last executing test programs: 2m1.127891232s ago: executing program 2 (id=743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x810) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xf8, 0x453, 0x200, 0xc, 0x25dfdbfc, "f8bd05a09ee11bed7deef4c4aa7c951fc6208f05a4ac68140923dc8a43bfb2e88ba92c1e8b956c1bb7c914d5a5444acc9031cf31ee5f0018ecb339d9c52fbacd388ca94b5c5bb3f7b60056488604152db1792a01d97f8d1eb063b000b57583508f6309130f8649e0ea7dc8483a0f115304123bf0aa608bc639b346efb26f3e62ee09d85223dcf7ce287ccb025355db87f9fec60257f5f1ea3529d4599707dc9c6116a85ee3cfc55af9e97a1aa933d54ca44fe347e388bab14d95f3359584903153a48e8ce3cf71d4747306a8f6d533b95b2779383532165ff3f8d47923229b21970ee0635125b398", ["", ""]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4040001) 2m0.782197581s ago: executing program 2 (id=746): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2106, 0x1, @perf_bp={&(0x7f0000000240), 0x5}, 0x0, 0x400, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r0, 0xa) socket$kcm(0x10, 0x2, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x12, 0x1, 0x0, 0x2, "", [@nested={0x10, 0xd8, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}]}, @nested={0x4, 0x1d}]}, 0x24}], 0x1}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x5, 0xa, 0x0, 0xff, 0x0, 0x5d34, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xc, 0x9}, 0x0, 0xc78, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, 0x0}, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffc8) r4 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(r4, 0x0, 0x4000000) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x40001121) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, 0x0, 0x800) sendmsg$kcm(r2, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x9, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x37}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000000)={'syz_tun\x00', @random="0200"}) 2m0.167691816s ago: executing program 2 (id=753): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xe, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x4, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x10, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r1, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000880), &(0x7f0000000a40), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b04, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x3395) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x5, 0x1200000, 0xa, 0x2120, 0xffffffffffffffff, 0x3, '\x00', r3, r4, 0x5, 0x5, 0x1, 0x2}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r7, 0x4) recvmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/295, 0x127}, {&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f00000012c0)=""/4144, 0x1030}, {&(0x7f0000000b40)=""/262, 0x106}], 0x6}, 0x40002022) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x24000040) r8 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r8, 0x0, 0x400c000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x6, 0x14e, 0x0, 0x0, @binary="69da"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xd0, 0x9c, 0x0, 0x1, [@generic="efb90f5d88408165ca1bfed2f53b83a5114f929b1083a21b9cc75a08299596a4d90ed049ec7b8c7e1dbe820f348397702280a79481500cbb", @nested={0x14, 0xd4, 0x0, 0x1, [@typed={0xe, 0x105, 0x0, 0x0, @str='tlb_flush\x00'}]}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @nested={0x75, 0x7e, 0x0, 0x1, [@generic="95c45668a4bb2213ea9d4e2f82be58bbdc35d94186124d5bb9b8e12b207786554fcac1baff90f26fc6041abc95d594dedd591da2c1712d", @generic="e9ad381dc68724eff51962361cc08f1de1a7ee6e3da7974840fdb154e424a2853a6048be9a92141ba1ea438a6b13b2ddc3d063f62b2c9c29770f"]}]}]}, 0xe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r11 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="140000003a000b63c55a8064048c251b0908b5e9", 0x14}], 0x1}, 0x810) 1m59.825373678s ago: executing program 2 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) syz_clone(0x40800, &(0x7f0000000200)="217445a63b5cbb1ee5f5a8f5c6cdf632730735ec6375b992a003ec45e530d1e981f57b85a14cd28181f36e7a2b223a0e8e9fda0289a699cef76aa19b28ac15dfae8905e6eaf196d74e1a96b6213b4977d1d0fefccb966b49a8002cf4731c3f362dcbd9ad3aa57c0b322d40b992b8e43ad95e6c994279d563dd65260cd9c95dc203c0f99a3b709737c880b4c5cec64f517f107df4b0324e5a124429ec6025c0c2d9ba2c0b2e5c8ce677fcde6c1bd244f26a5160b4b82f7c36f237465e104e4d868506e513ebcf13babb5873be", 0xcc, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000300)="b624f31627fac4d849f6e6f7a70626fcfc9c8bb8422c82a180625943db76b98aadb3938689ede4a44035dafb7d9cd08f5d9db127ad9505948fd57429a8bc3696e275d511dcdb4d80934d1f828d94a2bcb4e5f33fb7e78c90e1951cb357b485eb5c206fe0705737d06d848abb6e601194975f5fb465e1b455a76db3c286f5263102c454501436ef141d989356e5c7664eaf767b0005fe4f8db4e6ea44b623ab2338d5e8dbd0652ab4b2a9639bb5edfdd7f5fd3c573d89b41adf3012e67925b7afd6476cd7e9bd89058b") perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x10000000, &(0x7f00000006c0)="67cdfa9228931c79bfe10ebfd8cd2695678fd3e9e8dca24920e2d9c957dd09b7ca43f131c8fc08071d7e8e7158d4f3c1d4fcb53817056d4e60256b242d798f330ce60c949f97138098b0024343eba3e087a77459a766a8c3322df01a2b472e218556feaba70b09432914ebbe06f127a940169fd77f3f85efa5414d75d80ba98eecb763f01b3e06ee555f447b8c643aec083daa8a72c95fcabdbbe51182e144dde0912d21270bcf51e161c37557433898360dcea7ba3877a69dab92866ae7a752d134fecc3c47fbb2567a2c922c899e030019784acb592255f43b", 0xda, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000007c0)="fbb48f21e59b7ce7a562f4ff97bd2f304cc04114ba224862ce550ee7a2019fb32c2beb7355d8d80db54ce36393d4974d1717bb3079964325514201fefd809fdbe947d3a7ea27cca4daa5e009a865fe7c7adb969995acf757dd3875717e7f7b094861913bb124675db03affb587f9055e66da56a4da914cebeabc8b695c12380625c17468246ae548ff50c7a3eec3e4a340c58d56") r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="900000000002010400000000000000000a000000040001803c0003802c00018014000300fe80000000000000000000000000003614000400fc0200000000000000000000000000010c000280050006002f0000003c0002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffe00000"], 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/time_for_children\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000080000000000000000000850000001800000085000000a00000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xc7, &(0x7f0000000140)=""/199}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000000408010300000000000000030300000a060002406001000005000300840000ed67f170b250dbfba41301c11c8c00"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) mount$bpf(0x0, 0x0, 0x0, 0x400008, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x2a, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000050000000000000040000000181100", @ANYRES32, @ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000001810", @ANYRES32=0x1, @ANYBLOB="000000000000000018360000020000000000000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa1", @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b700000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x15, &(0x7f0000000140)=""/21, 0xc3100, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xd, 0x9, 0xc}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000300)=[{0x1, 0x3, 0x8, 0x9}], 0x10, 0x200}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f91824fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x88, 0xa, &(0x7f0000000680)=r9, 0x4) 1m57.571077989s ago: executing program 2 (id=771): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0xf}, 0x104101, 0x3fd, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) sendmsg$kcm(r0, 0x0, 0xe07e872420dfefca) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x23c2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m57.17461151s ago: executing program 2 (id=775): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x10006000, &(0x7f0000000080)="6463cbfa261d4869709b59d15b09dac400e99b14fd54d40a6d66e5ca4f5acea7b4ec553ef8379218119cae943c2041d3da545d44ac417b00ef09978f99e30c2db5f7bf97dada", 0x46, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)="65c2b714abb05286e3b7f2f7fcb402eb620de814") (async) r0 = syz_clone(0x10006000, &(0x7f0000000080)="6463cbfa261d4869709b59d15b09dac400e99b14fd54d40a6d66e5ca4f5acea7b4ec553ef8379218119cae943c2041d3da545d44ac417b00ef09978f99e30c2db5f7bf97dada", 0x46, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)="65c2b714abb05286e3b7f2f7fcb402eb620de814") r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80f, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000000}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) close(r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) 1m41.795814259s ago: executing program 32 (id=775): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x10006000, &(0x7f0000000080)="6463cbfa261d4869709b59d15b09dac400e99b14fd54d40a6d66e5ca4f5acea7b4ec553ef8379218119cae943c2041d3da545d44ac417b00ef09978f99e30c2db5f7bf97dada", 0x46, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)="65c2b714abb05286e3b7f2f7fcb402eb620de814") (async) r0 = syz_clone(0x10006000, &(0x7f0000000080)="6463cbfa261d4869709b59d15b09dac400e99b14fd54d40a6d66e5ca4f5acea7b4ec553ef8379218119cae943c2041d3da545d44ac417b00ef09978f99e30c2db5f7bf97dada", 0x46, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)="65c2b714abb05286e3b7f2f7fcb402eb620de814") r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80f, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000000}, r0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) close(r1) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) 1m18.380473447s ago: executing program 0 (id=947): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, 0x464, 0x8, 0x70bd2b, 0x25dfdbfc, "51b42267c16a11f27ca30f225816ebcae0af073a289a6fcf6ed43ac2591c93ab0b03954032dfc296699a2071fc55f5e88df419119b71c3c6fabf398aea6f9da6a482cf2ccb851933f8ac31637d717e89871d2a", [""]}, 0x64}, 0x1, 0x0, 0x0, 0xc080}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7}, @exit, @call={0x85, 0x0, 0x0, 0x12}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1m18.29975304s ago: executing program 1 (id=948): socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0xf}, 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x74800) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000200)=@sco, 0x80, &(0x7f00000008c0)=[{&(0x7f00000004c0)=""/242, 0xf2}, {&(0x7f0000000340)=""/124, 0x7c}, {&(0x7f0000000280)=""/36, 0x24}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/122, 0x7a}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/4096, 0x1000}], 0x8, &(0x7f0000000940)=""/114, 0x72}, 0x10001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xa8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002d00010026bdf000fcdbdf25040000000400190008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 1m18.240074935s ago: executing program 3 (id=949): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex=r1, 0x1e, 0x1, 0xf, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) (async) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup=r4, 0xffffffffffffffff, 0x35, 0xd, 0xffffffffffffffff, @void, @value=r5, @void, @void, r3}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup=r4, 0xffffffffffffffff, 0x35, 0xd, 0xffffffffffffffff, @void, @value=r5, @void, @void, r3}, 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000000380), 0x4) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', 0x0, 0x8, r5}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@cgroup=r4, r5, 0x11, 0x0, r5, @void, @value=r6, @void, @void, r3}, 0x20) bpf$ENABLE_STATS(0x20, &(0x7f0000000480), 0x4) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000480), 0x4) sendmsg$NFT_BATCH(r6, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x98, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x33, 0x6, "f552c7ea4177a609333cb2ae77cca48716df0859170f6e71d1951fea598aedde38c898491c1b065d2125dfb408bc8b"}, @NFTA_TABLE_USERDATA={0x3a, 0x6, "9c5dd1da6e46d3ee49708c920e8a1891b8ab1b5971fb3a787cc3091feadacb0b59451145ecab6c62ebbb0048529289110aea7d40cab5"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x68, 0x12, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_DATA={0x54, 0x4, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0xfff}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_TYPE={0x8}]}}, @NFT_MSG_DELCHAIN={0x104, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0xd9, 0xc, "c2d02594315bcd13ac5bdf71ddf73638254b0f43b7b128e0b59168f5231daabfcb15bfbb984cb944754fc78471057621fbf0bdf7548a550f85c701aaae62165018ac4d1df3465d0dac0331d7b0b9c28a4433703f7f4dc4f52a8c98b5e0f3da946d9956f3bb5cb3d89b76e82f48c29015ba68a62853f7f7f7d433818c865750e5f59771eebadf6e00165aaa8e5ddc9ca9374cbbc4affd9a2d8d8c24baa55bd1f483ef10ac02350e5f30a5a6405e82b32be09d891fcf1687bc8c5e4c69fc643817e7a414a41cad1fcc2b5fdcc9426178252209473bb6"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0x22c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0xf9, 0xf9, 0x7, 0x1, 0x0, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f00000007c0), 0x8}, 0x4610, 0x3, 0x4, 0x8, 0x5, 0x4, 0x1, 0x0, 0x5, 0x0, 0x7058}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000880)='syz1\x00') bpf$ENABLE_STATS(0x20, &(0x7f00000008c0), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000900), 0x280801, 0x0) ioctl$TUNSETOFFLOAD(r8, 0x400454d0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000940), 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r0, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r6, r9, 0x25, 0x10, @void}, 0x10) (async) r10 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a40)={r6, r9, 0x25, 0x10, @void}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) (async) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000cc0)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0)='%pK \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{r0, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%pK \x00'}, 0x20) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x22, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0x1, 0x8, 0x0, 0x18, 0x1}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x28c0}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='syzkaller\x00', 0x3ff, 0x81, &(0x7f0000000c00)=""/129, 0x41100, 0x2a, '\x00', r2, 0x25, r11, 0x8, &(0x7f0000000d00)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000d40)={0x2, 0x7, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000e40)=[r12, r0, r0, r0, r0], &(0x7f0000000e80)=[{0x5, 0x2, 0x5, 0x6}], 0x10, 0x535}, 0x94) r14 = perf_event_open(&(0x7f0000000f80)={0x0, 0x80, 0xff, 0x6, 0x40, 0x4, 0x0, 0x8, 0x2000, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xe9, 0x4, @perf_config_ext={0x3, 0x8}, 0x4, 0xff, 0xb8b3, 0x5, 0x9, 0x0, 0x4, 0x0, 0x12000000, 0x0, 0x1b4268e5}, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0x8) sendmsg$NFT_BATCH(r8, &(0x7f00000015c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x118, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xe8, 0xc, "ed58e327c681bedea91b7442c8446eb51d554f7f22033dd48f08edef2aa37df310db71929b2df8896dd8c43dbd983c6a25a8400909c10015e38ba9d51caf83bcb2064acca8a5034c238b23d5c3a6762e562741c397026a54342daa9be0d460d9fa0fdb449d638ca86b8bb3c3f6e69f5be629deb3686e6d048d0ea78d63d0d379cf321b0fd0526763c7d0667ec770b6ceb834853726ed43d230bb69678610361a92488d9f23ffde54dcce37a94042635cc69e49d151ca2a1756144b08cd5161a8031fa0d0caa3e8b2b37210c4269752f6b05633315689e012715a7f9f059367f76e655d30"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x270, 0x8, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0xf8, 0x7, 0x1, 0x0, "13bbb46f6025183cb8b97083d23b05cc57ce8cd9e3d183e12e05256f84709573d6bf9000a50809c77043f831c0cadd87e00aa29870ef86d02230c02d9a8131f0fd3f57e4a19bce7e414134231852a818cb2990be55cd127bbadb78289878743d63afb8a380c9c24605f2c4ab99f58784c799e5ce2019d3443779cf33fdb5212e8f17bb7d7236f9ef8af3cc1f2bae27c9367718501dca0dff1edffdae84a68ce6e7adcd546df5ec707914afed9a3e460c8218fabd7acf61ffa0551d2bd164c6bc7f80ce46faa81332822a86fd63457e0ba4078a4298431884276fa40f75b0a81b25cf4af8c386525ea5e9eef9dfded8cebde93080"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "9bdde3fd306471004f2ae37711177003db15c660e786ef0150298f96b4d9082a041226e94f2efe19fd57c670e4efaf1ec2f582b6b1ba19f0bcd26b4a51bc05da54d877380f89a4556102f0cea75bcb276ae03d335f9684a33a55e5ec5a327dad7f70906ecbb7eaba33a56dc6d0877ce13d62feb02b9a05b4a3b6879aab258ea33cc95600ea7f1a00a65b247ab3a2de5336dd6f1de01b0ee2c3b1911d6ba4c2ecfd9e6dd819eed9"}, @NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "801763dc8bcc5f3d8da103acb3111027a24bdea035797087383ba1b72d20465034c5c219c9013a5f0b348a32c2ded5c2f3a91f544f9ebab731ae98af8670019e81a204c9b5ba6b8837cb31a903e514fd7b8901c955a2001d9bb50fc3ef9b06ffba1cac3330daae8798a356d90af5e96b9610096f7cbece4ce32087dfbfa0b64bb1b0ee9a1f8596e376bca16db72bceaf94276213f966af22140d4758f8bc8bf0c0f46e277bb9a5"}]}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}, @NFTA_CHAIN_USERDATA={0x38, 0xc, "5b50a77c2c56d02c85ea04d342a95d5bcf922b96923d44967e290ceb87c1171a9b32965964d298447a22b41eb1520434608bdb7c"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x11}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWFLOWTABLE={0xfc, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14}}, 0x528}}, 0x20000085) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000015c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001580)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x118, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0xe8, 0xc, "ed58e327c681bedea91b7442c8446eb51d554f7f22033dd48f08edef2aa37df310db71929b2df8896dd8c43dbd983c6a25a8400909c10015e38ba9d51caf83bcb2064acca8a5034c238b23d5c3a6762e562741c397026a54342daa9be0d460d9fa0fdb449d638ca86b8bb3c3f6e69f5be629deb3686e6d048d0ea78d63d0d379cf321b0fd0526763c7d0667ec770b6ceb834853726ed43d230bb69678610361a92488d9f23ffde54dcce37a94042635cc69e49d151ca2a1756144b08cd5161a8031fa0d0caa3e8b2b37210c4269752f6b05633315689e012715a7f9f059367f76e655d30"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x270, 0x8, 0xa, 0x3, 0x0, 0x0, {0x8, 0x0, 0x6}, [@NFTA_RULE_USERDATA={0xf8, 0x7, 0x1, 0x0, "13bbb46f6025183cb8b97083d23b05cc57ce8cd9e3d183e12e05256f84709573d6bf9000a50809c77043f831c0cadd87e00aa29870ef86d02230c02d9a8131f0fd3f57e4a19bce7e414134231852a818cb2990be55cd127bbadb78289878743d63afb8a380c9c24605f2c4ab99f58784c799e5ce2019d3443779cf33fdb5212e8f17bb7d7236f9ef8af3cc1f2bae27c9367718501dca0dff1edffdae84a68ce6e7adcd546df5ec707914afed9a3e460c8218fabd7acf61ffa0551d2bd164c6bc7f80ce46faa81332822a86fd63457e0ba4078a4298431884276fa40f75b0a81b25cf4af8c386525ea5e9eef9dfded8cebde93080"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "9bdde3fd306471004f2ae37711177003db15c660e786ef0150298f96b4d9082a041226e94f2efe19fd57c670e4efaf1ec2f582b6b1ba19f0bcd26b4a51bc05da54d877380f89a4556102f0cea75bcb276ae03d335f9684a33a55e5ec5a327dad7f70906ecbb7eaba33a56dc6d0877ce13d62feb02b9a05b4a3b6879aab258ea33cc95600ea7f1a00a65b247ab3a2de5336dd6f1de01b0ee2c3b1911d6ba4c2ecfd9e6dd819eed9"}, @NFTA_RULE_USERDATA={0xab, 0x7, 0x1, 0x0, "801763dc8bcc5f3d8da103acb3111027a24bdea035797087383ba1b72d20465034c5c219c9013a5f0b348a32c2ded5c2f3a91f544f9ebab731ae98af8670019e81a204c9b5ba6b8837cb31a903e514fd7b8901c955a2001d9bb50fc3ef9b06ffba1cac3330daae8798a356d90af5e96b9610096f7cbece4ce32087dfbfa0b64bb1b0ee9a1f8596e376bca16db72bceaf94276213f966af22140d4758f8bc8bf0c0f46e277bb9a5"}]}, @NFT_MSG_NEWCHAIN={0x7c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}, @NFTA_CHAIN_USERDATA={0x38, 0xc, "5b50a77c2c56d02c85ea04d342a95d5bcf922b96923d44967e290ceb87c1171a9b32965964d298447a22b41eb1520434608bdb7c"}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x11}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_NEWFLOWTABLE={0xfc, 0x16, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}]}], {0x14}}, 0x528}}, 0x20000085) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x6, 0x8, 0xffff78e8, 0x6, 0x2400, r0, 0x0, '\x00', 0x0, r11, 0x5, 0x4, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r14) (async) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001880)={r0, 0x58, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{r0}, &(0x7f0000001940), &(0x7f0000001980)=r13}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000019c0)={{r0, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)=r13}, 0x20) r18 = bpf$ITER_CREATE(0x21, &(0x7f0000001a00)={r10}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001700)='GPL\x00', 0x4, 0x91, &(0x7f0000001740)=""/145, 0x41000, 0x11, '\x00', r16, 0x1b, r11, 0x8, &(0x7f00000018c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0xf, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001a40)=[r0, r17, r0, r18, r12], &(0x7f0000001a80)=[{0x5, 0x1, 0xe, 0x7}], 0x10, 0x8}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r15}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001700)='GPL\x00', 0x4, 0x91, &(0x7f0000001740)=""/145, 0x41000, 0x11, '\x00', r16, 0x1b, r11, 0x8, &(0x7f00000018c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x2, 0xf, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001a40)=[r0, r17, r0, r18, r12], &(0x7f0000001a80)=[{0x5, 0x1, 0xe, 0x7}], 0x10, 0x8}, 0x94) 1m18.149315241s ago: executing program 0 (id=950): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c0200b3000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000003540)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000b161006b04c84e21020af32c6e0a0675f800250002500100000017d34460567db0d15fbc24eab556a705251e6182949ab3829a206bd0d0d5bf9367b498fa51f60a64c9f4d4938037e7861400bdd70000b6c0504bb9189d9193", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1m17.914960236s ago: executing program 4 (id=951): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x14) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020600090a00000000000000000000000300060000200e00020000000a0101020000005ba900000005000500000000000a004e230000000200000000000000000000ffffac1414254cb1a87e00000000"], 0x50}}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x8000) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000380)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r5, r6, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.stat\x00', 0x26e1, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$sock(r7, &(0x7f00000002c0)={&(0x7f0000000040)=@x25, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)}, 0x804) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffdfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffd8c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m17.695276227s ago: executing program 3 (id=952): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f00000001c0)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}, 0x4000000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x2, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000ec0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000f00)=[0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000001040)=[{}], 0x8, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000013c0)={0xfffffff1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x0, 0xffffffffffffffff, &(0x7f0000000e80)='GPL\x00', 0x2, 0x1000, &(0x7f0000001ac0)=""/4096, 0x41100, 0x2, '\x00', r3, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000001280)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001380)={0x1, 0x9, 0x0, 0x2}, 0x10, r4, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000001400)=[{0x2, 0x4, 0x9, 0x7}, {0x4, 0x3}, {0x2, 0x5, 0x1, 0x6}, {0x1, 0x1, 0x10, 0x6}, {0x3, 0x2, 0x9, 0x4}, {0x0, 0x2, 0x1, 0x8}, {0x2, 0x5, 0x10, 0xa}], 0x10, 0xd8}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(r0, &(0x7f0000000680)={&(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000002c0)=""/216, 0xd8}, {0x0}, {0x0}], 0x3, &(0x7f0000000600)=""/128, 0x80}, 0x20) sendmsg$inet(r2, 0x0, 0x40008d4) r7 = socket$kcm(0x2a, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r8}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$rds(r6, &(0x7f0000000e40)={&(0x7f0000000480)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/35, 0x23}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000700)=""/121, 0x79}, {&(0x7f0000000780)=""/198, 0xc6}, {&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/231, 0xe7}], 0x7, &(0x7f0000000dc0)=[@zcopy_cookie={0x18}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x9}, {&(0x7f0000000ac0)=""/28, 0x1c}, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/39, 0x27}, {&(0x7f0000000b40)=""/235, 0xeb}, {&(0x7f0000000c40)=""/187, 0xbb}, {&(0x7f0000000d00)=""/84, 0x54}], 0x4, 0x15, 0x10}}], 0x60, 0x40000}, 0x40000) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, &(0x7f0000000040)=0x8000000000000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x200020, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x27, 0x14, 0x0, &(0x7f00000002c0)="f8c348cc02cb29dcc8007f5b08009ccaa57b0fdf", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m17.295678003s ago: executing program 0 (id=954): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xe021, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x10, 0x5}, 0x200, 0x1, 0x0, 0x5, 0x0, 0x0, 0xfffd}, 0x0, 0x400b, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x1, 0x2, 0xffffffffffffff7a, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0}, 0x4004090) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x400}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688a24c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0c00000000000000000000000080000000000400", @ANYRES32, @ANYBLOB="000000000000000000dfff000000000000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1238}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="54010000100001000000000800000000ac1e00010000000000000000000000000000001e2d0000000000000000000000000200004e2000000000200016000000e848b958b369b3209812cb6d6282b5c0252bf0ca478b947477d8460b9c9f5e41058b187d3d99aa82b563cdbc7c238314fb9e18588a349b12f2786b947b9118ddc3c7e79922f4c42f1639194a66350361f42aa0a16ea527648038344f937309fac23e96dc9bdf8f9c176be8b6f21b4e7310c59235e83608c29532160e8e2d349766c9a72f66", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x24000058) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c27438ffffffffcb864bd57221bc", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x7, 0xfffffeff, 0x3, 0x4, r3, 0x1, '\x00', 0x0, r10, 0x2, 0x5, 0x1}, 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 1m17.270351324s ago: executing program 5 (id=955): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r1 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)=r2}, 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000340)={&(0x7f0000000280), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe1ce}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x4000081) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10c2, 0x2, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x48000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESDEC=0x0], 0x9) sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m17.25942791s ago: executing program 1 (id=956): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0xfc, 0x0, 0x800, 0x8008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = socket$kcm(0x2, 0x2, 0x73) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, 0x203d83df, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004427300041100000a00000000000000d57971159a2c6e425c64063795bfd0a658ad61c458059f33a8c54f8eed4ade41400615fc2af82b665031212113aadc3b5c16ade89b6f6464f7f145b544c5e6e0a290290099dcd0f33663c311df4cfe48e07dc84b96ba7b9729567f20a650bb85287fc45f01b8c3833f14bd1dfbbab0b7e67459469268d877a2e532ab39026ef498182c9d05b0fef6c99d59b1c925be3a30e69050", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa1", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffd69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x23, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xd}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @exit, @map_idx={0x18, 