last executing test programs: 3m49.382590157s ago: executing program 0 (id=1936): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001947}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x1}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x10) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x0, 0x6c}, 0x0, @in6=@remote, 0x0, 0x1, 0x0, 0x0, 0x3, 0xffffffff}, {{@in6=@private1, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x13c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)='~', 0x1}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8094) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)}, 0x20000880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m48.818535527s ago: executing program 0 (id=1942): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x2000000) 3m48.243134142s ago: executing program 0 (id=1947): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x40004, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9fd}, 0x94) 3m48.190112444s ago: executing program 0 (id=1949): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001947}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x3, 0x1}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) close(0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r2, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, [@tmpl={0x84, 0x5, [{{@in6=@private2, 0x0, 0x6c}, 0x0, @in6=@remote, 0x0, 0x1, 0x0, 0x0, 0x3, 0xffffffff}, {{@in6=@private1, 0x0, 0x3c}, 0xa, @in=@empty, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x13c}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000380)='~', 0x1}], 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8094) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="50000000270001"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)}, 0x20000880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m47.678945236s ago: executing program 0 (id=1954): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x13}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a008802fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c0010800800014000000000080002"], 0x80}}, 0x0) 3m47.418322981s ago: executing program 0 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0xd, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044851}, 0x20000090) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r3, 0x0, 0x3, &(0x7f0000000040)='+%\x00'}, 0x30) r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x6, 0x73, 0x6, 0x0, 0x0, 0x1028, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x800, 0x0, 0x6, 0x3, 0x8, 0x9, 0x49, 0x0, 0x2, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xbc, 0x6, 0x8, 0x9, 0x0, 0x911, 0x800a0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x408, 0x3, 0x1, 0x6, 0xfffffffffffffffa, 0x1, 0x2}, r2, 0x0, r4, 0x9) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 3m32.20474746s ago: executing program 32 (id=1959): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0xd, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044851}, 0x20000090) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r2, r3, 0x0, 0x3, &(0x7f0000000040)='+%\x00'}, 0x30) r4 = perf_event_open$cgroup(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x6, 0x73, 0x6, 0x0, 0x0, 0x1028, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000180), 0x2}, 0x800, 0x0, 0x6, 0x3, 0x8, 0x9, 0x49, 0x0, 0x2, 0x0, 0x8000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xbc, 0x6, 0x8, 0x9, 0x0, 0x911, 0x800a0, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000080), 0x2}, 0x408, 0x3, 0x1, 0x6, 0xfffffffffffffffa, 0x1, 0x2}, r2, 0x0, r4, 0x9) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 6.297187253s ago: executing program 3 (id=3736): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x50c0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c0000"], 0x34}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r5, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xb3, &(0x7f0000000700), 0x0, 0x0, 0x0, &(0x7f0000000780), 0x8, 0xc3, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r5], 0x0, 0x56, 0x0, 0x1, 0x8}, 0x28) sendmsg$tipc(r2, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20000840) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000900)=r6, 0x4) 4.540330902s ago: executing program 3 (id=3752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) syz_clone(0x10020000, &(0x7f00000002c0)="4edec82d318af0700daa879ef1578fca4e4d0a7015cb56bd99cc48e9aef9576ed66ec6fa5027407c22a65aab3f368d4fd47ca4bf676e3b9892b9dbf484646462252f7be4e2f9815ee52b3268a1315ce96a328b937549c52199dbc823dbba8746836d72e0d61a8c18f728232383a9766c3e24f90061ca2471061508cd67bb12a03591ebb6047c10e0551da152d564410177ba5297ffd7155bdb55", 0x9a, &(0x7f0000000240), &(0x7f0000000380), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0x4}, 0x14105, 0x2e, 0x6, 0x3, 0x2, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x9}, {&(0x7f0000000140)}], 0x2}, 0x4000000) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x15, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000500)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001ac0)=""/4081, 0xff1}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x31, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007ffffffff5000000b8"], 