last executing test programs: 4m8.519912727s ago: executing program 1 (id=30): socket$kcm(0x2, 0x5, 0x84) socket$nl_crypto(0x10, 0x3, 0x15) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x408) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="8510000000000000851000000000000085100000000000008510000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5ffffff00"/45], &(0x7f0000000780)='GPL\x00'}, 0x94) syz_clone(0x26000080, &(0x7f0000000300)="62b86fd43b86a674008feaf0ed50fd5c677ce5d649e1e76f743f7ea814077ebddda0e69138513fddac260c7f3ad57c2e11bc7d5f9283f2c54b559649bc62d1afefd574dc985414ca37ac9fb94b254654468b014f0fb9465bf8729abf", 0x5c, &(0x7f0000000140), &(0x7f0000000440), &(0x7f0000000600)="385271f0423cf8373de2f6d2145041d5d3cd234b0930de3e1a318632d97d06a54a8bb918b98daa04711b1c9203a0cb4b695934e391a58914584b96fc6f4e3fe94574d2f0f6966ed828b8044c735b72432e9f3253a28a96e1a7467fd00848a0df27e16ced90f08ab58debc393f48d7f1953bef9909dd340b14d67aeb6d6b4762b6a1abc09d307ddef9dbe97627cc3d7d10af62dc6267dc55708b7f695bd9c8a96ea4dde01bbda76d3df80b408b52bdd97fd4796244403550c249e56fd4bb09154de00e4c66e1ffdd39197f9935c50a255766907733716f58edbb47b2236297f22d98d2a9666a9") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073110f00000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 4m7.446718166s ago: executing program 1 (id=39): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002"], 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r2, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r2, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000300)='GPL\x00', 0x2, 0x3a, &(0x7f0000000340)=""/58, 0x41100, 0x0, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000580)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xe, 0x2, 0xfffffff4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000740)=[r2, r2, r7, r2, r2, r4, r1], &(0x7f0000000780)=[{0x1, 0x4, 0x10, 0xc}, {0x1, 0x1, 0xa, 0x8}, {0x1, 0x4, 0x4, 0xc}], 0x10, 0xfff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6eaa000000000000711010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) 4m6.802123427s ago: executing program 1 (id=46): socket$kcm(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x35e6}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r4, r3, 0x4, r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, 0xffffffffffffffff, 0x1c, 0x4, 0x0, @void, @value=r8}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r9}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x15, 0x21, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa550, 0x0, 0x0, 0x0, 0xb41c}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0xb, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000008c0)={0x2, 0x0, 0x100, 0x1}, 0x10, 0x0, r1, 0x0, &(0x7f0000000a40)=[0xffffffffffffffff, 0xffffffffffffffff, r4, r8, r9, r10], 0x0, 0x10, 0x40}, 0x94) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3400cc00) ioctl$sock_kcm_SIOCKCMUNATTACH(r11, 0x541b, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r12 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$sock(r12, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x2d, 0x0, 0x0, 0x7}, 0x80, 0x0}, 0x0) 4m5.446332093s ago: executing program 3 (id=52): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a20000000000a01020000000000000000070008000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000007500070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000000002040002800c0004"], 0xec}}, 0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x6, 0x14e, 0x0, 0x0, @binary="69da"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d8000000", 0x4}], 0x1, 0x0, 0x0, 0x2663}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180), 0xffc3) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000240)=r2, 0x4) 4m5.338184555s ago: executing program 1 (id=54): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000400), &(0x7f00000004c0)=r1}, 0x20) close(0x3) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="14b6d700"/31], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa5e6c85000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8943, 0x0) close(0x3) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x95, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f00000001c0), &(0x7f0000000440)=r3}, 0x20) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) 4m5.150323948s ago: executing program 3 (id=56): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007021000f8fdffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0xb, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000040) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r5, 0x10) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="9c", 0x1}], 0x1}, 0x20004050) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) sendmsg$inet(r12, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)}, 0x8890) r13 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32, @ANYBLOB="0200"], 0x48) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41100, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r14, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4m4.849084336s ago: executing program 3 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x0, 0x7, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000041}, 0x24044010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x90, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xd}]}, 0x90}}, 0x4004040) 4m4.425562138s ago: executing program 3 (id=62): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='\':&[\x00') r0 = perf_event_open(&(0x7f0000000080)={0xb0c131cf843917f8, 0x80, 0x1, 0x85, 0xb, 0xf, 0x0, 0xfff, 0x62001, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fffffff, 0x2, @perf_bp={&(0x7f0000000040)}, 0x10000, 0x8, 0x8c7, 0x2, 0x3, 0x3, 0x1, 0x0, 0x5, 0x0, 0xffffffffffffff81}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000100)='./file0\x00', r1}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x2b, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x0, 0x70a}, {}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000600)='GPL\x00', 0x3, 0x94, &(0x7f0000000640)=""/148, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x3, 0xc, 0x7b00, 0x5}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x5, 0x1, 0x3, 0x5}, {0x4, 0x3, 0x10}], 0x10, 0x1000}, 0x94) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0x7, &(0x7f0000000200)=@raw=[@btf_id={0x18, 0x4ffdf85859032804, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3a}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61b5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8ca0fb36}], &(0x7f0000000240)='GPL\x00', 0x1, 0x9c, &(0x7f0000000280)=""/156, 0x41100, 0x44, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x10, 0x1, 0x7}, 0x10, 0xffffffffffffffff, r3, 0x3, &(0x7f0000000a40)=[r4, r5, r1, r6], &(0x7f0000000a80)=[{0x3, 0x3, 0x3, 0xb}, {0x4, 0x1, 0x2}, {0x1, 0x2, 0x3, 0x9}], 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000b80)='hwmon_attr_show_string\x00', r3, 0x0, 0xaa6}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000d00)={@cgroup, 0xf, 0x0, 0x9, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d40)={@ifindex=r2, r3, 0x31, 0x2002, r7, @value, @void, @void, @void, r8}, 0x20) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$sock(r9, &(0x7f00000010c0)={&(0x7f0000000d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x1, 0x1, 0x4, 0x2, {0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)="047a317e63b1da7a9079af275adaae19b3c512b225cb896116241a271b54c0f8e74635c69d84732ded496bc9626a75714d4a4b6669b5a6f9ce37fd39f30b0a2eb8e94d480b77a31a01966e313ec6913094ef76ad10ea217e2a63f33700376315981bb8aff9d7dc8287ec7e7b5f7d7aa9a7fe9504cc4be18ebe9bf14277da86c50ba0e6", 0x83}, {&(0x7f0000000ec0)="d7e3693f27e35697487c41112197aa0d0ca2a4f800a13df7368977c7dacd5c260aaaad8a7c612524dce1999e25f6e92ac6e6f537dc7ab8041748cb32e9c70f98539fa371a9102fb2f580dc9abf191732c65afe", 0x53}, {&(0x7f0000000f40)="64866a062d7439d9765e81d279540b92412eb9b4814c0e72229e272430fe63b1a455bfe31865e4a641da082386e29fd4b9279083c61438ceb98cc1198982593984eb39dd479a823c174c9a5b5995552e5d444c48dea7868a09d947d2a7c65969291cab5b92648c1e62db625264d29984642b73c98ebe6d8e1778ffc3c625bcfcc30769ff1ff244e9c6325a91e6d7f771a3c48f32424709f5f5fe04be8ab1a335d4e4795b377c44e2658a890db323a72d050a43555811f38e79c7db966d1136d9", 0xc0}], 0x3, &(0x7f0000001040)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1f43}}], 0x48}, 0x4000480) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001200)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001240), &(0x7f0000001280)='%pK \x00'}, 0x20) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001300)={0xffffffffffffffff, 0xff, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0x13, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x35cb8db8, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x80000000}, @ldst={0x2, 0x1, 0x6, 0x8, 0x6, 0xffffffffffffffc0, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000011c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, 0x0, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001340)=[r1, r5, r4, r12, r1, r13], &(0x7f0000001380)=[{0x3, 0x5, 0x8, 0x5}, {0x1, 0x4, 0xa, 0x7}, {0x1, 0x5, 0x0, 0x7}, {0x4, 0x3, 0xa, 0xa}, {0x5, 0x4, 0x7, 0x4}, {0x0, 0x4, 0x1, 0x4}, {0x1, 0x3, 0xa, 0x9}, {0x4, 0x5, 0xe, 0x4}, {0x4, 0x1, 0x5, 0x4}]}, 0x94) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x12, &(0x7f0000001500)=@raw=[@exit, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @ldst={0x2, 0x1, 0x4, 0x9, 0x1, 0xffffffffffffffff}, @ldst={0x2, 0x0, 0x4, 0x3, 0xe, 0xfffffffffffffff4}, @generic={0x1, 0x8, 0x3, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x9}], &(0x7f00000015c0)='syzkaller\x00', 0x5, 0xc6, &(0x7f0000001600)=""/198, 0x40f00, 0x51, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000001700)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001740)={0x3, 0x3, 0x1, 0xdc}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001780)=[r4], 0x0, 0x10, 0xffff}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001880)=@bloom_filter={0x1e, 0x8, 0x8212, 0xfffffc01, 0x88, r12, 0x4, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x7}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000001ac0)={r15, &(0x7f0000001900)="54f7e2343a88e26a2fe83c2db390ed366f33852f683145588c5a6c47a1fc93cb22ee6fca161ac0fb43d5ba2b4c340ed1b1d98e5047cbf01bd47d32be9f6c1c1575ef9969f61ceace01449ec9e1645153a7eafa43182928f2491bad76b0a0fe72d61d4bf2d7e6280ba339ee0c136ad2624ffc5872b3a9b871512d58d93add6287eeeab19916f0da7670e8a7b3ce2102c0c806dc81b13439", &(0x7f00000019c0)=""/205}, 0x20) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@base={0x1a, 0x8001, 0x0, 0x4, 0x940, r15, 0x1800, '\x00', r2, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r16, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)=r14}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001e40)={0x3, 0x7, &(0x7f0000001c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x7ff}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r17}}]}, &(0x7f0000001c80)='GPL\x00', 0xfff, 0x47, &(0x7f0000001cc0)=""/71, 0x100, 0x25, '\x00', r2, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000001d40)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001d80)=[r5, r1], &(0x7f0000001dc0)=[{0x2, 0x4, 0xf, 0xc}, {0x3, 0x5, 0x7, 0x4}, {0x4, 0x5, 0xd, 0x2}, {0x5, 0x4, 0x6, 0x3}, {0x1, 0x3, 0xb, 0xc}], 0x10, 0xbe}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000001f00)={0x2, 0x0, [0x0, 0x0]}) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r18, &(0x7f0000002000)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x20, 0x1, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x24044081) 4m4.294536376s ago: executing program 1 (id=64): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161) (async) sendmsg$kcm(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x20000800) (async) close(r2) (async) r3 = socket$kcm(0x22, 0x2, 0x21) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000240)={0xffffffffffffffff, r1}) (async) socket$kcm(0x29, 0x5, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m4.292934943s ago: executing program 3 (id=65): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x18, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b6020000000a000065000500000000021801000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b70300000500000015000000060000003c93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m3.52564059s ago: executing program 3 (id=72): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m2.704905561s ago: executing program 32 (id=72): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013"], 0x60}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m2.6891541s ago: executing program 1 (id=75): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000a80)='contention_end\x00', r0, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce19b8b2995285", 0x1c}], 0x1}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c114002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4m2.172243011s ago: executing program 33 (id=75): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000a80)='contention_end\x00', r0, 0x0, 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{}, {}, {0x0, 0x4, 0x10009, 0x5}], 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce19b8b2995285", 0x1c}], 0x1}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c114002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5.302059018s ago: executing program 4 (id=1621): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r3, 0x25, 0x2, @void}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x14, &(0x7f0000000000)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x70cc}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x8}], &(0x7f00000000c0)='GPL\x00', 0x985, 0x1000, &(0x7f0000000d00)=""/4096, 0x40f00, 0x10, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000140)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x6, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x1, r1], &(0x7f0000000200)=[{0x3, 0x5, 0xd}, {0x4, 0x2, 0x0, 0x4}, {0x3, 0x2, 0x3, 0xb}, {0x5, 0x1, 0x4, 0x3}, {0x2, 0x5, 0xf}], 0x10, 0xa}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xb10195c1a665a609}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000000c060500000000000000007a320000000005000100070000000500010007000000"], 0x30}}, 0x4000080) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000a40)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000090) 4.905118432s ago: executing program 4 (id=1629): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20) socket$qrtr(0x2a, 0x2, 0x0) 4.211445265s ago: executing program 5 (id=1632): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006620000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd7000000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, &(0x7f0000000000)=r6, 0x4) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r6}, 0x8) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) getpid() 3.81460626s ago: executing program 4 (id=1633): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1c0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000950007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.578016442s ago: executing program 5 (id=1637): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x8, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xfef3, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000025c0)="d8000000240081064e81f882db44b9040a02080006000f00e8fe0ba1f1ffffff0200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a94c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970179b1b36165fb55c82148d29e", 0xd8}, {&(0x7f00000002c0)="eb69413958cfcfb2d4130fdd25722e778474f04e5c1efdae276526549122543f16274f7ef5e6ed04af2cc36fc17f11bd1b0968d5b08794ff3329b9703449ab2c693cb2ee481025a20650d433427da93d6b0c81ee270e7d17d5d57ba632e39da4834dc276bcca212e71667ce75fddbbd9c6ade27a8fb98a9a77cd553aad21c91ce45d0aed42602ec484aef2c229d4ebc9de83eecc4cf3a62638966f3bd3789d58803c2ef4446af9dc0724967c", 0xac}], 0x2}, 0x800) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x1e}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r6 = gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_procfs$namespace(r6, &(0x7f0000000180)='ns/net\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x400}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000000000fdffffff0b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000f3ffffff00"/28], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000000)}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 3.466543199s ago: executing program 4 (id=1640): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x10200, @loopback, 0x7}, 0x1c, 0x0}, 0x2004810) 3.003008398s ago: executing program 4 (id=1643): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb141fb220cf", 0x14}], 0x1}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 2.438469963s ago: executing program 2 (id=1645): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.282412647s ago: executing program 5 (id=1647): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000940), 0x3}, 0x104502, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000640)={&(0x7f00000002c0)=@xdp, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f0000000440)=""/9, 0x9}, {&(0x7f0000000480)=""/187, 0xbb}], 0x3, &(0x7f0000000580)=""/158, 0x9e}, 0x2100) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0xffffffffffffffdb, 0xed, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0xd4a80c3a6e110fee, 0x8, 0x8000000, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0xa5f}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6eff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b00, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80002, 0xffff, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000c0000000400000001000084fdf7ffff0a0000094890a9a1ebcd2a00060000000000000e05000000010000e1096000302e615f5f61e40000"], 0x0, 0x4c}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r2, &(0x7f0000000bc0)={&(0x7f0000000680)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000700)="700b5e47b7faf35f70eb12152e4caa893b1b40bbef44ef68d2b64772e4cba6b5461cf34d3f70fe8e6cb632ae6c1f615a9e8a3335a723914aa5cc26395b12b254f18de4d3c944633204e57640ad2830465f2750c2f4a52c1cad59e5e5398b84411689", 0x62}, {&(0x7f0000000800)="f998a86bdb2f9b7443530128895b732c9fff70fe0f3e66885802e108224df736f3c7fcae9c774c38e426f2f33f6cbd6f417e0c2177eeeef4ce5296c0e084a44f1512bc388e00a89e477d5d632b9e0184f1c08fbe601a7058c10cba018446c3b4933909433d80ddc6df766100881f18eec8ee6b951b4192201f0c3a6a065d59797a4a947d093d842d3c4feab8e2efbfc2289cb1c9060b68cc81f0d4a4ef48a5ddcff0d67f28fb9592a066df05f0899ed2b845411b4feeca53437ba143cde8ddb88d29f7d59bb5360688df9b213985b97cdebfd6e362b57e79ec96cb3d665d38050b13b4b643f55545ff2c97c7d5b908821ad1643698", 0xf5}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x258}, 0xc054) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0xc2200, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc0000001900f3fe2abd700001000000ff010000000000000000000000000001ac1e000100000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000000000000000000003000000b86b6e0000000003000000004400080042"], 0xfc}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 2.281501323s ago: executing program 0 (id=1648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xd4}}, 0x0) 2.262374788s ago: executing program 4 (id=1649): socket$netlink(0x10, 0x3, 0x10) r0 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc", 0x13}], 0x1}, 0x40810) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004800913a745c7388641f9c0e0a"], 0xfe33) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r0}) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000dc0)=""/243, 0xf3}], 0x1, &(0x7f0000000380)=""/2, 0x2}, 0x20) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0xfffffdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x104084}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x4, 0x80, 0xa, 0x3, 0xdb, 0x5, 0x0, 0x6619, 0x8000, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp, 0x200, 0x0, 0x800, 0x7, 0x800, 0x7, 0x800, 0x0, 0x0, 0x0, 0x5}) perf_event_open(0x0, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x10, 0x1409, 0xe01, 0x70bd27, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x8c2) r4 = getpid() syz_open_procfs$namespace(r4, &(0x7f0000000440)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000005000000000000000100000081110800000000009500000000004a4f"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f00000000c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000680)="850f6cd6f0f4bb1dcacc3ce563f043a83bb7e815e9320651fc3d6dc1ecf376ec5f46517fe453e7b6de9e1340d388ca8180606c7bc1aaf8c96e564dc067c33245fe90d982517742b91cf7", 0xab}, {&(0x7f0000000280)}, {&(0x7f0000000340)}, {&(0x7f00000003c0)="f07267cd4349ae5d575ff4f9df6c35042ae231c40cce61d254c75d4f8115aed538ab137f84b19aa11364d457aac76d012a36ba738fe421360892497dbb510e105ccd5502613c033389f056a41e3b5db23a1cfb5487ea857c20e0c45977", 0x5d}, {&(0x7f0000000600)="2f8e0a03902f0cef365774f57a12d306746231770f774da8f486ebf94efcad61c3b42d9849705b88efd86d9fbc69b48f55b1775c7412502d806b8fc4e86f8279acf4c0", 0x43}, {&(0x7f00000004c0)="747d612055f5380cbc538ecbbdfeaea1382830ba5a517ffd69fecc7431e93d3d1893db8f62d9e4ac3644381ba91f5a940814450fc07b899b6331d147297d293e078f2d6932ee3f421374575c51a799319352bcab84d0510766633273f221115c4d25d3858d64b96ad600eb892c70ed486fff283b668a0d3ce95bebf32cb6d479a451c710", 0x84}], 