0xc, 0x5, 0x0, 0x6}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x15f81e938355b5e0}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xa4, &(0x7f0000000200)=""/164, 0x41100, 0x1, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3, 0x10, 0x1, 0x80}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b5e, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@generic={0x3, 0x8, 0x0, 0x4, 0xb7}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000400)='syzkaller\x00', 0x1000, 0x6, &(0x7f0000000580)=""/6, 0x41000, 0x4a, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x0, 0xb, 0x4, 0x104f}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0xffffffffffffffff, r9], &(0x7f0000000680)=[{0x3, 0x5, 0x8, 0x3}, {0x0, 0x3, 0xb, 0x7}, {0x1, 0x3, 0x9, 0xe}, {0x2, 0x5, 0x7, 0x8}], 0x10, 0x1c6}, 0x94) (async) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x900000000000000) r10 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000380)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x55}, 0x0) recvmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/45, 0x2d}, {&(0x7f0000000c40)=""/4084, 0xff4}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x6, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x67}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 1m16.555074032s ago: executing program 1 (id=957): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x18, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x433a, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000300)=[{0x3, 0x1, 0xb, 0x5}, {0x2, 0x10000, 0xc, 0x4}]}, 0x94) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf25200000000000000000012001000000000000000000000000b914dd21cc0d11360ae1f102bc0001000000004e21000202897a58bb1bfd2ab9b44552163eb6f4f9b8b32cc4cbae145e837a2fa9fbc9ab70011d506b0d", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="16", 0x1}], 0x1}, 0xc0004) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x38, 0x0}, 0x20000811) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000002140)="b9fe030768045c8c989a14f088a8700086dda8c6e96fd9d5a7708025810dfbd5833ecda5130155e0b2c6ed515651056c705918431de0", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x1) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) (async) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x400c080) (async) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="9b", 0x34000}], 0x1}, 0x4) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="07000000000000000000126c8dcd000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000100"/28], 0x50) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="300000000414000128bd7000fddbdf250800010001000000080001000200000008000100020000000819010002000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x11) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) 1m16.255773431s ago: executing program 1 (id=958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000002d25a80", 0x14}], 0x1}, 0x10) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r3], 0x7c}, 0x1, 0x0, 0x0, 0x30000051}, 0xc810) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1108d5, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000110000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a300000000020000000000a05000000000000000000050000030900010073797a3000000000000000000000000a"], 0x94}}, 0x0) 1m16.204204705s ago: executing program 4 (id=959): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="180000006a001324000000000000000000000007020000001b0496bd2591c179a9b644e1ab092f2a6310514a6d3a00006ce79eb1605a0c7e602ce7b97c75e332fb9dc1c4a817d5e9f8aec3bc0e818d867785", 0x52}], 0x1}, 0x20008081) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000700000000000000793b8b3b6e180000b400000095"], &(0x7f0000001080)='GPL\x00', 0x6, 0x23, &(0x7f00000000c0)=""/35, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 1m16.178200119s ago: executing program 3 (id=960): r0 = socket$kcm(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0xec, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x2, 0xae9}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0x400a9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x19, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x2a}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x5}, 0x50) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x4, 0xfffffff2, 0xffffff84, 0xffff8000, 0x509a4, 0xffffffffffffffff, 0xfffffffb, '\x00', 0x0, r4, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000200), 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x4000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd9e7edd7504", 0x14}], 0x1}, 0x0) 1m16.107813308s ago: executing program 5 (id=961): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab07000c0005"], 0xfe33) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000040), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="a5000000b03a4a549500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, [@printk={@lli}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0xa3cf, 0x5b, &(0x7f0000000200)=""/91, 0xbaa3a49e8500af47, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x5, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000300)=[{0x1, 0x1, 0x0, 0xb}, {0x0, 0x1, 0xe, 0x3}], 0x10, 0xc1e}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x24, 0x1, 0x7a, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0]}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1b, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x8, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x1000, 0x81, &(0x7f00000006c0)=""/129, 0x81e00, 0x2c, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000780)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r2, 0x0, 0x25, 0x2, @void}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000940)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000540)='./cgroup/syz1\x00'}, 0x30) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000036000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000900)={r2, r1, 0x37, 0x0, @val=@perf_event={0x8}}, 0x18) close(0xffffffffffffffff) 1m16.039141939s ago: executing program 0 (id=962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e2300050000000f3a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000200)={'veth1_to_team\x00', @random="fb176ab940d8"}) socket$kcm(0x29, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r1 = gettid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x40000, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x1}, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="a40000000359010300000000040000000200000905000300840000002c00048008000940000030bb0800064000000007080005400000000508000a4000001a0108000740000000002c000480080009400000800408000840000000c5080006400000000c080001400000042c080002400000000406000240887f00000900010073797a3100000000040004800900010073797a30000000000900010073797a3000000000885c8a903be7f227da9130f199eb87f1dfe038757b6f3997e47564f7600aa79d0cd100b608a75e9126e4b8b7ca54367069c85e50ff7aaa0d184bb4a3338b38d7eaf39b464e2a51609b"], 0xa4}}, 0x804) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r6, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x4, 0x55, 0x4, 0x4, 0x0, 0xd24, 0x40000, 0x9, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x1, @perf_config_ext={0x200}, 0x0, 0x887, 0x2, 0x0, 0x8, 0x6, 0x8, 0x0, 0x1, 0x0, 0x2}, r1, 0x4, r4, 0xa) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 1m15.929683311s ago: executing program 5 (id=963): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1b, 0x0, 0x0, 0x0, 0x7, 0x244, 0x3}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x6, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000250001002abd7000ffdbdb250200000008000100090000006affc22a"], 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) (async) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) (async) close(r3) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f1f2725e7", 0x5}], 0x2}, 0x8080) 1m15.729598141s ago: executing program 1 (id=964): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x8, 0x822c4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0x2}, 0x2, 0x0, 0x2000, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x3}, 0x80, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x3d, 0x107, 0x8000, 0x8, {0x4, 0x7c}, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x8, 0x0, 0x0, @u64=0x50b}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="54000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000001800038014000180080001000000008b49ab393a2ffffbbb040001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000000c0601080000000000000008000000080900020073797a3100000000051d06000100070000000500010007000000090002007300010007000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x8008cc1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) setsockopt$sock_attach_bpf(r5, 0x29, 0x38, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m15.654436044s ago: executing program 3 (id=965): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x8d, 0x0, &(0x7f00000006c0)="a374b17979f2383897efc0f34826ffab1eb421a10b9970802a0096d733f46a2d8fad19034d746c4de1ee52210c065b3f81dad93299952758d2132edbc43e121ccd9b1a28ff77063f1f9195c701c666e6ed6b220fc71202f598e93e2a110d93ebbc04c1af8af24cc27d8c922160463f229cdb461b0352b04e86b7c2ffff000068707a00"/141, 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0xad) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x40, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0xff, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x102280, 0x0, 0x0, 0x7, 0x3fe, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0xe62}, 0x3010, 0xc8, 0x0, 0x6, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x69}, 0x0, 0x10, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="007a55b358ab00f5ff0000000000000000810000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xe) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709004003000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000910018116300001271000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000ef9d6deb4e594ec000000bfa200000000000007020000f8ffffffb703000008000020b704dd0000000000008500610d90cc9ac6"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x541b, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x200}) ioctl$TUNSETVNETHDRSZ(r6, 0x400454d8, &(0x7f0000000180)=0x200) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) 1m15.469878366s ago: executing program 4 (id=966): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000003000000000200000002000000000000000000000000000081"], 0x0, 0x5a}, 0x20) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4f}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50) (async) close(0x3) (async) socket$kcm(0x2, 0x922000000001, 0x106) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0xf9, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r4, &(0x7f0000000880)={&(0x7f00000002c0)={0xa, 0x4e20, 0x2, @remote, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000300)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000002900000008"], 0x18}, 0x4004000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r8}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x4, r0}, 0x10) 1m15.140525382s ago: executing program 1 (id=967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c0009800800014000", @ANYRESOCT=r1], 0xb0}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x5) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x20000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0xa00, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0x10, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbfc, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x15, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x14, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r8}, &(0x7f0000000340), &(0x7f0000000080)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m15.13969905s ago: executing program 5 (id=968): perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0x9, 0x3, 0x4, 0xb, 0x0, 0x2, 0x8c, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x4, @perf_bp={0x0, 0x2}, 0x2200, 0x4, 0x4017, 0x3, 0x40, 0x2, 0x5, 0x0, 0x6, 0x0, 0x637}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x6) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="1800000040000511d25a35400c0002000200002037153e371d0401", 0x1b}], 0x1}, 0x10049014) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014017000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a"], 0xa0}}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688474c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1m15.019807131s ago: executing program 3 (id=969): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffad, &(0x7f0000000000)='/proc/sys\x00\x00\x01\x00\x00\x00\x00\x00\xff\xbe\xcc\x9a\x18e\xf44.\xd4j\a\x1e\x01\xab%nN\xd4\xa2'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) 1m15.017419993s ago: executing program 4 (id=970): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xd780}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x2d, 0x0, 0x88) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m14.995252372s ago: executing program 0 (id=971): socket$kcm(0x23, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x0, 0x5, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0), 0x2}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002780)="5c00000012006bab9a3fe3d86e17aa0e076b876c1d0048007ea60864160af3650400410838001d001931a0e69ee517d34460bc06000000a76a5e2453375fa82e9d63c5d17405251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffffffffffefe, &(0x7f0000000480)=[{0x0}, {&(0x7f00000009c0)=""/200, 0xc7}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300)="5d6f00957eae432c1c778438bab09d03ce5e9ee56a789cb79fab7109d4760ef14ccf322901a1b512251866611dd119df34a44f2cf5a95864f64641cbafd310a7bd650d801a729446a1575406c416d83be8e1ecbcfaec0cca3fa37522b457f7b8e548a016176ca3b50b60cb36", &(0x7f0000001980)=""/4096}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100f, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000c00000009000000060000000000002e2e5f2e632e00"/45], 0x0, 0x2d, 0x0, 0x1, 0x6}, 0x28) sendmsg$inet(r10, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000006c0)="10", 0x1}], 0x1}, 0x24000900) 1m14.423656251s ago: executing program 5 (id=972): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xffffffffffffff38}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x60b40f5, '\x00', r1, r2}, 0x50) 1m13.956234108s ago: executing program 3 (id=973): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x26e1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x4, 0x7, 0x6, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000d, 0x1954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xfffffffffffffffe, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xb, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="6a0ac4ff0000000071104f000000000095000000001e0000af4fb8331220767ae2c45d36d35917cf1edafd3b0ff9bb4c7d77efcaca200afb7cc6edd4a37c27d7181c173e3c2e65070000000000000022ba8682e12314f1527751169abe7b1c4601d05ebe71bce08c9057667c9417f518377862243c2612fd344888487cf1ef2e55627b72d1a65c081d68fa3e0fc605f7c6a55cab97028ea18b70b700f5c0d9aa7561bf128c71"], &(0x7f0000000480)='GPL\x00'}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(&(0x7f0000000200)={0x5, 0x80, 0x7, 0x9, 0x9, 0xfb, 0x0, 0x800, 0x1000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x3}, 0x4, 0x5, 0x5d, 0x5, 0xfffffffffffffffc, 0x3ffc0, 0x649, 0x0, 0x565e, 0x0, 0x2}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b0000000700000002"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0x9e0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x1}, {&(0x7f00000017c0)}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000024000b94f01013e175b7bd7d7edd7504", 0x14}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x200}, 0x50) socket$kcm(0x10, 0x2, 0x10) 1m13.6386431s ago: executing program 5 (id=974): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xe, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x4, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair(0x10, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x1306, 0x6, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3c, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000880), &(0x7f0000000a40), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b04, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3395) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x5, 0x1200000, 0xa, 0x2120, 0xffffffffffffffff, 0x3, '\x00', r2, r3, 0x5, 0x5, 0x1, 0x2}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r6, 0x4) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)=""/295, 0x127}, {&(0x7f0000000940)=""/245, 0xf5}, {&(0x7f0000000740)=""/180, 0xb4}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f00000012c0)=""/4144, 0x1030}, {&(0x7f0000000b40)=""/262, 0x106}], 0x6}, 0x40002022) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="14000000350094fb0100fc6022f388a500000000", 0x14}], 0x1}, 0x24000040) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, 0x0, 0x400c000) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, 0x24, 0x301, 0x70bd25, 0xfffffffc, {0x1}, [@typed={0x6, 0x14e, 0x0, 0x0, @binary="69da"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbfbffa8499c69ac76dd752d00", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xd0, 0x9c, 0x0, 0x1, [@generic="efb90f5d88408165ca1bfed2f53b83a5114f929b1083a21b9cc75a08299596a4d90ed049ec7b8c7e1dbe820f348397702280a79481500cbb", @nested={0x14, 0xd4, 0x0, 0x1, [@typed={0xe, 0x105, 0x0, 0x0, @str='tlb_flush\x00'}]}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @nested={0x75, 0x7e, 0x0, 0x1, [@generic="95c45668a4bb2213ea9d4e2f82be58bbdc35d94186124d5bb9b8e12b207786554fcac1baff90f26fc6041abc95d594dedd591da2c1712d", @generic="e9ad381dc68724eff51962361cc08f1de1a7ee6e3da7974840fdb154e424a2853a6048be9a92141ba1ea438a6b13b2ddc3d063f62b2c9c29770f"]}]}]}, 0xe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="140000003a000b63c55a8064048c251b0908b5e9", 0x14}], 0x1}, 0x810) 1m13.334976727s ago: executing program 4 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newtclass={0x60, 0x28, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0xf}, {0x0, 0x9}, {0xfff2, 0xa}}, [@tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0xbf}}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x4}}}, @tclass_kind_options=@c_cake={0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c0}, 0x8010) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r0}) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x7fff, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x7fff, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x98, 0x98, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x6}}, @var={0x2, 0x0, 0x0, 0xe, 0x5, 0x2}, @enum64={0xb, 0x1, 0x0, 0x13, 0x1, 0x0, [{0xc, 0x6, 0x3}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @restrict={0x6, 0x0, 0x0, 0xb, 0x4}, @fwd={0xe}, @enum={0x2, 0x5, 0x0, 0x6, 0x4, [{0xd, 0x7f}, {0x10, 0x1}, {0xd, 0x8001}, {0x4}, {0x2, 0xffffffff}]}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x0]}}, &(0x7f0000000400)=""/180, 0xb7, 0xb4, 0x1, 0x3}, 0x28) bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x401, 0xffffffff, 0x0, 0xef150160e0117d91, 0x1, 0xa6e, '\x00', r2, r3, 0x2, 0x2, 0x4, 0x0, @void, @value, @value=r4}, 0x50) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r1}, 0x8) socketpair(0x9, 0x1, 0x3, &(0x7f0000000600)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x3, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x100}, 0x0) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000001800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000017c0)={&(0x7f0000000780)={0x1010, 0x464, 0x400, 0x70bd2a, 0x25dfdbfc, "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", ["", "", "", "", "", "", "", ""]}, 0x1010}}, 0x8004) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b00)={r4, 0x58, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@struct={0x10, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x1, 0x3, 0x401}, {0xb, 0x0, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x3}}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001bc0)=""/60, 0x58, 0x3c, 0x1, 0x3, 0x906763e1cd804afb}, 0x28) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000001b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x4, [@struct={0x10, 0x2, 0x0, 0x4, 0x1, 0x5, [{0x1, 0x3, 0x401}, {0xb, 0x0, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1, 0x3}}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001bc0)=""/60, 0x58, 0x3c, 0x1, 0x3, 0x906763e1cd804afb}, 0x28) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001d00)=@o_path={&(0x7f0000001cc0)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{r4}, &(0x7f0000001d40), &(0x7f0000001d80)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001dc0)={{r4, 0xffffffffffffffff}, &(0x7f0000001d40), &(0x7f0000001d80)=r5}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e80)=@bpf_lsm={0x1d, 0x19, &(0x7f0000001840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2c95, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1010}}, @map_val={0x18, 0xa, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001940)='syzkaller\x00', 0x7fff, 0xd9, &(0x7f0000001980)=""/217, 0x40f00, 0x2, '\x00', r8, 0x1b, r9, 0x8, &(0x7f0000001c40)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000001c80)={0x1, 0xf, 0xe3c5, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001e00)=[r4, r4, r10, r4, r11, r4], &(0x7f0000001e40)=[{0x2, 0x4, 0xd, 0xc}], 0x10, 0x62a}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001f40)={0x1b, 0x0, 0x0, 0x4, 0x0, r5, 0x2, '\x00', r2, r3, 0x5, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002040)={{r11}, &(0x7f0000001fc0), &(0x7f0000002000)=r4}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002080)={0x1b, 0x0, 0x0, 0x3, 0x0, r5, 0x8, '\x00', 0x0, r3, 0x3}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002080)={0x1b, 0x0, 0x0, 0x3, 0x0, r5, 0x8, '\x00', 0x0, r3, 0x3}, 0x50) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x1c, 0xd, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040081}, 0x40) recvmsg$unix(r7, &(0x7f0000002500)={&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000002440)=[{&(0x7f0000002280)=""/215, 0xd7}, {&(0x7f0000002380)=""/183, 0xb7}], 0x2, &(0x7f0000002480)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x40010000) bpf$MAP_CREATE(0x0, &(0x7f0000002540)=@bloom_filter={0x1e, 0x7f, 0x1ff, 0x40, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r9, 0x4, 0x3, 0x4, 0x9}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000002540)=@bloom_filter={0x1e, 0x7f, 0x1ff, 0x40, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r9, 0x4, 0x3, 0x4, 0x9}, 0x50) write$cgroup_freezer_state(r14, &(0x7f00000025c0)='FROZEN\x00', 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x18, 0x20, &(0x7f0000002600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb94}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@llu}, @alu={0x4, 0x0, 0x9, 0x9, 0x3, 0xc, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002700)='syzkaller\x00', 0x8, 0x2d, &(0x7f0000002740)=""/45, 0x40f00, 0x8, '\x00', r8, 0x0, r13, 0x8, &(0x7f0000002780)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000027c0)={0x3, 0x8, 0x9, 0x100}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002800)=[r10, r11], &(0x7f0000002840)=[{0x2, 0x4, 0x9, 0x4}, {0x1, 0x2, 0x9, 0x7}, {0x0, 0x1, 0x8, 0x8}, {0x0, 0x1, 0xb, 0x3}, {0x1, 0x2, 0x10, 0x1}, {0x5, 0x3, 0x8, 0x4}]}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000028c0)={0x18, 0x20, &(0x7f0000002600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb94}, {{0x18, 0x1, 0x1, 0x0, r14}}, {}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @printk={@llu}, @alu={0x4, 0x0, 0x9, 0x9, 0x3, 0xc, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002700)='syzkaller\x00', 0x8, 0x2d, &(0x7f0000002740)=""/45, 0x40f00, 0x8, '\x00', r8, 0x0, r13, 0x8, &(0x7f0000002780)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000027c0)={0x3, 0x8, 0x9, 0x100}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000002800)=[r10, r11], &(0x7f0000002840)=[{0x2, 0x4, 0x9, 0x4}, {0x1, 0x2, 0x9, 0x7}, {0x0, 0x1, 0x8, 0x8}, {0x0, 0x1, 0xb, 0x3}, {0x1, 0x2, 0x10, 0x1}, {0x5, 0x3, 0x8, 0x4}]}, 0x94) socket(0xb, 0xa, 0x9) (async) r15 = socket(0xb, 0xa, 0x9) recvmsg(r15, &(0x7f0000002e40)={&(0x7f0000002980)=@nfc, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a00)=""/21, 0x15}, {&(0x7f0000002a40)=""/48, 0x30}, {&(0x7f0000002a80)=""/38, 0x26}, {&(0x7f0000002ac0)=""/118, 0x76}, {&(0x7f0000002b40)=""/11, 0xb}, {&(0x7f0000002b80)=""/194, 0xc2}, {&(0x7f0000002c80)=""/230, 0xe6}], 0x7, &(0x7f0000002e00)}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003080)={{r4}, &(0x7f0000003000), &(0x7f0000003040)=r12}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003080)={{r4, 0xffffffffffffffff}, &(0x7f0000003000), &(0x7f0000003040)=r12}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003200)={0x18, 0x4, &(0x7f0000002e80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, [@exit]}, &(0x7f0000002ec0)='syzkaller\x00', 0xe4c, 0x49, &(0x7f0000002f00)=""/73, 0x40f00, 0xa, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000002f80)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000002fc0)={0x2, 0x0, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000003180)=[r4, r16, 0xffffffffffffffff], &(0x7f00000031c0)=[{0x5, 0x4, 0xe, 0x6}], 0x10, 0xfff}, 0x94) 1m12.509799475s ago: executing program 0 (id=976): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000014000000000000000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000080000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) unlink(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x7, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000010000000000000000000000200000000030000000000000f040000000000002e"], 0x0, 0x4d}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x5, 0x8, 0xf8d, 0x6, 0x2118, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xf, r3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8940, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x16000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="c203338b0000e919440000e8060000000000", @ANYRES32=0x0, @ANYBLOB="7ff06b062a241716c2025dd051c17ea1a0d26d95e203399b15cd3813180d2997099ddc4a386d86aeb78e1dbff286779e7f2c194edc29bb5a2477e103c35852932c67573b1b6ce45a9d63e8deff717c56131a497e12bd893934d90e2c0e182b133d182905cd44a44594453371b5c43620b23a69c83f3de2d26a9c1fda3973099b84f808710e6503b684ecf19486378f998ef1667e105659564a942f86d3bca73cce0eb6ecd170e018ca68d2de23"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r9, &(0x7f0000000a40)="8c55de7b14e8", 0x0}, 0x20) 59.8240681s ago: executing program 4 (id=977): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69eeab556a7e60f1e611ca66982949a36c23d3b48dfd8cdbf9367b4fa0a640800030006010000080003001100000000", 0x55}, {&(0x7f0000000180)="6a628b6699d9dd", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4040844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00'], 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x50, &(0x7f0000000100), 