0xd0}, 0x480c4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002220207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006000000850000000400000085000000d000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='tlb_flush\x00', r6}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x4a, 0x0, 0x1, 0x3}, 0x28) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001c80)={'gre0\x00', 0x8000}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000040)=[{0x20, 0x84, 0x8, "da33640df3de730ed4"}], 0x20}, 0x41) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) 2.998444427s ago: executing program 1 (id=3755): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000070a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000001400038008000140000000000800024000000000080007400000000348000000160a0101000b000000000000010000000900020073797a31000000000900010073797a30000000001c00038018000380140001007663616e30"], 0xd8}}, 0x0) 2.927225213s ago: executing program 3 (id=3756): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYRES16], 0x0}, 0x94) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x81, 0x1}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000005}, {{0x18, 0x1, 0x2, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xc2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) (async) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', 0x0, r4, 0x5, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x5, &(0x7f0000000340)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xfffffffe, 0x69, 0x10, 0x64}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xaf9a2668a64cf828, '\x00', 0x0, @fallback=0x2a}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r6) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x11c, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x108, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x50, 0x3, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfff00000, 0x800, 0xffffffffffffffff, 0x7, 0x91}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r6, 0x35, 0x1, 0x3b3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000740)=[0x0, 0x0], 0x0, 0x0, 0x444, &(0x7f0000000640), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000700), 0x8, 0x6e, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={@ifindex=r9, r3, 0xa, 0x0, r3, @void, @value=r3, @void, @void, r8}, 0x20) (async) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r5}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1300000018400000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES64=r8], 0x20) (async) r11 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r11, r0, 0x14, 0x14, 0x0, @void, @value=r1, @void, @void, r8}, 0x20) 2.926192936s ago: executing program 2 (id=3757): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000086770000000000000000000009a500000d00000018170000", @ANYRES32=r0, @ANYBLOB="40ab1edfc5dc56eb158baf0200000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$sock(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="00c88bfa03a64c77f36dd515a7d7570424b24326f5ae021980006c96827d120518d9b688869345fafb7109f021295ce23191d2f710cba5f3e22ca0d4920d65d519944bc984c9f78598d635d3e3ad5305817753f5c713b6a2743f188b4d36d5a8377d2ef16cecea76", 0x68}, {0x0}, {&(0x7f0000000300)="b81210467db73d84322e7226148d3d103246cd5b5c546c81f5960f6fdf45cd83cb72d04b9036d0bc50509f3b0f6b62519121589362dc531f02667287cd47e6a9fde38cc422396902a2d4525f9f9d3f223af9257c5cb9c7c09eb521a886636aa0e2bfb1946d1e3beec57b8b16035c14eb9442354a9df4e530204cb5d6a91b7920a349db296302c860da159f723074b8690cb01631279fe7", 0x97}, {&(0x7f0000000200)="e640c9d8cbdf734c1f269228c658f21c4a1a54edbda1cff257a281b9671f69bbb7", 0x21}, {0x0}, {&(0x7f00000003c0)="52eea0cf14849cb14b8bbb2f411db9fe7877f2434259799f537843123b8071297693c2acf5aa50d0f4bf7097516d0857af4054f783e354c6d6b3b4476b00397711a8c580be805c6c42b97cc6ce6219b6c1ccdad03dd32e81e1b781c4565e34696eb86538b0f16637a22ae0324f04554e67d74c5a6e47195e20387cfb0ba182294c2ccb9e44cd9958d7091665277b8bdf49ab7537e05375b38814fbc065324af7006144bb7c41cb8a59b85191051997cbb4b30c35a3ed921e08202121ca7d80737e45558c021f1104e1e1dfe314c4bb6038bd56", 0xd3}, {&(0x7f00000004c0)="ceecfe405b9453b2d2c8ec09d02e51b76420d723980f2c59d384af47c52fc4f3c56215e27d37a05e6ce24c02d12e95579211341b", 0x34}, {&(0x7f0000000880)="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", 0x1000}], 0x8}, 0x6a5ef9290445fc1d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB='\a'], 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1a"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14}}, 0xb4}}, 0x200000d4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.782581298s ago: executing program 3 (id=3760): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x7, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), 0x0}, 0x20) (async, rerun: 32) r0 = socket$kcm(0xa, 0x3, 0x73) (rerun: 32) sendmsg$inet(r0, &(0x7f0000001140)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x74, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f0000001240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x29, 0x36}}, @ip_pktinfo={{0x1c, 0x4c000000, 0x8, {0x0, @broadcast, @remote}}}], 