last executing test programs: 27m0.810714317s ago: executing program 3 (id=1581): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x600}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9, 0x0, 0x1000000}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 27m0.562720929s ago: executing program 3 (id=1583): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x1, 0x1abe1019, 0x0, 0x0, 0x8, 0x7, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000006fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x3, 0x0, &(0x7f0000000140)="4313a5", &(0x7f0000000180), 0x0, 0x700}, 0x50) 27m0.331850646s ago: executing program 3 (id=1586): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x6}, 0x0, 0xc8, 0x80000000, 0x8, 0x0, 0x10001, 0xa, 0x0, 0x800}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, 0x0, 0x0}}, 0x10) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102037300fe08000e40000200875a65969ff57b00ff0200000000000000000001ffaaaaaa"], 0xfdef) (fail_nth: 14) 26m59.572096154s ago: executing program 3 (id=1588): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x4, &(0x7f0000000800)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000000840)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000880)=""/195, 0x0, 0x8c, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000980), 0x1f2, 0x10, &(0x7f00000009c0), 0xfffffe51}, 0x48) (fail_nth: 92) r1 = socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x50) recvmsg$kcm(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001f00)=""/117, 0x75}], 0x1}, 0x102) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x7, 0x3, &(0x7f00000004c0)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000500)='syzkaller\x00', 0x7}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000001f80), 0x4) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0c1}, 0x1) 26m59.026537534s ago: executing program 3 (id=1590): r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x16088, 0x0, 0x0, 0x0, 0x80000001, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x8000) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x8, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2162) setsockopt$sock_attach_bpf(r4, 0x84, 0xd, &(0x7f00000001c0)=r6, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) 26m56.254388316s ago: executing program 3 (id=1602): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20, 0x3ffffd, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x3, 0xa, 0xa, 0xfffffffffffffff0}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000800) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x40002002) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20, 0x3ffffd, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$netlink(0x10, 0x3, 0xb) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socket$kcm(0xa, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x3, 0xa, 0xa, 0xfffffffffffffff0}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000800) (async) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x40002002) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 26m41.159006993s ago: executing program 32 (id=1602): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20, 0x3ffffd, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x3, 0xa, 0xa, 0xfffffffffffffff0}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000800) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x40002002) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x20, 0x3ffffd, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$netlink(0x10, 0x3, 0xb) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socket$kcm(0xa, 0x5, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x3, 0xa, 0xa, 0xfffffffffffffff0}]}, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000800) (async) recvmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x40002002) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c000}, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) 19m43.825746278s ago: executing program 5 (id=4153): perf_event_open(0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES8], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001240), 0xdca725b20dd7c5bc, 0x10, &(0x7f0000001300), 0x0, 0x0, 0xffffffffffffffff, 0x78}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000001400)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000001500), &(0x7f0000001740)}, 0x2c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x5}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r1, 0xd, 0x0, 0x8, &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000050000000000000000"], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r6, 0xe0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001600)={r6, 0xe0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)={@fallback=r2, 0xffffffffffffffff, 0x18, 0xa, r4, @void, @value=r6, @void, @void, r5}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001780)={@fallback=r0, r0, 0x2d, 0x0, r0, @void, @value=r0, @void, @void, r5}, 0x20) 19m43.427334264s ago: executing program 5 (id=4158): r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x11424c, 0x0, 0xafe8, 0x4, 0x7fff, 0xc}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x4}, 0x8ca1, 0x400000, 0xb9, 0x0, 0x0, 0x10, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80e9}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xa749}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xe4}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x3cbd}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x3ff}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x5ae0a419}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x44002}, 0xc0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001800010324bd7002fadbdfdd4a"], 0x14}}, 0x8854) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000280), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x1, 0xa00, 0x0, 0x1, 0x0, 0x1f, 0x0, 0x2f, 0x2}]}}, 0x0, 0x2a, 0x0, 0x1, 0xffff}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xa0, 0x2, 0x1, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz1\x00'}}, @CTA_TUPLE_MASTER={0x44, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x24, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x1}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x4}]}}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}]}, 0xa0}, 0x1, 0x0, 0x0, 0x240000d2}, 0x40) 19m43.036230443s ago: executing program 5 (id=4164): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) socketpair(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000180), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) (async) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7068, 0x0) (async) perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x18000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r1 = socket$rds(0x15, 0x5, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x4, @perf_config_ext={0x0, 0xc}, 0x81a8, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff9fd9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x100810, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0xa, 0x2, 0x106) sendmsg$kcm(r2, &(0x7f0000000300)={&(0x7f0000000340)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10) (async) r3 = socket$kcm(0x2b, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000200)={&(0x7f00000003c0)={0x2, 0x4e21, @loopback}, 0x10, 0x0}, 0x20000050) gettid() (async) fstat(r0, &(0x7f0000000400)) (async) syz_clone(0x211c00, &(0x7f0000000480)="3be531f67cad19e9637cd4b029c31e7522f7fd9d2076cc47c0358db132e62ae9f22c50fda4779c8bf7c85d275e0b7c63dc878ca25b7ad9bad0422d7461c3660fabfd0fa774ee5408fa0b0b04558978fa7fb426acd46a9addbc4e0b5e535f28991c6f630e20299c545c5fcdc5bfbe0f9981f43287f350af67f455e5b0afa3f70cbc028d8cd3ab0ff7987c28bea4d05018def66d6cea78d10612f20197a8a77cae3c2d61b4b4a538bc239838052766791435", 0xb1, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0)="2867e7") (async) gettid() fstat(r3, &(0x7f0000000600)) (async) getpid() (async) r4 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xffdc, 0x0, 0x0, 0x0, 0x24}, r4, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 19m42.471000929s ago: executing program 5 (id=4170): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x6, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x40801) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)={0x1c, 0x26, 0x109, 0x870bd23, 0xfffffff9, {0x28}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24040004) 19m42.224837139s ago: executing program 5 (id=4176): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x3}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x1, 0x6, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, 0x0, 0x0) recvmsg(r5, 0x0, 0x40011013) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000001100)=ANY=[@ANYRESDEC=r0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000070601080000000000000000010000040500010007000000735a9c972e17ffa9b2d6a033886f2e81c67c1490641cbe85d4bc6422736e8ee943c7e307bf0ce4ae661656ade50eb589812a160b293cc80352848fd4a825bd9f9888a1ce5ee3b0e1bf4be42060246d3f32d2"], 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0x80) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4004004) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40040d4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)=[0x0], &(0x7f00000008c0), 0x0, 0x2e, &(0x7f0000000900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x8a, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 19m41.381043274s ago: executing program 5 (id=4184): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0, 0x2}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xc5, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x61, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x42018}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/203, 0xcb}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x38, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@generic={&(0x7f00000011c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x16, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0xdc4c}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001000)='syzkaller\x00', 0xffff, 0x4e, &(0x7f0000001040)=""/78, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000010c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x2, 0xd, 0xd98f, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001240)=[r4, r5], &(0x7f0000001280)=[{0x3, 0x2, 0x1, 0x8}, {0x1, 0x5, 0x1, 0x2}, {0x5, 0x3, 0x3, 0x7}, {0x1, 0x4, 0xd, 0x8}, {0x5, 0x5, 0xe}, {0x4, 0x4, 0x8}], 0x10, 0x9}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xd, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d000000000b0000000300000008000000"], &(0x7f0000000b80)=""/203, 0x46, 0xcb, 0xa, 0x4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1873879200000000000000000cf00000000000d500000000000000"], &(0x7f0000000d80)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x4004080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_clone(0x64020000, &(0x7f00000000c0)="060c34e2651d4e6eed2f55502a5794f73a7945f657becb5ced955a7344729c05d136ef10d015a75a80007c6e04c248720b12d01c89edfac2e80664bbc621da034a83d25ae5c3ae35821d653985d68c8bf767ef5b5fe8eb550b26c9b1fc6bd412a2b1180841d0ceac4b8e6fad48ad30d1e464951db70ac0030439d57fad433e29badb9a4769a535b23f0793a7427369489da2a609d9164e04545dacaf689dd6b0dac8d39e9839ba7a379e2848", 0xac, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240)="7a900d41acc8f3123e3b01cc1c480e92a2c9b0a981e9eb9b358c6fe6fc7cc5857e3da2a73c9e4649095ad1cf89dab1fe19dfd5e362ed4bd2f886cee854acff65c86c93956f01bac603e81f1c84df97857de1471cab1328398f9daf530c50182ed40aa74262701880234a69957ce9565343e09f4409aeefa34cda8c3e49c4de0298677c56a0e8ee0f6c6cf8e518abdc73275be15305ef093799eff6f5c662f74142189804e102e0a17a8c45ea55f2d27f065b4763a757e77cf2fdf66c63f718597a58b21faaa797be226ac140d5fb61132d4c4921dc085c2be98ec6dbc5") 19m25.617239706s ago: executing program 33 (id=4184): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000280)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0, 0x2}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0, 0xc5, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x61, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x42018}, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)=""/203, 0xcb}], 0x1}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x38, '\x00', r1, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001200)=@generic={&(0x7f00000011c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x11, 0x16, &(0x7f0000000f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0xdc4c}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001000)='syzkaller\x00', 0xffff, 0x4e, &(0x7f0000001040)=""/78, 0x41000, 0x1, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000010c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x2, 0xd, 0xd98f, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001240)=[r4, r5], &(0x7f0000001280)=[{0x3, 0x2, 0x1, 0x8}, {0x1, 0x5, 0x1, 0x2}, {0x5, 0x3, 0x3, 0x7}, {0x1, 0x4, 0xd, 0x8}, {0x5, 0x5, 0xe}, {0x4, 0x4, 0x8}], 0x10, 0x9}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xd, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000400000d000000000b0000000300000008000000"], &(0x7f0000000b80)=""/203, 0x46, 0xcb, 0xa, 0x4}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1873879200000000000000000cf00000000000d500000000000000"], &(0x7f0000000d80)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x4004080) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) syz_clone(0x64020000, &(0x7f00000000c0)="060c34e2651d4e6eed2f55502a5794f73a7945f657becb5ced955a7344729c05d136ef10d015a75a80007c6e04c248720b12d01c89edfac2e80664bbc621da034a83d25ae5c3ae35821d653985d68c8bf767ef5b5fe8eb550b26c9b1fc6bd412a2b1180841d0ceac4b8e6fad48ad30d1e464951db70ac0030439d57fad433e29badb9a4769a535b23f0793a7427369489da2a609d9164e04545dacaf689dd6b0dac8d39e9839ba7a379e2848", 0xac, &(0x7f00000021c0), &(0x7f0000002200), &(0x7f0000002240)="7a900d41acc8f3123e3b01cc1c480e92a2c9b0a981e9eb9b358c6fe6fc7cc5857e3da2a73c9e4649095ad1cf89dab1fe19dfd5e362ed4bd2f886cee854acff65c86c93956f01bac603e81f1c84df97857de1471cab1328398f9daf530c50182ed40aa74262701880234a69957ce9565343e09f4409aeefa34cda8c3e49c4de0298677c56a0e8ee0f6c6cf8e518abdc73275be15305ef093799eff6f5c662f74142189804e102e0a17a8c45ea55f2d27f065b4763a757e77cf2fdf66c63f718597a58b21faaa797be226ac140d5fb61132d4c4921dc085c2be98ec6dbc5") 6m40.928970033s ago: executing program 6 (id=9313): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x252a, 0x0, 0x2, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x4, 0xde, &(0x7f0000000880)=""/222}, 0x94) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{}, &(0x7f0000000a40), &(0x7f0000000a80)}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c000300ebb7551382795afa4d23edfcbe6d55b57cc75e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$nl_generic(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xd, 0x4, &(0x7f0000000e00)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x88}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000000e40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8c, '\x00', 0x0, @sock_ops}, 0x94) r4 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000fc0)={&(0x7f0000001000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[], 0x50) 6m40.59047984s ago: executing program 6 (id=9315): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000006910530000b23a5a565f82dd0015000000000000000000000000000000000034140000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xc3, &(0x7f0000000180)=""/195}, 0x94) (async) r0 = socket$kcm(0x2b, 0x7, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) (async) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xbc8180, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000004b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000faffffff850000002d000000850000000700000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r4}, 0xc) (async) socket$netlink(0x10, 0x3, 0x9) (async, rerun: 64) close(r3) (async, rerun: 64) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x14) (async) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x13, &(0x7f0000000340)=r5, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000ffffffd004000000100000002600feff0126000a95"], &(0x7f0000000000)='syzkaller\x00', 0x5}, 0x94) 6m40.295055072s ago: executing program 6 (id=9316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000cf000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 6m38.514894192s ago: executing program 6 (id=9317): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000700), 0xa}, 0x20, 0x400000, 0xb9, 0x0, 0x400, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000500)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18110000", @ANYRES16=r0, @ANYRESOCT=r1], &(0x7f0000000740)='GPL\x00', 0x10000, 0x19000, &(0x7f000001aac0)=""/102400, 0x41100, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000101ac0)={0x2, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x4044100) bpf$MAP_CREATE(0x0, 0x0, 0x50) unlink(&(0x7f0000000040)='./file0\x00') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x4001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(0x0, 0x18b) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) 6m37.969484589s ago: executing program 6 (id=9323): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f00000007c0)={&(0x7f0000000800)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2800000000fc000029000000040000002b0110000000040004"], 0x28}, 0x4004004) 6m37.499415563s ago: executing program 6 (id=9329): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xc, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x404, 0x30, 0x200, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100002, 0x0, 0x8, 0x8}, 0x8256}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x3a0, 0x1, [@m_ife={0xa0, 0x14, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x80000001, 0x10001, 0x20000000, 0x2, 0xe056}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x46, 0x6, "b1e61edf2fa589f79d207bf180788175a92d6a7ac80593fbc4c63d410d4b5130133abe9ec08d5db91800ddabd4d0236cdb9425db22046042728a458992eac28ae179"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0xf4, 0x1d, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x168f, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16ac, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1026}}]}, {0xa3, 0x6, "37a1e8043b1da41e35060f06bf4a2860ac5d364f4de8cf83eabefa70a0fafa484abf534de1ccb38670f08b21e1d6bf870a2e8774a45e4f0cf71bba583a7540d80ff391be975874b094faa08e033a8323f4d87b14a49d33d73bd5b56b7893eab1c4fa8f6d5a4203b715d5963a060f3bb6c3336603ec914b3a54be4b5ac2a1db9ac233d9569a9ed37402d92055990d79f2bc0b86a222d44431c6d89a8ab4db9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x208, 0x1, 0x0, 0x0, {{0x7}, {0x1e0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x11a, 0x6, {0xa, 'security\x00', 0x49, 0x6, "289d08142a90b2e24ec0629037fefcab1eea5f96df05c5816c3b4029c4fe0e027a7a3778e531ce1a5e0291c2851971aa1a28c6be1f96dbe65d7940c02895f4422c6a3d3bd6a508d9f3b35b70855098bdca0c0a08e423c53d9ba60f50407c76ae1e48447b9508430d0350f42bf8f8976aac3e95c4c2450624df2a87cc0a929e13bcdf0647f125d5f1d3f741133933034b9fd75d9f1021bac9ad9949d09ea892e31be6b0d455d2f0c1c91bc78f27b7b4bf3f35c8b202e95a2c0294a34cc6a6700605047ce031c81a64c5db4b16cc50f98a714004841424c49318df1b4424a93408d4ba6f6178a8bcb084c87a446223774c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x491}, @TCA_IPT_TARG={0x8b, 0x6, {0xe, 'raw\x00', 0xff, 0xff, "128add12880f5115f7e9ee4986ef8bc61941ca8b5594ab29f95db55fb80b29a816152ae41611c0d90a439136a194f9a8f5453c30131e249a1f9bc56fb41c77dc9effc7fd665e18b10a714793a4f94d79676018f6fb3874e3b237f0474820f51361"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x80}, 0x48800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000b00)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000240)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) close(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) 6m37.205292688s ago: executing program 34 (id=9329): perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100, 0xc, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtaction={0x404, 0x30, 0x200, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x100002, 0x0, 0x8, 0x8}, 0x8256}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x3a0, 0x1, [@m_ife={0xa0, 0x14, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x6}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x80000001, 0x10001, 0x20000000, 0x2, 0xe056}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x46, 0x6, "b1e61edf2fa589f79d207bf180788175a92d6a7ac80593fbc4c63d410d4b5130133abe9ec08d5db91800ddabd4d0236cdb9425db22046042728a458992eac28ae179"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_gact={0xf4, 0x1d, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x168f, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x16ac, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1026}}]}, {0xa3, 0x6, "37a1e8043b1da41e35060f06bf4a2860ac5d364f4de8cf83eabefa70a0fafa484abf534de1ccb38670f08b21e1d6bf870a2e8774a45e4f0cf71bba583a7540d80ff391be975874b094faa08e033a8323f4d87b14a49d33d73bd5b56b7893eab1c4fa8f6d5a4203b715d5963a060f3bb6c3336603ec914b3a54be4b5ac2a1db9ac233d9569a9ed37402d92055990d79f2bc0b86a222d44431c6d89a8ab4db9d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0x208, 0x1, 0x0, 0x0, {{0x7}, {0x1e0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x11a, 0x6, {0xa, 'security\x00', 0x49, 0x6, "289d08142a90b2e24ec0629037fefcab1eea5f96df05c5816c3b4029c4fe0e027a7a3778e531ce1a5e0291c2851971aa1a28c6be1f96dbe65d7940c02895f4422c6a3d3bd6a508d9f3b35b70855098bdca0c0a08e423c53d9ba60f50407c76ae1e48447b9508430d0350f42bf8f8976aac3e95c4c2450624df2a87cc0a929e13bcdf0647f125d5f1d3f741133933034b9fd75d9f1021bac9ad9949d09ea892e31be6b0d455d2f0c1c91bc78f27b7b4bf3f35c8b202e95a2c0294a34cc6a6700605047ce031c81a64c5db4b16cc50f98a714004841424c49318df1b4424a93408d4ba6f6178a8bcb084c87a446223774c"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x491}, @TCA_IPT_TARG={0x8b, 0x6, {0xe, 'raw\x00', 0xff, 0xff, "128add12880f5115f7e9ee4986ef8bc61941ca8b5594ab29f95db55fb80b29a816152ae41611c0d90a439136a194f9a8f5453c30131e249a1f9bc56fb41c77dc9effc7fd665e18b10a714793a4f94d79676018f6fb3874e3b237f0474820f51361"}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x80}, 0x48800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000200"/16], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000b00)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000240)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) close(r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107446, &(0x7f0000000180)) 2m35.376486175s ago: executing program 1 (id=10785): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x40000000000009, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}, 0x1, 0x0, 0x84}, 0x0) 2m34.607821456s ago: executing program 1 (id=10795): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x1c, 0x140f, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c851}, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, 0x0, 0x48041) r2 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x4}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x10, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x4000) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x17, &(0x7f0000000740)=ANY=[@ANYBLOB="1806000000004000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000020c50000001a000000bf0900000000000026090600000003e70400000006000000180100002020642500000000002020207d9af8ff00000000ad9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030200010000008500000084000000b70000000000000295"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={r6, 0x58, &(0x7f0000000840)}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00\x00@\x00\x00\x00B'], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e40)={r7, 0x0, 0x0}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f00)={@ifindex, 0x3, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x5, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbfffff41, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x6}]}, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r8 = socket$pppoe(0x18, 0x1, 0x0) ioctl$TUNSETDEBUG(r8, 