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c"], 0x0, 0x4a, 0x0, 0x1}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x68, 0x30, 0xffff, 0x4000, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x0, 0xc0000000, 0x3, 0x7}, 0x4, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 0s ago: executing program 33 (id=976): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000014000000000000000018120000", @ANYRES8=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000080000000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) unlink(&(0x7f0000000140)='./file0\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x7, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000010000000000000000000000200000000030000000000000f040000000000002e"], 0x0, 0x4d}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000740)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x5, 0x8, 0xf8d, 0x6, 0x2118, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xf, r3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8940, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x16000, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="c203338b0000e919440000e8060000000000", @ANYRES32=0x0, @ANYBLOB="7ff06b062a241716c2025dd051c17ea1a0d26d95e203399b15cd3813180d2997099ddc4a386d86aeb78e1dbff286779e7f2c194edc29bb5a2477e103c35852932c67573b1b6ce45a9d63e8deff717c56131a497e12bd893934d90e2c0e182b133d182905cd44a44594453371b5c43620b23a69c83f3de2d26a9c1fda3973099b84f808710e6503b684ecf19486378f998ef1667e105659564a942f86d3bca73cce0eb6ecd170e018ca68d2de23"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r9, &(0x7f0000000a40)="8c55de7b14e8", 0x0}, 0x20) kernel console output (not intermixed with test programs): 80][ T6439] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 99.520608][ T6439] ? __asan_memcpy+0x40/0x70 [ 99.520636][ T6439] ? __pfx_ref_tracker_free+0x10/0x10 [ 99.520664][ T6439] netlink_rcv_skb+0x205/0x470 [ 99.520682][ T6439] ? __lock_acquire+0xab9/0xd20 [ 99.520710][ T6439] ? __pfx_genl_rcv_msg+0x10/0x10 [ 99.520736][ T6439] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.520781][ T6439] ? down_read+0x1ad/0x2e0 [ 99.520807][ T6439] genl_rcv+0x28/0x40 [ 99.520830][ T6439] netlink_unicast+0x82c/0x9e0 [ 99.520870][ T6439] ? __pfx_netlink_unicast+0x10/0x10 [ 99.520902][ T6439] ? netlink_sendmsg+0x642/0xb30 [ 99.520920][ T6439] ? skb_put+0x11b/0x210 [ 99.520948][ T6439] netlink_sendmsg+0x805/0xb30 [ 99.520981][ T6439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.521007][ T6439] ? aa_sock_msg_perm+0xf1/0x1d0 [ 99.521029][ T6439] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 99.521049][ T6439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.521072][ T6439] __sock_sendmsg+0x21c/0x270 [ 99.521105][ T6439] ____sys_sendmsg+0x505/0x830 [ 99.521137][ T6439] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.521174][ T6439] ? import_iovec+0x74/0xa0 [ 99.521204][ T6439] ___sys_sendmsg+0x21f/0x2a0 [ 99.521232][ T6439] ? __pfx____sys_sendmsg+0x10/0x10 [ 99.521284][ T6439] ? __fget_files+0x2a/0x420 [ 99.521319][ T6439] ? __fget_files+0x2a/0x420 [ 99.521334][ T6439] ? __fget_files+0x3a0/0x420 [ 99.521365][ T6439] __x64_sys_sendmsg+0x19b/0x260 [ 99.521394][ T6439] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 99.521431][ T6439] ? __pfx_ksys_write+0x10/0x10 [ 99.521453][ T6439] ? rcu_is_watching+0x15/0xb0 [ 99.521480][ T6439] ? do_syscall_64+0xbe/0x3b0 [ 99.521506][ T6439] do_syscall_64+0xfa/0x3b0 [ 99.521525][ T6439] ? lockdep_hardirqs_on+0x9c/0x150 [ 99.521544][ T6439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.521563][ T6439] ? clear_bhb_loop+0x60/0xb0 [ 99.521587][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.521605][ T6439] RIP: 0033:0x7feb8a38ec29 [ 99.521622][ T6439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.521657][ T6439] RSP: 002b:00007feb8b146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.521678][ T6439] RAX: ffffffffffffffda RBX: 00007feb8a5d5fa0 RCX: 00007feb8a38ec29 [ 99.521692][ T6439] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 99.521704][ T6439] RBP: 00007feb8b146090 R08: 0000000000000000 R09: 0000000000000000 [ 99.521716][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.521727][ T6439] R13: 00007feb8a5d6038 R14: 00007feb8a5d5fa0 R15: 00007fff7e4d90c8 [ 99.521763][ T6439] [ 100.365790][ T6457] netlink: 'syz.1.117': attribute type 29 has an invalid length. [ 100.966479][ T6488] FAULT_INJECTION: forcing a failure. [ 100.966479][ T6488] name failslab, interval 1, probability 0, space 0, times 0 [ 101.044483][ T6488] CPU: 0 UID: 0 PID: 6488 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) [ 101.044510][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.044522][ T6488] Call Trace: [ 101.044530][ T6488] [ 101.044538][ T6488] dump_stack_lvl+0x189/0x250 [ 101.044567][ T6488] ? __pfx____ratelimit+0x10/0x10 [ 101.044587][ T6488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.044609][ T6488] ? __pfx__printk+0x10/0x10 [ 101.044641][ T6488] ? __pfx___might_resched+0x10/0x10 [ 101.044671][ T6488] should_fail_ex+0x414/0x560 [ 101.044705][ T6488] should_failslab+0xa8/0x100 [ 101.044734][ T6488] __kmalloc_cache_noprof+0x70/0x3d0 [ 101.044760][ T6488] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 101.044790][ T6488] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 101.044831][ T6488] genl_family_rcv_msg_doit+0x215/0x300 [ 101.044865][ T6488] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 101.044904][ T6488] ? bpf_lsm_capable+0x9/0x20 [ 101.044929][ T6488] ? security_capable+0x7e/0x2e0 [ 101.044964][ T6488] genl_rcv_msg+0x60e/0x790 [ 101.044996][ T6488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.045020][ T6488] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 101.045047][ T6488] ? __asan_memcpy+0x40/0x70 [ 101.045068][ T6488] ? __pfx_ref_tracker_free+0x10/0x10 [ 101.045094][ T6488] netlink_rcv_skb+0x205/0x470 [ 101.045111][ T6488] ? __lock_acquire+0xab9/0xd20 [ 101.045139][ T6488] ? __pfx_genl_rcv_msg+0x10/0x10 [ 101.045165][ T6488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 101.045205][ T6488] ? down_read+0x1ad/0x2e0 [ 101.045229][ T6488] genl_rcv+0x28/0x40 [ 101.045251][ T6488] netlink_unicast+0x82c/0x9e0 [ 101.045289][ T6488] ? __pfx_netlink_unicast+0x10/0x10 [ 101.045319][ T6488] ? netlink_sendmsg+0x642/0xb30 [ 101.045336][ T6488] ? skb_put+0x11b/0x210 [ 101.045362][ T6488] netlink_sendmsg+0x805/0xb30 [ 101.045392][ T6488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.045422][ T6488] ? aa_sock_msg_perm+0xf1/0x1d0 [ 101.045444][ T6488] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 101.045464][ T6488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.045485][ T6488] __sock_sendmsg+0x21c/0x270 [ 101.045517][ T6488] ____sys_sendmsg+0x505/0x830 [ 101.045546][ T6488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.045580][ T6488] ? import_iovec+0x74/0xa0 [ 101.045608][ T6488] ___sys_sendmsg+0x21f/0x2a0 [ 101.045635][ T6488] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.045696][ T6488] ? __fget_files+0x2a/0x420 [ 101.045710][ T6488] ? __fget_files+0x3a0/0x420 [ 101.045733][ T6488] __x64_sys_sendmsg+0x19b/0x260 [ 101.045759][ T6488] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 101.045793][ T6488] ? __pfx_ksys_write+0x10/0x10 [ 101.045815][ T6488] ? rcu_is_watching+0x15/0xb0 [ 101.045840][ T6488] ? do_syscall_64+0xbe/0x3b0 [ 101.045865][ T6488] do_syscall_64+0xfa/0x3b0 [ 101.045884][ T6488] ? lockdep_hardirqs_on+0x9c/0x150 [ 101.045902][ T6488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.045928][ T6488] ? clear_bhb_loop+0x60/0xb0 [ 101.045952][ T6488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.045970][ T6488] RIP: 0033:0x7feb8a38ec29 [ 101.045988][ T6488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.046004][ T6488] RSP: 002b:00007feb8b146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.046024][ T6488] RAX: ffffffffffffffda RBX: 00007feb8a5d5fa0 RCX: 00007feb8a38ec29 [ 101.046038][ T6488] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 101.046050][ T6488] RBP: 00007feb8b146090 R08: 0000000000000000 R09: 0000000000000000 [ 101.046061][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.046072][ T6488] R13: 00007feb8a5d6038 R14: 00007feb8a5d5fa0 R15: 00007fff7e4d90c8 [ 101.046107][ T6488] [ 101.990793][ T6510] netlink: 'syz.2.132': attribute type 6 has an invalid length. [ 102.021294][ T6510] netlink: 168 bytes leftover after parsing attributes in process `syz.2.132'. [ 102.035344][ T6512] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.130'. [ 102.168889][ T6507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.130'. [ 102.852797][ T6520] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 102.948140][ T6520] netlink: 17 bytes leftover after parsing attributes in process `syz.3.134'. [ 104.152273][ T6537] FAULT_INJECTION: forcing a failure. [ 104.152273][ T6537] name failslab, interval 1, probability 0, space 0, times 0 [ 104.496702][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.3.138 Not tainted syzkaller #0 PREEMPT(full) [ 104.496729][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.496741][ T6537] Call Trace: [ 104.496748][ T6537] [ 104.496756][ T6537] dump_stack_lvl+0x189/0x250 [ 104.496784][ T6537] ? __pfx____ratelimit+0x10/0x10 [ 104.496804][ T6537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.496827][ T6537] ? __pfx__printk+0x10/0x10 [ 104.496860][ T6537] ? __pfx___might_resched+0x10/0x10 [ 104.496884][ T6537] should_fail_ex+0x414/0x560 [ 104.496917][ T6537] should_failslab+0xa8/0x100 [ 104.496947][ T6537] __kmalloc_cache_noprof+0x70/0x3d0 [ 104.496973][ T6537] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 104.497004][ T6537] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 104.497053][ T6537] genl_family_rcv_msg_doit+0x215/0x300 [ 104.497088][ T6537] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 104.497128][ T6537] ? bpf_lsm_capable+0x9/0x20 [ 104.497153][ T6537] ? security_capable+0x7e/0x2e0 [ 104.497189][ T6537] genl_rcv_msg+0x60e/0x790 [ 104.497222][ T6537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.497246][ T6537] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 104.497273][ T6537] ? __asan_memcpy+0x40/0x70 [ 104.497294][ T6537] ? __pfx_ref_tracker_free+0x10/0x10 [ 104.497320][ T6537] netlink_rcv_skb+0x205/0x470 [ 104.497338][ T6537] ? __lock_acquire+0xab9/0xd20 [ 104.497366][ T6537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 104.497393][ T6537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 104.497433][ T6537] ? down_read+0x1ad/0x2e0 [ 104.497459][ T6537] genl_rcv+0x28/0x40 [ 104.497482][ T6537] netlink_unicast+0x82c/0x9e0 [ 104.497520][ T6537] ? __pfx_netlink_unicast+0x10/0x10 [ 104.497551][ T6537] ? netlink_sendmsg+0x642/0xb30 [ 104.497569][ T6537] ? skb_put+0x11b/0x210 [ 104.497595][ T6537] netlink_sendmsg+0x805/0xb30 [ 104.497626][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.497650][ T6537] ? aa_sock_msg_perm+0xf1/0x1d0 [ 104.497672][ T6537] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 104.497692][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.497717][ T6537] __sock_sendmsg+0x21c/0x270 [ 104.497749][ T6537] ____sys_sendmsg+0x505/0x830 [ 104.497779][ T6537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.497813][ T6537] ? import_iovec+0x74/0xa0 [ 104.497841][ T6537] ___sys_sendmsg+0x21f/0x2a0 [ 104.497867][ T6537] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.497930][ T6537] ? __fget_files+0x2a/0x420 [ 104.497946][ T6537] ? __fget_files+0x3a0/0x420 [ 104.497974][ T6537] __x64_sys_sendmsg+0x19b/0x260 [ 104.497996][ T6537] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 104.498025][ T6537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.498060][ T6537] ? __pfx_ksys_write+0x10/0x10 [ 104.498082][ T6537] ? rcu_is_watching+0x15/0xb0 [ 104.498108][ T6537] ? do_syscall_64+0xbe/0x3b0 [ 104.498133][ T6537] do_syscall_64+0xfa/0x3b0 [ 104.498152][ T6537] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.498170][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.498188][ T6537] ? clear_bhb_loop+0x60/0xb0 [ 104.498212][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.498230][ T6537] RIP: 0033:0x7feb8a38ec29 [ 104.498247][ T6537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.498263][ T6537] RSP: 002b:00007feb8b146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.498283][ T6537] RAX: ffffffffffffffda RBX: 00007feb8a5d5fa0 RCX: 00007feb8a38ec29 [ 104.498297][ T6537] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 104.498309][ T6537] RBP: 00007feb8b146090 R08: 0000000000000000 R09: 0000000000000000 [ 104.498320][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 104.498331][ T6537] R13: 00007feb8a5d6038 R14: 00007feb8a5d5fa0 R15: 00007fff7e4d90c8 [ 104.498363][ T6537] [ 104.895593][ T6540] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 106.341109][ T6553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 106.348817][ T6553] IPv6: NLM_F_CREATE should be set when creating new route [ 106.356192][ T6553] IPv6: NLM_F_CREATE should be set when creating new route [ 109.395489][ T6574] netlink: 703 bytes leftover after parsing attributes in process `syz.4.146'. [ 109.623675][ T6577] netlink: 26 bytes leftover after parsing attributes in process `syz.0.147'. [ 109.673778][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'. [ 109.716549][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.146'. [ 109.981047][ T6596] FAULT_INJECTION: forcing a failure. [ 109.981047][ T6596] name failslab, interval 1, probability 0, space 0, times 0 [ 110.087277][ T6596] CPU: 1 UID: 0 PID: 6596 Comm: syz.1.151 Not tainted syzkaller #0 PREEMPT(full) [ 110.087303][ T6596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.087315][ T6596] Call Trace: [ 110.087323][ T6596] [ 110.087331][ T6596] dump_stack_lvl+0x189/0x250 [ 110.087359][ T6596] ? __pfx____ratelimit+0x10/0x10 [ 110.087380][ T6596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.087403][ T6596] ? __pfx__printk+0x10/0x10 [ 110.087438][ T6596] ? __pfx___might_resched+0x10/0x10 [ 110.087463][ T6596] should_fail_ex+0x414/0x560 [ 110.087498][ T6596] should_failslab+0xa8/0x100 [ 110.087528][ T6596] __kmalloc_cache_noprof+0x70/0x3d0 [ 110.087554][ T6596] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 110.087586][ T6596] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 110.087637][ T6596] genl_family_rcv_msg_doit+0x215/0x300 [ 110.087673][ T6596] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 110.087716][ T6596] ? bpf_lsm_capable+0x9/0x20 [ 110.087741][ T6596] ? security_capable+0x7e/0x2e0 [ 110.087778][ T6596] genl_rcv_msg+0x60e/0x790 [ 110.087813][ T6596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.087838][ T6596] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 110.087866][ T6596] ? __asan_memcpy+0x40/0x70 [ 110.087888][ T6596] ? __pfx_ref_tracker_free+0x10/0x10 [ 110.087916][ T6596] netlink_rcv_skb+0x205/0x470 [ 110.087934][ T6596] ? __lock_acquire+0xab9/0xd20 [ 110.087962][ T6596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.087989][ T6596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.088033][ T6596] ? down_read+0x1ad/0x2e0 [ 110.088059][ T6596] genl_rcv+0x28/0x40 [ 110.088082][ T6596] netlink_unicast+0x82c/0x9e0 [ 110.088123][ T6596] ? __pfx_netlink_unicast+0x10/0x10 [ 110.088155][ T6596] ? netlink_sendmsg+0x642/0xb30 [ 110.088173][ T6596] ? skb_put+0x11b/0x210 [ 110.088201][ T6596] netlink_sendmsg+0x805/0xb30 [ 110.088234][ T6596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.088263][ T6596] ? aa_sock_msg_perm+0xf1/0x1d0 [ 110.088285][ T6596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.088306][ T6596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.088328][ T6596] __sock_sendmsg+0x21c/0x270 [ 110.088360][ T6596] ____sys_sendmsg+0x505/0x830 [ 110.088391][ T6596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.088427][ T6596] ? import_iovec+0x74/0xa0 [ 110.088457][ T6596] ___sys_sendmsg+0x21f/0x2a0 [ 110.088485][ T6596] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.088537][ T6596] ? __fget_files+0x2a/0x420 [ 110.088570][ T6596] ? __fget_files+0x2a/0x420 [ 110.088586][ T6596] ? __fget_files+0x3a0/0x420 [ 110.088621][ T6596] __x64_sys_sendmsg+0x19b/0x260 [ 110.088649][ T6596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.088686][ T6596] ? __pfx_ksys_write+0x10/0x10 [ 110.088709][ T6596] ? rcu_is_watching+0x15/0xb0 [ 110.088735][ T6596] ? do_syscall_64+0xbe/0x3b0 [ 110.088761][ T6596] do_syscall_64+0xfa/0x3b0 [ 110.088780][ T6596] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.088799][ T6596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.088818][ T6596] ? clear_bhb_loop+0x60/0xb0 [ 110.088843][ T6596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.088861][ T6596] RIP: 0033:0x7f82f518ec29 [ 110.088879][ T6596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.088895][ T6596] RSP: 002b:00007f82f5f3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.088915][ T6596] RAX: ffffffffffffffda RBX: 00007f82f53d5fa0 RCX: 00007f82f518ec29 [ 110.088930][ T6596] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 110.088942][ T6596] RBP: 00007f82f5f3b090 R08: 0000000000000000 R09: 0000000000000000 [ 110.088954][ T6596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.088965][ T6596] R13: 00007f82f53d6038 R14: 00007f82f53d5fa0 R15: 00007fff47943f68 [ 110.089000][ T6596] [ 110.473736][ T6602] netlink: 'syz.2.152': attribute type 29 has an invalid length. [ 110.534002][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.153'. [ 110.918984][ T6618] netlink: 'syz.1.154': attribute type 2 has an invalid length. [ 110.918984][ T6617] netlink: 'syz.1.154': attribute type 2 has an invalid length. [ 110.919011][ T6618] netlink: 51 bytes leftover after parsing attributes in process `syz.1.154'. [ 111.012479][ T6617] netlink: 51 bytes leftover after parsing attributes in process `syz.1.154'. [ 111.385955][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 111.435538][ T6625] : entered promiscuous mode [ 111.461378][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 111.916635][ T6652] FAULT_INJECTION: forcing a failure. [ 111.916635][ T6652] name failslab, interval 1, probability 0, space 0, times 0 [ 111.931356][ T6652] CPU: 1 UID: 0 PID: 6652 Comm: syz.0.164 Not tainted syzkaller #0 PREEMPT(full) [ 111.931380][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 111.931390][ T6652] Call Trace: [ 111.931398][ T6652] [ 111.931405][ T6652] dump_stack_lvl+0x189/0x250 [ 111.931431][ T6652] ? __pfx____ratelimit+0x10/0x10 [ 111.931451][ T6652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.931473][ T6652] ? __pfx__printk+0x10/0x10 [ 111.931504][ T6652] ? __pfx___might_resched+0x10/0x10 [ 111.931527][ T6652] should_fail_ex+0x414/0x560 [ 111.931556][ T6652] should_failslab+0xa8/0x100 [ 111.931585][ T6652] __kmalloc_cache_noprof+0x70/0x3d0 [ 111.931610][ T6652] ? ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 111.931639][ T6652] ovs_ct_limit_cmd_set+0x2f7/0xb00 [ 111.931681][ T6652] genl_family_rcv_msg_doit+0x215/0x300 [ 111.931714][ T6652] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 111.931753][ T6652] ? bpf_lsm_capable+0x9/0x20 [ 111.931778][ T6652] ? security_capable+0x7e/0x2e0 [ 111.931813][ T6652] genl_rcv_msg+0x60e/0x790 [ 111.931845][ T6652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.931869][ T6652] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 111.931897][ T6652] ? __asan_memcpy+0x40/0x70 [ 111.931917][ T6652] ? __pfx_ref_tracker_free+0x10/0x10 [ 111.931943][ T6652] netlink_rcv_skb+0x205/0x470 [ 111.931960][ T6652] ? __lock_acquire+0xab9/0xd20 [ 111.931987][ T6652] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.932013][ T6652] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.932049][ T6652] ? down_read+0x1ad/0x2e0 [ 111.932074][ T6652] genl_rcv+0x28/0x40 [ 111.932095][ T6652] netlink_unicast+0x82c/0x9e0 [ 111.932133][ T6652] ? __pfx_netlink_unicast+0x10/0x10 [ 111.932173][ T6652] ? netlink_sendmsg+0x642/0xb30 [ 111.932191][ T6652] ? skb_put+0x11b/0x210 [ 111.932216][ T6652] netlink_sendmsg+0x805/0xb30 [ 111.932245][ T6652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.932272][ T6652] ? aa_sock_msg_perm+0xf1/0x1d0 [ 111.932292][ T6652] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 111.932312][ T6652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.932333][ T6652] __sock_sendmsg+0x21c/0x270 [ 111.932363][ T6652] ____sys_sendmsg+0x505/0x830 [ 111.932393][ T6652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.932426][ T6652] ? import_iovec+0x74/0xa0 [ 111.932453][ T6652] ___sys_sendmsg+0x21f/0x2a0 [ 111.932479][ T6652] ? __pfx____sys_sendmsg+0x10/0x10 [ 111.932540][ T6652] ? __fget_files+0x2a/0x420 [ 111.932556][ T6652] ? __fget_files+0x3a0/0x420 [ 111.932584][ T6652] __x64_sys_sendmsg+0x19b/0x260 [ 111.932610][ T6652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 111.932644][ T6652] ? __pfx_ksys_write+0x10/0x10 [ 111.932666][ T6652] ? rcu_is_watching+0x15/0xb0 [ 111.932691][ T6652] ? do_syscall_64+0xbe/0x3b0 [ 111.932716][ T6652] do_syscall_64+0xfa/0x3b0 [ 111.932735][ T6652] ? lockdep_hardirqs_on+0x9c/0x150 [ 111.932753][ T6652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.932772][ T6652] ? clear_bhb_loop+0x60/0xb0 [ 111.932795][ T6652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.932813][ T6652] RIP: 0033:0x7f6a1138ec29 [ 111.932829][ T6652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.932845][ T6652] RSP: 002b:00007f6a122ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.932865][ T6652] RAX: ffffffffffffffda RBX: 00007f6a115d5fa0 RCX: 00007f6a1138ec29 [ 111.932879][ T6652] RDX: 0000000000004010 RSI: 0000200000000000 RDI: 0000000000000003 [ 111.932891][ T6652] RBP: 00007f6a122ef090 R08: 0000000000000000 R09: 0000000000000000 [ 111.932902][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.932913][ T6652] R13: 00007f6a115d6038 R14: 00007f6a115d5fa0 R15: 00007ffe09144de8 [ 111.932945][ T6652] [ 111.940589][ T6655] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.163'. [ 112.280895][ T6665] netlink: 'syz.0.167': attribute type 29 has an invalid length. [ 112.520150][ T6672] netlink: 'syz.1.168': attribute type 21 has an invalid length. [ 112.815283][ T6684] option changes via remount are deprecated (pid=6683 comm=syz.1.174) [ 112.896990][ T6684] netlink: 'syz.1.174': attribute type 10 has an invalid length. [ 113.207682][ T6692] netlink: 'syz.4.176': attribute type 12 has an invalid length. [ 114.585537][ T6715] netlink: 'syz.2.182': attribute type 29 has an invalid length. [ 114.677351][ T6715] netlink: 'syz.2.182': attribute type 29 has an invalid length. [ 115.304004][ T6712] netlink: 'syz.3.178': attribute type 39 has an invalid length. [ 115.802477][ T6722] netlink: 'syz.1.183': attribute type 29 has an invalid length. [ 115.835097][ T6732] __nla_validate_parse: 38 callbacks suppressed [ 115.835113][ T6732] netlink: 802 bytes leftover after parsing attributes in process `syz.4.186'. [ 115.910262][ T6736] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.187'. [ 115.999067][ T6739] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.187'. [ 116.036639][ T6742] netlink: 'syz.1.188': attribute type 12 has an invalid length. [ 116.061908][ T6742] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.188'. [ 116.665217][ T6749] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 117.232249][ T6762] netlink: 'syz.2.193': attribute type 10 has an invalid length. [ 117.362924][ T6762] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 117.388331][ T6762] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 117.401343][ T6762] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 117.745205][ T6777] netlink: 'syz.0.199': attribute type 29 has an invalid length. [ 118.177868][ T6795] netlink: 763 bytes leftover after parsing attributes in process `syz.4.204'. [ 118.520926][ T6799] netlink: 36 bytes leftover after parsing attributes in process `syz.0.205'. [ 118.974188][ T6815] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 119.010324][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.027674][ T6817] netlink: 'syz.1.212': attribute type 9 has an invalid length. [ 119.045391][ T6815] bond0: (slave team0): Enslaving as an active interface with an up link [ 119.049560][ T6817] netlink: 211924 bytes leftover after parsing attributes in process `syz.1.212'. [ 119.137893][ T6817] netlink: 152 bytes leftover after parsing attributes in process `syz.1.212'. [ 119.154014][ T6817] tc_dump_action: action bad kind [ 119.180378][ T6821] netlink: 24032 bytes leftover after parsing attributes in process `syz.4.213'. [ 119.234318][ T6821] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.213'. [ 119.270889][ T6824] netlink: 'syz.1.212': attribute type 21 has an invalid length. [ 119.473708][ T6828] netlink: 'syz.0.215': attribute type 29 has an invalid length. [ 119.475368][ T6825] netlink: 'syz.2.214': attribute type 16 has an invalid length. [ 119.489576][ T6825] netlink: 'syz.2.214': attribute type 17 has an invalid length. [ 119.555227][ T6825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.495991][ T6840] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.024836][ T6867] __nla_validate_parse: 2 callbacks suppressed [ 121.024853][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 121.132062][ T6880] netlink: 'syz.0.231': attribute type 11 has an invalid length. [ 121.164348][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'. [ 121.188661][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.229'. [ 121.196847][ T6880] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.231'. [ 121.416834][ T6877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.428882][ T6887] validate_nla: 6 callbacks suppressed [ 121.428899][ T6887] netlink: 'syz.4.233': attribute type 3 has an invalid length. [ 121.616958][ T6894] netlink: 'syz.1.235': attribute type 9 has an invalid length. [ 121.632442][ T6893] netlink: 'syz.1.235': attribute type 9 has an invalid length. [ 121.650320][ T6893] netlink: 211924 bytes leftover after parsing attributes in process `syz.1.235'. [ 121.672198][ T6894] netlink: 211924 bytes leftover after parsing attributes in process `syz.1.235'. [ 121.743434][ T6888] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.044682][ T6909] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.237'. [ 122.175987][ T6902] syzkaller0: entered promiscuous mode [ 122.201604][ T6902] syzkaller0: entered allmulticast mode [ 123.488403][ T6944] netlink: 'syz.0.248': attribute type 33 has an invalid length. [ 123.496374][ T6944] netlink: 152 bytes leftover after parsing attributes in process `syz.0.248'. [ 124.295073][ T6929] netlink: 'syz.2.243': attribute type 29 has an invalid length. [ 124.599751][ T6964] netlink: 'syz.4.253': attribute type 30 has an invalid length. [ 124.718806][ T6964] netlink: 13 bytes leftover after parsing attributes in process `syz.4.253'. [ 124.778566][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.253'. [ 126.555994][ T6997] netlink: 'syz.4.259': attribute type 39 has an invalid length. [ 126.737897][ T7002] netlink: 'syz.0.260': attribute type 3 has an invalid length. [ 130.815350][ T7034] netlink: 'syz.4.267': attribute type 2 has an invalid length. [ 130.852678][ T7034] netlink: 'syz.4.267': attribute type 3 has an invalid length. [ 130.880827][ T7034] __nla_validate_parse: 7 callbacks suppressed [ 130.880844][ T7034] netlink: 132 bytes leftover after parsing