0x58}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$kcm(0x21, 0x2, 0x2) (async, rerun: 32) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7f) (async, rerun: 32) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001000600dc00000000000000"], 0x18}, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x6, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = socket$kcm(0x10, 0x3, 0x10) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4c020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, @perf_bp={0x0, 0x8}, 0x800, 0x2000000000, 0x0, 0x5, 0x0, 0x200000b, 0xfffd, 0x0, 0x9, 0x0, 0x3f}, 0x0, 0x400010, 0xffffffffffffffff, 0x3) (async, rerun: 64) r5 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc60040f03", 0x17}], 0x1}, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a0033d4"], 0xfe33) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000001801000020786c3500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f00000002c0)='tlb_flush\x00', r9}, 0x10) (async, rerun: 32) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000040000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1003, &(0x7f0000003e80)=""/4099, 0x41100, 0xd}, 0x94) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 2.781847975s ago: executing program 1 (id=3761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000a00080000000100040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000040000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ffc1d24c283715e6e09ce8ff0f0000109c00000000bfa100000000000007010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="1400000053040100000000000000000000f303010000000000000000000000000a00000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/4096, 0x1000}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800003000000000000000000000000018010000646c6c250000000000202020db1af8ff41000000bfa100000000000007d03af7edffffffb702000008000000b70300000000000085000000ca0000009500000000000000"], &(0x7f0000001640)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000040)=[{&(0x7f0000001680)=""/241, 0xf1}, {&(0x7f0000001840)=""/191, 0xbf}], 0x2, &(0x7f0000000580)=""/120, 0x78}, 0x40000000) socket$kcm(0xa, 0x5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c000280080001"], 0x140}}, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8946, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x606080, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xd, 0x0, &(0x7f0000000300)="88291242a03c3f98722780b605", 0x0, 0xfeff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x800a, 0x0, 0x0, 0x5, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x5421, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.757483178s ago: executing program 5 (id=3762): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x50c0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c0000"], 0x34}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r5, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xb3, &(0x7f0000000700), 0x0, 0x0, 0x0, &(0x7f0000000780), 0x8, 0xc3, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r5], 0x0, 0x56, 0x0, 0x1, 0x8}, 0x28) sendmsg$tipc(r2, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20000840) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000900)=r6, 0x4) 2.648872436s ago: executing program 2 (id=3763): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0xe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc8, &(0x7f0000000140)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0xffff, 0x0, r0, 0x7, '\x00', r1, r0, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.494784411s ago: executing program 3 (id=3764): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x2, 0xffffffffffffffff, 0xfff}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000380)='devices.allow\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tr\nr'], 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000018008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) r12 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c0002000200002037153e371d04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000e80)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed64a55c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51666018b5a4435d9f88329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657ba15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad2d5d0a79819e112637819d9a187cfdf782c6127d2d4281926b4fcfcd4346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff30100ffffffffffffdb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2762af8d3268d11b473d5d7544edd1ed0e507c319e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d5996c68d8f9a41be09d9fec816c50e9e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc26476c256459e2c37d94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f00"/1031, 0x407}], 0x2}, 0x10049014) 2.439379244s ago: executing program 1 (id=3765): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x28, 0x1, 0x28, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="181a0000", @ANYRES32, @ANYBLOB="00000000000000006d14010001000000850000006a000000b7080000000000007b8af8ff00000000b7080000b36900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095000000000000a737f0c25b", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2b, 