last executing test programs: 7m40.17729253s ago: executing program 4 (id=37): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x68b, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 7m38.885691521s ago: executing program 4 (id=40): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000f00007b105b000000000a95"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 7m38.573289412s ago: executing program 4 (id=44): socket$kcm(0x15, 0x5, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800050027bd70d400fedbdf54"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 7m38.140595922s ago: executing program 4 (id=48): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES16=r2], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@l2tp={0x2, 0x0, @loopback, 0x4}, 0x7f, 0xffffffffffffffff, 0x13}, 0x4040) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x19aec5d, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x900d0) 7m37.908587284s ago: executing program 4 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x8, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x74800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000009000005"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 7m37.194066852s ago: executing program 4 (id=55): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = socket(0x1d, 0x2, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f0000000100)) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 7m36.214600686s ago: executing program 32 (id=55): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r1 = socket(0x1d, 0x2, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5d31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x5452, &(0x7f0000000100)) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [], {0x14}}, 0x28}}, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x25dfdbfc, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x0, 0x6, 0xfffffffc, 0x3ff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9c}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) 6m12.793388914s ago: executing program 3 (id=504): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x800, 0xc8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x401}, 0x0, 0x5, 0xffffffffffffffff, 0x0) close(r0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001e0021000000000054581e920700000005080020000000000a0002"], 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000e40)='ns/mnt\x00') ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0xb701, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000f4"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000000000007910400000000000630a04ff0000000095000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m11.63466654s ago: executing program 3 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000880)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_skbmod={0x0, 0x4, 0x0, 0x0, {{0x34}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x0, 0x2, {{0xffffada1, 0x6, 0x10000000, 0x6, 0x6}, 0x1}}, @TCA_SKBMOD_SMAC={0x0, 0x4, @broadcast}]}, {0x0, 0x6, "828f39c8a13b2a4772d0aa73a181a55eac5a682b17505c81b32e348dc49459b1a6b3825a45f69d11246c87c415bf9e6d529adc66c22cb4ae094b124dfc7b9cb2d653e505baddadedeacb5febc7471f25a598e4fd2da59db36a5ebf8a35048dfcd8bd00625a155dda3ddbf95af9e328935bb033176e30f6e730d74465b1eb48451330cd9fe3d36a2bda8e4943e96f1cf104d269cd5438d2d92fbd19a52fec68090ede04afeac360d5e1fe0d1626d7c4283b48c71693fc24c0243daaaf1014139e92f4b00b2cd268d777809278c0afe12471b4930758a8d6f9df35cec83b33b2ac82369184dc40c6fc1ede70"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x2, 0x1}}}}]}]}, 0xa0}}, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="d800000000010505000000000000c5000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400200100000000000000000000000000020c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe800000000000000000000000000029080007400000000044000e8006000340000400002c00018014000300"/178], 0xd8}, 0x1, 0x0, 0x0, 0x40801}, 0x20000000) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400220000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) (async) socket$kcm(0x2, 0x5, 0x84) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x79445b6e5b58c49f) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x30, 0x8, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4008820) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)=ANY=[@ANYBLOB="10000000191411"], 0x10}}, 0x40000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000f14010029bd7000fddbdfff0c0045"], 0x1c}, 0x1, 0x0, 0x0, 0x24048084}, 0x24000004) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x30, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000841) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_pid(r4, &(0x7f0000000500)=0xffffffffffffffff, 0x12) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff41, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000000007010e0000000000000000050000020c000640"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) (async) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="90000000320015062bbd7000fbdbdf250c"], 0x90}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) 6m10.553126933s ago: executing program 3 (id=509): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={0xffffffffffffffff, 0x0}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xc0189436, &(0x7f0000000280)) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[], 0x20) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b80)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200001400000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00"/216, 0xd8}], 0x1}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2e, 0x2, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 6m8.556471134s ago: executing program 3 (id=513): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0x6, 0xffffffffffffffff, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000003b0009002bbd7000fbdbdf250200000008000180de"], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x4004014) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0x2bd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x2, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x6, 0x20000000000001af, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x10, 0x25, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffda4, 0x0, 0x0, 0x0}, 0x40) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xe, 0xd}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ECN={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000006c40)=ANY=[@ANYBLOB="140000003600030427bd7000fddbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0xc840}, 0x8000) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d080403000000f70002a1180002000607002603600e12080b0f0000810401a800160520000140020000082f3d4e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9851627504575107ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100001340fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bff00e0b42a9ecbee5de6ccd40dd6e4edef5d2defd5cc9b8d3fb7c27a1059ae31c60e", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 6m6.203123128s ago: executing program 3 (id=518): r0 = socket(0x840000000002, 0x3, 0xfb) sendmsg$rds(r0, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0), 0x0, 0x0, 0x0, 0x20000000}, 0x48004) 6m5.917746849s ago: executing program 3 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xfc, 0x1, 0x3, 0x3, 0x0, 0x0, {0x8, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x3}}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa}]}, @NFQA_EXP={0xc4, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x80, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xd, 0x88, 0x81, 0x11021, 0x1, 0x8, '\x00', 0x0, r5, 0x2, 0x5, 0x2, 0xc, @void, @value, @value=r5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x9, 0x0, 0xfff, 0x80, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0xc752f905e18da48d, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a8004000480080001"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 6m1.396918265s ago: executing program 1 (id=548): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0x4, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010029bd7000fcdbdf250900020000007a31000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x4040815}, 0x800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x7fffd, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000200)=""/76, 0x700}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x40, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0xc8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x19) r5 = socket$kcm(0xa, 0x1, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=r6], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x8916, &(0x7f0000000000)={r6}) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x118339, 0x4, 0x1, 0x4, 0x1002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0xa2f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x5450, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8936, &(0x7f0000000000)={r6}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x5, 0x0, 0x19c6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x3, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x2, 0x5}, {0x1, 0x1}, {0x4, 0x4}, {0xd, 0x2}, {0xd, 0x3}, {0xd, 0x1}, {0x10, 0x4}]}, @float={0x10, 0x0, 0x0, 0x10, 0xc}, @const={0xf, 0x0, 0x0, 0xa, 0x3}, @enum64={0xd, 0x7, 0x0, 0x13, 0x0, 0xa, [{0xe, 0x9, 0x5}, {0xf, 0x7c, 0x8}, {0x10, 0x7, 0x9}, {0xa, 0x3, 0x2}, {0xf, 0x3, 0x30}, {0x7, 0xfffffffc, 0x1}, {0xb, 0x4, 0x107}]}, @const={0xb, 0x0, 0x0, 0xa, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x1}}, @ptr={0xc, 0x0, 0x0, 0x2, 0x3}, @func={0x8, 0x0, 0x0, 0xc, 0x4}, @typedef={0x6}]}, {0x0, [0x30]}}, &(0x7f0000000640)=""/155, 0x11f, 0x9b, 0x0, 0xa}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="06fa03076844ba8cb89e14f04305", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m58.146722837s ago: executing program 1 (id=554): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xfdb5, 0x0, &(0x7f0000000180)="e02742e8680d85ff9782762f86dd", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2a, 0x107, 0xfffffffc, 0x25dfdbff, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xf}, 0x0, 0x80000, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_REPLY={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x28}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x89e1, &(0x7f00000007c0)={'netdevsim0\x00', @local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400", 0x36}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x98b006, 0x0) socket$kcm(0x29, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4c085}, 0x4c800) 5m57.770514234s ago: executing program 1 (id=557): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x0, 0x1, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x5452, &(0x7f0000000b80)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|C\b\x00\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdd\x85\xaac{\x8c\x8ffp`-\xcd\xf6jh\xbf\x9c\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\x8b\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca^\xf9\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x96\x86\xdb\xa9\xd3\x01\xb2\xc7\xf8G\x069\x90,\xda\xf6\xc5\xcd\xec\xa3B\xc3\"4\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\x7f\xec\xb2\xc5E\x00\xdd\xf2e\xa8\xf1<\xb2\xc82\xbf=o\x00`\xc1A\'\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x92\xbb\xe3Y\x97\xc2') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002500010125bd7000fdffffff550000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20028840) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x8008, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x10, 0x0, 0x4, 0x0, 0x5c35, 0xb59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x3}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001800010324bd70c6695752af3d"], 0x14}}, 0x8000) 5m57.532164396s ago: executing program 1 (id=559): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x37, 0x107, 0xfffffff3, 0x25d7dbfe, {0x8, 0x7c}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) 5m57.357813435s ago: executing program 1 (id=562): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8a445, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x8, 0x5, 0x7fffffff, 0xdffe, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0d00000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa00000000690e000000000000008b798b4f7458d1863cc67c4c6a06fa28e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc7a65d073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f838f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b32176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d247714358d8b170c3b5cad11f72cd9d88e56b95fe9f3de5cfcfa5c1da8ba181580d9db035efe38834de171b64f4b4c1b242786dcc5679e3d0613cdf05b02d7ad4f3b8af27a696e9b8809c2d68fddfcbd451e81d37c11f95094b91fff61ab9e69780b133d1dbca5a78695131c34c855dd793f90ca3973a4bd5606151b3600373d2bbfb7b3638e713e7275af06107949ff5dffe24d3c448ae6e4646b346fe0a21eef1e55d0659eac930d00000000000ff52b98317c45417b900a47c1ae1103c09fc173c1cf28bf7ef7a61523c6b2dbb35f5ae29877bb8e1b3e257056c0d205d391ed7b2089a72a93885b9fc8430ff"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe80, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x8000) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0xff, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x7}, 0x11cfa, 0x400, 0x498, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040893}, 0xc000) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000041296a1180002000000030000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x90) 5m56.918689816s ago: executing program 1 (id=565): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x3, 0x9}, 0x0, 0x0, r2, 0x0) syz_clone(0x40020100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x2, 0x4, 0x3fe, 0x7ffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3) sendmsg$key(r1, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020f000014000000000000000000000005000500000000000a00000400000000000000000000000020000000000000000000000000000000080012000000020000000000fdffffff0600000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001050006002b8000000a00000200000000ff02000000000000000000000000000100000000000000003e0401f8c5862711354bee554540b2"], 0xa0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800050027bd70d400fedbdf54"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) close(r4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x81, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffff, 0xfffc}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x75, 0x1ef7}, 0x1220, 0x4, 0x5, 0x0, 0x0, 0x7, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) 5m50.714362375s ago: executing program 33 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xfc, 0x1, 0x3, 0x3, 0x0, 0x0, {0x8, 0x0, 0x8}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x3}}, @NFQA_CT={0xc, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xa}]}, @NFQA_EXP={0xc4, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x28, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, @CTA_EXPECT_MASK={0x1c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xff}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000010000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x80, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0xd, 0x88, 0x81, 0x11021, 0x1, 0x8, '\x00', 0x0, r5, 0x2, 0x5, 0x2, 0xc, @void, @value, @value=r5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x9, 0x0, 0xfff, 0x80, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x1403, 0xc752f905e18da48d, 0x70bd29, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a8004000480080001"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 5m41.044481886s ago: executing program 34 (id=565): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400010404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x3, 0x9}, 0x0, 0x0, r2, 0x0) syz_clone(0x40020100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x2, 0x4, 0x3fe, 0x7ffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3) sendmsg$key(r1, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020f000014000000000000000000000005000500000000000a00000400000000000000000000000020000000000000000000000000000000080012000000020000000000fdffffff0600000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001050006002b8000000a00000200000000ff02000000000000000000000000000100000000000000003e0401f8c5862711354bee554540b2"], 0xa0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800050027bd70d400fedbdf54"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) close(r4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x81, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xffffffff, 0xfffc}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf0}, 0x10140) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x89ec, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x75, 0x1ef7}, 0x1220, 0x4, 0x5, 0x0, 0x0, 0x7, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_RESET(r10, 0x2403, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) 4m54.438826412s ago: executing program 7 (id=825): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x2, 0x0, 0x480000000000000c, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x78, 0x1ef7}, 0x111efa, 0x4, 0x98, 0x0, 0x5, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1d, 0x5, 0x0, 0x0, 0x0, 0x2, 0x80048, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x2bc}, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000000c0)=r4, 0x4) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x24008051) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x1, 0x0, 0x2, 0x8}]}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 4m51.257170654s ago: executing program 7 (id=829): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x207, '\x00', 0x0, r0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4m51.048466498s ago: executing program 7 (id=833): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20400, 0x0) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f00000002c0)={0xfd, 0xa, 0x7, @remote}, 0x1c, 0x0}, 0x20000b5c) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cgroup.freeze\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000100002020207b1af8ff00000000bf86a26db800000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x36) 4m50.328923388s ago: executing program 7 (id=839): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x48, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x752f95ccd5d14a65}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014091}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600800a000008001c00", @ANYRES32=r1, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x2000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={0xffffffffffffffff, &(0x7f0000000240)="7f0475a233cf3e374b98c2370ac34e57d4d634654469f90f955acfb9dd83e6c6a6eab73cf4a7bfabe65d18a1473fe44b23c650f4f14ad78e4840a2fce61b98d8eac0f0836b210e735e53fab194dd3b42f5f26782efda5a7de70af1cc94ab1de8caea3b60a3a1dac37661b457c2810d9a265b36da2ee1344d69e67f1144fee153e6ccbe22d05cf9f62eda71eef614ddf15c41d77c953a00dcd6c5bf372cf1f3736ee97bda9e9b511a0847003bda7082626279506c60032ff053e024749a005a155a73cd7ab4fdbd74d0b7d8fb6c23af1f88a848c8"}, 0x20) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x3, [@volatile={0xf, 0x0, 0x0, 0x9, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x9}}, @func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict={0x4, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000800)=""/84, 0x57, 0x54, 0x1, 0xfffffff7}, 0x28) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x10000000000}, 0x20) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8b7840, 0x0) 4m48.641737249s ago: executing program 7 (id=844): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x108902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x207) 4m47.947235468s ago: executing program 7 (id=852): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a30"], 