0x6, &(0x7f0000000780)=ANY=[@ANYBLOB="d0000000000000002d01000008000000c5fa6bfbc5db26f3a5756d61f9e5616dd6f36399e051024bccee38a7f40b862b132650ab6f82869a83c4505ed0df4b2d7e8193a36dcda7a229bea753b92c8ffb11507a67fcd5d3a00af85098ea0de5f065b1ee40350804c4c57de8585baadb46bd8cbc0eb9101e7798382c26d2729e8e42345b0bfc43bbb785f68f3b83a54979798c2d709e0979552075eb9fa40b87699c4686ed2b4f01cb9006691b138ec5f423a9a2c2938e9555eddde0b36fa36c82ad410e7d05fdeac01670ea7fe9000000000000002000000000000001000009000000a280b7b8963fa98d5ca4135e340000000000"], 0xf0}, 0x20004000) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000740)=r6, 0x4) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) 2.042848355s ago: executing program 2 (id=1650): sendmsg$inet(0xffffffffffffffff, 0x0, 0x2004c818) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x81501, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xff, 0xfffffffffffffffc}, 0x1cc0, 0x4, 0x0, 0x8, 0xf786, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000100) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0x10b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x4}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x0, 0x10000000, 0x0, 0xfffffffe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x64}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r5 = getpid() r6 = perf_event_open(0x0, r5, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd0, &(0x7f0000000d00)=""/208, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, r3}, 0x94) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x4a, 0x11, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x4, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, r6, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="600000000001050500000000000000000a0000003c0002802c00018014000300fc01000000000000000000976200000114000400fc020000000000000b000000000000010c0002800c000100000000e6030001800800074000000059fbcb171104000680"], 0x60}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=ANY=[@ANYBLOB="c8000000000105050000000000000000b566efcfb70a000000440002802c00018014000300fe8000000000000000000000000000aa14000400ff02000000000000000000000000000114000180085e20b4d0dacd986b000200ffffffff3c0001800c00028005000100000000002c00018014000300ff02000000000000000000800000000114000400fc00000000000000000000000000000108000740000000002c00068014000500fe800000000000000000000000000031140004002001000000000000000000000000000158db62c84c90b95b65c66540dc7e6f55334ea0457be5bc1fcee354"], 0xc8}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ff7}, 0x15efa, 0x4, 0x4000098, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_generic(r9, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000940)={0x310, 0x16, 0x10, 0x70fd2c, 0x25dfdbfc, {0xc}, [@nested={0x17c, 0x14d, 0x0, 0x1, [@typed={0x66, 0xb9, 0x0, 0x0, @binary="27ae8c319c14a643664dbcf17e241c21647c3a9927ec839c6b614837205766a75dfe7df74787d35f9c117a4d161f22c5a43ddf9a75a5064727a9c4e29fc0a1712201f68fef5b13225c8d3f257ca95d6cb4fa3bfc0039d86004829301b4ca990992d0"}, @typed={0x8, 0x108, 0x0, 0x0, @pid=r10}, @nested={0x4, 0x90}, @nested={0x4, 0xbd}, @nested={0x4, 0x143}, @typed={0xf5, 0x123, 0x0, 0x0, @binary="2754127f0e139c08987b4168e87cff7dac5b11add5de4f12971ba4b672667cd228cbb050b43de4806f2c860a230fa5905f39f9844ee82c0b012717b658a7758ef970d9e9644e71654ee408a64b37db2d25bc888e433ca38bfd9e0a056a682c29d2860a06d4d97160ef09ffbf48e40d941c173b5346fbd6efc5577107f15bdeee9d43961e054cd05192bc7fa18c85780b56eb3a65257c15e91576fb824b0dc449dd312fd4985ab2ff98c24ea91a6323959dab03737d04e5071f7fbd9d49d8b57b8b280c98b2d7d0b5feee454d3f79cff3977b7113ca2faf3d0fbe8e152ada68974c878f0d0e80d414ab9f2a74508acfaff2"}, @nested={0x4, 0x88}]}, @nested={0x10, 0x3e, 0x0, 0x1, [@typed={0x8, 0xaa, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x134}]}, @generic="a52b35c0db9675db2b5dc7ea975e79442c335b8016d670af47783c003333bd872090aa69aa823b240dc98d14a5db37408f43694155bd7d5337bc726b6e3e1951bb88a11c7e1e913a253c8e5bc2db9f3d5607b2a6fa65e3b99e9d12b411cd0d308d3d8ab130e370cb30cfdf61c6", @typed={0xe0, 0x3e, 0x0, 0x0, @binary="12850a2dc1fa4199697226886a5b3773f8e34a4eff24815e41763cc18f290e745011348e454b1f16982f4a7c72d0467ac0b524f26b8c505ee6e8a8b30332cf0042e93a2a03e6812303aa1df2e3d09b00c0c1f4056de9db81dfd641c8708b86590e0a2a23789e263389cc600e8b433c416019335c2450e20e7e7dc6e85342bab69cdebb6be452b1cc76404c783f821db414e40037bd11c4dc9161353592c0501dda621e90c766b6678ffd8779991e2d924fc169d34a5d81e3aeae75a22978be1e44bc880bf5fc21dbb4ecea551717340d90eb526029ded5bbec7a8639"}, @typed={0xc, 0x14f, 0x0, 0x0, @u64=0x6}, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x71, 0x0, 0x0, @u64=0x7}]}, 0x310}, 0x1, 0x0, 0x0, 0x8080}, 0x44004) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000fbff8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb7020000ee00000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000c50000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r12, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1.958100086s ago: executing program 0 (id=1651): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 1.750817764s ago: executing program 6 (id=1653): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x10200, @loopback, 0x7}, 0x1c, 0x0}, 0x2004810) 1.750139359s ago: executing program 0 (id=1654): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x49, 0x4000000000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x170}}, 0x8008) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) socket$inet6(0xa, 0x5, 0x81) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) close(0x3) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x46, &(0x7f00000002c0), 0x161) r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000001c0), 0x12) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000ff7f00000000000000000500000018010000786c6c2500000000002020207b1ad016114c0000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000060000009500"/96], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) r10 = openat$cgroup_freezer_state(r7, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r10, 0x0, 0x0) 1.667430737s ago: executing program 6 (id=1655): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x104502, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b00010074617267657400001c0002800a0001004e464c4f470000000800024000000002040003000900010073797a300000000014"], 0xcc}}, 0x0) (fail_nth: 10) 1.080264794s ago: executing program 2 (id=1656): r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040), 0x4) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000001280)=ANY=[@ANYBLOB="9feb0100180000000000000078000000780000000a0000000f00000003000093040000000f00004c97f41e98cd5a2a23c6b2a6f08ee600070000007f0000000d000000716af24b020000000200000006000000fffeffff0a00000001000084020000000e000000000000000000030000000002000000020000001000000005000000000000100c0000000b000000000000020000000000300000002e5f002e001104af9b5cb6383118c63358"], &(0x7f0000000e40)=""/149, 0x9a, 0x95, 0x1, 0x4}, 0x28) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) close(r6) r7 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x8, 0x8, 0x2}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1000006, r8}, 0x3f) sendmsg$inet(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)="91", 0x1}], 0x1}, 0x48800) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x4000002) write$cgroup_type(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xaf}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r5}, 0x94) sendmsg$kcm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)="c0a6317985f5182859416af1a6ce3d6525b4ce515153b8573278dd72455e9f5d3cf8834f3855896091472004", 0x2c}, {&(0x7f0000000540)="45c09ba96db5238059dfdbcf5b9ae3c9f647c5c58b28f5de91acf81e2e873a3722ea6e6faf478a534fb420b0af0c85e5f324b17b322be05e6126165de858c1c11c5efc8d544191014c27d0b500bc1c781dfa6d23d8fdc9c6cdf439c5d0bd14ca19d993f76e43b647638900283ae148553e1d998b0cf141359e8af51b1389", 0x7e}, {&(0x7f00000005c0)="d260610f5d8f2eda34e18e6b1400130a92a35c7ea0709e5e9d2d9eb9f6b94023169954aca9302cb92e4f9f1a287ded3d23d2540bf1ef24a4178161ca97bc1c23a7dca2a01a2c97a595d4b46932b3317ac69759806dc04b13aed644cd93e31a783f6e8a799391767efdde813cf30a612e1a4a55c90c564aea02b8222033756bb240847ed61d526238ad25407f3e61298b4c359347ef3b32e7796d76e336558dde44a9661dbbf51191281d9e6153d47b6bf8cfeca3f68fd9cd8dab7e0bd40beedb", 0xc0}, {&(0x7f0000000740)="dac4c065ca54b5bf10483dc470ffe14264e78551999e392f7abca1df3937e7e301468559cdd275ef9ae416baae322ffa6c4ab6aa137f9324141c8596", 0x3c}], 0x4, &(0x7f0000000940)=[{0xf8, 0x0, 0x3, "1c33442c4003628abacaf469f1b637a942f8eff2ad3424860266b2a029a4eb1ec549187aafdcced5494f6d549126021a03eac969af6f0e81f750bc18dcc2506d338bcffcf0eac6df4d7333b030b3aefbd779daeedea036bd55b3379c0cb9161e91d8c62b9d72fb3cb40a1085d3ab09412d9c5393ceca63fbfb1f6340e6bd8222e6e5c767cbb7271c0c99419428ab7cd4f291ab93a7abc291b8a5aeb1cfaebb3bd9f6814d857522ec13d41e6bd3930e452f9139a01fc6203df7aee70b456b1ec46973682bd33970752f4d21f61275b91340c682840ca84ef88867de31746e95c95d8697"}, {0xb8, 0x3a, 0x8a, "77d51b38a51ca1de42f69e065e333043319a0279bb2a103c5c2d12fdffe4faa17da4de50a329cd57a41bbc171b39a6b7f3c5ba16e960d00d2250c833a6daef74a9338f63f10ea64b128c91b2f755b961e4625928e6033b7b00c22cef460ef8d5dae2034ca15d51fa246f7c4e6792bf1fc3fbeb836c913a1fd72ef411d4caab730cd8d2fcdcc4f21fa56ce1c43fd572c531be1bda776622d554ea1fc47bc2478719de02"}, {0xe8, 0x119, 0x1, "69dd14ae87240b722a012b305204b95c88137c4f1ef46ec1bc10eeb67d89521b4a55cf024f90c053eb75902d944198e9c4678b5239d425a9af52108dc79285ce1c52f5f7746a52cfbaa0ef3e34ba4f589eea51cb1feb65dbd0651a2e0108b63f226452f74b518631750844d4d2d06b940ab23b173c88dd30db67ea001d92dc52b4a40ae9bb694e4f846c313e296d55b65569217495a5f44dd043d153a7a995061bc98a58bfee3d9521091295c836a4328b7ace7e6af8d2bdf034872f9c9bfa8bff34dbf20d27308ca5bfdcb4ef63e53f1ec96862bceade"}, {0x88, 0x110, 0x6, "b5ca3856f04dabb893c869f4da355565d88dc81c88858ae675a3cca5a638a03d13b5baa5adfff9580a4da5b57c53708a18d8eb286212e91361bf81e389a0c6169e320d27e41f0c33b74ca2c18e0f26c65396fd9fa3248e1d4e708b4cf8827ea646897138003cf160d66f1c270926ae799826e88820fef97a"}, {0xd8, 0xff, 0xf, "a138ea51f3512d021f7489d331aa818985f1a6f896463b83b9dcb1ff2976a48aa4b4b16a4bdc1a4e3e89eec76eb84bb03dee5bf7d364b9a6089eca24ea337ffa2ccdf24a434fc778beaf5bf7bf405f74f8935a36ff4c0933cf95d862ceab6880e4b4fdcd2c91b441999adf85a0b180d15eca595afc64f870067e1fe6d5bd2e1cd2d33e01add911e970876e2aed5efdc8b9e25b5203a554faa6d28a0fc6bdef21446e88c5617566f994ed469913ed98bef14f5c4a522fbd2203e3e52faadbd3d6ac"}, {0x20, 0x3a, 0x437e, "df23c0e3fe535cb98386cd"}, {0xb8, 0x117, 0xa, "5bab117344c62e606874416f7f5fb918b8bf66e0908b8d47ae0c939329fba6ad84ac9d3ff43283a9451f3062f4fa3faacfb6543abedea233fa124ad9dd1b89c3da7d1ba3a0188b7cb079af4d64047ad9a3acd40da541bd652db6020da8fbe7119974f5603cb576b5526a5f089e57647151d02ffed2c049b78cb0fb2a08627bd31eda9e649f8a9de5e7f15d148f64b82dae471eec4e84908a6dea1fad4fc58c3b8d65c6"}], 0x4d0}, 0x4004814) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001240)={&(0x7f0000000f00), 0xc, &(0x7f0000001140)={&(0x7f0000000f40)={0x1dc, 0x12, 0x4, 0x70bd25, 0x25dfdbfc, {0x21, 0x2, 0xc, 0x0, {0x4e22, 0x4e20, [0x6, 0x9, 0x80], [0x8, 0x5, 0x9, 0x3], 0x0, [0x3, 0x7]}, 0xbf6}, [@INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "2bab138d98cbb94cb8c189eacfe7c02146446178480b71f520350067532c56678c640e158516b282e0def72ed3b23d94bbd446ea4020bfa6569745993c7848c7ab0397743764dd8aec7fbdab628334727a5768ee45b1bc1fd90a13f9b5e48051fb774e712269923cb881768d34c4bad7f6414557730ff1a3873f5bcf59236ba83d3d9bb91905c4b64089c200d7cf496ba2bf02d910973923202c5587b9fd49f197ea5835189adff706da0e642c0e853ee273b13121be9a3a8a3675b11db5b2bd5ef8b10f0b9c259009e2ee87168aa656d0c349c93fa3fe6be7ace316f387bcadfddda5c0cb3fd4957659edac22d88c89131a"}, @INET_DIAG_REQ_BYTECODE={0x8, 0x1, "f84e1d87"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "d611a23f6b9ec3649802a659941fce5f6839e239aa5750bac1deaa18eaa4d3f89cdd604e21e530e8c0aec621616a3ef80d728ef427d1ff8768b15664c08af81167aa7c"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "8c7ba8d60e42ad160d150a021463e3ab4ac07257340dc43f0bebf96272c088458690b59054d483b5b61710b7473840a7a41d2a409aeb5dd821f8e90394eee1d20561cc94"}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x240000d0}, 0x404e811) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0xe01, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) sendmsg$NFT_MSG_GETRULE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x10000, 0x3c, &(0x7f0000000100)=""/60, 0x41100, 0x44, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0x0, 0x9, 0xa}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r3], &(0x7f00000002c0)=[{0x5, 0x2, 0x9, 0xc}, {0x5, 0x3, 0xf, 0x1}, {0x1, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x10, 0xa}, {0x3, 0x4, 0x6, 0x3}, {0x0, 0x3, 0x4, 0xc}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071114c00000000008510000002000000850000008b00000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.00674966s ago: executing program 0 (id=1657): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x302, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$inet(r3, &(0x7f0000000840)={&(0x7f0000000140)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="444a78b697b911e3e12b7a55c81fbcc5ad2f669e41f4847a3ce2a0c499d9ed983ba4f684ca5e91031da95f55f5eae759303927918ddbd947025ad3e1f2e08427fb93ded679c6c681198c7f2b0b30fe2ae93963a250cfac38a4d90e3f1c", 0x5d}, {&(0x7f00000002c0)="bb63a581ae517edf69a9b9ffc794e21ebf3b8abaa034d3a365b23a857565dd9b031c1c5a722b9800f679b60f5c36a9336ac0b398b644589d59e599", 0x3b}, {&(0x7f0000000300)="7e154124247ccbb6ee4d42d7c65510fab0d798e611699b20c94650b9609f38f93456620ff1ede4e5d98b9901f4c9e7ce480e1a37865b", 0x36}, {&(0x7f0000000340)="c9a8c4c2e3148a134e6ff9e182d61168afdd84297ad6a2a039664cf33fdbd6ef13d6c1a2a52f892263c36f3c2bd85110733396f6f0584f3d7e4846d94882ec11313a2b9ce8fce34abdeba97a8b7e9b500160df80acf8c3d1c6bb37bcf2d885676e4f870869a3d95f271861087be9c06cb159e33cca0e294bcff61a059d0bf59716556263c538e949b1fbd9c741df3e2d07c1d14279c697f215407812fc21d3672ace59f787414f63e170111dcd0c4d", 0xaf}, {&(0x7f0000000400)="faf48af9de5c0aa5faeeb1656f84180a32d88b29f30657145d663abb5190240d42d269eb44828adc622d6431c4939388ec7e23ba7d50e4d7a29c3238fcd10c9cd4d6187943f01919b4dc824e419a3f22b535963fe4059cc5d8470d4e040f3cf03d053cfd3f609cfc16961e401295125e853ffd4252c18dd0b8e036d1dcd55a3c3bafb7ff84baf55948590588d6f10f93bfa4d2650b", 0x95}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f00000005c0)="cf56e0e00fa1edb30c5dcb77e4843de88a197b281e256b8cc1a8cf56964da675d90808d08ea971a7cf2611f984d9576bfec6d45a5cbf6f9c2919baef8dd1d3f7fe82704c2b96bf209fffd43c8ffa9763332de09109e57b355f26be6a949871f5bd713d2c9eb8d1a9133d231083fccf748341b33d13134005874d41ad96e9995a65f178ca47d5028eca720b82580a3eaeaae77852bb73b945f355d259d9477b5b8673383d4238806fb0dc875cbc833ada8e7d444f35163098bfdab285c2eb11f5c9", 0xc1}], 0x9, &(0x7f0000000780)=[@ip_retopts={{0xa0, 0x0, 0x7, {[@end, @end, @rr={0x7, 0x23, 0x49, [@remote, @private=0xa010102, @local, @multicast2, @empty, @remote, @remote, @private=0xa010101]}, @timestamp_prespec={0x44, 0x44, 0x1a, 0x3, 0x6, [{@loopback, 0x7}, {@multicast1, 0xffff7fff}, {@local, 0x8000}, {@multicast1, 0xef5}, {@broadcast, 0x101}, {@rand_addr=0x64010102, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x26e}, {@private=0xa010100, 0x3}]}, @noop, @cipso={0x86, 0x24, 0x2, [{0x5, 0x10, "671b6242a2e14cf1cc193bfb5745"}, {0x1, 0xe, "e0397c24ba052e86a967277f"}]}]}}}], 0xa0}, 0x4008010) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x20a1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x0, 0xff}, 0x4104, 0x7fffffff, 0x80000002, 0x2, 0x0, 0xffff0000, 0x80, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 989.276111ms ago: executing program 6 (id=1658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x2, 0x7fe2, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000029006bcd9e3fe3dc4e48aa31086b8703290000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 903.427417ms ago: executing program 2 (id=1659): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="1400000024000b47564cb6288200eb141fb220cf", 0x14}], 0x1}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) 782.870612ms ago: executing program 5 (id=1660): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"/1426], &(0x7f0000000340)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 737.138898ms ago: executing program 6 (id=1661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/23], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f088481fff310000002b0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 682.917603ms ago: executing program 0 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000900)=ANY=[@ANYRES32=r0, @ANYBLOB="4790e1cabe19ebb1a8fcb9afc630c1d2a524b8645513ffe79b82f327e4dc92fa11eb6fb0e9826a5f45fd6b9c3803bcad49222362a9", @ANYRESDEC=r0, @ANYRES16=r0], &(0x7f00000008c0)='syzkaller\x00', 0x3, 0x87, &(0x7f0000000480)=""/135}, 0xad) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x1, 0x0, 0x0, 0x13, 0x0, 0x4}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0xfffffedf}, 0x10) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r6, 0x4) close(r3) 570.783978ms ago: executing program 2 (id=1663): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0xa, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) (async) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bc113680ddc4e48aa31086b8703300000001f00030000000000040014000d0029000d0003009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 570.507229ms ago: executing program 5 (id=1664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) 459.947117ms ago: executing program 6 (id=1665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100"/69], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000300)={&(0x7f0000000000)={0xa, 0x4e23, 0x10200, @loopback, 0x7}, 0x1c, 0x0}, 0x2004810) 270.597419ms ago: executing program 5 (id=1666): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x18, 0x1411, 0x309, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}]}, 0x18}, 0x1, 0x0, 0x0, 0x40004}, 0x4040000) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000700)='./file0\x00', 0x0, 0x38}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="39379bcfd9ec9a49bfe32aad1b486a952cb3a8c8686af5da6f924e28e6fb50bd9d6154746391d5258cf274f74228fc454971df94dbe698a57949b0c36e162abb732ab32f149de8760630f827e087c8568fcad4"], 0x0, 0x56}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4010, r1}, 0x18) (async, rerun: 32) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000040000000000000000000000ba0d4e0a47f93860784498a54eb04cf15dfd0652c0f52893db62b2186c31f88d0d18e6732466952ac8f5321da7de62653805da26a07e92d17d995b6a4787d8f657a85733e430e5c33a0e7d889f0fdb40145542413fa4a127ed03186571e76cc1839e6848f8ab8de162a8b29b180ec9d9dfbe1a101789cc5690b70c3fc0f83e7a3e86d354638c6768f7588ceb42732ed8376bda5392c71f6b8009d9409bd1a405d81ebeb6e6700251bd96f78465a2ac18ba66c76388c103e778f2333818f3a527863db08128a8963e14a762bea86946", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x922000000001, 0x106) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000044000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85823d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2ba9c29faa38c409d32b6b7d6cf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e933119c5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247fa62fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120bed64069dcf82d3e5e0361e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a1000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0daca8d4c1090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c607ef50a991c410f7c60e45b5c193f813a36d841165b91b5e170f6ba24558df57145eb8142a6ed87c6d5cbae3e52d569996604669a6e9ca1a3689c795970b4bcd00881faff52a6766fafa07ed7d4a49f47d34fd76a394adcb33a270b6a14e74bca7c2ea92dd845d3f774fde1bbea911c1ea76d52f7912e2597e6a33380647ed44956730b5b84662b8e659124379c0d86b1d28fdfa3cd2013103e3048c4ad4f5a4dcd133b2fc8fae3b51e4433cee7c08e67c7d7ed4432045e10f8718e5c163b1704fa2c707b61a1a9f63edfceff1a0cd7baf4a15b2fd607a09d398d73243bdcc664fbd5f582e48af2a18b02f0184a7bdd95ac78241e6749e74b152702333c56588375f806f10578eaae329c4f8dfb83e5524e2c9aa59ce7828bd1f146b2a4150fb2a8ced08e2ffac81e921e8a6f0071361a0acdbd125fb5f5e9ffe98e38508582a496afd30ca460dbfca77915a18b7b9ef6c1d6e13bc12fe43063cfecfafb05bf2339ad61533fbf3e410b403182742fa2d40c402cb83c2fef46a36f17c1abf97b0e2d114bd1472ab4207aa060f9e5d91c4a4911b1a1df47b858be141ab3386f26f561df35678489dc1b9f10eee1b2ab3dfdaedd7e06ff8a127f1743fcb32d7f80d40aebc1ea72edc348f5f9ba4bace97db948c24c679c74cd4336a7233d836082bb0e8b013bd1ee3612cd43cd2a3cb83754bb3408"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000280)="6341ed8e46dc3f0adf0600f7b986", 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0xb}, 0x0, 0x0, 0x2, 0x4, 0x3fe, 0x7fffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) close(0xffffffffffffffff) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 90.813255ms ago: executing program 2 (id=1667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000000)={'veth1_macvtap\x00', @remote}) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_clone(0x603e0180, 0x0, 0x0, 0x0, 0x0, 0x0) 65.629125ms ago: executing program 6 (id=1668): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, 0x0, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[], 0xfdef) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xd, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00002e0f0000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000072", @ANYBLOB, @ANYRES8=0x0, @ANYRES64=0x0], &(0x7f0000000200)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x1d, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0xffffffed}], 