0x80047453, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000010000000000000000a7263b0000"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000fc0)={r9, &(0x7f0000001000), &(0x7f0000001040)=""/211}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000054) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYRES32], 0x50) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000e00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x464}, 0x1, 0x0, 0x0, 0x24008090}, 0x8053) 2m34.052071563s ago: executing program 1 (id=10798): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x3}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x1, 0x6, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000e80)={&(0x7f0000000ec0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e24}}, 0x80, 0x0}, 0x0) recvmsg(r5, 0x0, 0x40011013) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000001100)=ANY=[@ANYRESDEC=r0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000070601080000000000000000010000040500010007000000735a9c972e17ffa9b2d6a033886f2e81c67c1490641cbe85d4bc6422736e8ee943c7e307bf0ce4ae661656ade50eb589812a160b293cc80352848fd4a825bd9f9888a1ce5ee3b0e1bf4be42060246d3f32d2"], 0x1c}, 0x1, 0x0, 0x0, 0x20000805}, 0x80) r8 = socket$kcm(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x20, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4004004) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40040d4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000880)=[0x0], &(0x7f00000008c0), 0x0, 0x2e, &(0x7f0000000900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x8a, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x64, &(0x7f0000000000)=r11, 0x10) sendmsg$inet(r8, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 2m33.440441898s ago: executing program 1 (id=10803): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='syzkaller\x00'}, 0x94) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001cc0)={0x38, 0x40, 0x107, 0x70bd2c, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x73}, @nested={0x20, 0x1, 0x0, 0x1, [@nested={0x1c, 0x10, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x13, &(0x7f0000001780)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001840)='GPL\x00', 0x2, 0xff5c, &(0x7f0000001880)=""/222}, 0x78) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400005a1000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000001580)}], 0x1, 0x0, 0x0, 0x900}, 0x60) perf_event_open(&(0x7f00000015c0)={0x2, 0x80, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b00)={&(0x7f0000001b40)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r0, 0x2e0, 0xe40, 0x2b0, &(0x7f0000001540)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m33.107136921s ago: executing program 1 (id=10807): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0xc}, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x11b9, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 2m32.161747966s ago: executing program 1 (id=10815): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000500)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000ac0)='Z', 0x1}], 0x1, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x8, 0x20, 0x1}}], 0x20, 0x4855}, 0x24000052) 2m16.950936899s ago: executing program 35 (id=10815): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000500)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000ac0)='Z', 0x1}], 0x1, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x8, 0x20, 0x1}}], 0x20, 0x4855}, 0x24000052) 6.110736159s ago: executing program 0 (id=11852): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1000000}, @exit]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 5.993473669s ago: executing program 0 (id=11854): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x348e9}], {0x95, 0x0, 0x0, 0x500}}, &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 5.939533571s ago: executing program 0 (id=11857): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000600000003000000020000840901000000000001030000000100000700000000000000060008000000300061"], &(0x7f0000001fc0)=""/4067, 0x42, 0xfe3, 0x8, 0x6}, 0x28) 5.888512438s ago: executing program 0 (id=11860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) 5.453120709s ago: executing program 0 (id=11862): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80008, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0}, 0x28020, 0x400000002, 0x0, 0x0, 0x0, 0x0, 0xfdfc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000030000000000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x4, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1, &(0x7f0000000680)=ANY=[], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x8e1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e4ad}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x3, 0xfffb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x40080) sendmsg$nl_generic(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c080}, 0xc050) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xf9ffffff, 0x1000000}, 0x10}, 0x94) 4.637930103s ago: executing program 2 (id=11866): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0xffff, 0x0, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x3) r0 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x280000}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000780)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea031100fe08000e40000200875a65969ff57b00ff020000000000000000001200000001"], 0xfdef) 4.494305689s ago: executing program 0 (id=11867): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=0xffffffffffffffff], &(0x7f0000000100)='GPL\x00', 0x100, 0xc3, &(0x7f0000000140)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000b80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES8], 0x40) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10000, 0xfffffffffffffff8, 0x4, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x3, &(0x7f0000000e80)=ANY=[], &(0x7f0000000ec0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000f00)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000f40)={'wlan1\x00', @random="f8ff00400400"}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r1, 0x5, 0xb68, 0x4, &(0x7f0000001040)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x40820000, &(0x7f00000009c0)="c8e6639cb8fc42e59655c1364ab57b1194436b0781174229fe9ce25f7c660642cc96fa425a318a4d18fefe9e71e394d29afa38ef342379bd3d64e851a4edd17cec38113da89d5f2b71ad7e3500aa9a15315459745e0221181390eeaa65390b313be520b7a3648291d749b4cd538d406e641b600dc1529cd965bbd4e079c8c36c4b9e1e670a475a43309327b7f8e35ef8cbdc0a401740496478b131122ca72bf622de9e00058f1d75dacf0d517241dd78c2e583c72d6dd72c14b1a1075aecac1640cd7335c876089a7899c48f4225cd6a176e30278964ac92c043b94889cf7fa184d19286aaf40234420000faa0", 0xed, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="275110838c31fb23baeec8df86c2778777") sendmsg$inet(r2, 0x0, 0x20001850) socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000280), 0x4) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a389, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xb, 0x7}, 0x4000, 0x5, 0x0, 0x4, 0x6, 0x90000006, 0x0, 0x0, 0x0, 0x0, 0x400200000000003f}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={r3, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000800)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000840)={0x2, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000880)=r4, 0x4) 4.386209315s ago: executing program 7 (id=11869): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff19, 0x1, @perf_bp={0x0}, 0x8, 0x80000001, 0x0, 0x8, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000880)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ba, 0x0, @perf_bp={0x0, 0xa}, 0x104905, 0x4, 0x4, 0x4, 0x3, 0xffffffff, 0x2}, 0x0, 0x8000000, 0xffffffffffffffff, 0x0) 4.227285598s ago: executing program 2 (id=11870): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000900)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000840)={&(0x7f0000000880)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="3000000000000000290000000400000084023004003000000402000304", @ANYRES64=r3, @ANYRES16=r2], 0x30}, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001500010000000000000000000a78000004000000140001"], 0x44}}, 0x0) recvmsg$unix(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000680)=ANY=[], 0xdc0) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x3f6, 0x20, 0x70bd28, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4042}, 0x24000080) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1800000015006b05c84e21000af32c6e021859cab5a49844", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4008000) recvmsg(r5, &(0x7f00000005c0)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)=""/115, 0x73}, {&(0x7f0000000200)=""/166, 0xa6}, {&(0x7f00000002c0)=""/138, 0x8a}, {&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f00000003c0)=""/158, 0x9e}], 0x5, &(0x7f0000000500)=""/159, 0x9f}, 0x2000) 4.183630897s ago: executing program 7 (id=11871): socket$kcm(0xa, 0x3, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0xbf5}, 0x0, 0x2, 0x0, 0x3, 0x1, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="b70000000000000095"], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d7b4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x7e}}, 0x14}, 0x1, 0x300000000000, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0xd, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000a00000000000000004af97d4012a4000000000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000a00), 0x4}, 0x8c, 0x2, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x20, 0x1405, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x4040000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x34, 0x20, 0x1, 0x70bd25, 0x0, {0xa}, [@typed={0x8, 0x116, 0x0, 0x0, @pid}, @nested={0x18, 0x18, 0x0, 0x1, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@empty}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xed}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x5, 0x100000000}, 0x20ee, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1005}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041}, 0x44010) fstat(0xffffffffffffffff, &(0x7f0000000340)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x0, 0x0, &(0x7f00000016c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001700)={r5, 0x0, 0xe, 0x0, &(0x7f0000001780)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x200000000000001, 0x106) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000300)={&(0x7f0000000540)=@in6={0x2, 0x4e20, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x41, 0x3}}], 0x18}, 0x8004) 4.114939951s ago: executing program 8 (id=11872): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000340), 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000380)={r0}, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r1, &(0x7f0000000440), 0xfffffdef) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x5, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000580)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffff9d}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x9, 0x9, 0x0, 0x6, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @generic={0x9, 0x6, 0x9, 0x10, 0x5}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x75, &(0x7f0000000100)=""/117, 0x41100, 0x20, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x10, 0x1, 0x7f}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000240)=[r1, r1, r0, r0, r0, r0, r0, r0], &(0x7f0000000640)=[{0x3, 0x2, 0xf, 0x4}, {0x2, 0x4, 0x5, 0xa}, {0x0, 0x4, 0x2, 0x9}, {0x5, 0x1, 0x6df9ed34, 0x7}, {0x5, 0x5, 0x7, 0x5}, {0x5, 0x4, 0x7, 0x5}, {0x2, 0x5, 0x5, 0x9}, {0x4, 0x1, 0xa, 0x1}], 0x10, 0x10000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r3, 0x0, 0x46, 0x1f, &(0x7f0000000780)="3ad0c2929fde267842c7b1179171a889b0e9ee3d9d4b10d01c02fc8794f0efb27462b27325e8873691cc4aa7ba0c71b868fa9f8a5a32b83d82000706fe4975540f32db518f26", &(0x7f0000000800)=""/31, 0xfffffffb, 0x0, 0x3e, 0x93, &(0x7f0000000840)="e44aefce29a9379406db913b5b49a5f0412a05047b618caffbd63bb12c578a96ef0eab8ad49dff72ad8a2f21b2a2565975447746777ef0b829b4a11be8ce", &(0x7f0000000880)="50531b23614e7e5693fb3d6d7743cc1b322be2fba39d5fa420428cc79e7ab54b8530717f7f7826298fba17a7917cc80ff1a4427990d30fa10c690e589d5f186942eb7881aaf713ff200a4754cfdff999af507a9b1fe42f4328869932c2d6bda64e6e354f1eaea05fa1b004441ae56d697c0c537d3703d3fde54c8c29f22e71e6b4f640ebe8b084d4607572d67ea29ff7504889", 0x2, 0x0, 0x8}, 0x50) close(0x3) 3.303285185s ago: executing program 2 (id=11874): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc002, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x10088, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2d, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x13, 0x0, 0x0, &(0x7f0000000cc0)='syzkaller\x00', 0x1, 0xb6, &(0x7f0000000240)=""/182, 0x41000, 0x1, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x495}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r2 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r2, &(0x7f0000000800)={&(0x7f0000000840)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000880)=[{&(0x7f00000008c0)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000900)="82f750e625d3c8d9d65198c3bd00fd", 0xf}], 0x2, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000009c0)=[0x0, 0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f0000000a40), 0x0, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x1f, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xd, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b40000000000000061148404df65b68727be7c00000000000400000000000000"], &(0x7f0000000e00)='GPL\x00', 0xe, 0xfd90, &(0x7f0000000e40)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe40}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r4, 0x0, 0x8080) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000006c0)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETIFF(r4, 0x541b, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000340)={0x0, 0xe0}, 0x1, 0x7}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0x0, 0x20, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000600000000000000ff07000018114800", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000980)='syzkaller\x00', 0x5, 0x8d, &(0x7f0000000f40)=""/141, 0x40f00, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001000)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001040)={0x3, 0x7, 0x9, 0x1000}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000001080)=[{0x1, 0x3, 0xd, 0xa}, {0x0, 0x5, 0xf, 0x5}, {0x4, 0x3, 0x7}, {0x4, 0x4, 0x5, 0xa}, {0x0, 0x1, 0xe}, {0x3, 0x5, 0x2, 0x9}], 0x10, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="6a0ac4ff0000000071106b00000000009500000000"], &(0x7f0000000540)='GPL\x00'}, 0x94) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000002680)=[{&(0x7f00000026c0)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 3.152785552s ago: executing program 7 (id=11875): bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x2, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000001d00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001d40), 0xffffffffffffff97, 0x10, &(0x7f0000001d80), 0x1}, 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003480)={0x0, 0x0, 0x38, 0x0, 0x8}, 0x28) 3.008526757s ago: executing program 7 (id=11876): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000540)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x44, 0x1, 0x0, &(0x7f00000003c0)) r2 = perf_event_open(&(0x7f00000026c0)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x100, 0x1}, 0x100022, 0x8004, 0x3, 0x3, 0x2, 0xfffff274, 0xffff, 0x0, 0x0, 0x0, 0x400000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002740)={0x5, 0x5, &(0x7f0000002800)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000002840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002880)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x40002000) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002a40)={@fallback=r1, 0x10, 0x0, 0x5, &(0x7f0000002a80), 0x0, 0x0, &(0x7f0000002ac0)=[0x0], 0x0, &(0x7f0000002b40)}, 0x40) close(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc99, 0x2a}, 0x2100) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000680)={0xffffffffffffffff, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) 2.70087334s ago: executing program 8 (id=11878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x23}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x400000000000000, 0x0, 0x890}, 0x24008000) 2.49694757s ago: executing program 2 (id=11879): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x2, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000075266f83000000000000000004000000fdffffffc300c000100100009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xff6c, &(0x7f0000000240)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x5f19, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1ac, 0x1ac, 0x4, [@func={0x7, 0x0, 0x0, 0xc, 0x3}, @datasec={0x4, 0x5, 0x0, 0xf, 0x2, [{0x4, 0x3, 0x8}, {0x3, 0x2, 0x2}, {0x2, 0x5, 0x9}, {0x4, 0x4, 0x5}, {0x2, 0x8}], "b64d"}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x3ff}}, @union={0xc, 0x2, 0x0, 0x5, 0x1, 0x2, [{0xe, 0x1, 0x80000003}, {0x9, 0x1, 0x2}]}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @ptr={0x8}, @datasec={0x2, 0x7, 0x0, 0xf, 0x1, [{0x1, 0x6}, {0x4, 0x3, 0x1}, {0x5, 0x5, 0x6}, {0x5, 0x0, 0x1}, {0x3, 0x6, 0x5}, {0x4, 0x56c9, 0x81}, {0x4, 0x7fff, 0x3}], "9c"}, @enum64={0x9, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x9, 0x3, 0x10000}]}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x6b, 0x0, 0x1}, @datasec={0x5, 0x9, 0x0, 0xf, 0x1, [{0x1, 0xfffffff9, 0x8165}, {0x5, 0xd1, 0x5}, {0x2, 0xfffffffb}, {0x3, 0x6, 0xff1}, {0x5, 0x1, 0x1}, {0x3, 0x6, 0x5}, {0x3, 0x2, 0x1}, {0x4, 0x28f, 0x4}, {0x5, 0x2, 0x66a5}], "8e"}]}, {0x0, [0x2e, 0x61]}}, &(0x7f0000000880)=""/26, 0x1c8, 0x1a, 0x1, 0x40}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x20, &(0x7f0000000b00)={&(0x7f0000000940)=""/131, 0x83, 0x0, &(0x7f0000000a00)=""/211, 0xd3}}, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) (async) close(r7) recvmsg$unix(r6, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000c80)=ANY=[@ANYRES8=r7, @ANYRES8=r8], 0x12) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)=r0}, 0x20) (async, rerun: 64) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@arena={0x21, 0x0, 0x0, 0x1d, 0x30000, 0xffffffffffffffff, 0xd14, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x20, 0x29, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x3, 0x0, 0x2, 0x1, 0x9656}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call, @call={0x85, 0x0, 0x0, 0x32}, @jmp={0x5, 0x0, 0x5, 0x3, 0x2, 0x18}, @map_fd={0x18, 0x2}, @ldst={0x2, 0x0, 0x6, 0x3, 0x2, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xcdc00}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000500)='GPL\x00', 0x7, 0x79, &(0x7f0000000540)=""/121, 0x0, 0x6f, '\x00', r3, @fallback=0x28, r4, 0x8, &(0x7f0000000900)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, r5, r0, 0xa, &(0x7f0000000e00)=[0xffffffffffffffff, r9, r10, r11], &(0x7f0000000e40)=[{0x1, 0x5, 0xc, 0xc}, {0x2, 0x5, 0xc, 0x4}, {0x4, 0x3, 0x6, 0x7}, {0x2, 0x4, 0xc, 0x9}, {0x2, 0x4, 0x9}, {0x0, 0x3, 0xb, 0x8ee5af1911a12a3f}, {0x4, 0x5, 0x6, 0xc}, {0x4, 0x2, 0x6, 0xb}, {0x2, 0x4, 0xd, 0x7}, {0x4, 0x1, 0x7, 0xb}]}, 0x94) 2.238744968s ago: executing program 8 (id=11880): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0xef, 0x7, 0x9, 0x0, 0x0, 0x4, 0x500, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x20000000000000b, 0xfffffffffffefffb}, 0x12108, 0x80000001, 0x2002000, 0x9, 0x766e0b22, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x7ffffffffffffffc, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60a0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x80000001, 0x4}, 0x110, 0xfffffffffffffffc, 0x0, 0x8, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8880) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x80, 0x1, 0x4, 0x8}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x1e, 0x2, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) recvmsg(r3, 0x0, 0x40000180) socket$kcm(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000160007012cbd7000fedbdf25147c00000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000011}, 0x8010) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000ac0)={&(0x7f00000006c0)="903974791d9d5e8a79ff80570024df1e9dd74608eb9bd0484e77cd68517655cd6a2c39e146fd15d8cacb463cad82ec5b468816f63b7aa8451d69d3e3d06b5e7686840c017457e839a6e2f9d6564576ff66dca76e912d9550ed69af0247c19dc38d46cca3dca3e27e725e92b1e28da951954b69a0dd5d3711", &(0x7f0000000740)=""/24, &(0x7f0000000b00)="1d98d24bece066a72c029082332f65ef64e068b0f1959f47e36a1f3a91afdccb1de6fd674ddcaf71bfa7d271163fb1c7ef326ea3565bf90d412ffbf7186440ca9608c56af6e76f78550f695080e5dfd06ef04198d4d2e5fb40f5e380e90205c73440b5318af9205004387a2e8c32f32835bda3b9bc63e0b0fc0642deb3e0743bebb72a5140e6aaa2b2b582e6b879d9efea32ff5c3cc5cea38c0b9eba50ebb3819260ba484cfa7fa15b33c5048244f00d4ea2e0dcdc8b1824ac7cc1846e69", &(0x7f0000000a00)="3b000d7cdd2d0a323bb0f2b9ba008698b23e3fa14c534ae4a0577c8bcefea641d9af57cf4efe", 0x9f51, r6, 0x4}, 0x38) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890b, &(0x7f0000000480)) sendmsg$kcm(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x4008054) sendmsg$inet(r2, &(0x7f0000000640)={&(0x7f0000000680)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x18b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.149239555s ago: executing program 4 (id=11881): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000032020000000000015000000852000006d50030095"], &(0x7f00000005c0)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x3b, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000f3ff}, 0x94) 1.949746861s ago: executing program 2 (id=11882): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xe, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001480)='syzkaller\x00'}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0x13, &(0x7f0000001780)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001840)='GPL\x00', 0x2, 0xde, &(0x7f0000001880)=""/222}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000014c0)={r0, 0x2e0, 0xe40, 0x2b0, &(0x7f0000001540)="b9ff0b078059268cb89e14f088a82de0ffff200000000067000aac14140ce000000d49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.90711253s ago: executing program 7 (id=11883): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x4400, 0x2, 0x0, 0x7, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xfffffffffffefffb}, 0x8, 0x80000001, 0x0, 0x7, 0x766e0b24, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400200000000003a}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfff}, 0x114244, 0x0, 0x2, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000006c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xf, 0x4}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0x10, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x840000000002, 0x3, 0xff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000004000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x50, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x5, 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xdc44}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x4, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000b40)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b80)={0x5, 0x5, 0xffffffff, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000bc0)=[0xffffffffffffffff, r3, r2, r3, r3, r3], &(0x7f0000000c00)=[{0x5, 0x2, 0x9}, {0x2, 0x5, 0xd, 0x5}, {0x5, 0x2, 0x10000}, {0x0, 0x5, 0xa}, {0x5, 0x3, 0x6}, {0x2, 0x3, 0xb, 0x6}, {0x5, 0x1, 0x2, 0x1}], 0x10, 0x1457}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) bpf$BPF_GET_PROG_INFO(0x1c, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000240)={0x2, 0x44, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0xf7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000824d0095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) 1.88889751s ago: executing program 4 (id=11884): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000004c0)={&(0x7f0000000500)=@in6={0xa, 0x4e24, 0xff, @loopback={0x10000000000000}, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000ac0)='Z', 0x34000}], 0x1, &(0x7f0000000b00)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x8, 0x7, 0x1}}], 0x20, 0x4855}, 0x24000052) 1.769573116s