last executing test programs: 1m16.506710825s ago: executing program 2 (id=2185): r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x81, 0x7, 0x9, 0x7, 0x0, 0xffffffff, 0x2200, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffffd, 0x0, @perf_config_ext={0x101, 0x5}, 0x4010, 0x8, 0x8, 0xb, 0x6, 0x28, 0x48d1, 0x0, 0x8, 0x0, 0x1}, 0xffffffffffffffff, 0x200007, r0, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlink(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003c00010324bd7000fcffffff0a00000008000300", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x1, 0x0, 0x4, 0x3, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xffffe00002000000}, 0x0, 0x6, 0x7, 0x0, 0x0, 0x40000}) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000bd7b41b8779ce7852bc01df1c22c041001000001000000dc0000e9583eb277d3b58b7f422421b9d03ed2f5ca6c15ae49902c63c4cc76fdf8fd8fac3e197690e4e67a2c90036634289b56ec930a53"], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) socketpair(0x1, 0xa, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f2, &(0x7f0000000500)='\x01') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 1m16.374078262s ago: executing program 2 (id=2188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000003a3e3857a56e00"/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x50, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x8, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fef2000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x5}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, &(0x7f0000000ac0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd64, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x8, 0x0, 0x0}}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r4, 0x0, 0x3f, 0x51, &(0x7f0000000340)="3d4732a25ec033af598bf123177cde07e90ab224d73e241ddbcab356b71179c59fd1b24130ae2504f43d8aee434eece8ae72d7bc7a2e9042fd2860f61be662", &(0x7f0000000580)=""/81, 0x2, 0x0, 0x3, 0xc3, &(0x7f0000000600)="01be11", &(0x7f0000000780)="b643e581d83a65416a5eb3dd3a0894f5c88b1a6a840adec4fdaa9a8a95e0d9d69d1bc891778e55260b3670fcd6ff2095d29bca0797e4b7dbd4f92ff80ee0ff4ebf45df576edabbe583798c0dd6a9cb50ddc3234d3d47fc2bfbb335fb0eba0ff446f500144ec63caae67d0f57974dfe703a8cbdb9d5050d5d1ef9d585835a97c9f6acaf53392d2303d00517708cac61823034d5d266383041de1f6081442a9b6f3a24716a41108d8b7f872fa99120602599a565ccb6fc8488eb74deb83a6623e1503b77", 0x4}, 0x50) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006911b900000000008510000002000000850000008800000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000640)={r4}, 0x8) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000940)={r11, &(0x7f0000001980)="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", &(0x7f0000000a00)=""/160}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1000000830d}, 0x0, 0x2, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r12, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x7, &(0x7f0000000300), 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x38}, 0x0) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r13, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x308000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x140f, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x44}}, 0x20000800) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) 1m13.99948468s ago: executing program 2 (id=2195): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x55, 0x9}, 0xc042, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket$kcm(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000f2ec00000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa00000000000000"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x8, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000240)={0x2, 0xfffffffffffffe3c, 0x4a, 0x1, 0x0, 0x1, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x7fffffff}, 0x0, 0x1, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x72, &(0x7f0000000000)=r6, 0xc) 1m13.666401819s ago: executing program 2 (id=2203): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x6, 0xf, 0x0, 0xc, 0x0, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x2, @perf_config_ext={0x83, 0x4}, 0x114905, 0x7, 0x6, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000580)="914781cba1", 0xffe3}], 0x2}, 0x48800) close(r2) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x1}, 0xc042, 0xc8, 0x0, 0x0, 0x0, 0x2000000, 0xfffb, 0x0, 0x7ff, 0x0, 0x95}, 0x0, 0x10000000, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000f2ec00000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x5}, 0x40, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72a, 0x0, 0xfffffffffffffffe}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/284], 0xf0}}, 0x800) socket$kcm(0x10, 0x5, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xffffffffffffffc0, 0x0, 0x8, 0x401, 0x7ffffffe, 0x89, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x48, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x106000, 0x0, 0x80000001, 0x6, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000300)='cgroup.procs\x00', 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) 1m13.522285137s ago: executing program 2 (id=2205): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0xc042, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket$kcm(0xa, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84020, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000f2ec00000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x2, 0x8, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x8, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xd, 0x4}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1948}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x6, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x4, 0x1, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) 1m9.838702236s ago: executing program 2 (id=2229): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x27, 0xfffffffffffffda9, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xb, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3801000022950a10000100fefff7ff00010000fe880000000000000000000000000001fc1ba54282a99f4b3800000000000001e7fdcb636728c8f8000107144e230005000000003a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8800000000000029a0fb34e00c373f8318e086ddaa910000000000000001fc01000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002426d2c4300000000000000"], 0x10}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x0, 0x18, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0xffffffffffffffeb, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) 54.836802284s ago: executing program 32 (id=2229): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0xc, &(0x7f00000008c0)=ANY=[@ANYRES16=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x27, 0xfffffffffffffda9, 0x0, &(0x7f0000000180)="f9ad48cc429d29fc", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xb, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3801000022950a10000100fefff7ff00010000fe880000000000000000000000000001fc1ba54282a99f4b3800000000000001e7fdcb636728c8f8000107144e230005000000003a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff400000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe8800000000000029a0fb34e00c373f8318e086ddaa910000000000000001fc01000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002426d2c4300000000000000"], 0x10}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r7, 0x0, 0x18, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0xffffffffffffffeb, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a000000140007800500150000000000080012"], 0x60}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x5}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x48030) 4.16050867s ago: executing program 1 (id=2795): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}, {&(0x7f00000000c0)="749a9058ec92fa866a8f6fa5bb54", 0xe}], 0x2}, 0x0) 4.007703069s ago: executing program 1 (id=2796): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xaa5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000340), 0xc) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @remote}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, 0x0, &(0x7f00000007c0)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0xb}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) 3.101024674s ago: executing program 3 (id=2803): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x820a4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xe}, 0xc042, 0xc8, 0x0, 0x0, 0x0, 0x0, 0xfffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0xa, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000f2ec00000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0xc, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$inet(0x2, 0xa, 0xb8) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x401, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x40002102) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x6, &(0x7f0000000040), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) sendmsg$unix(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 2.906621006s ago: executing program 0 (id=2805): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={{0x14, 0x3ea}, [@NFT_MSG_DELSETELEM={0x14}], {0x14, 0x3ea}}, 0x3c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x1c, 0x10, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x8, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2c00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000600)='GPL\x00', 0x6, 0x66, &(0x7f00000006c0)=""/102, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) 2.905112601s ago: executing program 1 (id=2806): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}, {&(0x7f00000000c0)="749a9058ec92fa866a8f6fa5bb54", 0xe}], 0x2}, 0x0) 2.692576164s ago: executing program 1 (id=2810): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, 0x23, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240080d1}, 0x8010) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x8001, 0x0, r6, 0x400, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000680)={&(0x7f0000000600)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)="65255264ab551ddf8b85c8b1641b3419fe5a630fe00545f887ecc6", 0x1b}, {&(0x7f0000000200)}, {&(0x7f0000000300)="5e4e8294bc2dda1f7e7f36d408bfdddb4dc4be74c4c856994312e495b685986223caa80df3a4e7bd221269dd85408412ad4402533f65cefb", 0x38}, {&(0x7f0000000840)="12c9b0a33955a39b0218bb755ccb57970e8f46e04d65bab13a27a4d6fac488879ff39a7dd7a7b915a922763c6320ff0eab49c6669eacd72671f0449c4b086c9d1652ddf8faa4a425fead125ea8833a6ba48fa4f1dc8bd7b90c83ec63c59210ce024eb11b7c857fc56baceeddf9c6ae7574ae26653893ee2693997bb35085b41990de59ed72344337772c57fb7fd193d13e341d917acc0578a926be349ebd5d37ebb70ce736c3eb9a3a8d348292d4c5603ab992c0b6a1f6bfd8589037ffcd00a5e19d12a0ffddbb00fe5ed373a0e9f7f5950cd69125bfb9137060e09ac396394d0084cb991b01c7f27f6fab3f18954a1b", 0xf0}, {&(0x7f0000000940)="e3ee3d8a88cd06f9c337c9b5901b8adae7b475761a9ef7de0b70f76ffcef3c28715b3a120059de88851e2b28693dd39d1c0e4eaf33861c724b1dbac4e67cd890e7e0ae7af41a0d570798e9d36c1e850e12f03539429cc7e16109ca099c208dd04d5b36bde1bbd309e6137510ea0f72106121524e5dd32484abce13b653adace25b655c1d6403d284794f471ea104068d34be0abd8c380b6629d4f68d694d34e4a14c0da375f746e5ba9e2c944f8e64a417f7b054f3a71c6c7e1234c2d75946e77f38362f", 0xc4}], 0x5, &(0x7f0000000a40)=[{0xb8, 0x11, 0x9, "9da35054ac8c06c17c70acfab124316e1c95f245d1737ef59e55fae5944ad02258e8637697ddf86f84ec7c4aa762d37e3b18c013a7cc08f0a164735e9b5794290841a236ddebe58548007a1aab4fa4d9411784561fe4ef65f737314bcae59761d0aabda7bd86b8a7049d61fc72fdb07869d30c23f74f720b8e309f599d0271f20aaa5687e8bef51429ab52b0f15f0a20bf35378d810195dc832bba1c65d03009a2ff"}], 0xb8}, 0x24000000) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2.531423723s ago: executing program 3 (id=2811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021ec0700000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000c0070380bc0700800800034000000002b0070b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f7461000000100002800c0001"], 0x870}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0800000001000080ff0f00000400000000010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYRES32, @ANYBLOB="000000000300"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.351383301s ago: executing program 3 (id=2812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, 0x0, 0x8000) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x4040) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x10000040) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 2.299517409s ago: executing program 3 (id=2813): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}, 0x0, 0x1000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.992959924s ago: executing program 5 (id=2815): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x87}, [@call={0x85, 0x0, 0x0, 0x1c}], {0x95, 0x0, 0x0, 0xf3ffffff}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) 1.98196981s ago: executing program 0 (id=2816): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2101, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x5}, 0xa38, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xfffd, 0x0, 0x0, 0x0, 0x3d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xcb, 0xfffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002240)=[{0x10, 0x84, 0xffffffff}, {0x10, 0x119, 0x1}, {0x28, 0x107, 0xfffffffd, "2fc290f449f2b51b58ea50b8720df2caf3"}, {0x138, 0x0, 0x7, "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"}], 0x180}, 0x4000080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2f, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x11, 0x0, 0x0, &(0x7f0000000600)=[@cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred, @cred, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x828, 0x0, 0x0, 0x2, 0x9, 0x800000, 0x4, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000d5aa1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x90}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/12, 0xc}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sched_cls=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x40}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 1.890648232s ago: executing program 3 (id=2817): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xaa5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000340), 0xc) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @remote}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, 0x0, &(0x7f00000007c0)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0xb}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x10, 0x1403, 0x1, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) 1.566860739s ago: executing program 5 (id=2818): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'wm\x00'}, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xf, 0x8, 0x0, 0x0, 0x0, 0x6, 0xe0090, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0xd}, 0x2024, 0x1c00000000, 0x3ff, 0x0, 0x0, 0x8000, 0x81, 0x0, 0xfff, 0x0, 0x9e}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x2a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x99d}, @map_val={0x18, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0x4, 0x8, 0x9, 0x8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x0, 0x7, 0xb2d6, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0xffffffffffffffff], &(0x7f0000000380)=[{0x1, 0x2, 0x8, 0x8}, {0x3, 0x2, 0x9}, {0x3, 0x2, 0xb, 0x8}, {0x0, 0x2, 0x2, 0x3}], 0x10, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) fstat(r2, &(0x7f0000000700)) (async) fstat(r2, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x25, 0x10, @val=@tcx={@void, @value=r1}}, 0x1c) sendmsg$unix(r3, &(0x7f00000008c0)={&(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000500)="1bdd2a4347fd386fb8068ad660a69be8d11e472cb29549ea98f41721ff3be368dcbab7e64ad06db85cd913f1d0441da1a7b0a2a0da4a14d538883c46a71fdc3ccd9980ef83fcc6fd0b42fbc384ab8da685db644917605d3cd7186af7c7df3f5e1499f4ef2928a27939422e64bde7741f9ece209b28c384c07669dd5466f57ce0caa47a1fffec96582032b349dc8b3163dd7d8722", 0x94}, {&(0x7f00000005c0)="6ff6df69f2c81c9cab208f1d889a87c98cb37d61bc19e91a06991c86b0ee8ff1c1ac9992be2cbddbc7016377ecb5f03c72a4a380e796ea234d477538681a25d78fdd499778aeae9400584f3995b966d9147160c19481b77f30503dd11d074da6f80092087b88b1254577c931769d1ddd3fe858ca30e1ca201f2a9a8d4b32c00340dbc83aa48f42fb18fac12a251f73e1e21d3189225dbb83b46c5febf7f285dd08b6d5fbf28047a1081dc2bc7a5eab087596632f5cad9b1ade1b6726ff50e587485cf5b34459022f057a5cd8583dbb6c54394ea50ff16e5134daec53be677947de7002bba70c9e11907a11cbfbbcecb883", 0xf1}], 0x2, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r6, r1]}}, @rights={{0x20, 0x1, 0x1, [r0, r2, r1, r1]}}], 0x70, 0x4000001}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x97, 0x97, 0x6, [@fwd={0xf}, @datasec={0x3, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x101, 0xd}, {0x2, 0x2, 0x1}, {0x4, 0x7f, 0xfff}, {0x4, 0xc60c}, {0x4, 0x8, 0x3}, {0x3, 0x6, 0xa34e}, {0x1, 0x7}], "d8f295"}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x6b}, @ptr={0x7, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000c40)=""/117, 0xb6, 0x75, 0x1, 0x0, 0x10000}, 0x28) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000cc0)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x97, 0x97, 0x6, [@fwd={0xf}, @datasec={0x3, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x101, 0xd}, {0x2, 0x2, 0x1}, {0x4, 0x7f, 0xfff}, {0x4, 0xc60c}, {0x4, 0x8, 0x3}, {0x3, 0x6, 0xa34e}, {0x1, 0x7}], "d8f295"}, @restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x6b}, @ptr={0x7, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x61, 0x5f, 0x2e, 0x61]}}, &(0x7f0000000c40)=""/117, 0xb6, 0x75, 0x1, 0x0, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0x20, &(0x7f0000000ec0)={&(0x7f0000000d40)=""/177, 0xb1, 0x0, &(0x7f0000000e00)=""/177, 0xb1}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) (async) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x5}, 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4}, 0x50) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x38, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000010c0)={0x1, 0xffffffffffffffff}, 0x4) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000011c0)=@bpf_lsm={0x1d, 0x19, &(0x7f0000000a00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @alu={0x7, 0x0, 0xb, 0x8, 0x3, 0x100, 0x4}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xb}], &(0x7f0000000b00)='syzkaller\x00', 0xc, 0x24, &(0x7f0000000b40)=""/36, 0x41000, 0x0, '\x00', 0x0, 0x1b, r9, 0x8, &(0x7f0000000d00)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r10, 0x0, 0x6, &(0x7f0000001100)=[r11, r12, r2, r13, 0xffffffffffffffff, r14], &(0x7f0000001140)=[{0x3, 0x5, 0x7, 0x7}, {0x3, 0x3, 0x9, 0x2}, {0x1, 0x2, 0xe, 0xc}, {0x2, 0x4, 0x1, 0x4}, {0x2, 0x3, 0xb, 0x4}, {0x5, 0x3, 0xd, 0x7}], 0x10, 0x5}, 0x94) r16 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000012c0)=@generic={&(0x7f0000001280)='./file0\x00'}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={r16, 0x0, 0x27, 0x5, &(0x7f0000001300)="2a92b67eeb524bdf63c8084bd5502b3c9d4b1ff0ecad936e482dbe50a99df6fc03c6929dd93b42", &(0x7f0000001340)=""/5, 0x1, 0x0, 0x1e, 0x7f, &(0x7f0000001380)="a01986a3cf474f3d25fa78ab6ec4e491aa4031966b9fe8134741d64ceb3d", &(0x7f00000013c0)="be3be383bd2acee35131bf520efd81be5257e62d1061eb9c790df33ab6af81f40ce49c4c09e50433521731b6a908f7472a484fb2e3d5311248f113dc67136fd388251fd7c29f96e21d40ee320f957c6126952ca88d6a6b56576e46a0489d5e5921fd821ce93645a04006b206a145db36eaf328170758fdf49979cfd9a86318", 0x0, 0x0, 0x6}, 0x50) ioctl$TUNSETQUEUE(r12, 0x400454d9, &(0x7f00000014c0)={'veth0_to_batadv\x00', 0x600}) getpid() (async) r17 = getpid() syz_open_procfs$namespace(r17, &(0x7f0000001500)='ns/time\x00') ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x9) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001640)={@cgroup=r9, 0x8, 0x0, 0x9, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0], &(0x7f0000001600)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)={@fallback=r14, r15, 0x7, 0x1000, 0x0, @void, @value=r16, @void, @void, r18}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001680)={@fallback=r14, r15, 0x7, 0x1000, 0x0, @void, @value=r16, @void, @void, r18}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f00000016c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x90, 0x90, 0x3, [@const={0x7}, @fwd={0xe}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}, @union={0x3, 0x2, 0x0, 0x5, 0x1, 0x9, [{0x4, 0x1, 0x1}, {0xf, 0x2, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x8}}, @restrict={0xe, 0x0, 0x0, 0xb, 0x1}, @union={0x2, 0x2, 0x0, 0x5, 0x0, 0x5c9, [{0xa, 0x5, 0x80000000}, {0xb, 0x2, 0xb}]}]}, {0x0, [0x61]}}, &(0x7f0000001780)=""/34, 