0x9d, &(0x7f00000006c0)=""/157, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0xd, 0x40, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c80), &(0x7f0000000cc0)=[{0x1, 0x5, 0xffffffff, 0xa}, {0x4, 0x4, 0xa, 0x4}, {0x0, 0x3, 0x9}], 0x10, 0x4}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c000280080001"], 0xe0}}, 0x0) 2.350442227s ago: executing program 2 (id=3766): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0xef, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 902.189002ms ago: executing program 5 (id=3768): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {0x0}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) 901.796852ms ago: executing program 2 (id=3769): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000006000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000c080003400000000808000740000000310800064000000000300000000c0a01020000000000000000070000000900020073797a31000000000900010073797a30f00000000400038014000000020a01"], 0xe0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xa, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 888.724594ms ago: executing program 4 (id=3770): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x4a, 0x1, 0x4, 0x2, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff6ea, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x8, 0x0, 0x0, 0xb32}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcff", 0x22}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb8040000}, 0x20000081) 783.480665ms ago: executing program 4 (id=3771): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0x4, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000008000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 780.01178ms ago: executing program 1 (id=3772): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x721, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x80000, 0x5, 0x20000001, 0x7, 0x10000}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x10000000}, 0x2004c004) 725.854659ms ago: executing program 5 (id=3773): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000086770000000000000000000009a500000d00000018170000", @ANYRES32=r0, @ANYBLOB="40ab1edfc5dc56eb158baf0200000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$sock(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="00c88bfa03a64c77f36dd515a7d7570424b24326f5ae021980006c96827d120518d9b688869345fafb7109f021295ce23191d2f710cba5f3e22ca0d4920d65d519944bc984c9f78598d635d3e3ad5305817753f5c713b6a2743f188b4d36d5a8377d2ef16cecea76", 0x68}, {0x0}, {&(0x7f0000000300)="b81210467db73d84322e7226148d3d103246cd5b5c546c81f5960f6fdf45cd83cb72d04b9036d0bc50509f3b0f6b62519121589362dc531f02667287cd47e6a9fde38cc422396902a2d4525f9f9d3f223af9257c5cb9c7c09eb521a886636aa0e2bfb1946d1e3beec57b8b16035c14eb9442354a9df4e530204cb5d6a91b7920a349db296302c860da159f723074b8690cb01631279fe7", 0x97}, {&(0x7f0000000200)="e640c9d8cbdf734c1f269228c658f21c4a1a54edbda1cff257a281b9671f69bbb7", 0x21}, {0x0}, {&(0x7f00000003c0)="52eea0cf14849cb14b8bbb2f411db9fe7877f2434259799f537843123b8071297693c2acf5aa50d0f4bf7097516d0857af4054f783e354c6d6b3b4476b00397711a8c580be805c6c42b97cc6ce6219b6c1ccdad03dd32e81e1b781c4565e34696eb86538b0f16637a22ae0324f04554e67d74c5a6e47195e20387cfb0ba182294c2ccb9e44cd9958d7091665277b8bdf49ab7537e05375b38814fbc065324af7006144bb7c41cb8a59b85191051997cbb4b30c35a3ed921e08202121ca7d80737e45558c021f1104e1e1dfe314c4bb6038bd56", 0xd3}, {&(0x7f00000004c0)="ceecfe405b9453b2d2c8ec09d02e51b76420d723980f2c59d384af47c52fc4f3c56215e27d37a05e6ce24c02d12e95579211341b", 0x34}, {&(0x7f0000000880)="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", 0x1000}], 0x8}, 0x6a5ef9290445fc1d) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000600)=ANY=[@ANYBLOB="12000000020000"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYBLOB='\a'], 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1a"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14}}, 0xb4}}, 0x200000d4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 646.778793ms ago: executing program 4 (id=3774): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc02", 0x93}], 0x1}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000200)={0x2, 0xfffffffffffffd07, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xeb5, 0x4}, 0x8000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, &(0x7f0000000000)={r0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x4, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x1, 0x7, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dbef0e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x700000000000000, &(0x7f00000009c0)=ANY=[], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x118fa, 0x8, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x200, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r7, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004d00)={0x28, 0x3ea, 0x2, 0x70bd26, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x20000800) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x1d, &(0x7f0000000840)=ANY=[@ANYBLOB="18003e26ff0f000000000000ff7f000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000daa90100f0ffffffb70800000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x3b5fa310, 