0xc4}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 4m47.528559821s ago: executing program 35 (id=852): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a30"], 0xc4}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 7.927994572s ago: executing program 6 (id=2765): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) close(0xffffffffffffffff) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000300)=0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 7.119703103s ago: executing program 6 (id=2776): socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 6.945270492s ago: executing program 6 (id=2780): socket$kcm(0xa, 0x2, 0x73) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000300), 0x6e, 0x0}, 0x898ba779924b61c1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x40, 0x4f, 0xfe, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x401946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xd, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000160007012cbd7000ffdbdf251e7c00000c00018008000100", @ANYRES32=r4, @ANYBLOB="6b0fc247149ef625aed74665bd3713549895335674a918178fbb4eab1d1c"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)={'a', ' *:* ', 'rwm\x00'}, 0xa) recvmsg$unix(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f00000006c0)=""/71, 0x47}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/1, 0x1}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)=""/174, 0xae}, {&(0x7f0000000540)=""/49, 0x31}], 0x6, &(0x7f0000000800)=[@rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40010043) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) 4.692807226s ago: executing program 6 (id=2786): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000004800913a745c7388"], 0xfe33) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, 0x0, 0x200ce0c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private1, @in6=@local, 0x1, 0x714, 0x4e20, 0x5, 0x0, 0x0, 0x0, 0x6c}, {@in6=@loopback, 0x4d4, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x6, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xe0fd, 0x80000001}, {0x5, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0x1, 0x900000000000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 3.111812817s ago: executing program 5 (id=2802): r0 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x104b8d, 0x4, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000006}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0xa000000) 3.032728676s ago: executing program 8 (id=2803): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0xf5, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}}, 0x0) 2.905665777s ago: executing program 8 (id=2806): mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x24, 0x18, 0x229, 0x0, 0x25dfdbff, {0x2}, [@typed={0x4, 0x800}, @nested={0x4, 0x8}, @typed={0x8, 0x1e, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x0) 2.82410446s ago: executing program 5 (id=2807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x3}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x38}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x13c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_DESC={0xf4, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x23}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x9c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x49}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x73e35d27}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xba6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1eee}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2785}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xeb}]}]}]}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x160, 0x2, 0xa, 0x201, 0x0, 0x0, {0x5a2557a4f75e9e79, 0x0, 0xa}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x102, 0x6, "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"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWRULE={0xc0, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0xb2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3b}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}]}, @NFT_MSG_NEWRULE={0x19c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x9b, 0x7, 0x1, 0x0, "96bc7003cfcc2111b752c8871a835ccaf879d02bb46d3d38e61df5a47d7cda4d695d6e704d4e3e3cca4ef0fca85b6cad06a75ce93505358c18d30c5d7d8058396547b0a2ddd5db2bc680a06c3c994ffbaf4eeffaa40283d9d84dcdb9bd8cae7cb7df5a7d82ba2e80210f981019c61fa1bce00b84ad1ab3aa073a53160464a56ed3eb63239f0ab582c42d99d032ae09b5495a7abb3cb697"}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_USERDATA={0xca, 0x7, 0x1, 0x0, "965d96b58c5760b7394385470b0f9b6b03fba02b648c0513ee3a130f006bc6b7bd16ce8de5efa45585b5fdc02c8356dd773f6a46677af345be4ab270f3639ab79cc0b169a4db374927769a038afe833f6eebb242c0f34a5464b3a634c22567115e983a0e8d57a2d9e4de0acb3e89c25a8f7ff80bb4935aafe309bc6d502e895c1d66ea4bf961859917fb6a424708acbecb2cac30da5a5721d0960d1a381681ca57df5fb4f2f274adc2503241b7f9712cd80f9ba6a8a28dded2adb21a16ec57d012bcd56d82f9"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5bc}, 0x1, 0x0, 0x0, 0x84}, 0x20004001) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400000ff, 0x0, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x40000, 0x0, 0x2, 0x0, 0x3fc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000540000000030800024000000002080001400000000108000740000000000900010073797a30000000000900020073797a320000000014000000110001"], 0xac}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000009031b00000000000000000a00000708f20240000000080c000200060003400001000008000301000000000000004f766df875f17200c5e171c5c6"], 0x58}, 0x1, 0x0, 0x0, 0x20048010}, 0x44000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000180001032400002b69124db134"], 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2e0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x3f, 0x51, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000300), 0x2}, 0x24000081) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x1946}, 0x0, 0x0, 0xe, 0xd, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.801754875s ago: executing program 8 (id=2808): socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.723281552s ago: executing program 0 (id=2809): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000003c0)}, 0x20) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000060000000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x28, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c000000020603000000000000000000070000000c00078008000840000000100500010006000000050005000200000005000400000000000900020073797a310000000016000200686173683a6e65742c706f72742c6e6574000000220273577b725cc4a3d3c83ce9c52b1b5c0d40b36922d9f588fc145bccf6782e5d4c71b3a51cfe91449752fbf3e7fd878a080a3cdf3a456249d49ff051c9134b3390dec41b15325095b713b1316c7d5dbc7736dc347ba49bf8d7417d8b253200c516482f76bccdc1cba15550bea5e7530c159af77193cf6f927c147eda02ac0a601293a5ec834a8e4791a6ffa6e0d00f893be247c4feaf61dc8f3bf79fc19b"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000040)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x10009}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x4}, 0x8810) 2.706400707s ago: executing program 2 (id=2810): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000000"], 0x50) 2.584368618s ago: executing program 2 (id=2811): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xf}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, 0x0, 0x4000800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)={0x2c, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0xa8}]}]}, 0x2c}, 0x1, 0x4200, 0x0, 0xc000}, 0x4040) 2.569676523s ago: executing program 8 (id=2812): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r5 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, &(0x7f0000000040)=0x40e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x38, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0xcb, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xf}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="440000000202010200000000000000000a000000300002802c000180140003"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) 2.506646929s ago: executing program 0 (id=2813): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xed0, 0x74a7bf9a, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x19) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844) socket$nl_audit(0x10, 0x3, 0x9) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x3fa, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x800) (async) sendmsg$AUDIT_SET_FEATURE(r5, &(0x7f0000000800)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x20, 0x3fa, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1, 0x0, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8804}, 0x800) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)=""/174, 0xae}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000001b40)=""/4065, 0xfe1}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000240)=""/152, 0x98}], 0x5}, 0x20) socket$kcm(0x23, 0x5, 0x0) (async) r6 = socket$kcm(0x23, 0x5, 0x0) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000200)={[{0x2d, 'cpuacct'}, {0x2b, 'devices'}, {0x2b, 'net'}]}, 0x17) setsockopt$sock_attach_bpf(r6, 0x113, 0x2, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002500090122bd7000fcffffff5c000000080003004700000008006b805a"], 0x24}, 0x1, 0x0, 0x0, 0x40449d7}, 0x0) 2.171405788s ago: executing program 5 (id=2814): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.681020892s ago: executing program 2 (id=2815): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000000100000120"], 0x50) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 1.587779147s ago: executing program 5 (id=2816): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b00)=@newtaction={0x64, 0x30, 0x9, 0x400004, 0x1000000, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x200, 0x3, 0x200}, 0x3}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x3000000}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) 1.285623364s ago: executing program 0 (id=2817): socket$kcm(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x4}, 0x1080, 0xcf8, 0x0, 0x8, 0x3fe, 0x7ffffffc, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x1}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 1.262867222s ago: executing program 2 (id=2818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8e982, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1b, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) r4 = socket$kcm(0x2, 0x922000000001, 0x106) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x10) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000000)=r3, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000000)={r5}) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00d5222175c15f277da2860000000000000000000000fc010000000000000000e2ffffffff000000000000000000000000cb2e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@mcast1, {0xfe, 0x1000000000000192, 0xf, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x81}, 0x844) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0010000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/17], 0x48) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x5460, 0x0) 1.258409513s ago: executing program 6 (id=2819): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafea, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x10, 0x5, &(0x7f0000001340)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8079}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000080), &(0x7f00000004c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="a6e12b288aedd1fe40d5d38c0753926462766b8624637138366f70b7e5718849cb0a231d2b5f917bc8584f52ebb50edbf18221be4635484f591e", @ANYBLOB="0000000000000000b7080000000000007b3b00ff00000000bfa200000000000007020000f8ffffffb703000000000000cf0400000000000085000000c3000000", @ANYRESDEC=r2, @ANYRESHEX=r0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x4747a8d7407bc20d, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/30], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r7, 0xc0045878, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(r7, 0x0, 0x40050) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs$namespace(0x0, 0x0) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x801, 0x0, 0xffffff7f, {0x5, 0x0, 0xec0}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000000906010200000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007000000ce26ae50cdd1aeeb467ca518aa6ef5d6839933f9c3be4a5c6a4573d0e5db3bc255536bef5a"], 0x4c}}, 0x4000080) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000090) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x82020}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3e8, 0x400, 0x70bd2d, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) socket$nl_xfrm(0x10, 0x3, 0x6) 1.068378134s ago: executing program 8 (id=2820): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000a, 0x954b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xd87a, 0x1}, 0x10fb3a, 0xff, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8841) sendmsg$key(0xffffffffffffffff, 0x0, 0x4880) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x49449, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x8, 0x5}, 0x1, 0x4, 0x0, 0x0, 0xb, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25fe880000000000000000000000000101ffffffff000000000000000000000000000000004e2400000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000021000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002020000000044000500e0000001000000000000000000000000000004d632"], 0xfc}, 0x1, 0x0, 0x0, 0x20080004}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r3, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x84) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x14, 0x10, 0x70bd26, 0x8, {0x2b, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "65a1e114185877c63e40e6ae532b0215671d7e4c0d9ab38746e55483c910c8eeebf20bceb6dc468efdb4d0"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "2e8c674bb77a7d241a"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20008015}, 0x0) 1.066389369s ago: executing program 5 (id=2821): socket$kcm(0xa, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x32080000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a800160020", 0x35}], 0x1}, 0x4000090) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x4e21, 0x3, @loopback, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x198}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) 1.043890294s ago: executing program 2 (id=2822): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@base={0x5, 0x9d, 0x42, 0x40, 0xc0, 0xffffffffffffffff, 0x1}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x8010) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x44800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4080) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0, 0x7000000}, 0x38) 992.682459ms ago: executing program 0 (id=2823): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000003c0)}, 0x20) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0xfa, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000060000000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x28, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000040)={&(0x7f00000001c0)=@tipc=@name={0x1e, 0x2, 0x0, {{0x42, 0x10009}, 0x3}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x4}, 0x8810) 735.933952ms ago: executing program 5 (id=2824): syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x5, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x100000002}, 0x8100, 0xc8, 0x8, 0x0, 0xfffffffffffffffe, 0x341, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xe) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x11ffa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa20006558"], 0xcfa4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="9feb010018000000000000005700000057000000060000000d0000000000000e030000000100dee37bb5b12657732e0000100000000100000f0300000004000000020000000400000005bda8000000000100000d000000000d000000050000000500000000000008000000000b00000000000012040000000000512e5f5f00"], &(0x7f0000000080)=""/4096, 0x76, 0x1000, 0x1, 0x9}, 0x28) 734.91445ms ago: executing program 2 (id=2825): r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$alg(0x26, 0x5, 0x0) write$cgroup_pid(r1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x21, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000002000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000004000000000b70500000085ffff00a500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x7, 0xa6, &(0x7f0000000640)=""/166, 0x40f00, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x0, 0xe, 0x1, 0xf}, 0x10, 0xc557, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x1}) socket$kcm(0xa, 0x2, 0x73) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x5, &(0x7f0000000380)=ANY=[@ANYRES16=r6], &(0x7f0000001080)='GPL\x00', 0x4, 0x0, 0x0, 0xbbaa179572171b1a, 0x31, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 581.833604ms ago: executing program 0 (id=2826): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 434.380001ms ago: executing program 6 (id=2827): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x829, 0x1, 0x10, 0x0, 0x4, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0xff16, 0x0}, 0x34008841) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 276.20434ms ago: executing program 0 (id=2828): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400bfff07010000080700ffe500fcff0201000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000340)}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe8}}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)={0x14, 0x1a, 0x1, 0x1000000, 0x0, {0x1a, 0x0, 0x6e80}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) r5 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fstat(0xffffffffffffffff, &(0x7f0000000bc0)) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$unix(r2, 0x0, 0x20044000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) 0s ago: executing program 8 (id=2829): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000400000000000001d71185f000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): ibute type 2 has an invalid length. [ 310.511026][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1068'. [ 310.546367][ T9741] openvswitch: netlink: Flow key attr not present in new flow. [ 310.712320][ T9748] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1069'. [ 310.791385][ T9748] netlink: 172 bytes leftover after parsing attributes in process `syz.8.1069'. [ 310.914942][ T9748] netlink: 'syz.8.1069': attribute type 1 has an invalid length. [ 312.221655][ T9755] sock: sock_set_timeout: `syz.5.1070' (pid 9755) tries to set negative timeout [ 312.359187][ T9776] netlink: 'syz.6.1076': attribute type 21 has an invalid length. [ 312.363209][ T9774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1075'. [ 312.418098][ T9776] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1076'. [ 312.435766][ T9774] netlink: 'syz.0.1075': attribute type 10 has an invalid length. [ 312.456229][ T9781] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1077'. [ 312.468233][ T9781] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1077'. [ 312.582581][ T9785] netlink: 'syz.5.1079': attribute type 10 has an invalid length. [ 312.658688][ T9790] netlink: 'syz.2.1080': attribute type 29 has an invalid length. [ 312.668292][ T9790] netlink: 'syz.2.1080': attribute type 29 has an invalid length. [ 312.863305][ T9797] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1084'. [ 312.879009][ T9799] netlink: 'syz.0.1083': attribute type 17 has an invalid length. [ 312.901595][ T9798] netlink: 'syz.0.1083': attribute type 17 has an invalid length. [ 313.006781][ T9808] netlink: 'syz.5.1084': attribute type 1 has an invalid length. [ 313.231689][ T9799] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 313.836939][ T9833] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 314.468874][ T9845] netlink: 'syz.2.1092': attribute type 10 has an invalid length. [ 314.656880][ T9847] netlink: 