0xab, 0x22, 0x1, 0x4, 0x10000}, 0x28) openat$cgroup_devices(r14, &(0x7f0000001800)='devices.deny\x00', 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) 1.565584808s ago: executing program 5 (id=2819): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xaa5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000340), 0xc) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @remote}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, &(0x7f0000000780), &(0x7f00000007c0)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x17, 0x3, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x25}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}], 0x0, 0x0, 0xc8, &(0x7f0000000600)=""/200, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffffffffffd}}, [@tmpl={0x84, 0x5, [{{@in6=@empty, 0x0, 0x6c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x9dd60b240e04ce1f, @in6=@mcast2, 0x0, 0x4, 0x2}]}]}, 0x13c}}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0xb}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x7, 0x0, &(0x7f0000000080)="05804ab3828443", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) 1.293937633s ago: executing program 1 (id=2820): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@initr0], {0x95, 0x0, 0x0, 0x18}}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=ANY=[@ANYBLOB="1b000000ffe6804200000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x3, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x4, '\x00', 0x0, r2, 0x3, 0x4, 0x2, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400"/15, @ANYRES32, @ANYBLOB="0000000000000000b70a0000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000071009154090893b3520ba54a"], 0xfe33) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 1.131174732s ago: executing program 4 (id=2821): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2000200036000701fcffffff0000811e017c00000c0004009705000000000100"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x40008000, &(0x7f0000001980)="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", 0x1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="bdbdc56425e47edea665d6477673a005c6aa77d3c7f2") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffffe}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x3f, &(0x7f0000000680), 0x0, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x5a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@ifindex=r6, 0xd, 0x0, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c000004004580480201"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x140e, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40c4) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r12, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000a14000426bd7000fcdbdf25080001000100000008000300020000000800010000000500"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0xc001) recvmsg$kcm(r10, &(0x7f00000005c0)={&(0x7f0000000440)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f00000008c0)=""/137, 0x89}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000000980)=""/233, 0xe9}], 0x4}, 0x6101) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.sectors\x00', 0x0, 0x0) recvmsg$kcm(r13, &(0x7f0000000c80)={&(0x7f0000000a80)=@alg, 0x80, &(0x7f0000000700)=[{&(0x7f0000000b00)=""/112, 0x70}, {&(0x7f0000000680)=""/13, 0xd}], 0x2, &(0x7f0000000b80)=""/248, 0xf8}, 0x10000) 987.470508ms ago: executing program 4 (id=2822): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000000000070c192000fbcef43b45665733a7dacec8afd2ad2c7f26ced96b1a711518e8709e921c21448b9539e367c07415329ee0709dace250c6ca5cf03eee60435f000a0ce"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x2, 0x0, 0x1000000000}, {0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x40}, {{@in=@remote, 0x0, 0x32}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 945.138082ms ago: executing program 3 (id=2823): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x8, 0x2, 0x104}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000000), &(0x7f00000000c0)='%pS \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x9}}, 0x10, 0x0}, 0x44) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001946}, 0x10401, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="280100001700010025bd700000000000ff0100000000000000000000000000010000000000000000fe8000000000000000000000000000bbff010000000000000000000000000001ffffffff0000000000000000000000004e210000000000000a00006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000155888c2645ff410a6ae70ce8fe800000000000000000e1730e713c5b35fa6ea467bf5cec8ce9ef2a662a49bb00000000000000000a04802000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff00"/64], 0x128}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x5}, 0x104101, 0x4, 0x9, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) socket$kcm(0xa, 0x5, 0x0) 853.4051ms ago: executing program 0 (id=2824): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006", 0xa2}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929", 0x83}], 0x1, 0x0, 0xf}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000340)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB='-'], 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x200a4800) recvmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098"], 0xfc}}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a88848b96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x800, 0x28034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x78, 0x3f}, 0x0, 0x2, 0x5, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x16) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63e8ffffffffffffff80002000000000101000007f0600080000000000000009000000000000001184"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x3, 0x41, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c13c00fe"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c000280080001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_generic(r3, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={&(0x7f0000005940)={0x14, 0x26, 0x1, 0x70bd2b, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x10) 850.799852ms ago: executing program 4 (id=2825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d1000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000200000008500000082000000180100002020642500000000002020207b1af8ff00000000bfa1e87db57e05d5f86e000000000000070100f9ffffffffb702000008000000b70300000600000085000000000000000e66000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0x1946}, 0x8, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r6 = getpid() openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz1\x00', 0x1ff) r8 = openat$cgroup(r7, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000280)=r6, 0x12) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) r10 = syz_clone(0xc220000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = perf_event_open(&(0x7f0000000640)={0x7, 0x80, 0xec, 0x1, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0xfff}, 0x11eda, 0x4, 0x9a, 0x0, 0x6, 0xfffff271, 0x4, 0x0, 0x0, 0x0, 0x20}, r10, 0x3, 0xffffffffffffffff, 0x2) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB="00000000000002110020071900000000000000", @ANYRES32=0x0, @ANYBLOB], 0x48) 688.027608ms ago: executing program 0 (id=2826): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x7}, 0x0, 0x3, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x24}}, 0x20048010) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f00000002c0)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) socket$nl_generic(0x10, 0x3, 0x10) 678.186746ms ago: executing program 5 (id=2827): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x8, 0xc8, 0x9, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200000000}, 0x0, 0x4, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fcffffff07db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b"], 0xfdef) 590.275816ms ago: executing program 4 (id=2828): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x90, 0x30, 0x1, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x90}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 32) r3 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x300, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000008c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 485.549152ms ago: executing program 5 (id=2829): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) (fail_nth: 6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) 430.904002ms ago: executing program 0 (id=2830): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x20, 0x23, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240080d1}, 0x8010) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x8001, 0x0, r6, 0x400, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x2) r8 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000680)={&(0x7f0000000600)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000780)=[{&(0x7f00000000c0)="65255264ab551ddf8b85c8b1641b3419fe5a630fe00545f887ecc6", 0x1b}, {&(0x7f0000000200)}, {&(0x7f0000000300)="5e4e8294bc2dda1f7e7f36d408bfdddb4dc4be74c4c856994312e495b685986223caa80df3a4e7bd221269dd85408412ad4402533f65cefb", 0x38}, {&(0x7f0000000840)="12c9b0a33955a39b0218bb755ccb57970e8f46e04d65bab13a27a4d6fac488879ff39a7dd7a7b915a922763c6320ff0eab49c6669eacd72671f0449c4b086c9d1652ddf8faa4a425fead125ea8833a6ba48fa4f1dc8bd7b90c83ec63c59210ce024eb11b7c857fc56baceeddf9c6ae7574ae26653893ee2693997bb35085b41990de59ed72344337772c57fb7fd193d13e341d917acc0578a926be349ebd5d37ebb70ce736c3eb9a3a8d348292d4c5603ab992c0b6a1f6bfd8589037ffcd00a5e19d12a0ffddbb00fe5ed373a0e9f7f5950cd69125bfb9137060e09ac396394d0084cb991b01c7f27f6fab3f18954a1b", 0xf0}, {&(0x7f0000000940)="e3ee3d8a88cd06f9c337c9b5901b8adae7b475761a9ef7de0b70f76ffcef3c28715b3a120059de88851e2b28693dd39d1c0e4eaf33861c724b1dbac4e67cd890e7e0ae7af41a0d570798e9d36c1e850e12f03539429cc7e16109ca099c208dd04d5b36bde1bbd309e6137510ea0f72106121524e5dd32484abce13b653adace25b655c1d6403d284794f471ea104068d34be0abd8c380b6629d4f68d694d34e4a14c0da375f746e5ba9e2c944f8e64a417f7b054f3a71c6c7e1234c2d75946e77f38362f", 0xc4}], 0x5, &(0x7f0000000a40)=[{0xb8, 0x11, 0x9, "9da35054ac8c06c17c70acfab124316e1c95f245d1737ef59e55fae5944ad02258e8637697ddf86f84ec7c4aa762d37e3b18c013a7cc08f0a164735e9b5794290841a236ddebe58548007a1aab4fa4d9411784561fe4ef65f737314bcae59761d0aabda7bd86b8a7049d61fc72fdb07869d30c23f74f720b8e309f599d0271f20aaa5687e8bef51429ab52b0f15f0a20bf35378d810195dc832bba1c65d03009a2ff"}], 0xb8}, 0x24000000) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 363.91309ms ago: executing program 4 (id=2831): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x6, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x20000001, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x1, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x4040040) mkdir(&(0x7f0000000100)='./cgroup/../file0/file0\x00', 0xd4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000004f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000400"], 0x50) r6 = openat$cgroup_int(r5, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[], 0x27) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES8=0x0, @ANYRESHEX=r7], 0x0, 0x6, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, r8, 0x1, r3, 0xa) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 363.249613ms ago: executing program 5 (id=2832): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2000200036000701fcffffff0000811e017c00000c0004009705000000000100"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000000), 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xe, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x40008000, &(0x7f0000001980)="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", 0x1000, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="bdbdc56425e47edea665d6477673a005c6aa77d3c7f2") perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x6, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffffe}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r5, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x3f, &(0x7f0000000680), 0x0, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x5a, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@ifindex=r6, 0xd, 0x0, 0x4, &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d40)=[0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="6002000043000701fefffffffcdbdf25037c000004004580480201"], 0x260}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r11, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, 0x140e, 0x1, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x40c4) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r12, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000a14000426bd7000fcdbdf25080001000100000008000300020000000800010000000500"], 0x28}, 0x1, 0x0, 0x0, 0x5}, 0xc001) recvmsg$kcm(r10, &(0x7f00000005c0)={&(0x7f0000000440)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/172, 0xac}, {&(0x7f00000008c0)=""/137, 0x89}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f0000000980)=""/233, 0xe9}], 0x4}, 0x6101) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.sectors\x00', 0x0, 0x0) recvmsg$kcm(r13, &(0x7f0000000c80)={&(0x7f0000000a80)=@alg, 0x80, &(0x7f0000000700)=[{&(0x7f0000000b00)=""/112, 0x70}, {&(0x7f0000000680)=""/13, 0xd}], 0x2, &(0x7f0000000b80)=""/248, 0xf8}, 0x10000) 274.144545ms ago: executing program 1 (id=2833): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xaa5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000340), 0xc) syz_open_procfs$namespace(0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @remote}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{}, 0x0, &(0x7f00000007c0)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00'}, 0x94) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6, 0x0, 0xb}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x10, 0x1403, 0x1, 0x70bd26, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x20004010) 103.153764ms ago: executing program 0 (id=2834): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x42}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) sendmsg$nl_xfrm(r3, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x4}}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7ff, 0x1, 0x27a}}}}]}, 0x4c}}, 0x40000b4) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x2954b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x800000000002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r4, 0x1, 0x1, 0x538, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], &(0x7f0000000140)}, 0x40) 0s ago: executing program 4 (id=2835): perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x8180, 0x9, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x11}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2040080}, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000fe5000000000000000000000300000000020000000100"/64], 0x0, 0x43}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x4, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xebc4}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7ffffffe, 0xd, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000711197000000000016080000004000009500744100000001"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfdae, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @sock_ops}, 0x48) kernel console output (not intermixed with test programs): ttributes in process `syz.0.1649'. [ 284.179707][T11097] veth1_macvtap: left promiscuous mode [ 284.218058][T11097] macsec0: left promiscuous mode [ 284.255928][T11104] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 284.318076][T11104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1650'. [ 284.348240][T11102] veth1_macvtap: entered promiscuous mode [ 284.358013][T11102] veth1_macvtap: entered allmulticast mode [ 284.364744][T11102] macsec0: entered promiscuous mode [ 284.539824][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1652'. [ 284.683776][T11123] netlink: 'syz.2.1654': attribute type 1 has an invalid length. [ 284.790368][T11125] openvswitch: netlink: IP tunnel dst address not specified [ 284.990730][T11139] xt_l2tp: missing protocol rule (udp|l2tpip) [ 285.001237][T11141] netlink: 'syz.4.1659': attribute type 3 has an invalid length. [ 285.010449][T11141] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1659'. [ 285.353368][T11154] xt_l2tp: missing protocol rule (udp|l2tpip) [ 285.760444][T11166] xt_l2tp: missing protocol rule (udp|l2tpip) [ 285.807729][T11170] openvswitch: netlink: IP tunnel dst address not specified [ 285.964049][T11177] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 285.983598][T11177] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 286.029068][T11181] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 286.038642][T11182] netlink: 'syz.3.1671': attribute type 29 has an invalid length. [ 286.055824][T11181] netlink: 'syz.1.1673': attribute type 29 has an invalid length. [ 286.350469][T11195] xt_l2tp: missing protocol rule (udp|l2tpip) [ 286.428072][T11200] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1681'. [ 287.146495][T11220] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1686'. [ 287.174267][T11222] xt_l2tp: missing protocol rule (udp|l2tpip) [ 287.205266][T11224] veth1_macvtap: left allmulticast mode [ 287.215525][T11224] veth1_macvtap: left promiscuous mode [ 287.221059][T11224] macsec0: left promiscuous mode [ 287.299320][T11228] FAULT_INJECTION: forcing a failure. [ 287.299320][T11228] name failslab, interval 1, probability 0, space 0, times 0 [ 287.327915][T11228] CPU: 0 UID: 0 PID: 11228 Comm: syz.1.1690 Not tainted syzkaller #0 PREEMPT(full) [ 287.327941][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.327953][T11228] Call Trace: [ 287.327959][T11228] [ 287.327967][T11228] dump_stack_lvl+0x189/0x250 [ 287.327991][T11228] ? __pfx____ratelimit+0x10/0x10 [ 287.328013][T11228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.328032][T11228] ? __pfx__printk+0x10/0x10 [ 287.328060][T11228] ? __pfx___might_resched+0x10/0x10 [ 287.328083][T11228] should_fail_ex+0x414/0x560 [ 287.328108][T11228] should_failslab+0xa8/0x100 [ 287.328135][T11228] __kmalloc_noprof+0xcb/0x800 [ 287.328157][T11228] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 287.328182][T11228] tomoyo_realpath_from_path+0xe3/0x5d0 [ 287.328202][T11228] ? tomoyo_domain+0xd8/0x130 [ 287.328226][T11228] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 287.328251][T11228] tomoyo_path_number_perm+0x1e8/0x5a0 [ 287.328279][T11228] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 287.328320][T11228] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 287.328362][T11228] ? __fget_files+0x2a/0x420 [ 287.328383][T11228] ? __fget_files+0x3a0/0x420 [ 287.328397][T11228] ? __fget_files+0x2a/0x420 [ 287.328418][T11228] security_file_ioctl+0xcb/0x2d0 [ 287.328443][T11228] __se_sys_ioctl+0x47/0x170 [ 287.328467][T11228] do_syscall_64+0xfa/0xf80 [ 287.328491][T11228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.328509][T11228] ? clear_bhb_loop+0x60/0xb0 [ 287.328531][T11228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.328548][T11228] RIP: 0033:0x7fab3b18f749 [ 287.328565][T11228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.328581][T11228] RSP: 002b:00007fab3c098038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 287.328601][T11228] RAX: ffffffffffffffda RBX: 00007fab3b3e5fa0 RCX: 00007fab3b18f749 [ 287.328614][T11228] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 287.328625][T11228] RBP: 00007fab3c098090 R08: 0000000000000000 R09: 0000000000000000 [ 287.328636][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.328647][T11228] R13: 00007fab3b3e6038 R14: 00007fab3b3e5fa0 R15: 00007ffccc932268 [ 287.328676][T11228] [ 287.328686][T11228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 287.568968][T11228] veth1_macvtap: left allmulticast mode [ 287.596757][T11228] veth1_macvtap: left promiscuous mode [ 287.602409][T11228] macsec0: left promiscuous mode [ 287.662402][T11239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1692'. [ 287.707070][T11236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1688'. [ 287.798677][T11248] xt_l2tp: missing protocol rule (udp|l2tpip) [ 288.115729][T11264] validate_nla: 1 callbacks suppressed [ 288.115750][T11264] netlink: 'syz.2.1701': attribute type 2 has an invalid length. [ 288.133359][T11264] netlink: 'syz.2.1701': attribute type 2 has an invalid length. [ 288.241334][T11265] siw: device registration error -23 [ 288.257091][T11272] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1703'. [ 288.546986][T11282] netlink: 14581 bytes leftover after parsing attributes in process `syz.2.1708'. [ 288.633321][T11289] netlink: 'syz.0.1709': attribute type 10 has