425'. [ 597.920952][T14965] netlink: 'syz.0.2422': attribute type 27 has an invalid length. [ 597.933350][T14965] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2422'. [ 598.025565][T14968] netlink: 'syz.0.2422': attribute type 4 has an invalid length. [ 598.438808][T14975] netlink: 'syz.4.2427': attribute type 1 has an invalid length. [ 598.648723][T14980] netlink: 'syz.0.2429': attribute type 31 has an invalid length. [ 598.659247][T14980] netlink: 'syz.0.2429': attribute type 21 has an invalid length. [ 598.850116][T14985] netlink: 'syz.0.2431': attribute type 3 has an invalid length. [ 598.889839][T14985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2431'. [ 599.114625][T14989] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2433'. [ 599.253530][T14993] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2432'. [ 599.543829][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2438'. [ 599.574893][T15004] netlink: 'syz.3.2439': attribute type 10 has an invalid length. [ 599.687593][T15004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.747751][T15004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.842412][T15009] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.2440'. [ 599.877674][T15004] batadv_slave_0: entered promiscuous mode [ 599.886412][T15004] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 599.992129][T15012] netlink: 'syz.0.2441': attribute type 31 has an invalid length. [ 600.077630][T15012] netlink: 'syz.0.2441': attribute type 21 has an invalid length. [ 603.216132][T15087] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2464'. [ 603.313994][T15090] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2465'. [ 603.452064][T15098] netlink: 'syz.8.2468': attribute type 3 has an invalid length. [ 603.507560][T15098] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2468'. [ 604.016980][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 604.047865][T15115] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2476'. [ 604.098766][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2476'. [ 605.677189][T15154] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2488'. [ 605.679229][T15153] netlink: 'syz.4.2489': attribute type 21 has an invalid length. [ 605.709854][T15153] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2489'. [ 605.760436][T15156] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2491'. [ 606.186161][T15168] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2494'. [ 606.240875][T15171] netlink: 'syz.3.2497': attribute type 3 has an invalid length. [ 607.258914][T15190] netlink: 'syz.0.2502': attribute type 1 has an invalid length. [ 607.320374][T15183] netlink: 'syz.1.2501': attribute type 1 has an invalid length. [ 607.347690][T15183] netlink: 'syz.1.2501': attribute type 3 has an invalid length. [ 607.871784][T15204] netlink: zone id is out of range [ 607.881699][T15207] netlink: 'syz.3.2510': attribute type 3 has an invalid length. [ 607.914042][T15204] netlink: zone id is out of range [ 607.935221][T15204] netlink: zone id is out of range [ 607.969674][T15204] netlink: zone id is out of range [ 608.062612][T15204] netlink: zone id is out of range [ 608.224499][T15204] netlink: zone id is out of range [ 608.286073][T15217] __nla_validate_parse: 7 callbacks suppressed [ 608.286098][T15217] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2513'. [ 608.363866][T15218] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2513'. [ 608.460029][T15204] netlink: set zone limit has 4 unknown bytes [ 608.613159][T15224] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2516'. [ 608.670391][T15229] netlink: 'syz.8.2517': attribute type 1 has an invalid length. [ 609.455208][T15247] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2519'. [ 609.622467][T15247] netlink: 7 bytes leftover after parsing attributes in process `syz.8.2519'. [ 609.732164][T15251] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.846223][T15252] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2521'. [ 610.200393][T15256] netlink: 'syz.1.2523': attribute type 31 has an invalid length. [ 610.254882][T15256] netlink: 'syz.1.2523': attribute type 21 has an invalid length. [ 610.299947][T15265] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2518'. [ 610.518198][T15269] netlink: 'syz.1.2529': attribute type 1 has an invalid length. [ 611.113423][T15281] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2532'. [ 611.176590][T15282] netlink: 'syz.4.2532': attribute type 14 has an invalid length. [ 611.191586][T15285] netlink: 'syz.4.2532': attribute type 14 has an invalid length. [ 612.380468][T15310] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2541'. [ 614.437618][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'. [ 614.583318][T15360] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2555'. [ 615.164912][T15387] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2566'. [ 615.198683][T15389] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2564'. [ 615.225431][T15389] hsr_slave_0: left promiscuous mode [ 615.265464][T15389] hsr_slave_1: left promiscuous mode [ 616.759710][T15411] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2572'. [ 617.421555][T15421] netlink: 'syz.0.2577': attribute type 31 has an invalid length. [ 617.434125][T15421] netlink: 'syz.0.2577': attribute type 21 has an invalid length. [ 618.006977][T15442] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2585'. [ 618.055969][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'. [ 618.850963][T15465] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2589'. [ 618.863194][T15455] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2589'. [ 618.882460][T15465] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2589'. [ 618.960412][T15460] netlink: 'syz.4.2592': attribute type 31 has an invalid length. [ 618.982250][T15460] netlink: 'syz.4.2592': attribute type 21 has an invalid length. [ 619.008358][T15470] netlink: 'syz.0.2593': attribute type 21 has an invalid length. [ 619.131789][T15473] netlink: 'syz.3.2594': attribute type 3 has an invalid length. [ 619.737958][T15491] __nla_validate_parse: 1 callbacks suppressed [ 619.737980][T15491] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2601'. [ 619.919536][T15500] bond0: left allmulticast mode [ 619.924652][T15500] bond_slave_0: left allmulticast mode [ 619.961380][T15500] bond_slave_1: left allmulticast mode [ 619.980740][T15500] bridge0: port 3(bond0) entered disabled state [ 620.227852][T15500] bridge_slave_1: left allmulticast mode [ 620.234012][T15500] bridge_slave_1: left promiscuous mode [ 620.288065][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.512498][T15500] bridge_slave_0: left allmulticast mode [ 620.518664][T15500] bridge_slave_0: left promiscuous mode [ 620.536542][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.627947][T15508] netlink: 'syz.3.2608': attribute type 31 has an invalid length. [ 620.636666][T15508] netlink: 'syz.3.2608': attribute type 21 has an invalid length. [ 622.283123][T15551] netlink: 'syz.8.2622': attribute type 3 has an invalid length. [ 622.298990][T15551] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2622'. [ 623.805795][T15580] netlink: 'syz.1.2632': attribute type 11 has an invalid length. [ 623.823190][T15580] netlink: 'syz.1.2632': attribute type 11 has an invalid length. [ 623.920613][T15588] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2635'. [ 624.358210][T15599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2638'. [ 626.036435][T15635] netlink: 'syz.0.2650': attribute type 22 has an invalid length. [ 626.053929][T15635] netlink: 14380 bytes leftover after parsing attributes in process `syz.0.2650'. [ 626.133383][T15635] netlink: 'syz.0.2650': attribute type 4 has an invalid length. [ 626.142339][T15635] netlink: 'syz.0.2650': attribute type 1 has an invalid length. [ 626.182935][T15642] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2651'. [ 626.312003][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2653'. [ 629.478049][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.485647][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.797354][ T5863] Bluetooth: hci2: command 0x0406 tx timeout [ 642.992026][T15658] netlink: 'syz.8.2654': attribute type 4 has an invalid length. [ 643.067617][T15658] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2654'. [ 643.266170][T15669] netlink: 'syz.4.2661': attribute type 1 has an invalid length. [ 644.693700][T15705] netlink: 'syz.4.2670': attribute type 3 has an invalid length. [ 644.704079][T15705] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2670'. [ 644.979673][T15713] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2671'. [ 645.506239][T15720] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2675'. [ 646.014329][T15741] netlink: 3815 bytes leftover after parsing attributes in process `syz.3.2681'. [ 646.160352][T15746] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2682'. [ 647.175794][T15780] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2692'. [ 647.211080][T15782] FAULT_INJECTION: forcing a failure. [ 647.211080][T15782] name failslab, interval 1, probability 0, space 0, times 0 [ 647.232960][T15782] CPU: 1 UID: 0 PID: 15782 Comm: syz.3.2693 Not tainted syzkaller #0 PREEMPT(full) [ 647.232991][T15782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.233005][T15782] Call Trace: [ 647.233014][T15782] [ 647.233024][T15782] dump_stack_lvl+0x189/0x250 [ 647.233057][T15782] ? __pfx____ratelimit+0x10/0x10 [ 647.233083][T15782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.233111][T15782] ? __pfx__printk+0x10/0x10 [ 647.233162][T15782] ? __pfx___might_resched+0x10/0x10 [ 647.233194][T15782] should_fail_ex+0x414/0x560 [ 647.233238][T15782] should_failslab+0xa8/0x100 [ 647.233276][T15782] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 647.233309][T15782] ? __alloc_skb+0x112/0x2d0 [ 647.233330][T15782] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 647.233371][T15782] __alloc_skb+0x112/0x2d0 [ 647.233405][T15782] __ip6_append_data+0x2c16/0x3f30 [ 647.233474][T15782] ? __pfx_raw6_getfrag+0x10/0x10 [ 647.233537][T15782] ? __pfx___ip6_append_data+0x10/0x10 [ 647.233555][T15782] ? __pfx_ip6_mtu+0x10/0x10 [ 647.233608][T15782] ip6_append_data+0x1c4/0x380 [ 647.233653][T15782] ? __pfx_raw6_getfrag+0x10/0x10 [ 647.233683][T15782] rawv6_sendmsg+0x127a/0x1820 [ 647.233745][T15782] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 647.233826][T15782] ? __pfx_aa_sk_perm+0x10/0x10 [ 647.233856][T15782] ? sock_rps_record_flow+0x19/0x410 [ 647.233896][T15782] ? inet_sendmsg+0x2f4/0x370 [ 647.233926][T15782] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 647.233959][T15782] __sock_sendmsg+0x19c/0x270 [ 647.234001][T15782] ____sys_sendmsg+0x505/0x830 [ 647.234042][T15782] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.234090][T15782] ? import_iovec+0x74/0xa0 [ 647.234134][T15782] ___sys_sendmsg+0x21f/0x2a0 [ 647.234168][T15782] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.234241][T15782] ? __fget_files+0x2a/0x420 [ 647.234287][T15782] ? __fget_files+0x2a/0x420 [ 647.234306][T15782] ? __fget_files+0x3a0/0x420 [ 647.234347][T15782] __x64_sys_sendmsg+0x19b/0x260 [ 647.234383][T15782] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.234409][T15782] ? perf_trace_preemptirq_template+0xa3/0x340 [ 647.234471][T15782] ? __pfx_ksys_write+0x10/0x10 [ 647.234515][T15782] ? rcu_is_watching+0x15/0xb0 [ 647.234548][T15782] ? do_syscall_64+0xbe/0x3b0 [ 647.234582][T15782] do_syscall_64+0xfa/0x3b0 [ 647.234604][T15782] ? lockdep_hardirqs_on+0x9c/0x150 [ 647.234628][T15782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.234649][T15782] ? clear_bhb_loop+0x60/0xb0 [ 647.234680][T15782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.234700][T15782] RIP: 0033:0x7f24a238eba9 [ 647.234720][T15782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.234737][T15782] RSP: 002b:00007f24a31bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.234760][T15782] RAX: ffffffffffffffda RBX: 00007f24a25d5fa0 RCX: 00007f24a238eba9 [ 647.234775][T15782] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 647.234788][T15782] RBP: 00007f24a31bd090 R08: 0000000000000000 R09: 0000000000000000 [ 647.234801][T15782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 647.234813][T15782] R13: 00007f24a25d6038 R14: 00007f24a25d5fa0 R15: 00007fff8dfa38e8 [ 647.234862][T15782] [ 647.846889][T15787] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2695'. [ 648.728185][T15809] netlink: 'syz.1.2704': attribute type 3 has an invalid length. [ 648.771465][T15809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2704'. [ 648.992064][T15821] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2708'. [ 650.027727][T15843] openvswitch: netlink: Message has 4 unknown bytes. [ 650.068972][T15843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.588074][T15861] netlink: 'syz.4.2720': attribute type 3 has an invalid length. [ 650.596201][T15861] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2720'. [ 654.001659][T15909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2738'. [ 654.434484][T15931] FAULT_INJECTION: forcing a failure. [ 654.434484][T15931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.456916][T15931] CPU: 0 UID: 0 PID: 15931 Comm: syz.1.2746 Not tainted syzkaller #0 PREEMPT(full) [ 654.456947][T15931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.456960][T15931] Call Trace: [ 654.456969][T15931] [ 654.456978][T15931] dump_stack_lvl+0x189/0x250 [ 654.457010][T15931] ? __pfx____ratelimit+0x10/0x10 [ 654.457032][T15931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.457058][T15931] ? __pfx__printk+0x10/0x10 [ 654.457088][T15931] ? __might_fault+0xb0/0x130 [ 654.457132][T15931] should_fail_ex+0x414/0x560 [ 654.457170][T15931] _copy_from_iter+0x1de/0x1790 [ 654.457203][T15931] ? rcu_is_watching+0x15/0xb0 [ 654.457225][T15931] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 654.457256][T15931] ? __pfx__copy_from_iter+0x10/0x10 [ 654.457284][T15931] ? __build_skb_around+0x257/0x3e0 [ 654.457314][T15931] ? netlink_sendmsg+0x642/0xb30 [ 654.457336][T15931] ? skb_put+0x11b/0x210 [ 654.457365][T15931] netlink_sendmsg+0x6b2/0xb30 [ 654.457400][T15931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.457429][T15931] ? aa_sock_msg_perm+0xf1/0x1d0 [ 654.457453][T15931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.457483][T15931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.457508][T15931] __sock_sendmsg+0x219/0x270 [ 654.457545][T15931] ____sys_sendmsg+0x505/0x830 [ 654.457579][T15931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.457617][T15931] ? import_iovec+0x74/0xa0 [ 654.457656][T15931] ___sys_sendmsg+0x21f/0x2a0 [ 654.457687][T15931] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.457756][T15931] ? __fget_files+0x2a/0x420 [ 654.457775][T15931] ? __fget_files+0x3a0/0x420 [ 654.457806][T15931] __x64_sys_sendmsg+0x19b/0x260 [ 654.457837][T15931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.457886][T15931] ? do_syscall_64+0xbe/0x3b0 [ 654.457915][T15931] do_syscall_64+0xfa/0x3b0 [ 654.457940][T15931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.457961][T15931] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 654.457982][T15931] ? clear_bhb_loop+0x60/0xb0 [ 654.458008][T15931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.458029][T15931] RIP: 0033:0x7fcdc2b8eba9 [ 654.458048][T15931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.458066][T15931] RSP: 002b:00007fcdc39ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.458088][T15931] RAX: ffffffffffffffda RBX: 00007fcdc2dd5fa0 RCX: 00007fcdc2b8eba9 [ 654.458104][T15931] RDX: 0000000004000000 RSI: 0000200000000440 RDI: 0000000000000008 [ 654.458118][T15931] RBP: 00007fcdc39ae090 R08: 0000000000000000 R09: 0000000000000000 [ 654.458131][T15931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.458144][T15931] R13: 00007fcdc2dd6038 R14: 00007fcdc2dd5fa0 R15: 00007ffd31231d78 [ 654.458178][T15931] [ 655.100527][T15949] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2752'. [ 655.330952][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2756'. [ 655.617023][T15970] netlink: 'syz.4.2759': attribute type 12 has an invalid length. [ 655.641579][T15970] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.2759'. [ 656.050152][T15985] FAULT_INJECTION: forcing a failure. [ 656.050152][T15985] name failslab, interval 1, probability 0, space 0, times 0 [ 656.071286][T15985] CPU: 0 UID: 0 PID: 15985 Comm: syz.8.2766 Not tainted syzkaller #0 PREEMPT(full) [ 656.071316][T15985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 656.071330][T15985] Call Trace: [ 656.071338][T15985] [ 656.071347][T15985] dump_stack_lvl+0x189/0x250 [ 656.071379][T15985] ? __pfx____ratelimit+0x10/0x10 [ 656.071403][T15985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 656.071430][T15985] ? __pfx__printk+0x10/0x10 [ 656.071467][T15985] ? __pfx___might_resched+0x10/0x10 [ 656.071487][T15985] ? fs_reclaim_acquire+0x7d/0x100 [ 656.071514][T15985] should_fail_ex+0x414/0x560 [ 656.071554][T15985] should_failslab+0xa8/0x100 [ 656.071589][T15985] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 656.071621][T15985] ? __alloc_skb+0x112/0x2d0 [ 656.071651][T15985] __alloc_skb+0x112/0x2d0 [ 656.071680][T15985] netlink_ack+0x146/0xa50 [ 656.071700][T15985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.071736][T15985] ? __asan_memcpy+0x40/0x70 [ 656.071774][T15985] ? __pfx_ref_tracker_free+0x10/0x10 [ 656.071804][T15985] netlink_rcv_skb+0x28c/0x470 [ 656.071825][T15985] ? __lock_acquire+0xab9/0xd20 [ 656.071856][T15985] ? __pfx_genl_rcv_msg+0x10/0x10 [ 656.071887][T15985] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 656.071931][T15985] ? down_read+0x1ad/0x2e0 [ 656.071960][T15985] genl_rcv+0x28/0x40 [ 656.071987][T15985] netlink_unicast+0x82c/0x9e0 [ 656.072018][T15985] ? __pfx_netlink_unicast+0x10/0x10 [ 656.072047][T15985] ? netlink_sendmsg+0x642/0xb30 [ 656.072069][T15985] ? skb_put+0x11b/0x210 [ 656.072095][T15985] netlink_sendmsg+0x805/0xb30 [ 656.072131][T15985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.072159][T15985] ? aa_sock_msg_perm+0xf1/0x1d0 [ 656.072184][T15985] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.072208][T15985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.072234][T15985] __sock_sendmsg+0x219/0x270 [ 656.072320][T15985] ____sys_sendmsg+0x505/0x830 [ 656.072355][T15985] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.072393][T15985] ? import_iovec+0x74/0xa0 [ 656.072427][T15985] ___sys_sendmsg+0x21f/0x2a0 [ 656.072458][T15985] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.072527][T15985] ? __fget_files+0x2a/0x420 [ 656.072546][T15985] ? __fget_files+0x3a0/0x420 [ 656.072575][T15985] __x64_sys_sendmsg+0x19b/0x260 [ 656.072606][T15985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.072644][T15985] ? __pfx_ksys_write+0x10/0x10 [ 656.072670][T15985] ? rcu_is_watching+0x15/0xb0 [ 656.072697][T15985] ? do_syscall_64+0xbe/0x3b0 [ 656.072725][T15985] do_syscall_64+0xfa/0x3b0 [ 656.072747][T15985] ? lockdep_hardirqs_on+0x9c/0x150 [ 656.072768][T15985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.072789][T15985] ? clear_bhb_loop+0x60/0xb0 [ 656.072815][T15985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.072835][T15985] RIP: 0033:0x7f9d0f38eba9 [ 656.072854][T15985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 656.072872][T15985] RSP: 002b:00007f9d0d5f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.072894][T15985] RAX: ffffffffffffffda RBX: 00007f9d0f5d5fa0 RCX: 00007f9d0f38eba9 [ 656.072909][T15985] RDX: 000000000004c080 RSI: 0000200000000080 RDI: 0000000000000003 [ 656.072923][T15985] RBP: 00007f9d0d5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 656.072936][T15985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.072952][T15985] R13: 00007f9d0f5d6038 R14: 00007f9d0f5d5fa0 R15: 00007ffecd705698 [ 656.072987][T15985] [ 656.442716][T15983] openvswitch: netlink: Message has 4 unknown bytes. [ 656.864811][T16003] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2771'. [ 657.080264][T16011] netlink: 'syz.1.2775': attribute type 1 has an invalid length. [ 657.097726][T16011] netlink: 'syz.1.2775': attribute type 1 has an invalid length. [ 657.256550][T16012] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2774'. [ 658.968616][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'. [ 659.061744][T16063] FAULT_INJECTION: forcing a failure. [ 659.061744][T16063] name failslab, interval 1, probability 0, space 0, times 0 [ 659.077602][T16063] CPU: 0 UID: 0 PID: 16063 Comm: syz.4.2793 Not tainted syzkaller #0 PREEMPT(full) [ 659.077633][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 659.077647][T16063] Call Trace: [ 659.077657][T16063] [ 659.077666][T16063] dump_stack_lvl+0x189/0x250 [ 659.077700][T16063] ? __pfx____ratelimit+0x10/0x10 [ 659.077725][T16063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 659.077754][T16063] ? __pfx__printk+0x10/0x10 [ 659.077795][T16063] ? __pfx___might_resched+0x10/0x10 [ 659.077815][T16063] ? fs_reclaim_acquire+0x7d/0x100 [ 659.077845][T16063] should_fail_ex+0x414/0x560 [ 659.077887][T16063] ? vmemdup_user+0x26/0xd0 [ 659.077910][T16063] should_failslab+0xa8/0x100 [ 659.077961][T16063] __kvmalloc_node_noprof+0x161/0x5f0 [ 659.077996][T16063] ? vmemdup_user+0x26/0xd0 [ 659.078029][T16063] vmemdup_user+0x26/0xd0 [ 659.078056][T16063] map_lookup_and_delete_elem+0x33a/0x870 [ 659.078096][T16063] ? bpf_lsm_bpf+0x9/0x20 [ 659.078133][T16063] __sys_bpf+0x64c/0x870 [ 659.078167][T16063] ? __pfx___sys_bpf+0x10/0x10 [ 659.078217][T16063] ? ksys_write+0x22a/0x250 [ 659.078258][T16063] ? __pfx_ksys_write+0x10/0x10 [ 659.078286][T16063] ? rcu_is_watching+0x15/0xb0 [ 659.078321][T16063] __x64_sys_bpf+0x7c/0x90 [ 659.078349][T16063] do_syscall_64+0xfa/0x3b0 [ 659.078374][T16063] ? lockdep_hardirqs_on+0x9c/0x150 [ 659.078398][T16063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.078420][T16063] ? clear_bhb_loop+0x60/0xb0 [ 659.078449][T16063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.078471][T16063] RIP: 0033:0x7f6fad98eba9 [ 659.078492][T16063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 659.078512][T16063] RSP: 002b:00007f6fae865038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 659.078537][T16063] RAX: ffffffffffffffda RBX: 00007f6fadbd5fa0 RCX: 00007f6fad98eba9 [ 659.078554][T16063] RDX: 0000000000000020 RSI: 0000200000001d40 RDI: 0000000000000015 [ 659.078569][T16063] RBP: 00007f6fae865090 R08: 0000000000000000 R09: 0000000000000000 [ 659.078583][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.078596][T16063] R13: 00007f6fadbd6038 R14: 00007f6fadbd5fa0 R15: 00007ffd7dfd8238 [ 659.078637][T16063] [ 659.466079][T16071] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2794'. [ 661.033820][T16110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2810'. [ 661.243044][T16118] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2811'. [ 665.385954][T16149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 665.628525][T16159] netlink: 'syz.4.2826': attribute type 14 has an invalid length. [ 665.711384][T16162] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2826'. [ 665.990531][T16167] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2827'. [ 666.513526][T16175] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2829'. [ 666.523236][T16175] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2829'. [ 667.251217][T16193] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2835'. [ 667.266897][T16190] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2835'. [ 667.294430][T16190] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2835'. [ 669.184881][T16217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2843'. [ 670.059373][ T30] audit: type=1107 audit(1757685389.517:7): pid=16229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 670.249496][T16232] delete_channel: no stack [ 670.421826][T16244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2855'. [ 670.640973][T16253] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2854'. [ 670.922390][T16259] netlink: 'syz.1.2859': attribute type 3 has an invalid length. [ 670.966849][T16259] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2859'. [ 671.007036][T16262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2858'. [ 672.353397][T16274] netlink: 'syz.4.2864': attribute type 10 has an invalid length. [ 672.910732][T16295] sctp: [Deprecated]: syz.3.2870 (pid 16295) Use of int in max_burst socket option deprecated. [ 672.910732][T16295] Use struct sctp_assoc_value instead [ 673.004243][T16295] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2870'. [ 673.236308][T16314] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2874'. [ 674.076944][T16325] netlink: 'syz.1.2878': attribute type 21 has an invalid length. [ 675.790601][T16361] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2889'. [ 676.347616][T16378] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2893'. [ 677.420834][T16397] netlink: 124 bytes leftover after parsing attributes in process `syz.4.2899'. [ 677.510942][T16397] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2899'. [ 677.947971][T16409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2902'. [ 677.997751][T16409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2902'. [ 678.007874][T16412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2905'. [ 678.470868][T16430] syzkaller0: entered promiscuous mode [ 678.476414][T16430] syzkaller0: entered allmulticast mode [ 678.776957][T16442] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2913'. [ 678.826361][T16439] netlink: 'syz.3.2914': attribute type 6 has an invalid length. [ 678.835476][T16439] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2914'. [ 678.935957][T16448] netlink: 'syz.3.2914': attribute type 2 has an invalid length. [ 678.953626][T16448] netlink: 'syz.3.2914': attribute type 1 has an invalid length. [ 679.071668][T16451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2917'. [ 681.598812][T16500] FAULT_INJECTION: forcing a failure. [ 681.598812][T16500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.627540][T16500] CPU: 1 UID: 0 PID: 16500 Comm: syz.1.2932 Not tainted syzkaller #0 PREEMPT(full) [ 681.627582][T16500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 681.627596][T16500] Call Trace: [ 681.627605][T16500] [ 681.627615][T16500] dump_stack_lvl+0x189/0x250 [ 681.627648][T16500] ? __pfx____ratelimit+0x10/0x10 [ 681.627672][T16500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 681.627699][T16500] ? __pfx__printk+0x10/0x10 [ 681.627731][T16500] ? __might_fault+0xb0/0x130 [ 681.627776][T16500] should_fail_ex+0x414/0x560 [ 681.627814][T16500] _copy_from_iter+0x1de/0x1790 [ 681.627857][T16500] ? rcu_is_watching+0x15/0xb0 [ 681.627882][T16500] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 681.627917][T16500] ? __pfx__copy_from_iter+0x10/0x10 [ 681.627946][T16500] ? __build_skb_around+0x257/0x3e0 [ 681.627976][T16500] ? netlink_sendmsg+0x642/0xb30 [ 681.628000][T16500] ? skb_put+0x11b/0x210 [ 681.628030][T16500] netlink_sendmsg+0x6b2/0xb30 [ 681.628054][T16500] ? lockdep_hardirqs_on+0x9c/0x150 [ 681.628087][T16500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.628119][T16500] ? __sanitizer_cov_trace_pc+0x11/0x70 [ 681.628150][T16500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 681.628175][T16500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.628202][T16500] __sock_sendmsg+0x219/0x270 [ 681.628241][T16500] ____sys_sendmsg+0x505/0x830 [ 681.628277][T16500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.628317][T16500] ? import_iovec+0x74/0xa0 [ 681.628350][T16500] ___sys_sendmsg+0x21f/0x2a0 [ 681.628381][T16500] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.628452][T16500] ? __fget_files+0x2a/0x420 [ 681.628471][T16500] ? __fget_files+0x3a0/0x420 [ 681.628504][T16500] __x64_sys_sendmsg+0x19b/0x260 [ 681.628538][T16500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.628590][T16500] ? do_syscall_64+0xbe/0x3b0 [ 681.628620][T16500] do_syscall_64+0xfa/0x3b0 [ 681.628647][T16500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.628668][T16500] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 681.628690][T16500] ? clear_bhb_loop+0x60/0xb0 [ 681.628718][T16500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.628739][T16500] RIP: 0033:0x7fcdc2b8eba9 [ 681.628760][T16500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 681.628781][T16500] RSP: 002b:00007fcdc39ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.628805][T16500] RAX: ffffffffffffffda RBX: 00007fcdc2dd5fa0 RCX: 00007fcdc2b8eba9 [ 681.628820][T16500] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 681.628835][T16500] RBP: 00007fcdc39ae090 R08: 0000000000000000 R09: 0000000000000000 [ 681.628856][T16500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.628869][T16500] R13: 00007fcdc2dd6038 R14: 00007fcdc2dd5fa0 R15: 00007ffd31231d78 [ 681.628906][T16500] [ 682.154259][T16513] netlink: 'syz.1.2936': attribute type 10 has an invalid length. [ 682.183979][T16513] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2936'. [ 684.843741][T16577] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2955'. [ 684.887473][T16577] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2955'. [ 685.400186][T16592] FAULT_INJECTION: forcing a failure. [ 685.400186][T16592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.477793][T16592] CPU: 1 UID: 0 PID: 16592 Comm: syz.3.2961 Not tainted syzkaller #0 PREEMPT(full) [ 685.477825][T16592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 685.477838][T16592] Call Trace: [ 685.477852][T16592] [ 685.477866][T16592] dump_stack_lvl+0x189/0x250 [ 685.477908][T16592] ? __pfx____ratelimit+0x10/0x10 [ 685.477943][T16592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 685.477981][T16592] ? __pfx__printk+0x10/0x10 [ 685.478036][T16592] ? __might_fault+0xb0/0x130 [ 685.478108][T16592] ? __might_fault+0xb0/0x130 [ 685.478180][T16592] should_fail_ex+0x414/0x560 [ 685.478252][T16592] _copy_from_user+0x2d/0xb0 [ 685.478296][T16592] __sys_bpf+0x1ed/0x870 [ 685.478352][T16592] ? __pfx___sys_bpf+0x10/0x10 [ 685.478485][T16592] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 685.478528][T16592] ? __pfx_ksys_write+0x10/0x10 [ 685.478557][T16592] ? rcu_is_watching+0x15/0xb0 [ 685.478629][T16592] __x64_sys_bpf+0x7c/0x90 [ 685.478674][T16592] do_syscall_64+0xfa/0x3b0 [ 685.478715][T16592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.478737][T16592] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 685.478759][T16592] ? clear_bhb_loop+0x60/0xb0 [ 685.478808][T16592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.478833][T16592] RIP: 0033:0x7f24a238eba9 [ 685.478861][T16592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 685.478882][T16592] RSP: 002b:00007f24a31bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 685.478905][T16592] RAX: ffffffffffffffda RBX: 00007f24a25d5fa0 RCX: 00007f24a238eba9 [ 685.478923][T16592] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 0000000000000018 [ 685.478938][T16592] RBP: 00007f24a31bd090 R08: 0000000000000000 R09: 0000000000000000 [ 685.478952][T16592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.478967][T16592] R13: 00007f24a25d6038 R14: 00007f24a25d5fa0 R15: 00007fff8dfa38e8 [ 685.479075][T16592] [ 686.597681][T16618] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2968'. [ 686.768639][T16632] netlink: 'syz.8.2973': attribute type 3 has an invalid length. [ 686.776807][T16632] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2973'. [ 686.796574][T16630] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2972'. [ 687.201342][T16634] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2974'. [ 687.582242][T16649] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2977'. [ 688.219884][T16669] netlink: 'syz.3.2986': attribute type 3 has an invalid length. [ 688.231069][T16669] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2986'. [ 689.177968][T16707] netlink: 'syz.0.3000': attribute type 3 has an invalid length. [ 689.204444][T16707] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3000'. [ 690.518739][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3010'. [ 690.519618][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'. [ 690.614852][T16745] netlink: 'syz.8.3012': attribute type 10 has an invalid length. [ 690.653498][T16745] netlink: 55 bytes leftover after parsing attributes in process `syz.8.3012'. [ 690.760914][T16753] netlink: 'syz.3.3014': attribute type 3 has an invalid length. [ 690.778775][T16753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3014'. [ 690.923753][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.932607][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.122994][T16767] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3018'. [ 691.265175][T16770] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3020'. [ 691.840997][T16774] netlink: 'syz.4.3022': attribute type 21 has an invalid length. [ 693.506930][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3025'. [ 693.809946][ T5863] Bluetooth: hci4: unexpected event 0x03 length: 15 > 11 [ 693.865727][T16814] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3033'. [ 694.139825][T16813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 694.236407][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3034'. [ 694.995084][T16835] netlink: 'syz.3.3040': attribute type 4 has an invalid length. [ 695.003174][T16835] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3040'. [ 695.031807][T16833] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3039'. [ 695.385643][T16843] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3042'. [ 695.531062][T16848] netlink: 'syz.4.3044': attribute type 12 has an invalid length. [ 695.558190][T16848] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3044'. [ 695.676117][T16847] netlink: 'syz.4.3044': attribute type 1 has an invalid length. [ 695.688797][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3044'. [ 696.420909][T16880] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3055'. [ 697.204131][T16891] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.739865][T16915] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3070'. [ 697.924132][T16921] netlink: 'syz.1.3070': attribute type 10 has an invalid length. [ 700.386957][T16973] netlink: 'syz.1.3090': attribute type 21 has an invalid length. [ 700.495159][T16979] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3092'. [ 700.518960][T16979] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3092'. [ 700.730833][T16987] netlink: 'syz.3.3094': attribute type 4 has an invalid length. [ 700.767443][T16987] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3094'. [ 702.240953][T17014] netlink: 'syz.8.3103': attribute type 10 has an invalid length. [ 702.350907][T17014] bridge0: port 3(netdevsim0) entered blocking state [ 702.396852][T17014] bridge0: port 3(netdevsim0) entered disabled state [ 702.420129][T17022] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3105'. [ 702.421724][T17014] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 702.443408][T17014] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 702.643770][T17022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3105'. [ 703.438871][T17045] netlink: 'syz.0.3111': attribute type 4 has an invalid length. [ 703.475592][T17045] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3111'. [ 704.264909][T17053] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3113'. [ 704.331990][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3115'. [ 704.581993][T17053] netlink: 'syz.8.3113': attribute type 10 has an invalid length. [ 704.638311][T17053] veth1_macvtap: left promiscuous mode [ 704.959679][T17067] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3120'. [ 705.599687][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3126'. [ 707.018432][T17112] FAULT_INJECTION: forcing a failure. [ 707.018432][T17112] name failslab, interval 1, probability 0, space 0, times 0 [ 707.067592][T17112] CPU: 0 UID: 0 PID: 17112 Comm: syz.1.3135 Not tainted syzkaller #0 PREEMPT(full) [ 707.067624][T17112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 707.067638][T17112] Call Trace: [ 707.067649][T17112] [ 707.067660][T17112] dump_stack_lvl+0x189/0x250 [ 707.067693][T17112] ? __pfx____ratelimit+0x10/0x10 [ 707.067719][T17112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 707.067747][T17112] ? __pfx__printk+0x10/0x10 [ 707.067788][T17112] ? __pfx___might_resched+0x10/0x10 [ 707.067810][T17112] ? fs_reclaim_acquire+0x7d/0x100 [ 707.067840][T17112] should_fail_ex+0x414/0x560 [ 707.067888][T17112] should_failslab+0xa8/0x100 [ 707.067926][T17112] kmem_cache_alloc_noprof+0x73/0x3c0 [ 707.067958][T17112] ? skb_clone+0x212/0x3a0 [ 707.067998][T17112] skb_clone+0x212/0x3a0 [ 707.068037][T17112] pfkey_sendmsg+0x44b/0x1090 [ 707.068078][T17112] ? __lock_acquire+0xab9/0xd20 [ 707.068123][T17112] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 707.068190][T17112] ? aa_sock_msg_perm+0xf1/0x1d0 [ 707.068218][T17112] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 707.068245][T17112] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 707.068276][T17112] __sock_sendmsg+0x219/0x270 [ 707.068319][T17112] ____sys_sendmsg+0x505/0x830 [ 707.068360][T17112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.068412][T17112] ? import_iovec+0x74/0xa0 [ 707.068450][T17112] ___sys_sendmsg+0x21f/0x2a0 [ 707.068486][T17112] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.068571][T17112] ? __fget_files+0x2a/0x420 [ 707.068593][T17112] ? __fget_files+0x3a0/0x420 [ 707.068631][T17112] __x64_sys_sendmsg+0x19b/0x260 [ 707.068668][T17112] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.068714][T17112] ? __pfx_ksys_write+0x10/0x10 [ 707.068755][T17112] ? do_syscall_64+0xbe/0x3b0 [ 707.068799][T17112] do_syscall_64+0xfa/0x3b0 [ 707.068823][T17112] ? lockdep_hardirqs_on+0x9c/0x150 [ 707.068846][T17112] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.068868][T17112] ? clear_bhb_loop+0x60/0xb0 [ 707.068897][T17112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.068919][T17112] RIP: 0033:0x7fcdc2b8eba9 [ 707.068940][T17112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 