'syz.5.1093': attribute type 21 has an invalid length. [ 315.069799][ T9862] __nla_validate_parse: 5 callbacks suppressed [ 315.069820][ T9862] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1100'. [ 315.085836][ T9860] netlink: 4595 bytes leftover after parsing attributes in process `syz.5.1099'. [ 315.096941][ T9862] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1100'. [ 315.180408][ T9866] netlink: zone id is out of range [ 315.206851][ T9866] netlink: zone id is out of range [ 315.218675][ T9866] netlink: zone id is out of range [ 315.504817][ T9866] netlink: set zone limit has 4 unknown bytes [ 315.784646][ T9875] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1102'. [ 315.898058][ T9881] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.1106'. [ 315.914269][ T9880] netlink: 'syz.8.1107': attribute type 21 has an invalid length. [ 315.935185][ T9880] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.306462][ T9886] netlink: 'syz.2.1108': attribute type 2 has an invalid length. [ 316.776074][ T50] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 316.963189][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.979268][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.738109][ T9942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 317.792432][ T9938] validate_nla: 2 callbacks suppressed [ 317.792452][ T9938] netlink: 'syz.2.1124': attribute type 2 has an invalid length. [ 317.835496][ T50] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 318.130879][ T9926] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1122'. [ 318.614023][ T9951] netlink: 'syz.6.1127': attribute type 21 has an invalid length. [ 318.631658][ T9951] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1127'. [ 318.719368][ T9962] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 6 [ 319.270162][ T9980] netlink: 'syz.0.1138': attribute type 26 has an invalid length. [ 319.673275][ T9984] netlink: 'syz.6.1139': attribute type 2 has an invalid length. [ 320.801661][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 320.810386][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 320.824735][ T50] Bluetooth: hci2: hardware error 0x00 [ 322.531249][ T9999] netlink: 'syz.5.1143': attribute type 21 has an invalid length. [ 322.588906][ T9999] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1143'. [ 322.973484][T10010] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1145'. [ 323.016735][T10010] netlink: 'syz.6.1145': attribute type 10 has an invalid length. [ 323.168752][T10014] netlink: 'syz.5.1147': attribute type 10 has an invalid length. [ 323.195145][T10014] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.203930][T10014] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.934284][T10014] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.941807][T10014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.951084][T10014] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.958556][T10014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.042254][T10014] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 324.218079][T10039] FAULT_INJECTION: forcing a failure. [ 324.218079][T10039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.234023][T10039] CPU: 0 UID: 0 PID: 10039 Comm: syz.6.1153 Not tainted syzkaller #0 PREEMPT(full) [ 324.234051][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.234063][T10039] Call Trace: [ 324.234071][T10039] [ 324.234080][T10039] dump_stack_lvl+0xe8/0x150 [ 324.234108][T10039] should_fail_ex+0x412/0x560 [ 324.234142][T10039] _copy_from_user+0x2d/0xb0 [ 324.234164][T10039] ___sys_sendmsg+0x1c6/0x360 [ 324.234194][T10039] ? __lock_acquire+0x6b5/0x2cf0 [ 324.234220][T10039] ? __pfx____sys_sendmsg+0x10/0x10 [ 324.234281][T10039] ? __fget_files+0x2a/0x420 [ 324.234301][T10039] ? __fget_files+0x3a0/0x420 [ 324.234331][T10039] __x64_sys_sendmsg+0x1bd/0x2a0 [ 324.234360][T10039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 324.234396][T10039] ? __pfx_ksys_write+0x10/0x10 [ 324.234430][T10039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.234451][T10039] do_syscall_64+0x174/0x580 [ 324.234477][T10039] ? trace_irq_disable+0x3b/0x140 [ 324.234506][T10039] ? clear_bhb_loop+0x40/0x90 [ 324.234529][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.234548][T10039] RIP: 0033:0x7fb9e139ce59 [ 324.234566][T10039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.234581][T10039] RSP: 002b:00007fb9e2292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.234601][T10039] RAX: ffffffffffffffda RBX: 00007fb9e1615fa0 RCX: 00007fb9e139ce59 [ 324.234614][T10039] RDX: 0000000000008050 RSI: 0000200000000040 RDI: 0000000000000003 [ 324.234625][T10039] RBP: 00007fb9e2292090 R08: 0000000000000000 R09: 0000000000000000 [ 324.234654][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.234665][T10039] R13: 00007fb9e1616038 R14: 00007fb9e1615fa0 R15: 00007ffd51564f28 [ 324.234698][T10039] [ 324.505092][T10042] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1154'. [ 324.564485][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 324.615217][T10036] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1152'. [ 324.649666][T10048] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1154'. [ 324.675194][T10048] netlink: 'syz.5.1154': attribute type 1 has an invalid length. [ 324.868539][T10050] netlink: 'syz.8.1157': attribute type 2 has an invalid length. [ 325.066976][T10058] netlink: 'syz.5.1158': attribute type 21 has an invalid length. [ 325.109068][T10058] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1158'. [ 325.504590][T10078] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1163'. [ 325.557198][T10087] netlink: 'syz.6.1163': attribute type 10 has an invalid length. [ 326.418518][T10117] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1170'. [ 326.456963][T10120] netlink: 'syz.5.1172': attribute type 1 has an invalid length. [ 327.041475][T10134] netlink: 'syz.0.1174': attribute type 2 has an invalid length. [ 327.178416][T10145] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1177'. [ 327.231890][T10145] netlink: 'syz.2.1177': attribute type 10 has an invalid length. [ 327.400171][T10154] netlink: 'syz.8.1175': attribute type 1 has an invalid length. [ 327.495336][T10159] FAULT_INJECTION: forcing a failure. [ 327.495336][T10159] name failslab, interval 1, probability 0, space 0, times 0 [ 327.554561][T10159] CPU: 0 UID: 0 PID: 10159 Comm: syz.5.1178 Not tainted syzkaller #0 PREEMPT(full) [ 327.554593][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.554607][T10159] Call Trace: [ 327.554615][T10159] [ 327.554624][T10159] dump_stack_lvl+0xe8/0x150 [ 327.554652][T10159] should_fail_ex+0x412/0x560 [ 327.554690][T10159] should_failslab+0xa8/0x100 [ 327.554724][T10159] __kmalloc_cache_noprof+0x88/0x660 [ 327.554752][T10159] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 327.554776][T10159] ? __kmalloc_cache_noprof+0x15b/0x660 [ 327.554807][T10159] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 327.554843][T10159] genl_family_rcv_msg_doit+0x22a/0x330 [ 327.554873][T10159] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 327.554909][T10159] ? bpf_lsm_capable+0x9/0x20 [ 327.554950][T10159] ? security_capable+0x7e/0x2c0 [ 327.554983][T10159] genl_rcv_msg+0x61c/0x7a0 [ 327.555012][T10159] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.555033][T10159] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 327.555056][T10159] ? __pfx_ref_tracker_free+0x10/0x10 [ 327.555075][T10159] ? __asan_memcpy+0x40/0x70 [ 327.555097][T10159] ? __skb_clone+0x63/0x7a0 [ 327.555135][T10159] netlink_rcv_skb+0x232/0x4b0 [ 327.555164][T10159] ? __pfx_genl_rcv_msg+0x10/0x10 [ 327.555188][T10159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 327.555232][T10159] ? down_read+0x270/0x2e0 [ 327.555251][T10159] ? genl_rcv+0xd/0x40 [ 327.555280][T10159] genl_rcv+0x28/0x40 [ 327.555299][T10159] netlink_unicast+0x75c/0x8e0 [ 327.555335][T10159] netlink_sendmsg+0x813/0xb40 [ 327.555374][T10159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.555407][T10159] ? aa_sock_msg_perm+0xf1/0x1b0 [ 327.555435][T10159] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 327.555463][T10159] ____sys_sendmsg+0x972/0x9f0 [ 327.555492][T10159] ? __might_fault+0xaf/0x130 [ 327.555524][T10159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.555564][T10159] ? import_iovec+0x73/0xa0 [ 327.555594][T10159] ___sys_sendmsg+0x2a5/0x360 [ 327.555622][T10159] ? __lock_acquire+0x6b5/0x2cf0 [ 327.555651][T10159] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.555718][T10159] ? __fget_files+0x2a/0x420 [ 327.555741][T10159] ? __fget_files+0x3a0/0x420 [ 327.555774][T10159] __x64_sys_sendmsg+0x1bd/0x2a0 [ 327.555807][T10159] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.555834][T10159] ? perf_trace_preemptirq_template+0xb2/0x350 [ 327.555875][T10159] ? rcu_is_watching+0x15/0xb0 [ 327.555910][T10159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.555932][T10159] do_syscall_64+0x174/0x580 [ 327.555960][T10159] ? trace_irq_disable+0x3b/0x140 [ 327.555989][T10159] ? clear_bhb_loop+0x40/0x90 [ 327.556014][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.556035][T10159] RIP: 0033:0x7f09e179ce59 [ 327.556055][T10159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.556071][T10159] RSP: 002b:00007f09e2662028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.556092][T10159] RAX: ffffffffffffffda RBX: 00007f09e1a15fa0 RCX: 00007f09e179ce59 [ 327.556105][T10159] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 327.556117][T10159] RBP: 00007f09e2662090 R08: 0000000000000000 R09: 0000000000000000 [ 327.556128][T10159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.556139][T10159] R13: 00007f09e1a16038 R14: 00007f09e1a15fa0 R15: 00007ffc60de1278 [ 327.556170][T10159] [ 328.942737][T10189] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1187'. [ 329.288717][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 329.516865][T10216] netlink: 'syz.6.1193': attribute type 10 has an invalid length. [ 329.548211][T10214] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1193'. [ 329.803674][T10221] netlink: 388 bytes leftover after parsing attributes in process `syz.8.1194'. [ 329.915103][T10225] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1194'. [ 329.964016][T10221] netlink: 'syz.8.1194': attribute type 16 has an invalid length. [ 329.990420][T10221] netlink: 'syz.8.1194': attribute type 17 has an invalid length. [ 331.684493][T10262] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1202'. [ 331.938302][T10272] netlink: 'syz.8.1204': attribute type 10 has an invalid length. [ 332.300599][T10282] FAULT_INJECTION: forcing a failure. [ 332.300599][T10282] name failslab, interval 1, probability 0, space 0, times 0 [ 332.366980][T10282] CPU: 1 UID: 0 PID: 10282 Comm: syz.6.1208 Not tainted syzkaller #0 PREEMPT(full) [ 332.367011][T10282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 332.367030][T10282] Call Trace: [ 332.367053][T10282] [ 332.367082][T10282] dump_stack_lvl+0xe8/0x150 [ 332.367130][T10282] should_fail_ex+0x412/0x560 [ 332.367189][T10282] should_failslab+0xa8/0x100 [ 332.367225][T10282] ? alloc_empty_file+0x5b/0x1d0 [ 332.367253][T10282] kmem_cache_alloc_noprof+0x87/0x650 [ 332.367282][T10282] ? is_bpf_text_address+0x292/0x2b0 [ 332.367338][T10282] alloc_empty_file+0x5b/0x1d0 [ 332.367373][T10282] path_openat+0x10f/0x3860 [ 332.367481][T10282] ? stack_depot_save_flags+0x33/0x810 [ 332.367542][T10282] ? kasan_save_track+0x4f/0x80 [ 332.367569][T10282] ? kasan_save_track+0x3e/0x80 [ 332.367595][T10282] ? __kasan_slab_alloc+0x6c/0x80 [ 332.367629][T10282] ? __pfx_path_openat+0x10/0x10 [ 332.367656][T10282] ? __x64_sys_openat+0x138/0x170 [ 332.367707][T10282] ? perf_trace_run_bpf_submit+0xee/0x170 [ 332.367784][T10282] do_file_open+0x23e/0x4a0 [ 332.367839][T10282] ? __pfx_do_file_open+0x10/0x10 [ 332.367956][T10282] ? _raw_spin_unlock+0x28/0x50 [ 332.367988][T10282] ? alloc_fd+0x64b/0x6c0 [ 332.368057][T10282] do_sys_openat2+0x113/0x200 [ 332.368095][T10282] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.368138][T10282] ? __pfx_sched_clock_cpu+0x10/0x10 [ 332.368194][T10282] __x64_sys_openat+0x138/0x170 [ 332.368235][T10282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.368264][T10282] do_syscall_64+0x174/0x580 [ 332.368306][T10282] ? clear_bhb_loop+0x40/0x90 [ 332.368346][T10282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.368371][T10282] RIP: 0033:0x7fb9e135d68e [ 332.368397][T10282] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 332.368415][T10282] RSP: 002b:00007fb9e2291ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 332.368437][T10282] RAX: ffffffffffffffda RBX: 00007fb9e22926c0 RCX: 00007fb9e135d68e [ 332.368452][T10282] RDX: 0000000000000002 RSI: 00007fb9e2291f90 RDI: ffffffffffffff9c [ 332.368466][T10282] RBP: 00007fb9e2292090 R08: 0000000000000000 R09: 0000000000000000 [ 332.368479][T10282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.368491][T10282] R13: 00007fb9e1616038 R14: 00007fb9e1615fa0 R15: 00007ffd51564f28 [ 332.368565][T10282] [ 332.788205][T10289] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1211'. [ 332.797239][T10289] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 333.007734][T10296] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1212'. [ 333.201661][T10301] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.1215'. [ 333.385551][T10307] : entered promiscuous mode [ 333.510332][T10312] netlink: 'syz.8.1219': attribute type 21 has an invalid length. [ 334.416466][ T50] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 334.547952][T10341] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1231'. [ 336.141570][T10375] netlink: 'syz.5.1243': attribute type 1 has an invalid length. [ 336.453582][T10383] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1245'. [ 338.314305][T10402] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1251'. [ 338.375949][T10406] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1253'. [ 338.396529][T10402] netlink: 'syz.0.1251': attribute type 1 has an invalid length. [ 338.414156][T10402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.473244][T10405] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1252'. [ 338.678309][T10413] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1255'. [ 338.698397][T10413] netlink: 'syz.8.1255': attribute type 10 has an invalid length. [ 338.797843][ T50] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 338.892891][T10413] team0 (unregistering): Port device team_slave_0 removed [ 338.979557][T10413] team0 (unregistering): Port device team_slave_1 removed [ 339.027208][T10422] gretap0 speed is unknown, defaulting to 1000 [ 339.070302][T10422] gretap0 speed is unknown, defaulting to 1000 [ 339.079178][T10422] gretap0 speed is unknown, defaulting to 1000 [ 339.101596][T10422] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 339.115836][T10422] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 339.136841][T10422] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 339.188809][T10422] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 339.205955][T10422] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 339.319111][T10422] gretap0 speed is unknown, defaulting to 1000 [ 339.349839][T10422] gretap0 speed is unknown, defaulting to 1000 [ 339.361421][T10422] gretap0 speed is unknown, defaulting to 1000 [ 339.370445][T10433] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1261'. [ 339.407122][T10422] gretap0 speed is unknown, defaulting to 1000 [ 339.416403][T10422] gretap0 speed is unknown, defaulting to 1000 [ 339.454181][T10437] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1263'. [ 339.466128][T10433] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1261'. [ 339.493077][T10433] netlink: 'syz.5.1261': attribute type 1 has an invalid length. [ 339.750676][T10445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1260'. [ 340.827818][T10472] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1274'. [ 340.846942][T10472] netlink: 'syz.6.1274': attribute type 1 has an invalid length. [ 341.391861][T10479] netlink: 'syz.5.1276': attribute type 21 has an invalid length. [ 341.477914][T10485] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1279'. [ 341.496851][T10486] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1279'. [ 341.574552][T10489] 7: renamed from bond_slave_0 (while UP) [ 341.795923][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1284'. [ 341.847955][T10498] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1285'. [ 341.861439][T10498] netlink: 'syz.0.1285': attribute type 1 has an invalid length. [ 341.999896][ T50] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 342.186741][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1288'. [ 342.292127][T10514] block nbd0: not configured, cannot reconfigure [ 342.312253][T10516] block nbd0: not configured, cannot reconfigure [ 342.409426][T10521] openvswitch: netlink: ufid size 756 bytes exceeds the range (1, 16) [ 342.420871][T10521] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 342.879325][T10530] netlink: 'syz.5.1296': attribute type 2 has an invalid length. [ 343.227254][T10533] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1298'. [ 343.322909][T10533] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 343.944465][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1303'. [ 344.281293][ T50] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 345.152974][T10564] block nbd0: not configured, cannot reconfigure [ 345.231595][T10568] netlink: 'syz.6.1307': attribute type 21 has an invalid length. [ 345.550681][T10577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1311'. [ 345.937164][T10584] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1313'. [ 346.047606][T10584] netlink: 172 bytes leftover after parsing attributes in process `syz.8.1313'. [ 346.189832][T10589] netlink: 'syz.8.1313': attribute type 1 has an invalid length. [ 346.238799][T10593] netlink: 'syz.5.1315': attribute type 2 has an invalid length. [ 346.397952][T10597] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 346.407325][T10600] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1318'. [ 346.507536][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1319'. [ 346.651365][ T50] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 346.701508][T10607] netlink: 'syz.8.1320': attribute type 1 has an invalid length. [ 347.432518][T10636] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1330'. [ 347.545608][T10636] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1330'. [ 347.616177][T10643] netlink: 'syz.6.1330': attribute type 1 has an invalid length. [ 347.646340][T10641] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1331'. [ 347.690918][T10641] netlink: 'syz.2.1331': attribute type 10 has an invalid length. [ 347.937889][T10618] gretap0 speed is unknown, defaulting to 1000 [ 348.064966][T10649] netlink: 'syz.6.1333': attribute type 2 has an invalid length. [ 348.416354][T10647] syzkaller0: entered promiscuous mode [ 348.460920][T10647] syzkaller0: entered allmulticast mode [ 348.542408][T10657] netlink: 'syz.0.1335': attribute type 1 has an invalid length. [ 352.117895][T10680] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1343'. [ 352.144386][T10680] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1343'. [ 352.199327][T10681] netlink: 'syz.2.1343': attribute type 1 has an invalid length. [ 354.335313][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1347'. [ 354.493688][T10701] FAULT_INJECTION: forcing a failure. [ 354.493688][T10701] name failslab, interval 1, probability 0, space 0, times 0 [ 354.506634][T10701] CPU: 1 UID: 0 PID: 10701 Comm: syz.8.1349 Not tainted syzkaller #0 PREEMPT(full) [ 354.506662][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.506675][T10701] Call Trace: [ 354.506684][T10701] [ 354.506693][T10701] dump_stack_lvl+0xe8/0x150 [ 354.506725][T10701] should_fail_ex+0x412/0x560 [ 354.506846][T10701] should_failslab+0xa8/0x100 [ 354.506880][T10701] __kvmalloc_node_noprof+0x178/0x8a0 [ 354.506910][T10701] ? __fget_files+0x2a/0x420 [ 354.506930][T10701] ? vmemdup_user+0x2b/0xd0 [ 354.506970][T10701] vmemdup_user+0x2b/0xd0 [ 354.507002][T10701] map_get_next_key+0x1c3/0x620 [ 354.507026][T10701] ? bpf_lsm_bpf+0x9/0x20 [ 354.507054][T10701] ? security_bpf+0x7e/0x2d0 [ 354.507133][T10701] __sys_bpf+0xb81/0xd90 [ 354.507183][T10701] ? __pfx___sys_bpf+0x10/0x10 [ 354.507215][T10701] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 354.507270][T10701] ? ksys_write+0x242/0x270 [ 354.507298][T10701] ? __pfx_ksys_write+0x10/0x10 [ 354.507329][T10701] __x64_sys_bpf+0xba/0xd0 [ 354.507362][T10701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.507384][T10701] do_syscall_64+0x174/0x580 [ 354.507412][T10701] ? trace_irq_disable+0x3b/0x140 [ 354.507441][T10701] ? clear_bhb_loop+0x40/0x90 [ 354.507465][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.507485][T10701] RIP: 0033:0x7f064d19ce59 [ 354.507504][T10701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.507521][T10701] RSP: 002b:00007f064e0c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.507541][T10701] RAX: ffffffffffffffda RBX: 00007f064d415fa0 RCX: 00007f064d19ce59 [ 354.507554][T10701] RDX: 0000000000000020 RSI: 0000200000001600 RDI: 0000000000000004 [ 354.507566][T10701] RBP: 00007f064e0c9090 R08: 0000000000000000 R09: 0000000000000000 [ 354.507577][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.507592][T10701] R13: 00007f064d416038 R14: 00007f064d415fa0 R15: 00007ffc65a525a8 [ 354.507624][T10701] [ 354.864038][T10703] netlink: 'syz.8.1350': attribute type 2 has an invalid length. [ 355.170449][T10712] netlink: 'syz.2.1351': attribute type 1 has an invalid length. [ 355.432424][T10718] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1356'. [ 355.460016][T10718] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1356'. [ 355.493907][T10718] netlink: 'syz.6.1356': attribute type 1 has an invalid length. [ 355.818505][T10726] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1357'. [ 356.408072][T10740] netlink: 'syz.6.1364': attribute type 2 has an invalid length. [ 356.763331][T10750] netlink: 'syz.8.1365': attribute type 29 has an invalid length. [ 356.787016][T10744] netlink: 'syz.8.1365': attribute type 29 has an invalid length. [ 357.418895][T10770] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1372'. [ 357.639326][T10772] netlink: 192 bytes leftover after parsing attributes in process `syz.0.1373'. [ 358.100430][T10790] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1380'. [ 362.305344][T10839] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1394'. [ 362.708543][T10838] gretap0 speed is unknown, defaulting to 1000 [ 362.839100][T10855] netlink: 'syz.8.1398': attribute type 2 has an invalid length. [ 363.253048][T10862] tap0: tun_chr_ioctl cmd 1074025677 [ 363.260853][T10862] tap0: linktype set to 519 [ 363.546549][T10867] netlink: 'syz.6.1401': attribute type 7 has an invalid length. [ 363.822421][T10872] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1402'. [ 363.833003][T10872] netlink: 'syz.8.1402': attribute type 10 has an invalid length. [ 363.880752][T10853] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1397'. [ 364.326127][T10884] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1404'. [ 364.386576][T10886] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1407'. [ 364.648865][T10890] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1404'. [ 365.697305][T10922] netlink: 'syz.2.1414': attribute type 1 has an invalid length. [ 365.837173][T10922] netlink: 'syz.2.1414': attribute type 1 has an invalid length. [ 366.121799][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1416'. [ 366.897146][T10944] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1422'. [ 367.643622][T10956] netlink: 'syz.0.1424': attribute type 16 has an invalid length. [ 367.651537][T10956] netlink: 'syz.0.1424': attribute type 17 has an invalid length. [ 367.700185][T10956] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.852644][T10956] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.340989][T10966] netlink: 'syz.5.1427': attribute type 21 has an invalid length. [ 368.609373][T10966] netlink: 'syz.5.1427': attribute type 6 has an invalid length. [ 368.617919][T10966] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1427'. [ 369.057964][T10981] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1433'. [ 369.124889][T10981] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1433'. [ 369.224398][T10981] netlink: 'syz.5.1433': attribute type 1 has an invalid length. [ 369.607672][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1437'. [ 369.727067][T11000] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1439'. [ 371.577430][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1442'. [ 372.578067][T11032] netlink: 'syz.5.1447': attribute type 1 has an invalid length. [ 372.695922][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 372.910450][T11049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1454'. [ 373.255196][T11053] netlink: 5224 bytes leftover after parsing attributes in process `syz.8.1452'. [ 373.306045][T11054] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1455'. [ 373.344557][T11062] netlink: 'syz.6.1455': attribute type 10 has an invalid length. [ 373.511595][T11066] openvswitch: netlink: IPv4 tun info is not correct [ 373.827528][T11072] tap0: tun_chr_ioctl cmd 1074025677 [ 373.857472][T11072] tap0: linktype set to 519 [ 373.892061][T11077] netlink: 'syz.5.1463': attribute type 1 has an invalid length. [ 374.685692][T11117] netlink: 'syz.5.1479': attribute type 1 has an invalid length. [ 374.827480][T11128] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1482'. [ 374.853420][T11128] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1482'. [ 375.074519][T11138] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1484'. [ 375.084131][T11138] netlink: 'syz.5.1484': attribute type 4 has an invalid length. [ 375.385713][T11144] FAULT_INJECTION: forcing a failure. [ 375.385713][T11144] name failslab, interval 1, probability 0, space 0, times 0 [ 375.411765][T11144] CPU: 0 UID: 0 PID: 11144 Comm: syz.6.1487 Not tainted syzkaller #0 PREEMPT(full) [ 375.411791][T11144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 375.411809][T11144] Call Trace: [ 375.411817][T11144] [ 375.411830][T11144] dump_stack_lvl+0xe8/0x150 [ 375.411859][T11144] should_fail_ex+0x412/0x560 [ 375.411905][T11144] should_failslab+0xa8/0x100 [ 375.411937][T11144] __kmalloc_cache_noprof+0x88/0x660 [ 375.411965][T11144] ? sctp_add_bind_addr+0x8c/0x370 [ 375.412001][T11144] sctp_add_bind_addr+0x8c/0x370 [ 375.412035][T11144] sctp_copy_local_addr_list+0x314/0x4f0 [ 375.412068][T11144] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 375.412098][T11144] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 375.412151][T11144] ? sctp_v4_is_any+0x35/0x60 [ 375.412181][T11144] ? sctp_copy_one_addr+0x93/0x360 [ 375.412217][T11144] sctp_bind_addr_copy+0xb3/0x3c0 [ 375.412250][T11144] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 375.412283][T11144] sctp_connect_new_asoc+0x2ff/0x6b0 [ 375.412312][T11144] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 375.412338][T11144] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 375.412362][T11144] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 375.412383][T11144] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 375.412408][T11144] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 375.412434][T11144] ? security_sctp_bind_connect+0x7e/0x2c0 [ 375.412462][T11144] sctp_sendmsg+0x1576/0x2c50 [ 375.412505][T11144] ? __pfx_sctp_sendmsg+0x10/0x10 [ 375.412532][T11144] ? aa_sk_perm+0x6d5/0x900 [ 375.412645][T11144] ? __pfx_aa_sk_perm+0x10/0x10 [ 375.412675][T11144] ? ktime_get+0x45/0x220 [ 375.412703][T11144] ? sock_rps_record_flow+0x19/0x350 [ 375.412727][T11144] ? inet_sendmsg+0x2f4/0x370 [ 375.412746][T11144] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 375.412776][T11144] ____sys_sendmsg+0x80a/0x9f0 [ 375.412819][T11144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 375.412861][T11144] ? import_iovec+0x73/0xa0 [ 375.412932][T11144] ___sys_sendmsg+0x2a5/0x360 [ 375.412960][T11144] ? __lock_acquire+0x6b5/0x2cf0 [ 375.412991][T11144] ? __pfx____sys_sendmsg+0x10/0x10 [ 375.413052][T11144] ? __fget_files+0x2a/0x420 [ 375.413092][T11144] ? __fget_files+0x2a/0x420 [ 375.413113][T11144] ? __fget_files+0x3a0/0x420 [ 375.413151][T11144] __x64_sys_sendmsg+0x1bd/0x2a0 [ 375.413186][T11144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 375.413232][T11144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.413268][T11144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.413292][T11144] do_syscall_64+0x174/0x580 [ 375.413325][T11144] ? clear_bhb_loop+0x40/0x90 [ 375.413353][T11144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.413374][T11144] RIP: 0033:0x7fb9e139ce59 [ 375.413394][T11144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.413411][T11144] RSP: 002b:00007fb9e2292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.413433][T11144] RAX: ffffffffffffffda RBX: 00007fb9e1615fa0 RCX: 00007fb9e139ce59 [ 375.413447][T11144] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 375.413459][T11144] RBP: 00007fb9e2292090 R08: 0000000000000000 R09: 0000000000000000 [ 375.413471][T11144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 375.413482][T11144] R13: 00007fb9e1616038 R14: 00007fb9e1615fa0 R15: 00007ffd51564f28 [ 375.413524][T11144] [ 376.245759][T11163] netlink: 'syz.0.1492': attribute type 1 has an invalid length. [ 376.923724][T11186] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1496'. [ 377.492377][T11195] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1501'. [ 377.527536][T11195] netlink: 'syz.2.1501': attribute type 10 has an invalid length. [ 377.554474][T11198] 7: renamed from bond_slave_0 (while UP) [ 377.721357][T11202] netlink: 'syz.2.1505': attribute type 1 has an invalid length. [ 377.726785][T11207] pim6reg1: entered promiscuous mode [ 377.745722][T11207] pim6reg1: entered allmulticast mode [ 378.298065][T11225] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1510'. [ 378.533131][T11228] gretap0 speed is unknown, defaulting to 1000 [ 378.674946][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.686725][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.791421][T11251] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1518'. [ 378.835446][T11251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1518'. [ 378.957221][T11257] netlink: 'syz.5.1519': attribute type 1 has an invalid length. [ 379.059970][T11260] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1520'. [ 379.342707][T11267] nftables ruleset with unbound set [ 379.854254][T11277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1526'. [ 379.893356][T11277] netlink: 'syz.0.1526': attribute type 10 has an invalid length. [ 380.097712][T11288] netlink: 5240 bytes leftover after parsing attributes in process `syz.8.1530'. [ 380.222201][T11280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.510575][T11297] netlink: 'syz.5.1533': attribute type 1 has an invalid length. [ 381.337122][T11322] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1543'. [ 381.381795][T11322] netlink: 'syz.5.1543': attribute type 10 has an invalid length. [ 381.391840][T11320] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 381.415210][T11326] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1545'. [ 381.425468][T11326] netlink: 'syz.6.1545': attribute type 10 has an invalid length. [ 381.561424][T11320] netlink: 'syz.2.1541': attribute type 10 has an invalid length. [ 381.611328][T11320] macvlan1: entered promiscuous mode [ 381.668929][T11320] macvlan1: entered allmulticast mode [ 381.695705][T11320] veth1_vlan: entered allmulticast mode [ 381.753505][T11333] netlink: 'syz.0.1546': attribute type 1 has an invalid length. [ 381.937700][T11343] ksmbd: Unknown IPC event: 0, ignore. [ 382.276187][T11358] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1555'. [ 382.293154][T11360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1556'. [ 382.389021][T11358] netlink: 'syz.8.1555': attribute type 10 has an invalid length. [ 382.826398][T11377] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1562'. [ 382.849971][T11377] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 382.953441][T11376] netlink: 'syz.0.1561': attribute type 1 has an invalid length. [ 383.136264][T11382] 7: renamed from bond_slave_0 (while UP) [ 383.686646][T11408] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1571'. [ 383.709570][T11408] netlink: 'syz.2.1571': attribute type 10 has an invalid length. [ 384.207376][T11435] block nbd0: not configured, cannot reconfigure [ 384.582244][T11443] : entered promiscuous mode [ 386.415876][T11483] FAULT_INJECTION: forcing a failure. [ 386.415876][T11483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.445161][T11483] CPU: 0 UID: 0 PID: 11483 Comm: syz.8.1595 Not tainted syzkaller #0 PREEMPT(full) [ 386.445189][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 386.445201][T11483] Call Trace: [ 386.445209][T11483] [ 386.445218][T11483] dump_stack_lvl+0xe8/0x150 [ 386.445248][T11483] should_fail_ex+0x412/0x560 [ 386.445288][T11483] _copy_from_user+0x2d/0xb0 [ 386.445390][T11483] __sys_bpf+0x2e7/0xd90 [ 386.445436][T11483] ? __pfx___sys_bpf+0x10/0x10 [ 386.445472][T11483] ? lockdep_hardirqs_on+0x7a/0x110 [ 386.445545][T11483] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 386.445575][T11483] ? ksys_write+0x242/0x270 [ 386.445611][T11483] ? __pfx_ksys_write+0x10/0x10 [ 386.445647][T11483] __x64_sys_bpf+0xba/0xd0 [ 386.445676][T11483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.445700][T11483] do_syscall_64+0x174/0x580 [ 386.445731][T11483] ? clear_bhb_loop+0x40/0x90 [ 386.445759][T11483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.445779][T11483] RIP: 0033:0x7f064d19ce59 [ 386.445799][T11483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.445815][T11483] RSP: 002b:00007f064e0c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.445835][T11483] RAX: ffffffffffffffda RBX: 00007f064d415fa0 RCX: 00007f064d19ce59 [ 386.445850][T11483] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 386.445862][T11483] RBP: 00007f064e0c9090 R08: 0000000000000000 R09: 0000000000000000 [ 386.445873][T11483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.445884][T11483] R13: 00007f064d416038 R14: 00007f064d415fa0 R15: 00007ffc65a525a8 [ 386.445927][T11483] [ 386.839330][T11486] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1596'. [ 387.156938][T11493] netlink: 1735 bytes leftover after parsing attributes in process `syz.5.1596'. [ 387.169512][T11488] syzkaller0: entered promiscuous mode [ 387.184723][T11488] syzkaller0: entered allmulticast mode [ 387.491525][T11498] netlink: 'syz.2.1599': attribute type 2 has an invalid length. [ 390.435090][T11500] gretap0 speed is unknown, defaulting to 1000 [ 390.701795][ T30] audit: type=1107 audit(1780772375.567:3): pid=11525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='] ŌS׉ W,a*s?ML֙egu&5mΟ' [ 390.845021][T11537] openvswitch: netlink: Flow key attr not present in new flow. [ 391.046932][T11544] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1613'. [ 391.274705][T11553] netlink: 'syz.0.1616': attribute type 2 has an invalid length. [ 391.550859][T11561] 7: renamed from bond_slave_0 (while UP) [ 391.622947][T11566] xfrm0 speed is unknown, defaulting to 1000 [ 391.639097][T11566] xfrm0 speed is unknown, defaulting to 1000 [ 391.688885][T11566] xfrm0 speed is unknown, defaulting to 1000 [ 391.731507][T11568] netlink: 'syz.6.1621': attribute type 10 has an invalid length. [ 391.742116][T11568] macvlan1: entered promiscuous mode [ 391.754421][T11568] macvlan1: entered allmulticast mode [ 391.759858][T11568] veth1_vlan: entered allmulticast mode [ 391.779872][T11566] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 391.843515][T11566] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 391.917021][T11566] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 392.091053][T11580] netlink: 'syz.8.1626': attribute type 21 has an invalid length. [ 392.184656][T11585] netlink: 'syz.6.1625': attribute type 61 has an invalid length. [ 392.200678][T11566] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 392.229599][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1625'. [ 392.351467][T11587] netlink: 'syz.8.1628': attribute type 1 has an invalid length. [ 392.409768][T11584] netlink: 'syz.5.1627': attribute type 6 has an invalid length. [ 392.417566][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1627'. [ 392.476699][T11566] xfrm0 speed is unknown, defaulting to 1000 [ 392.558374][T11596] netlink: 'syz.6.1630': attribute type 29 has an invalid length. [ 392.615549][T11566] xfrm0 speed is unknown, defaulting to 1000 [ 392.615837][T11596] netlink: 'syz.6.1630': attribute type 29 has an invalid length. [ 392.660893][T11599] netlink: 'syz.6.1630': attribute type 29 has an invalid length. [ 392.681752][T11566] xfrm0 speed is unknown, defaulting to 1000 [ 392.710819][T11566] xfrm0 speed is unknown, defaulting to 1000 [ 392.733024][T11566] xfrm0 speed is unknown, defaulting to 1000 [ 392.777788][T11603] netlink: 'syz.5.1633': attribute type 2 has an invalid length. [ 392.921040][T11610] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1635'. [ 392.940548][T11610] netlink: 47 bytes leftover after parsing attributes in process `syz.6.1635'. [ 392.952459][T11610] netlink: 47 bytes leftover after parsing attributes in process `syz.6.1635'. [ 393.687151][T11629] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1644'. [ 393.731805][T11629] netlink: 'syz.0.1644': attribute type 10 has an invalid length. [ 393.757690][T11632] netlink: 'syz.6.1643': attribute type 10 has an invalid length. [ 394.177789][T11642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 394.316941][T11649] netlink: 'syz.6.1651': attribute type 2 has an invalid length. [ 394.525495][T11656] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1653'. [ 394.536113][T11656] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1653'. [ 394.896696][T11676] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1660'. [ 394.917387][T11676] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1660'. [ 395.247268][T11695] netlink: 'syz.2.1665': attribute type 10 has an invalid length. [ 395.283909][T11695] vxcan0: entered promiscuous mode [ 395.311516][T11695] vxcan0: entered allmulticast mode [ 395.327770][T11699] netlink: 'syz.8.1667': attribute type 2 has an invalid length. [ 395.328138][T11695] A link change request failed with some changes committed already. Interface vxcan0 may have been left with an inconsistent configuration, please check. [ 395.622900][T11711] gretap0 speed is unknown, defaulting to 1000 [ 395.667460][T11711] xfrm0 speed is unknown, defaulting to 1000 [ 398.856823][T11744] __nla_validate_parse: 2 callbacks suppressed [ 398.856844][T11744] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1679'. [ 399.080530][T11746] netlink: 'syz.6.1680': attribute type 2 has an invalid length. [ 399.646014][T11760] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1683'. [ 399.945590][T11755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1684'. [ 400.146795][T11770] netlink: 'syz.6.1687': attribute type 10 has an invalid length. [ 401.095917][T11798] FAULT_INJECTION: forcing a failure. [ 401.095917][T11798] name failslab, interval 1, probability 0, space 0, times 0 [ 401.116966][T11791] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1693'. [ 401.122237][T11798] CPU: 1 UID: 0 PID: 11798 Comm: syz.8.1694 Not tainted syzkaller #0 PREEMPT(full) [ 401.122318][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.122356][T11798] Call Trace: [ 401.122377][T11798] [ 401.122398][T11798] dump_stack_lvl+0xe8/0x150 [ 401.122478][T11798] should_fail_ex+0x412/0x560 [ 401.122590][T11798] should_failslab+0xa8/0x100 [ 401.122700][T11798] __kmalloc_cache_noprof+0x88/0x660 [ 401.122792][T11798] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 401.122843][T11798] ? __kmalloc_cache_noprof+0x15b/0x660 [ 401.122924][T11798] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 401.123033][T11798] genl_family_rcv_msg_doit+0x22a/0x330 [ 401.123129][T11798] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 401.123240][T11798] ? bpf_lsm_capable+0x9/0x20 [ 401.123310][T11798] ? security_capable+0x7e/0x2c0 [ 401.123507][T11798] genl_rcv_msg+0x61c/0x7a0 [ 401.123588][T11798] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.123645][T11798] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 401.123706][T11798] ? __pfx_ref_tracker_free+0x10/0x10 [ 401.123786][T11798] ? __asan_memcpy+0x40/0x70 [ 401.123845][T11798] ? __skb_clone+0x63/0x7a0 [ 401.123945][T11798] netlink_rcv_skb+0x232/0x4b0 [ 401.124031][T11798] ? __pfx_genl_rcv_msg+0x10/0x10 [ 401.124119][T11798] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.124255][T11798] ? down_read+0x270/0x2e0 [ 401.124304][T11798] ? genl_rcv+0xd/0x40 [ 401.124365][T11798] genl_rcv+0x28/0x40 [ 401.124414][T11798] netlink_unicast+0x75c/0x8e0 [ 401.124524][T11798] netlink_sendmsg+0x813/0xb40 [ 401.124642][T11798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.124732][T11798] ? aa_sock_msg_perm+0xf1/0x1b0 [ 401.124839][T11798] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.124913][T11798] ____sys_sendmsg+0x972/0x9f0 [ 401.124980][T11798] ? __pfx_perf_trace_lock+0x10/0x10 [ 401.125065][T11798] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.125169][T11798] ? import_iovec+0x73/0xa0 [ 401.125252][T11798] ___sys_sendmsg+0x2a5/0x360 [ 401.125324][T11798] ? __lock_acquire+0x6b5/0x2cf0 [ 401.125403][T11798] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.125508][T11798] ? trace_call_bpf+0xc2/0xb70 [ 401.125628][T11798] ? __fget_files+0x2a/0x420 [ 401.125721][T11798] ? __fget_files+0x2a/0x420 [ 401.125779][T11798] ? __fget_files+0x3a0/0x420 [ 401.125877][T11798] __x64_sys_sendmsg+0x1bd/0x2a0 [ 401.125944][T11798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.125987][T11798] ? __pfx_ksys_write+0x10/0x10 [ 401.126025][T11798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.126048][T11798] do_syscall_64+0x174/0x580 [ 401.126075][T11798] ? trace_irq_disable+0x3b/0x140 [ 401.126106][T11798] ? clear_bhb_loop+0x40/0x90 [ 401.126132][T11798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.126153][T11798] RIP: 0033:0x7f064d19ce59 [ 401.126173][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.126189][T11798] RSP: 002b:00007f064e0c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.126209][T11798] RAX: ffffffffffffffda RBX: 00007f064d415fa0 RCX: 00007f064d19ce59 [ 401.126223][T11798] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 401.126235][T11798] RBP: 00007f064e0c9090 R08: 0000000000000000 R09: 0000000000000000 [ 401.126247][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.126258][T11798] R13: 00007f064d416038 R14: 00007f064d415fa0 R15: 00007ffc65a525a8 [ 401.126298][T11798] [ 401.527758][T11791] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1693'. [ 401.725846][T11804] netlink: 'syz.2.1697': attribute type 2 has an invalid length. [ 401.888233][T11814] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1699'. [ 402.010036][T11808] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1699'. [ 402.306087][T11830] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1703'. [ 405.090936][T11839] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1706'. [ 405.109036][T11839] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1706'. [ 405.498148][T11842] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1707'. [ 405.811499][T11856] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1708'. [ 405.822523][T11856] netlink: 'syz.2.1708': attribute type 10 has an invalid length. [ 406.047999][T11862] netlink: 'syz.2.1713': attribute type 2 has an invalid length. [ 406.355018][T11871] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1715'. [ 406.409837][T11878] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1715'. [ 408.105546][T11902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1724'. [ 408.441211][T11913] netlink: 'syz.5.1727': attribute type 2 has an invalid length. [ 408.583987][T11920] 7: renamed from bond_slave_0 (while UP) [ 408.739953][T11919] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1729'. [ 408.749670][T11919] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1729'. [ 409.329307][T11947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 409.509785][T11938] netlink: 'syz.0.1736': attribute type 2 has an invalid length. [ 409.791345][T11959] netlink: 'syz.8.1742': attribute type 21 has an invalid length. [ 410.869236][T11959] __nla_validate_parse: 2 callbacks suppressed [ 410.869257][T11959] netlink: 152 bytes leftover after parsing attributes in process `syz.8.1742'. [ 410.954960][T11968] TCP: TCP_TX_DELAY enabled [ 410.990983][T11968] netlink: 'syz.2.1744': attribute type 2 has an invalid length. [ 411.021564][T11968] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1744'. [ 411.245962][T11977] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1746'. [ 411.294962][T11970] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1746'. [ 412.160197][T11998] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 412.221605][T12000] netlink: 'syz.6.1754': attribute type 21 has an invalid length. [ 412.233882][T12000] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1754'. [ 413.696991][T12027] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1763'. [ 413.735360][T12035] netlink: 'syz.6.1763': attribute type 10 has an invalid length. [ 413.845566][T12039] netlink: 'syz.2.1767': attribute type 12 has an invalid length. [ 413.927176][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1768'. [ 413.941010][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1766'. [ 414.052084][T12032] gretap0 speed is unknown, defaulting to 1000 [ 414.126223][T12045] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1770'. [ 414.147653][T12047] netlink: 'syz.6.1769': attribute type 2 has an invalid length. [ 414.171009][T12047] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1769'. [ 414.264891][T12049] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.638755][T12032] xfrm0 speed is unknown, defaulting to 1000 [ 415.685729][T12089] netlink: 'syz.5.1782': attribute type 10 has an invalid length. [ 415.797475][T12089] netlink: 'syz.5.1782': attribute type 9 has an invalid length. [ 416.294123][T12105] netlink: 'syz.8.1786': attribute type 7 has an invalid length. [ 416.302239][T12105] netlink: 'syz.8.1786': attribute type 8 has an invalid length. [ 416.411073][T12109] __nla_validate_parse: 4 callbacks suppressed [ 416.411109][T12109] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1787'. [ 416.427346][T12113] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1787'. [ 416.496104][T12109] netlink: 'syz.5.1787': attribute type 1 has an invalid length. [ 416.507122][T12110] cgroup2: Unknown parameter 'C' [ 416.868530][T12130] netlink: 17 bytes leftover after parsing attributes in process `syz.8.1795'. [ 416.908868][T12130] openvswitch: netlink: Tunnel attr 0 has unexpected len 65 expected 8 [ 416.981155][T12134] block nbd0: not configured, cannot reconfigure [ 417.203040][T12143] netlink: 'syz.6.1796': attribute type 2 has an invalid length. [ 417.855600][T12165] netlink: 'syz.8.1803': attribute type 29 has an invalid length. [ 417.865543][T12165] netlink: 'syz.8.1803': attribute type 29 has an invalid length. [ 417.874532][T12165] netlink: 'syz.8.1803': attribute type 29 has an invalid length. [ 417.889171][T12165] option changes via remount are deprecated (pid=12164 comm=syz.8.1803) [ 418.091560][T12172] FAULT_INJECTION: forcing a failure. [ 418.091560][T12172] name failslab, interval 1, probability 0, space 0, times 0 [ 418.146829][T12172] CPU: 1 UID: 0 PID: 12172 Comm: syz.8.1805 Not tainted syzkaller #0 PREEMPT(full) [ 418.146858][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.146870][T12172] Call Trace: [ 418.146878][T12172] [ 418.146887][T12172] dump_stack_lvl+0xe8/0x150 [ 418.146926][T12172] should_fail_ex+0x412/0x560 [ 418.146961][T12172] should_failslab+0xa8/0x100 [ 418.146990][T12172] __kmalloc_noprof+0xe8/0x760 [ 418.147017][T12172] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 418.147127][T12172] tomoyo_realpath_from_path+0xe3/0x5d0 [ 418.147155][T12172] ? tomoyo_domain+0xd7/0x130 [ 418.147188][T12172] ? tomoyo_path_number_perm+0x219/0x630 [ 418.147210][T12172] tomoyo_path_number_perm+0x246/0x630 [ 418.147236][T12172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 418.147258][T12172] ? __lock_acquire+0x6b5/0x2cf0 [ 418.147294][T12172] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 418.147344][T12172] ? __fget_files+0x2a/0x420 [ 418.147368][T12172] ? __fget_files+0x2a/0x420 [ 418.147387][T12172] ? __fget_files+0x3a0/0x420 [ 418.147405][T12172] ? __fget_files+0x2a/0x420 [ 418.147430][T12172] security_file_ioctl+0xc3/0x2a0 [ 418.147454][T12172] __se_sys_ioctl+0x47/0x170 [ 418.147480][T12172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.147501][T12172] do_syscall_64+0x174/0x580 [ 418.147527][T12172] ? trace_irq_disable+0x3b/0x140 [ 418.147555][T12172] ? clear_bhb_loop+0x40/0x90 [ 418.147577][T12172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.147595][T12172] RIP: 0033:0x7f064d19ce59 [ 418.147613][T12172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.147629][T12172] RSP: 002b:00007f064e0c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.147650][T12172] RAX: ffffffffffffffda RBX: 00007f064d415fa0 RCX: 00007f064d19ce59 [ 418.147663][T12172] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000007 [ 418.147675][T12172] RBP: 00007f064e0c9090 R08: 0000000000000000 R09: 0000000000000000 [ 418.147686][T12172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.147697][T12172] R13: 00007f064d416038 R14: 00007f064d415fa0 R15: 00007ffc65a525a8 [ 418.147730][T12172] [ 418.147751][T12172] ERROR: Out of memory at tomoyo_realpath_from_path. [ 418.579004][T12183] netlink: 'syz.0.1809': attribute type 2 has an invalid length. [ 418.943551][T12200] netlink: 'syz.2.1815': attribute type 29 has an invalid length. [ 418.977877][T12200] netlink: 'syz.2.1815': attribute type 29 has an invalid length. [ 419.918639][T12220] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.927634][T12220] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.105078][T12220] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.114523][T12220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.123161][T12220] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.130966][T12220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.161702][T12220] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 420.534875][T12242] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1831'. [ 420.966352][T12252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'. [ 422.011358][T12271] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1839'. [ 422.034784][T12272] validate_nla: 2 callbacks suppressed [ 422.034805][T12272] netlink: 'syz.5.1839': attribute type 10 has an invalid length. [ 422.286086][T12278] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1840'. [ 422.299691][T12276] netlink: 'syz.2.1842': attribute type 2 has an invalid length. [ 422.314133][T12282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1844'. [ 422.404825][T12279] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1841'. [ 422.465954][T12279] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1841'. [ 422.479135][T12278] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1840'. [ 422.508474][T12278] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 422.758381][T12298] FAULT_INJECTION: forcing a failure. [ 422.758381][T12298] name failslab, interval 1, probability 0, space 0, times 0 [ 422.772798][T12298] CPU: 0 UID: 0 PID: 12298 Comm: syz.5.1847 Not tainted syzkaller #0 PREEMPT(full) [ 422.772825][T12298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.772838][T12298] Call Trace: [ 422.772847][T12298] [ 422.772856][T12298] dump_stack_lvl+0xe8/0x150 [ 422.772887][T12298] should_fail_ex+0x412/0x560 [ 422.772923][T12298] ? proc_alloc_inode+0x2a/0xc0 [ 422.772953][T12298] should_failslab+0xa8/0x100 [ 422.772986][T12298] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 422.773024][T12298] ? __pfx_proc_alloc_inode+0x10/0x10 [ 422.773048][T12298] proc_alloc_inode+0x2a/0xc0 [ 422.773074][T12298] alloc_inode+0x6a/0x1b0 [ 422.773097][T12298] new_inode+0x22/0x170 [ 422.773127][T12298] proc_pid_make_inode+0x21/0x130 [ 422.773159][T12298] proc_pident_instantiate+0x6d/0x2b0 [ 422.773198][T12298] proc_pident_lookup+0x1b7/0x270 [ 422.773238][T12298] __lookup_slow+0x2b7/0x410 [ 422.773266][T12298] ? __pfx___lookup_slow+0x10/0x10 [ 422.773309][T12298] ? down_read+0x270/0x2e0 [ 422.773335][T12298] lookup_slow+0x53/0x70 [ 422.773361][T12298] link_path_walk+0xd1e/0x18d0 [ 422.773412][T12298] path_openat+0x2c3/0x3860 [ 422.773437][T12298] ? arch_stack_walk+0xfb/0x150 [ 422.773484][T12298] ? __pfx_stack_trace_save+0x10/0x10 [ 422.773520][T12298] ? stack_depot_save_flags+0x33/0x810 [ 422.773566][T12298] ? __pfx_path_openat+0x10/0x10 [ 422.773597][T12298] ? __x64_sys_openat+0x138/0x170 [ 422.773628][T12298] ? __lock_acquire+0x6b5/0x2cf0 [ 422.773666][T12298] do_file_open+0x23e/0x4a0 [ 422.773702][T12298] ? __pfx_do_file_open+0x10/0x10 [ 422.773743][T12298] ? __pfx_kfree_link+0x10/0x10 [ 422.773778][T12298] ? _raw_spin_unlock+0x28/0x50 [ 422.773803][T12298] ? alloc_fd+0x64b/0x6c0 [ 422.773841][T12298] do_sys_openat2+0x113/0x200 [ 422.773867][T12298] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.773895][T12298] ? __pfx_sched_clock_cpu+0x10/0x10 [ 422.773929][T12298] __x64_sys_openat+0x138/0x170 [ 422.773957][T12298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.773979][T12298] do_syscall_64+0x174/0x580 [ 422.774011][T12298] ? clear_bhb_loop+0x40/0x90 [ 422.774038][T12298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.774058][T12298] RIP: 0033:0x7f09e175d68e [ 422.774079][T12298] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 422.774096][T12298] RSP: 002b:00007f09e2661ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.774118][T12298] RAX: ffffffffffffffda RBX: 00007f09e26626c0 RCX: 00007f09e175d68e [ 422.774132][T12298] RDX: 0000000000000002 RSI: 00007f09e2661f90 RDI: ffffffffffffff9c [ 422.774145][T12298] RBP: 00007f09e2662090 R08: 0000000000000000 R09: 0000000000000000 [ 422.774157][T12298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.774168][T12298] R13: 00007f09e1a16038 R14: 00007f09e1a15fa0 R15: 00007ffc60de1278 [ 422.774208][T12298] [ 423.123515][T12296] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1846'. [ 424.183026][T12322] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1854'. [ 424.223444][T12322] netlink: 'syz.2.1854': attribute type 10 has an invalid length. [ 424.301235][T12325] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1855'. [ 424.323042][T12325] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1855'. [ 424.453040][T12320] netlink: 'syz.8.1853': attribute type 4 has an invalid length. [ 424.668460][T12334] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 424.797176][T12342] netlink: 'syz.5.1860': attribute type 1 has an invalid length. [ 425.374720][T12363] netlink: 'syz.5.1866': attribute type 10 has an invalid length. [ 425.417648][T12363] syz_tun: entered promiscuous mode [ 425.452479][T12363] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 425.612873][T12374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.274421][T12397] netlink: 'syz.2.1879': attribute type 3 has an invalid length. [ 426.550618][T12400] openvswitch: netlink: Missing valid actions attribute. [ 426.558103][T12400] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.695945][T12409] gretap0 speed is unknown, defaulting to 1000 [ 426.704957][T12409] xfrm0 speed is unknown, defaulting to 1000 [ 426.711376][ T50] Bluetooth: hci5: unexpected event 0x0b length: 15 > 11 [ 427.297816][T12424] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.581814][T12440] netlink: zone id is out of range [ 427.606704][T12440] netlink: zone id is out of range [ 427.622602][T12440] netlink: zone id is out of range [ 427.637311][T12440] netlink: zone id is out of range [ 427.817634][T12440] netlink: set zone limit has 4 unknown bytes [ 428.254524][T12458] __nla_validate_parse: 11 callbacks suppressed [ 428.254553][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 428.560968][ T50] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 429.195888][T12492] openvswitch: netlink: Message has 8 unknown bytes. [ 429.202394][T12487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1904'. [ 429.280969][T12494] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1904'. [ 429.310115][T12487] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1904'. [ 429.355464][T12487] netlink: 'syz.5.1904': attribute type 10 has an invalid length. [ 429.383529][T12487] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.420411][T12487] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.447791][T12487] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.503532][T12487] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.727483][T12506] netlink: 1 bytes leftover after parsing attributes in process `syz.8.1910'. [ 429.981549][T12514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1911'. [ 430.016702][T12514] netlink: 'syz.2.1911': attribute type 10 has an invalid length. [ 430.387205][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1915'. [ 431.622663][T12563] netlink: 'syz.6.1925': attribute type 2 has an invalid length. [ 432.227056][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1928'. [ 432.249370][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1928'. [ 432.310685][T12582] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1930'. [ 432.797379][T12597] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.804965][T12597] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.835747][T12601] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 432.875238][T12597] bridge0: entered allmulticast mode [ 433.011780][T12597] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 433.019670][T12597] bridge0: port 3(netdevsim1) entered disabled state [ 433.059985][T12597] bridge_slave_1: left allmulticast mode [ 433.095459][T12597] bridge_slave_1: left promiscuous mode [ 433.138121][T12597] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.197786][T12597] bridge_slave_0: left allmulticast mode [ 433.203536][T12597] bridge_slave_0: left promiscuous mode [ 433.209545][T12597] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.431735][T12597] bond0: (slave bridge0): Releasing backup interface [ 434.418072][T12628] __nla_validate_parse: 4 callbacks suppressed [ 434.418093][T12628] netlink: 206524 bytes leftover after parsing attributes in process `syz.8.1945'. [ 434.568450][T12636] netlink: 'syz.6.1946': attribute type 21 has an invalid length. [ 434.605405][T12636] netlink: 'syz.6.1946': attribute type 2 has an invalid length. [ 434.620078][T12640] netlink: 'syz.2.1947': attribute type 16 has an invalid length. [ 434.642802][T12640] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1947'. [ 434.652331][T12636] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1946'. [ 434.681575][T12640] veth0_macvtap: entered allmulticast mode [ 435.205039][T12654] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1953'. [ 436.122201][T12680] openvswitch: netlink: IPv4 tun info is not correct [ 436.167001][T12682] netlink: 'syz.0.1958': attribute type 5 has an invalid length. [ 436.357873][ T50] Bluetooth: hci5: unexpected event 0x30 length: 15 > 3 [ 436.757304][T12709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1969'. [ 437.638012][ T50] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 437.959770][T12740] netlink: 