an invalid length. [ 288.666004][T11289] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1709'. [ 288.703298][T11289] team0: entered promiscuous mode [ 288.708507][T11289] C: entered promiscuous mode [ 288.713694][T11289] team_slave_1: entered promiscuous mode [ 288.741257][T11292] netlink: 'syz.3.1710': attribute type 1 has an invalid length. [ 288.840340][T11295] netlink: 'syz.0.1712': attribute type 29 has an invalid length. [ 288.855662][T11295] netlink: 'syz.0.1712': attribute type 29 has an invalid length. [ 288.954880][T11301] netlink: 'syz.0.1712': attribute type 29 has an invalid length. [ 288.983894][T11303] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1716'. [ 289.070226][T11309] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1718'. [ 289.082271][T11309] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1718'. [ 289.412437][T11318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 289.434231][T11318] openvswitch: netlink: Flow actions attr not present in new flow. [ 289.935164][T11324] À: port 1(vlan0) entered blocking state [ 289.951303][T11324] À: port 1(vlan0) entered disabled state [ 289.992098][T11324] vlan0: entered allmulticast mode [ 289.999644][T11324] veth0_vlan: entered allmulticast mode [ 290.019874][T11324] vlan0: entered promiscuous mode [ 290.040160][T11326] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1723'. [ 290.063946][T11325] À: port 1(vlan0) entered blocking state [ 290.069843][T11325] À: port 1(vlan0) entered forwarding state [ 290.208421][T11345] xt_l2tp: missing protocol rule (udp|l2tpip) [ 290.389301][T11355] openvswitch: netlink: IP tunnel dst address not specified [ 291.054361][T11385] openvswitch: netlink: IP tunnel dst address not specified [ 291.261621][T11391] xt_l2tp: missing protocol rule (udp|l2tpip) [ 292.051351][T11414] netlink: 'syz.4.1750': attribute type 29 has an invalid length. [ 292.064590][T11414] netlink: 'syz.4.1750': attribute type 29 has an invalid length. [ 292.077487][T11414] netlink: 'syz.4.1750': attribute type 29 has an invalid length. [ 293.018218][T11446] __nla_validate_parse: 3 callbacks suppressed [ 293.018241][T11446] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1763'. [ 293.042247][T11446] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 293.429661][T11467] dummy0: left allmulticast mode [ 293.443750][T11467] dummy0: left promiscuous mode [ 293.455448][T11467] bridge0: port 3(dummy0) entered disabled state [ 293.591220][T11467] bridge_slave_1: left allmulticast mode [ 293.597812][T11467] bridge_slave_1: left promiscuous mode [ 293.603948][T11470] validate_nla: 4 callbacks suppressed [ 293.603976][T11470] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 293.605953][T11467] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.669594][T11467] bridge_slave_0: left allmulticast mode [ 293.678104][T11467] bridge_slave_0: left promiscuous mode [ 293.688337][T11467] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.756086][T11467] bond0: (slave bridge0): Releasing backup interface [ 293.955762][T11479] netlink: 'syz.2.1773': attribute type 11 has an invalid length. [ 294.506149][T11493] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1779'. [ 294.842130][T11507] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1784'. [ 295.116775][T11511] geneve1: entered allmulticast mode [ 295.247386][T11524] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 295.278539][T11513] option changes via remount are deprecated (pid=11512 comm=syz.3.1787) [ 295.388753][T11531] FAULT_INJECTION: forcing a failure. [ 295.388753][T11531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.410954][T11531] CPU: 0 UID: 0 PID: 11531 Comm: syz.3.1794 Not tainted syzkaller #0 PREEMPT(full) [ 295.410983][T11531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 295.410995][T11531] Call Trace: [ 295.411002][T11531] [ 295.411012][T11531] dump_stack_lvl+0x189/0x250 [ 295.411037][T11531] ? __pfx____ratelimit+0x10/0x10 [ 295.411063][T11531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.411084][T11531] ? __pfx__printk+0x10/0x10 [ 295.411122][T11531] should_fail_ex+0x414/0x560 [ 295.411151][T11531] _copy_to_user+0x31/0xb0 [ 295.411180][T11531] simple_read_from_buffer+0xe1/0x170 [ 295.411214][T11531] proc_fail_nth_read+0x1b3/0x220 [ 295.411250][T11531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.411279][T11531] ? rw_verify_area+0x2a6/0x4d0 [ 295.411302][T11531] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 295.411328][T11531] vfs_read+0x200/0xa30 [ 295.411350][T11531] ? fdget_pos+0x247/0x320 [ 295.411372][T11531] ? __pfx___mutex_lock+0x10/0x10 [ 295.411398][T11531] ? __pfx_vfs_read+0x10/0x10 [ 295.411423][T11531] ? __fget_files+0x2a/0x420 [ 295.411445][T11531] ? __fget_files+0x3a0/0x420 [ 295.411461][T11531] ? __fget_files+0x2a/0x420 [ 295.411488][T11531] ksys_read+0x145/0x250 [ 295.411511][T11531] ? __fget_files+0x2a/0x420 [ 295.411529][T11531] ? __pfx_ksys_read+0x10/0x10 [ 295.411556][T11531] ? do_syscall_64+0xbe/0xf80 [ 295.411587][T11531] do_syscall_64+0xfa/0xf80 [ 295.411610][T11531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.411628][T11531] ? clear_bhb_loop+0x60/0xb0 [ 295.411651][T11531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.411669][T11531] RIP: 0033:0x7f91ac38e15c [ 295.411686][T11531] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 295.411703][T11531] RSP: 002b:00007f91ad241030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 295.411724][T11531] RAX: ffffffffffffffda RBX: 00007f91ac5e5fa0 RCX: 00007f91ac38e15c [ 295.411738][T11531] RDX: 000000000000000f RSI: 00007f91ad2410a0 RDI: 0000000000000004 [ 295.411750][T11531] RBP: 00007f91ad241090 R08: 0000000000000000 R09: 0000000000000000 [ 295.411762][T11531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.411774][T11531] R13: 00007f91ac5e6038 R14: 00007f91ac5e5fa0 R15: 00007ffda36e1058 [ 295.411807][T11531] [ 295.733758][T11535] netlink: 'syz.0.1795': attribute type 21 has an invalid length. [ 295.759389][T11535] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1795'. [ 295.795846][T11533] veth1_macvtap: left allmulticast mode [ 295.805033][T11533] veth1_macvtap: left promiscuous mode [ 295.831465][T11533] macsec0: left promiscuous mode [ 295.889594][T11545] veth1_macvtap: entered promiscuous mode [ 295.916991][T11545] veth1_macvtap: entered allmulticast mode [ 295.932762][T11545] macsec0: entered promiscuous mode [ 295.985883][T11548] netlink: 'syz.3.1800': attribute type 21 has an invalid length. [ 295.994832][T11548] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1800'. [ 296.011007][T11548] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1800'. [ 296.028480][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1799'. [ 296.040663][T11550] openvswitch: netlink: Flow actions attr not present in new flow. [ 296.557556][T11571] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1804'. [ 296.834871][T11581] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1809'. [ 296.876901][T11579] FAULT_INJECTION: forcing a failure. [ 296.876901][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 296.891521][T11579] CPU: 0 UID: 0 PID: 11579 Comm: syz.4.1808 Not tainted syzkaller #0 PREEMPT(full) [ 296.891550][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 296.891562][T11579] Call Trace: [ 296.891569][T11579] [ 296.891580][T11579] dump_stack_lvl+0x189/0x250 [ 296.891605][T11579] ? __pfx____ratelimit+0x10/0x10 [ 296.891627][T11579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.891647][T11579] ? __pfx__printk+0x10/0x10 [ 296.891668][T11579] ? stack_trace_save+0x9c/0xe0 [ 296.891696][T11579] ? __lock_acquire+0x6b6/0x2cf0 [ 296.891724][T11579] should_fail_ex+0x414/0x560 [ 296.891751][T11579] should_failslab+0xa8/0x100 [ 296.891780][T11579] kmem_cache_alloc_noprof+0x74/0x6f0 [ 296.891804][T11579] ? skb_clone+0x212/0x3a0 [ 296.891829][T11579] skb_clone+0x212/0x3a0 [ 296.891851][T11579] __netlink_deliver_tap+0x404/0x850 [ 296.891882][T11579] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.891903][T11579] netlink_deliver_tap+0x19c/0x1b0 [ 296.891924][T11579] netlink_unicast+0x7fa/0x9e0 [ 296.891961][T11579] ? __pfx_netlink_unicast+0x10/0x10 [ 296.891991][T11579] ? netlink_sendmsg+0x642/0xb30 [ 296.892008][T11579] ? skb_put+0x11b/0x210 [ 296.892039][T11579] netlink_sendmsg+0x805/0xb30 [ 296.892069][T11579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.892093][T11579] ? aa_sock_msg_perm+0xf1/0x1b0 [ 296.892115][T11579] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 296.892147][T11579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.892167][T11579] __sock_sendmsg+0x21c/0x270 [ 296.892193][T11579] sock_write_iter+0x279/0x360 [ 296.892217][T11579] ? __pfx_sock_write_iter+0x10/0x10 [ 296.892250][T11579] ? bpf_lsm_file_permission+0x9/0x20 [ 296.892277][T11579] ? security_file_permission+0x75/0x290 [ 296.892311][T11579] vfs_write+0x5c9/0xb30 [ 296.892339][T11579] ? __pfx_sock_write_iter+0x10/0x10 [ 296.892360][T11579] ? __pfx_vfs_write+0x10/0x10 [ 296.892393][T11579] ? __fget_files+0x2a/0x420 [ 296.892416][T11579] ksys_write+0x145/0x250 [ 296.892440][T11579] ? __pfx_ksys_write+0x10/0x10 [ 296.892465][T11579] ? do_syscall_64+0xbe/0xf80 [ 296.892495][T11579] do_syscall_64+0xfa/0xf80 [ 296.892520][T11579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.892539][T11579] ? clear_bhb_loop+0x60/0xb0 [ 296.892560][T11579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.892576][T11579] RIP: 0033:0x7f1fb3d8f749 [ 296.892591][T11579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.892606][T11579] RSP: 002b:00007f1fb4c3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 296.892625][T11579] RAX: ffffffffffffffda RBX: 00007f1fb3fe5fa0 RCX: 00007f1fb3d8f749 [ 296.892637][T11579] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 000000000000000a [ 296.892648][T11579] RBP: 00007f1fb4c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 296.892658][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.892668][T11579] R13: 00007f1fb3fe6038 R14: 00007f1fb3fe5fa0 R15: 00007ffebedd0f98 [ 296.892699][T11579] [ 297.210121][T11588] netlink: 'syz.0.1811': attribute type 1 has an invalid length. [ 297.244462][T11579] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.1808'. [ 297.361414][T11594] netlink: 'syz.2.1814': attribute type 21 has an invalid length. [ 297.438825][T11594] netlink: 'syz.2.1814': attribute type 9 has an invalid length. [ 297.450199][T11594] netlink: 'syz.2.1814': attribute type 11 has an invalid length. [ 297.453152][T11596] netlink: 'syz.3.1813': attribute type 2 has an invalid length. [ 297.467195][T11596] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 297.620965][T11606] openvswitch: netlink: IP tunnel dst address not specified [ 297.733189][T11611] veth1_macvtap: left allmulticast mode [ 297.743266][T11611] veth1_macvtap: left promiscuous mode [ 297.748901][T11611] macsec0: left promiscuous mode [ 297.809201][T11611] veth1_macvtap: entered promiscuous mode [ 297.823102][T11611] veth1_macvtap: entered allmulticast mode [ 297.842892][T11611] macsec0: entered promiscuous mode [ 298.056258][T11626] : entered promiscuous mode [ 298.133165][T11634] __nla_validate_parse: 7 callbacks suppressed [ 298.133183][T11634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1829'. [ 298.181042][ T30] audit: type=1107 audit(1765377085.676:2): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 298.197415][T11634] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1829'. [ 298.214463][T11636] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1830'. [ 298.248679][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1829'. [ 298.294435][T11640] openvswitch: netlink: IP tunnel dst address not specified [ 298.397464][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1834'. [ 298.738160][T11662] block nbd1: not configured, cannot reconfigure [ 298.765373][T11665] validate_nla: 6 callbacks suppressed [ 298.765395][T11665] netlink: 'syz.0.1842': attribute type 7 has an invalid length. [ 298.964124][T11677] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1845'. [ 299.280216][T11681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1847'. [ 299.300456][T11681] openvswitch: netlink: Flow actions attr not present in new flow. [ 299.387172][T11684] veth1_macvtap: entered promiscuous mode [ 299.403982][T11684] veth1_macvtap: entered allmulticast mode [ 299.421939][T11684] macsec0: entered promiscuous mode [ 299.509038][T11687] veth1_macvtap: left allmulticast mode [ 299.516240][T11687] veth1_macvtap: left promiscuous mode [ 299.532753][T11687] macsec0: left promiscuous mode [ 299.581119][T11694] veth1_macvtap: entered promiscuous mode [ 299.597681][T11694] veth1_macvtap: entered allmulticast mode [ 299.611901][T11694] macsec0: entered promiscuous mode [ 299.773406][T11708] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1859'. [ 299.981566][T11717] netlink: 'syz.3.1861': attribute type 1 has an invalid length. [ 300.099144][T11724] netlink: 'syz.4.1862': attribute type 1 has an invalid length. [ 300.238255][T11734] siw: device registration error -23 [ 301.126310][T11745] syzkaller0: entered promiscuous mode [ 301.161834][T11745] syzkaller0: entered allmulticast mode [ 301.186756][T11750] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1873'. [ 301.320206][T11752] option changes via remount are deprecated (pid=11751 comm=syz.2.1874) [ 301.344993][T11760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1877'. [ 302.524054][T11771] netlink: 'syz.1.1880': attribute type 1 has an invalid length. [ 302.570908][ T5840] Bluetooth: hci1: ISO packet for unknown connection handle 2097 [ 302.584469][T11773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.602245][T11775] FAULT_INJECTION: forcing a failure. [ 302.602245][T11775] name failslab, interval 1, probability 0, space 0, times 0 [ 302.625573][T11775] CPU: 0 UID: 0 PID: 11775 Comm: syz.3.1882 Not tainted syzkaller #0 PREEMPT(full) [ 302.625601][T11775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.625613][T11775] Call Trace: [ 302.625620][T11775] [ 302.625629][T11775] dump_stack_lvl+0x189/0x250 [ 302.625655][T11775] ? __pfx____ratelimit+0x10/0x10 [ 302.625682][T11775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.625703][T11775] ? __pfx__printk+0x10/0x10 [ 302.625734][T11775] ? __pfx___might_resched+0x10/0x10 [ 302.625761][T11775] should_fail_ex+0x414/0x560 [ 302.625787][T11775] should_failslab+0xa8/0x100 [ 302.625817][T11775] __kmalloc_cache_noprof+0x6f/0x6f0 [ 302.625841][T11775] ? __genradix_ptr_alloc+0x463/0x4a0 [ 302.625868][T11775] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 302.625894][T11775] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 302.625926][T11775] sctp_association_new+0x15d3/0x25c0 [ 302.625969][T11775] sctp_connect_new_asoc+0x2c5/0x690 [ 302.625995][T11775] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 302.626015][T11775] ? __local_bh_enable_ip+0x12d/0x1c0 [ 302.626042][T11775] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 302.626068][T11775] ? security_sctp_bind_connect+0x7e/0x2e0 [ 302.626098][T11775] sctp_sendmsg+0x155c/0x2810 [ 302.626138][T11775] ? __pfx_sctp_sendmsg+0x10/0x10 [ 302.626160][T11775] ? aa_sk_perm+0x15f/0x920 [ 302.626191][T11775] ? aa_sk_perm+0x7ee/0x920 [ 302.626226][T11775] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.626258][T11775] ? sock_rps_record_flow+0x19/0x410 [ 302.626282][T11775] ? inet_sendmsg+0x2f4/0x370 [ 302.626307][T11775] __sock_sendmsg+0x19c/0x270 [ 302.626335][T11775] ____sys_sendmsg+0x505/0x820 [ 302.626371][T11775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.626429][T11775] ? import_iovec+0x74/0xa0 [ 302.626460][T11775] ___sys_sendmsg+0x21f/0x2a0 [ 302.626494][T11775] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.626548][T11775] ? __fget_files+0x2a/0x420 [ 302.626582][T11775] ? __fget_files+0x2a/0x420 [ 302.626598][T11775] ? __fget_files+0x3a0/0x420 [ 302.626628][T11775] __x64_sys_sendmsg+0x19b/0x260 [ 302.626658][T11775] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.626698][T11775] ? __pfx_ksys_write+0x10/0x10 [ 302.626727][T11775] ? do_syscall_64+0xbe/0xf80 [ 302.626755][T11775] do_syscall_64+0xfa/0xf80 [ 302.626780][T11775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.626799][T11775] ? clear_bhb_loop+0x60/0xb0 [ 302.626823][T11775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.626840][T11775] RIP: 0033:0x7f91ac38f749 [ 302.626858][T11775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.626874][T11775] RSP: 002b:00007f91ad241038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.626894][T11775] RAX: ffffffffffffffda RBX: 00007f91ac5e5fa0 RCX: 00007f91ac38f749 [ 302.626909][T11775] RDX: 0000000004000040 RSI: 0000200000001d80 RDI: 0000000000000007 [ 302.626922][T11775] RBP: 00007f91ad241090 R08: 0000000000000000 R09: 0000000000000000 [ 302.626935][T11775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.626946][T11775] R13: 00007f91ac5e6038 R14: 00007f91ac5e5fa0 R15: 00007ffda36e1058 [ 302.626981][T11775] [ 302.974881][T11779] netlink: 'syz.4.1885': attribute type 21 has an invalid length. [ 303.020073][T11779] netlink: 'syz.4.1885': attribute type 9 has an invalid length. [ 303.046483][T11779] netlink: 'syz.4.1885': attribute type 11 has an invalid length. [ 303.057289][T11779] netlink: 'syz.4.1885': attribute type 12 has an invalid length. [ 303.298072][T11793] netlink: 'syz.4.1890': attribute type 1 has an invalid length. [ 303.315064][T11794] siw: device registration error -23 [ 303.477681][T11802] __nla_validate_parse: 6 callbacks suppressed [ 303.477700][T11802] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1893'. [ 303.676047][T11808] syzkaller0: entered promiscuous mode [ 303.686842][T11808] syzkaller0: entered allmulticast mode [ 303.696360][T11814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1898'. [ 304.155332][T11827] netlink: 'syz.2.1902': attribute type 21 has an invalid length. [ 304.221735][T11828] option changes via remount are deprecated (pid=11825 comm=syz.4.1903) [ 304.245249][T11831] netlink: 'syz.2.1902': attribute type 9 has an invalid length. [ 304.254746][T11831] netlink: 'syz.2.1902': attribute type 11 has an invalid length. [ 304.264950][T11831] netlink: 'syz.2.1902': attribute type 12 has an invalid length. [ 304.272856][T11831] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.1902'. [ 304.283893][T11831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1902'. [ 305.144302][T11827] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1902'. [ 305.309569][T11843] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1908'. [ 305.342852][T11845] netlink: 600 bytes leftover after parsing attributes in process `syz.3.1909'. [ 305.357325][T11845] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1909'. [ 305.367806][T11840] netlink: 'syz.4.1906': attribute type 2 has an invalid length. [ 305.391446][T11849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.415842][T11840] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1906'. [ 305.444537][T11840] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 306.106214][T11869] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1918'. [ 307.505520][T11908] netlink: zone id is out of range [ 307.541724][T11908] netlink: zone id is out of range [ 307.547023][T11908] netlink: zone id is out of range [ 307.590907][T11908] netlink: get zone limit has 4 unknown bytes [ 307.965477][T11936] netlink: 'syz.4.1941': attribute type 29 has an invalid length. [ 307.980810][T11936] netlink: 'syz.4.1941': attribute type 29 has an invalid length. [ 308.006878][T11939] netlink: 'syz.1.1940': attribute type 1 has an invalid length. [ 308.042803][T11936] netlink: 'syz.4.1941': attribute type 29 has an invalid length. [ 308.355599][T11955] FAULT_INJECTION: forcing a failure. [ 308.355599][T11955] name failslab, interval 1, probability 0, space 0, times 0 [ 308.369938][T11955] CPU: 1 UID: 0 PID: 11955 Comm: syz.4.1948 Not tainted syzkaller #0 PREEMPT(full) [ 308.369964][T11955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.369977][T11955] Call Trace: [ 308.369985][T11955] [ 308.369993][T11955] dump_stack_lvl+0x189/0x250 [ 308.370018][T11955] ? __pfx____ratelimit+0x10/0x10 [ 308.370041][T11955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.370062][T11955] ? __pfx__printk+0x10/0x10 [ 308.370093][T11955] ? __pfx___might_resched+0x10/0x10 [ 308.370111][T11955] ? fs_reclaim_acquire+0x7d/0x100 [ 308.370141][T11955] should_fail_ex+0x414/0x560 [ 308.370169][T11955] should_failslab+0xa8/0x100 [ 308.370198][T11955] __kmalloc_noprof+0xcb/0x800 [ 308.370221][T11955] ? tomoyo_encode+0x28b/0x550 [ 308.370247][T11955] tomoyo_encode+0x28b/0x550 [ 308.370273][T11955] tomoyo_realpath_from_path+0x58d/0x5d0 [ 308.370295][T11955] ? tomoyo_domain+0xd8/0x130 [ 308.370321][T11955] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 308.370349][T11955] tomoyo_path_number_perm+0x1e8/0x5a0 [ 308.370380][T11955] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 308.370424][T11955] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 308.370468][T11955] ? __fget_files+0x2a/0x420 [ 308.370491][T11955] ? __fget_files+0x3a0/0x420 [ 308.370507][T11955] ? __fget_files+0x2a/0x420 [ 308.370529][T11955] security_file_ioctl+0xcb/0x2d0 [ 308.370556][T11955] __se_sys_ioctl+0x47/0x170 [ 308.370582][T11955] do_syscall_64+0xfa/0xf80 [ 308.370607][T11955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.370626][T11955] ? clear_bhb_loop+0x60/0xb0 [ 308.370649][T11955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.370668][T11955] RIP: 0033:0x7f1fb3d8f749 [ 308.370686][T11955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.370703][T11955] RSP: 002b:00007f1fb4c3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 308.370723][T11955] RAX: ffffffffffffffda RBX: 00007f1fb3fe5fa0 RCX: 00007f1fb3d8f749 [ 308.370738][T11955] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005 [ 308.370750][T11955] RBP: 00007f1fb4c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 308.370762][T11955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.370774][T11955] R13: 00007f1fb3fe6038 R14: 00007f1fb3fe5fa0 R15: 00007ffebedd0f98 [ 308.370806][T11955] [ 308.370829][T11955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.618567][T11955] veth1_macvtap: left allmulticast mode [ 308.624535][T11955] veth1_macvtap: left promiscuous mode [ 308.630468][T11955] macsec0: left promiscuous mode [ 308.724785][T11960] veth1_macvtap: left allmulticast mode [ 308.751459][T11960] veth1_macvtap: left promiscuous mode [ 308.774243][T11960] macsec0: left promiscuous mode [ 309.055705][T11979] veth1_macvtap: entered promiscuous mode [ 309.071940][T11979] veth1_macvtap: entered allmulticast mode [ 309.078373][T11979] macsec0: entered promiscuous mode [ 309.148195][T11985] netlink: 'syz.3.1958': attribute type 39 has an invalid length. [ 309.405180][T11996] __nla_validate_parse: 1 callbacks suppressed [ 309.405199][T11996] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1962'. [ 309.884501][T12006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 309.942257][T12009] netlink: 'syz.1.1964': attribute type 1 has an invalid length. [ 310.240331][T12020] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1970'. [ 310.414903][T12027] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1973'. [ 310.524769][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1976'. [ 310.546589][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1976'. [ 310.569268][T12033] netlink: 'syz.0.1976': attribute type 2 has an invalid length. [ 310.589732][T12033] 9: entered promiscuous mode [ 310.637890][T12040] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 310.782780][T12049] netlink: 'syz.1.1981': attribute type 29 has an invalid length. [ 310.804743][T12049] netlink: 'syz.1.1981': attribute type 29 has an invalid length. [ 310.816468][T12049] netlink: 'syz.1.1981': attribute type 29 has an invalid length. [ 310.895670][T12054] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1983'. [ 311.012336][T12059] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1985'. [ 311.217366][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1986'. [ 311.260403][T12066] siw: device registration error -23 [ 311.566224][T12071] option changes via remount are deprecated (pid=12070 comm=syz.3.1989) [ 311.822854][T12081] netlink: 'syz.2.1991': attribute type 1 has an invalid length. [ 311.862271][T12085] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1994'. [ 312.063113][T12091] netlink: 'syz.3.1998': attribute type 29 has an invalid length. [ 312.074363][T12091] netlink: 'syz.3.1998': attribute type 29 has an invalid length. [ 312.093834][T12091] netlink: 'syz.3.1998': attribute type 29 has an invalid length. [ 312.452046][T12105] option changes via remount are deprecated (pid=12104 comm=syz.0.2003) [ 313.056233][T12130] openvswitch: netlink: IP tunnel dst address not specified [ 313.494502][T12137] option changes via remount are deprecated (pid=12136 comm=syz.2.2015) [ 314.128903][T12169] FAULT_INJECTION: forcing a failure. [ 314.128903][T12169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.150441][T12169] CPU: 1 UID: 0 PID: 12169 Comm: syz.0.2024 Not tainted syzkaller #0 PREEMPT(full) [ 314.150469][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.150481][T12169] Call Trace: [ 314.150489][T12169] [ 314.150498][T12169] dump_stack_lvl+0x189/0x250 [ 314.150533][T12169] ? __pfx____ratelimit+0x10/0x10 [ 314.150558][T12169] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.150579][T12169] ? __pfx__printk+0x10/0x10 [ 314.150618][T12169] should_fail_ex+0x414/0x560 [ 314.150647][T12169] _copy_to_user+0x31/0xb0 [ 314.150677][T12169] simple_read_from_buffer+0xe1/0x170 [ 314.150710][T12169] proc_fail_nth_read+0x1b3/0x220 [ 314.150737][T12169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.150763][T12169] ? rw_verify_area+0x2a6/0x4d0 [ 314.150785][T12169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 314.150810][T12169] vfs_read+0x200/0xa30 [ 314.150832][T12169] ? fdget_pos+0x247/0x320 [ 314.150851][T12169] ? __pfx___mutex_lock+0x10/0x10 [ 314.150875][T12169] ? __pfx_vfs_read+0x10/0x10 [ 314.150900][T12169] ? __fget_files+0x2a/0x420 [ 314.150920][T12169] ? __fget_files+0x3a0/0x420 [ 314.150933][T12169] ? __fget_files+0x2a/0x420 [ 314.150958][T12169] ksys_read+0x145/0x250 [ 314.150983][T12169] ? __pfx_ksys_read+0x10/0x10 [ 314.151008][T12169] ? do_syscall_64+0xbe/0xf80 [ 314.151035][T12169] do_syscall_64+0xfa/0xf80 [ 314.151060][T12169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.151079][T12169] ? clear_bhb_loop+0x60/0xb0 [ 314.151102][T12169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.151121][T12169] RIP: 0033:0x7fa02978e15c [ 314.151139][T12169] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 314.151156][T12169] RSP: 002b:00007fa02a5e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 314.151176][T12169] RAX: ffffffffffffffda RBX: 00007fa0299e5fa0 RCX: 00007fa02978e15c [ 314.151191][T12169] RDX: 000000000000000f RSI: 00007fa02a5e70a0 RDI: 0000000000000004 [ 314.151203][T12169] RBP: 00007fa02a5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 314.151216][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.151227][T12169] R13: 00007fa0299e6038 R14: 00007fa0299e5fa0 R15: 00007ffe7da537b8 [ 314.151260][T12169] [ 314.155277][T12168] veth0_to_bond: entered promiscuous mode [ 314.397614][T12176] veth1_macvtap: left allmulticast mode [ 314.405862][T12176] veth1_macvtap: left promiscuous mode [ 314.411380][T12176] macsec0: left promiscuous mode [ 314.427070][T12173] veth1_macvtap: entered promiscuous mode [ 314.433099][T12173] veth1_macvtap: entered allmulticast mode [ 314.439310][T12173] macsec0: entered promiscuous mode [ 314.702595][T12188] netlink: zone id is out of range [ 314.723815][T12188] netlink: zone id is out of range [ 314.769765][T12188] netlink: zone id is out of range [ 314.833806][T12188] netlink: get zone limit has 4 unknown bytes [ 315.251082][T12199] validate_nla: 4 callbacks suppressed [ 315.251120][T12199] netlink: 'syz.1.2034': attribute type 2 has an invalid length. [ 315.277619][T12199] __nla_validate_parse: 7 callbacks suppressed [ 315.277655][T12199] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2034'. [ 315.322504][T12199] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 316.111489][T12225] FAULT_INJECTION: forcing a failure. [ 316.111489][T12225] name failslab, interval 1, probability 0, space 0, times 0 [ 316.125198][T12225] CPU: 1 UID: 0 PID: 12225 Comm: syz.2.2040 Not tainted syzkaller #0 PREEMPT(full) [ 316.125215][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 316.125223][T12225] Call Trace: [ 316.125227][T12225] [ 316.125232][T12225] dump_stack_lvl+0x189/0x250 [ 316.125249][T12225] ? __pfx____ratelimit+0x10/0x10 [ 316.125264][T12225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.125275][T12225] ? __pfx__printk+0x10/0x10 [ 316.125290][T12225] ? __pfx___might_resched+0x10/0x10 [ 316.125302][T12225] ? fs_reclaim_acquire+0x7d/0x100 [ 316.125326][T12225] should_fail_ex+0x414/0x560 [ 316.125340][T12225] should_failslab+0xa8/0x100 [ 316.125357][T12225] kmem_cache_alloc_node_noprof+0x77/0x710 [ 316.125370][T12225] ? __alloc_skb+0x255/0x430 [ 316.125384][T12225] ? napi_skb_cache_get+0x4a5/0x780 [ 316.125397][T12225] ? napi_skb_cache_get+0x151/0x780 [ 316.125413][T12225] __alloc_skb+0x255/0x430 [ 316.125428][T12225] ? __pfx___alloc_skb+0x10/0x10 [ 316.125441][T12225] ? netlink_ack_tlv_len+0x6c/0x210 [ 316.125452][T12225] ? __sanitizer_cov_trace_pc+0x37/0x70 [ 316.125466][T12225] ? netlink_ack_tlv_len+0x6c/0x210 [ 316.125477][T12225] netlink_ack+0x146/0xa50 [ 316.125490][T12225] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 316.125508][T12225] nfnetlink_rcv+0x2309/0x2590 [ 316.125542][T12225] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 316.125565][T12225] ? ref_tracker_free+0x63a/0x7d0 [ 316.125594][T12225] ? __netlink_deliver_tap+0x807/0x850 [ 316.125604][T12225] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.125623][T12225] netlink_unicast+0x82f/0x9e0 [ 316.125643][T12225] ? __pfx_netlink_unicast+0x10/0x10 [ 316.125659][T12225] ? netlink_sendmsg+0x642/0xb30 [ 316.125668][T12225] ? skb_put+0x11b/0x210 [ 316.125685][T12225] netlink_sendmsg+0x805/0xb30 [ 316.125700][T12225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.125712][T12225] ? aa_sock_msg_perm+0xf1/0x1b0 [ 316.125724][T12225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 316.125739][T12225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.125749][T12225] __sock_sendmsg+0x21c/0x270 [ 316.125763][T12225] ____sys_sendmsg+0x505/0x820 [ 316.125782][T12225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.125802][T12225] ? import_iovec+0x74/0xa0 [ 316.125819][T12225] ___sys_sendmsg+0x21f/0x2a0 [ 316.125836][T12225] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.125870][T12225] ? __fget_files+0x2a/0x420 [ 316.125879][T12225] ? __fget_files+0x3a0/0x420 [ 316.125894][T12225] __x64_sys_sendmsg+0x19b/0x260 [ 316.125911][T12225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.125932][T12225] ? __pfx_ksys_write+0x10/0x10 [ 316.125947][T12225] ? do_syscall_64+0xbe/0xf80 [ 316.125963][T12225] do_syscall_64+0xfa/0xf80 [ 316.125976][T12225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.125987][T12225] ? clear_bhb_loop+0x60/0xb0 [ 316.125999][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.126009][T12225] RIP: 0033:0x7f133018f749 [ 316.126020][T12225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.126029][T12225] RSP: 002b:00007f1330fab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.126042][T12225] RAX: ffffffffffffffda RBX: 00007f13303e5fa0 RCX: 00007f133018f749 [ 316.126049][T12225] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000d [ 316.126056][T12225] RBP: 00007f1330fab090 R08: 0000000000000000 R09: 0000000000000000 [ 316.126064][T12225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 316.126071][T12225] R13: 00007f13303e6038 R14: 00007f13303e5fa0 R15: 00007ffdf7c15b28 [ 316.126088][T12225] [ 316.602731][T12234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2044'. [ 316.708215][T12239] netlink: 'syz.0.2046': attribute type 2 has an invalid length. [ 316.717088][T12239] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2046'. [ 316.744647][T12239] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 316.785968][T12244] netlink: 'syz.4.2049': attribute type 10 has an invalid length. [ 316.794172][T12244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2049'. [ 316.825327][T12244] bridge0: port 1(dummy0) entered blocking state [ 316.853758][T12244] bridge0: port 1(dummy0) entered disabled state [ 316.871085][T12244] dummy0: entered allmulticast mode [ 316.889040][T12245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2042'. [ 316.895642][T12244] dummy0: entered promiscuous mode [ 316.906669][T12244] bridge0: port 1(dummy0) entered blocking state [ 316.914119][T12244] bridge0: port 1(dummy0) entered forwarding state [ 316.926252][T12243] option changes via remount are deprecated (pid=12240 comm=syz.1.2047) [ 316.963350][T12249] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2042'. [ 317.157929][T12255] netlink: 'syz.3.2052': attribute type 21 has an invalid length. [ 317.180905][T12255] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2052'. [ 317.202818][T12255] netlink: 'syz.3.2052': attribute type 9 has an invalid length. [ 317.233911][T12255] netlink: 'syz.3.2052': attribute type 11 has an invalid length. [ 317.240871][T12259] openvswitch: netlink: IP tunnel dst address not specified [ 317.259240][T12255] netlink: 'syz.3.2052': attribute type 12 has an invalid length. [ 317.286347][T12255] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2052'. [ 317.322808][T12255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 317.464440][T12269] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2057'. [ 317.619264][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.632130][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.896328][T12278] netlink: 'syz.1.2060': attribute type 2 has an invalid length. [ 317.924363][T12278] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 318.115371][T12297] netlink: zone id is out of range [ 318.127498][T12297] netlink: zone id is out of range [ 318.133777][T12297] netlink: zone id is out of range [ 318.139184][T12297] netlink: get zone limit has 4 unknown bytes [ 318.720249][ T30] audit: type=1107 audit(1765377106.216:3): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 318.872295][T12329] netlink: 'syz.1.2075': attribute type 5 has an invalid length. [ 319.082458][T12335] openvswitch: netlink: IP tunnel dst address not specified [ 319.096915][T12343] netlink: zone id is out of range [ 319.109945][T12343] netlink: zone id is out of range [ 319.120655][T12343] netlink: zone id is out of range [ 319.155949][T12343] netlink: get zone limit has 4 unknown bytes [ 319.585977][T12366] netlink: 'syz.3.2083': attribute type 21 has an invalid length. [ 319.743984][T12365] option changes via remount are deprecated (pid=12364 comm=syz.2.2084) [ 320.101308][ T3981] tipc: Subscription rejected, illegal request [ 320.136363][T12390] openvswitch: netlink: IP tunnel dst address not specified [ 320.629346][T12407] validate_nla: 3 callbacks suppressed [ 320.629360][T12407] netlink: 'syz.0.2097': attribute type 21 has an invalid length. [ 320.643319][T12407] __nla_validate_parse: 10 callbacks suppressed [ 320.643338][T12407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2097'. [ 320.672341][T12407] netlink: 'syz.0.2097': attribute type 9 has an invalid length. [ 320.680200][T12407] netlink: 'syz.0.2097': attribute type 11 has an invalid length. [ 320.688171][T12407] netlink: 'syz.0.2097': attribute type 12 has an invalid length. [ 320.696346][T12407] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2097'. [ 320.708006][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2097'. [ 320.840451][T12410] netlink: 'syz.0.2099': attribute type 29 has an invalid length. [ 320.874936][T12410] netlink: 'syz.0.2099': attribute type 29 has an invalid length. [ 320.890577][T12410] netlink: 'syz.0.2099': attribute type 29 has an invalid length. [ 321.460548][T12430] netlink: 'syz.1.2107': attribute type 29 has an invalid length. [ 321.486912][T12430] netlink: 'syz.1.2107': attribute type 29 has an invalid length. [ 321.542438][T12430] netlink: 'syz.1.2107': attribute type 29 has an invalid length. [ 321.793610][T12444] siw: device registration error -23 [ 322.041500][T12454] veth1_macvtap: left allmulticast mode [ 322.049559][T12454] veth1_macvtap: left promiscuous mode [ 322.055497][T12454] macsec0: left promiscuous mode [ 322.083871][T12454] veth1_macvtap: entered promiscuous mode [ 322.089962][T12454] veth1_macvtap: entered allmulticast mode [ 322.096907][T12454] macsec0: entered promiscuous mode [ 322.171307][T12456] tc_dump_action: action bad kind [ 322.403143][T12468] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2121'. [ 322.897773][T12489] veth1_macvtap: left allmulticast mode [ 322.911909][T12489] veth1_macvtap: left promiscuous mode [ 322.917496][T12489] macsec0: left promiscuous mode [ 322.963759][T12494] veth1_macvtap: entered promiscuous mode [ 322.986737][T12494] veth1_macvtap: entered allmulticast mode [ 323.012349][T12499] FAULT_INJECTION: forcing a failure. [ 323.012349][T12499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.034999][T12494] macsec0: entered promiscuous mode [ 323.064472][T12499] CPU: 0 UID: 0 PID: 12499 Comm: syz.0.2131 Not tainted syzkaller #0 PREEMPT(full) [ 323.064500][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.064521][T12499] Call Trace: [ 323.064528][T12499] [ 323.064537][T12499] dump_stack_lvl+0x189/0x250 [ 323.064563][T12499] ? __pfx____ratelimit+0x10/0x10 [ 323.064587][T12499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.064608][T12499] ? __pfx__printk+0x10/0x10 [ 323.064634][T12499] ? __might_fault+0xb0/0x130 [ 323.064668][T12499] should_fail_ex+0x414/0x560 [ 323.064695][T12499] _copy_from_user+0x2d/0xb0 [ 323.064722][T12499] ___sys_sendmsg+0x158/0x2a0 [ 323.064754][T12499] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.064819][T12499] ? __fget_files+0x2a/0x420 [ 323.064835][T12499] ? __fget_files+0x3a0/0x420 [ 323.064863][T12499] __x64_sys_sendmsg+0x19b/0x260 [ 323.064894][T12499] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 323.064933][T12499] ? __pfx_ksys_write+0x10/0x10 [ 323.064960][T12499] ? do_syscall_64+0xbe/0xf80 [ 323.064989][T12499] do_syscall_64+0xfa/0xf80 [ 323.065014][T12499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.065033][T12499] ? clear_bhb_loop+0x60/0xb0 [ 323.065055][T12499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.065073][T12499] RIP: 0033:0x7fa02978f749 [ 323.065089][T12499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.065106][T12499] RSP: 002b:00007fa02a5e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.065127][T12499] RAX: ffffffffffffffda RBX: 00007fa0299e5fa0 RCX: 00007fa02978f749 [ 323.065141][T12499] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 323.065154][T12499] RBP: 00007fa02a5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.065165][T12499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.065177][T12499] R13: 00007fa0299e6038 R14: 00007fa0299e5fa0 R15: 00007ffe7da537b8 [ 323.065209][T12499] [ 323.430485][T12508] : entered promiscuous mode [ 323.532724][T12511] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2136'. [ 323.594255][T12511] net_ratelimit: 1 callbacks suppressed [ 323.594288][T12511] openvswitch: netlink: IP tunnel dst address not specified [ 323.769335][T12523] siw: device registration error -23 [ 324.024495][T12535] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2146'. [ 324.169200][T12539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2147'. [ 324.228160][T12545] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.2149'. [ 324.319575][T12548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2152'. [ 324.355631][T12548] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.2152'. [ 325.737385][T12600] validate_nla: 15 callbacks suppressed [ 325.737412][T12600] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 325.771745][T12601] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 325.795040][T12600] netlink: 'syz.3.2170': attribute type 29 has an invalid length. [ 326.214193][T12613] veth1_macvtap: entered promiscuous mode [ 326.220233][T12613] veth1_macvtap: entered allmulticast mode [ 326.229836][T12613] macsec0: entered promiscuous mode [ 326.338301][T12618] __nla_validate_parse: 6 callbacks suppressed [ 326.338322][T12618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2177'. [ 326.429676][T12627] openvswitch: netlink: IP tunnel dst address not specified [ 326.886416][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2182'. [ 327.024906][T12643] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2183'. [ 327.410821][T12658] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2190'. [ 327.445468][T12659] netlink: 'syz.4.2189': attribute type 1 has an invalid length. [ 327.585469][T12670] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 327.619563][T12671] veth1_macvtap: entered promiscuous mode [ 327.626702][T12671] veth1_macvtap: entered allmulticast mode [ 327.635477][T12671] macsec0: entered promiscuous mode [ 