0x1000, &(0x7f0000000c40)=""/4096, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x4, 0x6, 0x5, 0xffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001c40)=[r3, 0xffffffffffffffff, r3, r3, r2], &(0x7f0000001c80)=[{0x5, 0x1, 0x6}], 0x10, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000040000000000000000000000850000007b00000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701000002ffffffb702000008000000b703000007030000850000001700000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xe, 0x27, &(0x7f00000000c0)="c1188e19b95d02ff4284860186dd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x27) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}}, 0x10) 636.414737ms ago: executing program 2 (id=3775): socket(0x24, 0xa, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000200000bf20000000000000160007003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 530.86497ms ago: executing program 5 (id=3776): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x8, 0xc8, 0x9, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200000000}, 0x0, 0x4, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x96, 0x1, 0x0, 0x81, 0x0, 0x8000000000000005, 0x19188, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, @perf_bp={0x0, 0x9}, 0x105563, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x41fc3806, 0x2, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc0000003bdb5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa3b20"], 0xfdef) 466.844982ms ago: executing program 2 (id=3777): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x6, 0x2, &(0x7f0000000140)=r0, 0xfa) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x301}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000940)='tlb_flush\x00', r4, 0x0, 0x3}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000d008d5f55f216e1700e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0800000004"], 0x50) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x1e, 0x4, 0x0) close(r6) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d040000000400000004000000000000000000001004000000000000000000"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x28) 425.140877ms ago: executing program 5 (id=3778): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={&(0x7f0000000080), 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 316.738861ms ago: executing program 1 (id=3779): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1d00, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0xe, 0xb1c, 0x8}, 0x10, 0x21cdd, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000540)=[{0x0, 0x1, 0xf, 0xb}, {0x4, 0x3, 0x7}, {0x0, 0x5, 0x2, 0x7}], 0x10, 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x40, 0x1000, 0xc, 0x20, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x9}, 0x50) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0x1, 0x3ff, 0x20, 0xffffffffffffffff, 0x26a9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x0, 0xf}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x655f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xffffffff}, @jmp={0x5, 0x0, 0x0, 0x4, 0x7, 0xfffffffffffffff4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x760d, 0xe8, &(0x7f00000001c0)=""/232, 0x41100, 0x4, '\x00', r2, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xf, 0x8}, 0x10, 0x0, r3, 0x3, &(0x7f0000000a00)=[r4, r5, r6, r7, r8, r9, r10], &(0x7f0000000a40)=[{0x3, 0x5, 0x10, 0x7}, {0x4, 0x5, 0x6, 0xb}, {0x0, 0x3, 0x4, 0x1}], 0x10, 0x9}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b40)={0x7, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r11, r2, 0x25, 0x0, @val=@target_btf_id=r12}, 0x14) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d40)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_ext={0x1c, 0xa, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x98}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x329, 0x0, 0x0, 0x0, 0xfffffff8}, @alu={0x4, 0x1, 0x3, 0x9, 0x3, 0x40, 0xffffffffffffffff}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}]}, &(0x7f0000000c40)='syzkaller\x00', 0x2b9, 0x86, &(0x7f0000000c80)=""/134, 0x41100, 0x0, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f0000000d80)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2d335, 0xffffffffffffffff, 0x4, &(0x7f0000000dc0)=[r9], &(0x7f0000000e00)=[{0x0, 0x2, 0xc, 0xc}, {0x0, 0x3, 0x8, 0x3}, {0x0, 0x3, 0x7, 0x4}, {0x3, 0x3, 0x3, 0x7}], 0x10, 0x4}, 0x94) (async, rerun: 64) r14 = socket$kcm(0x29, 0x5, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMUNATTACH(r14, 0x89e1, &(0x7f0000000f00)={r0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001140)={r13, 0x20, &(0x7f0000001100)={&(0x7f0000000f40)=""/171, 0xab, 0x0, &(0x7f0000001000)=""/200, 0xc8}}, 0x10) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}}, &(0x7f00000011c0)='GPL\x00', 0x0, 0xb8, &(0x7f0000001200)=""/184, 0x41100, 0x80, '\x00', r2, 0x1b, r13, 0x8, &(0x7f00000012c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000001300)={0x4, 0x3, 0x5a79, 0x5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001340)=[r1, r5, r9, r6, r9, r13], &(0x7f0000001380)=[{0x2, 