'syz.8.1979': attribute type 2 has an invalid length. [ 438.473754][T12750] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1982'. [ 438.484918][T12750] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1982'. [ 438.988227][T12760] netlink: 'syz.6.1985': attribute type 6 has an invalid length. [ 438.996049][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1985'. [ 439.316171][T12773] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1989'. [ 439.370092][T12773] netlink: 172 bytes leftover after parsing attributes in process `syz.5.1989'. [ 439.454160][T12773] netlink: 'syz.5.1989': attribute type 1 has an invalid length. [ 439.560021][T12778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1990'. [ 439.560839][T12762] syzkaller0: entered promiscuous mode [ 439.574818][T12762] syzkaller0: entered allmulticast mode [ 439.593681][ T1161] syzkaller0: tun_net_xmit 48 [ 439.652214][ T50] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 439.663934][T12781] netlink: 'syz.8.1991': attribute type 2 has an invalid length. [ 439.841525][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.852201][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.125955][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1995'. [ 440.863171][T12812] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1999'. [ 440.879535][T12812] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1999'. [ 442.572892][T12815] netem: change failed [ 442.697316][T12818] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2002'. [ 442.778067][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2004'. [ 442.809683][T12828] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2002'. [ 442.899665][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2005'. [ 442.932515][T12818] netlink: 'syz.6.2002': attribute type 1 has an invalid length. [ 443.004083][ T50] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 443.529493][T12835] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2006'. [ 444.051461][T12846] netlink: 'syz.0.2010': attribute type 2 has an invalid length. [ 444.396800][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2013'. [ 444.828719][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2014'. [ 445.094130][T12866] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2015'. [ 445.110114][T12866] netlink: 'syz.0.2015': attribute type 10 has an invalid length. [ 445.205317][T12869] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2016'. [ 445.295814][T12869] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2016'. [ 445.308436][T12869] netlink: 'syz.2.2016': attribute type 1 has an invalid length. [ 445.495295][T12874] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2019'. [ 445.812716][ T50] Bluetooth: hci5: unexpected event 0x0b length: 15 > 11 [ 446.097423][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2027'. [ 446.613941][T12909] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2031'. [ 446.633173][T12909] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2031'. [ 446.740010][T12913] netlink: 'syz.6.2032': attribute type 10 has an invalid length. [ 446.746350][T12909] netlink: 'syz.8.2031': attribute type 1 has an invalid length. [ 446.763038][T12908] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2032'. [ 447.190176][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2037'. [ 447.474635][ T50] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 449.832669][ T50] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 449.924458][T12969] __nla_validate_parse: 3 callbacks suppressed [ 449.924497][T12969] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2052'. [ 451.014746][T12991] netlink: 'syz.2.2057': attribute type 21 has an invalid length. [ 451.053183][T12991] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2057'. [ 451.253103][T12991] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2057'. [ 453.021364][T13008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 453.169021][T13012] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2066'. [ 453.215733][T13012] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2066'. [ 453.291912][T13012] netlink: 'syz.6.2066': attribute type 1 has an invalid length. [ 455.907072][T13075] siw: device registration error -23 [ 456.171415][T13075] netlink: 'syz.0.2087': attribute type 10 has an invalid length. [ 456.208962][T13075] veth1_macvtap: left promiscuous mode [ 456.451043][T13087] netlink: 'syz.6.2090': attribute type 21 has an invalid length. [ 456.532342][T13087] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2090'. [ 456.655974][T13093] netlink: 'syz.8.2092': attribute type 21 has an invalid length. [ 456.985449][T13105] sctp: [Deprecated]: syz.5.2098 (pid 13105) Use of int in max_burst socket option deprecated. [ 456.985449][T13105] Use struct sctp_assoc_value instead [ 457.329561][T13117] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 458.297986][T13145] lo speed is unknown, defaulting to 1000 [ 458.410117][T13145] lo speed is unknown, defaulting to 1000 [ 458.432572][T13145] lo speed is unknown, defaulting to 1000 [ 458.471000][T13152] FAULT_INJECTION: forcing a failure. [ 458.471000][T13152] name failslab, interval 1, probability 0, space 0, times 0 [ 458.522680][T13152] CPU: 0 UID: 0 PID: 13152 Comm: syz.2.2113 Not tainted syzkaller #0 PREEMPT(full) [ 458.522727][T13152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 458.522748][T13152] Call Trace: [ 458.522757][T13152] [ 458.522766][T13152] dump_stack_lvl+0xe8/0x150 [ 458.522799][T13152] should_fail_ex+0x412/0x560 [ 458.522841][T13152] should_failslab+0xa8/0x100 [ 458.522876][T13152] __kmalloc_noprof+0xe8/0x760 [ 458.522906][T13152] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 458.522946][T13152] tomoyo_realpath_from_path+0xe3/0x5d0 [ 458.522980][T13152] ? tomoyo_domain+0xd7/0x130 [ 458.523023][T13152] ? tomoyo_path_number_perm+0x219/0x630 [ 458.523050][T13152] tomoyo_path_number_perm+0x246/0x630 [ 458.523081][T13152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 458.523108][T13152] ? perf_trace_run_bpf_submit+0xee/0x170 [ 458.523188][T13152] ? __fget_files+0x2a/0x420 [ 458.523218][T13152] ? __fget_files+0x2a/0x420 [ 458.523239][T13152] ? __fget_files+0x3a0/0x420 [ 458.523261][T13152] ? __fget_files+0x2a/0x420 [ 458.523290][T13152] security_file_ioctl+0xc3/0x2a0 [ 458.523319][T13152] __se_sys_ioctl+0x47/0x170 [ 458.523350][T13152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.523374][T13152] do_syscall_64+0x174/0x580 [ 458.523405][T13152] ? trace_irq_disable+0x3b/0x140 [ 458.523437][T13152] ? clear_bhb_loop+0x40/0x90 [ 458.523477][T13152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.523497][T13152] RIP: 0033:0x7f401479ce59 [ 458.523523][T13152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.523539][T13152] RSP: 002b:00007f401564f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 458.523560][T13152] RAX: ffffffffffffffda RBX: 00007f4014a15fa0 RCX: 00007f401479ce59 [ 458.523572][T13152] RDX: 0000200000000040 RSI: 00000000401054d5 RDI: 0000000000000004 [ 458.523584][T13152] RBP: 00007f401564f090 R08: 0000000000000000 R09: 0000000000000000 [ 458.523596][T13152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.523607][T13152] R13: 00007f4014a16038 R14: 00007f4014a15fa0 R15: 00007ffcd12c0148 [ 458.523645][T13152] [ 458.524051][T13152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.772244][T13156] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2115'. [ 459.103664][T13164] netlink: 'syz.5.2116': attribute type 16 has an invalid length. [ 459.170468][T13164] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2116'. [ 459.568664][ T5762] lo speed is unknown, defaulting to 1000 [ 459.582822][T13145] infiniband sz1: set active [ 459.597541][T13145] infiniband sz1: added lo [ 459.624703][T13145] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 459.633700][T13145] infiniband sz1: Couldn't open port 1 [ 459.668858][T13145] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 459.726041][T13145] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 459.763644][T13145] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 459.812202][T13176] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2122'. [ 459.841127][T13145] RDS/IB: sz1: added [ 459.863043][T13145] smc: adding ib device sz1 with port count 1 [ 459.874393][T13145] smc: ib device sz1 port 1 has no pnetid [ 459.883993][T13176] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2122'. [ 459.929053][T13177] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2120'. [ 459.946132][T13178] netlink: 'syz.0.2122': attribute type 1 has an invalid length. [ 459.984927][ T10] lo speed is unknown, defaulting to 1000 [ 460.008179][T13181] netlink: 830 bytes leftover after parsing attributes in process `syz.8.2123'. [ 460.030435][T13145] lo speed is unknown, defaulting to 1000 [ 460.151366][T13184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2124'. [ 460.185842][T13184] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 460.215189][T13180] mac80211_hwsim hwsim39 wlan0: entered allmulticast mode [ 460.704826][T13145] lo speed is unknown, defaulting to 1000 [ 460.912502][T13208] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2134'. [ 460.966822][T13206] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2132'. [ 461.209555][T13216] netlink: 'syz.5.2134': attribute type 1 has an invalid length. [ 461.279541][T13145] lo speed is unknown, defaulting to 1000 [ 462.073145][T13145] lo speed is unknown, defaulting to 1000 [ 462.206970][T13238] netlink: 'syz.2.2143': attribute type 1 has an invalid length. [ 462.227926][T13238] netlink: 'syz.2.2143': attribute type 4 has an invalid length. [ 462.249507][T13238] __nla_validate_parse: 1 callbacks suppressed [ 462.249527][T13238] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2143'. [ 462.286599][T13241] netlink: 'syz.2.2143': attribute type 10 has an invalid length. [ 462.543224][T13247] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2147'. [ 462.582814][T13145] lo speed is unknown, defaulting to 1000 [ 463.074813][T13260] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2148'. [ 463.113675][T13260] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2148'. [ 463.156972][T13260] netlink: 'syz.8.2148': attribute type 1 has an invalid length. [ 463.654531][T13276] FAULT_INJECTION: forcing a failure. [ 463.654531][T13276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.694404][T13264] gretap0 speed is unknown, defaulting to 1000 [ 463.702821][T13264] xfrm0 speed is unknown, defaulting to 1000 [ 463.711210][T13264] lo speed is unknown, defaulting to 1000 [ 463.745590][T13276] CPU: 0 UID: 0 PID: 13276 Comm: syz.8.2154 Not tainted syzkaller #0 PREEMPT(full) [ 463.745618][T13276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.745631][T13276] Call Trace: [ 463.745641][T13276] [ 463.745652][T13276] dump_stack_lvl+0xe8/0x150 [ 463.745692][T13276] should_fail_ex+0x412/0x560 [ 463.745749][T13276] _copy_to_user+0x31/0xb0 [ 463.745787][T13276] simple_read_from_buffer+0xe1/0x170 [ 463.745838][T13276] proc_fail_nth_read+0x1bb/0x230 [ 463.745881][T13276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.745924][T13276] ? rw_verify_area+0x2a6/0x4d0 [ 463.745956][T13276] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.745992][T13276] vfs_read+0x20c/0xa70 [ 463.746045][T13276] ? __pfx___mutex_lock+0x10/0x10 [ 463.746085][T13276] ? __pfx_vfs_read+0x10/0x10 [ 463.746124][T13276] ? __fget_files+0x2a/0x420 [ 463.746173][T13276] ? __fget_files+0x3a0/0x420 [ 463.746201][T13276] ? __fget_files+0x2a/0x420 [ 463.746260][T13276] ksys_read+0x150/0x270 [ 463.746304][T13276] ? __pfx_ksys_read+0x10/0x10 [ 463.746368][T13276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.746399][T13276] do_syscall_64+0x174/0x580 [ 463.746431][T13276] ? trace_irq_disable+0x3b/0x140 [ 463.746468][T13276] ? clear_bhb_loop+0x40/0x90 [ 463.746519][T13276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.746541][T13276] RIP: 0033:0x7f064d15d68e [ 463.746564][T13276] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.746580][T13276] RSP: 002b:00007f064e0c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.746599][T13276] RAX: ffffffffffffffda RBX: 00007f064e0c96c0 RCX: 00007f064d15d68e [ 463.746612][T13276] RDX: 000000000000000f RSI: 00007f064e0c90a0 RDI: 0000000000000005 [ 463.746623][T13276] RBP: 00007f064e0c9090 R08: 0000000000000000 R09: 0000000000000000 [ 463.746653][T13276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.746664][T13276] R13: 00007f064d416038 R14: 00007f064d415fa0 R15: 00007ffc65a525a8 [ 463.746747][T13276] [ 464.570404][T13291] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2157'. [ 464.679167][T13290] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2158'. [ 464.711763][T13295] netlink: 'syz.8.2158': attribute type 10 has an invalid length. [ 465.175277][T13299] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.2160'. [ 466.724677][T13324] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2167'. [ 466.770751][T13332] netlink: 'syz.8.2167': attribute type 10 has an invalid length. [ 467.736193][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2176'. [ 467.798960][T13350] syzkaller0: entered promiscuous mode [ 467.829297][T13350] syzkaller0: entered allmulticast mode [ 467.865949][T13362] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2180'. [ 468.098298][T13351] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2178'. [ 468.107446][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2178'. [ 468.394080][T13372] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2183'. [ 468.504763][T13374] netlink: 'syz.5.2184': attribute type 10 has an invalid length. [ 468.523984][T13372] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2183'. [ 468.559817][T13376] netlink: 'syz.5.2184': attribute type 10 has an invalid length. [ 468.577540][T13375] netlink: 'syz.8.2183': attribute type 1 has an invalid length. [ 470.850743][T13382] tap0: tun_chr_ioctl cmd 1074025677 [ 470.865121][T13382] tap0: linktype set to 519 [ 471.019047][T13386] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2188'. [ 471.215990][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2189'. [ 471.391503][T13400] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2192'. [ 471.543289][T13405] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2193'. [ 471.652075][T13405] bond0 (unregistering): (slave 17): Releasing backup interface [ 471.695750][T13405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.716126][T13416] netlink: 'syz.0.2198': attribute type 4 has an invalid length. [ 471.727987][T13405] bond0 (unregistering): Released all slaves [ 472.042811][T13432] netlink: 'syz.2.2203': attribute type 10 has an invalid length. [ 472.913317][T13448] __nla_validate_parse: 7 callbacks suppressed [ 472.913339][T13448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2208'. [ 472.998524][T13453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2210'. [ 473.113223][T13458] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2211'. [ 473.221839][T13461] netlink: 172 bytes leftover after parsing attributes in process `syz.8.2211'. [ 473.237127][T13461] netlink: 'syz.8.2211': attribute type 1 has an invalid length. [ 473.918116][T13465] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2212'. [ 473.970302][T13465] netlink: 'syz.0.2212': attribute type 10 has an invalid length. [ 474.057272][T13467] netlink: 'syz.2.2214': attribute type 21 has an invalid length. [ 474.081777][T13467] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2214'. [ 474.117214][T13469] netlink: 'syz.8.2215': attribute type 21 has an invalid length. [ 474.125492][T13469] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2215'. [ 474.261053][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 474.455275][T13489] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2222'. [ 474.488426][T13489] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 475.379439][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2234'. [ 475.690546][T13526] netlink: 'syz.6.2236': attribute type 10 has an invalid length. [ 475.832337][T13533] netlink: 'syz.8.2239': attribute type 1 has an invalid length. [ 475.959907][T13533] .: renamed from vlan0 (while UP) [ 476.181303][T13552] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.565310][T13569] netlink: 'syz.0.2251': attribute type 16 has an invalid length. [ 476.684600][T13569] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.692021][T13569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.717915][T13569] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.725331][T13569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.766032][T13579] netlink: 'syz.2.2252': attribute type 10 has an invalid length. [ 477.941683][T13619] __nla_validate_parse: 8 callbacks suppressed [ 477.941780][T13619] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2267'. [ 478.352542][T13625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.650869][T13647] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2276'. [ 478.653234][T13648] bpf: Bad value for 'gid' [ 478.663060][T13647] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2276'. [ 478.675418][T13647] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2276'. [ 478.685052][T13647] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2276'. [ 478.695832][T13647] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2276'. [ 478.705595][T13647] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2276'. [ 478.834628][T13652] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'. [ 478.989250][T13659] mac80211_hwsim hwsim55 wlan1: entered allmulticast mode [ 482.415454][T13702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2293'. [ 483.039315][T13721] FAULT_INJECTION: forcing a failure. [ 483.039315][T13721] name failslab, interval 1, probability 0, space 0, times 0 [ 483.054445][T13721] CPU: 0 UID: 0 PID: 13721 Comm: syz.8.2298 Not tainted syzkaller #0 PREEMPT(full) [ 483.054470][T13721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 483.054481][T13721] Call Trace: [ 483.054489][T13721] [ 483.054499][T13721] dump_stack_lvl+0xe8/0x150 [ 483.054534][T13721] should_fail_ex+0x412/0x560 [ 483.054584][T13721] should_failslab+0xa8/0x100 [ 483.054619][T13721] __kmalloc_noprof+0xe8/0x760 [ 483.054649][T13721] ? bpf_test_init+0x9f/0x150 [ 483.054694][T13721] bpf_test_init+0x9f/0x150 [ 483.054736][T13721] bpf_prog_test_run_skb+0x392/0x2260 [ 483.054780][T13721] ? bpf_prog_test_run_skb+0x261/0x2260 [ 483.054804][T13721] ? __fget_files+0x2a/0x420 [ 483.054876][T13721] ? __fget_files+0x3a0/0x420 [ 483.054897][T13721] ? __fget_files+0x2a/0x420 [ 483.054936][T13721] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 483.054968][T13721] bpf_prog_test_run+0x2c7/0x340 [ 483.055004][T13721] __sys_bpf+0xa20/0xd90 [ 483.055068][T13721] ? __pfx___sys_bpf+0x10/0x10 [ 483.055113][T13721] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 483.055222][T13721] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 483.055249][T13721] ? ksys_write+0x242/0x270 [ 483.055287][T13721] ? __pfx_ksys_write+0x10/0x10 [ 483.055334][T13721] __x64_sys_bpf+0xba/0xd0 [ 483.055367][T13721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.055392][T13721] do_syscall_64+0x174/0x580 [ 483.055426][T13721] ? clear_bhb_loop+0x40/0x90 [ 483.055460][T13721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.055480][T13721] RIP: 0033:0x7f064d19ce59 [ 483.055502][T13721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.055516][T13721] RSP: 002b:00007f064e0c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 483.055534][T13721] RAX: ffffffffffffffda RBX: 00007f064d415fa0 RCX: 00007f064d19ce59 [ 483.055546][T13721] RDX: 0000000000000014 RSI: 0000200000000140 RDI: 000000000000000a [ 483.055556][T13721] RBP: 00007f064e0c9090 R08: 0000000000000000 R09: 0000000000000000 [ 483.055566][T13721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.055576][T13721] R13: 00007f064d416038 R14: 00007f064d415fa0 R15: 00007ffc65a525a8 [ 