0x1, 0x0, 0x3298}, 0x0) close(r6) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0), 0x4) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0x7e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x5e, '\x00', r8}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000089dba000020701080000000000000000010000aecb4ed63ea2f61503fb328e9e1f3c1d30cd2301c2432606a3348e8886c8a35e5df425c1000000000000000000000000635cb0"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x884) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xd, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x4, 0xa, 0x12, 0x2, 0x1}]}, &(0x7f00000007c0)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000940)=""/183, 0x40f00, 0x28, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0xa, 0x7, 0xc049}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[r1, r4], &(0x7f0000000ac0)=[{0x4, 0x2, 0x1, 0x5}, {0x1, 0x10004, 0x10, 0x7}, {0x5, 0x5, 0x9, 0x6}, {0x5, 0x2, 0x7, 0x1}, {0x0, 0x4, 0x800, 0x5}], 0x10, 0x6}, 0x94) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0x6, 0x9, 0x4, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000c00)={r9, r10}) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xfff}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=1669): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x104502, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b00010074617267657400001c0002800a0001004e464c4f470000000800024000000002040003000900010073797a300000000014"], 0xcc}}, 0x0) (fail_nth: 11) kernel console output (not intermixed with test programs): interface [ 127.998813][ T2968] bond0 (unregistering): Released all slaves [ 128.023164][ T6569] netlink: 'syz.2.144': attribute type 11 has an invalid length. [ 128.036729][ T6569] netlink: 'syz.2.144': attribute type 8 has an invalid length. [ 128.044907][ T6569] netlink: 'syz.2.144': attribute type 6 has an invalid length. [ 128.056494][ T6569] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.144'. [ 128.078392][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.357418][ T6254] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 128.598480][ T6254] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.621894][ T6254] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.745700][ T6254] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.811667][ T6583] sit0: entered allmulticast mode [ 129.671465][ T2968] hsr_slave_0: left promiscuous mode [ 129.755346][ T2968] hsr_slave_1: left promiscuous mode [ 129.822737][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.868016][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.184904][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.218029][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.264235][ T2968] veth1_macvtap: left promiscuous mode [ 130.271060][ T2968] veth0_macvtap: left promiscuous mode [ 130.285292][ T2968] veth1_vlan: left promiscuous mode [ 130.290815][ T2968] veth0_vlan: left promiscuous mode [ 130.360213][ T6618] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 130.833365][ T2968] team0 (unregistering): Port device team_slave_1 removed [ 130.866670][ T2968] team0 (unregistering): Port device team_slave_0 removed [ 131.198158][ T6616] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 131.349836][ T6243] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 131.440986][ T6243] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 131.489879][ T6243] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 131.563668][ T6243] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 131.569163][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 131.922037][ T6254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.196755][ T6650] !€ÿ: renamed from bond_slave_0 (while UP) [ 132.292706][ T6651] netlink: 'syz.2.159': attribute type 10 has an invalid length. [ 132.327575][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.2.159'. [ 132.670534][ T6254] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.795519][ T6651] bridge0: port 3(ipvlan1) entered blocking state [ 132.823095][ T6651] bridge0: port 3(ipvlan1) entered disabled state [ 132.834923][ T6651] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 132.879177][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.886490][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.934101][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.940065][ T6243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.940880][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.055302][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.062551][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.183964][ T6243] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.301380][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.308863][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.617091][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.624710][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.360276][ T6243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 134.557403][ T6687] wg0 speed is unknown, defaulting to 1000 [ 134.591475][ T6687] wg0 speed is unknown, defaulting to 1000 [ 134.599772][ T6687] wg0 speed is unknown, defaulting to 1000 [ 134.733479][ T6687] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.818299][ T6254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.857479][ T6687] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 135.129408][ T6687] wg0 speed is unknown, defaulting to 1000 [ 135.214801][ T6687] wg0 speed is unknown, defaulting to 1000 [ 135.296805][ T6687] wg0 speed is unknown, defaulting to 1000 [ 135.343547][ T6687] wg0 speed is unknown, defaulting to 1000 [ 135.364202][ T6687] wg0 speed is unknown, defaulting to 1000 [ 135.385468][ T6712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 135.424588][ T6243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.155311][ T6745] netlink: 14 bytes leftover after parsing attributes in process `syz.4.173'. [ 136.186885][ T6254] veth0_vlan: entered promiscuous mode [ 136.250904][ T6254] veth1_vlan: entered promiscuous mode [ 136.318731][ T6745] hsr_slave_0: left promiscuous mode [ 136.446587][ T6753] sctp: [Deprecated]: syz.0.175 (pid 6753) Use of int in maxseg socket option. [ 136.446587][ T6753] Use struct sctp_assoc_value instead [ 136.748005][ T6745] hsr_slave_1: left promiscuous mode [ 136.973692][ T6760] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.177'. [ 137.036106][ T6254] veth0_macvtap: entered promiscuous mode [ 137.066140][ T6243] veth0_vlan: entered promiscuous mode [ 137.125442][ T6243] veth1_vlan: entered promiscuous mode [ 137.161160][ T6254] veth1_macvtap: entered promiscuous mode [ 137.314761][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.347029][ T6254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.380500][ T6243] veth0_macvtap: entered promiscuous mode [ 137.414615][ T6772] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.180'. [ 137.437630][ T6243] veth1_macvtap: entered promiscuous mode [ 137.532082][ T3026] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.549765][ T3026] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.568152][ T3026] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.656165][ T3026] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.741444][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.823345][ T6243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.187953][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.234030][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.251921][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.260871][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.269141][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.280724][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.702905][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.731332][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.803303][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.831532][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.040622][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.082084][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.405023][ T6814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.188'. [ 140.129553][ T6825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.190'. [ 140.657234][ T6825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.925943][ T6802] wg0 speed is unknown, defaulting to 1000 [ 141.985906][ T6852] syzkaller0: entered promiscuous mode [ 142.002187][ T6852] syzkaller0: entered allmulticast mode [ 142.905360][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.6.201'. [ 142.950746][ T6886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.201'. [ 144.406730][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.5.206'. [ 144.466619][ T6904] openvswitch: netlink: Key type 784 is out of range max 32 [ 144.484246][ T6902] netlink: 180 bytes leftover after parsing attributes in process `syz.5.206'. [ 144.837096][ T6916] netlink: 132 bytes leftover after parsing attributes in process `syz.5.211'. [ 144.989888][ T6922] FAULT_INJECTION: forcing a failure. [ 144.989888][ T6922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 145.057083][ T6922] CPU: 1 UID: 0 PID: 6922 Comm: syz.5.211 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 145.057116][ T6922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 145.057136][ T6922] Call Trace: [ 145.057145][ T6922] [ 145.057155][ T6922] dump_stack_lvl+0x189/0x250 [ 145.057190][ T6922] ? irqentry_exit+0x74/0x90 [ 145.057221][ T6922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.057266][ T6922] should_fail_ex+0x414/0x560 [ 145.057300][ T6922] _copy_from_user+0x2d/0xb0 [ 145.057325][ T6922] ___sys_sendmsg+0x158/0x2a0 [ 145.057350][ T6922] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.057410][ T6922] ? __fget_files+0x2a/0x420 [ 145.057428][ T6922] ? __fget_files+0x3a0/0x420 [ 145.057458][ T6922] __x64_sys_sendmsg+0x19b/0x260 [ 145.057477][ T6922] ? clockevents_program_event+0x24d/0x360 [ 145.057509][ T6922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.057550][ T6922] ? do_syscall_64+0xbe/0x3b0 [ 145.057584][ T6922] do_syscall_64+0xfa/0x3b0 [ 145.057615][ T6922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.057635][ T6922] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 145.057656][ T6922] ? clear_bhb_loop+0x60/0xb0 [ 145.057681][ T6922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.057702][ T6922] RIP: 0033:0x7f258218ebe9 [ 145.057724][ T6922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.057742][ T6922] RSP: 002b:00007f2582f76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.057768][ T6922] RAX: ffffffffffffffda RBX: 00007f25823b6090 RCX: 00007f258218ebe9 [ 145.057783][ T6922] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000007 [ 145.057796][ T6922] RBP: 00007f2582f76090 R08: 0000000000000000 R09: 0000000000000000 [ 145.057808][ T6922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.057820][ T6922] R13: 00007f25823b6128 R14: 00007f25823b6090 R15: 00007ffc158ce648 [ 145.057852][ T6922] [ 146.055844][ T6947] lo speed is unknown, defaulting to 1000 [ 146.259836][ T6947] lo speed is unknown, defaulting to 1000 [ 146.519712][ T6947] lo speed is unknown, defaulting to 1000 [ 146.818823][ T6947] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 147.046064][ T6947] lo speed is unknown, defaulting to 1000 [ 147.069232][ T6947] lo speed is unknown, defaulting to 1000 [ 147.089797][ T6983] netlink: 'syz.5.224': attribute type 39 has an invalid length. [ 147.271075][ T6992] netlink: 17 bytes leftover after parsing attributes in process `syz.4.227'. [ 147.285400][ T6992] netlink: zone id is out of range [ 147.295068][ T6992] netlink: zone id is out of range [ 147.304770][ T6983] veth0_macvtap: left promiscuous mode [ 147.316598][ T6992] netlink: zone id is out of range [ 147.335802][ T6992] netlink: zone id is out of range [ 147.341076][ T6992] netlink: zone id is out of range [ 147.366694][ T6992] netlink: zone id is out of range [ 147.382412][ T6992] netlink: zone id is out of range [ 147.388071][ T6992] netlink: zone id is out of range [ 147.410536][ T6947] lo speed is unknown, defaulting to 1000 [ 147.417430][ T6992] netlink: zone id is out of range [ 147.423412][ T6947] lo speed is unknown, defaulting to 1000 [ 147.432883][ T6992] netlink: zone id is out of range [ 147.436563][ T6947] lo speed is unknown, defaulting to 1000 [ 147.450373][ T6947] lo speed is unknown, defaulting to 1000 [ 147.717503][ T7000] netlink: 24032 bytes leftover after parsing attributes in process `syz.6.229'. [ 147.750668][ T7000] netlink: 104088 bytes leftover after parsing attributes in process `syz.6.229'. [ 147.804511][ T7000] netlink: 24032 bytes leftover after parsing attributes in process `syz.6.229'. [ 150.634559][ T7089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.242'. [ 150.962613][ T7101] netlink: 9275 bytes leftover after parsing attributes in process `syz.6.246'. [ 151.065050][ T7098] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.245'. [ 151.169424][ T30] audit: type=1107 audit(1755733636.299:2): pid=7107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='œB—MTqZú:' [ 151.294809][ T7103] veth1_to_bond: entered allmulticast mode [ 151.388751][ T7114] netlink: 132 bytes leftover after parsing attributes in process `syz.2.248'. [ 151.453534][ T7112] netlink: 124 bytes leftover after parsing attributes in process `syz.5.250'. [ 151.988775][ T7129] netlink: 12 bytes leftover after parsing attributes in process `syz.5.256'. [ 152.047567][ T7135] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.256'. [ 152.144159][ T7136] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 152.546049][ T7144] veth1_macvtap: left promiscuous mode [ 152.632905][ T7144] macsec0: entered promiscuous mode [ 153.195451][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.5.260'. [ 153.198264][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.336427][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.361905][ T7152] netlink: 16 bytes leftover after parsing attributes in process `syz.5.260'. [ 153.446097][ T7140] IPv6: NLM_F_REPLACE set, but no existing node found! [ 153.467989][ T7153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.482547][ T7133] net_ratelimit: 74 callbacks suppressed [ 153.482565][ T7133] netlink: set zone limit has 4 unknown bytes [ 153.531865][ T7153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.360375][ T7177] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.263'. [ 155.538861][ T7177] syz.6.263 (7177) used obsolete PPPIOCDETACH ioctl [ 156.570391][ T7199] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.582872][ T7199] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.902171][ T7199] bridge0: entered allmulticast mode [ 159.877170][ T7219] __nla_validate_parse: 3 callbacks suppressed [ 159.877190][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.6.271'. [ 159.959798][ T7219] netlink: 'syz.6.271': attribute type 10 has an invalid length. [ 160.150035][ T7219] team0: Device hsr_slave_0 failed to register rx_handler [ 160.414467][ T7226] netlink: 'syz.4.272': attribute type 10 has an invalid length. [ 160.459683][ T7226] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.467549][ T7226] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.565344][ T7226] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.572660][ T7226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.581067][ T7226] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.588353][ T7226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.697965][ T7226] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 161.286888][ T7250] netlink: 'syz.0.277': attribute type 1 has an invalid length. [ 161.300400][ T7261] netlink: 'syz.5.279': attribute type 1 has an invalid length. [ 161.331407][ T7250] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.277'. [ 162.377978][ T7276] netlink: 'syz.0.284': attribute type 29 has an invalid length. [ 162.426350][ T7276] netlink: 'syz.0.284': attribute type 29 has an invalid length. [ 162.480450][ T7276] netlink: 'syz.0.284': attribute type 29 has an invalid length. [ 162.498638][ T7276] netlink: 'syz.0.284': attribute type 29 has an invalid length. [ 162.867202][ T7292] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.287'. [ 162.907772][ T7290] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.287'. [ 162.984402][ T7272] lo speed is unknown, defaulting to 1000 [ 163.202806][ T7300] netlink: 12 bytes leftover after parsing attributes in process `syz.6.289'. [ 163.321612][ T7305] netlink: 'syz.4.291': attribute type 13 has an invalid length. [ 165.151343][ T7334] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.296'. [ 167.100449][ T7354] netlink: 14 bytes leftover after parsing attributes in process `syz.6.300'. [ 168.019900][ T7358] netlink: 60 bytes leftover after parsing attributes in process `syz.5.302'. [ 168.029860][ T7358] unsupported nlmsg_type 40 [ 169.731106][ T7372] netlink: 830 bytes leftover after parsing attributes in process `syz.5.305'. [ 170.278690][ T7375] netlink: 'syz.0.306': attribute type 11 has an invalid length. [ 170.311570][ T7375] netlink: 132 bytes leftover after parsing attributes in process `syz.0.306'. [ 171.156253][ T7400] netlink: 32 bytes leftover after parsing attributes in process `syz.2.311'. [ 171.211724][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.311'. [ 172.019526][ T7413] netlink: 'syz.4.312': attribute type 3 has an invalid length. [ 172.061938][ T7413] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.312'. [ 172.116184][ T7399] netlink: 164 bytes leftover after parsing attributes in process `syz.0.310'. [ 172.159976][ T7412] netlink: 'syz.2.313': attribute type 15 has an invalid length. [ 172.195228][ T7412] netlink: 'syz.2.313': attribute type 7 has an invalid length. [ 172.221971][ T7412] netlink: 52 bytes leftover after parsing attributes in process `syz.2.313'. [ 172.380738][ T7399] netlink: 164 bytes leftover after parsing attributes in process `syz.0.310'. [ 172.624271][ T7405] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.310'. [ 172.886988][ T7417] delete_channel: no stack [ 173.060824][ T5234] udevd[5234]: worker [5870] terminated by signal 33 (Unknown signal 33) [ 173.100034][ T5234] udevd[5234]: worker [5870] failed while handling '/devices/virtual/block/loop2' [ 173.264667][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 173.302576][ T7428] openvswitch: netlink: nsh attr 0 has unexpected len 86 expected 0 [ 173.310635][ T7428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.478064][ T7428] netlink: 20 bytes leftover after parsing attributes in process `syz.4.316'. [ 173.680317][ T7449] netlink: 'syz.5.324': attribute type 10 has an invalid length. [ 174.569208][ T7468] netlink: 'syz.2.330': attribute type 29 has an invalid length. [ 174.583169][ T7468] netlink: 'syz.2.330': attribute type 29 has an invalid length. [ 174.656904][ T7473] netlink: 'syz.5.332': attribute type 21 has an invalid length. [ 175.084470][ T7490] netlink: 'syz.2.337': attribute type 10 has an invalid length. [ 175.830921][ T7490] delete_channel: no stack [ 175.874541][ T7510] __nla_validate_parse: 5 callbacks suppressed [ 175.874565][ T7510] netlink: 26 bytes leftover after parsing attributes in process `syz.4.341'. [ 176.109206][ T7518] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 176.247928][ T7523] netlink: 76 bytes leftover after parsing attributes in process `syz.5.345'. [ 176.610748][ T7535] netlink: 'syz.2.350': attribute type 4 has an invalid length. [ 177.202906][ T7540] netlink: 44 bytes leftover after parsing attributes in process `syz.5.351'. [ 177.265285][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.351'. [ 177.286439][ T7545] netlink: 'syz.2.352': attribute type 33 has an invalid length. [ 177.316431][ T7545] netlink: 152 bytes leftover after parsing attributes in process `syz.2.352'. [ 177.328501][ T7546] netlink: 204 bytes leftover after parsing attributes in process `syz.5.351'. [ 177.355255][ T7545] mac80211_hwsim hwsim7 : renamed from wlan1 [ 177.379787][ T7537] netlink: 'syz.5.351': attribute type 21 has an invalid length. [ 177.465291][ T7540] netlink: 4 bytes leftover after parsing attributes in process `syz.5.351'. [ 177.478031][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.351'. [ 177.480716][ T7545] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 177.489563][ T7540] netlink: 'syz.5.351': attribute type 39 has an invalid length. [ 177.518864][ T7537] netlink: 'syz.5.351': attribute type 1 has an invalid length. [ 177.604164][ T7537] netlink: 132 bytes leftover after parsing attributes in process `syz.5.351'. [ 177.755950][ T7548] sit0: entered allmulticast mode [ 178.709459][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.364'. [ 180.046479][ T7609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.796953][ T7608] netlink: 'syz.4.370': attribute type 12 has an invalid length. [ 181.216599][ T7620] raw_sendmsg: syz.4.373 forgot to set AF_INET. Fix it! [ 181.252934][ T7619] __nla_validate_parse: 2 callbacks suppressed [ 181.252954][ T7619] netlink: 180 bytes leftover after parsing attributes in process `syz.4.373'. [ 181.743400][ T5867] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 182.305963][ T7659] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 182.320646][ T7659] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 183.108903][ T7692] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.136574][ T7690] netlink: 130896 bytes leftover after parsing attributes in process `syz.5.391'. [ 183.156220][ T7689] netlink: 130896 bytes leftover after parsing attributes in process `syz.5.391'. [ 183.177217][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 183.483486][ T7700] netlink: 2 bytes leftover after parsing attributes in process `syz.2.396'. [ 183.812386][ T5867] Bluetooth: hci2: command tx timeout [ 184.547206][ T7723] netlink: 60 bytes leftover after parsing attributes in process `syz.6.402'. [ 184.560441][ T7723] netlink: 60 bytes leftover after parsing attributes in process `syz.6.402'. [ 184.572813][ T7723] netlink: 60 bytes leftover after parsing attributes in process `syz.6.402'. [ 184.598310][ T7725] netlink: 'syz.2.403': attribute type 10 has an invalid length. [ 184.809455][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 184.818761][ T7732] netlink: 6 bytes leftover after parsing attributes in process `syz.4.404'. [ 184.984490][ T7722] delete_channel: no stack [ 185.316908][ T7745] netlink: 'syz.2.408': attribute type 10 has an invalid length. [ 185.363954][ T7745] macvlan0: entered promiscuous mode [ 185.392955][ T7745] macvlan0: entered allmulticast mode [ 185.471267][ T7745] veth1_vlan: entered allmulticast mode [ 185.490857][ T7745] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 185.510977][ T7751] bridge_slave_1: left allmulticast mode [ 185.517340][ T7751] bridge_slave_1: left promiscuous mode [ 185.573151][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.730489][ T7751] bridge_slave_0: left allmulticast mode [ 185.737091][ T7751] bridge_slave_0: left promiscuous mode [ 185.762948][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.288513][ T7757] netlink: 'syz.6.412': attribute type 10 has an invalid length. [ 186.417608][ T7757] bridge0: port 3(macsec0) entered blocking state [ 186.440430][ T7757] bridge0: port 3(macsec0) entered disabled state [ 186.476553][ T7757] macsec0: entered allmulticast mode [ 186.488680][ T7757] veth1_macvtap: entered allmulticast mode [ 186.913697][ T7757] macsec0: entered promiscuous mode [ 186.920359][ T7757] bridge0: port 3(macsec0) entered blocking state [ 186.927055][ T7757] bridge0: port 3(macsec0) entered forwarding state [ 188.466766][ T7815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.542833][ T7815] __nla_validate_parse: 66 callbacks suppressed [ 188.542869][ T7815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.426'. [ 188.586816][ T7815] netlink: 'syz.0.426': attribute type 2 has an invalid length. [ 188.605688][ T7815] netlink: 'syz.0.426': attribute type 2 has an invalid length. [ 188.639638][ T7820] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 188.682968][ T7815] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 188.692308][ T7815] netlink: 48 bytes leftover after parsing attributes in process `syz.0.426'. [ 188.964006][ T7830] netlink: 'syz.5.431': attribute type 2 has an invalid length. [ 188.971996][ T7830] netlink: 'syz.5.431': attribute type 2 has an invalid length. [ 188.979858][ T7830] netlink: 'syz.5.431': attribute type 2 has an invalid length. [ 188.988181][ T7830] netlink: 'syz.5.431': attribute type 1 has an invalid length. [ 189.100493][ T7829] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.432'. [ 189.225740][ T7835] lo speed is unknown, defaulting to 1000 [ 189.651909][ T7852] netlink: 72 bytes leftover after parsing attributes in process `syz.4.437'. [ 189.754138][ T7850] netlink: 288 bytes leftover after parsing attributes in process `syz.0.436'. [ 189.800392][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 189.868524][ T7850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 190.295835][ T7879] netlink: 348 bytes leftover after parsing attributes in process `syz.6.443'. [ 190.311996][ T7876] netlink: 348 bytes leftover after parsing attributes in process `syz.6.443'. [ 190.397275][ T7881] validate_nla: 1 callbacks suppressed [ 190.397321][ T7881] netlink: 'syz.0.445': attribute type 10 has an invalid length. [ 190.439574][ T7881] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.445'. [ 190.780184][ T7889] lo speed is unknown, defaulting to 1000 [ 191.314927][ T7917] netlink: 'syz.6.454': attribute type 3 has an invalid length. [ 191.330751][ T7917] netlink: 'syz.6.454': attribute type 2 has an invalid length. [ 192.275681][ T7940] netlink: 'syz.2.461': attribute type 21 has an invalid length. [ 192.546184][ T7946] netlink: 'syz.5.463': attribute type 13 has an invalid length. [ 192.571257][ T7946] netlink: 'syz.5.463': attribute type 58 has an invalid length. [ 192.953148][ T7957] netlink: 'syz.4.467': attribute type 33 has an invalid length. [ 192.981445][ T7957] mac80211_hwsim hwsim9 : renamed from wlan1 (while UP) [ 193.111815][ T7957] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 193.551960][ T7964] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 193.559677][ T7964] netlink: 'syz.2.471': attribute type 4 has an invalid length. [ 193.589668][ T7964] __nla_validate_parse: 11 callbacks suppressed [ 193.589700][ T7964] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.471'. [ 194.136627][ T7977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 194.282550][ T7983] netlink: 56 bytes leftover after parsing attributes in process `syz.4.475'. [ 194.321681][ T7977] syzkaller0: entered promiscuous mode [ 194.327355][ T7977] syzkaller0: entered allmulticast mode [ 194.368221][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375152][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.539728][ T7990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 195.477804][ T8010] cgroup: fork rejected by pids controller in /syz6 [ 196.112590][ T8121] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.487'. [ 196.819666][ T8135] netlink: 948 bytes leftover after parsing attributes in process `syz.2.492'. [ 196.932663][ T8136] netlink: 60 bytes leftover after parsing attributes in process `syz.5.491'. [ 198.135917][ T8134] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 198.149381][ T8134] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 198.168890][ T8134] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 198.315606][ T8149] netlink: 132 bytes leftover after parsing attributes in process `syz.4.495'. [ 198.339450][ T8152] netlink: 'syz.4.495': attribute type 12 has an invalid length. [ 198.371436][ T8152] netlink: 132 bytes leftover after parsing attributes in process `syz.4.495'. [ 198.897563][ T8164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.498'. [ 199.298375][ T8170] sctp: [Deprecated]: syz.2.501 (pid 8170) Use of int in max_burst socket option deprecated. [ 199.298375][ T8170] Use struct sctp_assoc_value instead [ 199.374981][ T8169] sctp: [Deprecated]: syz.2.501 (pid 8169) Use of int in max_burst socket option deprecated. [ 199.374981][ T8169] Use struct sctp_assoc_value instead [ 199.967334][ T8177] netlink: 'syz.2.503': attribute type 39 has an invalid length. [ 200.065572][ T1059] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.381779][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.390082][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.531563][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.539931][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.548929][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 200.837941][ T1059] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.855761][ T8199] netlink: 132 bytes leftover after parsing attributes in process `syz.4.510'. [ 200.871284][ T8202] netlink: 'syz.4.510': attribute type 12 has an invalid length. [ 200.879789][ T8202] netlink: 132 bytes leftover after parsing attributes in process `syz.4.510'. [ 200.957038][ T1059] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.990674][ T8206] netlink: 'syz.2.512': attribute type 10 has an invalid length. [ 201.002508][ T8206] netlink: 55 bytes leftover after parsing attributes in process `syz.2.512'. [ 201.095402][ T8210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.512'. [ 201.238498][ T8212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 201.253038][ T8191] lo speed is unknown, defaulting to 1000 [ 201.265241][ T8214] netlink: 132 bytes leftover after parsing attributes in process `syz.4.514'. [ 201.293015][ T1059] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.359354][ T8215] ksmbd: Daemon and kernel module version mismatch. ksmbd: 36, kernel module: 1. User-space ksmbd should terminate. [ 201.449689][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 201.584666][ T8216] netlink: 'syz.4.514': attribute type 12 has an invalid length. [ 201.601048][ T8216] netlink: 132 bytes leftover after parsing attributes in process `syz.4.514'. [ 201.923448][ T8235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.521'. [ 201.979109][ T1059] macsec0: left allmulticast mode [ 201.991220][ T1059] veth1_macvtap: left allmulticast mode [ 202.001285][ T1059] macsec0: left promiscuous mode [ 202.006866][ T1059] bridge0: port 3(macsec0) entered disabled state [ 202.065264][ T1059] bridge_slave_1: left allmulticast mode [ 202.082454][ T1059] bridge_slave_1: left promiscuous mode [ 202.095480][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.111383][ T1059] bridge_slave_0: left allmulticast mode [ 202.117086][ T1059] bridge_slave_0: left promiscuous mode [ 202.126309][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.517605][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.534518][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.547315][ T1059] bond0 (unregistering): Released all slaves [ 202.629104][ T8247] netlink: 'syz.0.524': attribute type 12 has an invalid length. [ 202.647980][ T8250] netlink: 'syz.2.525': attribute type 10 has an invalid length. [ 202.694079][ T5864] Bluetooth: hci4: command tx timeout [ 203.412821][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 203.754439][ T1059] hsr_slave_0: left promiscuous mode [ 203.762260][ T1059] hsr_slave_1: left promiscuous mode [ 203.764715][ T8282] ksmbd: Unknown IPC event: 3, ignore. [ 203.768465][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.781738][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.792358][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.799923][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.833898][ T1059] veth1_macvtap: left promiscuous mode [ 203.839491][ T1059] veth0_macvtap: left promiscuous mode [ 203.856017][ T1059] veth1_vlan: left promiscuous mode [ 203.871720][ T1059] veth0_vlan: left promiscuous mode [ 203.884205][ T5864] Bluetooth: hci0: ISO packet for unknown connection handle 8 [ 204.054400][ T8293] __nla_validate_parse: 5 callbacks suppressed [ 204.054440][ T8293] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.534'. [ 204.084221][ T8297] netlink: 'syz.2.535': attribute type 2 has an invalid length. [ 204.406160][ T8308] netlink: 'syz.5.540': attribute type 12 has an invalid length. [ 204.420460][ T8308] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.540'. [ 204.773299][ T5864] Bluetooth: hci4: command tx timeout [ 204.859213][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 204.947243][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 205.280984][ T8326] netlink: 'syz.0.543': attribute type 10 has an invalid length. [ 205.658114][ T979] lo speed is unknown, defaulting to 1000 [ 205.665374][ T979] infiniband syz2: ib_query_port failed (-19) [ 205.943262][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.950605][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.970854][ T8191] bridge_slave_0: entered allmulticast mode [ 205.980212][ T8191] bridge_slave_0: entered promiscuous mode [ 205.993306][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.000769][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.009930][ T8191] bridge_slave_1: entered allmulticast mode [ 206.018257][ T8191] bridge_slave_1: entered promiscuous mode [ 206.126467][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.182340][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.399310][ T8363] netlink: 13 bytes leftover after parsing attributes in process `syz.5.550'. [ 206.415872][ T8191] team0: Port device team_slave_0 added [ 206.431688][ T8364] netlink: 'syz.4.547': attribute type 6 has an invalid length. [ 206.503650][ T8364] netlink: 168 bytes leftover after parsing attributes in process `syz.4.547'. [ 206.607531][ T8191] team0: Port device team_slave_1 added [ 206.841383][ T5864] Bluetooth: hci4: command tx timeout [ 206.974377][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.991261][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.025709][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.039253][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.046392][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.099732][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.225611][ T8378] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.555'. [ 207.230056][ T8191] hsr_slave_0: entered promiscuous mode [ 207.274321][ T8191] hsr_slave_1: entered promiscuous mode [ 207.294642][ T8380] netlink: 20 bytes leftover after parsing attributes in process `syz.0.556'. [ 207.309093][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.556'. [ 207.560769][ T8391] netlink: 40 bytes leftover after parsing attributes in process `syz.0.560'. [ 207.911487][ T8402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.564'. [ 208.147021][ T8405] netlink: 'syz.4.564': attribute type 12 has an invalid length. [ 208.160558][ T8405] netlink: 132 bytes leftover after parsing attributes in process `syz.4.564'. [ 208.295576][ T8408] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.360477][ T8191] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 208.408748][ T8191] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 208.440203][ T8191] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 208.483505][ T8191] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.921873][ T5864] Bluetooth: hci4: command tx timeout [ 209.320853][ T8459] netlink: 'syz.0.572': attribute type 33 has an invalid length. [ 209.328980][ T8459] netlink: 152 bytes leftover after parsing attributes in process `syz.0.572'. [ 210.100705][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.192198][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.220428][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.227789][ T7059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.290663][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.297922][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.352637][ T8484] netlink: 132 bytes leftover after parsing attributes in process `syz.4.577'. [ 210.375595][ T8489] netlink: 168 bytes leftover after parsing attributes in process `syz.2.575'. [ 210.395697][ T8486] netlink: 'syz.4.577': attribute type 12 has an invalid length. [ 210.435374][ T8486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.577'. [ 210.616502][ T8494] netlink: 316 bytes leftover after parsing attributes in process `syz.5.578'. [ 210.800921][ T8191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 210.837942][ T8191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.226299][ T8505] netlink: 'syz.2.580': attribute type 6 has an invalid length. [ 211.301377][ T8505] netlink: 164 bytes leftover after parsing attributes in process `syz.2.580'. [ 211.802726][ T8467] Bluetooth: hci2: command 0x0406 tx timeout [ 211.808970][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.815891][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.902571][ T8517] netlink: 'syz.5.583': attribute type 17 has an invalid length. [ 211.949774][ T8517] netlink: 152 bytes leftover after parsing attributes in process `syz.5.583'. [ 211.972577][ T8517] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 212.003643][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.112180][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 213.155293][ T8191] veth0_vlan: entered promiscuous mode [ 213.175896][ T8191] veth1_vlan: entered promiscuous mode [ 213.233436][ T8191] veth0_macvtap: entered promiscuous mode [ 213.249317][ T8191] veth1_macvtap: entered promiscuous mode [ 213.335114][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.376654][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.409914][ T61] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.419619][ T61] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.436657][ T61] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.459024][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.801391][ T7061] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.835617][ T7061] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.907439][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.932792][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.188578][ T8587] netlink: 'syz.5.601': attribute type 3 has an invalid length. [ 214.429901][ T8581] netlink: 208 bytes leftover after parsing attributes in process `syz.5.601'. [ 214.915317][ T8605] netlink: 'syz.6.605': attribute type 1 has an invalid length. [ 214.965560][ T8605] netlink: 'syz.6.605': attribute type 2 has an invalid length. [ 215.079421][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.6.605'. [ 216.378517][ T8617] netlink: 'syz.5.608': attribute type 1 has an invalid length. [ 216.406029][ T8617] netlink: 'syz.5.608': attribute type 2 has an invalid length. [ 216.482395][ T8617] netlink: 'syz.5.608': attribute type 2 has an invalid length. [ 216.525089][ T8618] Driver unsupported XDP return value 0 on prog (id 453) dev N/A, expect packet loss! [ 217.046589][ T8638] netlink: 'syz.5.615': attribute type 2 has an invalid length. [ 217.097213][ T8638] netlink: 137592 bytes leftover after parsing attributes in process `syz.5.615'. [ 217.502645][ T8655] netlink: 1018 bytes leftover after parsing attributes in process `syz.6.618'. [ 218.100933][ T8671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.617'. [ 218.111463][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.623'. [ 219.262934][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 219.272275][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 219.281375][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 219.290441][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 219.299542][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 219.308639][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 219.317756][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 219.327039][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 219.336152][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 219.345287][ T8687] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 220.792263][ T8732] netlink: 'syz.5.637': attribute type 10 has an invalid length. [ 220.831627][ T8732] netlink: 152 bytes leftover after parsing attributes in process `syz.5.637'. [ 222.225297][ T8751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.642'. [ 222.262961][ T8751] netlink: 'syz.0.642': attribute type 12 has an invalid length. [ 222.284787][ T8751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.642'. [ 222.388837][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.641'. [ 222.744091][ T8780] netlink: 'syz.2.650': attribute type 10 has an invalid length. [ 222.765193][ T8780] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 222.765976][ T8782] netlink: 48 bytes leftover after parsing attributes in process `syz.4.651'. [ 223.060221][ T8787] netlink: 'syz.4.652': attribute type 10 has an invalid length. [ 223.149677][ T8794] netlink: 'syz.2.653': attribute type 10 has an invalid length. [ 223.167253][ T8794] netlink: 40 bytes leftover after parsing attributes in process `syz.2.653'. [ 223.244723][ T8794] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 223.253052][ T8794] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.282831][ T8794] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 223.452049][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.657'. [ 223.510847][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.657'. [ 223.524945][ T8806] netlink: 24 bytes leftover after parsing attributes in process `syz.5.657'. [ 224.002847][ T8836] ======================================================= [ 224.002847][ T8836] WARNING: The mand mount option has been deprecated and [ 224.002847][ T8836] and is ignored by this kernel. Remove the mand [ 224.002847][ T8836] option from the mount to silence this warning. [ 224.002847][ T8836] ======================================================= [ 224.124955][ T8837] netlink: 352 bytes leftover after parsing attributes in process `syz.6.665'. [ 224.213895][ T8847] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 224.328254][ T8843] netlink: 'syz.5.667': attribute type 3 has an invalid length. [ 225.260779][ T8869] netlink: 'syz.4.672': attribute type 2 has an invalid length. [ 226.373949][ T8861] __nla_validate_parse: 2 callbacks suppressed [ 226.373974][ T8861] netlink: 132 bytes leftover after parsing attributes in process `syz.5.671'. [ 226.389425][ T8864] netlink: 'syz.5.671': attribute type 12 has an invalid length. [ 226.397596][ T8864] netlink: 132 bytes leftover after parsing attributes in process `syz.5.671'. [ 226.407162][ T8881] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.674'. [ 226.420770][ T8886] netlink: 180 bytes leftover