0x2, 0xd, 0x8}], 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002740)={{r6, 0xffffffffffffffff}, &(0x7f00000026c0), &(0x7f0000002700)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002780)={&(0x7f0000001480)="d8c11a15d87cd6ba9732add6d165396d7f90e60ebc0b39c2d00da1239d38e80254085d6989151904e2f2962e2fb9d9694f9827047f22e5f6444f7abeb5a77b803c01debaab3bfb4eed7be0020b01cc7b52988cb4982e3ea3541624c1f9e9bb62958ba3f9a62447f074eb0049dc3e39ede1053858cb96ab586101afc6070673a4fc198daef7b032893695f50be7d74ee8b2691f9924355858764b7d49061ba52eb06c38ad734b66c8d1dbf7855f832fbc37bc70f2e7410630601001945208a6c1bd12a494b10a5915b4b736a1b6", &(0x7f0000001580)=""/164, &(0x7f0000001640)="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", &(0x7f0000002640)="dc8d6543d3598aeb7e6af9925053bde28ecf45b6b93ec881cef25a3b9e36220946f32925577445afeb0ac3230e9c3f7d49c5b6f9768ae1f44b801f5b41c7ee27728416fc1b", 0x7, r16, 0x4}, 0x38) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002a80)={r3, 0xe0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000027c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000002800)=[0x0, 0x0], &(0x7f0000002840)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000002880)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000028c0), &(0x7f0000002900), 0x8, 0x87, 0x8, 0x8, &(0x7f0000002940)}}, 0x10) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002ac0)=r15, 0x4) r19 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r19, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000002b00)="f4f358560037a026d1a4bb2e2ab60c7fda6323ab99ef368d69fcbfb996d62603a91a5986b96324ebd18c15b933970d99ee4c84d2b145de837ddae31e1504f0ecec0355f22a52cf01d2ea237ec8408f12189e4cd4f875e75f41f0f0827d36bf0da1ac1920c0807165389a8d2d50ee2926c8ad68b961337b27cdabf2b7c71cffb39b6774a92d34400e9ba196218cdc1fef32e343fd8399ccffce7eab58aa88d26ae1595243f0c46e501a360ed18e254fd0ff41fef032bcadca919a5fba102c058bc6c3f827598024a44bcda4848b7aa976b14c116ed762738c51c3775eaa4a8d1cf4c05a2ceab45772ae51b3595b5bbee9a767992b9f6ca1", 0xf7}, {&(0x7f0000002c00)="033f2be169dfb6a64da97c1b032ccf7bad0c327e49ec2c58e9513625fbb51bbb9538eda43d0ac47317796a605c52f9", 0x2f}, {&(0x7f0000002c40)="e0116be6cb8deb0d5841acb40ff999a249ba19bb501c9f1a5a5b4ba1a096a916a367605621e7dd22a963d5747d54db2e47bf7406ef1757efc405546ff8e9d160b412bfc4176b74dc64159c9dc2899d86b86a1fa20605c94103f0a3f628f65829983bfc8ec3e044010e71089999871f001a1e", 0x72}, {&(0x7f0000002cc0)="147212433a530bc7504d9eb3e626098cea9f456d151be395c9221894b133ec107c8bc4a72b3237ab85e6e0d96b6ecd79ee357d3e559b0cba2dfc6c1e0f62c810ab7bcadf48646771d345d329b5c31ed87b10a89e0859a70f059281f968102b48113feff4b32e50a7f2417377130066b7b2f6d8fc66ef330aa84a2320a3ff6253530fb12f2bf3e38340af866ee58b4547b67d6c5b71b22fb60b9117cd0824f4fc14cfc7e3d6218759cce62c7bed", 0xad}, {&(0x7f0000002d80)="4d91cd9ff99913db4b04b021e55f55497a3ede59498aa619388205e4543f4e6912c2", 0x22}, {&(0x7f0000002dc0)="92bd6bb8a26836da1568df70f12d4088016d2ad742d01dc5040def8bd77b86e27320d00b156e2d8927e89218d36e53de72da83bd06e840aa314511f9e86a882a9994fbb8d2cad472f3c8b5a50b60c6de7b537d23f77206bed8fc997835edf8225300e29e3daefdd91f0935ed9763b17e6437ae504f88483dff95ac54a9ff63ac4733e51c2bf05cfc1fa5772abf016c0d5974de1dd620a74939106d470271aca27dbfeb07ac52a07d9ec729b0da5059210b3b01ae2cd69dca19b1ae64c2e613a3b744a6fb9f5ad1fc027f05a1e26821b2e361816a65ed728bf1cb5b953f6f3384c641b65d0b120de4cc02dc70f70ee9a325698e8958372f6bd28bae", 0xfb}, {&(0x7f0000002ec0)="0355fea561af7170aa215e03c1818c2c523b4e8b16912b8379a2c1e0f6ca7d4a6fec3c1066c4798c8a3680542a8ea632d6d28413b77a21b8d68edf48d0703b7cd22953f02f5feb4ea7b4b0215c69e9ad6fdc99917ecd1886dc93360a332a816f76627c3edc1ba9afdd2560df0163ba39dd9b187bf7", 0x75}], 0x7, &(0x7f0000002fc0)=[@txtime={{0x18, 0x1, 0x3d, 0x7ec}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}, 0x20000000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async, rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000003040)={r13, r17, 0x25, 0x1d, @void}, 0x10) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r13, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000003140)={&(0x7f00000030c0)={0x60, 0x1405, 0x200, 0x70bd2a, 0x25dfdbfd, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000003700)={0xc, 0xb, &(0x7f00000031c0)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xa937, 0x0, 0x0, 0x0, 0xf3ba}, @exit, @alu={0x4, 0x1, 0x4, 0x6, 0x7, 0xfffffffffffffff0, 0xfffffffffffffff0}, @exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x48}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}], &(0x7f0000003240)='GPL\x00', 0x8, 0xee, &(0x7f0000003280)=""/238, 0x41000, 0x20, '\x00', 0x0, @fallback=0x34, r13, 0x8, &(0x7f0000003380)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000033c0)={0x2, 0xa, 0x81, 0xd4}, 0x10, r18, 0xffffffffffffffff, 0x9, &(0x7f0000003600)=[r16], &(0x7f0000003640)=[{0x2, 0x3, 0x8, 0x2}, {0x5, 0x4, 0xa, 0xc}, {0x5, 0x4, 0xd, 0x4}, {0x1, 0x5, 0xd, 0x7}, {0x4, 0x5, 0x5, 0xb}, {0x0, 0x5, 0xb, 0xb}, {0x3, 0x3, 0xb, 0x4}, {0x1, 0x1, 0x5, 0x6}, {0x3, 0x3, 0xa}], 0x10, 0x1}, 0x94) 294.314982ms ago: executing program 3 (id=3780): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x18, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000000}, 