707.068959][T17112] RSP: 002b:00007fcdc398d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.068983][T17112] RAX: ffffffffffffffda RBX: 00007fcdc2dd6090 RCX: 00007fcdc2b8eba9 [ 707.068999][T17112] RDX: 00000000200c405a RSI: 00002000000001c0 RDI: 0000000000000003 [ 707.069015][T17112] RBP: 00007fcdc398d090 R08: 0000000000000000 R09: 0000000000000000 [ 707.069029][T17112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.069042][T17112] R13: 00007fcdc2dd6128 R14: 00007fcdc2dd6090 R15: 00007ffd31231d78 [ 707.069082][T17112] [ 707.637016][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3141'. [ 708.672639][T17166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 709.218947][T17193] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3160'. [ 709.363558][T17200] netlink: 10 bytes leftover after parsing attributes in process `syz.8.3165'. [ 709.544150][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3169'. [ 709.694666][T17211] FAULT_INJECTION: forcing a failure. [ 709.694666][T17211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 709.719271][T17211] CPU: 0 UID: 0 PID: 17211 Comm: syz.0.3171 Not tainted syzkaller #0 PREEMPT(full) [ 709.719301][T17211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 709.719316][T17211] Call Trace: [ 709.719325][T17211] [ 709.719336][T17211] dump_stack_lvl+0x189/0x250 [ 709.719368][T17211] ? __pfx____ratelimit+0x10/0x10 [ 709.719399][T17211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.719427][T17211] ? __pfx__printk+0x10/0x10 [ 709.719458][T17211] ? __might_fault+0xb0/0x130 [ 709.719494][T17211] ? __might_fault+0xb0/0x130 [ 709.719534][T17211] should_fail_ex+0x414/0x560 [ 709.719576][T17211] _copy_from_iter+0x1de/0x1790 [ 709.719627][T17211] ? __pfx__copy_from_iter+0x10/0x10 [ 709.719655][T17211] ? alloc_pages_noprof+0xbe/0x190 [ 709.719691][T17211] ? skb_page_frag_refill+0x199/0x320 [ 709.719736][T17211] kcm_sendmsg+0xf00/0x2ad0 [ 709.719828][T17211] ? __pfx_kcm_sendmsg+0x10/0x10 [ 709.719864][T17211] ? aa_sock_msg_perm+0xf1/0x1d0 [ 709.719890][T17211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 709.719915][T17211] ? __pfx_kcm_sendmsg+0x10/0x10 [ 709.719946][T17211] __sock_sendmsg+0x219/0x270 [ 709.719986][T17211] ____sys_sendmsg+0x505/0x830 [ 709.720023][T17211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 709.720066][T17211] ? import_iovec+0x74/0xa0 [ 709.720102][T17211] ___sys_sendmsg+0x21f/0x2a0 [ 709.720153][T17211] ? __pfx____sys_sendmsg+0x10/0x10 [ 709.720215][T17211] ? __fget_files+0x2a/0x420 [ 709.720255][T17211] ? __fget_files+0x2a/0x420 [ 709.720278][T17211] ? __fget_files+0x3a0/0x420 [ 709.720315][T17211] __x64_sys_sendmsg+0x19b/0x260 [ 709.720350][T17211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 709.720411][T17211] ? __pfx_ksys_write+0x10/0x10 [ 709.720438][T17211] ? rcu_is_watching+0x15/0xb0 [ 709.720469][T17211] ? do_syscall_64+0xbe/0x3b0 [ 709.720500][T17211] do_syscall_64+0xfa/0x3b0 [ 709.720522][T17211] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.720546][T17211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.720567][T17211] ? clear_bhb_loop+0x60/0xb0 [ 709.720595][T17211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.720616][T17211] RIP: 0033:0x7fce5ef8eba9 [ 709.720636][T17211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.720655][T17211] RSP: 002b:00007fce5feb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.720678][T17211] RAX: ffffffffffffffda RBX: 00007fce5f1d5fa0 RCX: 00007fce5ef8eba9 [ 709.720695][T17211] RDX: 0000000000000004 RSI: 0000200000002080 RDI: 0000000000000005 [ 709.720709][T17211] RBP: 00007fce5feb3090 R08: 0000000000000000 R09: 0000000000000000 [ 709.720724][T17211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 709.720737][T17211] R13: 00007fce5f1d6038 R14: 00007fce5f1d5fa0 R15: 00007ffefbaa0798 [ 709.720777][T17211] [ 710.081100][T17217] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3173'. [ 710.405372][T17230] mac80211_hwsim hwsim38 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 710.624568][T17236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3181'. [ 710.735870][T17240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3183'. [ 710.794453][T17242] sctp: [Deprecated]: syz.0.3184 (pid 17242) Use of struct sctp_assoc_value in delayed_ack socket option. [ 710.794453][T17242] Use struct sctp_sack_info instead [ 711.148959][T17250] ªªªªªª: renamed from vlan0 [ 711.305224][T17238] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 711.578605][T17256] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3187'. [ 712.234440][T17273] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3195'. [ 712.340798][T17280] netlink: 'syz.0.3198': attribute type 11 has an invalid length. [ 712.385462][T17280] netlink: 'syz.0.3198': attribute type 11 has an invalid length. [ 712.837609][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'. [ 712.905875][T17296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'. [ 713.432677][T17302] netlink: 763 bytes leftover after parsing attributes in process `syz.8.3206'. [ 714.042754][T17326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3213'. [ 714.816199][T17334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3216'. [ 714.879002][T17336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3215'. [ 715.706391][T17370] __nla_validate_parse: 2 callbacks suppressed [ 715.706416][T17370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3227'. [ 717.004819][T17387] netlink: 'syz.3.3234': attribute type 4 has an invalid length. [ 717.041218][T17387] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3234'. [ 717.493742][T17407] FAULT_INJECTION: forcing a failure. [ 717.493742][T17407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.514129][T17407] CPU: 0 UID: 0 PID: 17407 Comm: syz.1.3244 Not tainted syzkaller #0 PREEMPT(full) [ 717.514159][T17407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 717.514173][T17407] Call Trace: [ 717.514182][T17407] [ 717.514192][T17407] dump_stack_lvl+0x189/0x250 [ 717.514223][T17407] ? __pfx____ratelimit+0x10/0x10 [ 717.514247][T17407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.514273][T17407] ? __pfx__printk+0x10/0x10 [ 717.514317][T17407] should_fail_ex+0x414/0x560 [ 717.514355][T17407] _copy_from_user+0x2d/0xb0 [ 717.514384][T17407] get_user_ifreq+0x6c/0x180 [ 717.514431][T17407] sock_ioctl+0x6dd/0x790 [ 717.514466][T17407] ? __pfx_sock_ioctl+0x10/0x10 [ 717.514501][T17407] ? __fget_files+0x3a0/0x420 [ 717.514524][T17407] ? __fget_files+0x2a/0x420 [ 717.514548][T17407] ? bpf_lsm_file_ioctl+0x9/0x20 [ 717.514576][T17407] ? __pfx_sock_ioctl+0x10/0x10 [ 717.514608][T17407] __se_sys_ioctl+0xfc/0x170 [ 717.514639][T17407] do_syscall_64+0xfa/0x3b0 [ 717.514662][T17407] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.514685][T17407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.514707][T17407] ? clear_bhb_loop+0x60/0xb0 [ 717.514732][T17407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.514754][T17407] RIP: 0033:0x7fcdc2b8eba9 [ 717.514774][T17407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.514793][T17407] RSP: 002b:00007fcdc39ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.514816][T17407] RAX: ffffffffffffffda RBX: 00007fcdc2dd5fa0 RCX: 00007fcdc2b8eba9 [ 717.514832][T17407] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 717.514847][T17407] RBP: 00007fcdc39ae090 R08: 0000000000000000 R09: 0000000000000000 [ 717.514861][T17407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.514874][T17407] R13: 00007fcdc2dd6038 R14: 00007fcdc2dd5fa0 R15: 00007ffd31231d78 [ 717.514909][T17407] [ 717.536194][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3242'. [ 718.008868][T17425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3250'. [ 718.311918][T17434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3252'. [ 719.114712][T17444] : entered promiscuous mode [ 719.126404][T17450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3256'. [ 719.144369][T17444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.515225][T17468] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3264'. [ 720.356723][T17491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3270'. [ 720.925654][T17511] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3279'. [ 720.987235][T17508] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 720.994172][T17508] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 721.208657][T17512] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3278'. [ 721.775310][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3284'. [ 721.842856][T17529] netlink: 'syz.0.3282': attribute type 4 has an invalid length. [ 721.867582][T17529] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3282'. [ 723.076247][T17559] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3295'. [ 723.543763][T17567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3297'. [ 725.271893][T17612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3313'. [ 725.346695][T17614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3312'. [ 726.471898][T17654] netlink: 88 bytes leftover after parsing attributes in process `syz.8.3327'. [ 727.070837][T17672] syzkaller0: entered promiscuous mode [ 727.112485][T17672] syzkaller0: entered allmulticast mode [ 728.844145][ T5873] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 728.860724][ T5873] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 728.878345][ T5873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 728.895687][ T5873] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 728.903710][ T5873] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 729.319616][T17712] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3346'. [ 730.192863][T17679] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3336'. [ 730.202257][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3341'. [ 730.211870][T17695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3341'. [ 730.331809][T17712] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3346'. [ 730.987550][ T5873] Bluetooth: hci0: command tx timeout [ 731.187724][T17738] netdevsim netdevsim1 ªªªªªª: renamed from netdevsim0 (while UP) [ 731.295026][T17703] chnl_net:caif_netlink_parms(): no params data found [ 731.542641][T17748] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3352'. [ 732.103821][T17703] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.138691][T17703] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.191047][T17703] bridge_slave_0: entered allmulticast mode [ 732.227525][T17703] bridge_slave_0: entered promiscuous mode [ 732.268786][T17703] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.316649][T17703] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.357712][T17703] bridge_slave_1: entered allmulticast mode [ 732.365580][T17703] bridge_slave_1: entered promiscuous mode [ 732.574602][T17703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.609054][T17703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.075337][ T5873] Bluetooth: hci0: command tx timeout [ 733.456906][T17772] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3360'. [ 733.658565][T17772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3360'. [ 733.682793][T17703] team0: Port device team_slave_0 added [ 733.703790][T17703] team0: Port device team_slave_1 added [ 733.816753][T17703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.826252][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.861738][T17703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.874950][T17781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3362'. [ 733.882720][T17703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.939313][T17703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 733.996616][T17703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.165862][T17703] hsr_slave_0: entered promiscuous mode [ 734.173261][T17703] hsr_slave_1: entered promiscuous mode [ 734.365194][T17795] FAULT_INJECTION: forcing a failure. [ 734.365194][T17795] name failslab, interval 1, probability 0, space 0, times 0 [ 734.370966][T17797] netlink: 'syz.4.3368': attribute type 4 has an invalid length. [ 734.397885][T17795] CPU: 0 UID: 0 PID: 17795 Comm: syz.1.3370 Not tainted syzkaller #0 PREEMPT(full) [ 734.397918][T17795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 734.397934][T17795] Call Trace: [ 734.397956][T17795] [ 734.397966][T17795] dump_stack_lvl+0x189/0x250 [ 734.397999][T17795] ? __pfx____ratelimit+0x10/0x10 [ 734.398036][T17795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.398062][T17795] ? __pfx__printk+0x10/0x10 [ 734.398107][T17795] should_fail_ex+0x414/0x560 [ 734.398152][T17795] should_failslab+0xa8/0x100 [ 734.398186][T17795] kmem_cache_alloc_noprof+0x73/0x3c0 [ 