329.752384][T12685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2197'. [ 329.918275][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2200'. [ 329.945881][T12692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2199'. [ 330.029097][T12698] netlink: 'syz.4.2201': attribute type 1 has an invalid length. [ 330.077061][T12702] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2203'. [ 330.133481][T12705] netlink: 'syz.3.2202': attribute type 1 has an invalid length. [ 330.158412][T12704] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2204'. [ 330.177596][T12704] bpf: Bad value for 'uid' [ 331.132166][T12715] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 331.288404][T12717] veth1_macvtap: left allmulticast mode [ 331.295042][T12717] veth1_macvtap: left promiscuous mode [ 331.300745][T12717] macsec0: left promiscuous mode [ 331.331002][T12722] veth1_macvtap: entered promiscuous mode [ 331.345547][T12722] veth1_macvtap: entered allmulticast mode [ 331.359491][T12722] macsec0: entered promiscuous mode [ 331.660192][T12731] netlink: 'syz.1.2211': attribute type 1 has an invalid length. [ 332.186181][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 332.608364][T12745] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2215'. [ 332.869695][T12751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.945125][T12751] netlink: 'syz.0.2217': attribute type 6 has an invalid length. [ 332.987726][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2217'. [ 333.313677][T12762] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2221'. [ 333.374272][T12758] openvswitch: netlink: IP tunnel dst address not specified [ 333.825566][T12780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2228'. [ 334.315437][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2230'. [ 334.503586][T12786] veth1_macvtap: left allmulticast mode [ 334.532571][T12786] veth1_macvtap: left promiscuous mode [ 334.573418][T12786] macsec0: left promiscuous mode [ 334.721179][T12790] veth1_macvtap: entered promiscuous mode [ 334.765115][T12790] veth1_macvtap: entered allmulticast mode [ 334.827923][T12790] macsec0: entered promiscuous mode [ 335.135300][T12802] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2235'. [ 335.193318][T12802] openvswitch: netlink: IP tunnel dst address not specified [ 335.493057][T12808] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2238'. [ 335.717673][T12811] netlink: zone id is out of range [ 335.729603][T12811] netlink: zone id is out of range [ 335.738647][T12811] netlink: zone id is out of range [ 335.745592][T12811] netlink: zone id is out of range [ 335.761280][T12811] netlink: zone id is out of range [ 335.773093][T12811] netlink: zone id is out of range [ 335.778386][T12811] netlink: zone id is out of range [ 336.567228][T12831] netlink: 'syz.1.2245': attribute type 29 has an invalid length. [ 336.622348][T12832] netlink: 'syz.1.2245': attribute type 29 has an invalid length. [ 336.653380][T12831] netlink: 'syz.1.2245': attribute type 29 has an invalid length. [ 337.358674][T12844] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2251'. [ 337.394310][T12848] netlink: 'syz.3.2252': attribute type 2 has an invalid length. [ 337.412044][T12848] netlink: 'syz.3.2252': attribute type 2 has an invalid length. [ 337.680912][T12858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2256'. [ 337.841127][T12862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2257'. [ 337.860554][T12862] net_ratelimit: 102 callbacks suppressed [ 337.860573][T12862] openvswitch: netlink: Flow key attr not present in new flow. [ 338.103277][T12868] siw: device registration error -23 [ 338.363753][T12877] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2261'. [ 338.371923][T12873] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2260'. [ 338.843683][T12882] veth1_macvtap: left allmulticast mode [ 338.886858][T12882] veth1_macvtap: left promiscuous mode [ 338.896274][T12882] macsec0: left promiscuous mode [ 339.189220][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2267'. [ 339.748093][T12885] veth1_macvtap: entered promiscuous mode [ 339.755688][T12885] veth1_macvtap: entered allmulticast mode [ 339.763496][T12885] macsec0: entered promiscuous mode [ 339.773592][T12887] FAULT_INJECTION: forcing a failure. [ 339.773592][T12887] name failslab, interval 1, probability 0, space 0, times 0 [ 339.788284][T12887] CPU: 0 UID: 0 PID: 12887 Comm: syz.0.2265 Not tainted syzkaller #0 PREEMPT(full) [ 339.788310][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.788322][T12887] Call Trace: [ 339.788330][T12887] [ 339.788339][T12887] dump_stack_lvl+0x189/0x250 [ 339.788367][T12887] ? __pfx____ratelimit+0x10/0x10 [ 339.788393][T12887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.788415][T12887] ? __pfx__printk+0x10/0x10 [ 339.788444][T12887] ? __pfx___might_resched+0x10/0x10 [ 339.788466][T12887] ? fs_reclaim_acquire+0x7d/0x100 [ 339.788498][T12887] should_fail_ex+0x414/0x560 [ 339.788526][T12887] should_failslab+0xa8/0x100 [ 339.788557][T12887] kmem_cache_alloc_node_noprof+0x77/0x710 [ 339.788582][T12887] ? __alloc_skb+0x255/0x430 [ 339.788608][T12887] ? napi_skb_cache_get+0x4a5/0x780 [ 339.788633][T12887] ? napi_skb_cache_get+0x151/0x780 [ 339.788663][T12887] __alloc_skb+0x255/0x430 [ 339.788693][T12887] ? __pfx___alloc_skb+0x10/0x10 [ 339.788731][T12887] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 339.788761][T12887] addrconf_ifdown+0x1533/0x1870 [ 339.788798][T12887] ? tls_dev_event+0x717/0xec0 [ 339.788820][T12887] ? __pfx_addrconf_ifdown+0x10/0x10 [ 339.788858][T12887] addrconf_notify+0x1bc/0xfe0 [ 339.788882][T12887] notifier_call_chain+0x19d/0x3a0 [ 339.788915][T12887] unregister_netdevice_many_notify+0x1830/0x2310 [ 339.788953][T12887] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 339.788999][T12887] unregister_netdevice_queue+0x317/0x350 [ 339.789022][T12887] ? apparmor_capable+0x137/0x1a0 [ 339.789048][T12887] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 339.789070][T12887] ? security_capable+0x7e/0x2e0 [ 339.789106][T12887] vti6_siocdevprivate+0x300/0x700 [ 339.789138][T12887] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 339.789166][T12887] ? __mutex_lock+0x5bb/0x1350 [ 339.789207][T12887] ? netdev_name_node_lookup+0xdf/0x120 [ 339.789234][T12887] dev_ifsioc+0xb57/0xf00 [ 339.789269][T12887] dev_ioctl+0x84c/0x1150 [ 339.789300][T12887] sock_ioctl+0x719/0x790 [ 339.789321][T12887] ? __pfx_sock_ioctl+0x10/0x10 [ 339.789344][T12887] ? __fget_files+0x3a0/0x420 [ 339.789359][T12887] ? __fget_files+0x2a/0x420 [ 339.789379][T12887] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.789397][T12887] ? __pfx_sock_ioctl+0x10/0x10 [ 339.789419][T12887] __se_sys_ioctl+0xfc/0x170 [ 339.789445][T12887] do_syscall_64+0xfa/0xf80 [ 339.789471][T12887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.789491][T12887] ? clear_bhb_loop+0x60/0xb0 [ 339.789514][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.789532][T12887] RIP: 0033:0x7fa02978f749 [ 339.789549][T12887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.789567][T12887] RSP: 002b:00007fa02a5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.789587][T12887] RAX: ffffffffffffffda RBX: 00007fa0299e5fa0 RCX: 00007fa02978f749 [ 339.789602][T12887] RDX: 0000200000000500 RSI: 00000000000089f2 RDI: 0000000000000006 [ 339.789614][T12887] RBP: 00007fa02a5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 339.789626][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.789639][T12887] R13: 00007fa0299e6038 R14: 00007fa0299e5fa0 R15: 00007ffe7da537b8 [ 339.789671][T12887] [ 340.138544][T12900] netlink: zone id is out of range [ 340.144016][T12900] netlink: zone id is out of range [ 340.149159][T12900] netlink: zone id is out of range [ 340.155859][T12900] netlink: get zone limit has 4 unknown bytes [ 340.384368][T12902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2269'. [ 341.196768][T12930] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2276'. [ 341.448080][T12934] netlink: zone id is out of range [ 341.473561][T12934] netlink: zone id is out of range [ 341.487158][T12934] netlink: zone id is out of range [ 341.513068][T12934] netlink: get zone limit has 4 unknown bytes [ 342.090192][T12950] FAULT_INJECTION: forcing a failure. [ 342.090192][T12950] name failslab, interval 1, probability 0, space 0, times 0 [ 342.104452][T12950] CPU: 0 UID: 0 PID: 12950 Comm: syz.1.2281 Not tainted syzkaller #0 PREEMPT(full) [ 342.104480][T12950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 342.104493][T12950] Call Trace: [ 342.104500][T12950] [ 342.104507][T12950] dump_stack_lvl+0x189/0x250 [ 342.104533][T12950] ? __pfx____ratelimit+0x10/0x10 [ 342.104556][T12950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.104577][T12950] ? __pfx__printk+0x10/0x10 [ 342.104605][T12950] ? __pfx___might_resched+0x10/0x10 [ 342.104624][T12950] ? fs_reclaim_acquire+0x7d/0x100 [ 342.104654][T12950] should_fail_ex+0x414/0x560 [ 342.104682][T12950] should_failslab+0xa8/0x100 [ 342.104711][T12950] kmem_cache_alloc_node_noprof+0x77/0x710 [ 342.104735][T12950] ? __alloc_skb+0x255/0x430 [ 342.104759][T12950] ? napi_skb_cache_get+0x4a5/0x780 [ 342.104783][T12950] ? napi_skb_cache_get+0x151/0x780 [ 342.104812][T12950] __alloc_skb+0x255/0x430 [ 342.104841][T12950] ? __pfx___alloc_skb+0x10/0x10 [ 342.104880][T12950] ? netlink_ack_tlv_len+0x6c/0x210 [ 342.104903][T12950] netlink_ack+0x146/0xa50 [ 342.104918][T12950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.104941][T12950] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 342.104968][T12950] ? __pfx_nl80211_post_doit+0x10/0x10 [ 342.105009][T12950] netlink_rcv_skb+0x28c/0x470 [ 342.105029][T12950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.105054][T12950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.105093][T12950] ? down_read+0x274/0x2e0 [ 342.105118][T12950] ? genl_rcv+0xd/0x40 [ 342.105143][T12950] genl_rcv+0x28/0x40 [ 342.105164][T12950] netlink_unicast+0x82f/0x9e0 [ 342.105201][T12950] ? __pfx_netlink_unicast+0x10/0x10 [ 342.105230][T12950] ? netlink_sendmsg+0x642/0xb30 [ 342.105248][T12950] ? skb_put+0x11b/0x210 [ 342.105278][T12950] netlink_sendmsg+0x805/0xb30 [ 342.105307][T12950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.105330][T12950] ? aa_sock_msg_perm+0xf1/0x1b0 [ 342.105353][T12950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.105378][T12950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.105399][T12950] __sock_sendmsg+0x21c/0x270 [ 342.105424][T12950] ____sys_sendmsg+0x505/0x820 [ 342.105459][T12950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.105495][T12950] ? import_iovec+0x74/0xa0 [ 342.105525][T12950] ___sys_sendmsg+0x21f/0x2a0 [ 342.105556][T12950] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.105622][T12950] ? __fget_files+0x2a/0x420 [ 342.105639][T12950] ? __fget_files+0x3a0/0x420 [ 342.105667][T12950] __x64_sys_sendmsg+0x19b/0x260 [ 342.105699][T12950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.105738][T12950] ? __pfx_ksys_write+0x10/0x10 [ 342.105766][T12950] ? do_syscall_64+0xbe/0xf80 [ 342.105794][T12950] do_syscall_64+0xfa/0xf80 [ 342.105820][T12950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.105839][T12950] ? clear_bhb_loop+0x60/0xb0 [ 342.105862][T12950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.105887][T12950] RIP: 0033:0x7fab3b18f749 [ 342.105905][T12950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.105921][T12950] RSP: 002b:00007fab3c098038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.105941][T12950] RAX: ffffffffffffffda RBX: 00007fab3b3e5fa0 RCX: 00007fab3b18f749 [ 342.105956][T12950] RDX: 0000000000028040 RSI: 0000200000000180 RDI: 000000000000000b [ 342.105968][T12950] RBP: 00007fab3c098090 R08: 0000000000000000 R09: 0000000000000000 [ 342.105979][T12950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.105991][T12950] R13: 00007fab3b3e6038 R14: 00007fab3b3e5fa0 R15: 00007ffccc932268 [ 342.106023][T12950] [ 343.083806][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2290'. [ 343.181018][T12970] netlink: 'syz.3.2289': attribute type 1 has an invalid length. [ 343.339865][T12977] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2292'. [ 343.354723][T12977] openvswitch: netlink: Flow key attr not present in new flow. [ 343.565713][T12982] netlink: 'syz.1.2293': attribute type 6 has an invalid length. [ 343.624876][T12979] syzkaller0: entered promiscuous mode [ 343.631032][T12979] syzkaller0: entered allmulticast mode [ 343.778610][T12982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2293'. [ 343.967261][T12987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2295'. [ 344.988308][T13013] openvswitch: netlink: IP tunnel dst address not specified [ 345.916265][T13005] veth1_macvtap: left allmulticast mode [ 345.924985][T13005] veth1_macvtap: left promiscuous mode [ 345.930580][T13005] macsec0: left promiscuous mode [ 345.941505][T13007] veth1_macvtap: entered promiscuous mode [ 345.950434][T13007] veth1_macvtap: entered allmulticast mode [ 345.962258][T13007] macsec0: entered promiscuous mode [ 345.970020][T13011] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2303'. [ 346.074161][T13015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2304'. [ 346.092446][T13015] openvswitch: netlink: Flow key attr not present in new flow. [ 346.243208][T13022] netlink: 'syz.0.2307': attribute type 1 has an invalid length. [ 346.325765][T13023] siw: device registration error -23 [ 346.387636][T13025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 346.714113][T13036] netlink: 'syz.3.2313': attribute type 1 has an invalid length. [ 346.752984][T13036] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2313'. [ 347.079300][T13041] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2315'. [ 347.178058][T13045] openvswitch: netlink: IP tunnel dst address not specified [ 347.280471][T13051] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2318'. [ 347.289904][T13051] openvswitch: netlink: Flow key attr not present in new flow. [ 347.476277][T13055] netlink: 'syz.1.2320': attribute type 2 has an invalid length. [ 347.902756][T13067] FAULT_INJECTION: forcing a failure. [ 347.902756][T13067] name failslab, interval 1, probability 0, space 0, times 0 [ 347.941907][T13067] CPU: 1 UID: 0 PID: 13067 Comm: syz.4.2325 Not tainted syzkaller #0 PREEMPT(full) [ 347.941934][T13067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 347.941946][T13067] Call Trace: [ 347.941953][T13067] [ 347.941961][T13067] dump_stack_lvl+0x189/0x250 [ 347.941987][T13067] ? __pfx____ratelimit+0x10/0x10 [ 347.942010][T13067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.942031][T13067] ? __pfx__printk+0x10/0x10 [ 347.942054][T13067] ? kmalloc_reserve+0xbd/0x290 [ 347.942085][T13067] ? __lock_acquire+0x6b6/0x2cf0 [ 347.942113][T13067] should_fail_ex+0x414/0x560 [ 347.942141][T13067] should_failslab+0xa8/0x100 [ 347.942170][T13067] kmem_cache_alloc_noprof+0x74/0x6f0 [ 347.942194][T13067] ? skb_clone+0x212/0x3a0 [ 347.942218][T13067] skb_clone+0x212/0x3a0 [ 347.942240][T13067] __netlink_deliver_tap+0x404/0x850 [ 347.942273][T13067] ? netlink_deliver_tap+0x2e/0x1b0 [ 347.942295][T13067] netlink_deliver_tap+0x19c/0x1b0 [ 347.942315][T13067] netlink_unicast+0x7fa/0x9e0 [ 347.942352][T13067] ? __pfx_netlink_unicast+0x10/0x10 [ 347.942388][T13067] ? netlink_sendmsg+0x642/0xb30 [ 347.942405][T13067] ? skb_put+0x11b/0x210 [ 347.942433][T13067] netlink_sendmsg+0x805/0xb30 [ 347.942461][T13067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.942485][T13067] ? aa_sock_msg_perm+0xf1/0x1b0 [ 347.942507][T13067] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.942532][T13067] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.942553][T13067] __sock_sendmsg+0x21c/0x270 [ 347.942580][T13067] ____sys_sendmsg+0x505/0x820 [ 347.942615][T13067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.942654][T13067] ? import_iovec+0x74/0xa0 [ 347.942684][T13067] ___sys_sendmsg+0x21f/0x2a0 [ 347.942715][T13067] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.942751][T13067] ? rcu_read_lock_any_held+0xb3/0x120 [ 347.942804][T13067] ? __fget_files+0x2a/0x420 [ 347.942821][T13067] ? __fget_files+0x3a0/0x420 [ 347.942849][T13067] __x64_sys_sendmsg+0x19b/0x260 [ 347.942881][T13067] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.942921][T13067] ? __pfx_ksys_write+0x10/0x10 [ 347.942949][T13067] ? do_syscall_64+0xbe/0xf80 [ 347.942978][T13067] do_syscall_64+0xfa/0xf80 [ 347.943003][T13067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.943023][T13067] ? clear_bhb_loop+0x60/0xb0 [ 347.943047][T13067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.943065][T13067] RIP: 0033:0x7f1fb3d8f749 [ 347.943082][T13067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.943100][T13067] RSP: 002b:00007f1fb4c3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.943120][T13067] RAX: ffffffffffffffda RBX: 00007f1fb3fe5fa0 RCX: 00007f1fb3d8f749 [ 347.943134][T13067] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 347.943146][T13067] RBP: 00007f1fb4c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 347.943158][T13067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.943169][T13067] R13: 00007f1fb3fe6038 R14: 00007f1fb3fe5fa0 R15: 00007ffebedd0f98 [ 347.943202][T13067] [ 348.266927][T13071] netlink: 'syz.3.2326': attribute type 41 has an invalid length. [ 348.689422][T13076] syzkaller0: entered promiscuous mode [ 348.696525][T13076] syzkaller0: entered allmulticast mode [ 348.703878][T13083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 349.281955][T13097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2336'. [ 349.505110][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 349.514432][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 349.522709][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 349.532034][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 349.539916][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 350.032881][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2344'. [ 350.044497][T13132] openvswitch: netlink: Flow key attr not present in new flow. [ 350.799531][T13109] netlink: 'syz.4.2338': attribute type 2 has an invalid length. [ 350.808059][T13109] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2338'. [ 350.824691][T13109] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 351.223339][T13105] chnl_net:caif_netlink_parms(): no params data found [ 351.333310][T13156] netlink: 'syz.4.2352': attribute type 1 has an invalid length. [ 351.432097][T13105] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.442356][T13105] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.449783][T13105] bridge_slave_0: entered allmulticast mode [ 351.459414][T13105] bridge_slave_0: entered promiscuous mode [ 351.472557][T13105] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.479956][T13105] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.488022][T13105] bridge_slave_1: entered allmulticast mode [ 351.497082][T13105] bridge_slave_1: entered promiscuous mode [ 351.573954][T13105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.587262][T13105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.601732][ T52] Bluetooth: hci4: command tx timeout [ 351.636688][T13105] team0: Port device team_slave_0 added [ 351.645811][T13105] team0: Port device team_slave_1 added [ 351.684832][T13105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.691974][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.718838][T13105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.733225][T13105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.740333][T13105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.771813][T13105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.829625][T13105] hsr_slave_0: entered promiscuous mode [ 351.836708][T13105] hsr_slave_1: entered promiscuous mode [ 351.846858][T13105] debugfs: 'hsr0' already exists in 'hsr' [ 351.853974][T13105] Cannot create hsr debugfs directory [ 352.068212][T13166] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2354'. [ 352.138772][T13105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.198186][T13105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.209170][T13105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.226576][T13105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.363771][T13105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.400077][T13105] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.418635][T13180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2357'. [ 352.429455][T13180] openvswitch: netlink: Flow key attr not present in new flow. [ 