483.055643][T13721] [ 483.524440][T13724] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2299'. [ 484.353557][T13726] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2300'. [ 485.101270][T13717] netlink: 172 bytes leftover after parsing attributes in process `syz.6.2297'. [ 485.199480][ T50] Bluetooth: hci1: unexpected event 0x30 length: 15 > 3 [ 485.208052][T13726] 7: entered promiscuous mode [ 485.228419][T13726] 7: entered allmulticast mode [ 485.514414][T13744] netlink: 'syz.2.2307': attribute type 21 has an invalid length. [ 485.522421][T13744] netlink: 'syz.2.2307': attribute type 6 has an invalid length. [ 485.539891][T13744] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2307'. [ 485.560558][T13746] netlink: 'syz.8.2308': attribute type 6 has an invalid length. [ 486.096745][T13769] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2314'. [ 486.413016][ T50] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 486.606048][T13788] netlink: 'syz.6.2319': attribute type 10 has an invalid length. [ 486.661324][T13788] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2319'. [ 486.704331][T13788] bond0: entered promiscuous mode [ 486.737813][T13788] 7: entered promiscuous mode [ 486.757507][T13788] bond_slave_1: entered promiscuous mode [ 486.763610][T13788] bridge0: entered promiscuous mode [ 486.769588][T13788] bridge0: port 4(bond0) entered blocking state [ 486.791040][T13788] bridge0: port 4(bond0) entered disabled state [ 486.856136][T13788] bond0: entered allmulticast mode [ 486.882089][T13788] 7: entered allmulticast mode [ 486.931115][T13788] bond_slave_1: entered allmulticast mode [ 486.942586][T13796] netlink: 'syz.2.2321': attribute type 2 has an invalid length. [ 486.952498][T13788] bridge0: entered allmulticast mode [ 487.027899][T13788] bond0: left allmulticast mode [ 487.081278][T13788] 7: left allmulticast mode [ 487.126467][T13788] bond_slave_1: left allmulticast mode [ 487.157063][T13788] bridge0: left allmulticast mode [ 487.188708][T13794] netlink: 'syz.6.2319': attribute type 1 has an invalid length. [ 487.203908][T13794] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2319'. [ 487.251472][T13794] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2319'. [ 487.261359][T13794] netlink: 658 bytes leftover after parsing attributes in process `syz.6.2319'. [ 487.598357][T13820] netlink: 'syz.0.2327': attribute type 13 has an invalid length. [ 488.246915][ T50] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 488.305385][T13832] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2329'. [ 488.972140][T13852] __nla_validate_parse: 1 callbacks suppressed [ 488.972165][T13852] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2333'. [ 489.735136][T13873] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2337'. [ 489.814099][T13873] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2337'. [ 489.872791][T13873] netlink: 'syz.5.2337': attribute type 1 has an invalid length. [ 489.991265][T13885] netlink: 'syz.6.2339': attribute type 21 has an invalid length. [ 490.002986][T13884] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2342'. [ 490.041776][T13885] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2339'. [ 490.308944][T13891] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2345'. [ 491.110112][T13915] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2352'. [ 491.191063][T13917] netlink: 'syz.2.2351': attribute type 10 has an invalid length. [ 491.421170][T13920] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2353'. [ 491.438238][T13928] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2354'. [ 491.458497][T13920] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2353'. [ 491.512605][T13928] netlink: 'syz.5.2354': attribute type 1 has an invalid length. [ 491.711597][T13936] netlink: 'syz.5.2359': attribute type 29 has an invalid length. [ 491.735051][T13936] netlink: 'syz.5.2359': attribute type 29 has an invalid length. [ 491.788016][T13938] netlink: 'syz.0.2358': attribute type 1 has an invalid length. [ 491.803202][T13936] netlink: 'syz.5.2359': attribute type 29 has an invalid length. [ 491.870322][T13938] netlink: 'syz.0.2358': attribute type 39 has an invalid length. [ 493.134198][T13970] netlink: 'syz.2.2373': attribute type 9 has an invalid length. [ 493.184231][T13970] netlink: 'syz.2.2373': attribute type 4 has an invalid length. [ 493.795645][T13995] netlink: 'syz.6.2379': attribute type 4 has an invalid length. [ 494.025604][T14004] __nla_validate_parse: 8 callbacks suppressed [ 494.025630][T14004] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2383'. [ 494.108240][T14008] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2383'. [ 494.520008][T14013] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2385'. [ 494.574115][T14013] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2385'. [ 495.362096][T14047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2395'. [ 495.453641][T14049] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2395'. [ 495.657717][T14040] FAULT_INJECTION: forcing a failure. [ 495.657717][T14040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.697188][T14040] CPU: 1 UID: 0 PID: 14040 Comm: syz.6.2394 Not tainted syzkaller #0 PREEMPT(full) [ 495.697215][T14040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.697227][T14040] Call Trace: [ 495.697246][T14040] [ 495.697266][T14040] dump_stack_lvl+0xe8/0x150 [ 495.697355][T14040] should_fail_ex+0x412/0x560 [ 495.697509][T14040] _copy_from_user+0x2d/0xb0 [ 495.697582][T14040] ___sys_sendmsg+0x1c6/0x360 [ 495.697650][T14040] ? perf_trace_run_bpf_submit+0xee/0x170 [ 495.697768][T14040] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.698186][T14040] ? __fget_files+0x2a/0x420 [ 495.698408][T14040] ? __fget_files+0x2a/0x420 [ 495.698450][T14040] ? __fget_files+0x3a0/0x420 [ 495.698668][T14040] __x64_sys_sendmsg+0x1bd/0x2a0 [ 495.698785][T14040] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.698824][T14040] ? perf_trace_preemptirq_template+0xb2/0x350 [ 495.699028][T14040] ? __pfx_ksys_write+0x10/0x10 [ 495.699231][T14040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.699297][T14040] do_syscall_64+0x174/0x580 [ 495.699342][T14040] ? trace_irq_disable+0x3b/0x140 [ 495.699404][T14040] ? clear_bhb_loop+0x40/0x90 [ 495.699513][T14040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.699549][T14040] RIP: 0033:0x7fb9e139ce59 [ 495.699602][T14040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.699619][T14040] RSP: 002b:00007fb9e2292028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.699639][T14040] RAX: ffffffffffffffda RBX: 00007fb9e1615fa0 RCX: 00007fb9e139ce59 [ 495.699652][T14040] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000007 [ 495.699665][T14040] RBP: 00007fb9e2292090 R08: 0000000000000000 R09: 0000000000000000 [ 495.699677][T14040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.699687][T14040] R13: 00007fb9e1616038 R14: 00007fb9e1615fa0 R15: 00007ffd51564f28 [ 495.699970][T14040] [ 496.543733][T14080] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2405'. [ 496.587437][T14069] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2399'. [ 496.640206][T14069] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2399'. [ 497.212269][T14103] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2414'. [ 497.351846][T14106] validate_nla: 3 callbacks suppressed [ 497.351867][T14106] netlink: 'syz.6.2415': attribute type 21 has an invalid length. [ 498.880020][T14134] netlink: 'syz.6.2424': attribute type 62 has an invalid length. [ 499.384355][T14161] __nla_validate_parse: 3 callbacks suppressed [ 499.384428][T14161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2433'. [ 499.433270][T14161] openvswitch: netlink: Flow actions attr not present in new flow. [ 500.056055][T14181] netlink: 'syz.6.2440': attribute type 39 has an invalid length. [ 500.074036][T14183] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 500.094984][T14183] netlink: 'syz.5.2441': attribute type 21 has an invalid length. [ 500.105961][T14183] IPv6: NLM_F_CREATE should be specified when creating new route [ 500.127637][T14183] IPv6: Can't replace route, no match found [ 500.220681][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2443'. [ 500.296334][T14199] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2443'. [ 500.366746][T14198] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2447'. [ 500.828664][T14216] netlink: 'syz.5.2455': attribute type 21 has an invalid length. [ 500.845352][T14216] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.016415][T14225] netlink: del zone limit has 4 unknown bytes [ 501.220212][T14235] openvswitch: netlink: Message has 8 unknown bytes. [ 501.253541][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2457'. [ 501.281838][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.290159][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.326554][T14225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.686882][T14248] IPv6: NLM_F_CREATE should be specified when creating new route [ 501.750363][T14248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.757764][T14248] IPv6: NLM_F_CREATE should be set when creating new route [ 501.780999][T14258] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 502.080284][T14272] netlink: 'syz.5.2470': attribute type 3 has an invalid length. [ 502.511174][T14288] netlink: 'syz.2.2474': attribute type 10 has an invalid length. [ 502.637899][T14290] ref_ctr_offset mismatch. inode: 0x9ea offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 502.793762][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2475'. [ 503.290893][T14308] netlink: 'syz.5.2479': attribute type 29 has an invalid length. [ 503.329913][T14308] netlink: 'syz.5.2479': attribute type 29 has an invalid length. [ 503.384106][T14308] netlink: 'syz.5.2479': attribute type 29 has an invalid length. [ 503.592661][T14315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2480'. [ 504.040394][T14330] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2483'. [ 504.085955][T14331] netlink: 'syz.2.2484': attribute type 2 has an invalid length. [ 504.097603][T14330] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2483'. [ 504.117502][T14331] netlink: 'syz.2.2484': attribute type 10 has an invalid length. [ 504.504360][T14345] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2487'. [ 504.522846][T14343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2488'. [ 505.153858][T14363] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2493'. [ 505.400294][T14369] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.2491'. [ 507.899351][T14360] netlink: 'syz.8.2491': attribute type 29 has an invalid length. [ 507.925709][T14362] netlink: 'syz.8.2491': attribute type 29 has an invalid length. [ 507.951265][T14368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2494'. [ 507.974701][T14368] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2494'. [ 507.997152][T14368] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2494'. [ 508.016570][T14364] netlink: 'syz.8.2491': attribute type 29 has an invalid length. [ 508.162218][T14375] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2496'. [ 508.194688][T14375] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2496'. [ 508.219729][T14377] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2497'. [ 508.244115][T14377] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 508.805502][ T50] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 510.358049][T14440] __nla_validate_parse: 3 callbacks suppressed [ 510.358077][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2516'. [ 510.415100][T14435] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 510.480529][ T50] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 510.969423][T14452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 511.004219][T14454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2521'. [ 511.290465][T14458] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2522'. [ 511.743565][T14474] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 511.753104][T14474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.952028][ T5641] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.973586][ T5641] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.985032][ T5641] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.995522][ T5641] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 512.009168][ T5641] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.215167][T14488] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2529'. [ 512.427340][T14490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2530'. [ 512.493335][T14493] openvswitch: netlink: Unknown nsh attribute 0 [ 512.544688][ T5641] Bluetooth: hci5: unexpected event 0x0b length: 15 > 11 [ 512.572852][T14500] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2533'. [ 512.589286][T14500] netlink: 'syz.2.2533': attribute type 4 has an invalid length. [ 512.839257][ T5641] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 512.922918][T14477] gretap0 speed is unknown, defaulting to 1000 [ 512.967919][T14477] xfrm0 speed is unknown, defaulting to 1000 [ 512.978141][T14502] sch_tbf: burst 1 is lower than device bridge_slave_0 mtu (1514) ! [ 512.989621][T14477] lo speed is unknown, defaulting to 1000 [ 513.241508][T14518] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2540'. [ 513.483817][T14531] netlink: 'syz.5.2543': attribute type 37 has an invalid length. [ 513.496763][T14531] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2543'. [ 513.950423][T14550] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2545'. [ 514.063397][ T5641] Bluetooth: hci5: unexpected event 0x30 length: 15 > 3 [ 514.079190][ T5641] Bluetooth: hci1: command tx timeout [ 514.893924][T14477] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.901438][T14477] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.911730][T14477] bridge_slave_0: entered allmulticast mode [ 514.920126][T14477] bridge_slave_0: entered promiscuous mode [ 514.931985][T14477] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.940373][T14477] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.948933][T14477] bridge_slave_1: entered allmulticast mode [ 514.957477][T14477] bridge_slave_1: entered promiscuous mode [ 515.087123][T14477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.104522][T14477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.262023][T14477] team0: Port device team_slave_0 added [ 515.311424][T14477] team0: Port device team_slave_1 added [ 515.771172][T14477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.804033][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 515.897216][T14594] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2558'. [ 515.915018][T14477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.974709][T14477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.001171][T14477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.035692][T14477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.099943][T14600] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2562'. [ 516.120950][T14477] hsr_slave_0: entered promiscuous mode [ 516.129513][T14477] hsr_slave_1: entered promiscuous mode [ 516.136536][T14477] debugfs: 'hsr0' already exists in 'hsr' [ 516.152896][T14594] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2558'. [ 516.162371][T14477] Cannot create hsr debugfs directory [ 516.188704][ T5641] Bluetooth: hci1: command tx timeout [ 516.247096][T14602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2563'. [ 516.498036][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2564'. [ 516.790201][T14477] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.013419][T14616] : entered promiscuous mode [ 517.210705][T14477] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.339581][T14477] bridge0: port 3(netdevsim1) entered disabled state [ 517.466499][T14477] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 517.510028][T14477] bridge0: port 3(netdevsim1) entered disabled state [ 517.686489][T14630] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2571'. [ 517.735959][T14477] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.871289][T14637] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2571'. [ 518.013228][T14477] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.238848][ T5641] Bluetooth: hci1: command tx timeout [ 518.245598][T14643] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2576'. [ 518.261986][T14643] netlink: 'syz.6.2576': attribute type 10 has an invalid length. [ 518.377406][T14477] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 518.384711][T14648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2578'. [ 518.420268][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 518.428386][T14477] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 518.443560][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 518.467117][T14477] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 518.494697][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 518.513844][T14477] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 518.540759][T14477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 518.797106][T14477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.869029][T14477] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.891632][ T7415] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.898859][ T7415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.956909][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.964235][ T7424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 519.324626][T14677] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2587'. [ 519.347181][T14677] netlink: 'syz.5.2587': attribute type 10 has an invalid length. [ 519.366572][T14681] netlink: 'syz.8.2586': attribute type 10 has an invalid length. [ 519.388984][T14681] netdevsim netdevsim8 netdevsim1: entered allmulticast mode [ 519.421418][T14681] bridge0: port 3(netdevsim1) entered blocking state [ 519.449769][T14681] bridge0: port 3(netdevsim1) entered disabled state [ 519.462942][T14681] netdevsim netdevsim8 netdevsim1: entered promiscuous mode [ 519.563755][T14685] netlink: 'syz.2.2589': attribute type 10 has an invalid length. [ 520.117829][T14477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.307991][T14477] veth0_vlan: entered promiscuous mode [ 520.325096][ T5641] Bluetooth: hci1: command tx timeout [ 520.370709][T14477] veth1_vlan: entered promiscuous mode [ 520.602112][T14477] veth0_macvtap: entered promiscuous mode [ 520.703330][T14477] veth1_macvtap: entered promiscuous mode [ 520.922115][T14477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.085868][T14477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.272683][ T3291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.296421][ T3291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.326859][ T3291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.358241][ T3291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.577924][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.616904][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.687302][ T7419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.696108][ T7419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.852975][T14747] netlink: 'syz.2.2608': attribute type 16 has an invalid length. [ 521.885203][T14747] netlink: 'syz.2.2608': attribute type 17 has an invalid length. [ 521.917067][T14751] __nla_validate_parse: 5 callbacks suppressed [ 521.917088][T14751] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.2609'. [ 522.245323][ T5642] xfrm0 speed is unknown, defaulting to 1000 [ 522.380804][T14759] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2612'. [ 523.826018][T14818] netlink: 'syz.5.2633': attribute type 19 has an invalid length. [ 524.607711][T14837] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2638'. [ 524.673453][T14837] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2638'. [ 