734.398215][T17795] ? skb_clone+0x212/0x3a0 [ 734.398249][T17795] skb_clone+0x212/0x3a0 [ 734.398282][T17795] __netlink_deliver_tap+0x404/0x850 [ 734.398322][T17795] ? netlink_deliver_tap+0x2e/0x1b0 [ 734.398347][T17795] netlink_deliver_tap+0x19c/0x1b0 [ 734.398372][T17795] netlink_unicast+0x7fa/0x9e0 [ 734.398402][T17795] ? __pfx_netlink_unicast+0x10/0x10 [ 734.398424][T17795] ? netlink_sendmsg+0x6a2/0xb30 [ 734.398455][T17795] netlink_sendmsg+0x805/0xb30 [ 734.398489][T17795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.398518][T17795] ? aa_sock_msg_perm+0xf1/0x1d0 [ 734.398542][T17795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 734.398565][T17795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 734.398590][T17795] __sock_sendmsg+0x219/0x270 [ 734.398626][T17795] ____sys_sendmsg+0x505/0x830 [ 734.398669][T17795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 734.398707][T17795] ? import_iovec+0x74/0xa0 [ 734.398740][T17795] ___sys_sendmsg+0x21f/0x2a0 [ 734.398788][T17795] ? __pfx____sys_sendmsg+0x10/0x10 [ 734.398843][T17795] ? __fget_files+0x2a/0x420 [ 734.398878][T17795] ? __fget_files+0x2a/0x420 [ 734.398897][T17795] ? __fget_files+0x3a0/0x420 [ 734.398931][T17795] __x64_sys_sendmsg+0x19b/0x260 [ 734.398963][T17795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 734.399023][T17795] do_syscall_64+0xfa/0x3b0 [ 734.399050][T17795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.399071][T17795] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 734.399094][T17795] ? clear_bhb_loop+0x60/0xb0 [ 734.399122][T17795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.399149][T17795] RIP: 0033:0x7fcdc2b8eba9 [ 734.399168][T17795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 734.399188][T17795] RSP: 002b:00007fcdc39ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 734.399231][T17795] RAX: ffffffffffffffda RBX: 00007fcdc2dd5fa0 RCX: 00007fcdc2b8eba9 [ 734.399248][T17795] RDX: 0000000004000000 RSI: 0000200000000440 RDI: 0000000000000008 [ 734.399263][T17795] RBP: 00007fcdc39ae090 R08: 0000000000000000 R09: 0000000000000000 [ 734.399279][T17795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.399292][T17795] R13: 00007fcdc2dd6038 R14: 00007fcdc2dd5fa0 R15: 00007ffd31231d78 [ 734.399331][T17795] [ 734.406963][T17797] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3368'. [ 735.030799][T17703] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.147442][ T5873] Bluetooth: hci0: command tx timeout [ 735.254674][T17703] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.415168][T17703] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.610909][T17703] netdevsim netdevsim8 netdevsim0 (unregistering): left allmulticast mode [ 735.622190][T17815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3377'. [ 735.636906][T17703] netdevsim netdevsim8 netdevsim0 (unregistering): left promiscuous mode [ 735.660293][T17703] bridge0: port 3(netdevsim0) entered disabled state [ 735.689110][T17703] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.861001][T17826] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3380'. [ 736.937494][ T13] bridge_slave_1: left allmulticast mode [ 736.943225][ T13] bridge_slave_1: left promiscuous mode [ 736.977889][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.041567][ T13] bridge_slave_0: left allmulticast mode [ 737.059152][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3388'. [ 737.069365][ T13] bridge_slave_0: left promiscuous mode [ 737.075133][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.118238][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3388'. [ 737.169482][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3388'. [ 737.660593][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.718001][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.753361][T17852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 737.762482][ T13] bond0 (unregistering): Released all slaves [ 737.770161][T17852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 737.780536][T17852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 737.785071][T17855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 737.797895][T17852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 737.800752][T17855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 737.814906][T17852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 737.823984][T17855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 737.824136][T17852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 737.833421][T17855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 737.876338][T17857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 737.898635][T17857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 737.909119][T17857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 737.922524][T17857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 737.931186][T17857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 737.994249][ T13] hsr_slave_0: left promiscuous mode [ 738.009425][ T13] hsr_slave_1: left promiscuous mode [ 738.016338][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 738.032066][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.156391][T17863] netlink: 'syz.3.3393': attribute type 2 has an invalid length. [ 738.465389][ T13] team0 (unregistering): Port device team_slave_1 removed [ 738.520941][ T13] team0 (unregistering): Port device team_slave_0 removed [ 739.310811][T17888] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3403'. [ 739.948334][T17857] Bluetooth: hci2: command tx timeout [ 739.954941][T17857] Bluetooth: hci0: command tx timeout [ 740.030018][T17857] Bluetooth: hci3: command tx timeout [ 740.596816][T17850] chnl_net:caif_netlink_parms(): no params data found [ 740.634042][T17900] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3406'. [ 741.075005][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3407'. [ 741.244100][T17856] chnl_net:caif_netlink_parms(): no params data found [ 741.266584][T17851] chnl_net:caif_netlink_parms(): no params data found [ 741.381859][T17850] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.392217][T17850] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.400783][T17850] bridge_slave_0: entered allmulticast mode [ 741.412433][T17850] bridge_slave_0: entered promiscuous mode [ 741.422276][T17850] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.438585][T17850] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.446266][T17850] bridge_slave_1: entered allmulticast mode [ 741.462293][T17850] bridge_slave_1: entered promiscuous mode [ 741.681277][T17850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.717784][T17856] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.725189][T17856] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.734200][T17856] bridge_slave_0: entered allmulticast mode [ 741.742648][T17856] bridge_slave_0: entered promiscuous mode [ 741.754461][T17850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.801082][T17856] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.808658][T17856] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.815944][T17856] bridge_slave_1: entered allmulticast mode [ 741.824486][T17856] bridge_slave_1: entered promiscuous mode [ 742.027636][T17857] Bluetooth: hci0: command tx timeout [ 742.037861][T17857] Bluetooth: hci2: command tx timeout [ 742.108242][T17857] Bluetooth: hci3: command tx timeout [ 742.211520][T17850] team0: Port device team_slave_0 added [ 742.222280][T17851] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.231442][T17851] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.240545][T17851] bridge_slave_0: entered allmulticast mode [ 742.249490][T17851] bridge_slave_0: entered promiscuous mode [ 742.302557][T17856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.316374][T17850] team0: Port device team_slave_1 added [ 742.359346][T17851] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.366510][T17851] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.374900][T17851] bridge_slave_1: entered allmulticast mode [ 742.382662][T17851] bridge_slave_1: entered promiscuous mode [ 742.421349][T17856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.598887][T17935] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3413'. [ 742.614778][T17851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.666822][T17850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.675144][T17850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.704072][T17850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.724086][T17850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.731275][T17850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.758392][T17850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.772877][T17851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.784480][T17856] team0: Port device team_slave_0 added [ 742.849710][T17856] team0: Port device team_slave_1 added [ 742.942446][T17850] hsr_slave_0: entered promiscuous mode [ 742.952714][T17850] hsr_slave_1: entered promiscuous mode [ 742.962119][T17851] team0: Port device team_slave_0 added [ 742.972814][T17851] team0: Port device team_slave_1 added [ 742.980096][T17856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.987075][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.014040][T17856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.048270][T17856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.055318][T17856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.082847][T17856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.165894][T17851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.173658][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.199676][T17851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.212855][T17851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.220425][T17851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.246706][T17851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.514709][T17851] hsr_slave_0: entered promiscuous mode [ 743.536847][T17851] hsr_slave_1: entered promiscuous mode [ 743.546586][T17851] debugfs: 'hsr0' already exists in 'hsr' [ 743.572270][T17851] Cannot create hsr debugfs directory [ 743.602955][T17856] hsr_slave_0: entered promiscuous mode [ 743.610055][T17856] hsr_slave_1: entered promiscuous mode [ 743.616501][T17856] debugfs: 'hsr0' already exists in 'hsr' [ 743.624311][T17856] Cannot create hsr debugfs directory [ 744.117999][T17857] Bluetooth: hci2: command tx timeout [ 744.118056][T17852] Bluetooth: hci0: command tx timeout [ 744.188677][T17852] Bluetooth: hci3: command tx timeout [ 745.274676][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3426'. [ 745.285361][T17971] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3426'. [ 745.394303][T17974] netlink: 'syz.3.3427': attribute type 1 has an invalid length. [ 745.925253][T17989] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3433'. [ 746.081725][T17856] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 746.120733][T17988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3434'. [ 746.130126][T17988] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3434'. [ 746.142595][T17856] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 746.162385][T17856] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 746.187493][T17852] Bluetooth: hci0: command tx timeout [ 746.189605][T17856] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 746.193387][T17852] Bluetooth: hci2: command tx timeout [ 746.268035][T17852] Bluetooth: hci3: command tx timeout [ 746.472372][T17850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 746.498804][T17850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 746.527924][T17850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 746.542863][T17850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 746.904372][T18021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3443'. [ 746.913834][T18021] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3443'. [ 747.009362][T17856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.081156][ T30] audit: type=1107 audit(1757685466.537:8): pid=18024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 747.116928][T18025] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3444'. [ 747.134140][T17856] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.178103][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.185307][ T7725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.234206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.241471][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 747.335641][T17851] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 747.361258][T17850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.372272][T17851] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 