ago: executing program 8 (id=11885): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0700000004000018080200002100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00&.'], 0x50) 1.443751671s ago: executing program 8 (id=11886): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x8024, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffe}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x11) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="8fedcb7907003675f37527e486dd6317ce623900fe06000000000000005a6596aff57b000000000000000000000000f5ac14a7605ddb2ed13d51faccc98485e9b32738a716a6e0562b100abd839ca96e0a3cbd52cf2b1a6063e04fbf928265d71239cf725a5089af99ece4151369fd719f7a112c21def70922265d1282a8eafba03792d8c5b88bb33a5ec2237fda90d164774dba3251e0b5f06d39119ed23f51b6eea39dfd", @ANYRES16=r0, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRESOCT=r2, @ANYRES32=r1], 0xfffffffffffffdfc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe1b) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000600)="259a53f271a76d2688644c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1808000007000000000000000000000085000000a000000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000840)=r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0x2000000000000216, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0x40000000f, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xfffffffffffffffa, 0x7}, 0x4800, 0x1, 0x0, 0x8, 0x77df, 0x4, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x2}, 0x8, 0x10, &(0x7f0000000e00), 0x10}, 0x94) perf_event_open(0x0, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe8800000000000000000000000000016401010000000000000000000000000000017fff4e230025000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="480100001a000100feffffff00010000e000000100000000000000000000000000000000000000000000ffff0a0101014e20071c4e210005020000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc020000000000000000000000000001faffffffffffffff0f00000000000000060000000000000002000000000000001c25080000000000a637fffffffffffffcffffffffffffff0100000000000000ffffffffffffffff0000000000000000ff01000000000000fefffffffffffffffefffffffe034000000000002cbd700005350000020001002000000000000000480003006465666c61746500"/216], 0x148}}, 0x844) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000440)={r6}, 0xc) perf_event_open(&(0x7f0000000980)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff80, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x8000003, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.443077451s ago: executing program 4 (id=11887): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0xc0b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20008040) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x1a}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f0000000600)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4, 0x0, 0x3, 0xe, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x40, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}]}, 0x70}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x14, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055", @ANYBLOB="0000000000000000b7020000004000008500000086000000850000001100"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061198c380000000000952e000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) sendmsg$unix(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xc014) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c0c2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x6, &(0x7f0000000540)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x23}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000580)='GPL\x00', 0x5, 0x29e, &(0x7f0000000840)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x6, 0x21, &(0x7f0000000200), 0x10) 852.448466ms ago: executing program 4 (id=11888): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8971, &(0x7f0000000100)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000c00)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x20208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x2}, 0x11efa, 0x4, 0x98, 0x6, 0x2, 0xfffff271, 0xffdc, 0x0, 0x0, 0x0, 0x24}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x5, 0x5, &(0x7f0000000d40)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000d80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="70000000020605021c0000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3000000000240007800c00028008000140000000000c0001800800014000001c02080006400000000005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x0, 0x48010}, 0x0) close(r2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@arena={0x21, 0x0, 0x0, 0x32, 0x60600, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r7, &(0x7f0000000b40)="54380d1b710e5800e6bf4df288bc43e579df1ebc93ff7b16a97ad5db40bff7ddada7db2ff626199af0a2bb2c6ec3bba515b148af6595fe20f7fccb8141397823b36e8cc7598702478b74c8c2"}, 0x20) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYBLOB="3e0002"], 0x9a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0}, &(0x7f0000000440), &(0x7f0000000480)='%ps \x00'}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1, 0xc, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r9}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffffa}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000840)='\x00'/14, 0x0, 0x7c267676, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 267.770879ms ago: executing program 7 (id=11891): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x4, &(0x7f0000000940)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84, 0xfe}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000000980)='GPL\x00', 0x5, 0xfd90, &(0x7f00000009c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 116.218976ms ago: executing program 4 (id=11892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e5673abf50000000800", @ANYRES32, @ANYBLOB='\x00'/16, @ANYRES32, @ANYBLOB="000000000400"/21], 0x50) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000f00)='rdma.current\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000002580)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)=@deltfilter={0xb8, 0x2d, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x2}, {0x8, 0x4}, {0xa, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x7, 0xa1}}, @TCA_CHAIN={0x8, 0xb, 0xfffffff5}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}, @filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "4f8d91baecc2bb8194a742f3b898fa99"}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e20}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8, 0x1e, 0xff}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x4}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40850}, 0x4040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xc, &(0x7f0000000000)=@raw=[@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000080)='syzkaller\x00', 0xfff, 0xa6, &(0x7f0000000e00)=""/166, 0x1f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x5, 0xc, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x28}}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="540000000b0601020000000000000000020000000900020073797a300000000005000100070000002c0007800c00018008000140ffffffff0c00148008000140ffffffff06000440500000000500070006000000ebb58ef1f5b5c0d250028f0f417901451951fa3d1e2a124fb38122315ffffbaf3e795d6824e28ffd39a6b35ab0f39537a1019e76b83f3113fc4b"], 0x54}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4040010) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000009c0)={0x900, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020afc000700000028bd7000fedbdf2505001a000000000000000000000000000000000005000004000000000000000000002c0030000000c7c11735ebed872cd8d560cd482d45dc098b3a"], 0x38}}, 0x40408c0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) perf_event_open(&(0x7f0000000b40)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) sendmsg$nl_generic(r5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c80)=ANY=[@ANYBLOB="280000001800290200000000ffdbdf250a00000008000000040000000400088008001e0067"], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a3, &(0x7f0000000240)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xe, &(0x7f0000000ec0)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x3, 0x5}, 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x0, 0x0, 0x8, 0x80000000003fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)={0x1c, 0x26, 0x101, 0x70bd23, 0xfffffffc, {0x21}, [@typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8015}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xb, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000007b1130000000000085100085000000050000007a003300000044e99500a50500000000192aae17cdac20bddec3c54db2f46c55c0692ea7a3bc12f7addb65daf0e890314eab79f14b2399ccb6ac030d7839110859d82d48acf4fd8b526f30259d1a7bd2e86b93f82ae3f19ea97f2ac397b547499eba1d7951f7653eb0de2cfbf6294e5b5ceeab18b7a336c372d58d2071aac4253bb540ed0574e55b873127ae8fb6e346c391cb15d8cbe8f436ed58f2d029f36a886cdf"], &(0x7f0000000a80)='GPL\x00', 0x5, 0x29e, &(0x7f0000000ac0)=""/195, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) sendmsg$inet(r2, 0x0, 0x300440f1) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$sock(r4, &(0x7f0000000640)={&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x46, 0x2}, 0x80, 0x0}, 0x20048840) sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000740)=@l2tp6={0xa, 0x0, 0x0, @local, 0x0, 0xfffffffd}, 0x3f, 0x0}, 0x20040010) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x3, 0x84) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000480)={0x2c, 0xc, 0x0, 0x2e}, 0x10, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000580)}, {0x0}], 0x3, 0x0, 0x0, 0x90}, 0x20000000) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x1008, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x0) kernel console output (not intermixed with test programs): 06.956883][T11395] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 1806.956934][T11395] ? sock_diag_rcv_msg+0x184/0x5f0 [ 1806.956976][T11395] sock_diag_rcv_msg+0x4b0/0x5f0 [ 1806.957017][T11395] netlink_rcv_skb+0x226/0x4a0 [ 1806.957075][T11395] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 1806.957125][T11395] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1806.957210][T11395] ? netlink_deliver_tap+0x2e/0x1b0 [ 1806.957247][T11395] ? netlink_deliver_tap+0x2e/0x1b0 [ 1806.957305][T11395] netlink_unicast+0x8ef/0xa80 [ 1806.957418][T11395] netlink_sendmsg+0x7f0/0xb20 [ 1806.957476][T11395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1806.957526][T11395] ? aa_sock_msg_perm+0x144/0x210 [ 1806.957582][T11395] ? apparmor_socket_sendmsg+0x98/0x360 [ 1806.957611][T11395] ? perf_trace_lock+0x32e/0x410 [ 1806.957651][T11395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1806.957684][T11395] sock_sendmsg_nosec+0x14e/0x190 [ 1806.957731][T11395] ____sys_sendmsg+0x54e/0x850 [ 1806.957781][T11395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1806.957842][T11395] ? import_iovec+0x73/0xa0 [ 1806.957888][T11395] ___sys_sendmsg+0x2a5/0x360 [ 1806.957918][T11395] ? perf_trace_run_bpf_submit+0xee/0x170 [ 1806.957965][T11395] ? __pfx____sys_sendmsg+0x10/0x10 [ 1806.958065][T11395] ? __fget_files+0x2a/0x420 [ 1806.958138][T11395] ? __fget_files+0x3a2/0x420 [ 1806.958167][T11395] ? __fget_files+0x2a/0x420 [ 1806.958230][T11395] __x64_sys_sendmsg+0x1b1/0x290 [ 1806.958271][T11395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1806.958377][T11395] do_syscall_64+0x166/0x520 [ 1806.958404][T11395] ? trace_irq_disable+0x3b/0x140 [ 1806.958435][T11395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.958462][T11395] ? clear_bhb_loop+0x70/0xc0 [ 1806.958501][T11395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.958526][T11395] RIP: 0033:0x7f6c261a94d9 [ 1806.958569][T11395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1806.958589][T11395] RSP: 002b:00007f6c270e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1806.958615][T11395] RAX: ffffffffffffffda RBX: 00007f6c26425fa0 RCX: 00007f6c261a94d9 [ 1806.958632][T11395] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1806.958648][T11395] RBP: 00007f6c270e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1806.958664][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1806.958679][T11395] R13: 00007f6c26426038 R14: 00007f6c26425fa0 R15: 00007ffd78682118 [ 1806.958758][T11395] [ 1807.341325][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10854'. [ 1807.582140][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10855'. [ 1809.148828][T11429] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1809.148977][T11429] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1809.595572][T11445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10872'. [ 1809.596870][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10871'. [ 1810.564678][T11456] xt_cgroup: invalid path, errno=-2 [ 1810.786392][T11459] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10876'. [ 1812.207055][T11473] FAULT_INJECTION: forcing a failure. [ 1812.207055][T11473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1812.207090][T11473] CPU: 1 UID: 0 PID: 11473 Comm: syz.7.10882 Not tainted syzkaller #0 PREEMPT(full) [ 1812.207117][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1812.207131][T11473] Call Trace: [ 1812.207141][T11473] [ 1812.207152][T11473] dump_stack_lvl+0xe8/0x150 [ 1812.207202][T11473] should_fail_ex+0x3eb/0x540 [ 1812.207238][T11473] _copy_to_user+0x31/0xb0 [ 1812.207285][T11473] bpf_verifier_vlog+0x496/0x900 [ 1812.207329][T11473] bpf_verifier_log_write+0x11d/0x1a0 [ 1812.207366][T11473] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1812.207415][T11473] print_insn_state+0x135/0x170 [ 1812.207448][T11473] do_check_common+0x45e7/0x75b0 [ 1812.207481][T11473] ? stack_depot_save_flags+0x33/0x810 [ 1812.207590][T11473] ? __pfx_do_check_common+0x10/0x10 [ 1812.207639][T11473] ? mark_fastcall_patterns+0x10e1/0x1140 [ 1812.207696][T11473] do_check_main+0x95/0x1f0 [ 1812.207727][T11473] bpf_check+0x302b/0x34e0 [ 1812.207752][T11473] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1812.207805][T11473] ? ktime_get_with_offset+0x93/0x2d0 [ 1812.207839][T11473] ? __pfx_bpf_check+0x10/0x10 [ 1812.207868][T11473] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1812.207905][T11473] bpf_prog_load+0x14da/0x1c60 [ 1812.207950][T11473] ? __pfx_bpf_prog_load+0x10/0x10 [ 1812.208000][T11473] ? __might_fault+0xaf/0x130 [ 1812.208038][T11473] __sys_bpf+0xd86/0xe00 [ 1812.208074][T11473] ? __pfx___sys_bpf+0x10/0x10 [ 1812.208102][T11473] ? __pfx_trace_call_bpf+0x10/0x10 [ 1812.208168][T11473] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1812.208199][T11473] ? ksys_write+0x242/0x270 [ 1812.208233][T11473] ? __pfx_ksys_write+0x10/0x10 [ 1812.208273][T11473] __x64_sys_bpf+0xba/0xd0 [ 1812.208311][T11473] do_syscall_64+0x166/0x520 [ 1812.208337][T11473] ? trace_irq_disable+0x3b/0x140 [ 1812.208366][T11473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.208389][T11473] ? clear_bhb_loop+0x70/0xc0 [ 1812.208418][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1812.208440][T11473] RIP: 0033:0x7f6c261a94d9 [ 1812.208460][T11473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1812.208478][T11473] RSP: 002b:00007f6c270e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1812.208501][T11473] RAX: ffffffffffffffda RBX: 00007f6c26425fa0 RCX: 00007f6c261a94d9 [ 1812.208517][T11473] RDX: 0000000000000048 RSI: 0000200000001580 RDI: 0000000000000005 [ 1812.208531][T11473] RBP: 00007f6c270e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1812.208545][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1812.208559][T11473] R13: 00007f6c26426038 R14: 00007f6c26425fa0 R15: 00007ffd78682118 [ 1812.208613][T11473] [ 1813.048794][T11483] netlink: 2808 bytes leftover after parsing attributes in process `syz.0.10886'. [ 1813.462917][T11499] netlink: 96 bytes leftover after parsing attributes in process `syz.2.10890'. [ 1813.584899][T11499] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10890'. [ 1813.591819][T11503] netlink: 'syz.2.10890': attribute type 21 has an invalid length. [ 1813.591882][T11503] netlink: 128 bytes leftover after parsing attributes in process `syz.2.10890'. [ 1813.592081][T11503] netlink: 'syz.2.10890': attribute type 4 has an invalid length. [ 1813.592123][T11503] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10890'. [ 1815.124643][T11525] netlink: 'syz.7.10899': attribute type 10 has an invalid length. [ 1815.572280][T11544] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10906'. [ 1815.871451][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10908'. [ 1816.775344][T11570] netlink: 'syz.2.10914': attribute type 10 has an invalid length. [ 1817.110341][T11579] FAULT_INJECTION: forcing a failure. [ 1817.110341][T11579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1817.110377][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.7.10919 Not tainted syzkaller #0 PREEMPT(full) [ 1817.110405][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1817.110421][T11579] Call Trace: [ 1817.110435][T11579] [ 1817.110451][T11579] dump_stack_lvl+0xe8/0x150 [ 1817.110519][T11579] should_fail_ex+0x3eb/0x540 [ 1817.110606][T11579] _copy_from_user+0x2d/0xb0 [ 1817.110658][T11579] ___sys_sendmsg+0x1c6/0x360 [ 1817.110735][T11579] ? __pfx____sys_sendmsg+0x10/0x10 [ 1817.110901][T11579] ? __fget_files+0x2a/0x420 [ 1817.111012][T11579] ? __fget_files+0x3a2/0x420 [ 1817.111057][T11579] ? __fget_files+0x2a/0x420 [ 1817.111154][T11579] __x64_sys_sendmsg+0x1b1/0x290 [ 1817.111210][T11579] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1817.111370][T11579] do_syscall_64+0x166/0x520 [ 1817.111409][T11579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.111441][T11579] ? clear_bhb_loop+0x70/0xc0 [ 1817.111498][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.111529][T11579] RIP: 0033:0x7f6c261a94d9 [ 1817.111565][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.111587][T11579] RSP: 002b:00007f6c270e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1817.111616][T11579] RAX: ffffffffffffffda RBX: 00007f6c26425fa0 RCX: 00007f6c261a94d9 [ 1817.111637][T11579] RDX: 0000000020004000 RSI: 0000200000000600 RDI: 0000000000000009 [ 1817.111655][T11579] RBP: 00007f6c270e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.111683][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1817.111699][T11579] R13: 00007f6c26426038 R14: 00007f6c26425fa0 R15: 00007ffd78682118 [ 1817.111821][T11579] [ 1817.356341][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10916'. [ 1817.356371][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10916'. [ 1817.553039][T28703] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1817.566363][T28703] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1817.574093][T28703] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1817.586584][T28703] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1817.594500][T28703] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1817.733762][T11595] FAULT_INJECTION: forcing a failure. [ 1817.733762][T11595] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.733812][T11595] CPU: 1 UID: 0 PID: 11595 Comm: syz.0.10922 Not tainted syzkaller #0 PREEMPT(full) [ 1817.733838][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1817.733851][T11595] Call Trace: [ 1817.733859][T11595] [ 1817.733869][T11595] dump_stack_lvl+0xe8/0x150 [ 1817.733907][T11595] should_fail_ex+0x3eb/0x540 [ 1817.733947][T11595] should_failslab+0xa8/0x100 [ 1817.733981][T11595] __kmalloc_cache_noprof+0x9e/0x600 [ 1817.734009][T11595] ? sctp_add_bind_addr+0x8c/0x370 [ 1817.734032][T11595] ? sctp_add_bind_addr+0x8c/0x370 [ 1817.734064][T11595] sctp_add_bind_addr+0x8c/0x370 [ 1817.734093][T11595] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1817.734120][T11595] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1817.734146][T11595] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1817.734176][T11595] ? sctp_v4_is_any+0x35/0x60 [ 1817.734201][T11595] ? sctp_copy_one_addr+0x93/0x360 [ 1817.734229][T11595] sctp_bind_addr_copy+0xb3/0x3c0 [ 1817.734254][T11595] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1817.734291][T11595] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1817.734325][T11595] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1817.734356][T11595] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1817.734391][T11595] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1817.734422][T11595] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1817.734453][T11595] sctp_sendmsg+0x159b/0x2d00 [ 1817.734495][T11595] ? ktime_get+0x45/0x220 [ 1817.734522][T11595] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1817.734549][T11595] ? ktime_get+0x45/0x220 [ 1817.734580][T11595] ? __lock_acquire+0x747/0x2de0 [ 1817.734622][T11595] ? aa_sock_msg_perm+0xfc/0x210 [ 1817.734652][T11595] ? sock_rps_record_flow+0x19/0x350 [ 1817.734677][T11595] ? inet_sendmsg+0x298/0x320 [ 1817.734696][T11595] ? apparmor_socket_sendmsg+0x98/0x360 [ 1817.734727][T11595] ? __pfx_inet_sendmsg+0x10/0x10 [ 1817.734746][T11595] sock_sendmsg_nosec+0x10f/0x190 [ 1817.734778][T11595] ____sys_sendmsg+0x54e/0x850 [ 1817.734807][T11595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1817.734840][T11595] ? import_iovec+0x73/0xa0 [ 1817.734870][T11595] ___sys_sendmsg+0x2a5/0x360 [ 1817.734890][T11595] ? __lock_acquire+0x747/0x2de0 [ 1817.734930][T11595] ? __pfx____sys_sendmsg+0x10/0x10 [ 1817.734991][T11595] ? __fget_files+0x3a2/0x420 [ 1817.735017][T11595] ? __fget_files+0x2a/0x420 [ 1817.735054][T11595] __x64_sys_sendmsg+0x1b1/0x290 [ 1817.735080][T11595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1817.735127][T11595] do_syscall_64+0x166/0x520 [ 1817.735152][T11595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.735174][T11595] ? clear_bhb_loop+0x70/0xc0 [ 1817.735200][T11595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.735222][T11595] RIP: 0033:0x7f7190fa94d9 [ 1817.735241][T11595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1817.735260][T11595] RSP: 002b:00007f7191eab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1817.735283][T11595] RAX: ffffffffffffffda RBX: 00007f7191225fa0 RCX: 00007f7190fa94d9 [ 1817.735298][T11595] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1817.735312][T11595] RBP: 00007f7191eab090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.735326][T11595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1817.735339][T11595] R13: 00007f7191226038 R14: 00007f7191225fa0 R15: 00007fff0c1c9f68 [ 1817.735374][T11595] [ 1818.112772][T11596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10923'. [ 1818.112943][T11596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10923'. [ 1818.112962][T11596] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10923'. [ 1818.186958][T11594] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1818.419262][T11594] syzkaller0: entered promiscuous mode [ 1818.420128][T11594] syzkaller0: entered allmulticast mode [ 1818.926648][T31687] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.120239][T11613] netlink: 'syz.4.10928': attribute type 10 has an invalid length. [ 1819.134512][T31687] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.183619][T11618] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10930'. [ 1819.320232][T31687] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.371226][T11586] rxe_eth0 speed is unknown, defaulting to 1000 [ 1819.494415][T31687] team0: Port device netdevsim0 removed [ 1819.518094][T31687] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.595745][T11628] FAULT_INJECTION: forcing a failure. [ 1819.595745][T11628] name failslab, interval 1, probability 0, space 0, times 0 [ 1819.595780][T11628] CPU: 0 UID: 0 PID: 11628 Comm: syz.0.10934 Not tainted syzkaller #0 PREEMPT(full) [ 1819.595804][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1819.595821][T11628] Call Trace: [ 1819.595831][T11628] [ 1819.595841][T11628] dump_stack_lvl+0xe8/0x150 [ 1819.595883][T11628] should_fail_ex+0x3eb/0x540 [ 1819.595916][T11628] should_failslab+0xa8/0x100 [ 1819.595949][T11628] ? anon_vma_clone+0x3b1/0xa20 [ 1819.595974][T11628] kmem_cache_alloc_noprof+0x9c/0x600 [ 1819.596000][T11628] ? anon_vma_clone+0x3b1/0xa20 [ 1819.596032][T11628] ? kmem_cache_alloc_noprof+0x151/0x600 [ 1819.596056][T11628] ? anon_vma_clone+0x3b1/0xa20 [ 1819.596087][T11628] anon_vma_clone+0x3b1/0xa20 [ 1819.596118][T11628] anon_vma_fork+0x129/0x4d0 [ 1819.596141][T11628] ? vm_area_dup+0x564/0x760 [ 1819.596167][T11628] dup_mmap+0x9a8/0x1e10 [ 1819.596212][T11628] ? __pfx_dup_mmap+0x10/0x10 [ 1819.596236][T11628] ? do_raw_spin_lock+0x12b/0x2f0 [ 1819.596275][T11628] ? lock_acquire+0x115/0x350 [ 1819.596322][T11628] copy_mm+0x115/0x470 [ 1819.596354][T11628] copy_process+0x1ecc/0x4510 [ 1819.596398][T11628] ? copy_process+0xd17/0x4510 [ 1819.596447][T11628] ? __pfx_copy_process+0x10/0x10 [ 1819.596478][T11628] ? get_pid_task+0x20/0x1f0 [ 1819.596500][T11628] ? get_pid_task+0x20/0x1f0 [ 1819.596533][T11628] kernel_clone+0x2d7/0x940 [ 1819.596590][T11628] ? __pfx_kernel_clone+0x10/0x10 [ 1819.596647][T11628] __x64_sys_clone+0x1b6/0x230 [ 1819.596685][T11628] ? __pfx___x64_sys_clone+0x10/0x10 [ 1819.596745][T11628] ? __pfx_ksys_write+0x10/0x10 [ 1819.596791][T11628] do_syscall_64+0x166/0x520 [ 1819.596816][T11628] ? trace_irq_disable+0x3b/0x140 [ 1819.596847][T11628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.596870][T11628] ? clear_bhb_loop+0x70/0xc0 [ 1819.596898][T11628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1819.596921][T11628] RIP: 0033:0x7f7190fa94d9 [ 1819.596943][T11628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1819.596961][T11628] RSP: 002b:00007f7191eaafd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1819.596984][T11628] RAX: ffffffffffffffda RBX: 00007f7191225fa0 RCX: 00007f7190fa94d9 [ 1819.597002][T11628] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c920000 [ 1819.597016][T11628] RBP: 00007f7191eab090 R08: 0000000000000000 R09: 0000000000000000 [ 1819.597030][T11628] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 1819.597043][T11628] R13: 00007f7191226038 R14: 00007f7191225fa0 R15: 00007fff0c1c9f68 [ 1819.597082][T11628] [ 1819.664654][ T8643] Bluetooth: hci4: command tx timeout [ 1820.088155][T11632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10936'. [ 1820.149592][T11634] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10937'. [ 1820.661724][T11650] netlink: 'syz.2.10941': attribute type 10 has an invalid length. [ 1820.763939][T11586] lo speed is unknown, defaulting to 1000 [ 1820.766331][T11648] netlink: 132 bytes leftover after parsing attributes in process `syz.7.10943'. [ 1821.012688][T11655] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10944'. [ 1821.743242][ T8643] Bluetooth: hci4: command tx timeout [ 1821.837070][T11691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10952'. [ 1821.837097][T11691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10952'. [ 1822.140549][T11698] sit0: left allmulticast mode [ 1822.141951][T11698] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1822.285099][T11702] netlink: 'syz.2.10955': attribute type 10 has an invalid length. [ 1822.325554][T11586] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.330198][T11586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.330372][T11586] bridge_slave_0: entered allmulticast mode [ 1822.411114][T11586] bridge_slave_0: entered promiscuous mode [ 1822.441960][T11586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.442073][T11586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.442247][T11586] bridge_slave_1: entered allmulticast mode [ 1822.485329][T11586] bridge_slave_1: entered promiscuous mode [ 1822.655040][T11715] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1822.736699][T11717] netlink: 'syz.7.10959': attribute type 21 has an invalid length. [ 1822.762363][ T5296] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1822.802990][T11586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1822.841912][T11586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1822.946398][T11719] netlink: 'syz.4.10960': attribute type 6 has an invalid length. [ 1823.575282][T11586] team0: Port device team_slave_0 added [ 1823.618294][T11586] team0: Port device team_slave_1 added [ 1823.791565][T31687] hsr_slave_0: left promiscuous mode [ 1823.809274][T31687] hsr_slave_1: left promiscuous mode [ 1823.810183][T31687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1823.810206][T31687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.822950][ T8643] Bluetooth: hci4: command tx timeout [ 1823.848978][T31687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1823.849001][T31687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1823.895094][T31687] veth1_macvtap: left promiscuous mode [ 1823.895251][T31687] veth1_vlan: left promiscuous mode [ 1823.895323][T31687] veth0_vlan: left promiscuous mode [ 1824.118393][T11748] netlink: 'syz.0.10967': attribute type 10 has an invalid length. [ 1824.140438][T31687] veth0_macvtap (unregistering): left allmulticast mode [ 1824.580242][T11766] netlink: 'syz.2.10970': attribute type 10 has an invalid length. [ 1824.612172][T31687] team0 (unregistering): Port device team_slave_1 removed [ 1824.635257][T31687] team0 (unregistering): Port device team_slave_0 removed [ 1824.803811][T11586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1824.803830][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1824.803858][T11586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1824.852785][T11762] tap0: tun_chr_ioctl cmd 1074025677 [ 1824.853013][T11762] tap0: linktype set to 0 [ 1824.869149][T11764] tap0: tun_chr_ioctl cmd 1074812118 [ 1824.904428][T11766] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 1825.013666][ T5296] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1825.022278][T11586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1825.022345][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1825.022416][T11586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1825.110975][T11774] FAULT_INJECTION: forcing a failure. [ 1825.110975][T11774] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.111007][T11774] CPU: 1 UID: 0 PID: 11774 Comm: syz.7.10974 Not tainted syzkaller #0 PREEMPT(full) [ 1825.111032][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1825.111046][T11774] Call Trace: [ 1825.111054][T11774] [ 1825.111064][T11774] dump_stack_lvl+0xe8/0x150 [ 1825.111106][T11774] should_fail_ex+0x3eb/0x540 [ 1825.111137][T11774] should_failslab+0xa8/0x100 [ 1825.111172][T11774] __kmalloc_cache_noprof+0x9e/0x600 [ 1825.111202][T11774] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1825.111333][T11774] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1825.111367][T11774] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1825.111392][T11774] ? sctp_stream_interleave_init+0x55/0x90 [ 1825.111437][T11774] sctp_association_new+0x15be/0x25d0 [ 1825.111481][T11774] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1825.111517][T11774] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1825.111555][T11774] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1825.111596][T11774] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1825.111628][T11774] sctp_sendmsg+0x159b/0x2d00 [ 1825.111674][T11774] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1825.111721][T11774] ? __lock_acquire+0x747/0x2de0 [ 1825.111762][T11774] ? aa_sock_msg_perm+0xf5/0x210 [ 1825.111793][T11774] ? sock_rps_record_flow+0x19/0x350 [ 1825.111818][T11774] ? inet_sendmsg+0x298/0x320 [ 1825.111842][T11774] ? __pfx_inet_sendmsg+0x10/0x10 [ 1825.111862][T11774] sock_sendmsg_nosec+0x10f/0x190 [ 1825.111894][T11774] ____sys_sendmsg+0x54e/0x850 [ 1825.111922][T11774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1825.111955][T11774] ? import_iovec+0x73/0xa0 [ 1825.111983][T11774] ___sys_sendmsg+0x2a5/0x360 [ 1825.112004][T11774] ? __lock_acquire+0x747/0x2de0 [ 1825.112035][T11774] ? __pfx____sys_sendmsg+0x10/0x10 [ 1825.112096][T11774] ? __fget_files+0x3a2/0x420 [ 1825.112121][T11774] ? __fget_files+0x2a/0x420 [ 1825.112156][T11774] __x64_sys_sendmsg+0x1b1/0x290 [ 1825.112181][T11774] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1825.112226][T11774] do_syscall_64+0x166/0x520 [ 1825.112249][T11774] ? trace_irq_disable+0x3b/0x140 [ 1825.112279][T11774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.112300][T11774] ? clear_bhb_loop+0x70/0xc0 [ 1825.112326][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.112347][T11774] RIP: 0033:0x7f6c261a94d9 [ 1825.112366][T11774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.112384][T11774] RSP: 002b:00007f6c270e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1825.112407][T11774] RAX: ffffffffffffffda RBX: 00007f6c26425fa0 RCX: 00007f6c261a94d9 [ 1825.112422][T11774] RDX: 0000000024000052 RSI: 00002000000004c0 RDI: 0000000000000003 [ 1825.112436][T11774] RBP: 00007f6c270e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.112449][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1825.112461][T11774] R13: 00007f6c26426038 R14: 00007f6c26425fa0 R15: 00007ffd78682118 [ 1825.112496][T11774] [ 1825.511488][T11586] hsr_slave_0: entered promiscuous mode [ 1825.512683][T11586] hsr_slave_1: entered promiscuous mode [ 1825.899239][ T8643] Bluetooth: hci4: command tx timeout [ 1825.917800][T11785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10976'. [ 1826.077189][T11785] netlink: 'syz.2.10976': attribute type 10 has an invalid length. [ 1826.082456][T11785] veth0_vlan: left allmulticast mode [ 1826.262100][T11785] team0: Device veth0_vlan failed to register rx_handler [ 1826.470029][T11792] netlink: 220 bytes leftover after parsing attributes in process `syz.0.10978'. [ 1826.470054][T11792] tc_dump_action: action bad kind [ 1826.639535][T11801] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1827.015358][T11810] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1827.104836][T11586] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1827.136964][T11586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1827.145219][T11586] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1827.207234][T11586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1827.211427][T11586] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1827.229506][T11808] netlink: 'syz.0.10981': attribute type 10 has an invalid length. [ 1827.244257][T11586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1827.265703][T11586] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1827.296396][T11586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1827.385475][T11817] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1827.520397][ T5296] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1827.794040][T11586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1827.858681][T11586] 8021q: adding VLAN 0 to HW filter on device team0 [ 1827.894019][T31686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1827.894130][T31686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1827.933655][T31686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1827.933778][T31686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1828.113456][T11839] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1828.235392][T11844] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1829.272178][T11875] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1829.422657][ T5296] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1829.537937][T11877] netlink: 'syz.4.10995': attribute type 10 has an invalid length. [ 1829.735453][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10993'. [ 1829.735552][T11869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10993'. [ 1830.630191][T11586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1830.655782][T11894] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1831.547060][T11923] syzkaller0: entered promiscuous mode [ 1831.547101][T11923] syzkaller0: entered allmulticast mode [ 1831.803116][T11936] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11005'. [ 1831.848647][T11938] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1832.004234][T11943] netlink: 'syz.0.11007': attribute type 10 has an invalid length. [ 1832.469105][T11958] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11011'. [ 1832.799898][T11969] FAULT_INJECTION: forcing a failure. [ 1832.799898][T11969] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.799963][T11969] CPU: 1 UID: 0 PID: 11969 Comm: syz.2.11013 Not tainted syzkaller #0 PREEMPT(full) [ 1832.799989][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1832.800003][T11969] Call Trace: [ 1832.800012][T11969] [ 1832.800023][T11969] dump_stack_lvl+0xe8/0x150 [ 1832.800066][T11969] should_fail_ex+0x3eb/0x540 [ 1832.800111][T11969] should_failslab+0xa8/0x100 [ 1832.800147][T11969] __kmalloc_cache_noprof+0x9e/0x600 [ 1832.800178][T11969] ? bpf_init_scev+0x54/0x460 [ 1832.800200][T11969] ? bpf_init_scev+0x54/0x460 [ 1832.800232][T11969] bpf_init_scev+0x54/0x460 [ 1832.800254][T11969] ? bpf_check+0x2d6b/0x34e0 [ 1832.800282][T11969] bpf_check+0x2fd8/0x34e0 [ 1832.800306][T11969] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1832.800354][T11969] ? ktime_get_with_offset+0x93/0x2d0 [ 1832.800386][T11969] ? __pfx_bpf_check+0x10/0x10 [ 1832.800414][T11969] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1832.800447][T11969] bpf_prog_load+0x14da/0x1c60 [ 1832.800484][T11969] ? __pfx_bpf_prog_load+0x10/0x10 [ 1832.800525][T11969] ? __might_fault+0xaf/0x130 [ 1832.800576][T11969] __sys_bpf+0xd86/0xe00 [ 1832.800608][T11969] ? __pfx___sys_bpf+0x10/0x10 [ 1832.800644][T11969] ? __fget_files+0x2a/0x420 [ 1832.800692][T11969] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1832.800726][T11969] ? ksys_write+0x242/0x270 [ 1832.800769][T11969] ? __pfx_ksys_write+0x10/0x10 [ 1832.800806][T11969] __x64_sys_bpf+0xba/0xd0 [ 1832.800844][T11969] do_syscall_64+0x166/0x520 [ 1832.800870][T11969] ? trace_irq_disable+0x3b/0x140 [ 1832.800901][T11969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.800925][T11969] ? clear_bhb_loop+0x70/0xc0 [ 1832.800953][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.800977][T11969] RIP: 0033:0x7f45425a94d9 [ 1832.800999][T11969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1832.801018][T11969] RSP: 002b:00007f454349b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1832.801043][T11969] RAX: ffffffffffffffda RBX: 00007f4542825fa0 RCX: 00007f45425a94d9 [ 1832.801060][T11969] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 1832.801075][T11969] RBP: 00007f454349b090 R08: 0000000000000000 R09: 0000000000000000 [ 1832.801090][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.801104][T11969] R13: 00007f4542826038 R14: 00007f4542825fa0 R15: 00007ffc07f136a8 [ 1832.801142][T11969] [ 1835.369496][T11586] veth0_vlan: entered promiscuous mode [ 1835.396044][T11586] veth1_vlan: entered promiscuous mode [ 1835.482678][T11586] veth0_macvtap: entered promiscuous mode [ 1835.501791][T11586] veth1_macvtap: entered promiscuous mode [ 1835.533935][T11586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1835.554587][T11586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1835.572388][T10901] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.572432][T10901] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.572466][T10901] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.630448][ T7078] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1835.725181][T11997] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1835.933347][T10901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.933371][T10901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.111918][T19317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1836.111943][T19317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1836.266153][T12012] netlink: 'syz.4.11021': attribute type 20 has an invalid length. [ 1836.597569][T12022] netlink: 'syz.4.11022': attribute type 15 has an invalid length. [ 1836.683985][T20446] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 10177 - 0 [ 1836.688577][T20446] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 10177 - 0 [ 1836.694105][T20446] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 10177 - 0 [ 1836.694268][T20446] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 10177 - 0 [ 1837.079969][T12040] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11026'. [ 1837.090496][T12032] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.10917'. [ 1837.327776][T12045] netlink: 'syz.7.11025': attribute type 10 has an invalid length. [ 1837.972342][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1838.092269][T12072] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11034'. [ 1839.852406][T12109] FAULT_INJECTION: forcing a failure. [ 1839.852406][T12109] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.852440][T12109] CPU: 1 UID: 0 PID: 12109 Comm: syz.4.11037 Not tainted syzkaller #0 PREEMPT(full) [ 1839.852466][T12109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1839.852480][T12109] Call Trace: [ 1839.852489][T12109] [ 1839.852500][T12109] dump_stack_lvl+0xe8/0x150 [ 1839.852542][T12109] should_fail_ex+0x3eb/0x540 [ 1839.852577][T12109] should_failslab+0xa8/0x100 [ 1839.852614][T12109] __kvmalloc_node_noprof+0x171/0x820 [ 1839.852646][T12109] ? lockdep_hardirqs_on+0x7b/0x110 [ 1839.852676][T12109] ? bpf_compute_loops+0x103/0x3e80 [ 1839.852701][T12109] ? bpf_compute_loops+0x103/0x3e80 [ 1839.852727][T12109] ? bpf_compute_idoms+0x18b5/0x1940 [ 1839.852757][T12109] bpf_compute_loops+0x103/0x3e80 [ 1839.852782][T12109] ? bpf_compute_idoms+0x18b5/0x1940 [ 1839.852838][T12109] bpf_check+0x2ce7/0x34e0 [ 1839.852882][T12109] ? ktime_get_with_offset+0x93/0x2d0 [ 1839.852914][T12109] ? ktime_get_with_offset+0x93/0x2d0 [ 1839.852947][T12109] ? __pfx_bpf_check+0x10/0x10 [ 1839.852976][T12109] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1839.853012][T12109] bpf_prog_load+0x14da/0x1c60 [ 1839.853054][T12109] ? __pfx_bpf_prog_load+0x10/0x10 [ 1839.853109][T12109] ? __might_fault+0xaf/0x130 [ 1839.853145][T12109] __sys_bpf+0xd86/0xe00 [ 1839.853183][T12109] ? __pfx___sys_bpf+0x10/0x10 [ 1839.853223][T12109] ? __fget_files+0x2a/0x420 [ 1839.853278][T12109] ? ksys_write+0x242/0x270 [ 1839.853312][T12109] ? __pfx_ksys_write+0x10/0x10 [ 1839.853352][T12109] __x64_sys_bpf+0xba/0xd0 [ 1839.853391][T12109] do_syscall_64+0x166/0x520 [ 1839.853416][T12109] ? trace_irq_disable+0x3b/0x140 [ 1839.853447][T12109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.853470][T12109] ? clear_bhb_loop+0x70/0xc0 [ 1839.853500][T12109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.853523][T12109] RIP: 0033:0x7f0d98da94d9 [ 1839.853545][T12109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.853564][T12109] RSP: 002b:00007f0d99c51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1839.853589][T12109] RAX: ffffffffffffffda RBX: 00007f0d99025fa0 RCX: 00007f0d98da94d9 [ 1839.853606][T12109] RDX: 0000000000000090 RSI: 00002000000016c0 RDI: 0000000000000005 [ 1839.853621][T12109] RBP: 00007f0d99c51090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.853636][T12109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.853650][T12109] R13: 00007f0d99026038 R14: 00007f0d99025fa0 R15: 00007ffceabad338 [ 1839.853693][T12109] [ 1840.234278][T12123] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11041'. [ 1840.965824][T12138] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11045'. [ 1841.535889][T12154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11049'. [ 1841.535978][T12154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11049'. [ 1841.695821][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11050'. [ 1841.710067][T12158] netlink: 'syz.8.11050': attribute type 12 has an invalid length. [ 1841.710145][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11050'. [ 1842.121826][T12167] __nla_validate_parse: 5 callbacks suppressed [ 1842.121846][T12167] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11053'. [ 1842.124301][T12167] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11053'. [ 1842.274246][T12171] rxe_eth0 speed is unknown, defaulting to 1000 [ 1842.756728][T12192] netlink: 'syz.7.11062': attribute type 1 has an invalid length. [ 1843.073110][T12171] lo speed is unknown, defaulting to 1000 [ 1845.459559][T12276] netlink: 'syz.7.11083': attribute type 2 has an invalid length. [ 1845.509849][T12277] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11082'. [ 1846.054742][T12296] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11086'. [ 1846.054774][T12296] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11086'. [ 1846.272814][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11088'. [ 1846.439450][T12305] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11088'. [ 1846.484084][T12314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11092'. [ 1847.160450][T12333] netlink: 96 bytes leftover after parsing attributes in process `syz.0.11098'. [ 1847.397011][T12331] netlink: 'syz.4.11097': attribute type 10 has an invalid length. [ 1847.606687][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11102'. [ 1847.721469][T12356] FAULT_INJECTION: forcing a failure. [ 1847.721469][T12356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1847.721509][T12356] CPU: 0 UID: 0 PID: 12356 Comm: syz.7.11106 Not tainted syzkaller #0 PREEMPT(full) [ 1847.721534][T12356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1847.721549][T12356] Call Trace: [ 1847.721558][T12356] [ 1847.721568][T12356] dump_stack_lvl+0xe8/0x150 [ 1847.721610][T12356] should_fail_ex+0x3eb/0x540 [ 1847.721642][T12356] _copy_to_user+0x31/0xb0 [ 1847.721673][T12356] bpf_verifier_vlog+0x3a2/0x900 [ 1847.721715][T12356] __btf_verifier_log+0xe2/0x140 [ 1847.721753][T12356] ? __pfx___btf_verifier_log+0x10/0x10 [ 1847.721801][T12356] ? btf_parse_hdr+0x1da/0x810 [ 1847.721833][T12356] btf_parse_hdr+0x313/0x810 [ 1847.721866][T12356] btf_new_fd+0x312/0x8f0 [ 1847.721894][T12356] __sys_bpf+0xda7/0xe00 [ 1847.721926][T12356] ? __pfx___sys_bpf+0x10/0x10 [ 1847.721966][T12356] ? __fget_files+0x2a/0x420 [ 1847.722012][T12356] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1847.722044][T12356] ? ksys_write+0x242/0x270 [ 1847.722077][T12356] ? __pfx_ksys_write+0x10/0x10 [ 1847.722112][T12356] __x64_sys_bpf+0xba/0xd0 [ 1847.722149][T12356] do_syscall_64+0x166/0x520 [ 1847.722174][T12356] ? trace_irq_disable+0x3b/0x140 [ 1847.722204][T12356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.722229][T12356] ? clear_bhb_loop+0x70/0xc0 [ 1847.722257][T12356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.722279][T12356] RIP: 0033:0x7f6c261a94d9 [ 1847.722301][T12356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.722321][T12356] RSP: 002b:00007f6c270e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1847.722346][T12356] RAX: ffffffffffffffda RBX: 00007f6c26425fa0 RCX: 00007f6c261a94d9 [ 1847.722363][T12356] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012 [ 1847.722378][T12356] RBP: 00007f6c270e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1847.722392][T12356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1847.722406][T12356] R13: 00007f6c26426038 R14: 00007f6c26425fa0 R15: 00007ffd78682118 [ 1847.722440][T12356] [ 1847.972257][T12360] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 1848.694071][T12376] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11112'. [ 1848.757544][T12376] netlink: 'syz.2.11112': attribute type 3 has an invalid length. [ 1848.774473][T12381] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11114'. [ 1848.912584][T12383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11113'. [ 1849.312270][T12395] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1849.558273][T12406] netlink: 'syz.0.11121': attribute type 41 has an invalid length. [ 1849.558302][T12406] netlink: 'syz.0.11121': attribute type 17 has an invalid length. [ 1850.447577][T12426] netlink: 236 bytes leftover after parsing attributes in process `syz.4.11126'. [ 1851.177002][T12449] FAULT_INJECTION: forcing a failure. [ 1851.177002][T12449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1851.177037][T12449] CPU: 0 UID: 0 PID: 12449 Comm: syz.8.11131 Not tainted syzkaller #0 PREEMPT(full) [ 1851.177063][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1851.177077][T12449] Call Trace: [ 1851.177087][T12449] [ 1851.177107][T12449] dump_stack_lvl+0xe8/0x150 [ 1851.177150][T12449] should_fail_ex+0x3eb/0x540 [ 