524.817146][T14844] netlink: 'syz.0.2641': attribute type 10 has an invalid length. [ 525.054858][T14842] netlink: 'syz.2.2638': attribute type 4 has an invalid length. [ 525.172976][T14852] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2642'. [ 525.238110][T14852] netlink: 'syz.6.2642': attribute type 10 has an invalid length. [ 527.365866][T14896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2656'. [ 527.414453][T14896] netlink: 'syz.0.2656': attribute type 10 has an invalid length. [ 527.432190][T14902] netlink: 'syz.5.2658': attribute type 4 has an invalid length. [ 527.446369][T14903] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2654'. [ 527.464455][T14902] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2658'. [ 527.492229][T14905] netlink: 'syz.8.2659': attribute type 4 has an invalid length. [ 527.511701][T14905] netlink: 152 bytes leftover after parsing attributes in process `syz.8.2659'. [ 527.529199][T14892] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2654'. [ 527.647340][T14896] team0 (unregistering): Port device team_slave_0 removed [ 527.725112][T14896] team0 (unregistering): Port device team_slave_1 removed [ 527.799879][T14902] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 528.179327][T14919] netlink: 'syz.2.2664': attribute type 10 has an invalid length. [ 528.552300][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2666'. [ 528.587157][T14933] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2666'. [ 528.634423][T14933] netlink: 'syz.6.2666': attribute type 4 has an invalid length. [ 528.666249][T14933] netlink: 152 bytes leftover after parsing attributes in process `syz.6.2666'. [ 529.046470][T14941] netlink: 'syz.5.2669': attribute type 11 has an invalid length. [ 531.204104][T14933] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 531.461381][T14951] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2673'. [ 531.481363][T14947] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2672'. [ 531.497500][T14951] netlink: 'syz.0.2673': attribute type 10 has an invalid length. [ 531.850519][ T30] audit: type=1107 audit(1780772516.697:4): pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 532.701717][T14988] FAULT_INJECTION: forcing a failure. [ 532.701717][T14988] name failslab, interval 1, probability 0, space 0, times 0 [ 532.720258][T14988] CPU: 0 UID: 0 PID: 14988 Comm: syz.2.2688 Not tainted syzkaller #0 PREEMPT(full) [ 532.720283][T14988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.720294][T14988] Call Trace: [ 532.720301][T14988] [ 532.720310][T14988] dump_stack_lvl+0xe8/0x150 [ 532.720343][T14988] should_fail_ex+0x412/0x560 [ 532.720381][T14988] should_failslab+0xa8/0x100 [ 532.720411][T14988] __kmalloc_noprof+0xe8/0x760 [ 532.720437][T14988] ? bpf_test_init+0x9f/0x150 [ 532.720489][T14988] bpf_test_init+0x9f/0x150 [ 532.720522][T14988] bpf_prog_test_run_skb+0x392/0x2260 [ 532.720585][T14988] ? __fget_files+0x3a0/0x420 [ 532.720606][T14988] ? __fget_files+0x2a/0x420 [ 532.720636][T14988] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 532.720666][T14988] bpf_prog_test_run+0x2c7/0x340 [ 532.720694][T14988] __sys_bpf+0xa20/0xd90 [ 532.720739][T14988] ? __pfx___sys_bpf+0x10/0x10 [ 532.720776][T14988] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 532.720871][T14988] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 532.720902][T14988] ? ksys_write+0x242/0x270 [ 532.720934][T14988] ? __pfx_ksys_write+0x10/0x10 [ 532.720971][T14988] __x64_sys_bpf+0xba/0xd0 [ 532.721003][T14988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.721028][T14988] do_syscall_64+0x174/0x580 [ 532.721057][T14988] ? trace_irq_disable+0x3b/0x140 [ 532.721088][T14988] ? clear_bhb_loop+0x40/0x90 [ 532.721117][T14988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.721138][T14988] RIP: 0033:0x7f401479ce59 [ 532.721158][T14988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.721174][T14988] RSP: 002b:00007f401564f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.721195][T14988] RAX: ffffffffffffffda RBX: 00007f4014a15fa0 RCX: 00007f401479ce59 [ 532.721209][T14988] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 532.721221][T14988] RBP: 00007f401564f090 R08: 0000000000000000 R09: 0000000000000000 [ 532.721232][T14988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.721243][T14988] R13: 00007f4014a16038 R14: 00007f4014a15fa0 R15: 00007ffcd12c0148 [ 532.721287][T14988] [ 533.064013][T14996] __nla_validate_parse: 1 callbacks suppressed [ 533.064052][T14996] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2692'. [ 533.081597][T14996] netlink: 17 bytes leftover after parsing attributes in process `syz.8.2692'. [ 533.171034][T15002] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2694'. [ 533.198119][T15004] netlink: 'syz.6.2696': attribute type 16 has an invalid length. [ 533.218900][T15004] netlink: 'syz.6.2696': attribute type 17 has an invalid length. [ 533.238156][T15004] lo: entered promiscuous mode [ 533.267141][T15004] tunl0: entered promiscuous mode [ 533.295978][T15004] gre0: entered promiscuous mode [ 533.302113][T15004] gretap0: entered promiscuous mode [ 533.313985][T15004] erspan0: entered promiscuous mode [ 533.319927][T15004] ip_vti0: entered promiscuous mode [ 533.326072][T15004] ip6_vti0: entered promiscuous mode [ 533.332415][T15004] sit0: entered promiscuous mode [ 533.338345][T15004] ip6tnl0: entered promiscuous mode [ 533.350010][T15004] ip6gre0: entered promiscuous mode [ 533.356230][T15004] syz_tun: entered promiscuous mode [ 533.362246][T15004] ip6gretap0: entered promiscuous mode [ 533.374774][T15004] vcan0: entered promiscuous mode [ 533.381269][T15004] nlmon0: entered promiscuous mode [ 533.388040][T15004] vxcan0: entered promiscuous mode [ 533.413452][T15004] vxcan1: entered promiscuous mode [ 533.419579][T15004] veth0: entered promiscuous mode [ 533.425296][T15004] veth1: entered promiscuous mode [ 533.430908][T15004] wg0: entered promiscuous mode [ 533.436439][T15004] wg1: entered promiscuous mode [ 533.443705][T15004] wg2: entered promiscuous mode [ 533.450667][T15004] veth0_to_bridge: entered promiscuous mode [ 533.458516][T15004] veth1_to_bridge: entered promiscuous mode [ 533.466614][T15004] veth0_to_bond: entered promiscuous mode [ 533.474300][T15004] veth1_to_bond: entered promiscuous mode [ 533.481530][T15004] veth0_to_team: entered promiscuous mode [ 533.488103][T15004] team_slave_0: entered promiscuous mode [ 533.494546][T15004] veth1_to_team: entered promiscuous mode [ 533.501095][T15004] team_slave_1: entered promiscuous mode [ 533.507516][T15004] veth0_to_batadv: entered promiscuous mode [ 533.524845][T15004] batadv_slave_0: entered promiscuous mode [ 533.538121][T15004] veth1_to_batadv: entered promiscuous mode [ 533.553607][T15004] batadv_slave_1: entered promiscuous mode [ 533.564253][T15004] xfrm0: entered promiscuous mode [ 533.578151][T15004] veth0_to_hsr: entered promiscuous mode [ 533.602972][T15004] veth1_to_hsr: entered promiscuous mode [ 533.618147][T15004] hsr0: entered promiscuous mode [ 533.632739][T15004] veth1_virt_wifi: entered promiscuous mode [ 533.660572][T15004] veth0_virt_wifi: entered promiscuous mode [ 533.673368][T15004] virt_wifi0: entered promiscuous mode [ 533.692019][T15004] vlan0: entered promiscuous mode [ 533.702067][T15004] vlan1: entered promiscuous mode [ 533.710501][T15004] macvlan0: entered promiscuous mode [ 533.719087][T15004] macvlan1: left allmulticast mode [ 533.724790][T15004] veth1_vlan: left allmulticast mode [ 533.734590][T15004] ipvlan0: entered promiscuous mode [ 533.755762][T15004] ipvlan1: entered promiscuous mode [ 533.785552][T15004] macvtap0: entered promiscuous mode [ 533.795647][T15004] macsec0: entered promiscuous mode [ 533.806841][T15004] geneve0: entered promiscuous mode [ 533.817316][T15004] geneve1: entered promiscuous mode [ 533.832613][T15004] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 533.847717][T15004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.861048][T15004] netdevsim netdevsim6 netdevsim2: entered promiscuous mode [ 533.871856][T15004] netdevsim netdevsim6 netdevsim3: entered promiscuous mode [ 533.883381][T15004] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 533.894094][T15004] mac80211_hwsim hwsim29 wlan1: entered promiscuous mode [ 533.904539][T15004] mac80211_hwsim hwsim30 wlan2: entered promiscuous mode [ 533.924541][T15004] mac80211_hwsim hwsim35 wlan3: entered promiscuous mode [ 533.942052][T15004] : port 1(batadv0) entered blocking state [ 533.948883][T15004] : port 1(batadv0) entered forwarding state [ 534.026340][T15004] : entered promiscuous mode [ 534.033867][T15004] mac80211_hwsim hwsim42 wlan4: entered promiscuous mode [ 534.044982][T15004] #!: entered promiscuous mode [ 534.053898][T15004] : entered promiscuous mode [ 534.065097][T15004] mac80211_hwsim hwsim58 wlan5: entered promiscuous mode [ 534.078064][ T5744] lo speed is unknown, defaulting to 1000 [ 534.078188][T15012] netlink: 'syz.0.2697': attribute type 10 has an invalid length. [ 534.101147][T15012] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2697'. [ 534.111749][ T808] gretap0 speed is unknown, defaulting to 1000 [ 534.119499][T15002] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 534.735798][T15045] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2707'. [ 535.029822][T15053] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 536.324341][T15053] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 536.358914][T15053] bridge0: port 3(netdevsim1) entered blocking state [ 536.374959][T15053] bridge0: port 3(netdevsim1) entered disabled state [ 536.386319][T15053] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 536.698757][T15073] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2713'. [ 536.973442][T15086] netlink: 'syz.0.2718': attribute type 5 has an invalid length. [ 536.994551][T15087] netlink: 'syz.2.2720': attribute type 39 has an invalid length. [ 540.455116][T15122] netlink: 'syz.0.2730': attribute type 16 has an invalid length. [ 540.474624][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2731'. [ 540.495630][T15124] netlink: 'syz.5.2732': attribute type 2 has an invalid length. [ 540.506565][T15128] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2734'. [ 540.515497][T15122] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2730'. [ 540.557980][T15122] veth0_macvtap: entered allmulticast mode [ 540.671664][T15126] netlink: 'syz.8.2733': attribute type 2 has an invalid length. [ 540.698720][T15126] netlink: 'syz.8.2733': attribute type 2 has an invalid length. [ 541.647695][T15155] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2741'. [ 542.512361][T15198] netlink: 'syz.8.2756': attribute type 10 has an invalid length. [ 542.657464][T15204] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 542.691485][T15204] bridge0: port 3(netdevsim1) entered disabled state [ 542.706560][T15204] bridge_slave_1: left allmulticast mode [ 542.712294][T15204] bridge_slave_1: left promiscuous mode [ 542.718153][T15204] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.734411][T15204] bridge_slave_0: left allmulticast mode [ 542.740233][T15204] bridge_slave_0: left promiscuous mode [ 542.746503][T15204] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.047062][T15208] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2757'. [ 544.205612][T15237] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 544.226046][ T5641] Bluetooth: hci0: unexpected event 0x30 length: 15 > 3 [ 544.228928][T15237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 544.385840][T15241] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2772'. [ 544.420077][T15241] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2772'. [ 546.992161][T15290] netlink: 'syz.5.2787': attribute type 2 has an invalid length. [ 547.008046][T15295] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2789'. [ 547.023490][T15293] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2788'. [ 547.213306][T15298] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2790'. [ 547.223780][T15301] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2791'. [ 547.251475][T15298] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2790'. [ 547.274624][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2793'. [ 547.442442][T15291] gretap0 speed is unknown, defaulting to 1000 [ 547.529249][T15291] xfrm0 speed is unknown, defaulting to 1000 [ 547.579962][T15291] lo speed is unknown, defaulting to 1000 [ 547.616397][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2795'. [ 547.879222][T15324] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2798'. [ 547.941001][T15327] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2797'. [ 547.954673][T15327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2797'. [ 549.204851][T15373] sctp: [Deprecated]: syz.8.2812 (pid 15373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 549.204851][T15373] Use struct sctp_sack_info instead [ 549.748771][T15376] netlink: 'syz.0.2813': attribute type 3 has an invalid length. [ 550.614853][T15396] netlink: 'syz.5.2821': attribute type 21 has an invalid length. [ 550.634764][T15396] netlink: 'syz.5.2821': attribute type 22 has an invalid length. [ 551.489287][T15405] gretap0 speed is unknown, defaulting to 1000 [ 551.532013][T15415] [ 551.535628][T15415] ============================= [ 551.543396][T15415] WARNING: suspicious RCU usage [ 551.550598][T15415] syzkaller #0 Not tainted [ 551.555089][T15415] ----------------------------- [ 551.562235][T15415] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 551.571106][T15415] [ 551.571106][T15415] other info that might help us debug this: [ 551.571106][T15415] [ 551.581563][T15415] [ 551.581563][T15415] rcu_scheduler_active = 2, debug_locks = 1 [ 551.590422][T15415] 1 lock held by syz.6.2827/15415: [ 551.595621][T15415] #0: ffffffff8e95ced8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: __bpf_prog_test_run_raw_tp+0x1ba/0xa00 [ 551.607510][T15415] [ 551.607510][T15415] stack backtrace: [ 551.613547][T15415] CPU: 1 UID: 0 PID: 15415 Comm: syz.6.2827 Not tainted syzkaller #0 PREEMPT(full) [ 551.613573][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.613585][T15415] Call Trace: [ 551.613597][T15415] [ 551.613610][T15415] dump_stack_lvl+0xe8/0x150 [ 551.613659][T15415] lockdep_rcu_suspicious+0x13f/0x1d0 [ 551.613721][T15415] get_callchain_entry+0x2b6/0x3c0 [ 551.613775][T15415] get_perf_callchain+0xd5/0x880 [ 551.613846][T15415] ? __pfx_get_perf_callchain+0x10/0x10 [ 551.613921][T15415] ? __lock_acquire+0x6b5/0x2cf0 [ 551.613976][T15415] __bpf_get_stack+0x445/0xab0 [ 551.614068][T15415] ? __pfx___bpf_get_stack+0x10/0x10 [ 551.614155][T15415] bpf_get_stack+0x33/0x50 [ 551.614198][T15415] ? bpf_prog_c1647626741e50b6_F+0x32/0x38 [ 551.614240][T15415] bpf_get_stack_raw_tp+0x1a9/0x220 [ 551.614315][T15415] bpf_prog_c1647626741e50b6_F+0x32/0x38 [ 551.614364][T15415] bpf_prog_2075aa80559d16e5+0x21/0x2e [ 551.614407][T15415] __bpf_prog_test_run_raw_tp+0x329/0xa00 [ 551.614444][T15415] ? perf_trace_lock+0x32d/0x410 [ 551.614534][T15415] ? __pfx___bpf_prog_test_run_raw_tp+0x10/0x10 [ 551.614637][T15415] bpf_prog_test_run_raw_tp+0x4c8/0x7e0 [ 551.614732][T15415] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 551.614784][T15415] ? __fget_files+0x2a/0x420 [ 551.614850][T15415] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 551.614897][T15415] bpf_prog_test_run+0x2c7/0x340 [ 551.614955][T15415] __sys_bpf+0xa20/0xd90 [ 551.615052][T15415] ? __pfx___sys_bpf+0x10/0x10 [ 551.615120][T15415] ? do_futex+0x395/0x420 [ 551.615361][T15415] ? rcu_is_watching+0x15/0xb0 [ 551.615444][T15415] __x64_sys_bpf+0xba/0xd0 [ 551.615499][T15415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.615538][T15415] do_syscall_64+0x174/0x580 [ 551.615575][T15415] ? trace_irq_disable+0x3b/0x140 [ 551.615619][T15415] ? clear_bhb_loop+0x40/0x90 [ 551.615674][T15415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.615701][T15415] RIP: 0033:0x7fb9e139ce59 [ 551.615735][T15415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.615752][T15415] RSP: 002b:00007fb9e2292028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 551.615774][T15415] RAX: ffffffffffffffda RBX: 00007fb9e1615fa0 RCX: 00007fb9e139ce59 [ 551.615790][T15415] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 551.615803][T15415] RBP: 00007fb9e1432d6f R08: 0000000000000000 R09: 0000000000000000 [ 551.615815][T15415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.615827][T15415] R13: 00007fb9e1616038 R14: 00007fb9e1615fa0 R15: 00007ffd51564f28 [ 551.615954][T15415] [ 551.635808][T15405] xfrm0 speed is unknown, defaulting to 1000 [ 552.015759][T15405] lo speed is unknown, defaulting to 1000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 552.442494][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 552.455639][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 552.468786][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 552.483544][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 552.494784][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 553.723665][ T7424] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.827257][ T7424] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.894101][ T7424] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.979572][ T7424] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.072807][T15405] bond0: (slave syz_tun): Releasing backup interface [ 554.525217][ T7424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 554.537546][ T7424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.553729][ T7424] bond0 (unregistering): Released all slaves [ 554.839127][ T5295] 8021q: adding VLAN 0 to HW filter on device eth17 [ 555.122122][ T7424] hsr_slave_0: left promiscuous mode [ 555.128282][ T7424] hsr_slave_1: left promiscuous mode [ 555.135637][ T7424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.151140][ T7424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.160221][ T7424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.167685][ T7424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.183235][ T7424] veth1_macvtap: left promiscuous mode [ 555.188945][ T7424] veth0_macvtap: left promiscuous mode [ 555.194605][ T7424] veth1_vlan: left promiscuous mode [ 555.201800][ T7424] veth0_vlan: left promiscuous mode [ 555.637229][ T5295] 8021q: adding VLAN 0 to HW filter on device eth18 [ 556.072888][ T7424] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.101461][ T5295] 8021q: adding VLAN 0 to HW filter on device eth19 [ 556.183859][ T7424] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.313769][ T7424] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.415471][ T7424] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.557760][ T5295] 8021q: adding VLAN 0 to HW filter on device eth20 [ 556.631059][ T7424] bridge_slave_1: left allmulticast mode [ 556.636817][ T7424] bridge_slave_1: left promiscuous mode [ 556.644322][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.654248][ T7424] bridge_slave_0: left allmulticast mode [ 556.660548][ T7424] bridge_slave_0: left promiscuous mode [ 556.666477][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.898463][ T7415] smbdirect: ib_dev[syz1] removed [ 557.118198][ T808] xfrm0 speed is unknown, defaulting to 1000 [ 557.129075][ T808] infiniband syz1: ib_query_port failed (-19) [ 557.143163][ T5295] 8021q: adding VLAN 0 to HW filter on device eth21 [ 557.186018][ T7424] : left promiscuous mode [ 557.783114][ T5295] 8021q: adding VLAN 0 to HW filter on device eth22 [ 558.332582][ T5295] 8021q: adding VLAN 0 to HW filter on device eth23 [ 558.598353][ T7424] hsr_slave_0: left promiscuous mode [ 558.606057][ T7424] hsr_slave_1: left promiscuous mode [ 558.626911][ T7424] veth0_macvtap: left promiscuous mode [ 558.633312][ T7424] veth1_vlan: left allmulticast mode [ 558.639231][ T7424] veth1_vlan: left promiscuous mode [ 558.644493][ T7424] veth0_vlan: left promiscuous mode [ 559.096296][ T5295] 8021q: adding VLAN 0 to HW filter on device eth24