747.396055][T17851] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 747.410590][T17851] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 747.563111][T17850] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.668236][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 747.675485][ T7725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 747.715167][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.722391][ T7725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.050667][T17851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.090247][T18048] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3447'. [ 748.117372][T18048] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3447'. [ 748.149945][T17851] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.199306][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.206558][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.272886][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.280137][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 748.422435][T17856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 748.475790][T17851] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 748.956067][T17850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.003943][T18074] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3453'. [ 749.065659][T18074] netlink: 'syz.3.3453': attribute type 40 has an invalid length. [ 749.764747][T17851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 750.138143][T18097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3455'. [ 750.225737][T17856] veth0_vlan: entered promiscuous mode [ 750.258797][T17856] veth1_vlan: entered promiscuous mode [ 750.361339][T17856] veth0_macvtap: entered promiscuous mode [ 750.386816][T17856] veth1_macvtap: entered promiscuous mode [ 750.494959][T17856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.514948][T17856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 750.570007][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.611156][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.681323][T17850] veth0_vlan: entered promiscuous mode [ 750.692384][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.701812][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.715642][T17851] veth0_vlan: entered promiscuous mode [ 750.770692][T17851] veth1_vlan: entered promiscuous mode [ 750.782898][T17850] veth1_vlan: entered promiscuous mode [ 750.899936][ T7725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.913031][ T7725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.983569][T17851] veth0_macvtap: entered promiscuous mode [ 750.996946][T17850] veth0_macvtap: entered promiscuous mode [ 751.009347][ T7725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.018613][ T7725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.021512][T17851] veth1_macvtap: entered promiscuous mode [ 751.050777][T17850] veth1_macvtap: entered promiscuous mode [ 751.084843][T17851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.128452][T17850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 751.162921][T17851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.216793][T17850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.242433][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.252012][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.277600][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.300268][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.315720][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.382426][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.407694][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.416459][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.658053][ T7725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.697252][ T7725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.732761][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.762973][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 751.901402][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 751.943012][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.046587][ T5971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.074285][ T5971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 752.204130][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3465'. [ 752.586873][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.594553][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.190937][T18196] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3480'. [ 757.192520][T18212] netlink: 763 bytes leftover after parsing attributes in process `syz.6.3485'. [ 757.326593][T18228] proc: Bad value for 'gid' [ 757.371446][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3492'. [ 758.169185][T18246] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3497'. [ 758.184306][T18243] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3497'. [ 758.196723][T18246] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3497'. [ 758.513823][T18257] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3502'. [ 758.647532][T18262] xt_socket: unknown flags 0x40 [ 759.655119][T18302] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.3513'. [ 760.375072][T18316] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3519'. [ 760.394773][T18316] netlink: 4595 bytes leftover after parsing attributes in process `syz.6.3519'. [ 760.406729][T18316] openvswitch: netlink: IP tunnel dst address not specified [ 761.167655][T18341] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3529'. [ 761.199347][T18338] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.3529'. [ 762.606611][T18379] netlink: 'syz.3.3539': attribute type 16 has an invalid length. [ 762.617871][T18379] netlink: 'syz.3.3539': attribute type 4 has an invalid length. [ 762.626620][T18379] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3539'. [ 764.427358][T18392] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3546'. [ 766.225151][T18416] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3551'. [ 767.085871][T17857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 767.104812][T17857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 767.125674][T17857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 767.135283][T17857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 767.147479][T17857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 767.391478][ T1094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.613750][T18451] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 767.621116][T18451] IPv6: NLM_F_CREATE should be set when creating new route [ 767.628436][T18451] IPv6: NLM_F_CREATE should be set when creating new route [ 767.635681][T18451] IPv6: NLM_F_CREATE should be set when creating new route [ 767.656582][ T1094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.796060][T18449] netlink: 'syz.5.3563': attribute type 39 has an invalid length. [ 767.828823][ T1094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.918516][T18449] veth0_macvtap: left promiscuous mode [ 767.987084][T18462] netlink: 'syz.9.3567': attribute type 4 has an invalid length. [ 768.221791][ T1094] netdevsim netdevsim1 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.803213][ T1094] bridge0: port 4(team0) entered disabled state [ 768.830739][ T1094] dummy0: left allmulticast mode [ 768.841229][ T1094] bridge0: port 3(dummy0) entered disabled state [ 768.867112][ T1094] bridge_slave_1: left allmulticast mode [ 768.882687][ T1094] bridge_slave_1: left promiscuous mode [ 768.905181][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.934794][ T1094] bridge_slave_0: left allmulticast mode [ 768.964660][ T1094] bridge_slave_0: left promiscuous mode [ 768.998187][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.227635][T17857] Bluetooth: hci1: command tx timeout [ 770.113370][ T1094] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.134418][ T1094] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.148564][ T1094] .` (unregistering): Released all slaves [ 770.171896][T18439] chnl_net:caif_netlink_parms(): no params data found [ 770.605548][T18439] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.619133][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.637597][T18439] bridge_slave_0: entered allmulticast mode [ 770.657418][T18439] bridge_slave_0: entered promiscuous mode [ 770.682123][T18508] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3581'. [ 770.703553][T18439] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.723806][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.733319][T18439] bridge_slave_1: entered allmulticast mode [ 770.750513][T18439] bridge_slave_1: entered promiscuous mode [ 771.128268][T18439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.160306][T18439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.318565][T17857] Bluetooth: hci1: command tx timeout [ 771.363374][T18439] team0: Port device team_slave_0 added [ 771.376828][T18439] team0: Port device team_slave_1 added [ 771.524469][T18439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.535032][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.564519][T18439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.593381][T18439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.603055][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 771.639966][T18439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.665873][ T1094] hsr_slave_0: left promiscuous mode [ 771.676189][ T1094] hsr_slave_1: left promiscuous mode [ 771.689007][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.705856][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.726202][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.742678][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.601552][ T1094] team_slave_1 (unregistering): left promiscuous mode [ 772.614781][ T1094] team_slave_1 (unregistering): left allmulticast mode [ 772.629938][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 772.639222][T18548] netlink: 'syz.6.3593': attribute type 10 has an invalid length. [ 772.697900][T18549] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3594'. [ 772.764075][ T1094] team_slave_0 (unregistering): left promiscuous mode [ 772.783488][ T1094] team_slave_0 (unregistering): left allmulticast mode [ 772.806723][T18556] netlink: 124 bytes leftover after parsing attributes in process `syz.9.3596'. [ 772.833313][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 773.323753][ T981] infiniband syz1: ib_query_port failed (-19) [ 773.340451][T18548] geneve0: entered promiscuous mode [ 773.355720][T18548] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 773.373700][T18549] hsr_slave_0: left promiscuous mode [ 773.387603][T17857] Bluetooth: hci1: command tx timeout [ 773.407242][T18549] hsr_slave_1: left promiscuous mode [ 773.445802][T18556] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3596'. [ 773.789329][T17857] Bluetooth: hci2: unexpected event 0x30 length: 15 > 3 [ 773.972380][T18439] hsr_slave_0: entered promiscuous mode [ 774.016194][T18439] hsr_slave_1: entered promiscuous mode [ 774.362807][T18566] FAULT_INJECTION: forcing a failure. [ 774.362807][T18566] name failslab, interval 1, probability 0, space 0, times 0 [ 774.377251][T18566] CPU: 1 UID: 0 PID: 18566 Comm: syz.9.3598 Not tainted syzkaller #0 PREEMPT(full) [ 774.377292][T18566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.377307][T18566] Call Trace: [ 774.377317][T18566] [ 774.377327][T18566] dump_stack_lvl+0x189/0x250 [ 774.377361][T18566] ? __pfx____ratelimit+0x10/0x10 [ 774.377386][T18566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.377415][T18566] ? __pfx__printk+0x10/0x10 [ 774.377455][T18566] ? __pfx___might_resched+0x10/0x10 [ 774.377483][T18566] should_fail_ex+0x414/0x560 [ 774.377524][T18566] should_failslab+0xa8/0x100 [ 774.377561][T18566] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 774.377595][T18566] ? __alloc_skb+0x112/0x2d0 [ 774.377627][T18566] __alloc_skb+0x112/0x2d0 [ 774.377669][T18566] pfkey_sendmsg+0xca5/0x1090 [ 774.377714][T18566] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 774.377766][T18566] ? tomoyo_socket_sendmsg+0x16/0x30 [ 774.377797][T18566] ? aa_sock_msg_perm+0xf1/0x1d0 [ 774.377823][T18566] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 774.377848][T18566] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 774.377876][T18566] __sock_sendmsg+0x219/0x270 [ 774.377933][T18566] ____sys_sendmsg+0x505/0x830 [ 774.377983][T18566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.378022][T18566] ? import_iovec+0x74/0xa0 [ 774.378057][T18566] ___sys_sendmsg+0x21f/0x2a0 [ 774.378089][T18566] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.378122][T18566] ? irqentry_exit+0x74/0x90 [ 