1851.177186][T12449] prepare_alloc_pages+0x21e/0x5f0 [ 1851.177227][T12449] __alloc_frozen_pages_noprof+0x17c/0x410 [ 1851.177265][T12449] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1851.177295][T12449] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 1851.177332][T12449] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1851.177370][T12449] ? perf_trace_lock+0x100/0x410 [ 1851.177407][T12449] __alloc_pages_noprof+0x10/0x100 [ 1851.177440][T12449] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 1851.177486][T12449] ? alloc_pages_noprof+0x140/0x2b0 [ 1851.177516][T12449] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1851.177555][T12449] alloc_vmap_area+0xd10/0x1410 [ 1851.177602][T12449] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1851.177622][T12449] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1851.177654][T12449] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1851.177683][T12449] ? __get_vm_area_node+0x155/0x2f0 [ 1851.177715][T12449] __get_vm_area_node+0x200/0x2f0 [ 1851.177752][T12449] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1851.177779][T12449] ? bpf_check+0x14ae/0x34e0 [ 1851.177854][T12449] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1851.177880][T12449] ? __kasan_kmalloc+0x93/0xb0 [ 1851.177914][T12449] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1851.177944][T12449] ? __kmalloc_cache_noprof+0x148/0x600 [ 1851.177970][T12449] ? bpf_diag_init+0x87/0x140 [ 1851.178001][T12449] ? bpf_diag_init+0x87/0x140 [ 1851.178036][T12449] ? bpf_check+0x14ae/0x34e0 [ 1851.178058][T12449] __vmalloc_noprof+0xd2/0x120 [ 1851.178084][T12449] ? bpf_check+0x14ae/0x34e0 [ 1851.178119][T12449] bpf_check+0x14ae/0x34e0 [ 1851.178144][T12449] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1851.178198][T12449] ? ktime_get_with_offset+0x93/0x2d0 [ 1851.178232][T12449] ? __pfx_bpf_check+0x10/0x10 [ 1851.178261][T12449] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1851.178298][T12449] bpf_prog_load+0x14da/0x1c60 [ 1851.178340][T12449] ? __pfx_bpf_prog_load+0x10/0x10 [ 1851.178387][T12449] ? __might_fault+0xaf/0x130 [ 1851.178423][T12449] __sys_bpf+0xd86/0xe00 [ 1851.178460][T12449] ? __pfx___sys_bpf+0x10/0x10 [ 1851.178501][T12449] ? __fget_files+0x2a/0x420 [ 1851.178557][T12449] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1851.178590][T12449] ? ksys_write+0x242/0x270 [ 1851.178625][T12449] ? __pfx_ksys_write+0x10/0x10 [ 1851.178663][T12449] __x64_sys_bpf+0xba/0xd0 [ 1851.178702][T12449] do_syscall_64+0x166/0x520 [ 1851.178729][T12449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.178753][T12449] ? clear_bhb_loop+0x70/0xc0 [ 1851.178783][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.178807][T12449] RIP: 0033:0x7f62319a94d9 [ 1851.178829][T12449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.178849][T12449] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1851.178873][T12449] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1851.178890][T12449] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1851.178905][T12449] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.178920][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1851.178933][T12449] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1851.178977][T12449] [ 1851.317351][T12449] syz.8.11131: vmalloc error: size 600, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1851.317569][T12449] CPU: 1 UID: 0 PID: 12449 Comm: syz.8.11131 Not tainted syzkaller #0 PREEMPT(full) [ 1851.317629][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1851.317670][T12449] Call Trace: [ 1851.317692][T12449] [ 1851.317716][T12449] dump_stack_lvl+0xe8/0x150 [ 1851.317829][T12449] warn_alloc+0x24d/0x270 [ 1851.317915][T12449] ? lockdep_hardirqs_on+0x7b/0x110 [ 1851.317999][T12449] ? __pfx_warn_alloc+0x10/0x10 [ 1851.318072][T12449] ? kfree+0x1c5/0x650 [ 1851.318166][T12449] ? __get_vm_area_node+0x219/0x2f0 [ 1851.318278][T12449] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1851.318497][T12449] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1851.318565][T12449] ? __kasan_kmalloc+0x93/0xb0 [ 1851.318667][T12449] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1851.318761][T12449] ? __kmalloc_cache_noprof+0x148/0x600 [ 1851.318831][T12449] ? bpf_diag_init+0x87/0x140 [ 1851.318913][T12449] ? bpf_diag_init+0x87/0x140 [ 1851.318997][T12449] ? bpf_check+0x14ae/0x34e0 [ 1851.319056][T12449] __vmalloc_noprof+0xd2/0x120 [ 1851.319113][T12449] ? bpf_check+0x14ae/0x34e0 [ 1851.319193][T12449] bpf_check+0x14ae/0x34e0 [ 1851.319255][T12449] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1851.319393][T12449] ? ktime_get_with_offset+0x93/0x2d0 [ 1851.319476][T12449] ? __pfx_bpf_check+0x10/0x10 [ 1851.319550][T12449] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1851.319660][T12449] bpf_prog_load+0x14da/0x1c60 [ 1851.319773][T12449] ? __pfx_bpf_prog_load+0x10/0x10 [ 1851.319893][T12449] ? __might_fault+0xaf/0x130 [ 1851.319963][T12449] __sys_bpf+0xd86/0xe00 [ 1851.319997][T12449] ? __pfx___sys_bpf+0x10/0x10 [ 1851.320036][T12449] ? __fget_files+0x2a/0x420 [ 1851.320088][T12449] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1851.320121][T12449] ? ksys_write+0x242/0x270 [ 1851.320154][T12449] ? __pfx_ksys_write+0x10/0x10 [ 1851.320191][T12449] __x64_sys_bpf+0xba/0xd0 [ 1851.320227][T12449] do_syscall_64+0x166/0x520 [ 1851.320255][T12449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.320279][T12449] ? clear_bhb_loop+0x70/0xc0 [ 1851.320310][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1851.320333][T12449] RIP: 0033:0x7f62319a94d9 [ 1851.320355][T12449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.320375][T12449] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1851.320398][T12449] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1851.320415][T12449] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1851.320430][T12449] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.320444][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1851.320457][T12449] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1851.320507][T12449] [ 1851.320516][T12449] Mem-Info: [ 1851.320526][T12449] active_anon:13325 inactive_anon:0 isolated_anon:0 [ 1851.320526][T12449] active_file:90 inactive_file:62981 isolated_file:0 [ 1851.320526][T12449] unevictable:0 dirty:178 writeback:0 [ 1851.320526][T12449] slab_reclaimable:7649 slab_unreclaimable:109716 [ 1851.320526][T12449] mapped:30772 shmem:555 pagetables:3884 [ 1851.320526][T12449] sec_pagetables:0 bounce:0 [ 1851.320526][T12449] kernel_misc_reclaimable:0 [ 1851.320526][T12449] free:1276747 free_pcp:9431 free_cma:0 [ 1851.320608][T12449] Node 0 active_anon:53300kB inactive_anon:0kB active_file:360kB inactive_file:251724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123088kB dirty:712kB writeback:0kB shmem:2220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14012kB pagetables:15400kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1851.320671][T12449] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1851.320728][T12449] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.320793][T12449] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1851.320838][T12449] Node 0 DMA32 free:1157892kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:53300kB inactive_anon:0kB active_file:360kB inactive_file:251724kB unevictable:0kB writepending:712kB zspages:0kB present:3129332kB managed:2522912kB mlocked:0kB bounce:0kB free_pcp:37708kB local_pcp:17900kB free_cma:0kB [ 1851.320904][T12449] lowmem_reserve[]: 0 0 1 1 1 [ 1851.320946][T12449] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1396kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1851.321097][T12449] lowmem_reserve[]: 0 0 0 0 0 [ 1851.321214][T12449] Node 1 Normal free:3933736kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1851.321389][T12449] lowmem_reserve[]: 0 0 0 0 0 [ 1851.321488][T12449] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1851.321856][T12449] Node 0 DMA32: 2069*4kB (UME) 2892*8kB (UME) 1749*16kB (UM) 1608*32kB (UME) 740*64kB (UME) 583*128kB (UME) 494*256kB (UME) 258*512kB (UME) 113*1024kB (UME) 9*2048kB (UE) 130*4096kB (UM) = 1158020kB [ 1851.393585][T12449] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1851.393862][T12449] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 5*32kB (UM) 8*64kB (UM) 4*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3933736kB [ 1851.394335][T12449] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1851.394384][T12449] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1851.394425][T12449] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1851.394467][T12449] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1851.394512][T12449] 63622 total pagecache pages [ 1851.394540][T12449] 0 pages in swap cache [ 1851.394562][T12449] Free swap = 124996kB [ 1851.394614][T12449] Total swap = 124996kB [ 1851.394645][T12449] 2097051 pages RAM [ 1851.394674][T12449] 0 pages HighMem/MovableOnly [ 1851.394703][T12449] 434358 pages reserved [ 1851.394732][T12449] 0 pages cma reserved [ 1852.529637][T12460] netlink: 'syz.7.11133': attribute type 4 has an invalid length. [ 1852.853486][T12477] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1853.346455][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.346524][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.701475][T12506] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1854.877461][T12514] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1855.539044][T12524] FAULT_INJECTION: forcing a failure. [ 1855.539044][T12524] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.539076][T12524] CPU: 1 UID: 0 PID: 12524 Comm: syz.8.11149 Not tainted syzkaller #0 PREEMPT(full) [ 1855.539107][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1855.539120][T12524] Call Trace: [ 1855.539128][T12524] [ 1855.539137][T12524] dump_stack_lvl+0xe8/0x150 [ 1855.539177][T12524] should_fail_ex+0x3eb/0x540 [ 1855.539208][T12524] should_failslab+0xa8/0x100 [ 1855.539243][T12524] __kmalloc_cache_noprof+0x9e/0x600 [ 1855.539272][T12524] ? bpf_init_scev+0x54/0x460 [ 1855.539294][T12524] ? bpf_init_scev+0x54/0x460 [ 1855.539323][T12524] bpf_init_scev+0x54/0x460 [ 1855.539344][T12524] ? bpf_check+0x2d6b/0x34e0 [ 1855.539370][T12524] bpf_check+0x2fd8/0x34e0 [ 1855.539405][T12524] ? ktime_get_with_offset+0x93/0x2d0 [ 1855.539434][T12524] ? ktime_get_with_offset+0x93/0x2d0 [ 1855.539464][T12524] ? __pfx_bpf_check+0x10/0x10 [ 1855.539509][T12524] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1855.539543][T12524] bpf_prog_load+0x14da/0x1c60 [ 1855.539580][T12524] ? __pfx_bpf_prog_load+0x10/0x10 [ 1855.539622][T12524] ? __might_fault+0xaf/0x130 [ 1855.539654][T12524] __sys_bpf+0xd86/0xe00 [ 1855.539685][T12524] ? __pfx___sys_bpf+0x10/0x10 [ 1855.539721][T12524] ? __fget_files+0x2a/0x420 [ 1855.539768][T12524] ? ksys_write+0x242/0x270 [ 1855.539801][T12524] ? __pfx_ksys_write+0x10/0x10 [ 1855.539837][T12524] __x64_sys_bpf+0xba/0xd0 [ 1855.539873][T12524] do_syscall_64+0x166/0x520 [ 1855.539899][T12524] ? trace_irq_disable+0x3b/0x140 [ 1855.539930][T12524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.539952][T12524] ? clear_bhb_loop+0x70/0xc0 [ 1855.539981][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.540003][T12524] RIP: 0033:0x7f62319a94d9 [ 1855.540024][T12524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1855.540044][T12524] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1855.540068][T12524] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1855.540084][T12524] RDX: 0000000000000094 RSI: 0000200000003e80 RDI: 0000000000000005 [ 1855.540109][T12524] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.540124][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1855.540138][T12524] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1855.540173][T12524] [ 1856.030855][T12532] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11151'. [ 1856.107007][T12537] netlink: 128 bytes leftover after parsing attributes in process `syz.7.11152'. [ 1856.367987][T12548] netlink: 256 bytes leftover after parsing attributes in process `syz.2.11153'. [ 1856.399441][T12546] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1856.709683][T12560] netlink: 'syz.8.11156': attribute type 2 has an invalid length. [ 1856.780203][T12565] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1857.232743][T12572] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11163'. [ 1857.570649][T12589] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1857.622744][T12594] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11173'. [ 1857.810782][T12605] netlink: 72 bytes leftover after parsing attributes in process `syz.8.11173'. [ 1858.207144][T12613] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11176'. [ 1858.614880][T12623] netlink: 'syz.2.11181': attribute type 1 has an invalid length. [ 1858.751412][T12629] FAULT_INJECTION: forcing a failure. [ 1858.751412][T12629] name failslab, interval 1, probability 0, space 0, times 0 [ 1858.751439][T12629] CPU: 1 UID: 0 PID: 12629 Comm: syz.0.11184 Not tainted syzkaller #0 PREEMPT(full) [ 1858.751458][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1858.751469][T12629] Call Trace: [ 1858.751476][T12629] [ 1858.751483][T12629] dump_stack_lvl+0xe8/0x150 [ 1858.751515][T12629] should_fail_ex+0x3eb/0x540 [ 1858.751539][T12629] should_failslab+0xa8/0x100 [ 1858.751566][T12629] __kvmalloc_node_noprof+0x171/0x820 [ 1858.751592][T12629] ? bpf_compute_scc+0xd2/0xdb0 [ 1858.751615][T12629] ? bpf_compute_scc+0xd2/0xdb0 [ 1858.751644][T12629] bpf_compute_scc+0xd2/0xdb0 [ 1858.751667][T12629] ? sort_subprogs_topo+0xe5f/0x1130 [ 1858.751703][T12629] bpf_check+0x2c70/0x34e0 [ 1858.751721][T12629] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1858.751769][T12629] ? ktime_get_with_offset+0x93/0x2d0 [ 1858.751812][T12629] ? __pfx_bpf_check+0x10/0x10 [ 1858.751842][T12629] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1858.751871][T12629] bpf_prog_load+0x14da/0x1c60 [ 1858.751897][T12629] ? __pfx_bpf_prog_load+0x10/0x10 [ 1858.751925][T12629] ? __might_fault+0xaf/0x130 [ 1858.751947][T12629] __sys_bpf+0xd86/0xe00 [ 1858.751968][T12629] ? __pfx___sys_bpf+0x10/0x10 [ 1858.751986][T12629] ? __pfx_trace_call_bpf+0x10/0x10 [ 1858.752023][T12629] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1858.752046][T12629] ? ksys_write+0x242/0x270 [ 1858.752070][T12629] ? __pfx_ksys_write+0x10/0x10 [ 1858.752095][T12629] __x64_sys_bpf+0xba/0xd0 [ 1858.752121][T12629] do_syscall_64+0x166/0x520 [ 1858.752140][T12629] ? trace_irq_disable+0x3b/0x140 [ 1858.752161][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.752177][T12629] ? clear_bhb_loop+0x70/0xc0 [ 1858.752197][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.752213][T12629] RIP: 0033:0x7f7190fa94d9 [ 1858.752236][T12629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1858.752265][T12629] RSP: 002b:00007f7191eab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1858.752289][T12629] RAX: ffffffffffffffda RBX: 00007f7191225fa0 RCX: 00007f7190fa94d9 [ 1858.752306][T12629] RDX: 0000000000000094 RSI: 0000200000001140 RDI: 0000000000000005 [ 1858.752321][T12629] RBP: 00007f7191eab090 R08: 0000000000000000 R09: 0000000000000000 [ 1858.752335][T12629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1858.752348][T12629] R13: 00007f7191226038 R14: 00007f7191225fa0 R15: 00007fff0c1c9f68 [ 1858.752387][T12629] [ 1859.141764][T12635] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1859.700533][T12646] netlink: 'syz.7.11192': attribute type 21 has an invalid length. [ 1859.700563][T12646] netlink: 'syz.7.11192': attribute type 4 has an invalid length. [ 1859.700578][T12646] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11192'. [ 1861.481499][T12665] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1862.058270][T12678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.180088][T12678] bridge_slave_0 (unregistering): left allmulticast mode [ 1862.180140][T12678] bridge_slave_0 (unregistering): left promiscuous mode [ 1862.180619][T12678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1862.377534][T12680] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11202'. [ 1862.813177][T12697] netlink: 'syz.0.11211': attribute type 10 has an invalid length. [ 1862.816602][T12697] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1863.049641][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11213'. [ 1863.049740][T12701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11213'. [ 1863.168897][T12707] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1863.176450][T12709] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1863.387056][T12715] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1863.653091][T12727] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1865.746468][T12748] netlink: zone id is out of range [ 1865.746607][T12748] netlink: zone id is out of range [ 1865.746618][T12748] netlink: zone id is out of range [ 1865.746628][T12748] netlink: zone id is out of range [ 1865.746639][T12748] netlink: zone id is out of range [ 1865.746650][T12748] netlink: zone id is out of range [ 1865.806478][T12756] netlink: 260 bytes leftover after parsing attributes in process `syz.8.11233'. [ 1865.926161][T12760] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11234'. [ 1865.935771][ T30] audit: type=1107 audit(1794735617.062:94): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1866.410610][T12774] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11237'. [ 1866.415373][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11235'. [ 1866.474555][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11237'. [ 1866.704878][T12779] tap0: tun_chr_ioctl cmd 1074025677 [ 1866.705492][T12779] tap0: linktype set to 0 [ 1866.736799][T12779] tap0: tun_chr_ioctl cmd 1074812118 [ 1866.746302][T12779] netlink: 'syz.2.11239': attribute type 10 has an invalid length. [ 1867.065935][T12804] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11247'. [ 1868.056640][T12819] netlink: 'syz.7.11252': attribute type 10 has an invalid length. [ 1868.116518][T12829] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11255'. [ 1868.453978][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11253'. [ 1868.712565][T12843] netlink: 'syz.8.11259': attribute type 2 has an invalid length. [ 1868.712616][T12843] netlink: 'syz.8.11259': attribute type 8 has an invalid length. [ 1868.712659][T12843] netlink: 132 bytes leftover after parsing attributes in process `syz.8.11259'. [ 1868.766977][T12843] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11259'. [ 1869.453529][T12860] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11265'. [ 1869.942401][T12869] netlink: 'syz.0.11267': attribute type 10 has an invalid length. [ 1870.014752][T12878] net_ratelimit: 21 callbacks suppressed [ 1870.014792][T12878] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1870.742646][T12899] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11279'. [ 1871.791704][T12928] FAULT_INJECTION: forcing a failure. [ 1871.791704][T12928] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.791751][T12928] CPU: 0 UID: 0 PID: 12928 Comm: syz.7.11286 Not tainted syzkaller #0 PREEMPT(full) [ 1871.791776][T12928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1871.791790][T12928] Call Trace: [ 1871.791799][T12928] [ 1871.791809][T12928] dump_stack_lvl+0xe8/0x150 [ 1871.791855][T12928] should_fail_ex+0x3eb/0x540 [ 1871.791887][T12928] should_failslab+0xa8/0x100 [ 1871.791923][T12928] __kvmalloc_node_noprof+0x171/0x820 [ 1871.791957][T12928] ? __kvmalloc_node_noprof+0x340/0x820 [ 1871.791986][T12928] ? analyze_subprog+0xbf4/0xb150 [ 1871.792018][T12928] ? analyze_subprog+0xbf4/0xb150 [ 1871.792055][T12928] analyze_subprog+0xbf4/0xb150 [ 1871.792094][T12928] ? is_bpf_text_address+0x292/0x2b0 [ 1871.792118][T12928] ? is_bpf_text_address+0x26/0x2b0 [ 1871.792149][T12928] ? __kernel_text_address+0xd/0x30 [ 1871.792178][T12928] ? unwind_get_return_address+0x4d/0x90 [ 1871.792211][T12928] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1871.792273][T12928] ? __pfx_analyze_subprog+0x10/0x10 [ 1871.792303][T12928] ? kasan_save_track+0x4f/0x80 [ 1871.792331][T12928] ? kasan_save_track+0x3e/0x80 [ 1871.792360][T12928] ? __kasan_kmalloc+0x93/0xb0 [ 1871.792390][T12928] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1871.792420][T12928] ? call_instance+0x263/0x560 [ 1871.792447][T12928] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 1871.792477][T12928] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 1871.792519][T12928] ? bpf_check+0x2d0b/0x34e0 [ 1871.792540][T12928] ? bpf_prog_load+0x14da/0x1c60 [ 1871.792559][T12928] ? __sys_bpf+0xd86/0xe00 [ 1871.792577][T12928] ? __x64_sys_bpf+0xba/0xd0 [ 1871.792605][T12928] ? do_syscall_64+0x166/0x520 [ 1871.792629][T12928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.792690][T12928] ? call_instance+0x263/0x560 [ 1871.792717][T12928] ? rcu_is_watching+0x16/0xb0 [ 1871.792749][T12928] ? call_instance+0x263/0x560 [ 1871.792774][T12928] ? trace_kmalloc+0x2a/0xf0 [ 1871.792802][T12928] ? call_instance+0x263/0x560 [ 1871.792828][T12928] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1871.792866][T12928] ? __kvmalloc_node_noprof+0x340/0x820 [ 1871.792894][T12928] ? call_instance+0x263/0x560 [ 1871.792920][T12928] ? call_instance+0x263/0x560 [ 1871.792959][T12928] ? call_instance+0x42e/0x560 [ 1871.792994][T12928] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 1871.793040][T12928] ? bpf_compute_live_registers+0x142/0x1df0 [ 1871.793069][T12928] ? rcu_is_watching+0x16/0xb0 [ 1871.793103][T12928] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1871.793139][T12928] ? __kvmalloc_node_noprof+0x340/0x820 [ 1871.793167][T12928] ? bpf_compute_live_registers+0x142/0x1df0 [ 1871.793195][T12928] ? bpf_compute_live_registers+0x142/0x1df0 [ 1871.793232][T12928] bpf_compute_live_registers+0x10b0/0x1df0 [ 1871.793285][T12928] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1871.793326][T12928] bpf_check+0x2d0b/0x34e0 [ 1871.793348][T12928] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1871.793394][T12928] ? ktime_get_with_offset+0x93/0x2d0 [ 1871.793425][T12928] ? __pfx_bpf_check+0x10/0x10 [ 1871.793450][T12928] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1871.793482][T12928] bpf_prog_load+0x14da/0x1c60 [ 1871.793516][T12928] ? __pfx_bpf_prog_load+0x10/0x10 [ 1871.793555][T12928] ? __might_fault+0xaf/0x130 [ 1871.793585][T12928] __sys_bpf+0xd86/0xe00 [ 1871.793614][T12928] ? __pfx___sys_bpf+0x10/0x10 [ 1871.793647][T12928] ? __fget_files+0x2a/0x420 [ 1871.793691][T12928] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1871.793721][T12928] ? ksys_write+0x242/0x270 [ 1871.793753][T12928] ? __pfx_ksys_write+0x10/0x10 [ 1871.793787][T12928] __x64_sys_bpf+0xba/0xd0 [ 1871.793821][T12928] do_syscall_64+0x166/0x520 [ 1871.793852][T12928] ? trace_irq_disable+0x3b/0x140 [ 1871.793880][T12928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.793902][T12928] ? clear_bhb_loop+0x70/0xc0 [ 1871.793929][T12928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.793951][T12928] RIP: 0033:0x7f6c261a94d9 [ 1871.793971][T12928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.793989][T12928] RSP: 002b:00007f6c270e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1871.794011][T12928] RAX: ffffffffffffffda RBX: 00007f6c26425fa0 RCX: 00007f6c261a94d9 [ 1871.794027][T12928] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 1871.794041][T12928] RBP: 00007f6c270e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.794054][T12928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1871.794067][T12928] R13: 00007f6c26426038 R14: 00007f6c26425fa0 R15: 00007ffd78682118 [ 1871.794101][T12928] [ 1872.941814][T12952] netlink: 'syz.4.11293': attribute type 2 has an invalid length. [ 1872.941848][T12952] netlink: 51 bytes leftover after parsing attributes in process `syz.4.11293'. [ 1873.225416][T12956] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11296'. [ 1873.440376][T12957] netlink: 608 bytes leftover after parsing attributes in process `syz.0.11296'. [ 1875.064123][T12949] team0: Port device geneve0 removed [ 1875.152350][T12966] netlink: 'syz.7.11298': attribute type 1 has an invalid length. [ 1875.152379][T12966] netlink: 92 bytes leftover after parsing