0x50c0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000003e0007012dbd7000fcdbdf25047c000004006e001c0001800600"], 0x34}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1}, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r5, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0], 0x0, 0x0, 0xb3, &(0x7f0000000700), 0x0, 0x0, 0x0, &(0x7f0000000780), 0x8, 0xc3, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYRES8=r5], 0x0, 0x56, 0x0, 0x1, 0x8}, 0x28) sendmsg$tipc(r2, &(0x7f0000004780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x20000840) socket$kcm(0x2, 0x1, 0x84) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r7 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x11b, 0x2, &(0x7f0000000900)=r6, 0x4) 253.163722ms ago: executing program 4 (id=3781): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00030026000100010000000000000001000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0xc081}, 0x4000000) 98.972621ms ago: executing program 5 (id=3782): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x40, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @sk_msg}, 0x94) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000080), &(0x7f00000001c0)}, 0x20) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r5, @ANYBLOB], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 98.619119ms ago: executing program 4 (id=3783): socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000240)="27050200340f3c000600002fb96dbcf706060000170000005f45f491bdd54ec5ff1144ee162fd4b8bf7256da82f600102c21880b00000000010040570000000600000000000000805db18fc083", 0x4d}, {&(0x7f00000002c0)}, {&(0x7f0000001200)="d0", 0x1}], 0x3}, 0x9cdc2384056b48b8) 59.446748ms ago: executing program 1 (id=3784): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x3, 0x20, 0x0, 0x0, 0xffff, 0x8a410, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xe}, 0x8018, 0x0, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x800, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x1, @remote}, 0x80, 0x0, 0x0, 0x0, 0x28}, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x240488d0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000e200000000611118"], 0x0}, 0x94) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (fail_nth: 6) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffd}, 0x14}}, 0x0) 0s ago: executing program 4 (id=3785): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x6, @perf_bp={0x0, 0xb}, 0x105c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff7) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x168}, 0x1, 0x0, 0x0, 0x8800}, 0x20044000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0xc001000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000340)) fstat(r4, &(0x7f0000000440)) fstat(0xffffffffffffffff, &(0x7f0000000540)) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) kernel console output (not intermixed with test programs): syzkaller #0 PREEMPT(full) [ 492.438610][T14734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.438624][T14734] Call Trace: [ 492.438632][T14734] [ 492.438641][T14734] dump_stack_lvl+0x189/0x250 [ 492.438678][T14734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.438704][T14734] ? __pfx__printk+0x10/0x10 [ 492.438735][T14734] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 492.438762][T14734] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 492.438789][T14734] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 492.438817][T14734] warn_alloc+0x214/0x310 [ 492.438851][T14734] ? stack_depot_save_flags+0x40/0x860 [ 492.438883][T14734] ? __pfx_warn_alloc+0x10/0x10 [ 492.438917][T14734] ? kasan_save_track+0x4f/0x80 [ 492.438945][T14734] ? xskq_create+0x56/0x170 [ 492.438971][T14734] ? xsk_init_queue+0xb0/0x110 [ 492.438994][T14734] ? xsk_setsockopt+0x57b/0x8d0 [ 492.439016][T14734] ? do_sock_setsockopt+0x17c/0x1b0 [ 492.439047][T14734] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 492.439065][T14734] ? do_syscall_64+0xfa/0x3b0 [ 492.439093][T14734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.439124][T14734] __vmalloc_node_range_noprof+0x125/0x12f0 [ 492.439189][T14734] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 492.439229][T14734] ? __kasan_kmalloc+0x93/0xb0 [ 492.439261][T14734] vmalloc_user_noprof+0xad/0xf0 [ 492.439292][T14734] ? xskq_create+0xbf/0x170 [ 492.439320][T14734] xskq_create+0xbf/0x170 [ 492.439352][T14734] xsk_init_queue+0xb0/0x110 [ 492.439382][T14734] xsk_setsockopt+0x57b/0x8d0 [ 492.439417][T14734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 492.439460][T14734] ? __pfx_xsk_setsockopt+0x10/0x10 [ 492.439488][T14734] do_sock_setsockopt+0x17c/0x1b0 [ 492.439528][T14734] __x64_sys_setsockopt+0x13f/0x1b0 [ 492.439554][T14734] do_syscall_64+0xfa/0x3b0 [ 492.439586][T14734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.439605][T14734] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 492.439626][T14734] ? clear_bhb_loop+0x60/0xb0 [ 492.439651][T14734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.439671][T14734] RIP: 0033:0x7fa23838ebe9 [ 492.439691][T14734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.439708][T14734] RSP: 002b:00007fa239225038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 