352.433807][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.444228][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.484177][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.491353][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.657297][T13185] netlink: zone id is out of range [ 352.670380][T13185] netlink: zone id is out of range [ 352.705759][T13185] netlink: zone id is out of range [ 352.711074][T13185] netlink: zone id is out of range [ 352.741869][T13185] netlink: zone id is out of range [ 352.752581][T13185] netlink: zone id is out of range [ 352.761213][T13185] netlink: zone id is out of range [ 353.082863][T13105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.140153][T13213] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2367'. [ 353.574297][T13224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2370'. [ 353.678189][T13105] veth0_vlan: entered promiscuous mode [ 353.683938][ T52] Bluetooth: hci4: command tx timeout [ 353.699535][T13105] veth1_vlan: entered promiscuous mode [ 353.759629][T13227] netlink: 'syz.3.2371': attribute type 10 has an invalid length. [ 353.901244][T13105] veth0_macvtap: entered promiscuous mode [ 353.908169][T13105] veth1_macvtap: entered promiscuous mode [ 353.930236][T13105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.940815][T13105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.007244][ T1137] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.028966][ T1137] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.051030][T13234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2372'. [ 354.098253][ T1137] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.108314][ T1137] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.290355][T13237] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2374'. [ 354.388062][T13227] bond0: (slave bond_slave_0): Releasing backup interface [ 354.538946][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.556798][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.605875][ T3945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.625579][ T3945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.677913][T13242] delete_channel: no stack [ 354.749091][T13249] netlink: 'syz.0.2377': attribute type 2 has an invalid length. [ 354.763189][T13251] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2378'. [ 354.773596][T13249] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2377'. [ 355.151276][T13261] C: renamed from team_slave_0 (while UP) [ 355.167605][T13261] netlink: 'syz.5.2334': attribute type 2 has an invalid length. [ 355.186444][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2382'. [ 355.211675][T13261] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2334'. [ 355.221135][T13261] net_ratelimit: 109 callbacks suppressed [ 355.221161][T13261] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 355.221890][T13265] openvswitch: netlink: Flow key attr not present in new flow. [ 355.347959][T13267] veth1_macvtap: left allmulticast mode [ 355.389837][T13267] veth1_macvtap: left promiscuous mode [ 355.405240][T13267] macsec0: left promiscuous mode [ 355.464551][T13270] veth1_macvtap: entered promiscuous mode [ 355.485607][T13270] veth1_macvtap: entered allmulticast mode [ 355.517843][T13270] macsec0: entered promiscuous mode [ 355.571007][T13279] siw: device registration error -23 [ 355.761930][ T52] Bluetooth: hci4: command tx timeout [ 355.868669][T13290] netlink: 'syz.4.2391': attribute type 29 has an invalid length. [ 355.883608][T13290] netlink: 'syz.4.2391': attribute type 29 has an invalid length. [ 355.903291][T13290] netlink: 'syz.4.2391': attribute type 29 has an invalid length. [ 356.130877][T13296] netlink: 'syz.1.2392': attribute type 2 has an invalid length. [ 356.141987][T13296] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2392'. [ 356.151426][T13296] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 356.269897][T13302] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2395'. [ 356.279338][T13302] openvswitch: netlink: Flow key attr not present in new flow. [ 356.471833][T13311] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2396'. [ 357.187300][T13327] siw: device registration error -23 [ 357.267720][T13330] netlink: 'syz.4.2405': attribute type 2 has an invalid length. [ 357.276678][T13330] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2405'. [ 357.289793][T13330] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 357.343739][T13329] option changes via remount are deprecated (pid=13326 comm=syz.0.2403) [ 357.643821][T13342] netlink: zone id is out of range [ 357.649777][T13342] netlink: zone id is out of range [ 357.657287][T13342] netlink: zone id is out of range [ 357.664600][T13342] netlink: zone id is out of range [ 357.669989][T13342] netlink: zone id is out of range [ 357.842272][ T52] Bluetooth: hci4: command tx timeout [ 359.301152][T13376] netlink: 'syz.4.2416': attribute type 2 has an invalid length. [ 359.309947][T13376] __nla_validate_parse: 2 callbacks suppressed [ 359.309981][T13376] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2416'. [ 359.633967][T13392] netlink: 'syz.5.2422': attribute type 1 has an invalid length. [ 359.716761][T13393] siw: device registration error -23 [ 360.605132][T13414] netlink: 'syz.1.2431': attribute type 2 has an invalid length. [ 360.613266][T13414] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2431'. [ 360.623854][T13414] net_ratelimit: 218 callbacks suppressed [ 360.623890][T13414] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 360.658364][T13418] FAULT_INJECTION: forcing a failure. [ 360.658364][T13418] name failslab, interval 1, probability 0, space 0, times 0 [ 360.671154][T13418] CPU: 0 UID: 0 PID: 13418 Comm: syz.4.2433 Not tainted syzkaller #0 PREEMPT(full) [ 360.671181][T13418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.671194][T13418] Call Trace: [ 360.671203][T13418] [ 360.671213][T13418] dump_stack_lvl+0x189/0x250 [ 360.671244][T13418] ? __pfx____ratelimit+0x10/0x10 [ 360.671269][T13418] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.671293][T13418] ? __pfx__printk+0x10/0x10 [ 360.671321][T13418] ? rcu_is_watching+0x15/0xb0 [ 360.671347][T13418] ? trace_fib_table_lookup+0x85/0x1e0 [ 360.671384][T13418] should_fail_ex+0x414/0x560 [ 360.671415][T13418] should_failslab+0xa8/0x100 [ 360.671447][T13418] kmem_cache_alloc_noprof+0x74/0x6f0 [ 360.671473][T13418] ? dst_alloc+0x105/0x170 [ 360.671503][T13418] dst_alloc+0x105/0x170 [ 360.671523][T13418] ? ip_check_mc_rcu+0x4c7/0x680 [ 360.671558][T13418] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 360.671598][T13418] ? ip_route_output_key_hash+0xc1/0x280 [ 360.671630][T13418] ip_route_output_key_hash+0x174/0x280 [ 360.671663][T13418] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 360.671688][T13418] ? skb_network_protocol+0x508/0x760 [ 360.671717][T13418] ? __pfx_skb_network_protocol+0x10/0x10 [ 360.671749][T13418] vti6_tnl_xmit+0xc59/0x1ae0 [ 360.671796][T13418] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 360.671828][T13418] ? validate_xmit_skb+0xd78/0x1500 [ 360.671862][T13418] dev_hard_start_xmit+0x2cd/0x800 [ 360.671906][T13418] __dev_queue_xmit+0x1493/0x3140 [ 360.671939][T13418] ? __dev_queue_xmit+0x289/0x3140 [ 360.671982][T13418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 360.672011][T13418] ? rcu_is_watching+0x15/0xb0 [ 360.672036][T13418] ? trace_kmalloc+0x1f/0xb0 [ 360.672058][T13418] ? __kmalloc_node_track_caller_noprof+0x58b/0x810 [ 360.672105][T13418] ? pskb_expand_head+0xb44/0x1160 [ 360.672140][T13418] __bpf_tx_skb+0x18e/0x260 [ 360.672174][T13418] bpf_clone_redirect+0x313/0x4b0 [ 360.672213][T13418] ? bpf_test_run+0x192/0x7d0 [ 360.672234][T13418] bpf_prog_170f4aa34f32f3f3+0x5f/0x68 [ 360.672258][T13418] ? perf_trace_run_bpf_submit+0x100/0x170 [ 360.672291][T13418] ? perf_trace_preemptirq_template+0x280/0x340 [ 360.672319][T13418] ? __local_bh_enable_ip+0xce/0x1c0 [ 360.672340][T13418] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 360.672368][T13418] ? ktime_get+0x45/0x200 [ 360.672393][T13418] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 360.672423][T13418] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 360.672463][T13418] ? __local_bh_disable_ip+0xf1/0x190 [ 360.672483][T13418] ? __pfx___cant_migrate+0x10/0x10 [ 360.672503][T13418] ? __local_bh_enable_ip+0x12d/0x1c0 [ 360.672522][T13418] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 360.672549][T13418] ? bpf_test_timer_continue+0x10d/0x320 [ 360.672575][T13418] bpf_test_run+0x313/0x7d0 [ 360.672624][T13418] ? __pfx_bpf_test_run+0x10/0x10 [ 360.672659][T13418] ? rcu_is_watching+0x15/0xb0 [ 360.672685][T13418] ? __kasan_krealloc+0xeb/0x110 [ 360.672713][T13418] ? eth_type_trans+0x35e/0x6d0 [ 360.672746][T13418] ? convert___skb_to_skb+0x3d/0x5b0 [ 360.672770][T13418] bpf_prog_test_run_skb+0xd67/0x1d50 [ 360.672819][T13418] ? __fget_files+0x2a/0x420 [ 360.672837][T13418] ? __fget_files+0x3a0/0x420 [ 360.672854][T13418] ? __fget_files+0x2a/0x420 [ 360.672879][T13418] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 360.672909][T13418] bpf_prog_test_run+0x2c7/0x340 [ 360.672934][T13418] __sys_bpf+0x562/0x860 [ 360.672959][T13418] ? __pfx___sys_bpf+0x10/0x10 [ 360.673003][T13418] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 360.673025][T13418] ? ksys_write+0x22a/0x250 [ 360.673053][T13418] ? __pfx_ksys_write+0x10/0x10 [ 360.673085][T13418] __x64_sys_bpf+0x7c/0x90 [ 360.673107][T13418] do_syscall_64+0xfa/0xf80 [ 360.673134][T13418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.673163][T13418] ? clear_bhb_loop+0x60/0xb0 [ 360.673187][T13418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.673207][T13418] RIP: 0033:0x7f1fb3d8f749 [ 360.673226][T13418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.673244][T13418] RSP: 002b:00007f1fb4c3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 360.673265][T13418] RAX: ffffffffffffffda RBX: 00007f1fb3fe5fa0 RCX: 00007f1fb3d8f749 [ 360.673279][T13418] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 360.673293][T13418] RBP: 00007f1fb4c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 360.673306][T13418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 360.673318][T13418] R13: 00007f1fb3fe6038 R14: 00007f1fb3fe5fa0 R15: 00007ffebedd0f98 [ 360.673358][T13418] [ 361.585130][T13430] openvswitch: netlink: IP tunnel dst address not specified [ 362.213289][T13451] netlink: zone id is out of range [ 362.218754][T13451] netlink: zone id is out of range [ 362.224643][T13451] netlink: zone id is out of range [ 362.230027][T13451] netlink: zone id is out of range [ 362.235925][T13451] netlink: zone id is out of range [ 362.244966][T13451] netlink: zone id is out of range [ 362.250471][T13451] netlink: zone id is out of range [ 362.255352][T13453] netlink: 'syz.4.2443': attribute type 1 has an invalid length. [ 362.257020][T13451] netlink: zone id is out of range [ 362.495952][T13459] netlink: 'syz.0.2446': attribute type 2 has an invalid length. [ 362.509194][T13459] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2446'. [ 362.610545][T13464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2448'. [ 362.861120][T13477] FAULT_INJECTION: forcing a failure. [ 362.861120][T13477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.886906][T13477] CPU: 0 UID: 0 PID: 13477 Comm: syz.1.2453 Not tainted syzkaller #0 PREEMPT(full) [ 362.886933][T13477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.886946][T13477] Call Trace: [ 362.886953][T13477] [ 362.886962][T13477] dump_stack_lvl+0x189/0x250 [ 362.886987][T13477] ? __pfx____ratelimit+0x10/0x10 [ 362.887018][T13477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.887038][T13477] ? __pfx__printk+0x10/0x10 [ 362.887078][T13477] should_fail_ex+0x414/0x560 [ 362.887105][T13477] _copy_from_user+0x2d/0xb0 [ 362.887133][T13477] ___sys_sendmsg+0x158/0x2a0 [ 362.887163][T13477] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.887223][T13477] ? __fget_files+0x2a/0x420 [ 362.887240][T13477] ? __fget_files+0x3a0/0x420 [ 362.887265][T13477] __x64_sys_sendmsg+0x19b/0x260 [ 362.887295][T13477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.887340][T13477] ? do_syscall_64+0xbe/0xf80 [ 362.887368][T13477] do_syscall_64+0xfa/0xf80 [ 362.887393][T13477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.887412][T13477] ? clear_bhb_loop+0x60/0xb0 [ 362.887435][T13477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.887454][T13477] RIP: 0033:0x7fab3b18f749 [ 362.887471][T13477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.887489][T13477] RSP: 002b:00007fab3c098038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.887510][T13477] RAX: ffffffffffffffda RBX: 00007fab3b3e5fa0 RCX: 00007fab3b18f749 [ 362.887525][T13477] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 362.887538][T13477] RBP: 00007fab3c098090 R08: 0000000000000000 R09: 0000000000000000 [ 362.887550][T13477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.887562][T13477] R13: 00007fab3b3e6038 R14: 00007fab3b3e5fa0 R15: 00007ffccc932268 [ 362.887594][T13477] [ 363.245908][T13485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2456'. [ 363.257843][T13485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2456'. [ 363.464712][T13494] netlink: 'syz.3.2460': attribute type 2 has an invalid length. [ 363.473057][T13494] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2460'. [ 363.649816][T13504] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2465'. [ 363.680113][ T52] Bluetooth: hci2: ISO packet for unknown connection handle 255 [ 363.919255][T13517] netlink: 'syz.3.2468': attribute type 1 has an invalid length. [ 364.485514][T13546] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 364.500423][T13546] veth1_macvtap: left allmulticast mode [ 364.507463][T13546] veth1_macvtap: left promiscuous mode [ 364.513728][T13546] macsec0: left promiscuous mode [ 364.665166][T13550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2481'. [ 364.674290][T13550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2481'. [ 364.739742][T13556] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2483'. [ 364.768897][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2484'. [ 365.074386][T13572] veth1_macvtap: left allmulticast mode [ 365.081244][T13572] veth1_macvtap: left promiscuous mode [ 365.088148][T13572] macsec0: left promiscuous mode [ 365.133602][T13574] netlink: 'syz.1.2488': attribute type 10 has an invalid length. [ 365.216274][T13574] team0: Cannot enslave team device to itself [ 365.282629][T13575] veth1_macvtap: entered promiscuous mode [ 365.314822][T13575] veth1_macvtap: entered allmulticast mode [ 365.332827][T13575] macsec0: entered promiscuous mode [ 365.436587][T13582] siw: device registration error -23 [ 365.589155][T13589] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2493'. [ 365.885158][T13600] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2496'. [ 366.106462][T13617] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2503'. [ 366.464263][T13631] net_ratelimit: 103 callbacks suppressed [ 366.464285][T13631] netlink: zone id is out of range [ 366.512061][T13631] netlink: zone id is out of range [ 366.528767][T13631] netlink: zone id is out of range [ 366.550176][T13631] netlink: get zone limit has 4 unknown bytes [ 366.649579][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2508'. [ 366.984398][T13654] netlink: 'syz.0.2511': attribute type 21 has an invalid length. [ 367.021831][T13654] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2511'. [ 367.072093][T13659] option changes via remount are deprecated (pid=13656 comm=syz.1.2512) [ 367.355218][T13664] syzkaller0: entered promiscuous mode [ 367.377857][T13664] syzkaller0: entered allmulticast mode [ 368.058809][T13680] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2518'. [ 369.094682][T13685] FAULT_INJECTION: forcing a failure. [ 369.094682][T13685] name failslab, interval 1, probability 0, space 0, times 0 [ 369.143037][T13685] CPU: 0 UID: 0 PID: 13685 Comm: syz.0.2519 Not tainted syzkaller #0 PREEMPT(full) [ 369.143064][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.143077][T13685] Call Trace: [ 369.143087][T13685] [ 369.143098][T13685] dump_stack_lvl+0x189/0x250 [ 369.143133][T13685] ? __pfx____ratelimit+0x10/0x10 [ 369.143174][T13685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.143201][T13685] ? __pfx__printk+0x10/0x10 [ 369.143264][T13685] ? __pfx___might_resched+0x10/0x10 [ 369.143309][T13685] should_fail_ex+0x414/0x560 [ 369.143362][T13685] should_failslab+0xa8/0x100 [ 369.143404][T13685] __kmalloc_noprof+0xcb/0x800 [ 369.143433][T13685] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 369.143484][T13685] tomoyo_realpath_from_path+0xe3/0x5d0 [ 369.143517][T13685] ? tomoyo_domain+0xd8/0x130 [ 369.143572][T13685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 369.143609][T13685] tomoyo_path_number_perm+0x1e8/0x5a0 [ 369.143658][T13685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.143702][T13685] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 369.143896][T13685] ? __fget_files+0x2a/0x420 [ 369.143942][T13685] ? __fget_files+0x3a0/0x420 [ 369.143962][T13685] ? __fget_files+0x2a/0x420 [ 369.144007][T13685] security_file_ioctl+0xcb/0x2d0 [ 369.144051][T13685] __se_sys_ioctl+0x47/0x170 [ 369.144096][T13685] do_syscall_64+0xfa/0xf80 [ 369.144133][T13685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.144161][T13685] ? clear_bhb_loop+0x60/0xb0 [ 369.144202][T13685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.144223][T13685] RIP: 0033:0x7fa02978f749 [ 369.144247][T13685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.144264][T13685] RSP: 002b:00007fa02a5e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.144285][T13685] RAX: ffffffffffffffda RBX: 00007fa0299e5fa0 RCX: 00007fa02978f749 [ 369.144301][T13685] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 369.144313][T13685] RBP: 00007fa02a5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 369.144326][T13685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.144337][T13685] R13: 00007fa0299e6038 R14: 00007fa0299e5fa0 R15: 00007ffe7da537b8 [ 369.144437][T13685] [ 369.144445][T13685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.417771][T13692] netlink: 'syz.4.2521': attribute type 1 has an invalid length. [ 369.488907][ T3945] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.639215][T13699] netlink: zone id is out of range [ 369.656962][T13699] netlink: zone id is out of range [ 369.670689][T13699] netlink: zone id is out of range [ 369.677119][T13699] netlink: get zone limit has 4 unknown bytes [ 369.698723][ T3945] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.824910][ T3945] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.862789][T13705] __nla_validate_parse: 2 callbacks suppressed [ 369.862809][T13705] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2524'. [ 370.025244][ T3945] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.054676][T13708] option changes via remount are deprecated (pid=13706 comm=syz.1.2525) [ 371.304940][T13748] openvswitch: netlink: IP tunnel dst address not specified [ 371.461991][T13753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 372.289296][ T3945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.315593][ T3945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.374499][ T3945] bond0 (unregistering): Released all slaves [ 372.428405][T13756] veth1_macvtap: left allmulticast mode [ 372.480067][T13756] veth1_macvtap: left promiscuous mode [ 372.490002][T13756] macsec0: left promiscuous mode [ 372.507698][T13761] veth1_macvtap: entered promiscuous mode [ 372.516165][T13761] veth1_macvtap: entered allmulticast mode [ 372.522281][T13761] macsec0: entered promiscuous mode [ 372.533371][T13765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2537'. [ 372.581710][ T3945] : left promiscuous mode [ 372.816828][T13785] option changes via remount are deprecated (pid=13783 comm=syz.4.2540) [ 372.920269][T13792] syzkaller0: entered promiscuous mode [ 372.958589][T13792] syzkaller0: entered allmulticast mode [ 373.675231][T13827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2548'. [ 374.994599][ T3945] hsr_slave_0: left promiscuous mode [ 375.035308][ T3945] hsr_slave_1: left promiscuous mode [ 375.058370][ T3945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.073349][ T3945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.087140][ T3945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.095695][ T3945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.132720][ T3945] veth0_macvtap: left promiscuous mode [ 375.140794][ T3945] veth1_vlan: left promiscuous mode [ 375.142117][T13851] openvswitch: netlink: IP tunnel dst