attributes in process `syz.7.11298'. [ 1875.631117][T12980] FAULT_INJECTION: forcing a failure. [ 1875.631117][T12980] name failslab, interval 1, probability 0, space 0, times 0 [ 1875.631152][T12980] CPU: 0 UID: 0 PID: 12980 Comm: syz.8.11304 Not tainted syzkaller #0 PREEMPT(full) [ 1875.631178][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1875.631193][T12980] Call Trace: [ 1875.631202][T12980] [ 1875.631214][T12980] dump_stack_lvl+0xe8/0x150 [ 1875.631259][T12980] should_fail_ex+0x3eb/0x540 [ 1875.631296][T12980] should_failslab+0xa8/0x100 [ 1875.631331][T12980] ? skb_clone+0x212/0x3a0 [ 1875.631359][T12980] kmem_cache_alloc_noprof+0x9c/0x600 [ 1875.631395][T12980] ? skb_clone+0x212/0x3a0 [ 1875.631432][T12980] skb_clone+0x212/0x3a0 [ 1875.631465][T12980] __netlink_deliver_tap+0x355/0x6e0 [ 1875.631515][T12980] ? netlink_deliver_tap+0x2e/0x1b0 [ 1875.631551][T12980] netlink_deliver_tap+0x19c/0x1b0 [ 1875.631588][T12980] netlink_unicast+0x8c1/0xa80 [ 1875.631644][T12980] netlink_sendmsg+0x7f0/0xb20 [ 1875.631689][T12980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1875.631729][T12980] ? aa_sock_msg_perm+0x144/0x210 [ 1875.631775][T12980] ? apparmor_socket_sendmsg+0x98/0x360 [ 1875.631811][T12980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1875.631844][T12980] sock_sendmsg_nosec+0x14e/0x190 [ 1875.631908][T12980] ____sys_sendmsg+0x54e/0x850 [ 1875.631944][T12980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1875.631985][T12980] ? import_iovec+0x73/0xa0 [ 1875.632020][T12980] ___sys_sendmsg+0x2a5/0x360 [ 1875.632044][T12980] ? __lock_acquire+0x747/0x2de0 [ 1875.632082][T12980] ? __pfx____sys_sendmsg+0x10/0x10 [ 1875.632142][T12980] ? __fget_files+0x2a/0x420 [ 1875.632190][T12980] ? __fget_files+0x3a2/0x420 [ 1875.632217][T12980] ? __fget_files+0x2a/0x420 [ 1875.632260][T12980] __x64_sys_sendmsg+0x1b1/0x290 [ 1875.632291][T12980] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1875.632351][T12980] do_syscall_64+0x166/0x520 [ 1875.632378][T12980] ? trace_irq_disable+0x3b/0x140 [ 1875.632410][T12980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.632435][T12980] ? clear_bhb_loop+0x70/0xc0 [ 1875.632467][T12980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.632492][T12980] RIP: 0033:0x7f62319a94d9 [ 1875.632515][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.632535][T12980] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1875.632560][T12980] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1875.632578][T12980] RDX: 0000000000000004 RSI: 0000200000000200 RDI: 0000000000000003 [ 1875.632593][T12980] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.632608][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.632622][T12980] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1875.632666][T12980] [ 1877.366518][T13024] FAULT_INJECTION: forcing a failure. [ 1877.366518][T13024] name failslab, interval 1, probability 0, space 0, times 0 [ 1877.366553][T13024] CPU: 0 UID: 0 PID: 13024 Comm: syz.8.11317 Not tainted syzkaller #0 PREEMPT(full) [ 1877.366577][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1877.366591][T13024] Call Trace: [ 1877.366600][T13024] [ 1877.366610][T13024] dump_stack_lvl+0xe8/0x150 [ 1877.366652][T13024] should_fail_ex+0x3eb/0x540 [ 1877.366685][T13024] should_failslab+0xa8/0x100 [ 1877.366722][T13024] __kvmalloc_node_noprof+0x171/0x820 [ 1877.366762][T13024] ? bpf_compute_idoms+0xb6a/0x1940 [ 1877.366786][T13024] ? bpf_compute_idoms+0xb6a/0x1940 [ 1877.366819][T13024] bpf_compute_idoms+0xb6a/0x1940 [ 1877.366857][T13024] ? prepare_subprog_args+0x412/0x450 [ 1877.366895][T13024] bpf_check+0x2cc3/0x34e0 [ 1877.366919][T13024] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1877.366969][T13024] ? ktime_get_with_offset+0x93/0x2d0 [ 1877.367001][T13024] ? __pfx_bpf_check+0x10/0x10 [ 1877.367030][T13024] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1877.367065][T13024] bpf_prog_load+0x14da/0x1c60 [ 1877.367110][T13024] ? __pfx_bpf_prog_load+0x10/0x10 [ 1877.367149][T13024] ? __might_fault+0xaf/0x130 [ 1877.367180][T13024] __sys_bpf+0xd86/0xe00 [ 1877.367212][T13024] ? __pfx___sys_bpf+0x10/0x10 [ 1877.367247][T13024] ? __fget_files+0x2a/0x420 [ 1877.367295][T13024] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1877.367328][T13024] ? ksys_write+0x242/0x270 [ 1877.367359][T13024] ? __pfx_ksys_write+0x10/0x10 [ 1877.367396][T13024] __x64_sys_bpf+0xba/0xd0 [ 1877.367432][T13024] do_syscall_64+0x166/0x520 [ 1877.367458][T13024] ? trace_irq_disable+0x3b/0x140 [ 1877.367490][T13024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.367514][T13024] ? clear_bhb_loop+0x70/0xc0 [ 1877.367543][T13024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.367566][T13024] RIP: 0033:0x7f62319a94d9 [ 1877.367588][T13024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.367608][T13024] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1877.367632][T13024] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1877.367649][T13024] RDX: 0000000000000090 RSI: 00002000000016c0 RDI: 0000000000000005 [ 1877.367664][T13024] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.367678][T13024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1877.367692][T13024] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1877.367730][T13024] [ 1877.768066][T13034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11321'. [ 1877.885666][T13037] bpf: Bad value for 'mode' [ 1877.951845][T13038] FAULT_INJECTION: forcing a failure. [ 1877.951845][T13038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1877.951881][T13038] CPU: 0 UID: 0 PID: 13038 Comm: syz.7.11322 Not tainted syzkaller #0 PREEMPT(full) [ 1877.951906][T13038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1877.951921][T13038] Call Trace: [ 1877.951930][T13038] [ 1877.951940][T13038] dump_stack_lvl+0xe8/0x150 [ 1877.951981][T13038] should_fail_ex+0x3eb/0x540 [ 1877.952014][T13038] _copy_from_user+0x2d/0xb0 [ 1877.952043][T13038] ___sys_sendmsg+0x1c6/0x360 [ 1877.952065][T13038] ? __lock_acquire+0x747/0x2de0 [ 1877.952099][T13038] ? __pfx____sys_sendmsg+0x10/0x10 [ 1877.952164][T13038] ? __fget_files+0x3a2/0x420 [ 1877.952193][T13038] ? __fget_files+0x2a/0x420 [ 1877.952232][T13038] __x64_sys_sendmsg+0x1b1/0x290 [ 1877.952263][T13038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1877.952314][T13038] do_syscall_64+0x166/0x520 [ 1877.952342][T13038] ? trace_irq_disable+0x3b/0x140 [ 1877.952373][T13038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.952397][T13038] ? clear_bhb_loop+0x70/0xc0 [ 1877.952425][T13038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.952448][T13038] RIP: 0033:0x7f6c261a94d9 [ 1877.952469][T13038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1877.952489][T13038] RSP: 002b:00007f6c270e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1877.952513][T13038] RAX: ffffffffffffffda RBX: 00007f6c26425fa0 RCX: 00007f6c261a94d9 [ 1877.952530][T13038] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 1877.952546][T13038] RBP: 00007f6c270e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.952560][T13038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1877.952574][T13038] R13: 00007f6c26426038 R14: 00007f6c26425fa0 R15: 00007ffd78682118 [ 1877.952619][T13038] [ 1878.037117][T13040] netlink: 'syz.2.11320': attribute type 10 has an invalid length. [ 1878.354682][T13043] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.11325'. [ 1878.741956][T13054] FAULT_INJECTION: forcing a failure. [ 1878.741956][T13054] name failslab, interval 1, probability 0, space 0, times 0 [ 1878.741995][T13054] CPU: 1 UID: 0 PID: 13054 Comm: syz.2.11329 Not tainted syzkaller #0 PREEMPT(full) [ 1878.742023][T13054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1878.742040][T13054] Call Trace: [ 1878.742056][T13054] [ 1878.742072][T13054] dump_stack_lvl+0xe8/0x150 [ 1878.742138][T13054] should_fail_ex+0x3eb/0x540 [ 1878.742218][T13054] should_failslab+0xa8/0x100 [ 1878.742283][T13054] __kvmalloc_node_noprof+0x171/0x820 [ 1878.742323][T13054] ? rcu_is_watching+0x16/0xb0 [ 1878.742373][T13054] ? bpf_compute_subprog_arg_access+0x194/0x15c0 [ 1878.742411][T13054] ? trace_kmalloc+0x2a/0xf0 [ 1878.742448][T13054] ? call_instance+0x263/0x560 [ 1878.742482][T13054] ? call_instance+0x263/0x560 [ 1878.742569][T13054] call_instance+0x263/0x560 [ 1878.742661][T13054] bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 1878.742819][T13053] netlink: 56 bytes leftover after parsing attributes in process `syz.7.11325'. [ 1878.742841][T13054] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1878.742924][T13054] ? __kvmalloc_node_noprof+0x340/0x820 [ 1878.742965][T13054] ? bpf_compute_live_registers+0x142/0x1df0 [ 1878.743002][T13054] ? bpf_compute_live_registers+0x142/0x1df0 [ 1878.743091][T13054] bpf_compute_live_registers+0x10b0/0x1df0 [ 1878.743295][T13054] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1878.743412][T13054] bpf_check+0x2d0b/0x34e0 [ 1878.743454][T13054] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1878.743582][T13054] ? ktime_get_with_offset+0x93/0x2d0 [ 1878.743636][T13054] ? __pfx_bpf_check+0x10/0x10 [ 1878.743698][T13054] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1878.743770][T13054] bpf_prog_load+0x14da/0x1c60 [ 1878.743887][T13054] ? __pfx_bpf_prog_load+0x10/0x10 [ 1878.744023][T13054] ? __might_fault+0xaf/0x130 [ 1878.744109][T13054] __sys_bpf+0xd86/0xe00 [ 1878.744210][T13054] ? __pfx___sys_bpf+0x10/0x10 [ 1878.744324][T13054] ? __fget_files+0x2a/0x420 [ 1878.744468][T13054] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1878.744509][T13054] ? ksys_write+0x242/0x270 [ 1878.744572][T13054] ? __pfx_ksys_write+0x10/0x10 [ 1878.744655][T13054] __x64_sys_bpf+0xba/0xd0 [ 1878.744729][T13054] do_syscall_64+0x166/0x520 [ 1878.744765][T13054] ? trace_irq_disable+0x3b/0x140 [ 1878.744804][T13054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.744839][T13054] ? clear_bhb_loop+0x70/0xc0 [ 1878.744899][T13054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1878.744931][T13054] RIP: 0033:0x7f45425a94d9 [ 1878.744967][T13054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1878.744989][T13054] RSP: 002b:00007f454349b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1878.745019][T13054] RAX: ffffffffffffffda RBX: 00007f4542825fa0 RCX: 00007f45425a94d9 [ 1878.745038][T13054] RDX: 0000000000000021 RSI: 0000200000000ac0 RDI: 0000000000000005 [ 1878.745055][T13054] RBP: 00007f454349b090 R08: 0000000000000000 R09: 0000000000000000 [ 1878.745072][T13054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1878.745089][T13054] R13: 00007f4542826038 R14: 00007f4542825fa0 R15: 00007ffc07f136a8 [ 1878.745221][T13054] [ 1879.969453][T13071] netlink: 188 bytes leftover after parsing attributes in process `syz.0.11333'. [ 1880.175553][T13076] netlink: 'syz.7.11337': attribute type 10 has an invalid length. [ 1880.452209][T13085] openvswitch: netlink: IP tunnel dst address not specified [ 1880.928102][T13096] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11346'. [ 1881.288046][T13115] xt_cgroup: invalid path, errno=-2 [ 1881.494791][T13119] FAULT_INJECTION: forcing a failure. [ 1881.494791][T13119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1881.494986][T13119] CPU: 1 UID: 0 PID: 13119 Comm: syz.4.11354 Not tainted syzkaller #0 PREEMPT(full) [ 1881.495028][T13119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1881.495049][T13119] Call Trace: [ 1881.495064][T13119] [ 1881.495081][T13119] dump_stack_lvl+0xe8/0x150 [ 1881.495133][T13119] should_fail_ex+0x3eb/0x540 [ 1881.495169][T13119] _copy_from_user+0x2d/0xb0 [ 1881.495200][T13119] kstrtouint_from_user+0xd6/0x180 [ 1881.495243][T13119] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1881.495279][T13119] ? irqentry_exit+0x2a0/0x9b0 [ 1881.495309][T13119] ? irqentry_exit+0x2a0/0x9b0 [ 1881.495333][T13119] ? trace_irq_disable+0x3b/0x140 [ 1881.495379][T13119] proc_fail_nth_write+0x8e/0x210 [ 1881.495402][T13119] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1881.495436][T13119] ? sb_start_write+0x87/0x1c0 [ 1881.495460][T13119] ? __sanitizer_cov_trace_pc+0x75/0x80 [ 1881.495495][T13119] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1881.495531][T13119] vfs_write+0x296/0xba0 [ 1881.495572][T13119] ? __pfx_vfs_write+0x10/0x10 [ 1881.495604][T13119] ? __fget_files+0x2a/0x420 [ 1881.495630][T13119] ? __fget_files+0x3a2/0x420 [ 1881.495656][T13119] ? __fget_files+0x2a/0x420 [ 1881.495690][T13119] ? fdget+0x1ac/0x250 [ 1881.495726][T13119] ksys_write+0x150/0x270 [ 1881.495761][T13119] ? __pfx_ksys_write+0x10/0x10 [ 1881.495807][T13119] do_syscall_64+0x166/0x520 [ 1881.495833][T13119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.495856][T13119] ? clear_bhb_loop+0x70/0xc0 [ 1881.495885][T13119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1881.495921][T13119] RIP: 0033:0x7f0d98d69d0e [ 1881.495942][T13119] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1881.495960][T13119] RSP: 002b:00007f0d99c50fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1881.495985][T13119] RAX: ffffffffffffffda RBX: 00007f0d99c516c0 RCX: 00007f0d98d69d0e [ 1881.496020][T13119] RDX: 0000000000000001 RSI: 00007f0d99c510a0 RDI: 000000000000000c [ 1881.496048][T13119] RBP: 00007f0d99c51090 R08: 0000000000000000 R09: 0000000000000000 [ 1881.496062][T13119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1881.496075][T13119] R13: 00007f0d99026038 R14: 00007f0d99025fa0 R15: 00007ffceabad338 [ 1881.496111][T13119] [ 1882.717447][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11368'. [ 1882.816153][T13153] FAULT_INJECTION: forcing a failure. [ 1882.816153][T13153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1882.816187][T13153] CPU: 1 UID: 0 PID: 13153 Comm: syz.7.11369 Not tainted syzkaller #0 PREEMPT(full) [ 1882.816213][T13153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1882.816227][T13153] Call Trace: [ 1882.816237][T13153] [ 1882.816247][T13153] dump_stack_lvl+0xe8/0x150 [ 1882.816290][T13153] should_fail_ex+0x3eb/0x540 [ 1882.816324][T13153] _copy_to_user+0x31/0xb0 [ 1882.816356][T13153] bpf_verifier_vlog+0x3a2/0x900 [ 1882.816397][T13153] __btf_verifier_log+0xe2/0x140 [ 1882.816433][T13153] ? __pfx___btf_verifier_log+0x10/0x10 [ 1882.816468][T13153] ? btf_parse_hdr+0x1da/0x810 [ 1882.816517][T13153] btf_parse_hdr+0x33f/0x810 [ 1882.816563][T13153] btf_new_fd+0x312/0x8f0 [ 1882.816592][T13153] __sys_bpf+0xda7/0xe00 [ 1882.816625][T13153] ? __pfx___sys_bpf+0x10/0x10 [ 1882.816661][T13153] ? __fget_files+0x2a/0x420 [ 1882.816710][T13153] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1882.816743][T13153] ? ksys_write+0x242/0x270 [ 1882.816777][T13153] ? __pfx_ksys_write+0x10/0x10 [ 1882.816814][T13153] __x64_sys_bpf+0xba/0xd0 [ 1882.816851][T13153] do_syscall_64+0x166/0x520 [ 1882.816878][T13153] ? trace_irq_disable+0x3b/0x140 [ 1882.816909][T13153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.816932][T13153] ? clear_bhb_loop+0x70/0xc0 [ 1882.816961][T13153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.816984][T13153] RIP: 0033:0x7f6c261a94d9 [ 1882.817004][T13153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1882.817026][T13153] RSP: 002b:00007f6c270e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1882.817051][T13153] RAX: ffffffffffffffda RBX: 00007f6c26425fa0 RCX: 00007f6c261a94d9 [ 1882.817067][T13153] RDX: 0000000000000028 RSI: 0000200000000240 RDI: 0000000000000012 [ 1882.817086][T13153] RBP: 00007f6c270e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1882.817101][T13153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1882.817114][T13153] R13: 00007f6c26426038 R14: 00007f6c26425fa0 R15: 00007ffd78682118 [ 1882.817151][T13153] [ 1883.439292][T13171] netlink: 'syz.7.11371': attribute type 21 has an invalid length. [ 1883.439346][T13171] netlink: 'syz.7.11371': attribute type 1 has an invalid length. [ 1883.439363][T13171] netlink: 100 bytes leftover after parsing attributes in process `syz.7.11371'. [ 1884.023390][T13178] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11376'. [ 1886.173270][T13207] netlink: 'syz.2.11383': attribute type 5 has an invalid length. [ 1886.395593][T13216] netlink: 'syz.8.11386': attribute type 2 has an invalid length. [ 1886.643739][T13208] netlink: 'syz.0.11382': attribute type 6 has an invalid length. [ 1886.643856][T13208] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11382'. [ 1886.711119][T13225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11388'. [ 1886.775925][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11389'. [ 1887.439376][T13239] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11389'. [ 1887.594122][T13244] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11391'. [ 1887.661346][T13249] FAULT_INJECTION: forcing a failure. [ 1887.661346][T13249] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1887.661827][T13249] CPU: 0 UID: 0 PID: 13249 Comm: syz.8.11392 Not tainted syzkaller #0 PREEMPT(full) [ 1887.661854][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1887.661869][T13249] Call Trace: [ 1887.661879][T13249] [ 1887.661890][T13249] dump_stack_lvl+0xe8/0x150 [ 1887.661935][T13249] should_fail_ex+0x3eb/0x540 [ 1887.661970][T13249] prepare_alloc_pages+0x21e/0x5f0 [ 1887.662013][T13249] __alloc_frozen_pages_noprof+0x17c/0x410 [ 1887.662052][T13249] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1887.662100][T13249] ? lockdep_hardirqs_on+0x7b/0x110 [ 1887.662128][T13249] ? irqentry_exit+0x2a0/0x9b0 [ 1887.662183][T13249] __alloc_pages_noprof+0x10/0x100 [ 1887.662216][T13249] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 1887.662260][T13249] ? alloc_pages_noprof+0x140/0x2b0 [ 1887.662290][T13249] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1887.662331][T13249] alloc_vmap_area+0xd10/0x1410 [ 1887.662377][T13249] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1887.662399][T13249] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1887.662432][T13249] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1887.662462][T13249] ? __get_vm_area_node+0x155/0x2f0 [ 1887.662494][T13249] __get_vm_area_node+0x200/0x2f0 [ 1887.662532][T13249] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1887.662560][T13249] ? bpf_check+0x14ae/0x34e0 [ 1887.662583][T13249] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1887.662621][T13249] ? perf_trace_preemptirq_template+0xb3/0x350 [ 1887.662657][T13249] ? irqentry_exit+0x2a0/0x9b0 [ 1887.662709][T13249] ? irqentry_exit+0x2a0/0x9b0 [ 1887.662737][T13249] ? lockdep_hardirqs_on+0x7b/0x110 [ 1887.662767][T13249] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1887.662811][T13249] ? bpf_check+0x14ae/0x34e0 [ 1887.662834][T13249] __vmalloc_noprof+0xd2/0x120 [ 1887.662861][T13249] ? bpf_check+0x14ae/0x34e0 [ 1887.662891][T13249] bpf_check+0x14ae/0x34e0 [ 1887.662914][T13249] ? trace_irq_disable+0x3b/0x140 [ 1887.662968][T13249] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1887.663003][T13249] ? __pfx_bpf_check+0x10/0x10 [ 1887.663033][T13249] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1887.663069][T13249] bpf_prog_load+0x14da/0x1c60 [ 1887.663121][T13249] ? __pfx_bpf_prog_load+0x10/0x10 [ 1887.663170][T13249] ? __might_fault+0xaf/0x130 [ 1887.663199][T13249] ? clockevents_program_event+0x450/0x630 [ 1887.663228][T13249] __sys_bpf+0xd86/0xe00 [ 1887.663261][T13249] ? clockevents_program_event+0x450/0x630 [ 1887.663286][T13249] ? __pfx___sys_bpf+0x10/0x10 [ 1887.663321][T13249] ? clockevents_program_event+0x450/0x630 [ 1887.663404][T13249] __x64_sys_bpf+0xba/0xd0 [ 1887.663444][T13249] do_syscall_64+0x166/0x520 [ 1887.663472][T13249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.663497][T13249] ? clear_bhb_loop+0x70/0xc0 [ 1887.663528][T13249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.663553][T13249] RIP: 0033:0x7f62319a94d9 [ 1887.663576][T13249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1887.663596][T13249] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1887.663621][T13249] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1887.663640][T13249] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1887.663656][T13249] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.663672][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1887.663686][T13249] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1887.663731][T13249] [ 1887.665267][T13249] syz.8.11392: vmalloc error: size 600, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1887.665342][T13249] CPU: 0 UID: 0 PID: 13249 Comm: syz.8.11392 Not tainted syzkaller #0 PREEMPT(full) [ 1887.665369][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1887.665383][T13249] Call Trace: [ 1887.665393][T13249] [ 1887.665403][T13249] dump_stack_lvl+0xe8/0x150 [ 1887.665445][T13249] warn_alloc+0x24d/0x270 [ 1887.665478][T13249] ? lockdep_hardirqs_on+0x7b/0x110 [ 1887.665510][T13249] ? __pfx_warn_alloc+0x10/0x10 [ 1887.665538][T13249] ? kfree+0x1c5/0x650 [ 1887.665573][T13249] ? __get_vm_area_node+0x219/0x2f0 [ 1887.665610][T13249] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1887.665637][T13249] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1887.665675][T13249] ? perf_trace_preemptirq_template+0xb3/0x350 [ 1887.665711][T13249] ? irqentry_exit+0x2a0/0x9b0 [ 1887.665766][T13249] ? irqentry_exit+0x2a0/0x9b0 [ 1887.665792][T13249] ? lockdep_hardirqs_on+0x7b/0x110 [ 1887.665823][T13249] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1887.665867][T13249] ? bpf_check+0x14ae/0x34e0 [ 1887.665890][T13249] __vmalloc_noprof+0xd2/0x120 [ 1887.665922][T13249] ? bpf_check+0x14ae/0x34e0 [ 1887.665952][T13249] bpf_check+0x14ae/0x34e0 [ 1887.665974][T13249] ? trace_irq_disable+0x3b/0x140 [ 1887.666029][T13249] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1887.666064][T13249] ? __pfx_bpf_check+0x10/0x10 [ 1887.666101][T13249] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1887.666138][T13249] bpf_prog_load+0x14da/0x1c60 [ 1887.666181][T13249] ? __pfx_bpf_prog_load+0x10/0x10 [ 1887.666229][T13249] ? __might_fault+0xaf/0x130 [ 1887.666258][T13249] ? clockevents_program_event+0x450/0x630 [ 1887.666288][T13249] __sys_bpf+0xd86/0xe00 [ 1887.666322][T13249] ? clockevents_program_event+0x450/0x630 [ 1887.666348][T13249] ? __pfx___sys_bpf+0x10/0x10 [ 1887.666383][T13249] ? clockevents_program_event+0x450/0x630 [ 1887.666462][T13249] __x64_sys_bpf+0xba/0xd0 [ 1887.666503][T13249] do_syscall_64+0x166/0x520 [ 1887.666531][T13249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.666555][T13249] ? clear_bhb_loop+0x70/0xc0 [ 1887.666587][T13249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1887.666611][T13249] RIP: 0033:0x7f62319a94d9 [ 1887.666632][T13249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1887.666653][T13249] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1887.666677][T13249] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1887.666695][T13249] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 1887.666710][T13249] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1887.666725][T13249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1887.666741][T13249] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1887.666784][T13249] [ 1887.666795][T13249] Mem-Info: [ 1887.666806][T13249] active_anon:13272 inactive_anon:0 isolated_anon:0 [ 1887.666806][T13249] active_file:90 inactive_file:62995 isolated_file:0 [ 1887.666806][T13249] unevictable:0 dirty:145 writeback:0 [ 1887.666806][T13249] slab_reclaimable:7697 slab_unreclaimable:110612 [ 1887.666806][T13249] mapped:30815 shmem:556 pagetables:3847 [ 1887.666806][T13249] sec_pagetables:0 bounce:0 [ 1887.666806][T13249] kernel_misc_reclaimable:0 [ 1887.666806][T13249] free:1277546 free_pcp:7715 free_cma:0 [ 1887.666864][T13249] Node 0 active_anon:53088kB inactive_anon:0kB active_file:360kB inactive_file:251780kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123260kB dirty:580kB writeback:0kB shmem:2224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13620kB pagetables:15252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1887.666923][T13249] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1887.666980][T13249] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1887.667044][T13249] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1887.667090][T13249] Node 0 DMA32 free:1161088kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:53088kB