774.378145][T18566] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.378199][T18566] ? __fget_files+0x2a/0x420 [ 774.378219][T18566] ? __fget_files+0x3a0/0x420 [ 774.378252][T18566] __x64_sys_sendmsg+0x19b/0x260 [ 774.378285][T18566] ? perf_trace_run_bpf_submit+0x100/0x170 [ 774.378311][T18566] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 774.378351][T18566] ? __pfx_ksys_write+0x10/0x10 [ 774.378388][T18566] ? do_syscall_64+0xbe/0x3b0 [ 774.378418][T18566] do_syscall_64+0xfa/0x3b0 [ 774.378444][T18566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.378464][T18566] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 774.378486][T18566] ? clear_bhb_loop+0x60/0xb0 [ 774.378512][T18566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.378533][T18566] RIP: 0033:0x7f8df078eba9 [ 774.378552][T18566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.378571][T18566] RSP: 002b:00007f8df1628038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 774.378593][T18566] RAX: ffffffffffffffda RBX: 00007f8df09d5fa0 RCX: 00007f8df078eba9 [ 774.378609][T18566] RDX: 00000000200c405a RSI: 00002000000001c0 RDI: 0000000000000003 [ 774.378624][T18566] RBP: 00007f8df1628090 R08: 0000000000000000 R09: 0000000000000000 [ 774.378634][T18566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.378647][T18566] R13: 00007f8df09d6038 R14: 00007f8df09d5fa0 R15: 00007fff6f2a75e8 [ 774.378683][T18566] [ 775.467608][T17857] Bluetooth: hci1: command tx timeout [ 775.472197][T18591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3608'. [ 775.531152][T18592] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3607'. [ 775.574806][T18592] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3607'. [ 775.673074][T18439] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 775.740197][T18439] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 775.889967][T18439] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 775.913334][T18439] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 776.420085][T18439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.496036][T18439] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.543223][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.550504][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.583984][ T7724] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.591286][ T7724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.136789][T18439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.212828][T18439] veth0_vlan: entered promiscuous mode [ 777.243401][T18439] veth1_vlan: entered promiscuous mode [ 777.313668][T18439] veth0_macvtap: entered promiscuous mode [ 777.325260][T18439] veth1_macvtap: entered promiscuous mode [ 777.350872][T18439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.370983][T18439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.388701][ T7725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.405281][ T7725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.151070][ T7725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.187287][ T7725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 779.375569][T18626] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3617'. [ 779.534569][T18629] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3617'. [ 779.575155][T18626] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3617'. [ 779.644692][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3617'. [ 779.686978][T18632] netlink: 60 bytes leftover after parsing attributes in process `syz.9.3617'. [ 779.723146][ T7725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.737251][ T7725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.823020][ T7724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.872786][ T7724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 780.625478][T18664] netlink: 'syz.6.3626': attribute type 1 has an invalid length. [ 780.716282][T18662] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3625'. [ 780.752978][T18662] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3625'. [ 780.831486][T18668] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3627'. [ 781.614267][T18684] FAULT_INJECTION: forcing a failure. [ 781.614267][T18684] name failslab, interval 1, probability 0, space 0, times 0 [ 781.657381][T18684] CPU: 0 UID: 0 PID: 18684 Comm: syz.5.3631 Not tainted syzkaller #0 PREEMPT(full) [ 781.657414][T18684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 781.657428][T18684] Call Trace: [ 781.657438][T18684] [ 781.657449][T18684] dump_stack_lvl+0x189/0x250 [ 781.657482][T18684] ? __pfx____ratelimit+0x10/0x10 [ 781.657508][T18684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 781.657537][T18684] ? __pfx__printk+0x10/0x10 [ 781.657598][T18684] should_fail_ex+0x414/0x560 [ 781.657644][T18684] should_failslab+0xa8/0x100 [ 781.657682][T18684] kmem_cache_alloc_noprof+0x73/0x3c0 [ 781.657715][T18684] ? skb_clone+0x212/0x3a0 [ 781.657754][T18684] skb_clone+0x212/0x3a0 [ 781.657791][T18684] __netlink_deliver_tap+0x404/0x850 [ 781.657873][T18684] ? netlink_deliver_tap+0x2e/0x1b0 [ 781.657901][T18684] netlink_deliver_tap+0x19c/0x1b0 [ 781.657931][T18684] netlink_unicast+0x7fa/0x9e0 [ 781.657967][T18684] ? __pfx_netlink_unicast+0x10/0x10 [ 781.657993][T18684] ? netlink_sendmsg+0x642/0xb30 [ 781.658016][T18684] ? skb_put+0x11b/0x210 [ 781.658047][T18684] netlink_sendmsg+0x805/0xb30 [ 781.658087][T18684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.658118][T18684] ? aa_sock_msg_perm+0xf1/0x1d0 [ 781.658145][T18684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 781.658171][T18684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 781.658198][T18684] __sock_sendmsg+0x219/0x270 [ 781.658266][T18684] ____sys_sendmsg+0x505/0x830 [ 781.658306][T18684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 781.658350][T18684] ? import_iovec+0x74/0xa0 [ 781.658388][T18684] ___sys_sendmsg+0x21f/0x2a0 [ 781.658422][T18684] ? __pfx____sys_sendmsg+0x10/0x10 [ 781.658484][T18684] ? __fget_files+0x2a/0x420 [ 781.658525][T18684] ? __fget_files+0x2a/0x420 [ 781.658545][T18684] ? __fget_files+0x3a0/0x420 [ 781.658588][T18684] __x64_sys_sendmsg+0x19b/0x260 [ 781.658624][T18684] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 781.658687][T18684] ? do_syscall_64+0xbe/0x3b0 [ 781.658720][T18684] do_syscall_64+0xfa/0x3b0 [ 781.658749][T18684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.658770][T18684] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 781.658793][T18684] ? clear_bhb_loop+0x60/0xb0 [ 781.658823][T18684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.658846][T18684] RIP: 0033:0x7fea4cd8eba9 [ 781.658873][T18684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 781.658893][T18684] RSP: 002b:00007fea4dbb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.658917][T18684] RAX: ffffffffffffffda RBX: 00007fea4cfd5fa0 RCX: 00007fea4cd8eba9 [ 781.658935][T18684] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 781.658951][T18684] RBP: 00007fea4dbb3090 R08: 0000000000000000 R09: 0000000000000000 [ 781.658966][T18684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.658980][T18684] R13: 00007fea4cfd6038 R14: 00007fea4cfd5fa0 R15: 00007fffa9c44488 [ 781.659021][T18684] [ 782.308776][T18697] FAULT_INJECTION: forcing a failure. [ 782.308776][T18697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.328543][T18697] CPU: 1 UID: 0 PID: 18697 Comm: syz.5.3635 Not tainted syzkaller #0 PREEMPT(full) [ 782.328575][T18697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 782.328590][T18697] Call Trace: [ 782.328600][T18697] [ 782.328610][T18697] dump_stack_lvl+0x189/0x250 [ 782.328643][T18697] ? __pfx____ratelimit+0x10/0x10 [ 782.328669][T18697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.328697][T18697] ? __pfx__printk+0x10/0x10 [ 782.328728][T18697] ? __might_fault+0xb0/0x130 [ 782.328775][T18697] should_fail_ex+0x414/0x560 [ 782.328817][T18697] _copy_from_user+0x2d/0xb0 [ 782.328849][T18697] ___sys_sendmsg+0x158/0x2a0 [ 782.328883][T18697] ? __pfx____sys_sendmsg+0x10/0x10 [ 782.328910][T18697] ? perf_trace_preemptirq_template+0xa3/0x340 [ 782.328987][T18697] ? __fget_files+0x2a/0x420 [ 782.329007][T18697] ? __fget_files+0x3a0/0x420 [ 782.329041][T18697] __x64_sys_sendmsg+0x19b/0x260 [ 782.329073][T18697] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 782.329116][T18697] ? rcu_is_watching+0x15/0xb0 [ 782.329146][T18697] ? do_syscall_64+0xbe/0x3b0 [ 782.329177][T18697] do_syscall_64+0xfa/0x3b0 [ 782.329201][T18697] ? lockdep_hardirqs_on+0x9c/0x150 [ 782.329225][T18697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.329248][T18697] ? clear_bhb_loop+0x60/0xb0 [ 782.329277][T18697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.329299][T18697] RIP: 0033:0x7fea4cd8eba9 [ 782.329319][T18697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.329340][T18697] RSP: 002b:00007fea4dbb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 782.329364][T18697] RAX: ffffffffffffffda RBX: 00007fea4cfd5fa0 RCX: 00007fea4cd8eba9 [ 782.329380][T18697] RDX: 000000000d000000 RSI: 0000200000007940 RDI: 0000000000000004 [ 782.329395][T18697] RBP: 00007fea4dbb3090 R08: 0000000000000000 R09: 0000000000000000 [ 782.329413][T18697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.329427][T18697] R13: 00007fea4cfd6038 R14: 00007fea4cfd5fa0 R15: 00007fffa9c44488 [ 782.329463][T18697] [ 782.455936][ C0] ================================================================== [ 782.550840][ C0] BUG: KASAN: slab-use-after-free in __xfrm_state_delete+0x666/0xca0 [ 782.558923][ C0] Write of size 8 at addr ffff88805aa22818 by task syz.5.3634/18694 [ 782.566914][ C0] [ 782.569276][ C0] CPU: 0 UID: 0 PID: 18694 Comm: syz.5.3634 Not tainted syzkaller #0 PREEMPT(full) [ 782.569298][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 782.569311][ C0] Call Trace: [ 782.569320][ C0] [ 782.569329][ C0] dump_stack_lvl+0x189/0x250 [ 782.569353][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 782.569376][ C0] ? rcu_is_watching+0x15/0xb0 [ 782.569393][ C0] ? __kasan_check_byte+0x12/0x40 [ 782.569420][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 782.569442][ C0] ? rcu_is_watching+0x15/0xb0 [ 782.569459][ C0] ? lock_release+0x4b/0x3e0 [ 782.569489][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 782.569513][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 782.569538][ C0] print_report+0xca/0x240 [ 782.569555][ C0] ? __xfrm_state_delete+0x666/0xca0 [ 782.569575][ C0] kasan_report+0x118/0x150 [ 782.569603][ C0] ? __xfrm_state_delete+0x666/0xca0 [ 782.569627][ C0] __xfrm_state_delete+0x666/0xca0 [ 782.569654][ C0] xfrm_timer_handler+0x18f/0xa00 [ 782.569680][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 782.569699][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 782.569717][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 782.569737][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 782.569753][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 782.569785][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 782.569806][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 782.569826][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 782.569854][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 782.569871][ C0] ? read_tsc+0x9/0x20 [ 782.569899][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 782.569921][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 782.569942][ C0] handle_softirqs+0x283/0x870 [ 782.569962][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 782.569982][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 782.570002][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 782.570027][ C0] __irq_exit_rcu+0xca/0x1f0 [ 782.570044][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 782.570067][ C0] irq_exit_rcu+0x9/0x30 [ 782.570082][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 782.570100][ C0] [ 782.570107][ C0] [ 782.570114][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 782.570134][ C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 782.570156][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 56 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 01 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 e5 5e [ 782.570172][ C0] RSP: 0018:ffffc90003387720 EFLAGS: 00000293 [ 782.570189][ C0] RAX: ffffffff81b4621b RBX: 1ffff110170e7f61 RCX: ffff888025a73c00 [ 782.570203][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 782.570215][ C0] RBP: ffffc900033878a0 R08: ffff88807edd9f87 R09: 1ffff1100fdbb3f0 [ 782.570229][ C0] R10: dffffc0000000000 R11: ffffed100fdbb3f1 R12: ffff8880b873fb08 [ 782.570243][ C0] R13: dffffc0000000000 R14: ffff8880b863b1c0 R15: 0000000000000001 [ 782.570266][ C0] ? smp_call_function_many_cond+0xd4b/0x12d0 [ 