after parsing attributes in process `syz.2.676'. [ 226.933537][ T8906] vcan0 speed is unknown, defaulting to 1000 [ 226.964134][ T8906] vcan0 speed is unknown, defaulting to 1000 [ 226.987212][ T8906] vcan0 speed is unknown, defaulting to 1000 [ 227.486525][ T8923] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 227.494351][ T8923] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 227.525793][ T8906] infiniband syz1: set active [ 227.530777][ T8906] infiniband syz1: added vcan0 [ 227.590687][ T8899] delete_channel: no stack [ 227.597120][ T8906] RDS/IB: syz1: added [ 227.606271][ T5944] vcan0 speed is unknown, defaulting to 1000 [ 227.615127][ T8906] smc: adding ib device syz1 with port count 1 [ 227.628692][ T8906] smc: ib device syz1 port 1 has pnetid [ 227.654737][ T8906] vcan0 speed is unknown, defaulting to 1000 [ 227.681453][ T8928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.691'. [ 227.694256][ T5944] vcan0 speed is unknown, defaulting to 1000 [ 227.714355][ T8928] netlink: 'syz.0.691': attribute type 12 has an invalid length. [ 227.764130][ T8928] netlink: 132 bytes leftover after parsing attributes in process `syz.0.691'. [ 228.084006][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.696'. [ 228.116515][ T8906] vcan0 speed is unknown, defaulting to 1000 [ 228.419869][ T8906] vcan0 speed is unknown, defaulting to 1000 [ 228.778758][ T8906] vcan0 speed is unknown, defaulting to 1000 [ 228.819528][ T8950] ãÿ: entered promiscuous mode [ 229.110696][ T8963] net_ratelimit: 3404 callbacks suppressed [ 229.110717][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.156147][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.273308][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.311999][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.341808][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.422448][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.483019][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.556837][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.626226][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.704'. [ 229.647773][ T8972] netlink: 28 bytes leftover after parsing attributes in process `syz.5.704'. [ 229.665679][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.675269][ T8963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 229.706094][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.704'. [ 229.789326][ T8972] netlink: 'syz.5.704': attribute type 13 has an invalid length. [ 229.803874][ T8906] vcan0 speed is unknown, defaulting to 1000 [ 230.033385][ T8983] netlink: 'syz.6.707': attribute type 2 has an invalid length. [ 230.068241][ T8983] netlink: 'syz.6.707': attribute type 2 has an invalid length. [ 230.076111][ T8983] netlink: 'syz.6.707': attribute type 1 has an invalid length. [ 230.105285][ T8983] netlink: 'syz.6.707': attribute type 12 has an invalid length. [ 230.150238][ T8985] netlink: 'syz.2.708': attribute type 12 has an invalid length. [ 230.367496][ T8960] vcan0 speed is unknown, defaulting to 1000 [ 230.530813][ T9002] syz.4.714: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 230.566010][ T9002] CPU: 0 UID: 0 PID: 9002 Comm: syz.4.714 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 230.566058][ T9002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 230.566080][ T9002] Call Trace: [ 230.566091][ T9002] [ 230.566102][ T9002] dump_stack_lvl+0x189/0x250 [ 230.566149][ T9002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.566181][ T9002] ? __pfx__printk+0x10/0x10 [ 230.566220][ T9002] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 230.566250][ T9002] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 230.566287][ T9002] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 230.566325][ T9002] warn_alloc+0x214/0x310 [ 230.566367][ T9002] ? stack_depot_save_flags+0x41b/0x860 [ 230.566408][ T9002] ? __pfx_warn_alloc+0x10/0x10 [ 230.566454][ T9002] ? kasan_save_track+0x4f/0x80 [ 230.566487][ T9002] ? xskq_create+0x56/0x170 [ 230.566513][ T9002] ? xsk_init_queue+0xb0/0x110 [ 230.566537][ T9002] ? xsk_setsockopt+0x57b/0x8d0 [ 230.566560][ T9002] ? do_sock_setsockopt+0x17c/0x1b0 [ 230.566591][ T9002] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 230.566609][ T9002] ? do_syscall_64+0xfa/0x3b0 [ 230.566636][ T9002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.566687][ T9002] __vmalloc_node_range_noprof+0x125/0x12f0 [ 230.566844][ T9002] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 230.566902][ T9002] ? __kasan_kmalloc+0x93/0xb0 [ 230.566949][ T9002] vmalloc_user_noprof+0xad/0xf0 [ 230.566985][ T9002] ? xskq_create+0xbf/0x170 [ 230.567021][ T9002] xskq_create+0xbf/0x170 [ 230.567064][ T9002] xsk_init_queue+0xb0/0x110 [ 230.567107][ T9002] xsk_setsockopt+0x57b/0x8d0 [ 230.567149][ T9002] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.567180][ T9002] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.567227][ T9002] ? __fget_files+0x2a/0x420 [ 230.567245][ T9002] ? aa_sock_opt_perm+0xff/0x1b0 [ 230.567282][ T9002] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 230.567305][ T9002] ? __pfx_xsk_setsockopt+0x10/0x10 [ 230.567341][ T9002] do_sock_setsockopt+0x17c/0x1b0 [ 230.567396][ T9002] __x64_sys_setsockopt+0x13f/0x1b0 [ 230.567442][ T9002] do_syscall_64+0xfa/0x3b0 [ 230.567472][ T9002] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.567505][ T9002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.567528][ T9002] ? clear_bhb_loop+0x60/0xb0 [ 230.567566][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.567588][ T9002] RIP: 0033:0x7f536138ebe9 [ 230.567611][ T9002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.567630][ T9002] RSP: 002b:00007f536219f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.567651][ T9002] RAX: ffffffffffffffda RBX: 00007f53615b5fa0 RCX: 00007f536138ebe9 [ 230.567667][ T9002] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 230.567679][ T9002] RBP: 00007f5361411e19 R08: 0000000000000004 R09: 0000000000000000 [ 230.567699][ T9002] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 230.567713][ T9002] R13: 00007f53615b6038 R14: 00007f53615b5fa0 R15: 00007ffc40e20918 [ 230.567786][ T9002] [ 230.570200][ T9002] Mem-Info: [ 230.904764][ T9002] active_anon:3746 inactive_anon:0 isolated_anon:0 [ 230.904764][ T9002] active_file:19333 inactive_file:39894 isolated_file:0 [ 230.904764][ T9002] unevictable:768 dirty:164 writeback:0 [ 230.904764][ T9002] slab_reclaimable:11179 slab_unreclaimable:100349 [ 230.904764][ T9002] mapped:29070 shmem:1379 pagetables:1032 [ 230.904764][ T9002] sec_pagetables:0 bounce:0 [ 230.904764][ T9002] kernel_misc_reclaimable:0 [ 230.904764][ T9002] free:1312511 free_pcp:15963 free_cma:0 [ 230.970658][ T9002] Node 0 active_anon:15000kB inactive_anon:0kB active_file:77332kB inactive_file:159376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116292kB dirty:576kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11744kB pagetables:3916kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 231.048562][ T9002] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 231.082831][ T9002] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 231.119575][ T9002] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 231.127287][ T9002] Node 0 DMA32 free:1347672kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14800kB inactive_anon:0kB active_file:77332kB inactive_file:157796kB unevictable:1536kB writepending:576kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:43528kB local_pcp:19984kB free_cma:0kB [ 231.175140][ T9002] lowmem_reserve[]: 0 0 1 1 1 [ 231.180072][ T9002] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 231.216465][ T9002] lowmem_reserve[]: 0 0 0 0 0 [ 231.222812][ T9002] Node 1 Normal free:3887084kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20000kB local_pcp:10656kB free_cma:0kB [ 231.304466][ T9002] lowmem_reserve[]: 0 0 0 0 0 [ 231.309289][ T9002] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 231.401114][ T9002] Node 0 DMA32: 1490*4kB (UME) 742*8kB (UME) 474*16kB (UME) 357*32kB (UM) 141*64kB (UM) 143*128kB (UME) 56*256kB (UME) 36*512kB (UM) 11*1024kB (UM) 10*2048kB (UME) 299*4096kB (M) = 1347448kB [ 231.431897][ T9009] vcan0 speed is unknown, defaulting to 1000 [ 231.443358][ T9002] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 231.459417][ T9002] Node 1 Normal: 203*4kB (UME) 48*8kB (UME) 50*16kB (UME) 75*32kB (UME) 23*64kB (UME) 6*128kB (UME) 6*256kB (UME) 6*512kB (UME) 3*1024kB (ME) 1*2048kB (U) 945*4096kB (M) = 3887084kB [ 231.568474][ T9002] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.578371][ T9002] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.652991][ T9002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 231.681331][ T9002] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 231.705081][ T9002] 60603 total pagecache pages [ 231.709842][ T9002] 0 pages in swap cache [ 231.789120][ T9002] Free swap = 124996kB [ 231.793431][ T9002] Total swap = 124996kB [ 231.797622][ T9002] 2097051 pages RAM [ 231.811844][ T9002] 0 pages HighMem/MovableOnly [ 231.816570][ T9002] 425654 pages reserved [ 231.820753][ T9002] 0 pages cma reserved [ 231.982048][ T9025] netlink: 'syz.2.719': attribute type 10 has an invalid length. [ 232.215994][ T9034] __nla_validate_parse: 6 callbacks suppressed [ 232.216013][ T9034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.721'. [ 232.281286][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 232.354361][ T9034] netlink: 'syz.2.721': attribute type 12 has an invalid length. [ 232.381704][ T9034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.721'. [ 233.354123][ T9064] netlink: 'syz.2.729': attribute type 10 has an invalid length. [ 233.648754][ T9062] netlink: 'syz.0.730': attribute type 1 has an invalid length. [ 233.800802][ T9062] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.730'. [ 234.826712][ T9064] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 234.904197][ T9073] vcan0 speed is unknown, defaulting to 1000 [ 235.267693][ T9083] vcan0 speed is unknown, defaulting to 1000 [ 237.119450][ T9109] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.740'. [ 237.159153][ T9109] net_ratelimit: 23 callbacks suppressed [ 237.159174][ T9109] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 237.712297][ T9141] netlink: 'syz.6.750': attribute type 10 has an invalid length. [ 237.728983][ T9138] netlink: 'syz.4.747': attribute type 16 has an invalid length. [ 237.750878][ T9138] netlink: 152 bytes leftover after parsing attributes in process `syz.4.747'. [ 237.794092][ T9141] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 237.806635][ T9141] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 237.820093][ T9141] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 237.828858][ T9143] lo speed is unknown, defaulting to 1000 [ 237.856842][ T9147] netlink: 'syz.2.748': attribute type 40 has an invalid length. [ 237.976108][ T9143] lo speed is unknown, defaulting to 1000 [ 238.001402][ T9147] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.067088][ T9143] lo speed is unknown, defaulting to 1000 [ 238.128256][ T9156] netlink: 'syz.6.753': attribute type 1 has an invalid length. [ 238.156252][ T9156] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.753'. [ 238.495326][ T9160] Dead loop on virtual device ip6_vti0, fix it urgently! [ 238.656556][ T9164] netlink: 32 bytes leftover after parsing attributes in process `syz.5.756'. [ 238.826982][ T9143] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 240.463841][ T9143] lo speed is unknown, defaulting to 1000 [ 240.464920][ T9172] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.757'. [ 240.530586][ T9177] dvmrp1: tun_chr_ioctl cmd 35108 [ 240.574193][ T9143] lo speed is unknown, defaulting to 1000 [ 240.585679][ T9143] lo speed is unknown, defaulting to 1000 [ 240.604148][ T9143] lo speed is unknown, defaulting to 1000 [ 240.619055][ T9143] lo speed is unknown, defaulting to 1000 [ 241.992604][ T9217] delete_channel: no stack [ 242.085014][ T9224] netlink: 'syz.6.774': attribute type 21 has an invalid length. [ 242.103826][ T9224] netlink: 128 bytes leftover after parsing attributes in process `syz.6.774'. [ 242.131123][ T9224] netlink: 'syz.6.774': attribute type 4 has an invalid length. [ 242.156784][ T9224] netlink: 'syz.6.774': attribute type 5 has an invalid length. [ 242.171022][ T9228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.775'. [ 242.172066][ T9228] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 242.291438][ T9224] netlink: 3 bytes leftover after parsing attributes in process `syz.6.774'. [ 242.478298][ T9243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.780'. [ 242.507838][ T9246] netlink: 32 bytes leftover after parsing attributes in process `syz.5.779'. [ 242.518870][ T9244] netlink: 132 bytes leftover after parsing attributes in process `syz.2.780'. [ 242.927075][ T9270] netlink: 'syz.2.788': attribute type 1 has an invalid length. [ 242.966641][ T30] audit: type=1107 audit(1755733728.099:3): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='òµPäaZ–Y -†€«D]öQÁÙN÷Ê׶+ŪúÝ)8p§…7Æ­$ù=_âü‚û½„ p߯Ú|C©MÈáîBtÃŽÖÄŸìþ¼k½Fÿ{çDés:È÷§ÆúHe@GååŠhMÜ\‘X¨9ç¼õ"yTB [ 242.966641][ T30] ›>ô¿ß íR©)…S‡¥Ï½äw0P [ 242.966641][ T30] @ͨx‘ývJêM×n' [ 243.088817][ T9278] __nla_validate_parse: 1 callbacks suppressed [ 243.088838][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.791'. [ 243.639583][ T9308] netlink: 132 bytes leftover after parsing attributes in process `syz.5.799'. [ 243.687426][ T9308] netlink: 'syz.5.799': attribute type 12 has an invalid length. [ 243.706318][ T9308] netlink: 132 bytes leftover after parsing attributes in process `syz.5.799'. [ 243.734595][ T9312] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.798'. [ 244.296721][ T9343] netlink: 76 bytes leftover after parsing attributes in process `syz.2.807'. [ 244.607675][ T9368] netlink: 128 bytes leftover after parsing attributes in process `syz.2.813'. [ 244.621755][ T9368] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 244.804354][ T9374] netlink: 132 bytes leftover after parsing attributes in process `syz.4.815'. [ 244.817344][ T9374] netlink: 'syz.4.815': attribute type 12 has an invalid length. [ 244.843723][ T9374] netlink: 132 bytes leftover after parsing attributes in process `syz.4.815'. [ 245.593748][ T9396] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 245.628811][ T9395] netlink: 24 bytes leftover after parsing attributes in process `syz.0.820'. [ 245.640935][ T9396] team0: Device hsr_slave_0 failed to register rx_handler [ 247.402978][ T9427] netlink: 132 bytes leftover after parsing attributes in process `syz.5.829'. [ 247.414209][ T9431] netlink: 'syz.5.829': attribute type 12 has an invalid length. [ 247.659700][ T9447] syzkaller0: entered promiscuous mode [ 247.671841][ T9447] syzkaller0: entered allmulticast mode [ 247.766945][ T9457] openvswitch: netlink: Geneve opt len 11 is not a multiple of 4. [ 249.300876][ T9461] netlink: 'syz.6.841': attribute type 13 has an invalid length. [ 249.311208][ T9463] netlink: 'syz.2.842': attribute type 12 has an invalid length. [ 249.318967][ T9463] __nla_validate_parse: 2 callbacks suppressed [ 249.318984][ T9463] netlink: 132 bytes leftover after parsing attributes in process `syz.2.842'. [ 249.400591][ T9472] netlink: 132 bytes leftover after parsing attributes in process `syz.6.844'. [ 249.414178][ T9472] netlink: 'syz.6.844': attribute type 12 has an invalid length. [ 249.422470][ T9472] netlink: 132 bytes leftover after parsing attributes in process `syz.6.844'. [ 249.485570][ T9481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'. [ 249.500267][ T9478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'. [ 249.819655][ T9498] netlink: 'syz.6.852': attribute type 1 has an invalid length. [ 250.002913][ T9505] netlink: 40 bytes leftover after parsing attributes in process `syz.5.855'. [ 250.516021][ T9518] netlink: 'syz.0.858': attribute type 9 has an invalid length. [ 250.709451][ T9522] netlink: 17 bytes leftover after parsing attributes in process `syz.0.858'. [ 250.750677][ T9522] netlink: zone id is out of range [ 250.764455][ T9522] netlink: zone id is out of range [ 250.786011][ T9522] netlink: zone id is out of range [ 250.795753][ T9522] netlink: zone id is out of range [ 250.806297][ T9522] netlink: zone id is out of range [ 250.812638][ T9522] netlink: zone id is out of range [ 250.817910][ T9522] netlink: zone id is out of range [ 250.826207][ T9522] netlink: zone id is out of range [ 250.833098][ T9522] netlink: zone id is out of range [ 250.838424][ T9522] netlink: zone id is out of range [ 250.896181][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.862'. [ 250.963723][ T9531] netlink: 'syz.2.862': attribute type 12 has an invalid length. [ 250.975531][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.862'. [ 251.072819][ T9537] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.865'. [ 251.159441][ T9539] netlink: 'syz.0.866': attribute type 4 has an invalid length. [ 251.184974][ T9543] tc_dump_action: action bad kind [ 252.625103][ T9574] netlink: 'syz.5.879': attribute type 12 has an invalid length. [ 253.249836][ T9598] netlink: 'syz.0.885': attribute type 6 has an invalid length. [ 253.477719][ T9604] veth1_macvtap: left promiscuous mode [ 253.564521][ T9604] macsec0: entered promiscuous mode [ 254.045943][ T9616] netlink: 'syz.5.893': attribute type 10 has an invalid length. [ 254.669327][ T9628] netlink: 'syz.5.895': attribute type 2 has an invalid length. [ 254.677743][ T9628] __nla_validate_parse: 10 callbacks suppressed [ 254.677763][ T9628] netlink: 164 bytes leftover after parsing attributes in process `syz.5.895'. [ 254.747885][ T9626] netlink: 'syz.5.895': attribute type 2 has an invalid length. [ 254.917668][ T9626] netlink: 164 bytes leftover after parsing attributes in process `syz.5.895'. [ 255.615223][ T9646] : entered promiscuous mode [ 255.810887][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.817960][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.966805][ T9661] netlink: 'syz.5.906': attribute type 1 has an invalid length. [ 256.030502][ T9668] netlink: 132 bytes leftover after parsing attributes in process `syz.0.909'. [ 257.681611][ T9681] blkio.reset_stats is deprecated [ 257.916179][ T9697] netlink: 80 bytes leftover after parsing attributes in process `syz.5.915'. [ 257.964062][ T9697] netlink: 'syz.5.915': attribute type 46 has an invalid length. [ 258.147713][ T9697] netlink: 68 bytes leftover after parsing attributes in process `syz.5.915'. [ 258.170592][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.915'. [ 258.179936][ T9697] netlink: 20 bytes leftover after parsing attributes in process `syz.5.915'. [ 258.836131][ T9718] netlink: 132 bytes leftover after parsing attributes in process `syz.5.923'. [ 259.964843][ T9737] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.929'. [ 261.131748][ T9761] netlink: 208344 bytes leftover after parsing attributes in process `syz.2.934'. [ 261.579536][ T9762] netlink: 92 bytes leftover after parsing attributes in process `syz.0.935'. [ 261.722477][ T9760] netlink: 'syz.0.935': attribute type 39 has an invalid length. [ 261.935312][ T9766] netlink: 132 bytes leftover after parsing attributes in process `syz.6.936'. [ 262.049064][ T9771] netlink: 'syz.4.937': attribute type 2 has an invalid length. [ 262.116518][ T9771] netlink: 51 bytes leftover after parsing attributes in process `syz.4.937'. [ 262.143138][ T9781] netlink: 16 bytes leftover after parsing attributes in process `syz.5.941'. [ 262.513568][ T9797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.945'. [ 262.742385][ T9806] netlink: 'syz.2.947': attribute type 10 has an invalid length. [ 262.750180][ T9806] netlink: 55 bytes leftover after parsing attributes in process `syz.2.947'. [ 263.175645][ T9822] netlink: 'syz.6.950': attribute type 33 has an invalid length. [ 263.213760][ T9822] netlink: 152 bytes leftover after parsing attributes in process `syz.6.950'. [ 263.341690][ T9825] netlink: 36 bytes leftover after parsing attributes in process `syz.5.953'. [ 263.355607][ T9825] žåÓD`¼ê: renamed from hsr_slave_1 (while UP) [ 263.535675][ T9831] netlink: 'syz.4.952': attribute type 12 has an invalid length. [ 263.555236][ T9834] netlink: 'syz.0.955': attribute type 12 has an invalid length. [ 263.980683][ T9847] vcan0 speed is unknown, defaulting to 1000 [ 264.289642][ T9847] lo speed is unknown, defaulting to 1000 [ 265.201523][ T9903] __nla_validate_parse: 5 callbacks suppressed [ 265.201542][ T9903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.973'. [ 265.301644][ T9903] netlink: 'syz.2.973': attribute type 12 has an invalid length. [ 265.311316][ T9903] netlink: 132 bytes leftover after parsing attributes in process `syz.2.973'. [ 265.710656][ T9917] netlink: 'syz.0.977': attribute type 10 has an invalid length. [ 266.065335][ T9917] team0 (unregistering): Port device team_slave_0 removed [ 266.116885][ T9917] team0 (unregistering): Port device team_slave_1 removed [ 266.555895][ T9927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.979'. [ 266.567021][ T9933] netlink: 'syz.2.979': attribute type 12 has an invalid length. [ 266.581363][ T9933] netlink: 132 bytes leftover after parsing attributes in process `syz.2.979'. [ 266.701887][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 267.185958][ T9950] netlink: 'syz.6.985': attribute type 3 has an invalid