inactive_anon:0kB active_file:360kB inactive_file:251780kB unevictable:0kB writepending:580kB zspages:0kB present:3129332kB managed:2522912kB mlocked:0kB bounce:0kB free_pcp:30856kB local_pcp:14448kB free_cma:0kB [ 1887.667167][T13249] lowmem_reserve[]: 0 0 1 1 1 [ 1887.667209][T13249] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1396kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1887.667276][T13249] lowmem_reserve[]: 0 0 0 0 0 [ 1887.667319][T13249] Node 1 Normal free:3933736kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1887.667384][T13249] lowmem_reserve[]: 0 0 0 0 0 [ 1887.667427][T13249] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1887.667566][T13249] Node 0 DMA32: 2656*4kB (UME) 3112*8kB (UME) 2122*16kB (UM) 1387*32kB (UME) 751*64kB (UME) 592*128kB (UME) 495*256kB (UME) 254*512kB (UME) 113*1024kB (UME) 9*2048kB (UE) 130*4096kB (UM) = 1161088kB [ 1887.667757][T13249] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1887.667873][T13249] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 5*32kB (UM) 8*64kB (UM) 4*128kB (UM) 5*256kB (UM) 4*512kB (UM) 1*1024kB (M) 2*2048kB (U) 958*4096kB (M) = 3933736kB [ 1887.668056][T13249] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1887.668075][T13249] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1887.668101][T13249] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1887.668121][T13249] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1887.668139][T13249] 63637 total pagecache pages [ 1887.668148][T13249] 0 pages in swap cache [ 1887.668157][T13249] Free swap = 124996kB [ 1887.668167][T13249] Total swap = 124996kB [ 1887.668176][T13249] 2097051 pages RAM [ 1887.668185][T13249] 0 pages HighMem/MovableOnly [ 1887.668194][T13249] 434358 pages reserved [ 1887.668202][T13249] 0 pages cma reserved [ 1887.816416][T13244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1888.926226][T13254] netlink: 'syz.2.11395': attribute type 10 has an invalid length. [ 1889.311544][T13272] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1889.380701][T13277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11406'. [ 1889.708368][T13288] FAULT_INJECTION: forcing a failure. [ 1889.708368][T13288] name failslab, interval 1, probability 0, space 0, times 0 [ 1889.708404][T13288] CPU: 0 UID: 0 PID: 13288 Comm: syz.8.11408 Not tainted syzkaller #0 PREEMPT(full) [ 1889.708431][T13288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1889.708446][T13288] Call Trace: [ 1889.708455][T13288] [ 1889.708466][T13288] dump_stack_lvl+0xe8/0x150 [ 1889.708510][T13288] should_fail_ex+0x3eb/0x540 [ 1889.708547][T13288] should_failslab+0xa8/0x100 [ 1889.708584][T13288] __kvmalloc_node_noprof+0x171/0x820 [ 1889.708621][T13288] ? __kvmalloc_node_noprof+0x340/0x820 [ 1889.708651][T13288] ? analyze_subprog+0xc29/0xb150 [ 1889.708680][T13288] ? analyze_subprog+0xc29/0xb150 [ 1889.708719][T13288] analyze_subprog+0xc29/0xb150 [ 1889.708760][T13288] ? is_bpf_text_address+0x292/0x2b0 [ 1889.708785][T13288] ? is_bpf_text_address+0x26/0x2b0 [ 1889.708817][T13288] ? __kernel_text_address+0xd/0x30 [ 1889.708847][T13288] ? unwind_get_return_address+0x4d/0x90 [ 1889.708878][T13288] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1889.708943][T13288] ? __pfx_analyze_subprog+0x10/0x10 [ 1889.708973][T13288] ? kasan_save_track+0x4f/0x80 [ 1889.709001][T13288] ? kasan_save_track+0x3e/0x80 [ 1889.709029][T13288] ? __kasan_kmalloc+0x93/0xb0 [ 1889.709059][T13288] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1889.709088][T13288] ? call_instance+0x263/0x560 [ 1889.709116][T13288] ? bpf_compute_subprog_arg_access+0x2cb/0x15c0 [ 1889.709146][T13288] ? bpf_compute_live_registers+0x10b0/0x1df0 [ 1889.709176][T13288] ? bpf_check+0x2d0b/0x34e0 [ 1889.709198][T13288] ? bpf_prog_load+0x14da/0x1c60 [ 1889.709219][T13288] ? __sys_bpf+0xd86/0xe00 [ 1889.709247][T13288] ? __x64_sys_bpf+0xba/0xd0 [ 1889.709277][T13288] ? do_syscall_64+0x166/0x520 [ 1889.709302][T13288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.709370][T13288] ? call_instance+0x263/0x560 [ 1889.709398][T13288] ? rcu_is_watching+0x16/0xb0 [ 1889.709432][T13288] ? call_instance+0x263/0x560 [ 1889.709459][T13288] ? trace_kmalloc+0x2a/0xf0 [ 1889.709488][T13288] ? call_instance+0x263/0x560 [ 1889.709516][T13288] ? __kvmalloc_node_noprof+0x52a/0x820 [ 1889.709549][T13288] ? __kvmalloc_node_noprof+0x340/0x820 [ 1889.709579][T13288] ? call_instance+0x263/0x560 [ 1889.709606][T13288] ? call_instance+0x263/0x560 [ 1889.709643][T13288] ? call_instance+0x42e/0x560 [ 1889.709682][T13288] bpf_compute_subprog_arg_access+0x2f1/0x15c0 [ 1889.709739][T13288] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1889.709778][T13288] ? __kvmalloc_node_noprof+0x340/0x820 [ 1889.709808][T13288] ? bpf_compute_live_registers+0x142/0x1df0 [ 1889.709838][T13288] ? bpf_compute_live_registers+0x142/0x1df0 [ 1889.709879][T13288] bpf_compute_live_registers+0x10b0/0x1df0 [ 1889.709938][T13288] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1889.709983][T13288] bpf_check+0x2d0b/0x34e0 [ 1889.710032][T13288] ? ktime_get_with_offset+0x93/0x2d0 [ 1889.710063][T13288] ? ktime_get_with_offset+0x93/0x2d0 [ 1889.710112][T13288] ? __pfx_bpf_check+0x10/0x10 [ 1889.710141][T13288] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1889.710174][T13288] bpf_prog_load+0x14da/0x1c60 [ 1889.710213][T13288] ? __pfx_bpf_prog_load+0x10/0x10 [ 1889.710262][T13288] ? __might_fault+0xaf/0x130 [ 1889.710296][T13288] __sys_bpf+0xd86/0xe00 [ 1889.710327][T13288] ? __pfx___sys_bpf+0x10/0x10 [ 1889.710364][T13288] ? __fget_files+0x2a/0x420 [ 1889.710413][T13288] ? ksys_write+0x242/0x270 [ 1889.710447][T13288] ? __pfx_ksys_write+0x10/0x10 [ 1889.710485][T13288] __x64_sys_bpf+0xba/0xd0 [ 1889.710522][T13288] do_syscall_64+0x166/0x520 [ 1889.710547][T13288] ? trace_irq_disable+0x3b/0x140 [ 1889.710578][T13288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.710601][T13288] ? clear_bhb_loop+0x70/0xc0 [ 1889.710630][T13288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1889.710652][T13288] RIP: 0033:0x7f62319a94d9 [ 1889.710675][T13288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.710694][T13288] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1889.710718][T13288] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1889.710735][T13288] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 1889.710750][T13288] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1889.710765][T13288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1889.710778][T13288] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1889.710816][T13288] [ 1890.329420][T13295] netlink: 'syz.7.11412': attribute type 10 has an invalid length. [ 1891.516495][T13339] netlink: 'syz.0.11427': attribute type 10 has an invalid length. [ 1893.425662][T13400] FAULT_INJECTION: forcing a failure. [ 1893.425662][T13400] name failslab, interval 1, probability 0, space 0, times 0 [ 1893.425701][T13400] CPU: 1 UID: 0 PID: 13400 Comm: syz.0.11448 Not tainted syzkaller #0 PREEMPT(full) [ 1893.425730][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1893.425747][T13400] Call Trace: [ 1893.425790][T13400] [ 1893.425807][T13400] dump_stack_lvl+0xe8/0x150 [ 1893.425882][T13400] should_fail_ex+0x3eb/0x540 [ 1893.425958][T13400] should_failslab+0xa8/0x100 [ 1893.426022][T13400] __kmalloc_cache_noprof+0x9e/0x600 [ 1893.426071][T13400] ? __kmalloc_cache_noprof+0x148/0x600 [ 1893.426107][T13400] ? sctp_add_bind_addr+0x8c/0x370 [ 1893.426140][T13400] ? sctp_add_bind_addr+0x8c/0x370 [ 1893.426227][T13400] sctp_add_bind_addr+0x8c/0x370 [ 1893.426300][T13400] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1893.426362][T13400] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1893.426414][T13400] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1893.426487][T13400] ? sctp_v4_is_any+0x35/0x60 [ 1893.426526][T13400] ? sctp_copy_one_addr+0x93/0x360 [ 1893.426598][T13400] sctp_bind_addr_copy+0xb3/0x3c0 [ 1893.426652][T13400] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1893.426729][T13400] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1893.426808][T13400] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1893.426871][T13400] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1893.426945][T13400] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1893.426984][T13400] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1893.427049][T13400] sctp_sendmsg+0x159b/0x2d00 [ 1893.427194][T13400] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1893.427281][T13400] ? __lock_acquire+0x747/0x2de0 [ 1893.427414][T13400] ? aa_sock_msg_perm+0xfc/0x210 [ 1893.427459][T13400] ? sock_rps_record_flow+0x19/0x350 [ 1893.427519][T13400] ? inet_sendmsg+0x298/0x320 [ 1893.427548][T13400] ? apparmor_socket_sendmsg+0x98/0x360 [ 1893.427609][T13400] ? __pfx_inet_sendmsg+0x10/0x10 [ 1893.427643][T13400] sock_sendmsg_nosec+0x10f/0x190 [ 1893.427711][T13400] ____sys_sendmsg+0x54e/0x850 [ 1893.427800][T13400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1893.427906][T13400] ? import_iovec+0x73/0xa0 [ 1893.427979][T13400] ___sys_sendmsg+0x2a5/0x360 [ 1893.428011][T13400] ? __lock_acquire+0x747/0x2de0 [ 1893.428098][T13400] ? __pfx____sys_sendmsg+0x10/0x10 [ 1893.428282][T13400] ? __fget_files+0x2a/0x420 [ 1893.428414][T13400] ? __fget_files+0x3a2/0x420 [ 1893.428451][T13400] ? __fget_files+0x2a/0x420 [ 1893.428554][T13400] __x64_sys_sendmsg+0x1b1/0x290 [ 1893.428615][T13400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1893.428794][T13400] do_syscall_64+0x166/0x520 [ 1893.428834][T13400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.428868][T13400] ? clear_bhb_loop+0x70/0xc0 [ 1893.428927][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1893.428959][T13400] RIP: 0033:0x7f7190fa94d9 [ 1893.428995][T13400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1893.429018][T13400] RSP: 002b:00007f7191eab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1893.429047][T13400] RAX: ffffffffffffffda RBX: 00007f7191225fa0 RCX: 00007f7190fa94d9 [ 1893.429067][T13400] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1893.429084][T13400] RBP: 00007f7191eab090 R08: 0000000000000000 R09: 0000000000000000 [ 1893.429101][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1893.429116][T13400] R13: 00007f7191226038 R14: 00007f7191225fa0 R15: 00007fff0c1c9f68 [ 1893.429243][T13400] [ 1894.046934][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11452'. [ 1894.462367][T13419] sit0: left promiscuous mode [ 1894.462395][T13419] sit0: left allmulticast mode [ 1895.157049][T13419] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1895.965216][T13458] netlink: 269 bytes leftover after parsing attributes in process `syz.7.11466'. [ 1896.203191][T13461] netlink: 'syz.0.11467': attribute type 10 has an invalid length. [ 1896.203225][T13461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11467'. [ 1896.465588][T13472] netlink: 388 bytes leftover after parsing attributes in process `syz.4.11470'. [ 1896.488434][T13468] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11469'. [ 1896.597488][T13468] netlink: 'syz.2.11469': attribute type 41 has an invalid length. [ 1896.597582][T13468] netlink: 'syz.2.11469': attribute type 17 has an invalid length. [ 1898.484264][T13510] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11484'. [ 1898.533505][T13507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11483'. [ 1899.316208][T13541] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11495'. [ 1899.338440][T13542] Unknown options in mask 6faf [ 1900.017373][T13561] netlink: 'syz.0.11502': attribute type 21 has an invalid length. [ 1900.019210][T13562] netlink: 'syz.0.11502': attribute type 21 has an invalid length. [ 1900.026504][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11502'. [ 1900.026700][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11502'. [ 1900.313782][ T30] audit: type=1107 audit(1794735651.442:95): pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 1900.462463][T13571] FAULT_INJECTION: forcing a failure. [ 1900.462463][T13571] name failslab, interval 1, probability 0, space 0, times 0 [ 1900.462498][T13571] CPU: 0 UID: 0 PID: 13571 Comm: syz.7.11506 Not tainted syzkaller #0 PREEMPT(full) [ 1900.462527][T13571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1900.462542][T13571] Call Trace: [ 1900.462551][T13571] [ 1900.462562][T13571] dump_stack_lvl+0xe8/0x150 [ 1900.462604][T13571] should_fail_ex+0x3eb/0x540 [ 1900.462635][T13571] should_failslab+0xa8/0x100 [ 1900.462672][T13571] __kvmalloc_node_noprof+0x171/0x820 [ 1900.462709][T13571] ? bpf_init_scev+0x167/0x460 [ 1900.462732][T13571] ? bpf_init_scev+0x167/0x460 [ 1900.462758][T13571] ? __asan_memcpy+0x40/0x70 [ 1900.462789][T13571] bpf_init_scev+0x167/0x460 [ 1900.462819][T13571] bpf_check+0x2fd8/0x34e0 [ 1900.462857][T13571] ? ktime_get_with_offset+0x93/0x2d0 [ 1900.462890][T13571] ? ktime_get_with_offset+0x93/0x2d0 [ 1900.462923][T13571] ? __pfx_bpf_check+0x10/0x10 [ 1900.462950][T13571] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1900.462984][T13571] bpf_prog_load+0x14da/0x1c60 [ 1900.463022][T13571] ? __pfx_bpf_prog_load+0x10/0x10 [ 1900.463063][T13571] ? __might_fault+0xaf/0x130 [ 1900.463095][T13571] __sys_bpf+0xd86/0xe00 [ 1900.463127][T13571] ? __pfx___sys_bpf+0x10/0x10 [ 1900.463162][T13571] ? __fget_files+0x2a/0x420 [ 1900.463209][T13571] ? ksys_write+0x242/0x270 [ 1900.463242][T13571] ? __pfx_ksys_write+0x10/0x10 [ 1900.463278][T13571] __x64_sys_bpf+0xba/0xd0 [ 1900.463314][T13571] do_syscall_64+0x166/0x520 [ 1900.463341][T13571] ? trace_irq_disable+0x3b/0x140 [ 1900.463371][T13571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.463395][T13571] ? clear_bhb_loop+0x70/0xc0 [ 1900.463424][T13571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.463454][T13571] RIP: 0033:0x7f6c261a94d9 [ 1900.463476][T13571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.463496][T13571] RSP: 002b:00007f6c270e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1900.463521][T13571] RAX: ffffffffffffffda RBX: 00007f6c26425fa0 RCX: 00007f6c261a94d9 [ 1900.463538][T13571] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 1900.463554][T13571] RBP: 00007f6c270e8090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.463568][T13571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1900.463582][T13571] R13: 00007f6c26426038 R14: 00007f6c26425fa0 R15: 00007ffd78682118 [ 1900.463620][T13571] [ 1901.256090][T13590] netlink: 140 bytes leftover after parsing attributes in process `syz.8.11515'. [ 1901.564656][T13605] FAULT_INJECTION: forcing a failure. [ 1901.564656][T13605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.564692][T13605] CPU: 0 UID: 0 PID: 13605 Comm: syz.8.11519 Not tainted syzkaller #0 PREEMPT(full) [ 1901.564719][T13605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1901.564733][T13605] Call Trace: [ 1901.564743][T13605] [ 1901.564753][T13605] dump_stack_lvl+0xe8/0x150 [ 1901.564798][T13605] should_fail_ex+0x3eb/0x540 [ 1901.564832][T13605] _copy_to_user+0x31/0xb0 [ 1901.564865][T13605] bpf_verifier_vlog+0x496/0x900 [ 1901.564906][T13605] bpf_verifier_log_write+0x11d/0x1a0 [ 1901.564942][T13605] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1901.564975][T13605] ? _copy_to_user+0x8a/0xb0 [ 1901.565004][T13605] ? bpf_verifier_vlog+0x58d/0x900 [ 1901.565037][T13605] print_verifier_state+0x1f8/0x1c80 [ 1901.565071][T13605] ? bpf_verifier_log_write+0x11d/0x1a0 [ 1901.565106][T13605] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1901.565141][T13605] ? __pfx_print_verifier_state+0x10/0x10 [ 1901.565177][T13605] ? print_insn_state+0x135/0x170 [ 1901.565209][T13605] do_check_common+0x45e7/0x75b0 [ 1901.565242][T13605] ? stack_depot_save_flags+0x33/0x810 [ 1901.565322][T13605] ? __pfx_do_check_common+0x10/0x10 [ 1901.565376][T13605] ? mark_fastcall_patterns+0x10e1/0x1140 [ 1901.565426][T13605] do_check_main+0x95/0x1f0 [ 1901.565457][T13605] bpf_check+0x302b/0x34e0 [ 1901.565483][T13605] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1901.565534][T13605] ? ktime_get_with_offset+0x93/0x2d0 [ 1901.565570][T13605] ? __pfx_bpf_check+0x10/0x10 [ 1901.565599][T13605] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1901.565634][T13605] bpf_prog_load+0x14da/0x1c60 [ 1901.565673][T13605] ? __pfx_bpf_prog_load+0x10/0x10 [ 1901.565716][T13605] ? __might_fault+0xaf/0x130 [ 1901.565751][T13605] __sys_bpf+0xd86/0xe00 [ 1901.565784][T13605] ? __pfx___sys_bpf+0x10/0x10 [ 1901.565820][T13605] ? __fget_files+0x2a/0x420 [ 1901.565869][T13605] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1901.565904][T13605] ? ksys_write+0x242/0x270 [ 1901.565939][T13605] ? __pfx_ksys_write+0x10/0x10 [ 1901.565978][T13605] __x64_sys_bpf+0xba/0xd0 [ 1901.566018][T13605] do_syscall_64+0x166/0x520 [ 1901.566045][T13605] ? trace_irq_disable+0x3b/0x140 [ 1901.566077][T13605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.566102][T13605] ? clear_bhb_loop+0x70/0xc0 [ 1901.566132][T13605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1901.566156][T13605] RIP: 0033:0x7f62319a94d9 [ 1901.566180][T13605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.566200][T13605] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1901.566225][T13605] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1901.566242][T13605] RDX: 0000000000000070 RSI: 0000200000002680 RDI: 0000000000000005 [ 1901.566257][T13605] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.566272][T13605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1901.566286][T13605] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1901.566324][T13605] [ 1902.570604][T13631] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11526'. [ 1902.604493][T13631] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11526'. [ 1903.126150][T13642] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1903.181711][T13648] netlink: 104 bytes leftover after parsing attributes in process `syz.7.11530'. [ 1904.424998][T13678] FAULT_INJECTION: forcing a failure. [ 1904.424998][T13678] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.425033][T13678] CPU: 0 UID: 0 PID: 13678 Comm: syz.0.11540 Not tainted syzkaller #0 PREEMPT(full) [ 1904.425059][T13678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1904.425074][T13678] Call Trace: [ 1904.425083][T13678] [ 1904.425093][T13678] dump_stack_lvl+0xe8/0x150 [ 1904.425136][T13678] should_fail_ex+0x3eb/0x540 [ 1904.425167][T13678] ? __alloc_skb+0x1db/0x7a0 [ 1904.425205][T13678] should_failslab+0xa8/0x100 [ 1904.425242][T13678] ? __alloc_skb+0x1db/0x7a0 [ 1904.425274][T13678] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1904.425306][T13678] ? __alloc_skb+0x1db/0x7a0 [ 1904.425349][T13678] __alloc_skb+0x1db/0x7a0 [ 1904.425389][T13678] netlink_sendmsg+0x5cd/0xb20 [ 1904.425429][T13678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1904.425467][T13678] ? aa_sock_msg_perm+0x144/0x210 [ 1904.425507][T13678] ? apparmor_socket_sendmsg+0x98/0x360 [ 1904.425549][T13678] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1904.425581][T13678] sock_sendmsg_nosec+0x14e/0x190 [ 1904.425616][T13678] ____sys_sendmsg+0x54e/0x850 [ 1904.425648][T13678] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1904.425684][T13678] ? import_iovec+0x73/0xa0 [ 1904.425716][T13678] ___sys_sendmsg+0x2a5/0x360 [ 1904.425739][T13678] ? __lock_acquire+0x747/0x2de0 [ 1904.425775][T13678] ? __pfx____sys_sendmsg+0x10/0x10 [ 1904.425842][T13678] ? __fget_files+0x3a2/0x420 [ 1904.425871][T13678] ? __fget_files+0x2a/0x420 [ 1904.425911][T13678] __x64_sys_sendmsg+0x1b1/0x290 [ 1904.425940][T13678] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1904.425991][T13678] do_syscall_64+0x166/0x520 [ 1904.426019][T13678] ? trace_irq_disable+0x3b/0x140 [ 1904.426053][T13678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.426080][T13678] ? clear_bhb_loop+0x70/0xc0 [ 1904.426110][T13678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.426136][T13678] RIP: 0033:0x7f7190fa94d9 [ 1904.426170][T13678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1904.426190][T13678] RSP: 002b:00007f7191eab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1904.426214][T13678] RAX: ffffffffffffffda RBX: 00007f7191225fa0 RCX: 00007f7190fa94d9 [ 1904.426231][T13678] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 1904.426246][T13678] RBP: 00007f7191eab090 R08: 0000000000000000 R09: 0000000000000000 [ 1904.426260][T13678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.426274][T13678] R13: 00007f7191226038 R14: 00007f7191225fa0 R15: 00007fff0c1c9f68 [ 1904.426310][T13678] [ 1904.988835][T13688] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1905.814204][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11550'. [ 1907.088296][T13725] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1908.963408][T13774] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1909.125645][T13779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11576'. [ 1909.125675][T13779] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11576'. [ 1909.317519][T13789] netlink: 96 bytes leftover after parsing attributes in process `syz.2.11580'. [ 1909.340858][T13790] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11579'. [ 1910.256520][T13811] FAULT_INJECTION: forcing a failure. [ 1910.256520][T13811] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.256600][T13811] CPU: 0 UID: 0 PID: 13811 Comm: syz.8.11586 Not tainted syzkaller #0 PREEMPT(full) [ 1910.256627][T13811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1910.256642][T13811] Call Trace: [ 1910.256651][T13811] [ 1910.256663][T13811] dump_stack_lvl+0xe8/0x150 [ 1910.256707][T13811] should_fail_ex+0x3eb/0x540 [ 1910.256741][T13811] should_failslab+0xa8/0x100 [ 1910.256778][T13811] __kmalloc_cache_noprof+0x9e/0x600 [ 1910.256810][T13811] ? sctp_add_bind_addr+0x8c/0x370 [ 1910.256834][T13811] ? sctp_add_bind_addr+0x8c/0x370 [ 1910.256868][T13811] sctp_add_bind_addr+0x8c/0x370 [ 1910.256901][T13811] sctp_bind_addr_copy+0xb3/0x3c0 [ 1910.256929][T13811] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1910.256971][T13811] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1910.257007][T13811] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1910.257042][T13811] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1910.257079][T13811] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1910.257112][T13811] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1910.257147][T13811] sctp_sendmsg+0x159b/0x2d00 [ 1910.257195][T13811] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1910.257234][T13811] ? irqentry_exit+0x2a0/0x9b0 [ 1910.257260][T13811] ? lockdep_hardirqs_on+0x7b/0x110 [ 1910.257298][T13811] ? aa_sock_msg_perm+0xfc/0x210 [ 1910.257330][T13811] ? sock_rps_record_flow+0x19/0x350 [ 1910.257367][T13811] ? inet_sendmsg+0x298/0x320 [ 1910.257389][T13811] ? apparmor_socket_sendmsg+0x98/0x360 [ 1910.257422][T13811] ? __pfx_inet_sendmsg+0x10/0x10 [ 1910.257445][T13811] sock_sendmsg_nosec+0x10f/0x190 [ 1910.257479][T13811] ____sys_sendmsg+0x54e/0x850 [ 1910.257512][T13811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1910.257548][T13811] ? import_iovec+0x73/0xa0 [ 1910.257581][T13811] ___sys_sendmsg+0x2a5/0x360 [ 1910.257604][T13811] ? __lock_acquire+0x747/0x2de0 [ 1910.257641][T13811] ? __pfx____sys_sendmsg+0x10/0x10 [ 1910.257686][T13811] ? __pfx_trace_call_bpf+0x10/0x10 [ 1910.257752][T13811] ? __fget_files+0x3a2/0x420 [ 1910.257779][T13811] ? __fget_files+0x2a/0x420 [ 1910.257858][T13811] __x64_sys_sendmsg+0x1b1/0x290 [ 1910.257888][T13811] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1910.257941][T13811] do_syscall_64+0x166/0x520 [ 1910.257968][T13811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.257992][T13811] ? clear_bhb_loop+0x70/0xc0 [ 1910.258022][T13811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.258046][T13811] RIP: 0033:0x7f62319a94d9 [ 1910.258067][T13811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.258086][T13811] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1910.258110][T13811] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1910.258128][T13811] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1910.258143][T13811] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.258158][T13811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.258172][T13811] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1910.258211][T13811] [ 