attributes in process `syz.4.267'. [ 131.093764][ T7034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.267'. [ 132.503187][ T7010] netlink: 'syz.1.261': attribute type 29 has an invalid length. [ 132.552720][ T7025] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 132.783910][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.790319][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.483291][ T7049] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 133.729857][ T7049] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.996743][ T7049] bond0: (slave team0): Enslaving as an active interface with an up link [ 133.999546][ T7047] netlink: zone id is out of range [ 134.059256][ T7051] netlink: del zone limit has 4 unknown bytes [ 134.073278][ T7047] netlink: zone id is out of range [ 134.163703][ T7047] netlink: zone id is out of range [ 134.242499][ T7053] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 134.289285][ T7047] netlink: zone id is out of range [ 134.395169][ T7049] can: request_module (can-proto-0) failed. [ 134.407594][ T7064] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 134.417526][ T7047] netlink: zone id is out of range [ 134.459508][ T7047] netlink: zone id is out of range [ 134.516598][ T7047] netlink: zone id is out of range [ 134.571565][ T7047] netlink: zone id is out of range [ 134.604095][ T7047] netlink: zone id is out of range [ 134.650793][ T7077] netlink: 188 bytes leftover after parsing attributes in process `syz.4.278'. [ 134.817110][ T3554] wlan1: Trigger new scan to find an IBSS to join [ 134.879862][ T2952] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.099665][ T7090] netlink: 'syz.4.280': attribute type 29 has an invalid length. [ 135.187221][ T7098] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.283'. [ 135.363979][ T5887] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 136.313071][ T7139] netlink: 64 bytes leftover after parsing attributes in process `syz.2.292'. [ 136.400761][ T7141] netlink: 76 bytes leftover after parsing attributes in process `syz.4.293'. [ 136.446660][ T7141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 136.481273][ T7145] raw_sendmsg: syz.2.295 forgot to set AF_INET. Fix it! [ 136.491932][ T7145] sit0: entered allmulticast mode [ 136.518535][ T7146] netlink: 'syz.3.294': attribute type 10 has an invalid length. [ 136.533560][ T7145] sit0: entered promiscuous mode [ 136.682010][ T7148] netlink: 112 bytes leftover after parsing attributes in process `syz.2.295'. [ 136.881495][ T7150] netlink: 132 bytes leftover after parsing attributes in process `syz.4.297'. [ 136.934827][ T7146] team0: Device ipvlan1 failed to register rx_handler [ 137.027483][ T7153] netlink: 'syz.0.296': attribute type 29 has an invalid length. [ 138.483771][ T7199] sit0: entered allmulticast mode [ 138.562697][ T7199] sit0: entered promiscuous mode [ 138.828790][ T7210] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 138.855283][ T7210] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.310'. [ 138.880647][ T7206] netlink: 112 bytes leftover after parsing attributes in process `syz.0.309'. [ 138.898405][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.906920][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.920748][ T7204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.928870][ T7204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.944338][ T7204] batman_adv: batadv0: Removing interface: netdevsim0 [ 139.090788][ T7214] netlink: 'syz.2.312': attribute type 29 has an invalid length. [ 139.507620][ T7230] netlink: 'syz.0.317': attribute type 4 has an invalid length. [ 139.519038][ T7230] netlink: 116 bytes leftover after parsing attributes in process `syz.0.317'. [ 139.775821][ T49] wlan1: Trigger new scan to find an IBSS to join [ 139.969052][ T7258] sit0: entered allmulticast mode [ 140.000285][ T7258] sit0: entered promiscuous mode [ 140.170255][ T7263] netlink: 'syz.0.323': attribute type 29 has an invalid length. [ 140.209120][ T7258] netlink: 112 bytes leftover after parsing attributes in process `syz.1.324'. [ 140.500064][ T7261] syzkaller0: entered promiscuous mode [ 140.553650][ T7261] syzkaller0: entered allmulticast mode [ 140.719149][ T7285] netlink: 'syz.4.331': attribute type 27 has an invalid length. [ 140.727356][ T7285] netlink: 'syz.4.331': attribute type 4 has an invalid length. [ 140.740509][ T773] wlan1: Creating new IBSS network, BSSID 6e:fe:a8:b5:c4:6d [ 140.741390][ T7285] netlink: 152 bytes leftover after parsing attributes in process `syz.4.331'. [ 140.776105][ T7286] netlink: 'syz.4.331': attribute type 1 has an invalid length. [ 140.780502][ T7288] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 141.198908][ T7298] netlink: 'syz.3.333': attribute type 4 has an invalid length. [ 141.585928][ T7301] cgroup: fork rejected by pids controller in /syz1 [ 142.573662][ T7298] net_ratelimit: 11 callbacks suppressed [ 142.573682][ T7298] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 142.756129][ T7315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.807500][ T7316] __nla_validate_parse: 3 callbacks suppressed [ 142.807531][ T7316] netlink: 32 bytes leftover after parsing attributes in process `syz.3.338'. [ 142.950236][ T3554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.213595][ T3554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.374948][ T3554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.578283][ T7326] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 143.856006][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 144.073682][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.091457][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.117342][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.133954][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.146362][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.300935][ T7343] netlink: 'syz.4.348': attribute type 21 has an invalid length. [ 144.319468][ T7343] netlink: 'syz.4.348': attribute type 15 has an invalid length. [ 144.322655][ T3554] bridge_slave_1: left allmulticast mode [ 144.383604][ T7343] netlink: 156 bytes leftover after parsing attributes in process `syz.4.348'. [ 144.387638][ T3554] bridge_slave_1: left promiscuous mode [ 144.414696][ T3554] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.451747][ T3554] bridge_slave_0: left allmulticast mode [ 144.453188][ T7343] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.469328][ T3554] bridge_slave_0: left promiscuous mode [ 144.490672][ T3554] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.525428][ T7343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.532773][ T7343] IPv6: NLM_F_CREATE should be set when creating new route [ 144.540367][ T7343] IPv6: NLM_F_CREATE should be set when creating new route [ 144.547830][ T7343] IPv6: NLM_F_CREATE should be set when creating new route [ 144.877836][ T7368] netlink: 'syz.0.355': attribute type 39 has an invalid length. [ 144.963851][ T7373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.277057][ T3554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.289193][ T3554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.305635][ T3554] bond0 (unregistering): Released all slaves [ 145.368466][ T7382] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.357'. [ 145.550790][ T7391] netlink: 'syz.3.357': attribute type 2 has an invalid length. [ 145.699898][ T7388] netlink: 'syz.2.359': attribute type 29 has an invalid length. [ 146.105719][ T7406] netlink: 'syz.4.361': attribute type 1 has an invalid length. [ 146.113675][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.361'. [ 146.252803][ T5870] Bluetooth: hci4: command tx timeout [ 146.705890][ T3554] hsr_slave_0: left promiscuous mode [ 146.730231][ T3554] hsr_slave_1: left promiscuous mode [ 146.810298][ T3554] veth1_macvtap: left promiscuous mode [ 146.819973][ T3554] veth0_macvtap: left promiscuous mode [ 146.829352][ T3554] veth1_vlan: left promiscuous mode [ 146.839106][ T3554] veth0_vlan: left promiscuous mode [ 147.496575][ T3554] team0 (unregistering): Port device team_slave_1 removed [ 147.540631][ T3554] team0 (unregistering): Port device team_slave_0 removed [ 147.820308][ T7434] C: renamed from team_slave_0 [ 147.849247][ T7434] netlink: 'syz.0.367': attribute type 3 has an invalid length. [ 147.859588][ T7434] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 148.342696][ T5870] Bluetooth: hci4: command tx timeout [ 148.643694][ T5870] Bluetooth: hci1: Unable to find connection for big 0x00 [ 148.700208][ T7334] chnl_net:caif_netlink_parms(): no params data found [ 149.227047][ T7480] netlink: 104 bytes leftover after parsing attributes in process `syz.0.374'. [ 149.327552][ T7486] netlink: 60 bytes leftover after parsing attributes in process `syz.3.376'. [ 149.781218][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.798660][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.816272][ T7334] bridge_slave_0: entered allmulticast mode [ 149.838172][ T7334] bridge_slave_0: entered promiscuous mode [ 150.237334][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.302805][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.338756][ T7334] bridge_slave_1: entered allmulticast mode [ 150.374218][ T7334] bridge_slave_1: entered promiscuous mode [ 150.422507][ T5870] Bluetooth: hci4: command tx timeout [ 151.688679][ T7334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.723328][ T7334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.360338][ T7334] team0: Port device team_slave_0 added [ 152.381313][ T7520] netlink: 44 bytes leftover after parsing attributes in process `syz.3.382'. [ 152.387314][ T7334] team0: Port device team_slave_1 added [ 152.492701][ T5870] Bluetooth: hci4: command tx timeout [ 152.653027][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.659996][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.697046][ T7334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.716026][ T7334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.734257][ T7334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.761720][ T7334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.954431][ T7334] hsr_slave_0: entered promiscuous mode [ 152.984173][ T7334] hsr_slave_1: entered promiscuous mode [ 153.001000][ T7334] debugfs: 'hsr0' already exists in 'hsr' [ 153.020760][ T7334] Cannot create hsr debugfs directory [ 153.191043][ T7554] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 153.241718][ T7546] syzkaller0: entered promiscuous mode [ 153.249341][ T7546] syzkaller0: entered allmulticast mode [ 153.681450][ T7576] netlink: 56 bytes leftover after parsing attributes in process `syz.4.396'. [ 154.047343][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 154.318612][ T7598] netlink: 'syz.4.400': attribute type 2 has an invalid length. [ 155.155673][ T7604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.402'. [ 155.165863][ T7604] openvswitch: netlink: Flow key attr not present in new flow. [ 155.568986][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 155.607121][ T7612] netlink: 52 bytes leftover after parsing attributes in process `syz.4.404'. [ 156.847480][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 156.889231][ T7625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.407'. [ 157.136586][ T7637] netlink: 48 bytes leftover after parsing attributes in process `syz.4.410'. [ 157.558072][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 157.921921][ T7656] netlink: 2 bytes leftover after parsing attributes in process `syz.4.413'. [ 157.963849][ T7656] batadv_slave_1: entered promiscuous mode [ 158.176619][ T7662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.438729][ T7664] netlink: 'syz.0.414': attribute type 13 has an invalid length. [ 158.547539][ T7664] netlink: 'syz.0.414': attribute type 17 has an invalid length. [ 159.181223][ T7664] sit0: left promiscuous mode [ 159.307157][ T7664] sit0: left allmulticast mode [ 159.730678][ T7664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.975932][ T7334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.999707][ T7334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 160.017312][ T7688] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 160.037772][ T7334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 160.040067][ T7688] netlink: 17 bytes leftover after parsing attributes in process `syz.2.420'. [ 160.107339][ T7691] netlink: 'syz.3.422': attribute type 21 has an invalid length. [ 160.117601][ T7334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 160.527439][ T7710] openvswitch: netlink: Message has 4 unknown bytes. [ 160.534418][ T7334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.600049][ T7708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.424'. [ 160.634641][ T7334] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.843647][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 160.925279][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.932504][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.076759][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.083974][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.533005][ T7751] netlink: zone id is out of range [ 162.549105][ T7751] netlink: zone id is out of range [ 162.575646][ T7751] netlink: zone id is out of range [ 162.608335][ T7334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.843715][ T7334] veth0_vlan: entered promiscuous mode [ 162.882909][ T7334] veth1_vlan: entered promiscuous mode [ 162.897457][ T7751] netlink: set zone limit has 4 unknown bytes [ 163.006727][ T7334] veth0_macvtap: entered promiscuous mode [ 163.056495][ T7334] veth1_macvtap: entered promiscuous mode [ 163.087908][ T7774] netlink: 'syz.3.437': attribute type 29 has an invalid length. [ 163.257411][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.299491][ T7334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.434471][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.477862][ T65] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.536592][ T65] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.579311][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.858284][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.887071][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.071136][ T7852] netlink: 'syz.3.449': attribute type 2 has an invalid length. [ 168.089178][ T7852] netlink: 'syz.3.449': attribute type 8 has an invalid length. [ 168.108082][ T7852] netlink: 132 bytes leftover after parsing attributes in process `syz.3.449'. [ 169.161488][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.179289][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.558863][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.452'. [ 169.878500][ T7871] netlink: 'syz.1.340': attribute type 29 has an invalid length. [ 169.896475][ T7874] netlink: 'syz.3.454': attribute type 25 has an invalid length. [ 170.119524][ T7887] netlink: 'syz.0.456': attribute type 41 has an invalid length. [ 170.155791][ T7887] netlink: 40 bytes leftover after parsing attributes in process `syz.0.456'. [ 170.505345][ T7903] netlink: 'syz.0.462': attribute type 10 has an invalid length. [ 170.540810][ T7902] netlink: 32 bytes leftover after parsing attributes in process `syz.2.463'. [ 170.551669][ T30] audit: type=1107 audit(1758379086.919:2): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 170.631854][ T7903] team0: Port device wlan1 added [ 170.704647][ T7910] netlink: 948 bytes leftover after parsing attributes in process `syz.1.465'. [ 171.449785][ T7912] netlink: 'syz.4.464': attribute type 1 has an invalid length. [ 171.524621][ T7912] netlink: 17 bytes leftover after parsing attributes in process `syz.4.464'. [ 171.677932][ T7918] bridge_slave_1: left allmulticast mode [ 171.728226][ T7918] bridge_slave_1: left promiscuous mode [ 171.804660][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.837445][ T7918] bridge_slave_0: left allmulticast mode [ 171.844936][ T7918] bridge_slave_0: left promiscuous mode [ 171.851810][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.979145][ T7925] netlink: 188 bytes leftover after parsing attributes in process `syz.2.468'. [ 171.988609][ T7930] netlink: 188 bytes leftover after parsing attributes in process `syz.2.468'. [ 172.119754][ T7938] FAULT_INJECTION: forcing a failure. [ 172.119754][ T7938] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 172.163870][ T7938] CPU: 1 UID: 0 PID: 7938 Comm: syz.1.472 Not tainted syzkaller #0 PREEMPT(full) [ 172.163894][ T7938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 172.163905][ T7938] Call Trace: [ 172.163912][ T7938] [ 172.163921][ T7938] dump_stack_lvl+0x189/0x250 [ 172.163953][ T7938] ? __pfx____ratelimit+0x10/0x10 [ 172.163972][ T7938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.163994][ T7938] ? __pfx__printk+0x10/0x10 [ 172.164020][ T7938] ? __might_fault+0xb0/0x130 [ 172.164063][ T7938] should_fail_ex+0x414/0x560 [ 172.164095][ T7938] _copy_from_iter+0x1de/0x1790 [ 172.164122][ T7938] ? rcu_is_watching+0x15/0xb0 [ 172.164143][ T7938] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 172.164170][ T7938] ? __pfx__copy_from_iter+0x10/0x10 [ 172.164192][ T7938] ? __build_skb_around+0x257/0x3e0 [ 172.164217][ T7938] ? netlink_sendmsg+0x642/0xb30 [ 172.164236][ T7938] ? skb_put+0x11b/0x210 [ 172.164261][ T7938] netlink_sendmsg+0x6b2/0xb30 [ 172.164288][ T7938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.164311][ T7938] ? aa_sock_msg_perm+0xf1/0x1d0 [ 172.164331][ T7938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 172.164351][ T7938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.164371][ T7938] __sock_sendmsg+0x21c/0x270 [ 172.164402][ T7938] ____sys_sendmsg+0x505/0x830 [ 172.164430][ T7938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.164463][ T7938] ? import_iovec+0x74/0xa0 [ 172.164490][ T7938] ___sys_sendmsg+0x21f/0x2a0 [ 172.164516][ T7938] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.164577][ T7938] ? __fget_files+0x2a/0x420 [ 172.164593][ T7938] ? __fget_files+0x3a0/0x420 [ 172.164621][ T7938] __x64_sys_sendmsg+0x19b/0x260 [ 172.164647][ T7938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.164669][ T7938] ? perf_trace_preemptirq_template+0xa3/0x340 [ 172.164706][ T7938] ? __pfx_ksys_write+0x10/0x10 [ 172.164728][ T7938] ? rcu_is_watching+0x15/0xb0 [ 172.164752][ T7938] ? do_syscall_64+0xbe/0x3b0 [ 172.164777][ T7938] do_syscall_64+0xfa/0x3b0 [ 172.164796][ T7938] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.164814][ T7938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.164833][ T7938] ? clear_bhb_loop+0x60/0xb0 [ 172.164856][ T7938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.164874][ T7938] RIP: 0033:0x7f817358ec29 [ 172.164904][ T7938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.164920][ T7938] RSP: 002b:00007f81717f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.164940][ T7938] RAX: ffffffffffffffda RBX: 00007f81737d5fa0 RCX: 00007f817358ec29 [ 172.164954][ T7938] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000003 [ 172.164966][ T7938] RBP: 00007f81717f6090 R08: 0000000000000000 R09: 0000000000000000 [ 172.164976][ T7938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.164986][ T7938] R13: 00007f81737d6038 R14: 00007f81737d5fa0 R15: 00007ffe33a96888 [ 172.165014][ T7938] [ 172.457014][ T7931] netlink: 'syz.4.470': attribute type 29 has an invalid length. [ 172.493911][ T7939] netlink: 60 bytes leftover after parsing attributes in process `syz.0.471'. [ 172.504891][ T7941] netlink: 60 bytes leftover after parsing attributes in process `syz.0.471'. [ 172.653595][ T7946] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 172.679749][ T7947] netlink: 'syz.1.473': attribute type 1 has an invalid length. [ 172.722364][ T7947] netlink: 'syz.1.473': attribute type 2 has an invalid length. [ 172.998377][ T7962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.561290][ T7995] netlink: 'syz.2.489': attribute type 20 has an invalid length. [ 173.609007][ T7995] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.637919][ T8000] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 173.686832][ T8000] : entered promiscuous mode [ 173.835431][ T8008] __nla_validate_parse: 4 callbacks suppressed [ 173.835449][ T8008] netlink: 164 bytes leftover after parsing attributes in process `syz.4.492'. [ 173.910934][ T8008] netlink: 164 bytes leftover after parsing attributes in process `syz.4.492'. [ 174.248025][ T8031] netlink: 180 bytes leftover after parsing attributes in process `syz.0.497'. [ 174.266021][ T8033] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 174.282166][ T8031] netlink: 180 bytes leftover after parsing attributes in process `syz.0.497'. [ 174.458897][ T8042] FAULT_INJECTION: forcing a failure. [ 174.458897][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 174.499588][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.4.501 Not tainted syzkaller #0 PREEMPT(full) [ 174.499613][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 174.499624][ T8042] Call Trace: [ 174.499632][ T8042] [ 174.499641][ T8042] dump_stack_lvl+0x189/0x250 [ 174.499682][ T8042] ? __pfx____ratelimit+0x10/0x10 [ 174.499702][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.499725][ T8042] ? __pfx__printk+0x10/0x10 [ 174.499754][ T8042] ? __pfx___might_resched+0x10/0x10 [ 174.499783][ T8042] ? fs_reclaim_acquire+0x7d/0x100 [ 174.499807][ T8042] should_fail_ex+0x414/0x560 [ 174.499841][ T8042] should_failslab+0xa8/0x100 [ 174.499871][ T8042] __kmalloc_noprof+0xcb/0x4f0 [ 174.499897][ T8042] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 174.499930][ T8042] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 174.499966][ T8042] genl_family_rcv_msg_doit+0xb8/0x300 [ 174.499999][ T8042] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 174.500035][ T8042] ? apparmor_capable+0x137/0x1b0 [ 174.500061][ T8042] ? bpf_lsm_capable+0x9/0x20 [ 174.500087][ T8042] ? security_capable+0x7e/0x2e0 [ 174.500123][ T8042] genl_rcv_msg+0x60e/0x790 [ 174.500156][ T8042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.500180][ T8042] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 174.500210][ T8042] ? __asan_memcpy+0x40/0x70 [ 174.500231][ T8042] ? __pfx_ref_tracker_free+0x10/0x10 [ 174.500259][ T8042] netlink_rcv_skb+0x205/0x470 [ 174.500276][ T8042] ? __lock_acquire+0xab9/0xd20 [ 174.500303][ T8042] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.500330][ T8042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.500371][ T8042] ? down_read+0x1ad/0x2e0 [ 174.500397][ T8042] genl_rcv+0x28/0x40 [ 174.500420][ T8042] netlink_unicast+0x82c/0x9e0 [ 174.500459][ T8042] ? __pfx_netlink_unicast+0x10/0x10 [ 174.500490][ T8042] ? netlink_sendmsg+0x642/0xb30 [ 174.500508][ T8042] ? skb_put+0x11b/0x210 [ 174.500534][ T8042] netlink_sendmsg+0x805/0xb30 [ 174.500566][ T8042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.500591][ T8042] ? aa_sock_msg_perm+0xf1/0x1d0 [ 174.500616][ T8042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.500637][ T8042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.500659][ T8042] __sock_sendmsg+0x21c/0x270 [ 174.500691][ T8042] ____sys_sendmsg+0x505/0x830 [ 174.500722][ T8042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.500757][ T8042] ? import_iovec+0x74/0xa0 [ 174.500790][ T8042] ___sys_sendmsg+0x21f/0x2a0 [ 174.500817][ T8042] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.500882][ T8042] ? __fget_files+0x2a/0x420 [ 174.500899][ T8042] ? __fget_files+0x3a0/0x420 [ 174.500928][ T8042] __x64_sys_sendmsg+0x19b/0x260 [ 174.500956][ T8042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.500991][ T8042] ? __pfx_ksys_write+0x10/0x10 [ 174.501014][ T8042] ? rcu_is_watching+0x15/0xb0 [ 174.501040][ T8042] ? do_syscall_64+0xbe/0x3b0 [ 174.501065][ T8042] do_syscall_64+0xfa/0x3b0 [ 174.501084][ T8042] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.501104][ T8042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.501123][ T8042] ? clear_bhb_loop+0x60/0xb0 [ 174.501147][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.501165][ T8042] RIP: 0033:0x7f26dd18ec29 [ 174.501183][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.501199][ T8042] RSP: 002b:00007f26db3f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.501219][ T8042] RAX: ffffffffffffffda RBX: 00007f26dd3d5fa0 RCX: 00007f26dd18ec29 [ 174.501234][ T8042] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000003 [ 174.501246][ T8042] RBP: 00007f26db3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.501258][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.501270][ T8042] R13: 00007f26dd3d6038 R14: 00007f26dd3d5fa0 R15: 00007ffed794e5e8 [ 174.501302][ T8042] [ 174.520721][ T8044] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.502'. [ 174.596949][ T8047] netlink: 72 bytes leftover after parsing attributes in process `syz.2.503'. [ 174.695490][ T8045] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.502'. [ 174.717776][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.1.504'. [ 174.885881][ T8056] netlink: 'syz.4.505': attribute type 29 has an invalid length. [ 174.981427][ T8053] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.502'. [ 176.248892][ T8088] netlink: 'syz.1.512': attribute type 21 has an invalid length. [ 176.294825][ T8088] netlink: 128 bytes leftover after parsing attributes in process `syz.1.512'. [ 176.433055][ T8088] netlink: 'syz.1.512': attribute type 5 has an invalid length. [ 176.482484][ T8088] netlink: 'syz.1.512': attribute type 6 has an invalid length. [ 176.895911][ T8104] FAULT_INJECTION: forcing a failure. [ 176.895911][ T8104] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 176.909515][ T8104] CPU: 0 UID: 0 PID: 8104 Comm: syz.3.515 Not tainted syzkaller #0 PREEMPT(full) [ 176.909539][ T8104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 176.909551][ T8104] Call Trace: [ 176.909559][ T8104] [ 176.909567][ T8104] dump_stack_lvl+0x189/0x250 [ 176.909595][ T8104] ? __pfx____ratelimit+0x10/0x10 [ 176.909617][ T8104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.909640][ T8104] ? __pfx__printk+0x10/0x10 [ 176.909670][ T8104] ? fs_reclaim_acquire+0x7d/0x100 [ 176.909701][ T8104] should_fail_ex+0x414/0x560 [ 176.909736][ T8104] prepare_alloc_pages+0x213/0x610 [ 176.909771][ T8104] __alloc_frozen_pages_noprof+0x123/0x370 [ 176.909798][ T8104] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 176.909815][ T8104] ? perf_trace_lock+0xec/0x3b0 [ 176.909840][ T8104] ? perf_trace_lock+0xec/0x3b0 [ 176.909876][ T8104] alloc_pages_mpol+0x232/0x4a0 [ 176.909910][ T8104] ___kmalloc_large_node+0x5f/0x1b0 [ 176.909934][ T8104] ? perf_trace_lock+0xec/0x3b0 [ 176.909956][ T8104] __kmalloc_large_node_noprof+0x18/0x90 [ 176.909986][ T8104] __kmalloc_noprof+0x36f/0x4f0 [ 176.910010][ T8104] ? wiphy_new_nm+0x625/0x19e0 [ 176.910033][ T8104] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 176.910058][ T8104] wiphy_new_nm+0x625/0x19e0 [ 176.910074][ T8104] ? ieee80211_alloc_hw_nm+0x8ea/0x1f20 [ 176.910102][ T8104] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 176.910126][ T8104] ieee80211_alloc_hw_nm+0x3f3/0x1f20 [ 176.910151][ T8104] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 176.910187][ T8104] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 176.910224][ T8104] ? __pfx_stack_trace_save+0x10/0x10 [ 176.910251][ T8104] ? stack_depot_save_flags+0x40/0x860 [ 176.910277][ T8104] ? netlink_deliver_tap+0x19c/0x1b0 [ 176.910295][ T8104] ? netlink_unicast+0x7f1/0x9e0 [ 176.910320][ T8104] ? netlink_sendmsg+0x805/0xb30 [ 176.910339][ T8104] ? __sock_sendmsg+0x21c/0x270 [ 176.910381][ T8104] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 176.910406][ T8104] ? __nla_validate_parse+0x2400/0x2d40 [ 176.910424][ T8104] ? __sock_sendmsg+0x21c/0x270 [ 176.910449][ T8104] ? ____sys_sendmsg+0x505/0x830 [ 176.910469][ T8104] ? ___sys_sendmsg+0x21f/0x2a0 [ 176.910489][ T8104] ? __x64_sys_sendmsg+0x19b/0x260 [ 176.910526][ T8104] hwsim_new_radio_nl+0xea4/0x1b10 [ 176.910558][ T8104] ? __pfx___nla_validate_parse+0x10/0x10 [ 176.910598][ T8104] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 176.910643][ T8104] ? __nla_parse+0x40/0x60 [ 176.910668][ T8104] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 176.910703][ T8104] genl_family_rcv_msg_doit+0x215/0x300 [ 176.910737][ T8104] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 176.910785][ T8104] ? bpf_lsm_capable+0x9/0x20 [ 176.910809][ T8104] ? security_capable+0x7e/0x2e0 [ 176.910844][ T8104] genl_rcv_msg+0x60e/0x790 [ 176.910879][ T8104] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.910904][ T8104] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 176.910933][ T8104] ? __asan_memcpy+0x40/0x70 [ 176.910955][ T8104] ? __pfx_ref_tracker_free+0x10/0x10 [ 176.910984][ T8104] netlink_rcv_skb+0x205/0x470 [ 176.911001][ T8104] ? __lock_acquire+0xab9/0xd20 [ 176.911030][ T8104] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.911058][ T8104] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.911104][ T8104] ? down_read+0x1ad/0x2e0 [ 176.911130][ T8104] genl_rcv+0x28/0x40 [ 176.911153][ T8104] netlink_unicast+0x82c/0x9e0 [ 176.911194][ T8104] ? __pfx_netlink_unicast+0x10/0x10 [ 176.911226][ T8104] ? netlink_sendmsg+0x642/0xb30 [ 176.911244][ T8104] ? skb_put+0x11b/0x210 [ 176.911271][ T8104] netlink_sendmsg+0x805/0xb30 [ 176.911304][ T8104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.911330][ T8104] ? aa_sock_msg_perm+0xf1/0x1d0 [ 176.911352][ T8104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.911374][ T8104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.911397][ T8104] __sock_sendmsg+0x21c/0x270 [ 176.911431][ T8104] ____sys_sendmsg+0x505/0x830 [ 176.911463][ T8104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.911501][ T8104] ? import_iovec+0x74/0xa0 [ 176.911532][ T8104] ___sys_sendmsg+0x21f/0x2a0 [ 176.911560][ T8104] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.911615][ T8104] ? __fget_files+0x2a/0x420 [ 176.911651][ T8104] ? __fget_files+0x2a/0x420 [ 176.911667][ T8104] ? __fget_files+0x3a0/0x420 [ 176.911700][ T8104] __x64_sys_sendmsg+0x19b/0x260 [ 176.911729][ T8104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.911773][ T8104] ? __pfx_ksys_write+0x10/0x10 [ 176.911796][ T8104] ? rcu_is_watching+0x15/0xb0 [ 176.911824][ T8104] ? do_syscall_64+0xbe/0x3b0 [ 176.911851][ T8104] do_syscall_64+0xfa/0x3b0 [ 176.911870][ T8104] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.911889][ T8104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.911908][ T8104] ? clear_bhb_loop+0x60/0xb0 [ 176.911933][ T8104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.911952][ T8104] RIP: 0033:0x7feb8a38ec29 [ 176.911969][ T8104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.911985][ T8104] RSP: 002b:00007feb8b146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.912006][ T8104] RAX: ffffffffffffffda RBX: 00007feb8a5d5fa0 RCX: 00007feb8a38ec29 [ 176.912020][ T8104] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000003 [ 176.912033][ T8104] RBP: 00007feb8b146090 R08: 0000000000000000 R09: 0000000000000000 [ 176.912044][ T8104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.912055][ T8104] R13: 00007feb8a5d6038 R14: 00007feb8a5d5fa0 R15: 00007fff7e4d90c8 [ 176.912092][ T8104] [ 178.365776][ T8129] netlink: 'syz.2.521': attribute type 29 has an invalid length. [ 179.343941][ T8157] FAULT_INJECTION: forcing a failure. [ 179.343941][ T8157] name failslab, interval 1, probability 0, space 0, times 0 [ 179.453138][ T8157] CPU: 0 UID: 0 PID: 8157 Comm: syz.3.528 Not tainted syzkaller #0 PREEMPT(full) [ 179.453165][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 179.453176][ T8157] Call Trace: [ 179.453184][ T8157] [ 179.453198][ T8157] dump_stack_lvl+0x189/0x250 [ 179.453227][ T8157] ? __pfx____ratelimit+0x10/0x10 [ 179.453246][ T8157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.453269][ T8157] ? __pfx__printk+0x10/0x10 [ 179.453301][ T8157] ? __pfx___might_resched+0x10/0x10 [ 179.453317][ T8157] ? fs_reclaim_acquire+0x7d/0x100 [ 179.453341][ T8157] should_fail_ex+0x414/0x560 [ 179.453374][ T8157] should_failslab+0xa8/0x100 [ 179.453403][ T8157] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 179.453430][ T8157] ? kobject_set_name_vargs+0x61/0x110 [ 179.453457][ T8157] kvasprintf+0xdc/0x190 [ 179.453485][ T8157] ? __pfx_kvasprintf+0x10/0x10 [ 179.453511][ T8157] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 179.453536][ T8157] ? kvasprintf_const+0xe1/0x240 [ 179.453564][ T8157] kobject_set_name_vargs+0x61/0x110 [ 179.453588][ T8157] dev_set_name+0xd4/0x120 [ 179.453616][ T8157] ? __kasan_kmalloc_large+0x85/0xa0 [ 179.453645][ T8157] ? __pfx_dev_set_name+0x10/0x10 [ 179.453675][ T8157] ? rcu_is_watching+0x15/0xb0 [ 179.453696][ T8157] ? __kmalloc_noprof+0x29b/0x4f0 [ 179.453720][ T8157] ? wiphy_new_nm+0x625/0x19e0 [ 179.453742][ T8157] wiphy_new_nm+0x7a1/0x19e0 [ 179.453758][ T8157] ? ieee80211_alloc_hw_nm+0x8ea/0x1f20 [ 179.453785][ T8157] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 179.453808][ T8157] ieee80211_alloc_hw_nm+0x3f3/0x1f20 [ 179.453833][ T8157] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 179.453865][ T8157] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 179.453900][ T8157] ? __pfx_stack_trace_save+0x10/0x10 [ 179.453925][ T8157] ? stack_depot_save_flags+0x40/0x860 [ 179.453969][ T8157] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 179.453993][ T8157] ? __nla_validate_parse+0x2400/0x2d40 [ 179.454011][ T8157] ? __sock_sendmsg+0x21c/0x270 [ 179.454036][ T8157] ? ____sys_sendmsg+0x505/0x830 [ 179.454055][ T8157] ? ___sys_sendmsg+0x21f/0x2a0 [ 179.454075][ T8157] ? __x64_sys_sendmsg+0x19b/0x260 [ 179.454109][ T8157] hwsim_new_radio_nl+0xea4/0x1b10 [ 179.454139][ T8157] ? __pfx___nla_validate_parse+0x10/0x10 [ 179.454176][ T8157] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.454222][ T8157] ? __nla_parse+0x40/0x60 [ 179.454245][ T8157] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 179.454280][ T8157] genl_family_rcv_msg_doit+0x215/0x300 [ 179.454313][ T8157] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 179.454353][ T8157] ? bpf_lsm_capable+0x9/0x20 [ 179.454377][ T8157] ? security_capable+0x7e/0x2e0 [ 179.454413][ T8157] genl_rcv_msg+0x60e/0x790 [ 179.454445][ T8157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.454469][ T8157] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 179.454498][ T8157] ? __asan_memcpy+0x40/0x70 [ 179.454518][ T8157] ? __pfx_ref_tracker_free+0x10/0x10 [ 179.454544][ T8157] netlink_rcv_skb+0x205/0x470 [ 179.454562][ T8157] ? __lock_acquire+0xab9/0xd20 [ 179.454590][ T8157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 179.454615][ T8157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.454656][ T8157] ? down_read+0x1ad/0x2e0 [ 179.454681][ T8157] genl_rcv+0x28/0x40 [ 179.454703][ T8157] netlink_unicast+0x82c/0x9e0 [ 179.454741][ T8157] ? __pfx_netlink_unicast+0x10/0x10 [ 179.454770][ T8157] ? netlink_sendmsg+0x642/0xb30 [ 179.454788][ T8157] ? skb_put+0x11b/0x210 [ 179.454813][ T8157] netlink_sendmsg+0x805/0xb30 [ 179.454844][ T8157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.454868][ T8157] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.454889][ T8157] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.454909][ T8157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.454929][ T8157] __sock_sendmsg+0x21c/0x270 [ 179.454960][ T8157] ____sys_sendmsg+0x505/0x830 [ 179.454990][ T8157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.455023][ T8157] ? import_iovec+0x74/0xa0 [ 179.455051][ T8157] ___sys_sendmsg+0x21f/0x2a0 [ 179.455077][ T8157] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.455140][ T8157] ? __fget_files+0x2a/0x420 [ 179.455157][ T8157] ? __fget_files+0x3a0/0x420 [ 179.455185][ T8157] __x64_sys_sendmsg+0x19b/0x260 [ 179.455212][ T8157] ? perf_trace_run_bpf_submit+0x100/0x170 [ 179.455235][ T8157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.455269][ T8157] ? __pfx_ksys_write+0x10/0x10 [ 179.455291][ T8157] ? rcu_is_watching+0x15/0xb0 [ 179.455315][ T8157] ? do_syscall_64+0xbe/0x3b0 [ 179.455340][ T8157] do_syscall_64+0xfa/0x3b0 [ 179.455359][ T8157] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.455376][ T8157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.455395][ T8157] ? clear_bhb_loop+0x60/0xb0 [ 179.455418][ T8157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.455436][ T8157] RIP: 0033:0x7feb8a38ec29 [ 179.455453][ T8157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.455469][ T8157] RSP: 002b:00007feb8b146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.455488][ T8157] RAX: ffffffffffffffda RBX: 00007feb8a5d5fa0 RCX: 00007feb8a38ec29 [ 179.455502][ T8157] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000003 [ 179.455513][ T8157] RBP: 00007feb8b146090 R08: 0000000000000000 R09: 0000000000000000 [ 179.455524][ T8157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.455535][ T8157] R13: 00007feb8a5d6038 R14: 00007feb8a5d5fa0 R15: 00007fff7e4d90c8 [ 179.455566][ T8157] [ 180.336837][ T8177] netlink: 'syz.2.533': attribute type 2 has an invalid length. [ 180.344919][ T8177] __nla_validate_parse: 2 callbacks suppressed [ 180.344934][ T8177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.533'. [ 180.425485][ T8189] netlink: 40 bytes leftover after parsing attributes in process `syz.3.536'. [ 180.501394][ T8188] netlink: 'syz.1.537': attribute type 29 has an invalid length. [ 180.674953][ T8195] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.538'. [ 180.748039][ T8195] sock: sock_set_timeout: `syz.4.538' (pid 8195) tries to set negative timeout [ 180.880248][ T8207] FAULT_INJECTION: forcing a failure. [ 180.880248][ T8207] name failslab, interval 1, probability 0, space 0, times 0 [ 180.967098][ T8207] CPU: 0 UID: 0 PID: 8207 Comm: syz.1.542 Not tainted syzkaller #0 PREEMPT(full) [ 180.967125][ T8207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 180.967136][ T8207] Call Trace: [ 180.967147][ T8207] [ 180.967159][ T8207] dump_stack_lvl+0x189/0x250 [ 180.967193][ T8207] ? __pfx____ratelimit+0x10/0x10 [ 180.967223][ T8207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.967254][ T8207] ? __pfx__printk+0x10/0x10 [ 180.967325][ T8207] ? __pfx___might_resched+0x10/0x10 [ 180.967371][ T8207] should_fail_ex+0x414/0x560 [ 180.967434][ T8207] should_failslab+0xa8/0x100 [ 180.967476][ T8207] __kmalloc_noprof+0xcb/0x4f0 [ 180.967502][ T8207] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 180.967530][ T8207] ? rfkill_alloc+0xad/0x2f0 [ 180.967574][ T8207] rfkill_alloc+0xad/0x2f0 [ 180.967626][ T8207] wiphy_new_nm+0x11a3/0x19e0 [ 180.967668][ T8207] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 180.967692][ T8207] ieee80211_alloc_hw_nm+0x3f3/0x1f20 [ 180.967725][ T8207] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 180.967791][ T8207] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 180.967860][ T8207] ? __pfx_stack_trace_save+0x10/0x10 [ 180.967902][ T8207] ? stack_depot_save_flags+0x40/0x860 [ 180.968007][ T8207] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 180.968032][ T8207] ? __nla_validate_parse+0x2400/0x2d40 [ 180.968051][ T8207] ? __sock_sendmsg+0x21c/0x270 [ 180.968075][ T8207] ? ____sys_sendmsg+0x505/0x830 [ 180.968096][ T8207] ? ___sys_sendmsg+0x21f/0x2a0 [ 180.968116][ T8207] ? __x64_sys_sendmsg+0x19b/0x260 [ 180.968192][ T8207] hwsim_new_radio_nl+0xea4/0x1b10 [ 180.968243][ T8207] ? __pfx___nla_validate_parse+0x10/0x10 [ 180.968334][ T8207] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 180.968427][ T8207] ? __nla_parse+0x40/0x60 [ 180.968475][ T8207] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 180.968542][ T8207] genl_family_rcv_msg_doit+0x215/0x300 [ 180.968607][ T8207] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 180.968700][ T8207] ? bpf_lsm_capable+0x9/0x20 [ 180.968725][ T8207] ? security_capable+0x7e/0x2e0 [ 180.968792][ T8207] genl_rcv_msg+0x60e/0x790 [ 180.968859][ T8207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.968890][ T8207] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 180.968932][ T8207] ? __asan_memcpy+0x40/0x70 [ 180.968960][ T8207] ? __pfx_ref_tracker_free+0x10/0x10 [ 180.969022][ T8207] netlink_rcv_skb+0x205/0x470 [ 180.969042][ T8207] ? __lock_acquire+0xab9/0xd20 [ 180.969078][ T8207] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.969120][ T8207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.969240][ T8207] ? down_read+0x1ad/0x2e0 [ 180.969290][ T8207] genl_rcv+0x28/0x40 [ 180.969318][ T8207] netlink_unicast+0x82c/0x9e0 [ 180.969394][ T8207] ? __pfx_netlink_unicast+0x10/0x10 [ 180.969444][ T8207] ? netlink_sendmsg+0x642/0xb30 [ 180.969463][ T8207] ? skb_put+0x11b/0x210 [ 180.969511][ T8207] netlink_sendmsg+0x805/0xb30 [ 180.969582][ T8207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.969626][ T8207] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.969663][ T8207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.969687][ T8207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.969721][ T8207] __sock_sendmsg+0x21c/0x270 [ 180.969775][ T8207] ____sys_sendmsg+0x505/0x830 [ 180.969836][ T8207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.969914][ T8207] ? import_iovec+0x74/0xa0 [ 180.969967][ T8207] ___sys_sendmsg+0x21f/0x2a0 [ 180.970013][ T8207] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.970219][ T8207] ? __fget_files+0x2a/0x420 [ 180.970240][ T8207] ? __fget_files+0x3a0/0x420 [ 180.970321][ T8207] __x64_sys_sendmsg+0x19b/0x260 [ 180.970368][ T8207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.970447][ T8207] ? __pfx_ksys_write+0x10/0x10 [ 180.970470][ T8207] ? rcu_is_watching+0x15/0xb0 [ 180.970522][ T8207] ? do_syscall_64+0xbe/0x3b0 [ 180.970568][ T8207] do_syscall_64+0xfa/0x3b0 [ 180.970588][ T8207] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.970614][ T8207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.970636][ T8207] ? clear_bhb_loop+0x60/0xb0 [ 180.970678][ T8207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.970697][ T8207] RIP: 0033:0x7f817358ec29 [ 180.970721][ T8207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.970737][ T8207] RSP: 002b:00007f81717f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.970756][ T8207] RAX: ffffffffffffffda RBX: 00007f81737d5fa0 RCX: 00007f817358ec29 [ 180.970770][ T8207] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000003 [ 180.970781][ T8207] RBP: 00007f81717f6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.970792][ T8207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.970803][ T8207] R13: 00007f81737d6038 R14: 00007f81737d5fa0 R15: 00007ffe33a96888 [ 180.970898][ T8207] [ 182.001153][ T8217] netlink: 64 bytes leftover after parsing attributes in process `syz.4.545'. [ 182.632949][ T8230] netlink: 'syz.3.549': attribute type 4 has an invalid length. [ 182.687647][ T8230] netlink: 152 bytes leftover after parsing attributes in process `syz.3.549'. [ 182.850036][ T8230] .`: renamed from bond0 (while UP) [ 183.332737][ T8246] netlink: 'syz.1.553': attribute type 29 has an invalid length. [ 183.899683][ T8258] FAULT_INJECTION: forcing a failure. [ 183.899683][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 183.959257][ T8258] CPU: 0 UID: 0 PID: 8258 Comm: syz.3.557 Not tainted syzkaller #0 PREEMPT(full) [ 183.959283][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.959294][ T8258] Call Trace: [ 183.959302][ T8258] [ 183.959310][ T8258] dump_stack_lvl+0x189/0x250 [ 183.959338][ T8258] ? __pfx____ratelimit+0x10/0x10 [ 183.959357][ T8258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.959380][ T8258] ? __pfx__printk+0x10/0x10 [ 183.959412][ T8258] ? __pfx___might_resched+0x10/0x10 [ 183.959428][ T8258] ? fs_reclaim_acquire+0x7d/0x100 [ 183.959452][ T8258] should_fail_ex+0x414/0x560 [ 183.959484][ T8258] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 183.959504][ T8258] should_failslab+0xa8/0x100 [ 183.959534][ T8258] __kvmalloc_node_noprof+0x161/0x5f0 [ 183.959562][ T8258] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 183.959589][ T8258] rhashtable_init_noprof+0x4ee/0xbb0 [ 183.959619][ T8258] rhltable_init_noprof+0x1e/0x60 [ 183.959642][ T8258] sta_info_init+0x28/0x130 [ 183.959670][ T8258] ieee80211_alloc_hw_nm+0x7f0/0x1f20 [ 183.959697][ T8258] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 183.959730][ T8258] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 183.959765][ T8258] ? __pfx_stack_trace_save+0x10/0x10 [ 183.959791][ T8258] ? stack_depot_save_flags+0x40/0x860 [ 183.959817][ T8258] ? netlink_deliver_tap+0x19c/0x1b0 [ 183.959835][ T8258] ? netlink_unicast+0x7f1/0x9e0 [ 183.959860][ T8258] ? netlink_sendmsg+0x805/0xb30 [ 183.959878][ T8258] ? __sock_sendmsg+0x21c/0x270 [ 183.959916][ T8258] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 183.959941][ T8258] ? __nla_validate_parse+0x2400/0x2d40 [ 183.959959][ T8258] ? __sock_sendmsg+0x21c/0x270 [ 183.959983][ T8258] ? ____sys_sendmsg+0x505/0x830 [ 183.960003][ T8258] ? ___sys_sendmsg+0x21f/0x2a0 [ 183.960023][ T8258] ? __x64_sys_sendmsg+0x19b/0x260 [ 183.960057][ T8258] hwsim_new_radio_nl+0xea4/0x1b10 [ 183.960087][ T8258] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.960122][ T8258] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.960163][ T8258] ? __nla_parse+0x40/0x60 [ 183.960186][ T8258] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 183.960221][ T8258] genl_family_rcv_msg_doit+0x215/0x300 [ 183.960254][ T8258] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.960297][ T8258] ? bpf_lsm_capable+0x9/0x20 [ 183.960322][ T8258] ? security_capable+0x7e/0x2e0 [ 183.960358][ T8258] genl_rcv_msg+0x60e/0x790 [ 183.960390][ T8258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.960414][ T8258] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.960443][ T8258] ? __asan_memcpy+0x40/0x70 [ 183.960463][ T8258] ? __pfx_ref_tracker_free+0x10/0x10 [ 183.960490][ T8258] netlink_rcv_skb+0x205/0x470 [ 183.960508][ T8258] ? __lock_acquire+0xab9/0xd20 [ 183.960535][ T8258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.960561][ T8258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.960601][ T8258] ? down_read+0x1ad/0x2e0 [ 183.960626][ T8258] genl_rcv+0x28/0x40 [ 183.960648][ T8258] netlink_unicast+0x82c/0x9e0 [ 183.960691][ T8258] ? __pfx_netlink_unicast+0x10/0x10 [ 183.960722][ T8258] ? netlink_sendmsg+0x642/0xb30 [ 183.960741][ T8258] ? skb_put+0x11b/0x210 [ 183.960766][ T8258] netlink_sendmsg+0x805/0xb30 [ 183.960797][ T8258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.960821][ T8258] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.960843][ T8258] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.960863][ T8258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.960885][ T8258] __sock_sendmsg+0x21c/0x270 [ 183.960916][ T8258] ____sys_sendmsg+0x505/0x830 [ 183.960946][ T8258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.960980][ T8258] ? import_iovec+0x74/0xa0 [ 183.961009][ T8258] ___sys_sendmsg+0x21f/0x2a0 [ 183.961036][ T8258] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.961099][ T8258] ? __fget_files+0x2a/0x420 [ 183.961116][ T8258] ? __fget_files+0x3a0/0x420 [ 183.961151][ T8258] __x64_sys_sendmsg+0x19b/0x260 [ 183.961179][ T8258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.961213][ T8258] ? __pfx_ksys_write+0x10/0x10 [ 183.961236][ T8258] ? rcu_is_watching+0x15/0xb0 [ 183.961261][ T8258] ? do_syscall_64+0xbe/0x3b0 [ 183.961286][ T8258] do_syscall_64+0xfa/0x3b0 [ 183.961305][ T8258] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.961324][ T8258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.961343][ T8258] ? clear_bhb_loop+0x60/0xb0 [ 183.961366][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.961385][ T8258] RIP: 0033:0x7feb8a38ec29 [ 183.961402][ T8258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.961419][ T8258] RSP: 002b:00007feb8b146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.961439][ T8258] RAX: ffffffffffffffda RBX: 00007feb8a5d5fa0 RCX: 00007feb8a38ec29 [ 183.961454][ T8258] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000003 [ 183.961466][ T8258] RBP: 00007feb8b146090 R08: 0000000000000000 R09: 0000000000000000 [ 183.961478][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.961490][ T8258] R13: 00007feb8a5d6038 R14: 00007feb8a5d5fa0 R15: 00007fff7e4d90c8 [ 183.961522][ T8258] [ 185.973675][ T8295] netlink: 'syz.2.565': attribute type 29 has an invalid length. [ 186.307771][ T8304] delete_channel: no stack [ 186.468531][ T8312] FAULT_INJECTION: forcing a failure. [ 186.468531][ T8312] name failslab, interval 1, probability 0, space 0, times 0 [ 186.512651][ T8312] CPU: 1 UID: 0 PID: 8312 Comm: syz.3.569 Not tainted syzkaller #0 PREEMPT(full) [ 186.512677][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.512689][ T8312] Call Trace: [ 186.512696][ T8312] [ 186.512704][ T8312] dump_stack_lvl+0x189/0x250 [ 186.512733][ T8312] ? __pfx____ratelimit+0x10/0x10 [ 186.512752][ T8312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.512774][ T8312] ? __pfx__printk+0x10/0x10 [ 186.512804][ T8312] ? __pfx___might_resched+0x10/0x10 [ 186.512819][ T8312] ? fs_reclaim_acquire+0x7d/0x100 [ 186.512839][ T8312] should_fail_ex+0x414/0x560 [ 186.512867][ T8312] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 186.512885][ T8312] should_failslab+0xa8/0x100 [ 186.512910][ T8312] __kvmalloc_node_noprof+0x161/0x5f0 [ 186.512933][ T8312] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 186.512957][ T8312] rhashtable_init_noprof+0x4ee/0xbb0 [ 186.512982][ T8312] rhltable_init_noprof+0x1e/0x60 [ 186.513003][ T8312] sta_info_init+0x54/0x130 [ 186.513021][ T8312] ieee80211_alloc_hw_nm+0x7f0/0x1f20 [ 186.513044][ T8312] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 186.513072][ T8312] mac80211_hwsim_new_radio+0x1ee/0x5340 [ 186.513103][ T8312] ? __pfx_stack_trace_save+0x10/0x10 [ 186.513124][ T8312] ? stack_depot_save_flags+0x40/0x860 [ 186.513147][ T8312] ? netlink_deliver_tap+0x19c/0x1b0 [ 186.513163][ T8312] ? netlink_unicast+0x7f1/0x9e0 [ 186.513185][ T8312] ? netlink_sendmsg+0x805/0xb30 [ 186.513200][ T8312] ? __sock_sendmsg+0x21c/0x270 [ 186.513234][ T8312] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 186.513255][ T8312] ? __nla_validate_parse+0x2400/0x2d40 [ 186.513271][ T8312] ? __sock_sendmsg+0x21c/0x270 [ 186.513292][ T8312] ? ____sys_sendmsg+0x505/0x830 [ 186.513310][ T8312] ? ___sys_sendmsg+0x21f/0x2a0 [ 186.513327][ T8312] ? __x64_sys_sendmsg+0x19b/0x260 [ 186.513356][ T8312] hwsim_new_radio_nl+0xea4/0x1b10 [ 186.513383][ T8312] ? __pfx___nla_validate_parse+0x10/0x10 [ 186.513412][ T8312] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 186.513447][ T8312] ? __nla_parse+0x40/0x60 [ 186.513466][ T8312] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 186.513496][ T8312] genl_family_rcv_msg_doit+0x215/0x300 [ 186.513525][ T8312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.513559][ T8312] ? bpf_lsm_capable+0x9/0x20 [ 186.513579][ T8312] ? security_capable+0x7e/0x2e0 [ 186.513610][ T8312] genl_rcv_msg+0x60e/0x790 [ 186.513643][ T8312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.513663][ T8312] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 186.513688][ T8312] ? __asan_memcpy+0x40/0x70 [ 186.513706][ T8312] ? __pfx_ref_tracker_free+0x10/0x10 [ 186.513728][ T8312] netlink_rcv_skb+0x205/0x470 [ 186.513743][ T8312] ? __lock_acquire+0xab9/0xd20 [ 186.513767][ T8312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.513790][ T8312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.513823][ T8312] ? down_read+0x1ad/0x2e0 [ 186.513844][ T8312] genl_rcv+0x28/0x40 [ 186.513864][ T8312] netlink_unicast+0x82c/0x9e0 [ 186.513896][ T8312] ? __pfx_netlink_unicast+0x10/0x10 [ 186.513923][ T8312] ? netlink_sendmsg+0x642/0xb30 [ 186.513938][ T8312] ? skb_put+0x11b/0x210 [ 186.513960][ T8312] netlink_sendmsg+0x805/0xb30 [ 186.513986][ T8312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.514006][ T8312] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.514024][ T8312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.514042][ T8312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.514060][ T8312] __sock_sendmsg+0x21c/0x270 [ 186.514087][ T8312] ____sys_sendmsg+0x505/0x830 [ 186.514112][ T8312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.514141][ T8312] ? import_iovec+0x74/0xa0 [ 186.514165][ T8312] ___sys_sendmsg+0x21f/0x2a0 [ 186.514188][ T8312] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.514240][ T8312] ? __fget_files+0x2a/0x420 [ 186.514254][ T8312] ? __fget_files+0x3a0/0x420 [ 186.514278][ T8312] __x64_sys_sendmsg+0x19b/0x260 [ 186.514300][ T8312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.514330][ T8312] ? __pfx_ksys_write+0x10/0x10 [ 186.514349][ T8312] ? rcu_is_watching+0x15/0xb0 [ 186.514370][ T8312] ? do_syscall_64+0xbe/0x3b0 [ 186.514392][ T8312] do_syscall_64+0xfa/0x3b0 [ 186.514408][ T8312] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.514424][ T8312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.514440][ T8312] ? clear_bhb_loop+0x60/0xb0 [ 186.514460][ T8312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.514476][ T8312] RIP: 0033:0x7feb8a38ec29 [ 186.514491][ T8312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.514505][ T8312] RSP: 002b:00007feb8b146038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.514523][ T8312] RAX: ffffffffffffffda RBX: 00007feb8a5d5fa0 RCX: 00007feb8a38ec29 [ 186.514535][ T8312] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000003 [ 186.514546][ T8312] RBP: 00007feb8b146090 R08: 0000000000000000 R09: 0000000000000000 [ 186.514557][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.514566][ T8312] R13: 00007feb8a5d6038 R14: 00007feb8a5d5fa0 R15: 00007fff7e4d90c8 [ 186.514594][ T8312] [ 187.395194][ T8327] netlink: 'syz.2.574': attribute type 4 has an invalid length. [ 187.679782][ T8343] netlink: 'syz.1.577': attribute type 40 has an invalid length. [ 187.755878][ T8343] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.787425][ T8340] netlink: 16 bytes leftover after parsing attributes in process `syz.4.576'. [ 187.950706][ T8352] netlink: 'syz.2.578': attribute type 2 has an invalid length. [ 187.967540][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.576'. [ 187.982663][ T8352] netlink: 'syz.2.578': attribute type 2 has an invalid length. [ 187.994044][ T8354] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 188.012522][ T8340] netlink: 28 bytes leftover after parsing attributes in process `syz.4.576'. [ 188.032441][ T8354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.579'. [ 188.057447][ T8354] batman_adv: batadv0: Adding interface: virt_wifi0 [ 188.084839][ T8354] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.131724][ T8354] batman_adv: batadv0: Interface activated: virt_wifi0 [ 188.464708][ T8364] netlink: 'syz.2.581': attribute type 29 has an invalid length. [ 188.604815][ T8368] netlink: 22 bytes leftover after parsing attributes in process `syz.3.582'. [ 188.625997][ T8371] netlink: 'syz.4.580': attribute type 2 has an invalid length. [ 188.638370][ T8371] netlink: 'syz.4.580': attribute type 1 has an invalid length. [ 188.914105][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.582'. [ 188.961501][ T8374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.582'. [ 189.064890][ T8374] netlink: 36 bytes leftover after parsing attributes in process `syz.3.582'. [ 189.293333][ T8379] netlink: 44 bytes leftover after parsing attributes in process `syz.4.584'. [ 189.336339][ T8379] netlink: 44 bytes leftover after parsing attributes in process `syz.4.584'. [ 189.430579][ T8379] netlink: 'syz.4.584': attribute type 29 has an invalid length. [ 189.839322][ T8400] blkio.reset_stats is deprecated [ 190.290956][ T8419] delete_channel: no stack [ 190.296104][ T8419] delete_channel: no stack [ 192.171022][ T8445] validate_nla: 3 callbacks suppressed [ 192.171040][ T8445] netlink: 'syz.1.604': attribute type 3 has an invalid length. [ 192.822619][ T8471] __nla_validate_parse: 7 callbacks suppressed [ 192.822645][ T8471] netlink: 8153 bytes leftover after parsing attributes in process `syz.3.612'. [ 192.916082][ T8471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.083482][ T8471] netlink: 8153 bytes leftover after parsing attributes in process `syz.3.612'. [ 193.164034][ T8471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.473976][ T8487] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 194.135529][ T8507] netlink: 5 bytes leftover after parsing attributes in process `syz.0.620'. [ 194.310991][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.322078][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.445878][ T8511] netlink: 68 bytes leftover after parsing attributes in process `syz.3.621'. [ 194.476427][ T8513] netlink: 'syz.0.622': attribute type 16 has an invalid length. [ 194.488340][ T8513] netlink: 156 bytes leftover after parsing attributes in process `syz.0.622'. [ 194.667171][ T8520] netlink: 'syz.0.624': attribute type 9 has an invalid length. [ 194.687873][ T8520] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.624'. [ 195.885243][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.628'. [ 196.166861][ T8551] delete_channel: no stack [ 196.171371][ T8551] delete_channel: no stack [ 196.186658][ T8552] netlink: zone id is out of range [ 196.191878][ T8552] netlink: zone id is out of range [ 196.197259][ T8552] netlink: zone id is out of range [ 196.204195][ T8552] netlink: zone id is out of range [ 196.209319][ T8552] netlink: zone id is out of range [ 196.219244][ T8552] netlink: zone id is out of range [ 196.225118][ T8552] netlink: zone id is out of range [ 196.230237][ T8552] netlink: zone id is out of range [ 196.252791][ T5878] Bluetooth: hci1: command 0x0406 tx timeout [ 196.258990][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 196.265477][ T5872] Bluetooth: hci3: command 0x0406 tx timeout [ 196.332454][ T5887] Bluetooth: hci2: command 0x0406 tx timeout [ 196.409584][ T8558] netlink: 'syz.4.634': attribute type 29 has an invalid length. [ 197.244559][ T8580] syzkaller0: entered allmulticast mode [ 197.306697][ T8589] netlink: 'syz.0.643': attribute type 2 has an invalid length. [ 197.315305][ T8589] netlink: 60 bytes leftover after parsing attributes in process `syz.0.643'. [ 197.343056][ T8584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.643'. [ 197.469692][ T8584] netlink: 60 bytes leftover after parsing attributes in process `syz.0.643'. [ 197.867828][ T8614] netlink: 'syz.1.649': attribute type 29 has an invalid length. [ 198.070216][ T8624] netlink: 68 bytes leftover after parsing attributes in process `syz.3.653'. [ 199.808660][ T8681] netlink: 'syz.0.668': attribute type 29 has an invalid length. [ 199.826809][ T8688] netlink: 'syz.1.670': attribute type 2 has an invalid length. [ 203.059779][ T8710] wlan1 speed is unknown, defaulting to 1000 [ 203.076921][ T8710] wlan1 speed is unknown, defaulting to 1000 [ 203.101377][ T8710] wlan1 speed is unknown, defaulting to 1000 [ 203.166019][ T8716] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 203.193681][ T8710] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 203.754052][ T8710] wlan1 speed is unknown, defaulting to 1000 [ 203.770631][ T8710] wlan1 speed is unknown, defaulting to 1000 [ 204.008024][ T8710] wlan1 speed is unknown, defaulting to 1000 [ 204.071017][ T8732] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 204.074876][ T8710] wlan1 speed is unknown, defaulting to 1000 [ 204.089822][ T8732] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.680'. [ 204.104250][ T8710] wlan1 speed is unknown, defaulting to 1000 [ 204.399908][ T8744] C: renamed from team_slave_0 (while UP) [ 204.514129][ T8744] netlink: 164 bytes leftover after parsing attributes in process `syz.2.683'. [ 205.305308][ T8753] netlink: 'syz.4.686': attribute type 29 has an invalid length. [ 205.868138][ T8775] netlink: 'syz.3.692': attribute type 28 has an invalid length. [ 205.893097][ T8775] netlink: 2 bytes leftover after parsing attributes in process `syz.3.692'. [ 205.904243][ T8772] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 205.910421][ T8777] ªªªªªª: renamed from wg2 (while UP) [ 206.038489][ T8779] netlink: 60 bytes leftover after parsing attributes in process `syz.2.694'. [ 206.507520][ T8781] net_ratelimit: 2 callbacks suppressed [ 206.507541][ T8781] netlink: zone id is out of range [ 206.614371][ T8781] netlink: set zone limit has 4 unknown bytes [ 206.896811][ T8790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 206.901937][ T8794] netlink: 92 bytes leftover after parsing attributes in process `syz.1.699'. [ 208.130931][ T8816] netlink: 'syz.3.704': attribute type 29 has an invalid length. [ 208.160853][ T8822] sit0: left promiscuous mode [ 208.238125][ T8829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.943695][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 209.182611][ T8858] netlink: 1053 bytes leftover after parsing attributes in process `syz.4.716'. [ 209.662220][ T8877] netlink: 'syz.4.721': attribute type 29 has an invalid length. [ 210.064067][ T8890] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 210.072142][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 210.160135][ T8890] netlink: 'syz.0.724': attribute type 7 has an invalid length. [ 210.274321][ T8898] netlink: 'syz.4.727': attribute type 29 has an invalid length. [ 210.387284][ T8901] netlink: 40 bytes leftover after parsing attributes in process `syz.3.728'. [ 210.397220][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 210.407221][ T8902] netlink: 'syz.2.729': attribute type 3 has an invalid length. [ 210.410700][ T8904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.730'. [ 210.429734][ T8902] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 210.462986][ T8902] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.729'. [ 210.567275][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 210.611971][ T8913] netlink: 42496 bytes leftover after parsing attributes in process `syz.4.732'. [ 210.983387][ T8924] option changes via remount are deprecated (pid=8918 comm=syz.2.734) [ 211.226728][ T8931] netlink: 'syz.1.738': attribute type 29 has an invalid length. [ 211.464623][ T8938] netlink: 64 bytes leftover after parsing attributes in process `syz.3.740'. [ 212.159781][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.747'. [ 212.254198][ T8959] netlink: 'syz.2.746': attribute type 29 has an invalid length. [ 212.750389][ T8980] cgroup: fork rejected by pids controller in /syz3 [ 212.757745][ T8977] netlink: 'syz.2.753': attribute type 29 has an invalid length. [ 212.944946][ T9086] netlink: 'syz.1.756': attribute type 1 has an invalid length. [ 213.736117][ T9118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.516679][ T9117] __nla_validate_parse: 4 callbacks suppressed [ 214.516699][ T9117] netlink: 809 bytes leftover after parsing attributes in process `syz.1.762'. [ 214.533303][ T9117] netlink: 130160 bytes leftover after parsing attributes in process `syz.1.762'. [ 214.543391][ T9117] netlink: 809 bytes leftover after parsing attributes in process `syz.1.762'. [ 214.612242][ T9120] netlink: 156 bytes leftover after parsing attributes in process `syz.0.765'. [ 214.714263][ T9120] IPv6: NLM_F_CREATE should be specified when creating new route [ 214.747632][ T9120] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.757337][ T9120] IPv6: NLM_F_CREATE should be set when creating new route [ 214.766761][ T9120] IPv6: NLM_F_CREATE should be set when creating new route [ 214.778697][ T9120] IPv6: NLM_F_CREATE should be set when creating new route [ 214.831067][ T9122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.766'. [ 214.941158][ T9132] netlink: 12 bytes leftover after parsing attributes in process `syz.4.766'. [ 215.053239][ T9135] validate_nla: 2 callbacks suppressed [ 215.053257][ T9135] netlink: 'syz.4.766': attribute type 4 has an invalid length. [ 215.089957][ T9135] netlink: 152 bytes leftover after parsing attributes in process `syz.4.766'. [ 215.262801][ T9139] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 215.278280][ T9139] netlink: 'syz.1.770': attribute type 29 has an invalid length. [ 215.665233][ T9147] netlink: 'syz.0.773': attribute type 39 has an invalid length. [ 215.752168][ T9147] veth0_macvtap: left promiscuous mode [ 216.151478][ T5887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.265551][ T5887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.275665][ T5887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.296115][ T5887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.303931][ T5887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.443352][ T9161] wlan1 speed is unknown, defaulting to 1000 [ 217.821834][ T9161] chnl_net:caif_netlink_parms(): no params data found [ 218.332518][ T5187] Bluetooth: hci0: command tx timeout [ 219.817641][ T9188] netlink: 'syz.0.782': attribute type 10 has an invalid length. [ 219.827982][ T9161] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.858222][ T9161] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.877746][ T9161] bridge_slave_0: entered allmulticast mode [ 219.895506][ T9161] bridge_slave_0: entered promiscuous mode [ 219.938079][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.783'. [ 219.938881][ T9161] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.990764][ T9161] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.000837][ T9161] bridge_slave_1: entered allmulticast mode [ 220.020834][ T9161] bridge_slave_1: entered promiscuous mode [ 220.108848][ T9197] netlink: 'syz.1.785': attribute type 10 has an invalid length. [ 220.173944][ T9188] batman_adv: batadv0: Adding interface: netdevsim0 [ 220.181009][ T9188] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.222886][ T9188] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 220.433764][ T5187] Bluetooth: hci0: command tx timeout [ 220.645920][ T9197] team0 (unregistering): Port device team_slave_0 removed [ 220.661221][ T9197] team0 (unregistering): Port device team_slave_1 removed [ 220.815912][ T9161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.844602][ T9161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.871556][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 221.102990][ T9211] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 221.826976][ T9161] team0: Port device team_slave_0 added [ 221.912030][ T9161] team0: Port device team_slave_1 added [ 221.951350][ T9216] netlink: 203516 bytes leftover after parsing attributes in process `syz.4.790'. [ 221.993071][ T9216] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 222.001333][ T9216] openvswitch: netlink: Duplicate key (type 0). [ 222.140861][ T9161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.161024][ T9161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.247550][ T9161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.307771][ T9161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.345328][ T9161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.408426][ T9161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.492997][ T5187] Bluetooth: hci0: command tx timeout [ 222.865351][ T9240] netlink: 16211 bytes leftover after parsing attributes in process `syz.4.797'. [ 222.961804][ T9161] hsr_slave_0: entered promiscuous mode [ 222.989142][ T9161] hsr_slave_1: entered promiscuous mode [ 223.010417][ T9161] debugfs: 'hsr0' already exists in 'hsr' [ 223.028559][ T9161] Cannot create hsr debugfs directory [ 224.194754][ T9264] netlink: 240 bytes leftover after parsing attributes in process `syz.4.804'. [ 224.335448][ T9161] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.582495][ T5187] Bluetooth: hci0: command tx timeout [ 224.643058][ T9161] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.712330][ T9278] netlink: 124 bytes leftover after parsing attributes in process `syz.1.806'. [ 224.722104][ T9278] netlink: 124 bytes leftover after parsing attributes in process `syz.1.806'. [ 224.770573][ T9161] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.243748][ T9284] netlink: 'syz.0.809': attribute type 1 has an invalid length. [ 225.738284][ T9161] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.755703][ T9161] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 226.958546][ T9301] netlink: 24 bytes leftover after parsing attributes in process `syz.1.814'. [ 227.014444][ T9301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 227.110017][ T9161] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 227.163770][ T9161] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 227.202997][ T9161] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 227.455119][ T9314] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 227.505900][ T9312] tap0: tun_chr_ioctl cmd 2147767507 [ 227.531698][ T9161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.546276][ T9312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.816'. [ 227.563045][ T9318] netlink: 'syz.1.818': attribute type 3 has an invalid length. [ 227.571921][ T9312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.816'. [ 227.587930][ T9312] netlink: 60 bytes leftover after parsing attributes in process `syz.0.816'. [ 227.609430][ T9318] netlink: 'syz.1.818': attribute type 10 has an invalid length. [ 227.627875][ T9161] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.640865][ T773] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.648025][ T773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.876681][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.883877][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.987971][ T9161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.006954][ T9161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.151300][ T9322] netlink: 'syz.0.819': attribute type 21 has an invalid length. [ 228.399299][ T9326] delete_channel: no stack [ 228.615789][ T9338] netlink: 'syz.0.821': attribute type 10 has an invalid length. [ 228.897236][ T9338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.959582][ T9338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.016350][ T9338] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 229.130075][ T9161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.241445][ T9161] veth0_vlan: entered promiscuous mode [ 229.254875][ T9161] veth1_vlan: entered promiscuous mode [ 229.305454][ T9341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 229.653588][ T9161] veth0_macvtap: entered promiscuous mode [ 229.724449][ T9348] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 229.764044][ T9161] veth1_macvtap: entered promiscuous mode [ 229.827537][ T9161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.861291][ T9161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.925825][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.946015][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.978675][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.030216][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.274330][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.282165][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.394707][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.413922][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.597436][ T9369] netlink: 'syz.3.768': attribute type 29 has an invalid length. [ 231.844608][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.837'. [ 232.009598][ T5887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.018666][ T5887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.027692][ T5887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.036516][ T5887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.044434][ T5887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.072979][ T9372] delete_channel: no stack [ 232.188484][ T9396] wlan1 speed is unknown, defaulting to 1000 [ 232.615300][ T9419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.843'. [ 232.683085][ T9421] netlink: 'syz.3.840': attribute type 39 has an invalid length. [ 232.896257][ T9425] netlink: 220 bytes leftover after parsing attributes in process `syz.1.845'. [ 233.018655][ T3554] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.021634][ T9433] syz.4.844: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.123645][ T9433] CPU: 1 UID: 0 PID: 9433 Comm: syz.4.844 Not tainted syzkaller #0 PREEMPT(full) [ 233.123691][ T9433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 233.123708][ T9433] Call Trace: [ 233.123716][ T9433] [ 233.123725][ T9433] dump_stack_lvl+0x189/0x250 [ 233.123758][ T9433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.123783][ T9433] ? __pfx__printk+0x10/0x10 [ 233.123811][ T9433] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.123836][ T9433] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 233.123862][ T9433] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 233.123897][ T9433] warn_alloc+0x214/0x310 [ 233.123930][ T9433] ? stack_depot_save_flags+0x41b/0x860 [ 233.123962][ T9433] ? __pfx_warn_alloc+0x10/0x10 [ 233.123996][ T9433] ? kasan_save_track+0x4f/0x80 [ 233.124021][ T9433] ? xskq_create+0x56/0x170 [ 233.124038][ T9433] ? xsk_init_queue+0xb0/0x110 [ 233.124065][ T9433] ? xsk_setsockopt+0x57b/0x8d0 [ 233.124090][ T9433] ? do_sock_setsockopt+0x179/0x1b0 [ 233.124112][ T9433] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 233.124134][ T9433] ? do_syscall_64+0xfa/0x3b0 [ 233.124152][ T9433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.124182][ T9433] __vmalloc_node_range_noprof+0x125/0x12f0 [ 233.124251][ T9433] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.124281][ T9433] ? xskq_create+0x56/0x170 [ 233.124304][ T9433] ? __kasan_kmalloc+0x93/0xb0 [ 233.124335][ T9433] vmalloc_user_noprof+0xad/0xf0 [ 233.124364][ T9433] ? xskq_create+0xbf/0x170 [ 233.124384][ T9433] xskq_create+0xbf/0x170 [ 233.124407][ T9433] xsk_init_queue+0xb0/0x110 [ 233.124440][ T9433] xsk_setsockopt+0x57b/0x8d0 [ 233.124471][ T9433] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.124500][ T9433] ? __pfx_aa_sk_perm+0x10/0x10 [ 233.124533][ T9433] ? __fget_files+0x2a/0x420 [ 233.124549][ T9433] ? aa_sock_opt_perm+0xff/0x1b0 [ 233.124573][ T9433] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 233.124594][ T9433] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.124626][ T9433] do_sock_setsockopt+0x179/0x1b0 [ 233.124656][ T9433] __x64_sys_setsockopt+0x13f/0x1b0 [ 233.124685][ T9433] do_syscall_64+0xfa/0x3b0 [ 233.124705][ T9433] ? lockdep_hardirqs_on+0x9c/0x150 [ 233.124724][ T9433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.124743][ T9433] ? clear_bhb_loop+0x60/0xb0 [ 233.124767][ T9433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.124787][ T9433] RIP: 0033:0x7f26dd18ec29 [ 233.124806][ T9433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.124824][ T9433] RSP: 002b:00007f26db3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 233.124845][ T9433] RAX: ffffffffffffffda RBX: 00007f26dd3d6090 RCX: 00007f26dd18ec29 [ 233.124861][ T9433] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 233.124873][ T9433] RBP: 00007f26dd211e41 R08: 0000000000000004 R09: 0000000000000000 [ 233.124893][ T9433] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 233.124906][ T9433] R13: 00007f26dd3d6128 R14: 00007f26dd3d6090 R15: 00007ffed794e5e8 [ 233.124945][ T9433] [ 233.124963][ T9433] Mem-Info: [ 233.482475][ T9433] active_anon:8749 inactive_anon:0 isolated_anon:0 [ 233.482475][ T9433] active_file:17991 inactive_file:39932 isolated_file:0 [ 233.482475][ T9433] unevictable:768 dirty:59 writeback:0 [ 233.482475][ T9433] slab_reclaimable:10985 slab_unreclaimable:125096 [ 233.482475][ T9433] mapped:33355 shmem:1356 pagetables:1216 [ 233.482475][ T9433] sec_pagetables:0 bounce:0 [ 233.482475][ T9433] kernel_misc_reclaimable:0 [ 233.482475][ T9433] free:1277632 free_pcp:19662 free_cma:0 [ 233.536172][ T9433] Node 0 active_anon:34996kB inactive_anon:0kB active_file:71964kB inactive_file:159520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135420kB dirty:236kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12440kB pagetables:4616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.576383][ T9433] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 233.629059][ T9433] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.670145][ T9442] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.847'. [ 233.757225][ T9433] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 233.781911][ T3554] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.811669][ T9433] Node 0 DMA32 free:1212756kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35044kB inactive_anon:0kB active_file:71964kB inactive_file:157952kB unevictable:1536kB writepending:192kB present:3129332kB managed:2557420kB mlocked:0kB bounce:0kB free_pcp:49552kB local_pcp:36776kB free_cma:0kB [ 233.929434][ T9433] lowmem_reserve[]: 0 0 1 1 1 [ 233.960186][ T9433] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 233.995957][ T9433] lowmem_reserve[]: 0 0 0 0 0 [ 234.002386][ T9433] Node 1 Normal free:3886388kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23788kB local_pcp:11780kB free_cma:0kB [ 234.053608][ T9433] lowmem_reserve[]: 0 0 0 0 0 [ 234.064278][ T9433] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.085043][ T9433] Node 0 DMA32: 366*4kB (UM) 482*8kB (UME) 439*16kB (UME) 578*32kB (UM) 238*64kB (UM) 133*128kB (UME) 70*256kB (UME) [ 234.096701][ T3554] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.102297][ T5887] Bluetooth: hci5: command tx timeout [ 234.113801][ T9433] 30*512kB (UM) 14*1024kB (UME) 6*2048kB (UME) 266*4096kB (UM) = 1212536kB [ 234.134512][ T9433] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 234.146944][ T9433] Node 1 Normal: 193*4kB (U) 42*8kB (UME) 42*16kB (UME) 58*32kB (UME) 20*64kB (UME) 6*128kB (UME) 5*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3886388kB [ 234.165540][ T9433] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.176513][ T9433] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.202753][ T9396] chnl_net:caif_netlink_parms(): no params data found [ 234.212276][ T9433] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.221829][ T9433] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 234.245811][ T9433] 59275 total pagecache pages [ 234.250514][ T9433] 0 pages in swap cache [ 234.256567][ T9433] Free swap = 124996kB [ 234.260729][ T9433] Total swap = 124996kB [ 234.276829][ T3554] batman_adv: batadv0: Removing interface: netdevsim0 [ 234.333973][ T9433] 2097051 pages RAM [ 234.339477][ T3554] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.358231][ T9433] 0 pages HighMem/MovableOnly [ 234.374151][ T9433] 425670 pages reserved [ 234.378319][ T9433] 0 pages cma reserved [ 234.615827][ T9456] netlink: 348 bytes leftover after parsing attributes in process `syz.1.850'. [ 234.818218][ T9456] netlink: 'syz.1.850': attribute type 10 has an invalid length. [ 235.030976][ T9456] bond0: (slave bond_slave_0): Releasing backup interface [ 236.185246][ T5887] Bluetooth: hci5: command tx timeout [ 236.274107][ T9454] wlan1 speed is unknown, defaulting to 1000 [ 236.358175][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.366448][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.376027][ T9396] bridge_slave_0: entered allmulticast mode [ 236.385789][ T9396] bridge_slave_0: entered promiscuous mode [ 236.395283][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.402517][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.411002][ T9396] bridge_slave_1: entered allmulticast mode [ 236.441261][ T9396] bridge_slave_1: entered promiscuous mode [ 236.520307][ T9490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.858'. [ 236.554998][ T9493] netlink: 40 bytes leftover after parsing attributes in process `syz.3.858'. [ 236.656509][ T9493] netlink: 'syz.3.858': attribute type 21 has an invalid length. [ 236.664703][ T9493] netlink: 128 bytes leftover after parsing attributes in process `syz.3.858'. [ 236.707929][ T9493] netlink: 'syz.3.858': attribute type 4 has an invalid length. [ 236.738920][ T9493] netlink: 'syz.3.858': attribute type 5 has an invalid length. [ 236.792808][ T9493] netlink: 3 bytes leftover after parsing attributes in process `syz.3.858'. [ 236.833934][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.024319][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.483860][ T3554] bond0: left allmulticast mode [ 237.503125][ T3554] bond_slave_0: left allmulticast mode [ 237.508620][ T3554] bond_slave_1: left allmulticast mode [ 237.552447][ T3554] bond0: left promiscuous mode [ 237.557235][ T3554] bond_slave_0: left promiscuous mode [ 237.580328][ T3554] bond_slave_1: left promiscuous mode [ 237.593325][ T3554] bridge0: port 3(bond0) entered disabled state [ 237.646810][ T3554] bridge_slave_1: left allmulticast mode [ 237.660888][ T3554] bridge_slave_1: left promiscuous mode [ 237.686521][ T3554] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.714881][ T3554] bridge_slave_0: left allmulticast mode [ 237.730765][ T3554] bridge_slave_0: left promiscuous mode [ 237.739999][ T3554] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.784028][ T9519] netlink: 'syz.1.864': attribute type 11 has an invalid length. [ 238.093625][ T9529] netlink: 16 bytes leftover after parsing attributes in process `syz.4.866'. [ 238.260193][ T5887] Bluetooth: hci5: command tx timeout [ 239.267488][ T3554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.281745][ T3554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.299837][ T3554] bond0 (unregistering): Released all slaves [ 239.389580][ T9396] team0: Port device team_slave_0 added [ 239.466651][ T9396] team0: Port device team_slave_1 added [ 239.705306][ T9569] netlink: 'syz.4.873': attribute type 1 has an invalid length. [ 239.737119][ T9569] netlink: 17 bytes leftover after parsing attributes in process `syz.4.873'. [ 239.820315][ T3554] : left promiscuous mode [ 240.229552][ T9573] proc: Bad value for 'gid' [ 240.259387][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.266752][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.320245][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.332458][ T5887] Bluetooth: hci5: command tx timeout [ 240.339203][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.346913][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.379771][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.451343][ T9576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.875'. [ 240.701356][ T9585] netlink: 'syz.1.878': attribute type 1 has an invalid length. [ 241.047100][ T9396] hsr_slave_0: entered promiscuous mode [ 241.110463][ T9396] hsr_slave_1: entered promiscuous mode [ 241.125598][ T9396] debugfs: 'hsr0' already exists in 'hsr' [ 241.151887][ T9396] Cannot create hsr debugfs directory [ 241.173230][ T9586] netlink: 'syz.3.876': attribute type 29 has an invalid length. [ 241.366967][ T3554] hsr_slave_0: left promiscuous mode [ 241.381266][ T3554] hsr_slave_1: left promiscuous mode [ 241.408302][ T3554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.483255][ T3554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.728787][ T3554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.760908][ T3554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.942098][ T3554] veth1_macvtap: left promiscuous mode [ 241.967069][ T3554] veth0_macvtap: left promiscuous mode [ 241.989147][ T3554] veth1_vlan: left promiscuous mode [ 242.007820][ T3554] veth0_vlan: left promiscuous mode [ 242.454451][ T9631] netlink: 'syz.3.885': attribute type 32 has an invalid length. [ 242.935976][ T3554] team0 (unregistering): Port device team_slave_1 removed [ 242.967562][ T3554] team0 (unregistering): Port device C removed [ 243.280180][ T9615] netlink: 72 bytes leftover after parsing attributes in process `syz.0.882'. [ 243.289241][ T9615] netlink: 72 bytes leftover after parsing attributes in process `syz.0.882'. [ 243.561618][ T9649] netlink: 'syz.1.890': attribute type 3 has an invalid length. [ 243.650580][ T9652] wg2: entered allmulticast mode [ 244.011529][ T9657] wg2: entered promiscuous mode [ 244.861045][ T9663] ref_ctr_offset mismatch. inode: 0x7f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 245.398081][ T9396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.431278][ T9396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 245.518596][ T9396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 245.942542][ T9694] netlink: 76 bytes leftover after parsing attributes in process `syz.0.898'. [ 246.459097][ T3554] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.474298][ T3554] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.491010][ T3554] .