length. [ 267.217369][ T9950] netlink: 'syz.6.985': attribute type 2 has an invalid length. [ 267.231490][ T9950] netlink: 198112 bytes leftover after parsing attributes in process `syz.6.985'. [ 267.434369][ T9967] netlink: 'syz.2.990': attribute type 3 has an invalid length. [ 267.493652][ T9967] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.990'. [ 267.673342][ T9975] netlink: 56 bytes leftover after parsing attributes in process `syz.6.992'. [ 267.682469][ T9975] netlink: 56 bytes leftover after parsing attributes in process `syz.6.992'. [ 267.708378][ T9975] netlink: 'syz.6.992': attribute type 10 has an invalid length. [ 267.716572][ T9975] macvlan1: entered allmulticast mode [ 267.728928][ T9975] veth1_vlan: entered allmulticast mode [ 267.757253][ T9975] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 267.857500][ T9981] netlink: 'syz.5.994': attribute type 16 has an invalid length. [ 267.880685][ T9981] netlink: 168 bytes leftover after parsing attributes in process `syz.5.994'. [ 269.144495][ T9986] syzkaller0: entered promiscuous mode [ 269.150021][ T9986] syzkaller0: entered allmulticast mode [ 269.614312][T10019] netlink: 'syz.5.1006': attribute type 1 has an invalid length. [ 269.622622][T10019] net_ratelimit: 12 callbacks suppressed [ 269.622655][T10019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 269.893860][T10030] rdma_rxe: rxe_newlink: failed to add vcan0 [ 269.900669][T10031] rdma_rxe: rxe_newlink: failed to add vcan0 [ 271.089024][T10014] vcan0 speed is unknown, defaulting to 1000 [ 271.708457][T10056] netlink: 'syz.0.1017': attribute type 10 has an invalid length. [ 271.762275][T10057] wg2: entered promiscuous mode [ 271.767536][T10057] wg2: entered allmulticast mode [ 272.044368][ T30] audit: type=1107 audit(1755733757.169:4): pid=10058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ò)¶ºÜ¨6 òò+ZqZ§iM](u…³à¤ø_~w‹G©àáS ¬¼d€¹2þ(­•þˆafN„ãðÉÙûÒÒX·Þ/Hþ]K#½‰lì›äò#{Il–SXEXPeÇD×ôÖÊE¯§ýzˆŸ=ÁõQ‡j‘Ó$S [ 272.044368][ T30] Е:2XX8DŠõcÓ¡q5Æf [ 272.044368][ T30] FÔÐåÞ¨òÿhË^wnߥåƒ%²0–n*¬6Šöy2˜'' [ 272.077399][T10014] lo speed is unknown, defaulting to 1000 [ 272.175945][T10063] netlink: 'syz.6.1019': attribute type 21 has an invalid length. [ 272.406630][T10071] netlink: 'syz.2.1022': attribute type 29 has an invalid length. [ 272.789435][T10085] netlink: 'syz.6.1025': attribute type 10 has an invalid length. [ 273.500546][T10104] vcan0 speed is unknown, defaulting to 1000 [ 273.638608][T10119] __nla_validate_parse: 3 callbacks suppressed [ 273.638632][T10119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1036'. [ 273.710904][T10119] netlink: 46 bytes leftover after parsing attributes in process `syz.4.1036'. [ 273.750892][T10119] netlink: 46 bytes leftover after parsing attributes in process `syz.4.1036'. [ 273.834235][T10117] netlink: 'syz.5.1034': attribute type 10 has an invalid length. [ 273.922381][T10117] bond0: (slave bond_slave_0): Releasing backup interface [ 274.386605][T10139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.556104][T10104] lo speed is unknown, defaulting to 1000 [ 275.576962][T10173] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1049'. [ 275.594456][T10175] netlink: 'syz.5.1049': attribute type 12 has an invalid length. [ 275.619257][T10175] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1049'. [ 276.173412][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1057'. [ 276.215222][T10205] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1057'. [ 276.452087][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 276.514714][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1058'. [ 276.738409][T10215] netlink: 'syz.6.1061': attribute type 10 has an invalid length. [ 277.082366][T10215] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 277.093364][T10222] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1063'. [ 277.526772][T10228] siw: device registration error -23 [ 277.606015][T10228] siw: device registration error -23 [ 277.715246][T10225] netlink: 'syz.4.1064': attribute type 6 has an invalid length. [ 280.018919][T10256] netlink: 'syz.4.1071': attribute type 11 has an invalid length. [ 280.060707][T10256] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.1071'. [ 280.320775][T10259] netlink: 'syz.4.1071': attribute type 10 has an invalid length. [ 280.359891][T10259] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.1071'. [ 280.480980][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1071'. [ 280.530592][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1071'. [ 280.740415][T10254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.814424][T10298] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1090'. [ 282.944548][T10307] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 283.131682][T10312] ªªªªªª: renamed from wg2 (while UP) [ 283.351920][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1100'. [ 283.629451][T10330] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1104'. [ 284.105056][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1118'. [ 284.261309][T10365] netlink: 'syz.6.1121': attribute type 2 has an invalid length. [ 284.269106][T10365] netlink: 'syz.6.1121': attribute type 1 has an invalid length. [ 284.430175][T10373] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1124'. [ 284.824840][T10396] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1137'. [ 285.262584][T10421] netlink: 'syz.2.1150': attribute type 10 has an invalid length. [ 285.372421][T10426] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 285.478386][T10434] __nla_validate_parse: 3 callbacks suppressed [ 285.478405][T10434] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1155'. [ 285.542112][T10434] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1155'. [ 285.642412][T10442] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 285.911332][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1168'. [ 286.015012][T10464] netlink: 'syz.6.1171': attribute type 32 has an invalid length. [ 286.383698][T10488] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1180'. [ 286.395321][T10486] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 286.721807][T10503] netlink: 596 bytes leftover after parsing attributes in process `syz.5.1184'. [ 287.090342][T10520] netlink: 'syz.6.1195': attribute type 9 has an invalid length. [ 287.098627][T10520] netlink: 'syz.6.1195': attribute type 9 has an invalid length. [ 288.277126][T10496] netlink: 'syz.5.1184': attribute type 29 has an invalid length. [ 289.857887][T10599] netlink: 'syz.5.1225': attribute type 17 has an invalid length. [ 289.929535][T10599] netlink: 'syz.5.1225': attribute type 16 has an invalid length. [ 289.969129][T10599] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1225'. [ 289.996807][T10604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1226'. [ 290.536499][T10618] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1230'. [ 290.607368][T10618] netlink: 'syz.6.1230': attribute type 12 has an invalid length. [ 290.641527][T10618] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1230'. [ 291.449461][T10635] bpf: Bad value for 'gid' [ 292.752364][T10658] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1242'. [ 293.064415][T10669] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1244'. [ 293.184666][T10678] netlink: 'syz.0.1244': attribute type 2 has an invalid length. [ 293.236470][T10678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1244'. [ 293.355195][T10670] syzkaller0: entered promiscuous mode [ 293.413387][T10670] syzkaller0: entered allmulticast mode [ 294.489344][T10707] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1256'. [ 295.800559][T10688] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 295.829713][T10688] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 295.849679][T10688] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 295.934536][T10713] netlink: 'syz.0.1258': attribute type 39 has an invalid length. [ 296.305773][T10721] openvswitch: netlink: Key type 116 is out of range max 32 [ 296.807404][T10735] netlink: 'syz.5.1265': attribute type 1 has an invalid length. [ 296.845544][T10735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1265'. [ 298.260230][T10752] netlink: 'syz.2.1272': attribute type 29 has an invalid length. [ 298.283068][T10752] netlink: 'syz.2.1272': attribute type 29 has an invalid length. [ 298.319768][T10752] netlink: 'syz.2.1272': attribute type 29 has an invalid length. [ 298.339849][T10752] netlink: 'syz.2.1272': attribute type 29 has an invalid length. [ 298.353432][T10763] netlink: 'syz.5.1276': attribute type 10 has an invalid length. [ 298.374438][T10763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.434049][T10763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.497959][T10763] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 298.633551][T10766] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1277'. [ 299.760939][T10810] netlink: 'syz.4.1293': attribute type 10 has an invalid length. [ 300.026804][T10824] veth0_vlan: entered allmulticast mode [ 300.399556][T10844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1304'. [ 300.436339][T10844] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1304'. [ 300.869775][T10860] netlink: 'syz.6.1307': attribute type 1 has an invalid length. [ 301.957557][T10882] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.974933][T10876] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1312'. [ 301.995208][T10876] bond_slave_0: entered promiscuous mode [ 302.001572][T10876] bond_slave_1: entered promiscuous mode [ 302.007756][T10876] dummy0: entered promiscuous mode [ 303.032061][T10895] netlink: 146936 bytes leftover after parsing attributes in process `syz.6.1318'. [ 303.142211][T10895] openvswitch: netlink: Message has 6 unknown bytes. [ 304.365911][T10941] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1329'. [ 304.679153][T10953] netlink: 'syz.6.1334': attribute type 74 has an invalid length. [ 304.796137][T10963] netlink: 15743 bytes leftover after parsing attributes in process `syz.5.1336'. [ 304.871589][T10967] netlink: 'syz.5.1336': attribute type 12 has an invalid length. [ 304.894807][T10967] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1336'. [ 304.911020][T10963] netlink: 'syz.5.1336': attribute type 12 has an invalid length. [ 304.973080][T10963] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1336'. [ 305.072885][T10974] netlink: 'syz.0.1339': attribute type 2 has an invalid length. [ 305.080847][T10974] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1339'. [ 306.924005][T11027] netlink: 'syz.4.1354': attribute type 2 has an invalid length. [ 306.970294][T11027] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1354'. [ 307.035116][T11027] netlink: 'syz.4.1354': attribute type 2 has an invalid length. [ 307.051863][T11027] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1354'. [ 307.156160][T11034] netlink: 'syz.6.1356': attribute type 29 has an invalid length. [ 307.178827][T11034] netlink: 'syz.6.1356': attribute type 29 has an invalid length. [ 307.212569][T11035] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1355'. [ 307.231848][T11034] : entered promiscuous mode [ 307.275794][T11035] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1355'. [ 307.534988][T11044] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1360'. [ 307.660647][T11035] vcan0 speed is unknown, defaulting to 1000 [ 308.372546][T11053] netlink: 'syz.5.1364': attribute type 12 has an invalid length. [ 308.380423][T11053] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1364'. [ 308.505575][T11053] netlink: 'syz.5.1364': attribute type 10 has an invalid length. [ 308.559944][T11053] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1364'. [ 308.866336][T11072] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1371'. [ 308.884684][T11072] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1371'. [ 308.952364][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 308.971309][T11065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1369'. [ 309.177183][T11035] lo speed is unknown, defaulting to 1000 [ 309.855795][T11097] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\S [ 314.594050][T11129] __nla_validate_parse: 5 callbacks suppressed [ 314.594071][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 314.638415][T11129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 314.649467][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 314.698706][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1385'. [ 314.736346][T11135] netlink: 11 bytes leftover after parsing attributes in process `syz.5.1387'. [ 314.902931][T11146] validate_nla: 3 callbacks suppressed [ 314.902952][T11146] netlink: 'syz.6.1390': attribute type 2 has an invalid length. [ 314.934352][T11146] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1390'. [ 315.132064][T11158] netlink: 'syz.2.1392': attribute type 10 has an invalid length. [ 316.752552][T11192] netlink: 64827 bytes leftover after parsing attributes in process `syz.2.1399'. [ 316.844747][T11192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1399'. [ 316.911519][T11192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1399'. [ 317.218195][T11202] netlink: 'syz.6.1403': attribute type 10 has an invalid length. [ 317.236716][T11202] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.254166][T11202] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.340709][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.347500][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.581450][T11202] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.591294][T11202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.602183][T11202] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.614069][T11202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.742837][T11202] bridge0: entered promiscuous mode [ 317.771992][T11202] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 317.917604][T11208] veth1_macvtap: left promiscuous mode [ 317.957718][T11208] macsec0: entered promiscuous mode [ 318.005456][T11208] macsec0: entered allmulticast mode [ 318.155238][T11215] veth1_macvtap: entered promiscuous mode [ 318.161088][T11215] veth1_macvtap: entered allmulticast mode [ 318.278205][T11217] netlink: 'syz.6.1408': attribute type 39 has an invalid length. [ 318.439660][T11219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.189749][T11249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.387366][T11257] netlink: 'syz.5.1423': attribute type 10 has an invalid length. [ 319.437225][T11257] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.1423'. [ 319.693103][T11264] netlink: 'syz.0.1426': attribute type 2 has an invalid length. [ 319.712504][T11264] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1426'. [ 319.960698][T11275] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1430'. [ 320.153535][T11285] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1435'. [ 320.236703][T11287] netlink: 'syz.4.1436': attribute type 1 has an invalid length. [ 320.294805][T11289] netlink: 'syz.4.1436': attribute type 1 has an invalid length. [ 320.447434][T11289] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1436'. [ 321.532865][T11318] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 321.913877][T11329] netlink: 'syz.4.1447': attribute type 13 has an invalid length. [ 322.054271][T11331] netlink: 'syz.4.1447': attribute type 13 has an invalid length. [ 322.297807][T11329] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.305557][T11329] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.501330][T11350] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1451'. [ 322.551849][T11329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.569338][T11329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.729688][T11351] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1451'. [ 322.908473][T11354] netlink: 'syz.4.1452': attribute type 21 has an invalid length. [ 324.046858][ T43] vcan0 speed is unknown, defaulting to 1000 [ 324.053034][ T43] syz1: Port: 1 Link DOWN [ 324.068885][ T43] vcan0 speed is unknown, defaulting to 1000 [ 324.075080][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.093020][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.110908][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.123064][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.313835][T11359] netlink: 'syz.6.1454': attribute type 2 has an invalid length. [ 324.334548][T11359] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1454'. [ 324.389992][T11366] netlink: 'syz.6.1454': attribute type 2 has an invalid length. [ 324.441761][ T5872] Bluetooth: hci4: command 0x0406 tx timeout [ 324.458643][T11366] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1454'. [ 324.588372][T11373] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1458'. [ 324.896755][T11397] sit0: entered promiscuous mode [ 325.285777][T11408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1465'. [ 325.350564][T11408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1465'. [ 326.501027][T11426] netlink: 'syz.5.1472': attribute type 2 has an invalid length. [ 326.511317][T11426] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1472'. [ 326.535155][T11426] netlink: 'syz.5.1472': attribute type 2 has an invalid length. [ 326.543558][T11426] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1472'. [ 327.137905][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1478'. [ 328.231273][T11464] vcan0 speed is unknown, defaulting to 1000 [ 328.995343][T11475] netlink: 'syz.2.1488': attribute type 2 has an invalid length. [ 329.011344][T11475] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1488'. [ 329.052629][T11477] netlink: 'syz.2.1488': attribute type 2 has an invalid length. [ 329.081303][T11477] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1488'. [ 329.418601][T11464] lo speed is unknown, defaulting to 1000 [ 329.697654][T11485] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1490'. [ 329.745973][T11485] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1490'. [ 329.770566][T11489] netlink: 'syz.6.1491': attribute type 1 has an invalid length. [ 330.004744][T11502] netlink: 'syz.2.1494': attribute type 10 has an invalid length. [ 331.115163][T11524] netlink: 'syz.0.1501': attribute type 2 has an invalid length. [ 331.127128][T11524] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1501'. [ 331.140225][T11524] netlink: 'syz.0.1501': attribute type 2 has an invalid length. [ 331.206875][T11524] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1501'. [ 331.354070][T11536] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1505'. [ 331.387533][T11536] netlink: 'syz.5.1505': attribute type 2 has an invalid length. [ 331.438454][T11536] netlink: 'syz.5.1505': attribute type 2 has an invalid length. [ 331.514377][T11536] netlink: 'syz.5.1505': attribute type 1 has an invalid length. [ 331.586426][T11536] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1505'. [ 332.500920][T11574] netlink: 'syz.2.1519': attribute type 2 has an invalid length. [ 332.509372][T11574] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1519'. [ 332.561805][T11575] netlink: 'syz.2.1519': attribute type 2 has an invalid length. [ 332.582699][T11575] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1519'. [ 332.746891][T11588] FAULT_INJECTION: forcing a failure. [ 332.746891][T11588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.770870][T11588] CPU: 0 UID: 0 PID: 11588 Comm: syz.4.1524 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 332.770903][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.770929][T11588] Call Trace: [ 332.770942][T11588] [ 332.770957][T11588] dump_stack_lvl+0x189/0x250 [ 332.770997][T11588] ? __pfx____ratelimit+0x10/0x10 [ 332.771039][T11588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.771077][T11588] ? __pfx__printk+0x10/0x10 [ 332.771127][T11588] ? __might_fault+0xb0/0x130 [ 332.771182][T11588] ? __might_fault+0xb0/0x130 [ 332.771251][T11588] should_fail_ex+0x414/0x560 [ 332.771321][T11588] _copy_from_user+0x2d/0xb0 [ 332.771360][T11588] ___sys_sendmsg+0x158/0x2a0 [ 332.771410][T11588] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.771577][T11588] ? __fget_files+0x2a/0x420 [ 332.771679][T11588] ? __fget_files+0x2a/0x420 [ 332.771701][T11588] ? __fget_files+0x3a0/0x420 [ 332.771792][T11588] __x64_sys_sendmsg+0x19b/0x260 [ 332.771843][T11588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.771932][T11588] ? __pfx_ksys_write+0x10/0x10 [ 332.771958][T11588] ? rcu_is_watching+0x15/0xb0 [ 332.772019][T11588] ? do_syscall_64+0xbe/0x3b0 [ 332.772081][T11588] do_syscall_64+0xfa/0x3b0 [ 332.772111][T11588] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.772147][T11588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.772172][T11588] ? clear_bhb_loop+0x60/0xb0 [ 332.772222][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.772244][T11588] RIP: 0033:0x7f536138ebe9 [ 332.772272][T11588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.772291][T11588] RSP: 002b:00007f536219f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.772314][T11588] RAX: ffffffffffffffda RBX: 00007f53615b5fa0 RCX: 00007f536138ebe9 [ 332.772329][T11588] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 332.772343][T11588] RBP: 00007f536219f090 R08: 0000000000000000 R09: 0000000000000000 [ 332.772356][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.772369][T11588] R13: 