1910.802232][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11590'. [ 1910.802282][T13825] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11590'. [ 1911.465029][T13844] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11596'. [ 1911.536309][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11595'. [ 1911.605487][T13850] xt_cgroup: invalid path, errno=-2 [ 1911.709461][T13852] FAULT_INJECTION: forcing a failure. [ 1911.709461][T13852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1911.709625][T13852] CPU: 0 UID: 0 PID: 13852 Comm: syz.0.11599 Not tainted syzkaller #0 PREEMPT(full) [ 1911.709653][T13852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1911.709668][T13852] Call Trace: [ 1911.709677][T13852] [ 1911.709688][T13852] dump_stack_lvl+0xe8/0x150 [ 1911.709732][T13852] should_fail_ex+0x3eb/0x540 [ 1911.709766][T13852] strncpy_from_user+0x36/0x2c0 [ 1911.709798][T13852] bpf_prog_load+0xf5b/0x1c60 [ 1911.709837][T13852] ? __pfx_bpf_prog_load+0x10/0x10 [ 1911.709886][T13852] ? clockevents_program_event+0x450/0x630 [ 1911.709915][T13852] __sys_bpf+0xd86/0xe00 [ 1911.709946][T13852] ? clockevents_program_event+0x450/0x630 [ 1911.709972][T13852] ? __pfx___sys_bpf+0x10/0x10 [ 1911.709997][T13852] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 1911.710029][T13852] ? clockevents_program_event+0x450/0x630 [ 1911.710095][T13852] __x64_sys_bpf+0xba/0xd0 [ 1911.710134][T13852] do_syscall_64+0x166/0x520 [ 1911.710161][T13852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.710194][T13852] ? clear_bhb_loop+0x70/0xc0 [ 1911.710224][T13852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1911.710248][T13852] RIP: 0033:0x7f7190fa94d9 [ 1911.710270][T13852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1911.710291][T13852] RSP: 002b:00007f7191eab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1911.710317][T13852] RAX: ffffffffffffffda RBX: 00007f7191225fa0 RCX: 00007f7190fa94d9 [ 1911.710334][T13852] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000005 [ 1911.710351][T13852] RBP: 00007f7191eab090 R08: 0000000000000000 R09: 0000000000000000 [ 1911.710365][T13852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1911.710379][T13852] R13: 00007f7191226038 R14: 00007f7191225fa0 R15: 00007fff0c1c9f68 [ 1911.710417][T13852] [ 1912.062649][T13859] netlink: 'syz.7.11603': attribute type 2 has an invalid length. [ 1912.188992][T13861] netlink: 'syz.2.11602': attribute type 21 has an invalid length. [ 1912.272506][T13865] netlink: 'syz.4.11605': attribute type 5 has an invalid length. [ 1912.565518][T13879] netlink: 'syz.4.11611': attribute type 10 has an invalid length. [ 1912.565560][T13879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11611'. [ 1912.735772][T13883] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11611'. [ 1913.812819][T13903] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1914.008431][T13911] xt_cgroup: invalid path, errno=-2 [ 1914.253690][T13899] block nbd1469: NBD_DISCONNECT [ 1914.779958][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.780022][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.543055][T13925] netlink: 'syz.0.11626': attribute type 2 has an invalid length. [ 1915.543082][T13925] __nla_validate_parse: 2 callbacks suppressed [ 1915.543096][T13925] netlink: 119 bytes leftover after parsing attributes in process `syz.0.11626'. [ 1915.543117][T13925] netlink: 'syz.0.11626': attribute type 2 has an invalid length. [ 1915.543133][T13925] netlink: 119 bytes leftover after parsing attributes in process `syz.0.11626'. [ 1915.918545][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11632'. [ 1916.047341][T13944] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.11634'. [ 1916.106731][T13942] netlink: 72 bytes leftover after parsing attributes in process `syz.0.11633'. [ 1916.288946][T13951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11637'. [ 1916.605538][T13965] FAULT_INJECTION: forcing a failure. [ 1916.605538][T13965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1916.605572][T13965] CPU: 1 UID: 0 PID: 13965 Comm: syz.2.11642 Not tainted syzkaller #0 PREEMPT(full) [ 1916.605597][T13965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1916.605619][T13965] Call Trace: [ 1916.605628][T13965] [ 1916.605638][T13965] dump_stack_lvl+0xe8/0x150 [ 1916.605681][T13965] should_fail_ex+0x3eb/0x540 [ 1916.605715][T13965] _copy_to_user+0x31/0xb0 [ 1916.605746][T13965] bpf_verifier_vlog+0x496/0x900 [ 1916.605785][T13965] bpf_verifier_log_write+0x11d/0x1a0 [ 1916.605819][T13965] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1916.605847][T13965] ? _copy_to_user+0x8a/0xb0 [ 1916.605877][T13965] ? bpf_verifier_vlog+0x58d/0x900 [ 1916.605909][T13965] print_verifier_state+0x1f8/0x1c80 [ 1916.605942][T13965] ? bpf_verifier_log_write+0x11d/0x1a0 [ 1916.605975][T13965] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 1916.606010][T13965] ? __pfx_print_verifier_state+0x10/0x10 [ 1916.606043][T13965] ? print_insn_state+0x135/0x170 [ 1916.606074][T13965] do_check_common+0x45e7/0x75b0 [ 1916.606106][T13965] ? stack_depot_save_flags+0x33/0x810 [ 1916.606187][T13965] ? __pfx_do_check_common+0x10/0x10 [ 1916.606230][T13965] ? mark_fastcall_patterns+0x10e1/0x1140 [ 1916.606278][T13965] do_check_main+0x95/0x1f0 [ 1916.606308][T13965] bpf_check+0x302b/0x34e0 [ 1916.606346][T13965] ? ktime_get_with_offset+0x93/0x2d0 [ 1916.606379][T13965] ? ktime_get_with_offset+0x93/0x2d0 [ 1916.606412][T13965] ? __pfx_bpf_check+0x10/0x10 [ 1916.606451][T13965] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1916.606486][T13965] bpf_prog_load+0x14da/0x1c60 [ 1916.606522][T13965] ? __pfx_bpf_prog_load+0x10/0x10 [ 1916.606579][T13965] ? __might_fault+0xaf/0x130 [ 1916.606628][T13965] __sys_bpf+0xd86/0xe00 [ 1916.606661][T13965] ? __pfx___sys_bpf+0x10/0x10 [ 1916.606697][T13965] ? __fget_files+0x2a/0x420 [ 1916.606746][T13965] ? ksys_write+0x242/0x270 [ 1916.606779][T13965] ? __pfx_ksys_write+0x10/0x10 [ 1916.606817][T13965] __x64_sys_bpf+0xba/0xd0 [ 1916.606855][T13965] do_syscall_64+0x166/0x520 [ 1916.606882][T13965] ? trace_irq_disable+0x3b/0x140 [ 1916.606918][T13965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1916.606942][T13965] ? clear_bhb_loop+0x70/0xc0 [ 1916.606971][T13965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1916.606994][T13965] RIP: 0033:0x7f45425a94d9 [ 1916.607015][T13965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1916.607035][T13965] RSP: 002b:00007f454349b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1916.607059][T13965] RAX: ffffffffffffffda RBX: 00007f4542825fa0 RCX: 00007f45425a94d9 [ 1916.607077][T13965] RDX: 0000000000000048 RSI: 0000200000001580 RDI: 0000000000000005 [ 1916.607092][T13965] RBP: 00007f454349b090 R08: 0000000000000000 R09: 0000000000000000 [ 1916.607107][T13965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1916.607121][T13965] R13: 00007f4542826038 R14: 00007f4542825fa0 R15: 00007ffc07f136a8 [ 1916.607158][T13965] [ 1917.162284][T13971] netlink: 'syz.4.11644': attribute type 21 has an invalid length. [ 1917.162317][T13971] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11644'. [ 1917.162454][T13971] netlink: 'syz.4.11644': attribute type 4 has an invalid length. [ 1917.162477][T13971] netlink: 'syz.4.11644': attribute type 5 has an invalid length. [ 1917.162498][T13971] netlink: 3 bytes leftover after parsing attributes in process `syz.4.11644'. [ 1917.422641][T13980] netlink: 'syz.0.11643': attribute type 10 has an invalid length. [ 1917.683384][T13982] netlink: 128 bytes leftover after parsing attributes in process `syz.7.11649'. [ 1917.683414][T13982] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1919.946323][T14047] netlink: 'syz.0.11666': attribute type 1 has an invalid length. [ 1920.817217][T14073] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11676'. [ 1920.893424][T14074] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1921.227471][ T8643] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 1921.319342][T14070] rxe_eth0 speed is unknown, defaulting to 1000 [ 1921.516509][T14080] netlink: 'syz.2.11678': attribute type 3 has an invalid length. [ 1921.535002][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11678'. [ 1921.540209][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11678'. [ 1921.771187][T14088] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11681'. [ 1923.205235][T14110] netlink: 'syz.7.11686': attribute type 21 has an invalid length. [ 1923.306657][T14109] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1923.322625][T14070] lo speed is unknown, defaulting to 1000 [ 1924.406626][T14128] netlink: 260 bytes leftover after parsing attributes in process `syz.8.11694'. [ 1927.366750][T14155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11703'. [ 1927.421801][T14158] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1927.460401][T14161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11703'. [ 1927.460450][T14161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11703'. [ 1927.950672][T14173] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11707'. [ 1929.698399][T14211] netlink: 'syz.7.11720': attribute type 20 has an invalid length. [ 1929.714341][T14209] netlink: 'syz.0.11721': attribute type 61 has an invalid length. [ 1930.479377][T14230] netlink: 'syz.0.11724': attribute type 9 has an invalid length. [ 1930.479401][T14230] netlink: 134780 bytes leftover after parsing attributes in process `syz.0.11724'. [ 1930.557642][T14231] netlink: 'syz.0.11724': attribute type 27 has an invalid length. [ 1930.557682][T14231] netlink: 164 bytes leftover after parsing attributes in process `syz.0.11724'. [ 1930.648531][T14235] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11725'. [ 1931.031698][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11726'. [ 1931.594488][T14262] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11735'. [ 1931.716612][T14265] netlink: 608 bytes leftover after parsing attributes in process `syz.8.11735'. [ 1931.768075][T14268] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1932.939415][T14299] __nla_validate_parse: 1 callbacks suppressed [ 1932.939444][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11746'. [ 1934.473129][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11755'. [ 1934.671982][T14332] openvswitch: netlink: Tunnel attr 10 has unexpected len 0 expected 2 [ 1936.051020][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11764'. [ 1936.051064][T14359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11764'. [ 1936.369034][T14364] netlink: 'syz.7.11766': attribute type 1 has an invalid length. [ 1936.369064][T14364] netlink: 'syz.7.11766': attribute type 3 has an invalid length. [ 1936.369083][T14364] netlink: 132 bytes leftover after parsing attributes in process `syz.7.11766'. [ 1936.442534][T14370] netlink: 'syz.2.11768': attribute type 10 has an invalid length. [ 1936.442566][T14370] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1936.442591][T14370] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1936.476844][T14370] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1936.476884][T14370] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1936.521291][T14372] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11768'. [ 1936.555043][T14372] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11768'. [ 1937.018738][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11773'. [ 1937.227792][T14389] netlink: 96 bytes leftover after parsing attributes in process `syz.7.11776'. [ 1937.379435][T14393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11777'. [ 1937.985804][T14393] __nla_validate_parse: 1 callbacks suppressed [ 1937.985829][T14393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11777'. [ 1937.985906][T14393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11777'. [ 1938.336563][T14415] netlink: 'syz.4.11782': attribute type 39 has an invalid length. [ 1938.347513][T14415] macvlan1: entered promiscuous mode [ 1938.347625][T14415] macvlan1: entered allmulticast mode [ 1939.099061][T14447] bpf: Bad value for 'uid' [ 1939.599862][T14464] netlink: 40 bytes leftover after parsing attributes in process `syz.7.11796'. [ 1939.606788][T14464] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11796'. [ 1939.934114][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11799'. [ 1940.023277][T14474] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1940.720043][T14494] netlink: 'syz.4.11806': attribute type 10 has an invalid length. [ 1940.729395][T14494] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11806'. [ 1940.835809][T14498] netlink: 'syz.7.11807': attribute type 49 has an invalid length. [ 1940.840287][T14502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11806'. [ 1941.050838][T14498] ip6gretap0: entered promiscuous mode [ 1941.050863][T14498] ip6gretap0: entered allmulticast mode [ 1941.266367][T14517] netlink: 96 bytes leftover after parsing attributes in process `syz.8.11809'. [ 1941.610842][T14525] netlink: 'syz.0.11812': attribute type 6 has an invalid length. [ 1941.610866][T14525] netlink: 140 bytes leftover after parsing attributes in process `syz.0.11812'. [ 1941.655555][T14517] FAULT_INJECTION: forcing a failure. [ 1941.655555][T14517] name failslab, interval 1, probability 0, space 0, times 0 [ 1941.655644][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.8.11809 Not tainted syzkaller #0 PREEMPT(full) [ 1941.655670][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1941.655684][T14517] Call Trace: [ 1941.655693][T14517] [ 1941.655703][T14517] dump_stack_lvl+0xe8/0x150 [ 1941.655744][T14517] should_fail_ex+0x3eb/0x540 [ 1941.655777][T14517] should_failslab+0xa8/0x100 [ 1941.655814][T14517] __kmalloc_cache_node_noprof+0xa5/0x620 [ 1941.655847][T14517] ? __get_vm_area_node+0x155/0x2f0 [ 1941.655868][T14517] ? __get_vm_area_node+0x155/0x2f0 [ 1941.655899][T14517] __get_vm_area_node+0x155/0x2f0 [ 1941.655923][T14517] ? ktime_get+0x1f5/0x220 [ 1941.655956][T14517] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1941.655999][T14517] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1941.656065][T14517] ? trace_irq_disable+0x3b/0x140 [ 1941.656100][T14517] ? hook_capable+0x1c3/0x5e0 [ 1941.656146][T14517] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1941.656184][T14517] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1941.656205][T14517] __vmalloc_noprof+0xd2/0x120 [ 1941.656230][T14517] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1941.656266][T14517] bpf_prog_alloc_no_stats+0x47/0x550 [ 1941.656287][T14517] ? bpf_prog_alloc+0x2a/0x1a0 [ 1941.656313][T14517] bpf_prog_alloc+0x3c/0x1a0 [ 1941.656337][T14517] bpf_prog_load+0x7f8/0x1c60 [ 1941.656376][T14517] ? __pfx_bpf_prog_load+0x10/0x10 [ 1941.656418][T14517] ? __might_fault+0xaf/0x130 [ 1941.656451][T14517] __sys_bpf+0xd86/0xe00 [ 1941.656483][T14517] ? __pfx___sys_bpf+0x10/0x10 [ 1941.656503][T14517] ? lock_acquire+0x115/0x350 [ 1941.656543][T14517] ? ktime_get+0x45/0x220 [ 1941.656594][T14517] ? __pfx_clockevents_program_event+0x10/0x10 [ 1941.656635][T14517] __x64_sys_bpf+0xba/0xd0 [ 1941.656673][T14517] do_syscall_64+0x166/0x520 [ 1941.656701][T14517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.656725][T14517] ? clear_bhb_loop+0x70/0xc0 [ 1941.656752][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.656775][T14517] RIP: 0033:0x7f62319a94d9 [ 1941.656797][T14517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1941.656817][T14517] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1941.656842][T14517] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1941.656860][T14517] RDX: 0000000000000090 RSI: 0000200000000780 RDI: 0000000000000005 [ 1941.656875][T14517] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1941.656890][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1941.656904][T14517] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1941.656943][T14517] [ 1941.666390][T14517] syz.8.11809: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1941.666560][T14517] CPU: 1 UID: 0 PID: 14517 Comm: syz.8.11809 Not tainted syzkaller #0 PREEMPT(full) [ 1941.666615][T14517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 1941.666651][T14517] Call Trace: [ 1941.666670][T14517] [ 1941.666689][T14517] dump_stack_lvl+0xe8/0x150 [ 1941.666778][T14517] warn_alloc+0x24d/0x270 [ 1941.666843][T14517] ? __kasan_kmalloc+0x22/0xb0 [ 1941.666935][T14517] ? __pfx_warn_alloc+0x10/0x10 [ 1941.666989][T14517] ? __get_vm_area_node+0x155/0x2f0 [ 1941.667061][T14517] ? __get_vm_area_node+0x2a9/0x2f0 [ 1941.667134][T14517] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1941.667250][T14517] ? trace_irq_disable+0x3b/0x140 [ 1941.667324][T14517] ? hook_capable+0x1c3/0x5e0 [ 1941.667430][T14517] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1941.667524][T14517] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1941.667570][T14517] __vmalloc_noprof+0xd2/0x120 [ 1941.667625][T14517] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1941.667681][T14517] bpf_prog_alloc_no_stats+0x47/0x550 [ 1941.667729][T14517] ? bpf_prog_alloc+0x2a/0x1a0 [ 1941.667773][T14517] bpf_prog_alloc+0x3c/0x1a0 [ 1941.667829][T14517] bpf_prog_load+0x7f8/0x1c60 [ 1941.667905][T14517] ? __pfx_bpf_prog_load+0x10/0x10 [ 1941.667991][T14517] ? __might_fault+0xaf/0x130 [ 1941.668066][T14517] __sys_bpf+0xd86/0xe00 [ 1941.668132][T14517] ? __pfx___sys_bpf+0x10/0x10 [ 1941.668177][T14517] ? lock_acquire+0x115/0x350 [ 1941.668267][T14517] ? ktime_get+0x45/0x220 [ 1941.668375][T14517] ? __pfx_clockevents_program_event+0x10/0x10 [ 1941.668485][T14517] __x64_sys_bpf+0xba/0xd0 [ 1941.668571][T14517] do_syscall_64+0x166/0x520 [ 1941.668630][T14517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.668679][T14517] ? clear_bhb_loop+0x70/0xc0 [ 1941.668739][T14517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.668797][T14517] RIP: 0033:0x7f62319a94d9 [ 1941.668858][T14517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1941.668918][T14517] RSP: 002b:00007f62327f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1941.668966][T14517] RAX: ffffffffffffffda RBX: 00007f6231c25fa0 RCX: 00007f62319a94d9 [ 1941.669005][T14517] RDX: 0000000000000090 RSI: 0000200000000780 RDI: 0000000000000005 [ 1941.669041][T14517] RBP: 00007f62327f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1941.669065][T14517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1941.669103][T14517] R13: 00007f6231c26038 R14: 00007f6231c25fa0 R15: 00007ffe723f6588 [ 1941.669183][T14517] [ 1941.669227][T14517] Mem-Info: [ 1941.669251][T14517] active_anon:13623 inactive_anon:0 isolated_anon:0 [ 1941.669251][T14517] active_file:90 inactive_file:63017 isolated_file:0 [ 1941.669251][T14517] unevictable:0 dirty:164 writeback:0 [ 1941.669251][T14517] slab_reclaimable:8006 slab_unreclaimable:113116 [ 1941.669251][T14517] mapped:30753 shmem:557 pagetables:3928 [ 1941.669251][T14517] sec_pagetables:0 bounce:0 [ 1941.669251][T14517] kernel_misc_reclaimable:0 [ 1941.669251][T14517] free:1265168 free_pcp:16184 free_cma:0 [ 1941.669383][T14517] Node 0 active_anon:54492kB inactive_anon:0kB active_file:360kB inactive_file:251868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123012kB dirty:656kB writeback:0kB shmem:2228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13788kB pagetables:15576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1941.669531][T14517] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1941.669673][T14517] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1941.669841][T14517] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1941.669938][T14517] Node 0 DMA32 free:1118884kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:54492kB inactive_anon:0kB active_file:360kB inactive_file:251868kB unevictable:0kB writepending:656kB zspages:0kB present:3129332kB managed:2522912kB mlocked:0kB bounce:0kB free_pcp:57428kB local_pcp:26032kB free_cma:0kB [ 1941.670101][T14517] lowmem_reserve[]: 0 0 1 1 1 [ 1941.670198][T14517] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1396kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1941.670266][T14517] lowmem_reserve[]: 0 0 0 0 0 [ 1941.670303][T14517] Node 1 Normal free:3926428kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:7304kB local_pcp:0kB free_cma:0kB [ 1941.670374][T14517] lowmem_reserve[]: 0 0 0 0 0 [ 1941.670411][T14517] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1941.670531][T14517] Node 0 DMA32: 2923*4kB (UME) 3747*8kB (UME) 1884*16kB (UME) 1393*32kB (UME) 698*64kB (UME) 487*128kB (UME) 432*256kB (UME) 239*512kB (UME) 111*1024kB (UE) 8*2048kB (UE) 130*4096kB (UM) = 1118884kB [ 1941.670737][T14517] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1941.670848][T14517] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (M) = 3926428kB [ 1941.671019][T14517] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1941.671039][T14517] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1941.671057][T14517] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1941.671075][T14517] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1941.671092][T14517] 63660 total pagecache pages [ 1941.671123][T14517] 0 pages in swap cache [ 1941.671154][T14517] Free swap = 124996kB [ 1941.671182][T14517] Total swap = 124996kB [ 1941.671211][T14517] 2097051 pages RAM [ 1941.671253][T14517] 0 pages HighMem/MovableOnly [ 1941.671281][T14517] 434358 pages reserved [ 1941.671304][T14517] 0 pages cma reserved [ 1942.468154][ T8643] Bluetooth: hci4: command 0x0406 tx timeout [ 1942.702490][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11813'. [ 1942.919072][T14537] netlink: 'syz.4.11813': attribute type 39 has an invalid length. [ 1943.411505][T14562] __nla_validate_parse: 1 callbacks suppressed [ 1943.411559][T14562] netlink: 52 bytes leftover after parsing attributes in process `syz.8.11818'. [ 1943.750704][T14571] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1944.039705][T14576] netlink: 'syz.0.11820': attribute type 10 has an invalid length. [ 1944.125776][T14576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1944.142789][T14576] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1944.477041][T14585] rxe_eth0 speed is unknown, defaulting to 1000 [ 1944.730958][T14595] netlink: 'syz.8.11827': attribute type 10 has an invalid length. [ 1944.730991][T14595] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11827'. [ 1944.731037][T14595] team0: Device geneve0 is up. Set it down before adding it as a team port [ 1944.731980][T14595] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1945.626211][T14585] lo speed is unknown, defaulting to 1000 [ 1945.696870][T14605] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1945.920003][T14617] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1946.371081][T14621] netlink: 180 bytes leftover after parsing attributes in process `syz.2.11836'. [ 1947.721697][T14661] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11851'. [ 1947.736891][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11851'. [ 1948.059810][T14676] netlink: 'syz.4.11858': attribute type 1 has an invalid length. [ 1949.720437][T14710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11870'. [ 1950.121695][T14704] rxe_eth0 speed is unknown, defaulting to 1000 [ 1950.892091][T14727] netlink: 830 bytes leftover after parsing attributes in process `syz.2.11874'. [ 1952.752421][T14756] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11886'. [ 1954.105474][T14704] lo speed is unknown, defaulting to 1000 [ 1954.268329][T14778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11892'. [ 1976.219675][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.219741][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.659240][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.659304][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.099201][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.099267][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.538977][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.539039][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.979156][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.979220][ T1317] ieee802154 phy1 wpan1: encryption failed: -22