782.570292][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 782.570322][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 782.570341][ C0] ? free_pgd_range+0x144b/0x14c0 [ 782.570365][ C0] ? rcu_is_watching+0x15/0xb0 [ 782.570384][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 782.570408][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 782.570428][ C0] flush_tlb_mm_range+0x6b1/0x12d0 [ 782.570458][ C0] ? free_pgtables+0x8e0/0x9c0 [ 782.570477][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 782.570506][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 782.570525][ C0] tlb_flush_mmu+0x1a7/0x680 [ 782.570543][ C0] ? __pfx_down_write+0x10/0x10 [ 782.570571][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 782.570590][ C0] exit_mmap+0x44c/0xb50 [ 782.570615][ C0] ? uprobe_clear_state+0x20f/0x290 [ 782.570639][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 782.570663][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 782.570690][ C0] ? __pfx_exit_aio+0x10/0x10 [ 782.570722][ C0] ? uprobe_clear_state+0x274/0x290 [ 782.570746][ C0] __mmput+0x118/0x430 [ 782.570764][ C0] exit_mm+0x1da/0x2c0 [ 782.570790][ C0] ? __pfx_exit_mm+0x10/0x10 [ 782.570811][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 782.570829][ C0] ? rcu_is_watching+0x15/0xb0 [ 782.570849][ C0] do_exit+0x648/0x2300 [ 782.570872][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 782.570903][ C0] ? perf_trace_preemptirq_template+0xa3/0x340 [ 782.570929][ C0] ? __pfx_do_exit+0x10/0x10 [ 782.570952][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 782.570979][ C0] ? rcu_is_watching+0x15/0xb0 [ 782.571001][ C0] __x64_sys_exit+0x40/0x40 [ 782.571024][ C0] x64_sys_call+0x21da/0x2200 [ 782.571049][ C0] do_syscall_64+0xfa/0x3b0 [ 782.571069][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 782.571087][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.571105][ C0] ? clear_bhb_loop+0x60/0xb0 [ 782.571125][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.571143][ C0] RIP: 0033:0x7fea4cd8eba9 [ 782.571158][ C0] Code: Unable to access opcode bytes at 0x7fea4cd8eb7f. [ 782.571168][ C0] RSP: 002b:00007fea4dbb2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 782.571186][ C0] RAX: ffffffffffffffda RBX: 00007fea4cfd5fa0 RCX: 00007fea4cd8eba9 [ 782.571200][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 782.571211][ C0] RBP: 00007fea4ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 782.571223][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.571234][ C0] R13: 00007fea4cfd6038 R14: 00007fea4cfd5fa0 R15: 00007fffa9c44488 [ 782.571261][ C0] [ 782.571268][ C0] [ 783.115586][ C0] Allocated by task 44: [ 783.119752][ C0] kasan_save_track+0x3e/0x80 [ 783.124452][ C0] __kasan_kmalloc+0x93/0xb0 [ 783.129068][ C0] __kmalloc_noprof+0x27a/0x4f0 [ 783.133941][ C0] xfrm_hash_resize+0x89/0x1890 [ 783.138913][ C0] process_scheduled_works+0xae1/0x17b0 [ 783.144488][ C0] worker_thread+0x8a0/0xda0 [ 783.149090][ C0] kthread+0x70e/0x8a0 [ 783.153179][ C0] ret_from_fork+0x436/0x7d0 [ 783.157774][ C0] ret_from_fork_asm+0x1a/0x30 [ 783.162551][ C0] [ 783.164873][ C0] Freed by task 1094: [ 783.168848][ C0] kasan_save_track+0x3e/0x80 [ 783.173531][ C0] kasan_save_free_info+0x46/0x50 [ 783.178558][ C0] __kasan_slab_free+0x5b/0x80 [ 783.183330][ C0] kfree+0x18e/0x440 [ 783.187239][ C0] xfrm_state_fini+0x174/0x2f0 [ 783.192011][ C0] xfrm_net_exit+0x2d/0x70 [ 783.196433][ C0] ops_undo_list+0x49a/0x990 [ 783.201025][ C0] cleanup_net+0x4c5/0x800 [ 783.205444][ C0] process_scheduled_works+0xae1/0x17b0 [ 783.210991][ C0] worker_thread+0x8a0/0xda0 [ 783.215590][ C0] kthread+0x70e/0x8a0 [ 783.219685][ C0] ret_from_fork+0x436/0x7d0 [ 783.224281][ C0] ret_from_fork_asm+0x1a/0x30 [ 783.229057][ C0] [ 783.231377][ C0] The buggy address belongs to the object at ffff88805aa22800 [ 783.231377][ C0] which belongs to the cache kmalloc-128 of size 128 [ 783.245431][ C0] The buggy address is located 24 bytes inside of [ 783.245431][ C0] freed 128-byte region [ffff88805aa22800, ffff88805aa22880) [ 783.259173][ C0] [ 783.261515][ C0] The buggy address belongs to the physical page: [ 783.267938][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5aa22 [ 783.276700][ C0] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 783.284242][ C0] page_type: f5(slab) [ 783.288222][ C0] raw: 00fff00000000000 ffff88801a441a00 0000000000000000 dead000000000001 [ 783.296815][ C0] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 783.305411][ C0] page dumped because: kasan: bad access detected [ 783.311839][ C0] page_owner tracks the page as allocated [ 783.317560][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5865, tgid 5865 (syz-executor), ts 201625893260, free_ts 201598799828 [ 783.337031][ C0] post_alloc_hook+0x240/0x2a0 [ 783.341813][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 783.347363][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 783.353176][ C0] alloc_pages_mpol+0x232/0x4a0 [ 783.358033][ C0] allocate_slab+0x8a/0x370 [ 783.362538][ C0] ___slab_alloc+0xbeb/0x1420 [ 783.367216][ C0] __kmalloc_cache_noprof+0x296/0x3d0 [ 783.372702][ C0] kernfs_fop_open+0x7b5/0xca0 [ 783.377478][ C0] do_dentry_open+0x950/0x13f0 [ 783.382240][ C0] vfs_open+0x3b/0x340 [ 783.386317][ C0] path_openat+0x2ee5/0x3830 [ 783.390920][ C0] do_filp_open+0x1fa/0x410 [ 783.395450][ C0] do_sys_openat2+0x121/0x1c0 [ 783.400145][ C0] __x64_sys_openat+0x138/0x170 [ 783.405100][ C0] do_syscall_64+0xfa/0x3b0 [ 783.409612][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.415517][ C0] page last free pid 5864 tgid 5864 stack trace: [ 783.421849][ C0] __free_frozen_pages+0xbc4/0xd30 [ 783.426976][ C0] __tlb_remove_table+0x2d2/0x3b0 [ 783.432002][ C0] tlb_remove_table_rcu+0x85/0x100 [ 783.437112][ C0] rcu_core+0xcab/0x1770 [ 783.441375][ C0] handle_softirqs+0x283/0x870 [ 783.446137][ C0] __irq_exit_rcu+0xca/0x1f0 [ 783.450729][ C0] irq_exit_rcu+0x9/0x30 [ 783.454976][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 783.460629][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 783.466616][ C0] [ 783.468942][ C0] Memory state around the buggy address: [ 783.474573][ C0] ffff88805aa22700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 783.482637][ C0] ffff88805aa22780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 783.490699][ C0] >ffff88805aa22800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 783.498760][ C0] ^ [ 783.503619][ C0] ffff88805aa22880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 783.511695][ C0] ffff88805aa22900: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 783.519757][ C0] ================================================================== [ 783.527976][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 783.535196][ C0] CPU: 0 UID: 0 PID: 18694 Comm: syz.5.3634 Not tainted syzkaller #0 PREEMPT(full) [ 783.544595][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 783.554679][ C0] Call Trace: [ 783.557982][ C0] [ 783.560854][ C0] dump_stack_lvl+0x99/0x250 [ 783.565481][ C0] ? __asan_memcpy+0x40/0x70 [ 783.570093][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 783.575315][ C0] ? __pfx__printk+0x10/0x10 [ 783.579944][ C0] vpanic+0x281/0x750 [ 783.583940][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 783.589143][ C0] ? __pfx_vpanic+0x10/0x10 [ 783.593661][ C0] ? irqentry_exit+0x74/0x90 [ 783.598255][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.603468][ C0] panic+0xb9/0xc0 [ 783.607195][ C0] ? __pfx_panic+0x10/0x10 [ 783.611621][ C0] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 783.617528][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 783.623890][ C0] ? __xfrm_state_delete+0x666/0xca0 [ 783.629183][ C0] check_panic_on_warn+0x89/0xb0 [ 783.634136][ C0] ? __xfrm_state_delete+0x666/0xca0 [ 783.639427][ C0] end_report+0x78/0x160 [ 783.643686][ C0] kasan_report+0x129/0x150 [ 783.648202][ C0] ? __xfrm_state_delete+0x666/0xca0 [ 783.653498][ C0] __xfrm_state_delete+0x666/0xca0 [ 783.658626][ C0] xfrm_timer_handler+0x18f/0xa00 [ 783.663663][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 783.669211][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 783.675107][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 783.680312][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 783.686211][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 783.692560][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 783.698112][ C0] ? __pfx_xfrm_timer_handler+0x10/0x10 [ 783.703668][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 783.708897][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 783.714633][ C0] ? read_tsc+0x9/0x20 [ 783.718715][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 783.724529][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 783.729653][ C0] handle_softirqs+0x283/0x870 [ 783.734424][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 783.739193][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 783.744489][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 783.749704][ C0] __irq_exit_rcu+0xca/0x1f0 [ 783.754301][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 783.759506][ C0] irq_exit_rcu+0x9/0x30 [ 783.763748][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 783.769377][ C0] [ 783.772321][ C0] [ 783.775261][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 783.781245][ C0] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 783.787934][ C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 56 63 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 01 5f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 e5 5e [ 783.807547][ C0] RSP: 0018:ffffc90003387720 EFLAGS: 00000293 [ 783.813642][ C0] RAX: ffffffff81b4621b RBX: 1ffff110170e7f61 RCX: ffff888025a73c00 [ 783.821615][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 783.829591][ C0] RBP: ffffc900033878a0 R08: ffff88807edd9f87 R09: 1ffff1100fdbb3f0 [ 783.837577][ C0] R10: dffffc0000000000 R11: ffffed100fdbb3f1 R12: ffff8880b873fb08 [ 783.845551][ C0] R13: dffffc0000000000 R14: ffff8880b863b1c0 R15: 0000000000000001 [ 783.853549][ C0] ? smp_call_function_many_cond+0xd4b/0x12d0 [ 783.859632][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 783.864845][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 783.871177][ C0] ? free_pgd_range+0x144b/0x14c0 [ 783.876213][ C0] ? rcu_is_watching+0x15/0xb0 [ 783.880980][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 783.886186][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 783.891310][ C0] flush_tlb_mm_range+0x6b1/0x12d0 [ 783.896449][ C0] ? free_pgtables+0x8e0/0x9c0 [ 783.901222][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 783.906782][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 783.911899][ C0] tlb_flush_mmu+0x1a7/0x680 [ 783.916490][ C0] ? __pfx_down_write+0x10/0x10 [ 783.921354][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 783.925947][ C0] exit_mmap+0x44c/0xb50 [ 783.930199][ C0] ? uprobe_clear_state+0x20f/0x290 [ 783.935405][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 783.940180][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 783.945826][ C0] ? __pfx_exit_aio+0x10/0x10 [ 783.950548][ C0] ? uprobe_clear_state+0x274/0x290 [ 783.955754][ C0] __mmput+0x118/0x430 [ 783.959831][ C0] exit_mm+0x1da/0x2c0 [ 783.963904][ C0] ? __pfx_exit_mm+0x10/0x10 [ 783.968586][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 783.974058][ C0] ? rcu_is_watching+0x15/0xb0 [ 783.978826][ C0] do_exit+0x648/0x2300 [ 783.983000][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 783.988224][ C0] ? perf_trace_preemptirq_template+0xa3/0x340 [ 783.994407][ C0] ? __pfx_do_exit+0x10/0x10 [ 783.999023][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 784.005627][ C0] ? rcu_is_watching+0x15/0xb0 [ 784.010421][ C0] __x64_sys_exit+0x40/0x40 [ 784.014942][ C0] x64_sys_call+0x21da/0x2200 [ 784.019628][ C0] do_syscall_64+0xfa/0x3b0 [ 784.024138][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 784.029360][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.035434][ C0] ? clear_bhb_loop+0x60/0xb0 [ 784.040121][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.046022][ C0] RIP: 0033:0x7fea4cd8eba9 [ 784.050439][ C0] Code: Unable to access opcode bytes at 0x7fea4cd8eb7f. [ 784.057459][ C0] RSP: 002b:00007fea4dbb2fe8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 784.065879][ C0] RAX: ffffffffffffffda RBX: 00007fea4cfd5fa0 RCX: 00007fea4cd8eba9 [ 784.073859][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 784.081828][ C0] RBP: 00007fea4ce11e19 R08: 0000000000000000 R09: 0000000000000000 [ 784.089802][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 784.097782][ C0] R13: 00007fea4cfd6038 R14: 00007fea4cfd5fa0 R15: 00007fffa9c44488 [ 784.105955][ C0] [ 784.109336][ C0] Kernel Offset: disabled [ 784.113684][ C0] Rebooting in 86400 seconds..