` (unregistering): (slave team0): Releasing backup interface [ 246.511281][ T3554] .` (unregistering): Released all slaves [ 246.530098][ T9396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 246.834914][ T9727] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.904'. [ 246.916404][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.904'. [ 247.004058][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.0.904'. [ 247.238369][ T9727] netlink: 14 bytes leftover after parsing attributes in process `syz.0.904'. [ 247.824543][ T9757] netlink: 72 bytes leftover after parsing attributes in process `syz.1.909'. [ 247.845847][ T9757] netlink: 72 bytes leftover after parsing attributes in process `syz.1.909'. [ 247.889293][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.129169][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.178778][ T9772] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 248.298502][ T9772] lo: entered promiscuous mode [ 248.349752][ T9772] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 248.442310][ T2952] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.449519][ T2952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.637526][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.644753][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.690752][ T9786] netlink: 277 bytes leftover after parsing attributes in process `syz.1.915'. [ 249.986778][ T3554] hsr_slave_0: left promiscuous mode [ 249.994431][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 250.016923][ T3554] hsr_slave_1: left promiscuous mode [ 250.061553][ T3554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.091066][ T3554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.099475][ T9815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.921'. [ 250.118465][ T3554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.147475][ T9815] xt_limit: Overflow, try lower: 324382443/4200216956 [ 250.155231][ T3554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.200893][ T9816] xt_limit: Overflow, try lower: 324382443/4200216956 [ 250.272169][ T3554] veth0_macvtap: left promiscuous mode [ 250.293246][ T3554] veth1_vlan: left promiscuous mode [ 250.298580][ T3554] veth0_vlan: left promiscuous mode [ 250.987652][ T3554] team0 (unregistering): Port device team_slave_1 removed [ 251.018815][ T3554] team0 (unregistering): Port device team_slave_0 removed [ 251.347331][ T9833] bridge_slave_1: left allmulticast mode [ 251.374080][ T9833] bridge_slave_1: left promiscuous mode [ 251.397767][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.436755][ T9833] bridge_slave_0: left allmulticast mode [ 251.446021][ T9833] bridge_slave_0: left promiscuous mode [ 251.451880][ T9833] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.641243][ T9396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.648867][ T9842] netlink: 'syz.0.927': attribute type 1 has an invalid length. [ 251.682045][ T9842] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.927'. [ 251.904236][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 251.925206][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 251.984434][ T9848] delete_channel: no stack [ 252.684633][ T9396] veth0_vlan: entered promiscuous mode [ 252.766935][ T9396] veth1_vlan: entered promiscuous mode [ 252.926755][ T9396] veth0_macvtap: entered promiscuous mode [ 252.948635][ T9396] veth1_macvtap: entered promiscuous mode [ 253.011567][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.051335][ T9396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.215608][ T2952] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.254433][ T2952] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.300231][ T2952] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.325791][ T2952] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.861188][ T773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.889952][ T773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.243529][ T9908] netlink: 'syz.4.944': attribute type 29 has an invalid length. [ 254.261505][ T2952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.308228][ T2952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.168891][ T9940] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.950'. [ 255.446398][ T9944] option changes via remount are deprecated (pid=9942 comm=syz.3.952) [ 255.614867][ T9954] netlink: 'syz.0.954': attribute type 21 has an invalid length. [ 255.644850][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.645003][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.753669][ T9954] netlink: 128 bytes leftover after parsing attributes in process `syz.0.954'. [ 255.879723][ T9955] netlink: 100 bytes leftover after parsing attributes in process `syz.0.954'. [ 255.987335][ T9954] netlink: 3 bytes leftover after parsing attributes in process `syz.0.954'. [ 256.433080][ T9968] netlink: 96 bytes leftover after parsing attributes in process `syz.1.957'. [ 256.767905][ T9977] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.961'. [ 257.169449][ T9983] xt_HMARK: proto mask must be zero with L3 mode [ 257.334674][ T9997] netlink: 'syz.1.964': attribute type 8 has an invalid length. [ 257.472590][ T9981] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.962'. [ 257.509754][ T9981] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 257.526543][ T9983] netlink: 64 bytes leftover after parsing attributes in process `syz.0.962'. [ 257.538611][ T9981] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 257.946503][T10017] netlink: 'syz.0.971': attribute type 29 has an invalid length. [ 257.959559][T10017] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 257.999427][T10017] team0: Device bond0 is already an upper device of the team interface [ 259.780446][T10030] netlink: 'syz.5.974': attribute type 29 has an invalid length. [ 259.893669][T10029] netlink: 'syz.5.974': attribute type 29 has an invalid length. [ 260.609700][T10039] netlink: 146936 bytes leftover after parsing attributes in process `syz.3.973'. [ 260.737798][T10039] openvswitch: netlink: Message has 6 unknown bytes. [ 269.092261][ C1] sched: DL replenish lagged too much [ 270.222419][ T5187] Bluetooth: hci4: command 0x0406 tx timeout [ 331.921218][T10039] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 332.567247][T10039] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 332.611579][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 332.620178][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.849161][T10039] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 375.794003][ T5872] Bluetooth: hci5: command 0x0406 tx timeout [ 375.800119][ T5872] Bluetooth: hci0: command 0x0406 tx timeout [ 398.211831][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz.3.973:10025] [ 398.211869][ C0] Modules linked in: [ 398.211885][ C0] irq event stamp: 11217547 [ 398.211893][ C0] hardirqs last enabled at (11217546): [] irqentry_exit+0x74/0x90 [ 398.211921][ C0] hardirqs last disabled at (11217547): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 398.211953][ C0] softirqs last enabled at (11109254): [] __irq_exit_rcu+0xca/0x1f0 [ 398.211976][ C0] softirqs last disabled at (11109257): [] __irq_exit_rcu+0xca/0x1f0 [ 398.212010][ C0] CPU: 0 UID: 0 PID: 10025 Comm: syz.3.973 Not tainted syzkaller #0 PREEMPT(full) [ 398.212031][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.212048][ C0] RIP: 0010:perf_trace_buf_alloc+0x72/0x2a0 [ 398.212067][ C0] Code: 00 00 49 bd 00 00 00 00 00 fc ff df e8 f7 0d 26 00 89 c5 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 a7 01 00 00 41 89 2f <31> ff 89 ee e8 95 76 f6 ff 85 ed 0f 88 a9 00 00 00 41 89 ef 4d 85 [ 398.212084][ C0] RSP: 0018:ffffc90000006800 EFLAGS: 00000297 [ 398.212099][ C0] RAX: 0000000000000004 RBX: 000000000000002c RCX: 0000000000006803 [ 398.212111][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 398.212122][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff81cb1657 [ 398.212135][ C0] R10: dffffc0000000000 R11: fffff91ffff9181d R12: 1ffff92000000d10 [ 398.212149][ C0] R13: dffffc0000000000 R14: ffffc900000068a0 R15: ffffc900000068c0 [ 398.212162][ C0] FS: 00007fb556ff66c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 398.212178][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.212190][ C0] CR2: 000000110c346ae2 CR3: 0000000075e52000 CR4: 00000000003526f0 [ 398.212207][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.212218][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 398.212229][ C0] Call Trace: [ 398.212238][ C0] [ 398.212267][ C0] perf_trace_lock+0x18d/0x3b0 [ 398.212317][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.212364][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.212392][ C0] ? rcu_read_unlock+0x87/0xa0 [ 398.212410][ C0] ? rcu_read_unlock+0x87/0xa0 [ 398.212434][ C0] lock_release+0x3b2/0x3e0 [ 398.212496][ C0] rcu_read_unlock+0x93/0xa0 [ 398.212516][ C0] trace_call_bpf+0x7dd/0x850 [ 398.212553][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 398.212569][ C0] ? sched_clock+0x3f/0x60 [ 398.212599][ C0] ? sched_clock_cpu+0x74/0x430 [ 398.212620][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 398.212658][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 398.212701][ C0] perf_trace_run_bpf_submit+0x78/0x170 [ 398.212752][ C0] perf_trace_lock+0x2f8/0x3b0 [ 398.212806][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.212834][ C0] ? irqentry_exit+0x74/0x90 [ 398.212856][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.212898][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.212920][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.212948][ C0] lock_release+0x3b2/0x3e0 [ 398.213004][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.213026][ C0] unwind_next_frame+0x19a9/0x2390 [ 398.213074][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.213103][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.213147][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 398.213174][ C0] arch_stack_walk+0x11c/0x150 [ 398.213224][ C0] ? migrate_enable+0x2d5/0x3c0 [ 398.213266][ C0] stack_trace_save+0x9c/0xe0 [ 398.213294][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 398.213375][ C0] kasan_save_track+0x3e/0x80 [ 398.213399][ C0] ? kasan_save_track+0x3e/0x80 [ 398.213419][ C0] ? kasan_save_free_info+0x46/0x50 [ 398.213437][ C0] ? __kasan_slab_free+0x5b/0x80 [ 398.213458][ C0] ? kmem_cache_free+0x18f/0x400 [ 398.213480][ C0] ? skb_release_data+0x62d/0x7c0 [ 398.213501][ C0] ? sk_skb_reason_drop+0x127/0x170 [ 398.213521][ C0] ? xfrmi_xmit+0xdad/0x1af0 [ 398.213539][ C0] ? dev_hard_start_xmit+0x2d4/0x830 [ 398.213561][ C0] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 398.213583][ C0] ? ip6_finish_output2+0x11fb/0x16a0 [ 398.213609][ C0] ? ndisc_send_skb+0xb54/0x1440 [ 398.213627][ C0] ? addrconf_rs_timer+0x369/0x670 [ 398.213643][ C0] ? call_timer_fn+0x17b/0x5f0 [ 398.213667][ C0] ? __run_timer_base+0x61a/0x860 [ 398.213688][ C0] ? run_timer_softirq+0xb7/0x180 [ 398.213716][ C0] ? handle_softirqs+0x283/0x870 [ 398.213732][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 398.213748][ C0] ? irq_exit_rcu+0x9/0x30 [ 398.213764][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 398.213790][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.213956][ C0] ? skb_release_data+0x62d/0x7c0 [ 398.213979][ C0] kasan_save_free_info+0x46/0x50 [ 398.214002][ C0] __kasan_slab_free+0x5b/0x80 [ 398.214032][ C0] kmem_cache_free+0x18f/0x400 [ 398.214084][ C0] skb_release_data+0x62d/0x7c0 [ 398.214153][ C0] sk_skb_reason_drop+0x127/0x170 [ 398.214174][ C0] ? __pfx_ip6_link_failure+0x10/0x10 [ 398.214207][ C0] xfrmi_xmit+0xdad/0x1af0 [ 398.214260][ C0] ? validate_xmit_xfrm+0xbf/0x1160 [ 398.214309][ C0] ? __pfx_xfrmi_xmit+0x10/0x10 [ 398.214412][ C0] dev_hard_start_xmit+0x2d4/0x830 [ 398.214505][ C0] __dev_queue_xmit+0x1b8d/0x3b50 [ 398.214530][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.214595][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 398.214632][ C0] ? irqentry_exit+0x74/0x90 [ 398.214655][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.214690][ C0] ? neigh_connected_output+0x1ea/0x460 [ 398.214731][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 398.214760][ C0] ? read_seqbegin+0x174/0x250 [ 398.214790][ C0] ? read_seqbegin+0x17f/0x250 [ 398.214815][ C0] ? read_seqbegin+0x1ac/0x250 [ 398.214837][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 398.214871][ C0] ? __lock_acquire+0xab9/0xd20 [ 398.214932][ C0] ? neigh_connected_output+0x3b6/0x460 [ 398.215022][ C0] ip6_finish_output2+0x11fb/0x16a0 [ 398.215069][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 398.215120][ C0] ? ip6_mtu+0x7d/0x3f0 [ 398.215148][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 398.215184][ C0] ? ip6_mtu+0x7d/0x3f0 [ 398.215209][ C0] ? ip6_mtu+0x321/0x3f0 [ 398.215246][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 398.215293][ C0] ndisc_send_skb+0xb54/0x1440 [ 398.215316][ C0] ? irqentry_exit+0x74/0x90 [ 398.215349][ C0] ? ndisc_send_skb+0x20c/0x1440 [ 398.215410][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 398.215441][ C0] ? lock_release+0x2b5/0x3e0 [ 398.215544][ C0] ? ipv6_get_lladdr+0x378/0x3f0 [ 398.215587][ C0] addrconf_rs_timer+0x369/0x670 [ 398.215635][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 398.215701][ C0] call_timer_fn+0x17b/0x5f0 [ 398.215742][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 398.215761][ C0] ? call_timer_fn+0xbe/0x5f0 [ 398.215790][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 398.215858][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.215889][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.215906][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 398.215937][ C0] __run_timer_base+0x61a/0x860 [ 398.215960][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.216046][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 398.216142][ C0] run_timer_softirq+0xb7/0x180 [ 398.216175][ C0] handle_softirqs+0x283/0x870 [ 398.216215][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 398.216261][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 398.216306][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.216354][ C0] __irq_exit_rcu+0xca/0x1f0 [ 398.216378][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 398.216437][ C0] irq_exit_rcu+0x9/0x30 [ 398.216455][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 398.216485][ C0] [ 398.216492][ C0] [ 398.216504][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.216525][ C0] RIP: 0010:migrate_enable+0x2d5/0x3c0 [ 398.216544][ C0] Code: ff eb 1e 41 ff cf 49 bc 00 00 00 00 00 fc ff df 42 0f b6 04 23 84 c0 0f 85 ce 00 00 00 66 44 89 3a 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 08 00 00 00 00 65 48 8b 05 [ 398.216559][ C0] RSP: 0018:ffffc9000c2271a0 EFLAGS: 00000202 [ 398.216575][ C0] RAX: 0000000000000001 RBX: ffff8880b863ada0 RCX: 0000000000000000 [ 398.216586][ C0] RDX: ffff8880303f4040 RSI: ffffffff8be33d60 RDI: 00000000ffffffff [ 398.216600][ C0] RBP: ffffc9000c227290 R08: ffffc9000c22732f R09: 0000000000000000 [ 398.216613][ C0] R10: ffffc9000c227320 R11: ffffffffa0201810 R12: dffffc0000000000 [ 398.216626][ C0] R13: 1ffff92001844e3c R14: ffffffff8dbe1d10 R15: ffff8880303f4020 [ 398.216662][ C0] ? 0xffffffffa0201810 [ 398.216761][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 398.216832][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.216853][ C0] trace_call_bpf+0x4b9/0x850 [ 398.216873][ C0] ? perf_trace_lock+0x2f8/0x3b0 [ 398.216891][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.216937][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 398.217004][ C0] perf_trace_run_bpf_submit+0x78/0x170 [ 398.217048][ C0] perf_trace_lock+0x2f8/0x3b0 [ 398.217101][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.217148][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 398.217170][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 398.217188][ C0] ? __alloc_frozen_pages_noprof+0x123/0x370 [ 398.217209][ C0] ? __alloc_frozen_pages_noprof+0x123/0x370 [ 398.217235][ C0] lock_release+0x3b2/0x3e0 [ 398.217269][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 398.217309][ C0] prepare_alloc_pages+0x1b5/0x610 [ 398.217363][ C0] __alloc_frozen_pages_noprof+0x123/0x370 [ 398.217403][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 398.217421][ C0] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 398.217461][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 398.217480][ C0] ? do_syscall_64+0xfa/0x3b0 [ 398.217498][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.217559][ C0] alloc_pages_bulk_noprof+0x560/0x710 [ 398.217605][ C0] ? policy_nodemask+0x27c/0x720 [ 398.217658][ C0] alloc_pages_bulk_mempolicy_noprof+0x341/0x1650 [ 398.217762][ C0] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 398.217797][ C0] ? trace_kmalloc+0x1f/0xd0 [ 398.217818][ C0] ? __kmalloc_node_noprof+0x293/0x4e0 [ 398.217844][ C0] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 398.217896][ C0] __vmalloc_node_range_noprof+0x733/0x12f0 [ 398.218015][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 398.218054][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 398.218091][ C0] ? irqentry_exit+0x74/0x90 [ 398.218113][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.218158][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 398.218181][ C0] __vmalloc_noprof+0xb1/0xf0 [ 398.218212][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 398.218254][ C0] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 398.218283][ C0] ? __sanitizer_cov_trace_pc+0x58/0x70 [ 398.218324][ C0] bpf_prog_alloc+0x3c/0x1a0 [ 398.218366][ C0] bpf_prog_load+0x735/0x1930 [ 398.218446][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 398.218477][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.218579][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 398.218600][ C0] ? security_bpf+0x7e/0x300 [ 398.218643][ C0] __sys_bpf+0x528/0x870 [ 398.218683][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 398.218704][ C0] ? sched_clock_cpu+0x74/0x430 [ 398.218792][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 398.218869][ C0] __x64_sys_bpf+0x7c/0x90 [ 398.218903][ C0] do_syscall_64+0xfa/0x3b0 [ 398.218932][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.218949][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.218967][ C0] ? clear_bhb_loop+0x60/0xb0 [ 398.219004][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.219022][ C0] RIP: 0033:0x7fb558d8ec29 [ 398.219043][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.219059][ C0] RSP: 002b:00007fb556ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.219076][ C0] RAX: ffffffffffffffda RBX: 00007fb558fd5fa0 RCX: 00007fb558d8ec29 [ 398.219090][ C0] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 398.219102][ C0] RBP: 00007fb558e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 398.219113][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.219124][ C0] R13: 00007fb558fd6038 R14: 00007fb558fd5fa0 R15: 00007ffec7ae9328 [ 398.219201][ C0] [ 398.219218][ C0] Sending NMI from CPU 0 to CPUs 1: [ 398.314565][ T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { [ 398.319851][ C1] NMI backtrace for cpu 1 [ 398.319868][ C1] CPU: 1 UID: 0 PID: 18 Comm: rcu_exp_gp_kthr Not tainted syzkaller #0 PREEMPT(full) [ 398.319888][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.319900][ C1] RIP: 0010:irqtime_account_irq+0x23/0x1c0 [ 398.319927][ C1] Code: 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 89 f5 49 89 fe e8 68 00 e3 09 89 c3 83 f8 08 0f 83 85 01 00 00 <49> bc 00 00 00 00 00 fc ff df 4c 8d 3c dd 10 1d be 8d 4c 89 f8 48 [ 398.319942][ C1] RSP: 0018:ffffc90000a08e08 EFLAGS: 00000097 [ 398.319957][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 83c9d65d80110000 [ 398.319969][ C1] RDX: 0000000000010000 RSI: ffffffff8be33d60 RDI: ffffffff8be33d20 [ 398.319982][ C1] RBP: 0000000000000100 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486 [ 398.319995][ C1] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: 0000000000000000 [ 398.320007][ C1] R13: 0000000000000000 R14: ffff88801ceb1e00 R15: ffff88801ceb1e00 [ 398.320020][ C1] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 398.320034][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.320046][ C1] CR2: 00007f36b7959020 CR3: 0000000075e52000 CR4: 00000000003526f0 [ 398.320061][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.320072][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 398.320083][ C1] Call Trace: [ 398.320092][ C1] [ 398.320112][ C1] handle_softirqs+0x15e/0x870 [ 398.320135][ C1] ? lapic_next_event+0x11/0x20 [ 398.320153][ C1] ? clockevents_program_event+0x24d/0x360 [ 398.320182][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 398.320221][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 398.320257][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 398.320291][ C1] __irq_exit_rcu+0xca/0x1f0 [ 398.320312][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 398.320360][ C1] irq_exit_rcu+0x9/0x30 [ 398.320376][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 398.320406][ C1] [ 398.320412][ C1] [ 398.320422][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.320441][ C1] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 398.320465][ C1] Code: 85 32 01 00 00 e8 c1 87 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 b0 87 1f 00 eb 06 e8 a9 87 1f 00 fb 48 c7 c7 80 e3 12 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 35 [ 398.320480][ C1] RSP: 0018:ffffc900001778e0 EFLAGS: 00000293 [ 398.320494][ C1] RAX: ffffffff81a03757 RBX: ffffffff81a03614 RCX: ffff88801ceb1e00 [ 398.320507][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e12e380 [ 398.320518][ C1] RBP: ffffc900001779f0 R08: ffffffff8fa3a437 R09: 1ffffffff1f47486 [ 398.320531][ C1] R10: dffffc0000000000 R11: fffffbfff1f47487 R12: dffffc0000000000 [ 398.320545][ C1] R13: 1ffff9200002ef20 R14: 0000000000000200 R15: 0000000000000041 [ 398.320569][ C1] ? vprintk_emit+0x444/0x7a0 [ 398.320594][ C1] ? vprintk_emit+0x587/0x7a0 [ 398.320634][ C1] ? vprintk_emit+0x444/0x7a0 [ 398.320662][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 398.320680][ C1] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 398.320716][ C1] ? perf_trace_lock+0x2f8/0x3b0 [ 398.320770][ C1] _printk+0xcf/0x120 [ 398.320817][ C1] ? __pfx__printk+0x10/0x10 [ 398.320856][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 398.320885][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.320919][ C1] synchronize_rcu_expedited_stall+0x61/0x1170 [ 398.320991][ C1] rcu_exp_sel_wait_wake+0x867/0xe20 [ 398.321018][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 398.321064][ C1] ? __pfx_rcu_exp_sel_wait_wake+0x10/0x10 [ 398.321110][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.321155][ C1] kthread_worker_fn+0x507/0xb60 [ 398.321193][ C1] ? kthread_worker_fn+0xe4/0xb60 [ 398.321228][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 398.321264][ C1] kthread+0x70e/0x8a0 [ 398.321300][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 398.321323][ C1] ? __pfx_kthread+0x10/0x10 [ 398.321356][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.321384][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.321400][ C1] ? __pfx_kthread+0x10/0x10 [ 398.321430][ C1] ret_from_fork+0x436/0x7d0 [ 398.321466][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 398.321507][ C1] ? __switch_to_asm+0x39/0x70 [ 398.321529][ C1] ? __switch_to_asm+0x33/0x70 [ 398.321550][ C1] ? __pfx_kthread+0x10/0x10 [ 398.321580][ C1] ret_from_fork_asm+0x1a/0x30 [ 398.321652][ C1] [ 398.321855][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 398.321878][ C0] CPU: 0 UID: 0 PID: 10025 Comm: syz.3.973 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.321905][ C0] Tainted: [L]=SOFTLOCKUP [ 398.321914][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.321928][ C0] Call Trace: [ 398.321940][ C0] [ 398.321952][ C0] dump_stack_lvl+0x99/0x250 [ 398.321980][ C0] ? __asan_memcpy+0x40/0x70 [ 398.322012][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.322044][ C0] ? __pfx__printk+0x10/0x10 [ 398.322130][ C0] vpanic+0x281/0x750 [ 398.322159][ C0] ? __pfx__printk+0x10/0x10 [ 398.322187][ C0] ? __pfx_vpanic+0x10/0x10 [ 398.322219][ C0] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 398.322297][ C0] panic+0xb9/0xc0 [ 398.322325][ C0] ? __pfx_panic+0x10/0x10 [ 398.322345][ C0] ? nmi_backtrace_stall_check+0x433/0x440 [ 398.322390][ C0] ? irq_work_queue+0xc3/0x140 [ 398.322457][ C0] watchdog_timer_fn+0x862/0x870 [ 398.322507][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 398.322546][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 398.322581][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 398.322638][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 398.322676][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 398.322715][ C0] __hrtimer_run_queues+0x4dd/0xc60 [ 398.322740][ C0] ? ktime_get_update_offsets_now+0x60/0x3d0 [ 398.322841][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 398.322868][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 398.322938][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 398.323077][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 398.323113][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 398.323150][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.323173][ C0] RIP: 0010:perf_trace_buf_alloc+0x72/0x2a0 [ 398.323194][ C0] Code: 00 00 49 bd 00 00 00 00 00 fc ff df e8 f7 0d 26 00 89 c5 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 a7 01 00 00 41 89 2f <31> ff 89 ee e8 95 76 f6 ff 85 ed 0f 88 a9 00 00 00 41 89 ef 4d 85 [ 398.323213][ C0] RSP: 0018:ffffc90000006800 EFLAGS: 00000297 [ 398.323233][ C0] RAX: 0000000000000004 RBX: 000000000000002c RCX: 0000000000006803 [ 398.323247][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 398.323261][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff81cb1657 [ 398.323276][ C0] R10: dffffc0000000000 R11: fffff91ffff9181d R12: 1ffff92000000d10 [ 398.323292][ C0] R13: dffffc0000000000 R14: ffffc900000068a0 R15: ffffc900000068c0 [ 398.323334][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.323412][ C0] perf_trace_lock+0x18d/0x3b0 [ 398.323463][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.323514][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.323544][ C0] ? rcu_read_unlock+0x87/0xa0 [ 398.323564][ C0] ? rcu_read_unlock+0x87/0xa0 [ 398.323591][ C0] lock_release+0x3b2/0x3e0 [ 398.323657][ C0] rcu_read_unlock+0x93/0xa0 [ 398.323680][ C0] trace_call_bpf+0x7dd/0x850 [ 398.323726][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 398.323745][ C0] ? sched_clock+0x3f/0x60 [ 398.323777][ C0] ? sched_clock_cpu+0x74/0x430 [ 398.323801][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 398.323840][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 398.323886][ C0] perf_trace_run_bpf_submit+0x78/0x170 [ 398.323934][ C0] perf_trace_lock+0x2f8/0x3b0 [ 398.323987][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.324013][ C0] ? irqentry_exit+0x74/0x90 [ 398.324036][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.324077][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.324100][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.324128][ C0] lock_release+0x3b2/0x3e0 [ 398.324184][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.324207][ C0] unwind_next_frame+0x19a9/0x2390 [ 398.324255][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.324282][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.324326][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 398.324354][ C0] arch_stack_walk+0x11c/0x150 [ 398.324402][ C0] ? migrate_enable+0x2d5/0x3c0 [ 398.324445][ C0] stack_trace_save+0x9c/0xe0 [ 398.324472][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 398.324540][ C0] kasan_save_track+0x3e/0x80 [ 398.324564][ C0] ? kasan_save_track+0x3e/0x80 [ 398.324585][ C0] ? kasan_save_free_info+0x46/0x50 [ 398.324604][ C0] ? __kasan_slab_free+0x5b/0x80 [ 398.324627][ C0] ? kmem_cache_free+0x18f/0x400 [ 398.324651][ C0] ? skb_release_data+0x62d/0x7c0 [ 398.324673][ C0] ? sk_skb_reason_drop+0x127/0x170 [ 398.324693][ C0] ? xfrmi_xmit+0xdad/0x1af0 [ 398.324718][ C0] ? dev_hard_start_xmit+0x2d4/0x830 [ 398.324742][ C0] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 398.324765][ C0] ? ip6_finish_output2+0x11fb/0x16a0 [ 398.324792][ C0] ? ndisc_send_skb+0xb54/0x1440 [ 398.324812][ C0] ? addrconf_rs_timer+0x369/0x670 [ 398.324829][ C0] ? call_timer_fn+0x17b/0x5f0 [ 398.324854][ C0] ? __run_timer_base+0x61a/0x860 [ 398.324877][ C0] ? run_timer_softirq+0xb7/0x180 [ 398.324900][ C0] ? handle_softirqs+0x283/0x870 [ 398.324918][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 398.324936][ C0] ? irq_exit_rcu+0x9/0x30 [ 398.324952][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 398.324979][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.325137][ C0] ? skb_release_data+0x62d/0x7c0 [ 398.325162][ C0] kasan_save_free_info+0x46/0x50 [ 398.325184][ C0] __kasan_slab_free+0x5b/0x80 [ 398.325215][ C0] kmem_cache_free+0x18f/0x400 [ 398.325266][ C0] skb_release_data+0x62d/0x7c0 [ 398.325332][ C0] sk_skb_reason_drop+0x127/0x170 [ 398.325355][ C0] ? __pfx_ip6_link_failure+0x10/0x10 [ 398.325388][ C0] xfrmi_xmit+0xdad/0x1af0 [ 398.325440][ C0] ? validate_xmit_xfrm+0xbf/0x1160 [ 398.325487][ C0] ? __pfx_xfrmi_xmit+0x10/0x10 [ 398.325587][ C0] dev_hard_start_xmit+0x2d4/0x830 [ 398.325678][ C0] __dev_queue_xmit+0x1b8d/0x3b50 [ 398.325708][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.325771][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 398.325809][ C0] ? irqentry_exit+0x74/0x90 [ 398.325832][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.325867][ C0] ? neigh_connected_output+0x1ea/0x460 [ 398.325903][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 398.325933][ C0] ? read_seqbegin+0x174/0x250 [ 398.325963][ C0] ? read_seqbegin+0x17f/0x250 [ 398.325989][ C0] ? read_seqbegin+0x1ac/0x250 [ 398.326012][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 398.326046][ C0] ? __lock_acquire+0xab9/0xd20 [ 398.326106][ C0] ? neigh_connected_output+0x3b6/0x460 [ 398.326199][ C0] ip6_finish_output2+0x11fb/0x16a0 [ 398.326245][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 398.326294][ C0] ? ip6_mtu+0x7d/0x3f0 [ 398.326324][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 398.326359][ C0] ? ip6_mtu+0x7d/0x3f0 [ 398.326384][ C0] ? ip6_mtu+0x321/0x3f0 [ 398.326422][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 398.326468][ C0] ndisc_send_skb+0xb54/0x1440 [ 398.326493][ C0] ? irqentry_exit+0x74/0x90 [ 398.326524][ C0] ? ndisc_send_skb+0x20c/0x1440 [ 398.326584][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 398.326616][ C0] ? lock_release+0x2b5/0x3e0 [ 398.326719][ C0] ? ipv6_get_lladdr+0x378/0x3f0 [ 398.326761][ C0] addrconf_rs_timer+0x369/0x670 [ 398.326809][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 398.326872][ C0] call_timer_fn+0x17b/0x5f0 [ 398.326901][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 398.326921][ C0] ? call_timer_fn+0xbe/0x5f0 [ 398.326952][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 398.327016][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.327048][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.327066][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 398.327097][ C0] __run_timer_base+0x61a/0x860 [ 398.327121][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.327204][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 398.327295][ C0] run_timer_softirq+0xb7/0x180 [ 398.327329][ C0] handle_softirqs+0x283/0x870 [ 398.327369][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 398.327414][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 398.327463][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.327502][ C0] __irq_exit_rcu+0xca/0x1f0 [ 398.327527][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 398.327585][ C0] irq_exit_rcu+0x9/0x30 [ 398.327603][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 398.327636][ C0] [ 398.327644][ C0] [ 398.327657][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.327679][ C0] RIP: 0010:migrate_enable+0x2d5/0x3c0 [ 398.327706][ C0] Code: ff eb 1e 41 ff cf 49 bc 00 00 00 00 00 fc ff df 42 0f b6 04 23 84 c0 0f 85 ce 00 00 00 66 44 89 3a 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 08 00 00 00 00 65 48 8b 05 [ 398.327723][ C0] RSP: 0018:ffffc9000c2271a0 EFLAGS: 00000202 [ 398.327742][ C0] RAX: 0000000000000001 RBX: ffff8880b863ada0 RCX: 0000000000000000 [ 398.327756][ C0] RDX: ffff8880303f4040 RSI: ffffffff8be33d60 RDI: 00000000ffffffff [ 398.327771][ C0] RBP: ffffc9000c227290 R08: ffffc9000c22732f R09: 0000000000000000 [ 398.327785][ C0] R10: ffffc9000c227320 R11: ffffffffa0201810 R12: dffffc0000000000 [ 398.327800][ C0] R13: 1ffff92001844e3c R14: ffffffff8dbe1d10 R15: ffff8880303f4020 [ 398.327836][ C0] ? 0xffffffffa0201810 [ 398.327926][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 398.327994][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.328016][ C0] trace_call_bpf+0x4b9/0x850 [ 398.328037][ C0] ? perf_trace_lock+0x2f8/0x3b0 [ 398.328056][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.328101][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 398.328166][ C0] perf_trace_run_bpf_submit+0x78/0x170 [ 398.328209][ C0] perf_trace_lock+0x2f8/0x3b0 [ 398.328262][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.328308][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 398.328331][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 398.328350][ C0] ? __alloc_frozen_pages_noprof+0x123/0x370 [ 398.328371][ C0] ? __alloc_frozen_pages_noprof+0x123/0x370 [ 398.328398][ C0] lock_release+0x3b2/0x3e0 [ 398.328433][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 398.328471][ C0] prepare_alloc_pages+0x1b5/0x610 [ 398.328525][ C0] __alloc_frozen_pages_noprof+0x123/0x370 [ 398.328565][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 398.328584][ C0] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 398.328629][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 398.328649][ C0] ? do_syscall_64+0xfa/0x3b0 [ 398.328668][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.328732][ C0] alloc_pages_bulk_noprof+0x560/0x710 [ 398.328777][ C0] ? policy_nodemask+0x27c/0x720 [ 398.328830][ C0] alloc_pages_bulk_mempolicy_noprof+0x341/0x1650 [ 398.328922][ C0] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 398.328957][ C0] ? trace_kmalloc+0x1f/0xd0 [ 398.328979][ C0] ? __kmalloc_node_noprof+0x293/0x4e0 [ 398.329005][ C0] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 398.329057][ C0] __vmalloc_node_range_noprof+0x733/0x12f0 [ 398.329171][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 398.329209][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 398.329245][ C0] ? irqentry_exit+0x74/0x90 [ 398.329268][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.329313][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 398.329336][ C0] __vmalloc_noprof+0xb1/0xf0 [ 398.329368][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 398.329410][ C0] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 398.329439][ C0] ? __sanitizer_cov_trace_pc+0x58/0x70 [ 398.329479][ C0] bpf_prog_alloc+0x3c/0x1a0 [ 398.329522][ C0] bpf_prog_load+0x735/0x1930 [ 398.329598][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 398.329630][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.329733][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 398.329756][ C0] ? security_bpf+0x7e/0x300 [ 398.329799][ C0] __sys_bpf+0x528/0x870 [ 398.329840][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 398.329861][ C0] ? sched_clock_cpu+0x74/0x430 [ 398.329940][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 398.330015][ C0] __x64_sys_bpf+0x7c/0x90 [ 398.330057][ C0] NMI backtrace for cpu 0 [ 398.330068][ C0] CPU: 0 UID: 0 PID: 10025 Comm: syz.3.973 Tainted: G L syzkaller #0 PREEMPT(full) [ 398.330092][ C0] Tainted: [L]=SOFTLOCKUP [ 398.330098][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 398.330108][ C0] RIP: 0010:__sanitizer_cov_trace_switch+0x68/0x130 [ 398.330131][ C0] Code: 00 00 00 48 83 f9 07 0f 85 d1 00 00 00 b9 07 00 00 00 48 85 c0 75 13 e9 c2 00 00 00 b9 01 00 00 00 48 85 c0 0f 84 b4 00 00 00 <41> 57 41 56 41 54 53 48 8b 54 24 20 65 4c 8b 04 25 08 b0 a0 92 45 [ 398.330146][ C0] RSP: 0018:ffffc900000059d8 EFLAGS: 00000002 [ 398.330159][ C0] RAX: 000000000000001f RBX: 0000000000000042 RCX: 0000000000000001 [ 398.330170][ C0] RDX: 0000000000010100 RSI: ffffffff8f8aa750 RDI: 0000000000000042 [ 398.330182][ C0] RBP: ffffc90000005ae0 R08: ffffffffffff0a00 R09: 0000000000000008 [ 398.330194][ C0] R10: 0000000000000007 R11: 0000000000010100 R12: ffffffff8b79e01a [ 398.330206][ C0] R13: ffffffff8da5f1fd R14: 1ffff92000000b44 R15: ffffffffffff0a00 [ 398.330219][ C0] FS: 00007fb556ff66c0(0000) GS:ffff888125c15000(0000) knlGS:0000000000000000 [ 398.330234][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 398.330246][ C0] CR2: 000000110c346ae2 CR3: 0000000075e52000 CR4: 00000000003526f0 [ 398.330261][ C0] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 398.330272][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 398.330283][ C0] Call Trace: [ 398.330290][ C0] [ 398.330296][ C0] pointer+0xb0/0x1190 [ 398.330338][ C0] ? __pfx_pointer+0x10/0x10 [ 398.330362][ C0] ? perf_swevent_get_recursion_context+0xa6/0x100 [ 398.330393][ C0] ? format_decode+0x5ee/0xe30 [ 398.330436][ C0] vsnprintf+0x60f/0xf00 [ 398.330491][ C0] vprintk_store+0x3c7/0xd00 [ 398.330519][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.330548][ C0] ? __pfx_vprintk_store+0x10/0x10 [ 398.330574][ C0] ? rcu_read_unlock+0x87/0xa0 [ 398.330615][ C0] ? trace_call_bpf+0x5ba/0x850 [ 398.330635][ C0] ? __down_trylock_console_sem+0x158/0x1e0 [ 398.330660][ C0] ? _printk+0xcf/0x120 [ 398.330684][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 398.330704][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 398.330747][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 398.330782][ C0] vprintk_emit+0x21e/0x7a0 [ 398.330811][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 398.330850][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.330897][ C0] _printk+0xcf/0x120 [ 398.330928][ C0] ? do_syscall_64+0xfa/0x3b0 [ 398.330947][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.330964][ C0] ? __pfx__printk+0x10/0x10 [ 398.330998][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 398.331027][ C0] ? wq_watchdog_touch+0xef/0x180 [ 398.331056][ C0] ? do_syscall_64+0xfa/0x3b0 [ 398.331078][ C0] ? do_syscall_64+0xfa/0x3b0 [ 398.331099][ C0] show_trace_log_lvl+0x4d0/0x550 [ 398.331154][ C0] ? do_syscall_64+0xfa/0x3b0 [ 398.331189][ C0] dump_stack_lvl+0x99/0x250 [ 398.331212][ C0] ? __asan_memcpy+0x40/0x70 [ 398.331235][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.331259][ C0] ? __pfx__printk+0x10/0x10 [ 398.331319][ C0] vpanic+0x281/0x750 [ 398.331342][ C0] ? __pfx__printk+0x10/0x10 [ 398.331368][ C0] ? __pfx_vpanic+0x10/0x10 [ 398.331393][ C0] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 398.331448][ C0] panic+0xb9/0xc0 [ 398.331470][ C0] ? __pfx_panic+0x10/0x10 [ 398.331487][ C0] ? nmi_backtrace_stall_check+0x433/0x440 [ 398.331523][ C0] ? irq_work_queue+0xc3/0x140 [ 398.331571][ C0] watchdog_timer_fn+0x862/0x870 [ 398.331607][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 398.331638][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 398.331667][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 398.331713][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 398.331742][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 398.331770][ C0] __hrtimer_run_queues+0x4dd/0xc60 [ 398.331789][ C0] ? ktime_get_update_offsets_now+0x60/0x3d0 [ 398.331858][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 398.331878][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 398.331926][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 398.332016][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 398.332044][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 398.332074][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.332092][ C0] RIP: 0010:perf_trace_buf_alloc+0x72/0x2a0 [ 398.332109][ C0] Code: 00 00 49 bd 00 00 00 00 00 fc ff df e8 f7 0d 26 00 89 c5 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 a7 01 00 00 41 89 2f <31> ff 89 ee e8 95 76 f6 ff 85 ed 0f 88 a9 00 00 00 41 89 ef 4d 85 [ 398.332123][ C0] RSP: 0018:ffffc90000006800 EFLAGS: 00000297 [ 398.332137][ C0] RAX: 0000000000000004 RBX: 000000000000002c RCX: 0000000000006803 [ 398.332147][ C0] RDX: 0000000000000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 398.332158][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff81cb1657 [ 398.332169][ C0] R10: dffffc0000000000 R11: fffff91ffff9181d R12: 1ffff92000000d10 [ 398.332181][ C0] R13: dffffc0000000000 R14: ffffc900000068a0 R15: ffffc900000068c0 [ 398.332211][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.332264][ C0] perf_trace_lock+0x18d/0x3b0 [ 398.332301][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.332337][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.332361][ C0] ? rcu_read_unlock+0x87/0xa0 [ 398.332377][ C0] ? rcu_read_unlock+0x87/0xa0 [ 398.332397][ C0] lock_release+0x3b2/0x3e0 [ 398.332448][ C0] rcu_read_unlock+0x93/0xa0 [ 398.332466][ C0] trace_call_bpf+0x7dd/0x850 [ 398.332497][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 398.332513][ C0] ? sched_clock+0x3f/0x60 [ 398.332539][ C0] ? sched_clock_cpu+0x74/0x430 [ 398.332558][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 398.332589][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 398.332622][ C0] perf_trace_run_bpf_submit+0x78/0x170 [ 398.332656][ C0] perf_trace_lock+0x2f8/0x3b0 [ 398.332704][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.332730][ C0] ? irqentry_exit+0x74/0x90 [ 398.332751][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.332785][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.332806][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.332832][ C0] lock_release+0x3b2/0x3e0 [ 398.332879][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.332901][ C0] unwind_next_frame+0x19a9/0x2390 [ 398.332941][ C0] ? unwind_next_frame+0xa5/0x2390 [ 398.332965][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.333001][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 398.333027][ C0] arch_stack_walk+0x11c/0x150 [ 398.333068][ C0] ? migrate_enable+0x2d5/0x3c0 [ 398.333102][ C0] stack_trace_save+0x9c/0xe0 [ 398.333128][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 398.333184][ C0] kasan_save_track+0x3e/0x80 [ 398.333205][ C0] ? kasan_save_track+0x3e/0x80 [ 398.333227][ C0] ? kasan_save_free_info+0x46/0x50 [ 398.333244][ C0] ? __kasan_slab_free+0x5b/0x80 [ 398.333266][ C0] ? kmem_cache_free+0x18f/0x400 [ 398.333288][ C0] ? skb_release_data+0x62d/0x7c0 [ 398.333324][ C0] ? sk_skb_reason_drop+0x127/0x170 [ 398.333345][ C0] ? xfrmi_xmit+0xdad/0x1af0 [ 398.333363][ C0] ? dev_hard_start_xmit+0x2d4/0x830 [ 398.333385][ C0] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 398.333408][ C0] ? ip6_finish_output2+0x11fb/0x16a0 [ 398.333434][ C0] ? ndisc_send_skb+0xb54/0x1440 [ 398.333452][ C0] ? addrconf_rs_timer+0x369/0x670 [ 398.333468][ C0] ? call_timer_fn+0x17b/0x5f0 [ 398.333493][ C0] ? __run_timer_base+0x61a/0x860 [ 398.333515][ C0] ? run_timer_softirq+0xb7/0x180 [ 398.333537][ C0] ? handle_softirqs+0x283/0x870 [ 398.333553][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 398.333570][ C0] ? irq_exit_rcu+0x9/0x30 [ 398.333586][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 398.333612][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.333743][ C0] ? skb_release_data+0x62d/0x7c0 [ 398.333769][ C0] kasan_save_free_info+0x46/0x50 [ 398.333788][ C0] __kasan_slab_free+0x5b/0x80 [ 398.333813][ C0] kmem_cache_free+0x18f/0x400 [ 398.333853][ C0] skb_release_data+0x62d/0x7c0 [ 398.333903][ C0] sk_skb_reason_drop+0x127/0x170 [ 398.333922][ C0] ? __pfx_ip6_link_failure+0x10/0x10 [ 398.333949][ C0] xfrmi_xmit+0xdad/0x1af0 [ 398.333988][ C0] ? validate_xmit_xfrm+0xbf/0x1160 [ 398.334024][ C0] ? __pfx_xfrmi_xmit+0x10/0x10 [ 398.334096][ C0] dev_hard_start_xmit+0x2d4/0x830 [ 398.334163][ C0] __dev_queue_xmit+0x1b8d/0x3b50 [ 398.334185][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.334232][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 398.334263][ C0] ? irqentry_exit+0x74/0x90 [ 398.334282][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.334309][ C0] ? neigh_connected_output+0x1ea/0x460 [ 398.334337][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 398.334361][ C0] ? read_seqbegin+0x174/0x250 [ 398.334386][ C0] ? read_seqbegin+0x17f/0x250 [ 398.334406][ C0] ? read_seqbegin+0x1ac/0x250 [ 398.334425][ C0] ? __pfx_read_seqbegin+0x10/0x10 [ 398.334451][ C0] ? __lock_acquire+0xab9/0xd20 [ 398.334497][ C0] ? neigh_connected_output+0x3b6/0x460 [ 398.334561][ C0] ip6_finish_output2+0x11fb/0x16a0 [ 398.334598][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 398.334638][ C0] ? ip6_mtu+0x7d/0x3f0 [ 398.334662][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 398.334692][ C0] ? ip6_mtu+0x7d/0x3f0 [ 398.334718][ C0] ? ip6_mtu+0x321/0x3f0 [ 398.334747][ C0] ? ip6_finish_output+0x2ef/0x4e0 [ 398.334784][ C0] ndisc_send_skb+0xb54/0x1440 [ 398.334805][ C0] ? irqentry_exit+0x74/0x90 [ 398.334829][ C0] ? ndisc_send_skb+0x20c/0x1440 [ 398.334874][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 398.334899][ C0] ? lock_release+0x2b5/0x3e0 [ 398.334973][ C0] ? ipv6_get_lladdr+0x378/0x3f0 [ 398.335005][ C0] addrconf_rs_timer+0x369/0x670 [ 398.335041][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 398.335087][ C0] call_timer_fn+0x17b/0x5f0 [ 398.335112][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 398.335129][ C0] ? call_timer_fn+0xbe/0x5f0 [ 398.335155][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 398.335204][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 398.335231][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.335246][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 398.335271][ C0] __run_timer_base+0x61a/0x860 [ 398.335292][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.335353][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 398.335421][ C0] run_timer_softirq+0xb7/0x180 [ 398.335448][ C0] handle_softirqs+0x283/0x870 [ 398.335479][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 398.335514][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 398.335547][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 398.335578][ C0] __irq_exit_rcu+0xca/0x1f0 [ 398.335598][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 398.335641][ C0] irq_exit_rcu+0x9/0x30 [ 398.335657][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 398.335684][ C0] [ 398.335689][ C0] [ 398.335703][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.335722][ C0] RIP: 0010:migrate_enable+0x2d5/0x3c0 [ 398.335740][ C0] Code: ff eb 1e 41 ff cf 49 bc 00 00 00 00 00 fc ff df 42 0f b6 04 23 84 c0 0f 85 ce 00 00 00 66 44 89 3a 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 08 00 00 00 00 65 48 8b 05 [ 398.335755][ C0] RSP: 0018:ffffc9000c2271a0 EFLAGS: 00000202 [ 398.335769][ C0] RAX: 0000000000000001 RBX: ffff8880b863ada0 RCX: 0000000000000000 [ 398.335780][ C0] RDX: ffff8880303f4040 RSI: ffffffff8be33d60 RDI: 00000000ffffffff [ 398.335793][ C0] RBP: ffffc9000c227290 R08: ffffc9000c22732f R09: 0000000000000000 [ 398.335805][ C0] R10: ffffc9000c227320 R11: ffffffffa0201810 R12: dffffc0000000000 [ 398.335818][ C0] R13: 1ffff92001844e3c R14: ffffffff8dbe1d10 R15: ffff8880303f4020 [ 398.335846][ C0] ? 0xffffffffa0201810 [ 398.335908][ C0] ? __pfx_migrate_enable+0x10/0x10 [ 398.335958][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.335976][ C0] trace_call_bpf+0x4b9/0x850 [ 398.335993][ C0] ? perf_trace_lock+0x2f8/0x3b0 [ 398.336009][ C0] ? trace_call_bpf+0xb7/0x850 [ 398.336042][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 398.336090][ C0] perf_trace_run_bpf_submit+0x78/0x170 [ 398.336123][ C0] perf_trace_lock+0x2f8/0x3b0 [ 398.336162][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.336196][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 398.336214][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 398.336230][ C0] ? __alloc_frozen_pages_noprof+0x123/0x370 [ 398.336248][ C0] ? __alloc_frozen_pages_noprof+0x123/0x370 [ 398.336270][ C0] lock_release+0x3b2/0x3e0 [ 398.336299][ C0] ? fs_reclaim_acquire+0x7d/0x100 [ 398.336329][ C0] prepare_alloc_pages+0x1b5/0x610 [ 398.336368][ C0] __alloc_frozen_pages_noprof+0x123/0x370 [ 398.336399][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 398.336415][ C0] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 398.336448][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 398.336465][ C0] ? do_syscall_64+0xfa/0x3b0 [ 398.336481][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.336525][ C0] alloc_pages_bulk_noprof+0x560/0x710 [ 398.336559][ C0] ? policy_nodemask+0x27c/0x720 [ 398.336600][ C0] alloc_pages_bulk_mempolicy_noprof+0x341/0x1650 [ 398.336669][ C0] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 398.336704][ C0] ? trace_kmalloc+0x1f/0xd0 [ 398.336723][ C0] ? __kmalloc_node_noprof+0x293/0x4e0 [ 398.336746][ C0] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 398.336788][ C0] __vmalloc_node_range_noprof+0x733/0x12f0 [ 398.336870][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 398.336899][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 398.336930][ C0] ? irqentry_exit+0x74/0x90 [ 398.336949][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 398.336982][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 398.337005][ C0] __vmalloc_noprof+0xb1/0xf0 [ 398.337031][ C0] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 398.337065][ C0] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 398.337090][ C0] ? __sanitizer_cov_trace_pc+0x58/0x70 [ 398.337122][ C0] bpf_prog_alloc+0x3c/0x1a0 [ 398.337156][ C0] bpf_prog_load+0x735/0x1930 [ 398.337213][ C0] ? __pfx_bpf_prog_load+0x10/0x10 [ 398.337240][ C0] ? __pfx_perf_trace_lock+0x10/0x10 [ 398.337310][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 398.337330][ C0] ? security_bpf+0x7e/0x300 [ 398.337363][ C0] __sys_bpf+0x528/0x870 [ 398.337396][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 398.337415][ C0] ? sched_clock_cpu+0x74/0x430 [ 398.337472][ C0] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 398.337529][ C0] __x64_sys_bpf+0x7c/0x90 [ 398.337555][ C0] do_syscall_64+0xfa/0x3b0 [ 398.337579][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.337595][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 398.337613][ C0] ? clear_bhb_loop+0x60/0xb0 [ 398.337641][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.337658][ C0] RIP: 0033:0x7fb558d8ec29 [ 398.337676][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.337690][ C0] RSP: 002b:00007fb556ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.337710][ C0] RAX: ffffffffffffffda RBX: 00007fb558fd5fa0 RCX: 00007fb558d8ec29 [ 398.337723][ C0] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 398.337734][ C0] RBP: 00007fb558e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 398.337745][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 398.337755][ C0] R13: 00007fb558fd6038 R14: 00007fb558fd5fa0 R15: 00007ffec7ae9328 [ 398.337809][ C0] [ 398.330047][ C0] do_syscall_64+0xfa/0x3b0 [ 402.489234][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.495312][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 402.501470][ C0] ? clear_bhb_loop+0x60/0xb0 [ 402.506172][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.512074][ C0] RIP: 0033:0x7fb558d8ec29 [ 402.516502][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.536111][ C0] RSP: 002b:00007fb556ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.544538][ C0] RAX: ffffffffffffffda RBX: 00007fb558fd5fa0 RCX: 00007fb558d8ec29 [ 402.552515][ C0] RDX: 0000000000000094 RSI: 0000200000000600 RDI: 0000000000000005 [ 402.560491][ C0] RBP: 00007fb558e11e41 R08: 0000000000000000 R09: 0000000000000000 [ 402.568465][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.576441][ C0] R13: 00007fb558fd6038 R14: 00007fb558fd5fa0 R15: 00007ffec7ae9328 [ 402.584486][ C0] [ 402.587790][ C0] Kernel Offset: disabled [ 402.592107][ C0] Rebooting in 86400 seconds..