address not specified [ 375.148417][ T3945] veth0_vlan: left promiscuous mode [ 375.437546][T13867] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2557'. [ 375.810925][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2559'. [ 375.833403][ T3945] team0 (unregistering): Port device team_slave_1 removed [ 375.885951][ T3945] team0 (unregistering): Port device C removed [ 376.032253][T13874] netlink: zone id is out of range [ 376.039147][T13874] netlink: zone id is out of range [ 376.045153][T13874] netlink: zone id is out of range [ 376.050563][T13874] netlink: zone id is out of range [ 376.059148][T13874] netlink: zone id is out of range [ 376.065809][T13874] netlink: zone id is out of range [ 376.071065][T13874] netlink: zone id is out of range [ 376.078371][T13874] netlink: zone id is out of range [ 376.084417][T13874] netlink: zone id is out of range [ 376.340116][T13843] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2551'. [ 376.354544][T13849] veth1_macvtap: entered promiscuous mode [ 376.365735][T13849] veth1_macvtap: entered allmulticast mode [ 376.378333][T13849] macsec0: entered promiscuous mode [ 376.591789][T13882] option changes via remount are deprecated (pid=13881 comm=syz.4.2562) [ 376.644172][T13888] netlink: 'syz.1.2564': attribute type 13 has an invalid length. [ 376.712499][T13888] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2564'. [ 376.996799][T13901] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2568'. [ 377.197121][T13907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2570'. [ 377.404096][T13895] tap0: tun_chr_ioctl cmd 1074025677 [ 377.413730][T13895] tap0: linktype set to 0 [ 377.566821][T13918] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2572'. [ 377.814015][T13929] veth1_macvtap: left allmulticast mode [ 377.820780][T13929] veth1_macvtap: left promiscuous mode [ 377.838171][T13929] macsec0: left promiscuous mode [ 377.891862][T13934] veth1_macvtap: entered promiscuous mode [ 377.925377][T13934] veth1_macvtap: entered allmulticast mode [ 377.961732][T13934] macsec0: entered promiscuous mode [ 378.221016][T13947] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2579'. [ 378.254779][T13943] netlink: 'syz.5.2577': attribute type 2 has an invalid length. [ 378.286953][T13943] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2577'. [ 378.369302][T13954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 378.598777][T13944] tmpfs: Unknown parameter 'gid0xffffffffffffffff' [ 379.048776][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.055265][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.791982][T14001] option changes via remount are deprecated (pid=13997 comm=syz.3.2591) [ 379.977583][T14012] netlink: 'syz.0.2595': attribute type 9 has an invalid length. [ 379.987628][T14012] netlink: 'syz.0.2595': attribute type 11 has an invalid length. [ 380.035728][T14017] netlink: 'syz.3.2596': attribute type 9 has an invalid length. [ 380.050852][T14017] netlink: 'syz.3.2596': attribute type 11 has an invalid length. [ 380.070672][T14017] netlink: 'syz.3.2596': attribute type 12 has an invalid length. [ 380.085953][T14012] netlink: 'syz.0.2595': attribute type 12 has an invalid length. [ 380.588057][T14039] netlink: 'syz.3.2603': attribute type 1 has an invalid length. [ 381.470796][T14058] __nla_validate_parse: 8 callbacks suppressed [ 381.470833][T14058] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2605'. [ 381.545101][T14061] netlink: 'syz.5.2609': attribute type 9 has an invalid length. [ 381.553959][T14061] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2609'. [ 381.565078][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2609'. [ 381.767653][T14066] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2611'. [ 381.793928][T14069] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2611'. [ 381.873681][T14076] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2613'. [ 382.218123][T14095] validate_nla: 2 callbacks suppressed [ 382.218194][T14095] netlink: 'syz.4.2620': attribute type 1 has an invalid length. [ 383.543178][T14094] netlink: 'syz.1.2621': attribute type 2 has an invalid length. [ 383.550932][T14094] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2621'. [ 383.560213][T14094] net_ratelimit: 102 callbacks suppressed [ 383.560230][T14094] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 383.583104][T14099] sit0: entered allmulticast mode [ 383.832933][T14116] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2628'. [ 383.840529][T14123] FAULT_INJECTION: forcing a failure. [ 383.840529][T14123] name failslab, interval 1, probability 0, space 0, times 0 [ 383.866328][T14123] CPU: 0 UID: 0 PID: 14123 Comm: syz.5.2629 Not tainted syzkaller #0 PREEMPT(full) [ 383.866357][T14123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.866369][T14123] Call Trace: [ 383.866376][T14123] [ 383.866385][T14123] dump_stack_lvl+0x189/0x250 [ 383.866412][T14123] ? __pfx____ratelimit+0x10/0x10 [ 383.866436][T14123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.866457][T14123] ? __pfx__printk+0x10/0x10 [ 383.866486][T14123] ? __pfx___might_resched+0x10/0x10 [ 383.866507][T14123] ? fs_reclaim_acquire+0x7d/0x100 [ 383.866539][T14123] should_fail_ex+0x414/0x560 [ 383.866567][T14123] should_failslab+0xa8/0x100 [ 383.866596][T14123] kmem_cache_alloc_node_noprof+0x77/0x710 [ 383.866621][T14123] ? __alloc_skb+0x255/0x430 [ 383.866645][T14123] ? napi_skb_cache_get+0x4a5/0x780 [ 383.866670][T14123] ? napi_skb_cache_get+0x151/0x780 [ 383.866700][T14123] __alloc_skb+0x255/0x430 [ 383.866729][T14123] ? __pfx___alloc_skb+0x10/0x10 [ 383.866757][T14123] ? netlink_autobind+0xdb/0x300 [ 383.866776][T14123] ? netlink_autobind+0x2c2/0x300 [ 383.866802][T14123] netlink_sendmsg+0x5c6/0xb30 [ 383.866833][T14123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.866857][T14123] ? aa_sock_msg_perm+0xf1/0x1b0 [ 383.866881][T14123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 383.866906][T14123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.866928][T14123] __sock_sendmsg+0x21c/0x270 [ 383.866956][T14123] ____sys_sendmsg+0x505/0x820 [ 383.866992][T14123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.867033][T14123] ? import_iovec+0x74/0xa0 [ 383.867072][T14123] ___sys_sendmsg+0x21f/0x2a0 [ 383.867104][T14123] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.867142][T14123] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 383.867202][T14123] ? __fget_files+0x2a/0x420 [ 383.867219][T14123] ? __fget_files+0x3a0/0x420 [ 383.867250][T14123] __x64_sys_sendmsg+0x19b/0x260 [ 383.867283][T14123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.867311][T14123] ? irqentry_exit+0x5dd/0x660 [ 383.867364][T14123] do_syscall_64+0xfa/0xf80 [ 383.867390][T14123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.867409][T14123] ? clear_bhb_loop+0x60/0xb0 [ 383.867434][T14123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.867453][T14123] RIP: 0033:0x7f5ac478f749 [ 383.867470][T14123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.867487][T14123] RSP: 002b:00007f5ac556e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.867508][T14123] RAX: ffffffffffffffda RBX: 00007f5ac49e5fa0 RCX: 00007f5ac478f749 [ 383.867522][T14123] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 383.867534][T14123] RBP: 00007f5ac556e090 R08: 0000000000000000 R09: 0000000000000000 [ 383.867546][T14123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.867557][T14123] R13: 00007f5ac49e6038 R14: 00007f5ac49e5fa0 R15: 00007ffc7dc919b8 [ 383.867593][T14123] [ 384.645615][T14145] netlink: 'syz.1.2636': attribute type 2 has an invalid length. [ 384.671808][T14145] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2636'. [ 384.698034][T14145] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 384.883278][T14159] netlink: zone id is out of range [ 384.888717][T14159] netlink: zone id is out of range [ 384.914558][T14159] netlink: zone id is out of range [ 384.929278][T14159] netlink: zone id is out of range [ 384.935627][T14159] netlink: zone id is out of range [ 384.941097][T14159] netlink: zone id is out of range [ 384.949057][T14159] netlink: zone id is out of range [ 384.954982][T14159] netlink: zone id is out of range [ 385.580926][T14182] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2648'. [ 385.716777][T14188] netlink: 'syz.3.2651': attribute type 10 has an invalid length. [ 386.556910][T14222] __nla_validate_parse: 2 callbacks suppressed [ 386.556930][T14222] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2662'. [ 386.917168][T14243] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2668'. [ 387.107211][T14247] netlink: 'syz.3.2671': attribute type 2 has an invalid length. [ 387.127438][T14247] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2671'. [ 387.291089][T14259] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2674'. [ 387.307269][T14259] netlink: 'syz.4.2674': attribute type 21 has an invalid length. [ 387.314301][T14261] FAULT_INJECTION: forcing a failure. [ 387.314301][T14261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.317046][T14259] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2674'. [ 387.362028][T14261] CPU: 1 UID: 0 PID: 14261 Comm: syz.0.2676 Not tainted syzkaller #0 PREEMPT(full) [ 387.362053][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.362063][T14261] Call Trace: [ 387.362071][T14261] [ 387.362078][T14261] dump_stack_lvl+0x189/0x250 [ 387.362101][T14261] ? __pfx____ratelimit+0x10/0x10 [ 387.362122][T14261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.362141][T14261] ? __pfx__printk+0x10/0x10 [ 387.362166][T14261] ? __might_fault+0xb0/0x130 [ 387.362201][T14261] should_fail_ex+0x414/0x560 [ 387.362229][T14261] _copy_from_user+0x2d/0xb0 [ 387.362254][T14261] csum_and_copy_from_iter_full+0x1e1/0x1ed0 [ 387.362289][T14261] ? rcu_is_watching+0x15/0xb0 [ 387.362310][T14261] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 387.362328][T14261] ? trace_kmalloc+0x1f/0xb0 [ 387.362348][T14261] ? __kmalloc_node_track_caller_noprof+0x58b/0x810 [ 387.362402][T14261] ip_generic_getfrag+0x12f/0x2b0 [ 387.362438][T14261] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 387.362468][T14261] ? skb_put+0x11b/0x210 [ 387.362498][T14261] __ip_append_data+0x3ba4/0x40c0 [ 387.362524][T14261] ? __lock_acquire+0x6b6/0x2cf0 [ 387.362562][T14261] ? __pfx_raw_getfrag+0x10/0x10 [ 387.362612][T14261] ? __pfx___ip_append_data+0x10/0x10 [ 387.362639][T14261] ? ipv4_mtu+0x53b/0x650 [ 387.362662][T14261] ? ipv4_mtu+0x23/0x650 [ 387.362685][T14261] ? __pfx_ipv4_mtu+0x10/0x10 [ 387.362709][T14261] ? ip_setup_cork+0x577/0x9a0 [ 387.362733][T14261] ? lockdep_hardirqs_on+0x98/0x140 [ 387.362761][T14261] ip_append_data+0x10e/0x190 [ 387.362791][T14261] ? __pfx_raw_getfrag+0x10/0x10 [ 387.362821][T14261] raw_sendmsg+0x13d8/0x18b0 [ 387.362865][T14261] ? __pfx_raw_sendmsg+0x10/0x10 [ 387.362912][T14261] ? aa_sk_perm+0x7ee/0x920 [ 387.362946][T14261] ? __pfx_aa_sk_perm+0x10/0x10 [ 387.362971][T14261] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 387.362996][T14261] ? sock_rps_record_flow+0x19/0x410 [ 387.363019][T14261] ? inet_sendmsg+0x2f4/0x370 [ 387.363037][T14261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.363066][T14261] __sock_sendmsg+0x19c/0x270 [ 387.363092][T14261] ____sys_sendmsg+0x505/0x820 [ 387.363126][T14261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.363165][T14261] ? import_iovec+0x74/0xa0 [ 387.363193][T14261] ___sys_sendmsg+0x21f/0x2a0 [ 387.363223][T14261] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.363258][T14261] ? rcu_read_lock_any_held+0xb3/0x120 [ 387.363309][T14261] ? __fget_files+0x2a/0x420 [ 387.363325][T14261] ? __fget_files+0x3a0/0x420 [ 387.363352][T14261] __x64_sys_sendmsg+0x19b/0x260 [ 387.363390][T14261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.363428][T14261] ? __pfx_ksys_write+0x10/0x10 [ 387.363461][T14261] ? do_syscall_64+0xbe/0xf80 [ 387.363489][T14261] do_syscall_64+0xfa/0xf80 [ 387.363514][T14261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.363533][T14261] ? clear_bhb_loop+0x60/0xb0 [ 387.363554][T14261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.363573][T14261] RIP: 0033:0x7fa02978f749 [ 387.363590][T14261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.363608][T14261] RSP: 002b:00007fa02a5e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.363629][T14261] RAX: ffffffffffffffda RBX: 00007fa0299e5fa0 RCX: 00007fa02978f749 [ 387.363642][T14261] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 387.363654][T14261] RBP: 00007fa02a5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 387.363667][T14261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.363678][T14261] R13: 00007fa0299e6038 R14: 00007fa0299e5fa0 R15: 00007ffe7da537b8 [ 387.363711][T14261] [ 387.974752][T14275] netlink: 'syz.5.2678': attribute type 1 has an invalid length. [ 388.514503][T14285] netlink: 'syz.3.2683': attribute type 4 has an invalid length. [ 389.458701][T14315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2691'. [ 389.476710][T14314] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2692'. [ 389.557431][T14318] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2694'. [ 390.438495][T14345] netlink: 'syz.3.2702': attribute type 1 has an invalid length. [ 390.440840][T14344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2701'. [ 390.885910][T14361] net_ratelimit: 102 callbacks suppressed [ 390.885946][T14361] openvswitch: netlink: IP tunnel dst address not specified [ 390.982864][T14366] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2706'. [ 391.100263][T14365] netlink: 'syz.4.2705': attribute type 2 has an invalid length. [ 391.108360][T14365] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 392.169290][T14403] __nla_validate_parse: 1 callbacks suppressed [ 392.169320][T14403] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2714'. [ 392.206631][T14403] openvswitch: netlink: IP tunnel dst address not specified [ 392.239826][T14409] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2717'. [ 392.506456][T14405] netlink: 'syz.1.2715': attribute type 10 has an invalid length. [ 392.535008][T14417] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2719'. [ 393.102551][T14438] option changes via remount are deprecated (pid=14436 comm=syz.4.2724) [ 393.807287][T14481] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2733'. [ 393.849342][T14482] netlink: 'syz.1.2730': attribute type 1 has an invalid length. [ 394.199060][T14501] : entered promiscuous mode [ 394.366615][T14502] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 394.388571][T14502] pim6reg0: linktype set to 1 [ 394.408322][T14502] netlink: 'syz.3.2737': attribute type 1 has an invalid length. [ 394.430331][T14515] FAULT_INJECTION: forcing a failure. [ 394.430331][T14515] name failslab, interval 1, probability 0, space 0, times 0 [ 394.455708][T14515] CPU: 1 UID: 0 PID: 14515 Comm: syz.0.2742 Not tainted syzkaller #0 PREEMPT(full) [ 394.455737][T14515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 394.455750][T14515] Call Trace: [ 394.455758][T14515] [ 394.455767][T14515] dump_stack_lvl+0x189/0x250 [ 394.455793][T14515] ? __pfx____ratelimit+0x10/0x10 [ 394.455817][T14515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.455838][T14515] ? __pfx__printk+0x10/0x10 [ 394.455876][T14515] should_fail_ex+0x414/0x560 [ 394.455905][T14515] should_failslab+0xa8/0x100 [ 394.455934][T14515] kmem_cache_alloc_noprof+0x74/0x6f0 [ 394.455967][T14515] ? skb_clone+0x212/0x3a0 [ 394.455991][T14515] skb_clone+0x212/0x3a0 [ 394.456014][T14515] __netlink_deliver_tap+0x404/0x850 [ 394.456046][T14515] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.456068][T14515] netlink_deliver_tap+0x19c/0x1b0 [ 394.456089][T14515] netlink_sendskb+0x68/0x140 [ 394.456119][T14515] netlink_unicast+0x397/0x9e0 [ 394.456144][T14515] ? __asan_memcpy+0x40/0x70 [ 394.456174][T14515] ? __pfx_netlink_unicast+0x10/0x10 [ 394.456212][T14515] netlink_rcv_skb+0x28c/0x470 [ 394.456233][T14515] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 394.456259][T14515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 394.456293][T14515] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.456312][T14515] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.456333][T14515] xfrm_netlink_rcv+0x79/0x90 [ 394.456358][T14515] netlink_unicast+0x82f/0x9e0 [ 394.456394][T14515] ? __pfx_netlink_unicast+0x10/0x10 [ 394.456427][T14515] ? netlink_sendmsg+0x642/0xb30 [ 394.456444][T14515] ? skb_put+0x11b/0x210 [ 394.456475][T14515] netlink_sendmsg+0x805/0xb30 [ 394.456504][T14515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.456528][T14515] ? aa_sock_msg_perm+0xf1/0x1b0 [ 394.456549][T14515] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 394.456575][T14515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.456596][T14515] __sock_sendmsg+0x21c/0x270 [ 394.456622][T14515] ____sys_sendmsg+0x505/0x820 [ 394.456657][T14515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.456696][T14515] ? import_iovec+0x74/0xa0 [ 394.456727][T14515] ___sys_sendmsg+0x21f/0x2a0 [ 394.456758][T14515] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.456825][T14515] ? __fget_files+0x2a/0x420 [ 394.456842][T14515] ? __fget_files+0x3a0/0x420 [ 394.456871][T14515] __x64_sys_sendmsg+0x19b/0x260 [ 394.456902][T14515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.456941][T14515] ? __pfx_ksys_write+0x10/0x10 [ 394.456976][T14515] ? do_syscall_64+0xbe/0xf80 [ 394.457004][T14515] do_syscall_64+0xfa/0xf80 [ 394.457029][T14515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.457047][T14515] ? clear_bhb_loop+0x60/0xb0 [ 394.457070][T14515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.457089][T14515] RIP: 0033:0x7fa02978f749 [ 394.457107][T14515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.457124][T14515] RSP: 002b:00007fa02a5e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.457144][T14515] RAX: ffffffffffffffda RBX: 00007fa0299e5fa0 RCX: 00007fa02978f749 [ 394.457158][T14515] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 394.457170][T14515] RBP: 00007fa02a5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 394.457182][T14515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.457193][T14515] R13: 00007fa0299e6038 R14: 00007fa0299e5fa0 R15: 00007ffe7da537b8 [ 394.457227][T14515] [ 395.112621][T14526] netlink: 'syz.4.2743': attribute type 1 has an invalid length. [ 395.160833][T14532] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2746'. [ 395.749574][T14540] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2750'. [ 395.813195][T14545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2751'. [ 395.964556][T14552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2752'. [ 395.976738][T14549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2753'. [ 396.143818][T14558] : entered promiscuous mode [ 396.355604][T14564] veth1_macvtap: left promiscuous mode [ 396.361894][T14564] macsec0: entered allmulticast mode [ 396.434280][T14569] siw: device registration error -23 [ 396.473315][T14568] veth1_macvtap: entered promiscuous mode [ 396.479130][T14568] veth1_macvtap: entered allmulticast mode [ 396.491832][T14568] macsec0: entered promiscuous mode [ 396.671054][T14575] netlink: 'syz.5.2761': attribute type 9 has an invalid length. [ 396.680170][T14575] netlink: 'syz.5.2761': attribute type 11 has an invalid length. [ 396.690886][T14575] netlink: 'syz.5.2761': attribute type 12 has an invalid length. [ 396.704721][T14575] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.2761'. [ 397.027660][T14589] veth1_macvtap: left allmulticast mode [ 397.194334][T14589] veth1_macvtap: left promiscuous mode [ 397.200026][T14589] macsec0: left promiscuous mode [ 397.243290][T14594] veth1_macvtap: entered promiscuous mode [ 397.249075][T14594] veth1_macvtap: entered allmulticast mode [ 397.255143][T14594] macsec0: entered promiscuous mode [ 397.407927][T14602] __nla_validate_parse: 2 callbacks suppressed [ 397.407977][T14602] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2768'. [ 397.508807][T14609] netlink: 'syz.0.2770': attribute type 1 has an invalid length. [ 397.743177][T14618] siw: device registration error -23 [ 398.027438][T14634] netlink: zone id is out of range [ 398.045440][T14634] netlink: zone id is out of range [ 398.061332][T14634] netlink: zone id is out of range [ 398.068881][T14634] netlink: get zone limit has 4 unknown bytes [ 398.354764][T14643] veth1_macvtap: left allmulticast mode [ 398.361403][T14643] veth1_macvtap: left promiscuous mode [ 398.403114][T14643] macsec0: left promiscuous mode [ 398.499587][T14652] netlink: zone id is out of range [ 398.505119][T14652] netlink: zone id