00007f53615b6038 R14: 00007f53615b5fa0 R15: 00007ffc40e20918 [ 332.772489][T11588] [ 334.190161][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 334.241026][T11621] netlink: 'syz.6.1535': attribute type 2 has an invalid length. [ 334.252945][T11621] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1535'. [ 334.264706][T11621] netlink: 'syz.6.1535': attribute type 2 has an invalid length. [ 334.275284][T11621] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1535'. [ 334.412791][T11629] FAULT_INJECTION: forcing a failure. [ 334.412791][T11629] name failslab, interval 1, probability 0, space 0, times 0 [ 334.428775][T11631] mac80211_hwsim hwsim25 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 334.453235][T11631] netlink: 'syz.4.1539': attribute type 10 has an invalid length. [ 334.469201][T11631] bond0: (slave ): Enslaving as an active interface with an up link [ 334.486915][T11629] CPU: 0 UID: 0 PID: 11629 Comm: syz.2.1538 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 334.486948][T11629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.486961][T11629] Call Trace: [ 334.486970][T11629] [ 334.486980][T11629] dump_stack_lvl+0x189/0x250 [ 334.487011][T11629] ? __pfx____ratelimit+0x10/0x10 [ 334.487042][T11629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.487070][T11629] ? __pfx__printk+0x10/0x10 [ 334.487110][T11629] ? __pfx___might_resched+0x10/0x10 [ 334.487139][T11629] should_fail_ex+0x414/0x560 [ 334.487175][T11629] should_failslab+0xa8/0x100 [ 334.487210][T11629] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 334.487242][T11629] ? __alloc_skb+0x112/0x2d0 [ 334.487280][T11629] __alloc_skb+0x112/0x2d0 [ 334.487326][T11629] netlink_sendmsg+0x5c6/0xb30 [ 334.487384][T11629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.487439][T11629] ? aa_sock_msg_perm+0xf1/0x1d0 [ 334.487477][T11629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 334.487500][T11629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.487534][T11629] __sock_sendmsg+0x21c/0x270 [ 334.487569][T11629] ____sys_sendmsg+0x505/0x830 [ 334.487601][T11629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.487637][T11629] ? import_iovec+0x74/0xa0 [ 334.487668][T11629] ___sys_sendmsg+0x21f/0x2a0 [ 334.487694][T11629] ? __pfx____sys_sendmsg+0x10/0x10 [ 334.487769][T11629] ? __fget_files+0x2a/0x420 [ 334.487788][T11629] ? __fget_files+0x3a0/0x420 [ 334.487823][T11629] __x64_sys_sendmsg+0x19b/0x260 [ 334.487850][T11629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 334.487870][T11629] ? perf_trace_preemptirq_template+0xa3/0x340 [ 334.487915][T11629] ? __pfx_ksys_write+0x10/0x10 [ 334.487941][T11629] ? rcu_is_watching+0x15/0xb0 [ 334.487975][T11629] ? do_syscall_64+0xbe/0x3b0 [ 334.488012][T11629] do_syscall_64+0xfa/0x3b0 [ 334.488042][T11629] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.488071][T11629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.488092][T11629] ? clear_bhb_loop+0x60/0xb0 [ 334.488120][T11629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.488141][T11629] RIP: 0033:0x7f5fa638ebe9 [ 334.488160][T11629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.488180][T11629] RSP: 002b:00007f5fa71d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.488203][T11629] RAX: ffffffffffffffda RBX: 00007f5fa65b5fa0 RCX: 00007f5fa638ebe9 [ 334.488219][T11629] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 334.488233][T11629] RBP: 00007f5fa71d4090 R08: 0000000000000000 R09: 0000000000000000 [ 334.488247][T11629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.488259][T11629] R13: 00007f5fa65b6038 R14: 00007f5fa65b5fa0 R15: 00007ffc41f2c4c8 [ 334.488298][T11629] [ 334.662048][T11642] vcan0 speed is unknown, defaulting to 1000 [ 335.064412][T11652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.521644][T11647] vcan0 speed is unknown, defaulting to 1000 [ 335.540210][T11642] lo speed is unknown, defaulting to 1000 [ 335.743258][T11664] netlink: 'syz.0.1552': attribute type 2 has an invalid length. [ 335.751066][T11664] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1552'. [ 336.309356][T11647] lo speed is unknown, defaulting to 1000 [ 336.846162][T11698] FAULT_INJECTION: forcing a failure. [ 336.846162][T11698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.887504][T11698] CPU: 0 UID: 0 PID: 11698 Comm: syz.4.1561 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 336.887536][T11698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.887550][T11698] Call Trace: [ 336.887558][T11698] [ 336.887567][T11698] dump_stack_lvl+0x189/0x250 [ 336.887597][T11698] ? __pfx____ratelimit+0x10/0x10 [ 336.887626][T11698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.887653][T11698] ? __pfx__printk+0x10/0x10 [ 336.887683][T11698] ? __might_fault+0xb0/0x130 [ 336.887733][T11698] should_fail_ex+0x414/0x560 [ 336.887768][T11698] _copy_from_iter+0x1db/0x16f0 [ 336.887796][T11698] ? rcu_is_watching+0x15/0xb0 [ 336.887821][T11698] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 336.887853][T11698] ? __pfx__copy_from_iter+0x10/0x10 [ 336.887877][T11698] ? __build_skb_around+0x257/0x3e0 [ 336.887915][T11698] ? netlink_sendmsg+0x642/0xb30 [ 336.887944][T11698] ? skb_put+0x11b/0x210 [ 336.887981][T11698] netlink_sendmsg+0x6b2/0xb30 [ 336.888033][T11698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.888070][T11698] ? aa_sock_msg_perm+0xf1/0x1d0 [ 336.888107][T11698] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 336.888130][T11698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.888163][T11698] __sock_sendmsg+0x21c/0x270 [ 336.888195][T11698] ____sys_sendmsg+0x505/0x830 [ 336.888226][T11698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.888261][T11698] ? import_iovec+0x74/0xa0 [ 336.888292][T11698] ___sys_sendmsg+0x21f/0x2a0 [ 336.888317][T11698] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.888390][T11698] ? __fget_files+0x2a/0x420 [ 336.888408][T11698] ? __fget_files+0x3a0/0x420 [ 336.888442][T11698] __x64_sys_sendmsg+0x19b/0x260 [ 336.888469][T11698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.888505][T11698] ? __pfx_ksys_write+0x10/0x10 [ 336.888531][T11698] ? rcu_is_watching+0x15/0xb0 [ 336.888560][T11698] ? do_syscall_64+0xbe/0x3b0 [ 336.888596][T11698] do_syscall_64+0xfa/0x3b0 [ 336.888625][T11698] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.888653][T11698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.888674][T11698] ? clear_bhb_loop+0x60/0xb0 [ 336.888701][T11698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.888721][T11698] RIP: 0033:0x7f536138ebe9 [ 336.888740][T11698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.888758][T11698] RSP: 002b:00007f536219f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.888780][T11698] RAX: ffffffffffffffda RBX: 00007f53615b5fa0 RCX: 00007f536138ebe9 [ 336.888796][T11698] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 336.888808][T11698] RBP: 00007f536219f090 R08: 0000000000000000 R09: 0000000000000000 [ 336.888821][T11698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.888834][T11698] R13: 00007f53615b6038 R14: 00007f53615b5fa0 R15: 00007ffc40e20918 [ 336.888873][T11698] [ 337.257411][T11693] vcan0 speed is unknown, defaulting to 1000 [ 337.419701][T11702] netlink: 'syz.4.1562': attribute type 10 has an invalid length. [ 337.427974][T11702] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1562'. [ 337.437292][T11702] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 338.887127][T11693] lo speed is unknown, defaulting to 1000 [ 339.115762][T11723] FAULT_INJECTION: forcing a failure. [ 339.115762][T11723] name failslab, interval 1, probability 0, space 0, times 0 [ 339.134097][T11723] CPU: 1 UID: 0 PID: 11723 Comm: syz.4.1572 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 339.134128][T11723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 339.134141][T11723] Call Trace: [ 339.134151][T11723] [ 339.134161][T11723] dump_stack_lvl+0x189/0x250 [ 339.134194][T11723] ? __pfx____ratelimit+0x10/0x10 [ 339.134225][T11723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.134254][T11723] ? __pfx__printk+0x10/0x10 [ 339.134305][T11723] ? __pfx___might_resched+0x10/0x10 [ 339.134325][T11723] ? fs_reclaim_acquire+0x7d/0x100 [ 339.134372][T11723] should_fail_ex+0x414/0x560 [ 339.134417][T11723] should_failslab+0xa8/0x100 [ 339.134454][T11723] kmem_cache_alloc_noprof+0x73/0x3c0 [ 339.134483][T11723] ? skb_clone+0x212/0x3a0 [ 339.134521][T11723] skb_clone+0x212/0x3a0 [ 339.134540][T11723] ? nfnetlink_rcv+0x486/0x2520 [ 339.134577][T11723] nfnetlink_rcv+0x4b4/0x2520 [ 339.134686][T11723] ? perf_trace_lock_acquire+0x335/0x410 [ 339.134713][T11723] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 339.134779][T11723] ? perf_trace_run_bpf_submit+0xee/0x170 [ 339.134822][T11723] ? perf_trace_lock_acquire+0x335/0x410 [ 339.134888][T11723] ? __lock_acquire+0xab9/0xd20 [ 339.134952][T11723] ? netlink_deliver_tap+0x2e/0x1b0 [ 339.135036][T11723] netlink_unicast+0x82c/0x9e0 [ 339.135111][T11723] ? __pfx_netlink_unicast+0x10/0x10 [ 339.135151][T11723] ? netlink_sendmsg+0x642/0xb30 [ 339.135179][T11723] ? skb_put+0x11b/0x210 [ 339.135228][T11723] netlink_sendmsg+0x805/0xb30 [ 339.135292][T11723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.135339][T11723] ? aa_sock_msg_perm+0xf1/0x1d0 [ 339.135381][T11723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.135406][T11723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.135445][T11723] __sock_sendmsg+0x21c/0x270 [ 339.135487][T11723] ____sys_sendmsg+0x505/0x830 [ 339.135531][T11723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.135587][T11723] ? import_iovec+0x74/0xa0 [ 339.135629][T11723] ___sys_sendmsg+0x21f/0x2a0 [ 339.135663][T11723] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.135807][T11723] ? __fget_files+0x2a/0x420 [ 339.135825][T11723] ? __fget_files+0x3a0/0x420 [ 339.135883][T11723] __x64_sys_sendmsg+0x19b/0x260 [ 339.135916][T11723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.135969][T11723] ? __pfx_ksys_write+0x10/0x10 [ 339.135993][T11723] ? rcu_is_watching+0x15/0xb0 [ 339.136032][T11723] ? do_syscall_64+0xbe/0x3b0 [ 339.136075][T11723] do_syscall_64+0xfa/0x3b0 [ 339.136102][T11723] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.136131][T11723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.136171][T11723] ? clear_bhb_loop+0x60/0xb0 [ 339.136206][T11723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.136228][T11723] RIP: 0033:0x7f536138ebe9 [ 339.136250][T11723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.136269][T11723] RSP: 002b:00007f536219f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.136291][T11723] RAX: ffffffffffffffda RBX: 00007f53615b5fa0 RCX: 00007f536138ebe9 [ 339.136317][T11723] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 339.136330][T11723] RBP: 00007f536219f090 R08: 0000000000000000 R09: 0000000000000000 [ 339.136342][T11723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.136353][T11723] R13: 00007f53615b6038 R14: 00007f53615b5fa0 R15: 00007ffc40e20918 [ 339.136416][T11723] [ 339.800838][T11728] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.1573'. [ 340.455590][T11765] FAULT_INJECTION: forcing a failure. [ 340.455590][T11765] name failslab, interval 1, probability 0, space 0, times 0 [ 340.592493][T11765] CPU: 0 UID: 0 PID: 11765 Comm: syz.5.1584 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 340.592526][T11765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 340.592540][T11765] Call Trace: [ 340.592548][T11765] [ 340.592558][T11765] dump_stack_lvl+0x189/0x250 [ 340.592589][T11765] ? __pfx____ratelimit+0x10/0x10 [ 340.592626][T11765] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.592652][T11765] ? __pfx__printk+0x10/0x10 [ 340.592691][T11765] ? __pfx___might_resched+0x10/0x10 [ 340.592711][T11765] ? fs_reclaim_acquire+0x7d/0x100 [ 340.592752][T11765] should_fail_ex+0x414/0x560 [ 340.592789][T11765] should_failslab+0xa8/0x100 [ 340.592824][T11765] kmem_cache_alloc_noprof+0x73/0x3c0 [ 340.592852][T11765] ? skb_clone+0x212/0x3a0 [ 340.592882][T11765] skb_clone+0x212/0x3a0 [ 340.592903][T11765] ? nfnetlink_rcv+0x486/0x2520 [ 340.592934][T11765] nfnetlink_rcv+0x4b4/0x2520 [ 340.592966][T11765] ? __dev_queue_xmit+0x1d79/0x3b50 [ 340.593004][T11765] ? __dev_queue_xmit+0x27b/0x3b50 [ 340.593046][T11765] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 340.593097][T11765] ? ref_tracker_free+0x63a/0x7d0 [ 340.593128][T11765] ? __asan_memcpy+0x40/0x70 [ 340.593152][T11765] ? __pfx_ref_tracker_free+0x10/0x10 [ 340.593206][T11765] ? skb_clone+0x246/0x3a0 [ 340.593234][T11765] ? __netlink_deliver_tap+0x807/0x850 [ 340.593319][T11765] ? netlink_deliver_tap+0x2e/0x1b0 [ 340.593374][T11765] netlink_unicast+0x82c/0x9e0 [ 340.593415][T11765] ? __pfx_netlink_unicast+0x10/0x10 [ 340.593447][T11765] ? netlink_sendmsg+0x642/0xb30 [ 340.593475][T11765] ? skb_put+0x11b/0x210 [ 340.593514][T11765] netlink_sendmsg+0x805/0xb30 [ 340.593559][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.593597][T11765] ? aa_sock_msg_perm+0xf1/0x1d0 [ 340.593641][T11765] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.593664][T11765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.593697][T11765] __sock_sendmsg+0x21c/0x270 [ 340.593741][T11765] ____sys_sendmsg+0x505/0x830 [ 340.593770][T11765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.593804][T11765] ? import_iovec+0x74/0xa0 [ 340.593832][T11765] ___sys_sendmsg+0x21f/0x2a0 [ 340.593857][T11765] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.593926][T11765] ? __fget_files+0x2a/0x420 [ 340.593943][T11765] ? __fget_files+0x3a0/0x420 [ 340.593975][T11765] __x64_sys_sendmsg+0x19b/0x260 [ 340.594000][T11765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.594035][T11765] ? __pfx_ksys_write+0x10/0x10 [ 340.594060][T11765] ? rcu_is_watching+0x15/0xb0 [ 340.594088][T11765] ? do_syscall_64+0xbe/0x3b0 [ 340.594121][T11765] do_syscall_64+0xfa/0x3b0 [ 340.594148][T11765] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.594175][T11765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.594195][T11765] ? clear_bhb_loop+0x60/0xb0 [ 340.594220][T11765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.594240][T11765] RIP: 0033:0x7f258218ebe9 [ 340.594258][T11765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.594276][T11765] RSP: 002b:00007f2582f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.594297][T11765] RAX: ffffffffffffffda RBX: 00007f25823b5fa0 RCX: 00007f258218ebe9 [ 340.594312][T11765] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 340.594325][T11765] RBP: 00007f2582f97090 R08: 0000000000000000 R09: 0000000000000000 [ 340.594337][T11765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.594349][T11765] R13: 00007f25823b6038 R14: 00007f25823b5fa0 R15: 00007ffc158ce648 [ 340.594385][T11765] [ 341.050102][T11770] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1586'. [ 341.100964][T11770] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1586'. [ 341.252054][T11777] netlink: 'syz.0.1581': attribute type 39 has an invalid length. [ 341.260096][T11783] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1590'. [ 342.633682][T11821] FAULT_INJECTION: forcing a failure. [ 342.633682][T11821] name failslab, interval 1, probability 0, space 0, times 0 [ 342.647262][T11821] CPU: 0 UID: 0 PID: 11821 Comm: syz.6.1601 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 342.647292][T11821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.647305][T11821] Call Trace: [ 342.647314][T11821] [ 342.647323][T11821] dump_stack_lvl+0x189/0x250 [ 342.647355][T11821] ? __pfx____ratelimit+0x10/0x10 [ 342.647385][T11821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.647420][T11821] ? __pfx__printk+0x10/0x10 [ 342.647460][T11821] ? __pfx___might_resched+0x10/0x10 [ 342.647479][T11821] ? fs_reclaim_acquire+0x7d/0x100 [ 342.647521][T11821] should_fail_ex+0x414/0x560 [ 342.647556][T11821] should_failslab+0xa8/0x100 [ 342.647591][T11821] __kmalloc_cache_noprof+0x70/0x3d0 [ 342.647620][T11821] ? nf_tables_newtable+0x435/0x1890 [ 342.647639][T11821] ? nla_strcmp+0x106/0x140 [ 342.647677][T11821] nf_tables_newtable+0x435/0x1890 [ 342.647698][T11821] ? nfnl_pernet+0x2/0x240 [ 342.647750][T11821] nfnetlink_rcv+0x1132/0x2520 [ 342.647822][T11821] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 342.647873][T11821] ? ref_tracker_free+0x63a/0x7d0 [ 342.647944][T11821] ? __netlink_deliver_tap+0x807/0x850 [ 342.647976][T11821] ? netlink_deliver_tap+0x2e/0x1b0 [ 342.648032][T11821] netlink_unicast+0x82c/0x9e0 [ 342.648073][T11821] ? __pfx_netlink_unicast+0x10/0x10 [ 342.648104][T11821] ? netlink_sendmsg+0x642/0xb30 [ 342.648132][T11821] ? skb_put+0x11b/0x210 [ 342.648171][T11821] netlink_sendmsg+0x805/0xb30 [ 342.648216][T11821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.648253][T11821] ? aa_sock_msg_perm+0xf1/0x1d0 [ 342.648290][T11821] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.648313][T11821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.648346][T11821] __sock_sendmsg+0x21c/0x270 [ 342.648379][T11821] ____sys_sendmsg+0x505/0x830 [ 342.648415][T11821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.648451][T11821] ? import_iovec+0x74/0xa0 [ 342.648483][T11821] ___sys_sendmsg+0x21f/0x2a0 [ 342.648508][T11821] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.648583][T11821] ? __fget_files+0x2a/0x420 [ 342.648601][T11821] ? __fget_files+0x3a0/0x420 [ 342.648635][T11821] __x64_sys_sendmsg+0x19b/0x260 [ 342.648662][T11821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.648698][T11821] ? __pfx_ksys_write+0x10/0x10 [ 342.648723][T11821] ? rcu_is_watching+0x15/0xb0 [ 342.648752][T11821] ? do_syscall_64+0xbe/0x3b0 [ 342.648788][T11821] do_syscall_64+0xfa/0x3b0 [ 342.648816][T11821] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.648844][T11821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.648865][T11821] ? clear_bhb_loop+0x60/0xb0 [ 342.648893][T11821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.648913][T11821] RIP: 0033:0x7f624c58ebe9 [ 342.648932][T11821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.648951][T11821] RSP: 002b:00007f624a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.648974][T11821] RAX: ffffffffffffffda RBX: 00007f624c7b5fa0 RCX: 00007f624c58ebe9 [ 342.648989][T11821] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 342.649003][T11821] RBP: 00007f624a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 342.649017][T11821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.649029][T11821] R13: 00007f624c7b6038 R14: 00007f624c7b5fa0 R15: 00007fff3a1527f8 [ 342.649069][T11821] [ 343.044268][T11825] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1603'. [ 343.316975][T11836] bpf: Bad value for 'mode' [ 343.580613][T11840] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1607'. [ 343.682272][T11841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.692869][T11840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.717336][T11841] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1607'. [ 343.824897][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1607'. [ 344.704109][T11868] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1615'. [ 344.838407][T11864] netlink: 'syz.2.1613': attribute type 10 has an invalid length. [ 344.857154][T11864] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1613'. [ 344.980377][T11874] FAULT_INJECTION: forcing a failure. [ 344.980377][T11874] name failslab, interval 1, probability 0, space 0, times 0 [ 345.081465][T11874] CPU: 0 UID: 0 PID: 11874 Comm: syz.5.1617 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 345.081498][T11874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.081511][T11874] Call Trace: [ 345.081519][T11874] [ 345.081528][T11874] dump_stack_lvl+0x189/0x250 [ 345.081558][T11874] ? __pfx____ratelimit+0x10/0x10 [ 345.081585][T11874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.081609][T11874] ? __pfx__printk+0x10/0x10 [ 345.081646][T11874] ? __pfx___might_resched+0x10/0x10 [ 345.081665][T11874] ? fs_reclaim_acquire+0x7d/0x100 [ 345.081703][T11874] should_fail_ex+0x414/0x560 [ 345.081736][T11874] should_failslab+0xa8/0x100 [ 345.081768][T11874] __kmalloc_cache_noprof+0x70/0x3d0 [ 345.081795][T11874] ? nfnetlink_rcv+0xeff/0x2520 [ 345.081827][T11874] nfnetlink_rcv+0xeff/0x2520 [ 345.081893][T11874] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 345.081941][T11874] ? ref_tracker_free+0x63a/0x7d0 [ 345.082008][T11874] ? __netlink_deliver_tap+0x807/0x850 [ 345.082054][T11874] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.082111][T11874] netlink_unicast+0x82c/0x9e0 [ 345.082153][T11874] ? __pfx_netlink_unicast+0x10/0x10 [ 345.082179][T11874] ? netlink_sendmsg+0x642/0xb30 [ 345.082208][T11874] ? skb_put+0x11b/0x210 [ 345.082245][T11874] netlink_sendmsg+0x805/0xb30 [ 345.082289][T11874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.082326][T11874] ? aa_sock_msg_perm+0xf1/0x1d0 [ 345.082361][T11874] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.082383][T11874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.082437][T11874] __sock_sendmsg+0x21c/0x270 [ 345.082468][T11874] ____sys_sendmsg+0x505/0x830 [ 345.082496][T11874] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.082528][T11874] ? import_iovec+0x74/0xa0 [ 345.082554][T11874] ___sys_sendmsg+0x21f/0x2a0 [ 345.082578][T11874] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.082647][T11874] ? __fget_files+0x2a/0x420 [ 345.082663][T11874] ? __fget_files+0x3a0/0x420 [ 345.082696][T11874] __x64_sys_sendmsg+0x19b/0x260 [ 345.082720][T11874] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.082753][T11874] ? __pfx_ksys_write+0x10/0x10 [ 345.082775][T11874] ? rcu_is_watching+0x15/0xb0 [ 345.082799][T11874] ? do_syscall_64+0xbe/0x3b0 [ 345.082831][T11874] do_syscall_64+0xfa/0x3b0 [ 345.082855][T11874] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.082880][T11874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.082898][T11874] ? clear_bhb_loop+0x60/0xb0 [ 345.082924][T11874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.082960][T11874] RIP: 0033:0x7f258218ebe9 [ 345.082980][T11874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.082999][T11874] RSP: 002b:00007f2582f97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.083020][T11874] RAX: ffffffffffffffda RBX: 00007f25823b5fa0 RCX: 00007f258218ebe9 [ 345.083035][T11874] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 345.083049][T11874] RBP: 00007f2582f97090 R08: 0000000000000000 R09: 0000000000000000 [ 345.083062][T11874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.083074][T11874] R13: 00007f25823b6038 R14: 00007f25823b5fa0 R15: 00007ffc158ce648 [ 345.083112][T11874] [ 345.181353][T11879] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1618'. [ 345.618726][T11886] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1621'. [ 345.899817][T11898] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1626'. [ 347.249228][T11923] FAULT_INJECTION: forcing a failure. [ 347.249228][T11923] name failslab, interval 1, probability 0, space 0, times 0 [ 347.320216][T11923] CPU: 0 UID: 0 PID: 11923 Comm: syz.0.1634 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 347.320266][T11923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 347.320287][T11923] Call Trace: [ 347.320302][T11923] [ 347.320318][T11923] dump_stack_lvl+0x189/0x250 [ 347.320367][T11923] ? __pfx____ratelimit+0x10/0x10 [ 347.320417][T11923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.320464][T11923] ? __pfx__printk+0x10/0x10 [ 347.320503][T11923] ? __pfx___might_resched+0x10/0x10 [ 347.320522][T11923] ? fs_reclaim_acquire+0x7d/0x100 [ 347.320562][T11923] should_fail_ex+0x414/0x560 [ 347.320596][T11923] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 347.320616][T11923] should_failslab+0xa8/0x100 [ 347.320650][T11923] __kvmalloc_node_noprof+0x161/0x5f0 [ 347.320682][T11923] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 347.320711][T11923] rhashtable_init_noprof+0x4ee/0xbb0 [ 347.320743][T11923] rhltable_init_noprof+0x1e/0x60 [ 347.320766][T11923] nf_tables_newtable+0x68f/0x1890 [ 347.320818][T11923] nfnetlink_rcv+0x1132/0x2520 [ 347.320891][T11923] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 347.320953][T11923] ? ref_tracker_free+0x63a/0x7d0 [ 347.321024][T11923] ? __netlink_deliver_tap+0x807/0x850 [ 347.321055][T11923] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.321111][T11923] netlink_unicast+0x82c/0x9e0 [ 347.321151][T11923] ? __pfx_netlink_unicast+0x10/0x10 [ 347.321183][T11923] ? netlink_sendmsg+0x642/0xb30 [ 347.321210][T11923] ? skb_put+0x11b/0x210 [ 347.321249][T11923] netlink_sendmsg+0x805/0xb30 [ 347.321293][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.321329][T11923] ? aa_sock_msg_perm+0xf1/0x1d0 [ 347.321364][T11923] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.321388][T11923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.321421][T11923] __sock_sendmsg+0x21c/0x270 [ 347.321453][T11923] ____sys_sendmsg+0x505/0x830 [ 347.321484][T11923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.321520][T11923] ? import_iovec+0x74/0xa0 [ 347.321550][T11923] ___sys_sendmsg+0x21f/0x2a0 [ 347.321576][T11923] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.321628][T11923] ? __fget_files+0x2a/0x420 [ 347.321666][T11923] ? __fget_files+0x2a/0x420 [ 347.321683][T11923] ? __fget_files+0x3a0/0x420 [ 347.321717][T11923] __x64_sys_sendmsg+0x19b/0x260 [ 347.321743][T11923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.321780][T11923] ? __pfx_ksys_write+0x10/0x10 [ 347.321805][T11923] ? rcu_is_watching+0x15/0xb0 [ 347.321834][T11923] ? do_syscall_64+0xbe/0x3b0 [ 347.321870][T11923] do_syscall_64+0xfa/0x3b0 [ 347.321897][T11923] ? lockdep_hardirqs_on+0x9c/0x150 [ 347.321934][T11923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.321955][T11923] ? clear_bhb_loop+0x60/0xb0 [ 347.321982][T11923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.322002][T11923] RIP: 0033:0x7fd357f8ebe9 [ 347.322021][T11923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.322040][T11923] RSP: 002b:00007fd358e54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.322062][T11923] RAX: ffffffffffffffda RBX: 00007fd3581b6090 RCX: 00007fd357f8ebe9 [ 347.322078][T11923] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 347.322092][T11923] RBP: 00007fd358e54090 R08: 0000000000000000 R09: 0000000000000000 [ 347.322105][T11923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.322118][T11923] R13: 00007fd3581b6128 R14: 00007fd3581b6090 R15: 00007fff81c942c8 [ 347.322157][T11923] [ 347.743623][T11931] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1640'. [ 348.754235][T11958] netlink: 'syz.5.1647': attribute type 39 has an invalid length. [ 348.785249][T11961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1650'. [ 348.836555][T11966] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1650'. [ 348.886342][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'. [ 349.025917][T11963] vcan0 speed is unknown, defaulting to 1000 [ 349.079841][T11974] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1653'. [ 349.188707][T11978] FAULT_INJECTION: forcing a failure. [ 349.188707][T11978] name failslab, interval 1, probability 0, space 0, times 0 [ 349.208514][T11978] CPU: 1 UID: 0 PID: 11978 Comm: syz.6.1655 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 349.208547][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.208560][T11978] Call Trace: [ 349.208571][T11978] [ 349.208582][T11978] dump_stack_lvl+0x189/0x250 [ 349.208618][T11978] ? __pfx____ratelimit+0x10/0x10 [ 349.208653][T11978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.208685][T11978] ? __pfx__printk+0x10/0x10 [ 349.208733][T11978] ? __pfx___might_resched+0x10/0x10 [ 349.208758][T11978] ? fs_reclaim_acquire+0x7d/0x100 [ 349.208814][T11978] should_fail_ex+0x414/0x560 [ 349.208866][T11978] should_failslab+0xa8/0x100 [ 349.208908][T11978] __kmalloc_cache_noprof+0x70/0x3d0 [ 349.208950][T11978] ? nft_trans_table_add+0x56/0x430 [ 349.208995][T11978] nft_trans_table_add+0x56/0x430 [ 349.209046][T11978] nf_tables_newtable+0xce3/0x1890 [ 349.209144][T11978] nfnetlink_rcv+0x1132/0x2520 [ 349.209295][T11978] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 349.209389][T11978] ? ref_tracker_free+0x63a/0x7d0 [ 349.209525][T11978] ? __netlink_deliver_tap+0x807/0x850 [ 349.209561][T11978] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.209659][T11978] netlink_unicast+0x82c/0x9e0 [ 349.209726][T11978] ? __pfx_netlink_unicast+0x10/0x10 [ 349.209768][T11978] ? netlink_sendmsg+0x642/0xb30 [ 349.209797][T11978] ? skb_put+0x11b/0x210 [ 349.209850][T11978] netlink_sendmsg+0x805/0xb30 [ 349.209921][T11978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.209981][T11978] ? aa_sock_msg_perm+0xf1/0x1d0 [ 349.210027][T11978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 349.210054][T11978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.210094][T11978] __sock_sendmsg+0x21c/0x270 [ 349.210140][T11978] ____sys_sendmsg+0x505/0x830 [ 349.210190][T11978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.210252][T11978] ? import_iovec+0x74/0xa0 [ 349.210297][T11978] ___sys_sendmsg+0x21f/0x2a0 [ 349.210334][T11978] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.210437][T11978] ? __fget_files+0x2a/0x420 [ 349.210507][T11978] ? __fget_files+0x2a/0x420 [ 349.210527][T11978] ? __fget_files+0x3a0/0x420 [ 349.210589][T11978] __x64_sys_sendmsg+0x19b/0x260 [ 349.210629][T11978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.210692][T11978] ? __pfx_ksys_write+0x10/0x10 [ 349.210719][T11978] ? rcu_is_watching+0x15/0xb0 [ 349.210764][T11978] ? do_syscall_64+0xbe/0x3b0 [ 349.210813][T11978] do_syscall_64+0xfa/0x3b0 [ 349.210844][T11978] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.210876][T11978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.210900][T11978] ? clear_bhb_loop+0x60/0xb0 [ 349.210950][T11978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.210973][T11978] RIP: 0033:0x7f624c58ebe9 [ 349.210997][T11978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.211016][T11978] RSP: 002b:00007f624a7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.211039][T11978] RAX: ffffffffffffffda RBX: 00007f624c7b5fa0 RCX: 00007f624c58ebe9 [ 349.211055][T11978] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 349.211070][T11978] RBP: 00007f624a7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.211083][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 349.211100][T11978] R13: 00007f624c7b6038 R14: 00007f624c7b5fa0 R15: 00007fff3a1527f8 [ 349.211174][T11978] [ 349.723422][T11963] lo speed is unknown, defaulting to 1000 [ 349.844003][T11983] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1656'. [ 349.920341][T11988] netlink: 'syz.0.1657': attribute type 29 has an invalid length. [ 350.408673][T12002] netlink: 'syz.2.1663': attribute type 41 has an invalid length. [ 350.483214][T12002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1663'. [ 350.644820][T12005] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1665'. [ 350.859525][T12017] ================================================================== [ 350.867658][T12017] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x677/0xcf0 [ 350.875511][T12017] Write of size 8 at addr ffff888030d10658 by task syz.2.1667/12017 [ 350.883509][T12017] [ 350.885865][T12017] CPU: 1 UID: 0 PID: 12017 Comm: syz.2.1667 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 350.885895][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 350.885910][T12017] Call Trace: [ 350.885919][T12017] [ 350.885929][T12017] dump_stack_lvl+0x189/0x250 [ 350.885958][T12017] ? __virt_addr_valid+0x1c8/0x5c0 [ 350.885987][T12017] ? rcu_is_watching+0x15/0xb0 [ 350.886006][T12017] ? __kasan_check_byte+0x12/0x40 [ 350.886037][T12017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.886061][T12017] ? rcu_is_watching+0x15/0xb0 [ 350.886083][T12017] ? lock_release+0x4b/0x3e0 [ 350.886117][T12017] ? __virt_addr_valid+0x1c8/0x5c0 [ 350.886143][T12017] ? __virt_addr_valid+0x4a5/0x5c0 [ 350.886171][T12017] print_report+0xca/0x240 [ 350.886191][T12017] ? __bpf_get_stackid+0x677/0xcf0 [ 350.886221][T12017] kasan_report+0x118/0x150 [ 350.886252][T12017] ? __bpf_get_stackid+0x677/0xcf0 [ 350.886286][T12017] ? __alloc_pages_noprof+0xa/0x30 [ 350.886308][T12017] __bpf_get_stackid+0x677/0xcf0 [ 350.886347][T12017] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 350.886368][T12017] bpf_get_stackid_raw_tp+0x196/0x210 [ 350.886397][T12017] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 350.886415][T12017] bpf_trace_run4+0x28e/0x4a0 [ 350.886443][T12017] ? bpf_trace_run4+0x19c/0x4a0 [ 350.886471][T12017] ? __pfx_bpf_trace_run4+0x10/0x10 [ 350.886501][T12017] ? percpu_ref_get_many+0x19/0x140 [ 350.886532][T12017] ? percpu_ref_get_many+0x19/0x140 [ 350.886565][T12017] trace_mm_page_alloc+0x129/0x150 [ 350.886587][T12017] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 350.886610][T12017] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 350.886634][T12017] ? __kmalloc_node_noprof+0x293/0x4e0 [ 350.886663][T12017] ? bpf_map_area_alloc+0x64/0x180 [ 350.886698][T12017] __alloc_pages_noprof+0xa/0x30 [ 350.886717][T12017] bpf_ringbuf_alloc+0x18a/0x590 [ 350.886739][T12017] ? bpf_map_init_from_attr+0x14a/0x340 [ 350.886771][T12017] ringbuf_map_alloc+0x1c8/0x2f0 [ 350.886804][T12017] map_create+0xaa0/0x14d0 [ 350.886833][T12017] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 350.886870][T12017] ? security_bpf+0x7e/0x300 [ 350.886900][T12017] __sys_bpf+0x60f/0x870 [ 350.886928][T12017] ? __pfx___sys_bpf+0x10/0x10 [ 350.886969][T12017] ? rcu_is_watching+0x15/0xb0 [ 350.886993][T12017] __x64_sys_bpf+0x7c/0x90 [ 350.887018][T12017] do_syscall_64+0xfa/0x3b0 [ 350.887048][T12017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.887069][T12017] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 350.887092][T12017] ? clear_bhb_loop+0x60/0xb0 [ 350.887116][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.887136][T12017] RIP: 0033:0x7f5fa638ebe9 [ 350.887154][T12017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.887173][T12017] RSP: 002b:00007f5fa71b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.887196][T12017] RAX: ffffffffffffffda RBX: 00007f5fa65b6090 RCX: 00007f5fa638ebe9 [ 350.887213][T12017] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 350.887227][T12017] RBP: 00007f5fa6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 350.887241][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.887254][T12017] R13: 00007f5fa65b6128 R14: 00007f5fa65b6090 R15: 00007ffc41f2c4c8 [ 350.887279][T12017] [ 350.887287][T12017] [ 351.216859][T12017] Allocated by task 12017: [ 351.221290][T12017] kasan_save_track+0x3e/0x80 [ 351.226064][T12017] __kasan_kmalloc+0x93/0xb0 [ 351.230665][T12017] __kmalloc_node_noprof+0x276/0x4e0 [ 351.235963][T12017] bpf_map_area_alloc+0x64/0x180 [ 351.240921][T12017] prealloc_elems_and_freelist+0x86/0x1d0 [ 351.246640][T12017] stack_map_alloc+0x33f/0x4c0 [ 351.251414][T12017] map_create+0xaa0/0x14d0 [ 351.255844][T12017] __sys_bpf+0x60f/0x870 [ 351.260097][T12017] __x64_sys_bpf+0x7c/0x90 [ 351.264544][T12017] do_syscall_64+0xfa/0x3b0 [ 351.269064][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.274960][T12017] [ 351.277287][T12017] The buggy address belongs to the object at ffff888030d10000 [ 351.277287][T12017] which belongs to the cache kmalloc-cg-2k of size 2048 [ 351.291602][T12017] The buggy address is located 24 bytes to the right of [ 351.291602][T12017] allocated 1600-byte region [ffff888030d10000, ffff888030d10640) [ 351.306264][T12017] [ 351.308592][T12017] The buggy address belongs to the physical page: [ 351.315020][T12017] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30d10 [ 351.323805][T12017] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 351.332312][T12017] memcg:ffff888027a4a301 [ 351.336557][T12017] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 351.344546][T12017] page_type: f5(slab) [ 351.348539][T12017] raw: 00fff00000000040 ffff88801a44b3c0 0000000000000000 dead000000000001 [ 351.357134][T12017] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888027a4a301 [ 351.365725][T12017] head: 00fff00000000040 ffff88801a44b3c0 0000000000000000 dead000000000001 [ 351.374397][T12017] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888027a4a301 [ 351.383068][T12017] head: 00fff00000000003 ffffea0000c34401 00000000ffffffff 00000000ffffffff [ 351.391748][T12017] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 351.400416][T12017] page dumped because: kasan: bad access detected [ 351.406834][T12017] page_owner tracks the page as allocated [ 351.412544][T12017] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5874, tgid 5874 (syz-executor), ts 87339508741, free_ts 87284884481 [ 351.433903][T12017] post_alloc_hook+0x240/0x2a0 [ 351.438674][T12017] get_page_from_freelist+0x21e4/0x22c0 [ 351.444218][T12017] __alloc_frozen_pages_noprof+0x181/0x370 [ 351.450024][T12017] alloc_pages_mpol+0x232/0x4a0 [ 351.454884][T12017] allocate_slab+0x8a/0x370 [ 351.459394][T12017] ___slab_alloc+0xbeb/0x1410 [ 351.464083][T12017] __kmalloc_noprof+0x305/0x4f0 [ 351.468944][T12017] __register_sysctl_table+0x72/0x1340 [ 351.474406][T12017] __devinet_sysctl_register+0x37f/0x470 [ 351.480043][T12017] devinet_sysctl_register+0x187/0x200 [ 351.485505][T12017] inetdev_init+0x2b4/0x500 [ 351.490008][T12017] inetdev_event+0x301/0x15b0 [ 351.494688][T12017] notifier_call_chain+0x1b6/0x3e0 [ 351.499800][T12017] register_netdevice+0x1608/0x1ae0 [ 351.505001][T12017] ipcaif_newlink+0x20c/0x4f0 [ 351.509690][T12017] rtnl_newlink_create+0x30d/0xb00 [ 351.514802][T12017] page last free pid 5866 tgid 5866 stack trace: [ 351.521125][T12017] __free_frozen_pages+0xbc4/0xd30 [ 351.526247][T12017] __put_partials+0x156/0x1a0 [ 351.530932][T12017] put_cpu_partial+0x17c/0x250 [ 351.535700][T12017] __slab_free+0x2d5/0x3c0 [ 351.540117][T12017] qlist_free_all+0x97/0x140 [ 351.544711][T12017] kasan_quarantine_reduce+0x148/0x160 [ 351.550175][T12017] __kasan_slab_alloc+0x22/0x80 [ 351.555035][T12017] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 351.560517][T12017] __kernfs_new_node+0xd7/0x7e0 [ 351.565380][T12017] kernfs_new_node+0x102/0x210 [ 351.570151][T12017] __kernfs_create_file+0x4b/0x2e0 [ 351.575271][T12017] sysfs_add_file_mode_ns+0x238/0x300 [ 351.580653][T12017] internal_create_group+0x66d/0x1110 [ 351.586027][T12017] sysfs_create_groups+0x59/0x120 [ 351.591056][T12017] device_add_attrs+0xe0/0x5a0 [ 351.595819][T12017] device_add+0x496/0xb50 [ 351.600147][T12017] [ 351.602474][T12017] Memory state around the buggy address: [ 351.608103][T12017] ffff888030d10500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 351.616161][T12017] ffff888030d10580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 351.624227][T12017] >ffff888030d10600: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 351.632281][T12017] ^ [ 351.639213][T12017] ffff888030d10680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 351.647293][T12017] ffff888030d10700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 351.655350][T12017] ================================================================== [ 351.669285][T12017] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 351.676517][T12017] CPU: 1 UID: 0 PID: 12017 Comm: syz.2.1667 Not tainted 6.17.0-rc1-syzkaller-ge4414b01c1cd #0 PREEMPT(full) [ 351.688154][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 351.698213][T12017] Call Trace: [ 351.701500][T12017] [ 351.704433][T12017] dump_stack_lvl+0x99/0x250 [ 351.709034][T12017] ? __asan_memcpy+0x40/0x70 [ 351.713632][T12017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.718841][T12017] ? __pfx__printk+0x10/0x10 [ 351.723449][T12017] vpanic+0x281/0x750 [ 351.727443][T12017] ? irqentry_enter+0x3d/0x60 [ 351.732133][T12017] ? __pfx_vpanic+0x10/0x10 [ 351.736648][T12017] ? irqentry_exit+0x74/0x90 [ 351.741254][T12017] panic+0xb9/0xc0 [ 351.744983][T12017] ? __pfx_panic+0x10/0x10 [ 351.749403][T12017] ? __bpf_get_stackid+0x677/0xcf0 [ 351.754532][T12017] ? __bpf_get_stackid+0x677/0xcf0 [ 351.759658][T12017] check_panic_on_warn+0x89/0xb0 [ 351.764630][T12017] ? __bpf_get_stackid+0x677/0xcf0 [ 351.769758][T12017] end_report+0x78/0x160 [ 351.774032][T12017] kasan_report+0x129/0x150 [ 351.778553][T12017] ? __bpf_get_stackid+0x677/0xcf0 [ 351.783679][T12017] ? __alloc_pages_noprof+0xa/0x30 [ 351.788790][T12017] __bpf_get_stackid+0x677/0xcf0 [ 351.793754][T12017] ? bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 351.799393][T12017] bpf_get_stackid_raw_tp+0x196/0x210 [ 351.804777][T12017] bpf_prog_12712c88fd19bd5b+0x2a/0x32 [ 351.810234][T12017] bpf_trace_run4+0x28e/0x4a0 [ 351.814919][T12017] ? bpf_trace_run4+0x19c/0x4a0 [ 351.819777][T12017] ? __pfx_bpf_trace_run4+0x10/0x10 [ 351.824984][T12017] ? percpu_ref_get_many+0x19/0x140 [ 351.830191][T12017] ? percpu_ref_get_many+0x19/0x140 [ 351.835402][T12017] trace_mm_page_alloc+0x129/0x150 [ 351.840518][T12017] __alloc_frozen_pages_noprof+0x1d6/0x370 [ 351.846327][T12017] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 351.852655][T12017] ? __kmalloc_node_noprof+0x293/0x4e0 [ 351.858116][T12017] ? bpf_map_area_alloc+0x64/0x180 [ 351.863260][T12017] __alloc_pages_noprof+0xa/0x30 [ 351.868199][T12017] bpf_ringbuf_alloc+0x18a/0x590 [ 351.873143][T12017] ? bpf_map_init_from_attr+0x14a/0x340 [ 351.878700][T12017] ringbuf_map_alloc+0x1c8/0x2f0 [ 351.883652][T12017] map_create+0xaa0/0x14d0 [ 351.888076][T12017] ? __pfx___sanitizer_cov_trace_const_cmp4+0x10/0x10 [ 351.894848][T12017] ? security_bpf+0x7e/0x300 [ 351.899451][T12017] __sys_bpf+0x60f/0x870 [ 351.903702][T12017] ? __pfx___sys_bpf+0x10/0x10 [ 351.908485][T12017] ? rcu_is_watching+0x15/0xb0 [ 351.913254][T12017] __x64_sys_bpf+0x7c/0x90 [ 351.917678][T12017] do_syscall_64+0xfa/0x3b0 [ 351.922202][T12017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.928274][T12017] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 351.934434][T12017] ? clear_bhb_loop+0x60/0xb0 [ 351.939120][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.945015][T12017] RIP: 0033:0x7f5fa638ebe9 [ 351.949434][T12017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.969044][T12017] RSP: 002b:00007f5fa71b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.977470][T12017] RAX: ffffffffffffffda RBX: 00007f5fa65b6090 RCX: 00007f5fa638ebe9 [ 351.985448][T12017] RDX: 0000000000000048 RSI: 00002000000007c0 RDI: 0000000000000000 [ 351.993423][T12017] RBP: 00007f5fa6411e19 R08: 0000000000000000 R09: 0000000000000000 [ 352.001396][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.009369][T12017] R13: 00007f5fa65b6128 R14: 00007f5fa65b6090 R15: 00007ffc41f2c4c8 [ 352.017354][T12017] [ 352.020745][T12017] Kernel Offset: disabled [ 352.025068][T12017] Rebooting in 86400 seconds..