is out of range [ 398.510657][T14652] netlink: zone id is out of range [ 398.511435][T14647] veth1_macvtap: entered promiscuous mode [ 398.530635][T14647] veth1_macvtap: entered allmulticast mode [ 398.540214][T14647] macsec0: entered promiscuous mode [ 398.548822][T14652] netlink: zone id is out of range [ 398.571945][T14652] netlink: zone id is out of range [ 398.594993][T14650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2782'. [ 398.614427][T14652] netlink: zone id is out of range [ 398.903039][T14668] netlink: 'syz.4.2788': attribute type 9 has an invalid length. [ 398.911060][T14668] netlink: 'syz.4.2788': attribute type 11 has an invalid length. [ 398.919561][T14668] netlink: 'syz.4.2788': attribute type 12 has an invalid length. [ 398.927955][T14668] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2788'. [ 398.937916][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2788'. [ 399.073950][T14671] netlink: 'syz.0.2790': attribute type 6 has an invalid length. [ 399.101994][T14671] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2790'. [ 399.385063][T14688] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 399.634468][T14694] siw: device registration error -23 [ 399.836405][T14701] veth1_macvtap: left allmulticast mode [ 399.844324][T14701] veth1_macvtap: left promiscuous mode [ 399.850572][T14701] macsec0: left promiscuous mode [ 399.920789][T14702] netlink: 'syz.0.2797': attribute type 2 has an invalid length. [ 399.929977][T14702] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2797'. [ 399.940494][T14704] veth1_macvtap: entered promiscuous mode [ 399.946524][T14704] veth1_macvtap: entered allmulticast mode [ 399.952815][T14704] macsec0: entered promiscuous mode [ 400.132229][T14711] netlink: 4068 bytes leftover after parsing attributes in process `syz.4.2801'. [ 400.146555][T14711] FAULT_INJECTION: forcing a failure. [ 400.146555][T14711] name failslab, interval 1, probability 0, space 0, times 0 [ 400.159876][T14711] CPU: 1 UID: 0 PID: 14711 Comm: syz.4.2801 Not tainted syzkaller #0 PREEMPT(full) [ 400.159900][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.159911][T14711] Call Trace: [ 400.159918][T14711] [ 400.159926][T14711] dump_stack_lvl+0x189/0x250 [ 400.159951][T14711] ? __pfx____ratelimit+0x10/0x10 [ 400.159975][T14711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.159996][T14711] ? __pfx__printk+0x10/0x10 [ 400.160044][T14711] should_fail_ex+0x414/0x560 [ 400.160072][T14711] should_failslab+0xa8/0x100 [ 400.160101][T14711] __kmalloc_cache_noprof+0x6f/0x6f0 [ 400.160124][T14711] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 400.160145][T14711] ? sctp_add_bind_addr+0x8c/0x370 [ 400.160170][T14711] sctp_add_bind_addr+0x8c/0x370 [ 400.160196][T14711] sctp_copy_local_addr_list+0x30b/0x4e0 [ 400.160219][T14711] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 400.160250][T14711] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 400.160272][T14711] ? sctp_v6_is_any+0x64/0x80 [ 400.160296][T14711] ? sctp_copy_one_addr+0x93/0x360 [ 400.160321][T14711] sctp_bind_addr_copy+0xb3/0x3c0 [ 400.160343][T14711] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 400.160376][T14711] sctp_connect_new_asoc+0x2e0/0x690 [ 400.160406][T14711] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 400.160428][T14711] ? __local_bh_enable_ip+0x12d/0x1c0 [ 400.160455][T14711] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 400.160480][T14711] ? security_sctp_bind_connect+0x7e/0x2e0 [ 400.160509][T14711] sctp_sendmsg+0x155c/0x2810 [ 400.160546][T14711] ? __pfx_sctp_sendmsg+0x10/0x10 [ 400.160567][T14711] ? aa_sk_perm+0x15f/0x920 [ 400.160597][T14711] ? aa_sk_perm+0x7ee/0x920 [ 400.160630][T14711] ? __pfx_aa_sk_perm+0x10/0x10 [ 400.160661][T14711] ? sock_rps_record_flow+0x19/0x410 [ 400.160685][T14711] ? inet_sendmsg+0x2f4/0x370 [ 400.160708][T14711] __sock_sendmsg+0x19c/0x270 [ 400.160735][T14711] ____sys_sendmsg+0x505/0x820 [ 400.160774][T14711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.160813][T14711] ? import_iovec+0x74/0xa0 [ 400.160843][T14711] ___sys_sendmsg+0x21f/0x2a0 [ 400.160874][T14711] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.160941][T14711] ? __fget_files+0x2a/0x420 [ 400.160958][T14711] ? __fget_files+0x3a0/0x420 [ 400.160986][T14711] __x64_sys_sendmsg+0x19b/0x260 [ 400.161018][T14711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.161057][T14711] ? __pfx_ksys_write+0x10/0x10 [ 400.161086][T14711] ? do_syscall_64+0xbe/0xf80 [ 400.161114][T14711] do_syscall_64+0xfa/0xf80 [ 400.161139][T14711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.161158][T14711] ? clear_bhb_loop+0x60/0xb0 [ 400.161181][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.161200][T14711] RIP: 0033:0x7f1fb3d8f749 [ 400.161218][T14711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.161243][T14711] RSP: 002b:00007f1fb4c3d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.161263][T14711] RAX: ffffffffffffffda RBX: 00007f1fb3fe5fa0 RCX: 00007f1fb3d8f749 [ 400.161277][T14711] RDX: 0000000004000040 RSI: 0000200000001d80 RDI: 0000000000000007 [ 400.161290][T14711] RBP: 00007f1fb4c3d090 R08: 0000000000000000 R09: 0000000000000000 [ 400.161302][T14711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.161313][T14711] R13: 00007f1fb3fe6038 R14: 00007f1fb3fe5fa0 R15: 00007ffebedd0f98 [ 400.161347][T14711] [ 400.177002][T14713] FAULT_INJECTION: forcing a failure. [ 400.177002][T14713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.507031][T14713] CPU: 1 UID: 0 PID: 14713 Comm: syz.0.2802 Not tainted syzkaller #0 PREEMPT(full) [ 400.507057][T14713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.507069][T14713] Call Trace: [ 400.507079][T14713] [ 400.507088][T14713] dump_stack_lvl+0x189/0x250 [ 400.507113][T14713] ? __pfx____ratelimit+0x10/0x10 [ 400.507136][T14713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.507156][T14713] ? __pfx__printk+0x10/0x10 [ 400.507194][T14713] should_fail_ex+0x414/0x560 [ 400.507228][T14713] _copy_from_user+0x2d/0xb0 [ 400.507253][T14713] __copy_msghdr+0x3c5/0x5b0 [ 400.507285][T14713] ___sys_sendmsg+0x1a5/0x2a0 [ 400.507314][T14713] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.507376][T14713] ? __fget_files+0x2a/0x420 [ 400.507392][T14713] ? __fget_files+0x3a0/0x420 [ 400.507419][T14713] __x64_sys_sendmsg+0x19b/0x260 [ 400.507450][T14713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.507487][T14713] ? __pfx_ksys_write+0x10/0x10 [ 400.507514][T14713] ? do_syscall_64+0xbe/0xf80 [ 400.507541][T14713] do_syscall_64+0xfa/0xf80 [ 400.507566][T14713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.507583][T14713] ? clear_bhb_loop+0x60/0xb0 [ 400.507604][T14713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.507620][T14713] RIP: 0033:0x7fa02978f749 [ 400.507635][T14713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.507651][T14713] RSP: 002b:00007fa02a5e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.507669][T14713] RAX: ffffffffffffffda RBX: 00007fa0299e5fa0 RCX: 00007fa02978f749 [ 400.507682][T14713] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 400.507694][T14713] RBP: 00007fa02a5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 400.507704][T14713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.507714][T14713] R13: 00007fa0299e6038 R14: 00007fa0299e5fa0 R15: 00007ffe7da537b8 [ 400.507743][T14713] [ 401.051369][T14727] netlink: 'syz.5.2809': attribute type 2 has an invalid length. [ 401.067992][T14731] netlink: 'syz.1.2810': attribute type 1 has an invalid length. [ 401.086686][T14727] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2809'. [ 402.405439][T14761] siw: device registration error -23 [ 402.805372][T14775] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2823'. [ 402.823604][T14775] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2823'. [ 402.849017][T14777] netlink: 'syz.0.2824': attribute type 9 has an invalid length. [ 402.861648][T14777] netlink: 'syz.0.2824': attribute type 11 has an invalid length. [ 402.879776][T14777] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.2824'. [ 402.898320][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 403.061347][T14785] veth1_macvtap: left allmulticast mode [ 403.075072][T14785] veth1_macvtap: left promiscuous mode [ 403.083232][T14785] macsec0: left promiscuous mode [ 403.113971][T14785] veth1_macvtap: entered promiscuous mode [ 403.120550][T14785] veth1_macvtap: entered allmulticast mode [ 403.130222][T14785] macsec0: entered promiscuous mode [ 403.156641][T14789] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2828'. [ 403.198923][T14794] veth1_macvtap: left allmulticast mode [ 403.228740][T14794] veth1_macvtap: left promiscuous mode [ 403.235491][T14794] macsec0: left promiscuous mode [ 403.514280][T14803] net_ratelimit: 112 callbacks suppressed [ 403.514298][T14803] netlink: zone id is out of range [ 403.526140][T14803] netlink: zone id is out of range [ 403.536227][T14803] netlink: zone id is out of range [ 403.541376][T14803] netlink: get zone limit has 4 unknown bytes [ 403.760565][T14811] ================================================================== [ 403.768681][T14811] BUG: KASAN: stack-out-of-bounds in __bpf_get_stack+0x5a9/0xaa0 [ 403.776485][T14811] Write of size 96 at addr ffffc9000bf57448 by task syz.4.2835/14811 [ 403.784548][T14811] [ 403.786866][T14811] CPU: 0 UID: 0 PID: 14811 Comm: syz.4.2835 Not tainted syzkaller #0 PREEMPT(full) [ 403.786883][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 403.786890][T14811] Call Trace: [ 403.786896][T14811] [ 403.786901][T14811] dump_stack_lvl+0x189/0x250 [ 403.786916][T14811] ? __bpf_get_stack+0x5a9/0xaa0 [ 403.786936][T14811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.786947][T14811] ? __pfx__printk+0x10/0x10 [ 403.786962][T14811] ? __virt_addr_valid+0xdc/0x5c0 [ 403.786975][T14811] ? __virt_addr_valid+0xdc/0x5c0 [ 403.786989][T14811] print_report+0xca/0x240 [ 403.786999][T14811] ? __bpf_get_stack+0x5a9/0xaa0 [ 403.787009][T14811] kasan_report+0x118/0x150 [ 403.787025][T14811] ? trace_irq_disable+0x37/0x100 [ 403.787038][T14811] ? __bpf_get_stack+0x5a9/0xaa0 [ 403.787051][T14811] kasan_check_range+0x2b0/0x2c0 [ 403.787070][T14811] ? __bpf_get_stack+0x5a9/0xaa0 [ 403.787091][T14811] __asan_memcpy+0x40/0x70 [ 403.787113][T14811] __bpf_get_stack+0x5a9/0xaa0 [ 403.787139][T14811] ? __pfx___bpf_get_stack+0x10/0x10 [ 403.787162][T14811] ? bpf_trace_run2+0x186/0x4c0 [ 403.787174][T14811] bpf_get_stack+0x33/0x50 [ 403.787187][T14811] ? bpf_prog_d42cce3539a3fce9+0x3e/0x46 [ 403.787197][T14811] bpf_get_stack_raw_tp+0x1a9/0x220 [ 403.787208][T14811] bpf_prog_d42cce3539a3fce9+0x3e/0x46 [ 403.787217][T14811] bpf_trace_run2+0x284/0x4c0 [ 403.787228][T14811] ? bpf_trace_run2+0x186/0x4c0 [ 403.787239][T14811] ? __pfx_bpf_trace_run2+0x10/0x10 [ 403.787250][T14811] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 403.787266][T14811] ? bpf_stack_liveness_free+0x128/0x230 [ 403.787285][T14811] ? bpf_stack_liveness_free+0x128/0x230 [ 403.787300][T14811] kfree+0x5ef/0x660 [ 403.787312][T14811] bpf_stack_liveness_free+0x128/0x230 [ 403.787329][T14811] bpf_check+0x163ed/0x1c300 [ 403.787349][T14811] ? perf_trace_run_bpf_submit+0xee/0x170 [ 403.787364][T14811] ? irqentry_exit+0x5dd/0x660 [ 403.787378][T14811] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 403.787391][T14811] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 403.787403][T14811] ? css_rstat_updated+0x23a/0x4f0 [ 403.787421][T14811] ? irqentry_exit+0x5dd/0x660 [ 403.787433][T14811] ? lockdep_hardirqs_on+0x98/0x140 [ 403.787446][T14811] ? irqentry_exit+0x5dd/0x660 [ 403.787462][T14811] ? __pfx_bpf_check+0x10/0x10 [ 403.787472][T14811] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 403.787489][T14811] ? seqcount_lockdep_reader_access+0x17d/0x1c0 [ 403.787504][T14811] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 403.787521][T14811] ? __asan_memset+0x22/0x50 [ 403.787532][T14811] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 403.787542][T14811] ? security_bpf_prog_load+0x125/0x3f0 [ 403.787558][T14811] bpf_prog_load+0x13ba/0x1a10 [ 403.787574][T14811] ? __pfx_bpf_prog_load+0x10/0x10 [ 403.787592][T14811] ? bpf_lsm_bpf+0x9/0x20 [ 403.787601][T14811] ? security_bpf+0x7e/0x300 [ 403.787616][T14811] __sys_bpf+0x507/0x860 [ 403.787628][T14811] ? __pfx___sys_bpf+0x10/0x10 [ 403.787647][T14811] __x64_sys_bpf+0x7c/0x90 [ 403.787658][T14811] do_syscall_64+0xfa/0xf80 [ 403.787672][T14811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.787682][T14811] ? clear_bhb_loop+0x60/0xb0 [ 403.787693][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.787704][T14811] RIP: 0033:0x7f1fb3d8f749 [ 403.787714][T14811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.787724][T14811] RSP: 002b:00007f1fb4c3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 403.787736][T14811] RAX: ffffffffffffffda RBX: 00007f1fb3fe5fa0 RCX: 00007f1fb3d8f749 [ 403.787744][T14811] RDX: 000000000000004d RSI: 000020000000e000 RDI: 0000000000000005 [ 403.787751][T14811] RBP: 00007f1fb3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 403.787758][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.787765][T14811] R13: 00007f1fb3fe6038 R14: 00007f1fb3fe5fa0 R15: 00007ffebedd0f98 [ 403.787777][T14811] [ 403.787781][T14811] [ 404.176990][T14811] The buggy address belongs to stack of task syz.4.2835/14811 [ 404.184526][T14811] and is located at offset 296 in frame: [ 404.190242][T14811] __bpf_get_stack+0x0/0xaa0 [ 404.194842][T14811] [ 404.197165][T14811] This frame has 1 object: [ 404.202011][T14811] [32, 36) 'rctx.i' [ 404.202026][T14811] [ 404.208321][T14811] The buggy address belongs to a 8-page vmalloc region starting at 0xffffc9000bf50000 allocated at copy_process+0x4ea/0x3950 [ 404.221357][T14811] The buggy address belongs to the physical page: [ 404.227768][T14811] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x7f312 [ 404.238087][T14811] memcg:ffff888029575802 [ 404.242317][T14811] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 404.249418][T14811] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 404.257995][T14811] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff888029575802 [ 404.266557][T14811] page dumped because: kasan: bad access detected [ 404.272963][T14811] page_owner tracks the page as allocated [ 404.278661][T14811] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 14809, tgid 14809 (syz.4.2835), ts 403653457643, free_ts 403606604916 [ 404.298012][T14811] post_alloc_hook+0x234/0x290 [ 404.302775][T14811] get_page_from_freelist+0x2365/0x2440 [ 404.308330][T14811] __alloc_frozen_pages_noprof+0x181/0x370 [ 404.314130][T14811] alloc_pages_mpol+0x232/0x4a0 [ 404.318978][T14811] alloc_pages_noprof+0xa9/0x190 [ 404.323908][T14811] __vmalloc_node_range_noprof+0x96c/0x12d0 [ 404.329809][T14811] __vmalloc_node_noprof+0xc2/0x110 [ 404.335007][T14811] dup_task_struct+0x3c4/0x7b0 [ 404.339758][T14811] copy_process+0x4ea/0x3950 [ 404.344335][T14811] kernel_clone+0x21e/0x820 [ 404.348825][T14811] __se_sys_clone3+0x256/0x2d0 [ 404.353574][T14811] do_syscall_64+0xfa/0xf80 [ 404.358070][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.363962][T14811] page last free pid 23 tgid 23 stack trace: [ 404.370013][T14811] __free_frozen_pages+0xbc4/0xd30 [ 404.375118][T14811] tlb_remove_table_rcu+0x85/0x100 [ 404.380229][T14811] rcu_core+0xd70/0x1870 [ 404.384497][T14811] handle_softirqs+0x27d/0x850 [ 404.389246][T14811] run_ksoftirqd+0x9b/0x100 [ 404.393735][T14811] smpboot_thread_fn+0x542/0xa60 [ 404.398668][T14811] kthread+0x711/0x8a0 [ 404.402728][T14811] ret_from_fork+0x599/0xb30 [ 404.407315][T14811] ret_from_fork_asm+0x1a/0x30 [ 404.412075][T14811] [ 404.414390][T14811] Memory state around the buggy address: [ 404.420003][T14811] ffffc9000bf57380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.428222][T14811] ffffc9000bf57400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.436270][T14811] >ffffc9000bf57480: 00 00 00 00 f1 f1 f1 f1 00 00 f2 f2 00 00 f3 f3 [ 404.444314][T14811] ^ [ 404.449409][T14811] ffffc9000bf57500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.457456][T14811] ffffc9000bf57580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 404.465512][T14811] ================================================================== [ 404.480714][T14811] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 404.487957][T14811] CPU: 0 UID: 0 PID: 14811 Comm: syz.4.2835 Not tainted syzkaller #0 PREEMPT(full) [ 404.497341][T14811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 404.507426][T14811] Call Trace: [ 404.510717][T14811] [ 404.513646][T14811] dump_stack_lvl+0x99/0x250 [ 404.518318][T14811] ? __asan_memcpy+0x40/0x70 [ 404.522949][T14811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.528139][T14811] ? __pfx__printk+0x10/0x10 [ 404.532731][T14811] vpanic+0x237/0x6d0 [ 404.536706][T14811] ? __pfx_vpanic+0x10/0x10 [ 404.541203][T14811] panic+0xb9/0xc0 [ 404.544932][T14811] ? __pfx_panic+0x10/0x10 [ 404.549343][T14811] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 404.555228][T14811] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 404.561116][T14811] ? __bpf_get_stack+0x5a9/0xaa0 [ 404.566048][T14811] check_panic_on_warn+0x89/0xb0 [ 404.570981][T14811] ? __bpf_get_stack+0x5a9/0xaa0 [ 404.575907][T14811] end_report+0x6f/0x140 [ 404.580154][T14811] kasan_report+0x129/0x150 [ 404.584703][T14811] ? trace_irq_disable+0x37/0x100 [ 404.589728][T14811] ? __bpf_get_stack+0x5a9/0xaa0 [ 404.594662][T14811] kasan_check_range+0x2b0/0x2c0 [ 404.599610][T14811] ? __bpf_get_stack+0x5a9/0xaa0 [ 404.604540][T14811] __asan_memcpy+0x40/0x70 [ 404.608947][T14811] __bpf_get_stack+0x5a9/0xaa0 [ 404.613704][T14811] ? __pfx___bpf_get_stack+0x10/0x10 [ 404.618983][T14811] ? bpf_trace_run2+0x186/0x4c0 [ 404.623835][T14811] bpf_get_stack+0x33/0x50 [ 404.628277][T14811] ? bpf_prog_d42cce3539a3fce9+0x3e/0x46 [ 404.633896][T14811] bpf_get_stack_raw_tp+0x1a9/0x220 [ 404.639096][T14811] bpf_prog_d42cce3539a3fce9+0x3e/0x46 [ 404.644542][T14811] bpf_trace_run2+0x284/0x4c0 [ 404.649247][T14811] ? bpf_trace_run2+0x186/0x4c0 [ 404.654098][T14811] ? __pfx_bpf_trace_run2+0x10/0x10 [ 404.659295][T14811] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 404.665938][T14811] ? bpf_stack_liveness_free+0x128/0x230 [ 404.671574][T14811] ? bpf_stack_liveness_free+0x128/0x230 [ 404.677203][T14811] kfree+0x5ef/0x660 [ 404.681091][T14811] bpf_stack_liveness_free+0x128/0x230 [ 404.686550][T14811] bpf_check+0x163ed/0x1c300 [ 404.691143][T14811] ? perf_trace_run_bpf_submit+0xee/0x170 [ 404.696857][T14811] ? irqentry_exit+0x5dd/0x660 [ 404.701652][T14811] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 404.708233][T14811] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 404.714812][T14811] ? css_rstat_updated+0x23a/0x4f0 [ 404.719923][T14811] ? irqentry_exit+0x5dd/0x660 [ 404.724677][T14811] ? lockdep_hardirqs_on+0x98/0x140 [ 404.729868][T14811] ? irqentry_exit+0x5dd/0x660 [ 404.734625][T14811] ? __pfx_bpf_check+0x10/0x10 [ 404.739466][T14811] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 404.745706][T14811] ? seqcount_lockdep_reader_access+0x17d/0x1c0 [ 404.751941][T14811] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 404.758526][T14811] ? __asan_memset+0x22/0x50 [ 404.763105][T14811] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 404.768293][T14811] ? security_bpf_prog_load+0x125/0x3f0 [ 404.773843][T14811] bpf_prog_load+0x13ba/0x1a10 [ 404.778605][T14811] ? __pfx_bpf_prog_load+0x10/0x10 [ 404.783804][T14811] ? bpf_lsm_bpf+0x9/0x20 [ 404.788120][T14811] ? security_bpf+0x7e/0x300 [ 404.792711][T14811] __sys_bpf+0x507/0x860 [ 404.796959][T14811] ? __pfx___sys_bpf+0x10/0x10 [ 404.801744][T14811] __x64_sys_bpf+0x7c/0x90 [ 404.806156][T14811] do_syscall_64+0xfa/0xf80 [ 404.810655][T14811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.816711][T14811] ? clear_bhb_loop+0x60/0xb0 [ 404.821375][T14811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.827261][T14811] RIP: 0033:0x7f1fb3d8f749 [ 404.831672][T14811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.851269][T14811] RSP: 002b:00007f1fb4c3d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 404.859676][T14811] RAX: ffffffffffffffda RBX: 00007f1fb3fe5fa0 RCX: 00007f1fb3d8f749 [ 404.867642][T14811] RDX: 000000000000004d RSI: 000020000000e000 RDI: 0000000000000005 [ 404.875603][T14811] RBP: 00007f1fb3e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 404.883584][T14811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.891630][T14811] R13: 00007f1fb3fe6038 R14: 00007f1fb3fe5fa0 R15: 00007ffebedd0f98 [ 404.899600][T14811] [ 404.903003][T14811] Kernel Offset: disabled [ 404.907310][T14811] Rebooting in 86400 seconds..