492.439730][T14734] RAX: ffffffffffffffda RBX: 00007fa2385b6090 RCX: 00007fa23838ebe9 [ 492.439744][T14734] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 492.439756][T14734] RBP: 00007fa238411e19 R08: 0000000000000004 R09: 0000000000000000 [ 492.439769][T14734] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 492.439781][T14734] R13: 00007fa2385b6128 R14: 00007fa2385b6090 R15: 00007ffc4cbad9f8 [ 492.439814][T14734] [ 492.439862][T14734] Mem-Info: [ 492.844043][T14734] active_anon:9365 inactive_anon:0 isolated_anon:0 [ 492.844043][T14734] active_file:21732 inactive_file:40002 isolated_file:0 [ 492.844043][T14734] unevictable:768 dirty:232 writeback:0 [ 492.844043][T14734] slab_reclaimable:11522 slab_unreclaimable:110408 [ 492.844043][T14734] mapped:31169 shmem:1356 pagetables:1114 [ 492.844043][T14734] sec_pagetables:0 bounce:0 [ 492.844043][T14734] kernel_misc_reclaimable:0 [ 492.844043][T14734] free:1294979 free_pcp:14933 free_cma:0 [ 492.897734][T14740] netlink: 'syz.4.2904': attribute type 10 has an invalid length. [ 492.901068][T14734] Node 0 active_anon:37460kB inactive_anon:0kB active_file:86928kB inactive_file:159808kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124676kB dirty:924kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12072kB pagetables:4316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 492.993325][T14734] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 492.999737][T14740] veth0_vlan: left promiscuous mode [ 493.040254][T14734] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 493.095500][T14740] veth0_vlan: entered promiscuous mode [ 493.107950][T14740] team0: Device veth0_vlan failed to register rx_handler [ 493.127197][T14734] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 493.133057][T14734] Node 0 DMA32 free:1283340kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37432kB inactive_anon:0kB active_file:86928kB inactive_file:158228kB unevictable:1536kB writepending:940kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:41696kB local_pcp:20640kB free_cma:0kB [ 493.174847][T14734] lowmem_reserve[]: 0 0 1 1 1 [ 493.181335][T14734] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 493.220741][T14734] lowmem_reserve[]: 0 0 0 0 0 [ 493.246227][T14734] Node 1 Normal free:3881172kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18368kB local_pcp:10080kB free_cma:0kB [ 493.313333][T14734] lowmem_reserve[]: 0 0 0 0 0 [ 493.323183][T14734] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 493.345466][T14734] Node 0 DMA32: 1329*4kB (M) 1023*8kB (M) 865*16kB (UM) 823*32kB (UME) 220*64kB (UME) 140*128kB (UM) 107*256kB (UME) 17*512kB (UM) 40*1024kB (UME) 9*2048kB (UM) 269*4096kB (UM) = 1282988kB [ 493.372937][T14734] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 493.389389][T14734] Node 1 Normal: 197*4kB (UME) 48*8kB (UME) 42*16kB (UME) 195*32kB (UME) 57*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 943*4096kB (M) = 3881172kB [ 493.436831][T14734] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.469876][T14734] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.506134][T14734] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 493.522765][T14734] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 493.533538][T14734] 63086 total pagecache pages [ 493.562456][T14734] 0 pages in swap cache [ 493.572597][T14734] Free swap = 124996kB [ 493.582745][T14734] Total swap = 124996kB [ 493.599175][T14734] 2097051 pages RAM [ 493.606784][T14734] 0 pages HighMem/MovableOnly [ 493.611528][T14734] 425654 pages reserved [ 493.615706][T14734] 0 pages cma reserved [ 493.674796][T14763] __nla_validate_parse: 1 callbacks suppressed [ 493.674843][T14763] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2911'. [ 494.175897][T14786] netlink: 182 bytes leftover after parsing attributes in process `syz.2.2918'. [ 494.829736][T14806] netlink: 'syz.4.2925': attribute type 10 has an invalid length. [ 494.879891][T14806] veth0_vlan: left promiscuous mode [ 494.911327][T14806] veth0_vlan: entered promiscuous mode [ 494.959469][T14806] team0: Device veth0_vlan failed to register rx_handler [ 495.262847][T14787] infiniband syz!: set active [ 495.300021][T14787] infiniband syz!: added team_slave_0 [ 495.315349][T14787] syz!: rxe_create_cq: returned err = -12 [ 495.328742][T14817] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2927'. [ 495.352438][T14787] infiniband syz!: Couldn't create ib_mad CQ [ 495.364818][T14787] infiniband syz!: Couldn't open port 1 [ 495.478466][T14787] RDS/IB: syz!: added [ 495.483268][T14787] smc: adding ib device syz! with port count 1 [ 495.529494][T14787] smc: ib device syz! port 1 has pnetid [ 495.545959][T14824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.564456][T14824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.584751][T14824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.597436][T14824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.621032][T14856] netlink: 'syz.2.2942': attribute type 14 has an invalid length. [ 496.762504][T14860] netlink: 'syz.2.2945': attribute type 126 has an invalid length. [ 496.921861][T14866] netlink: 'syz.3.2946': attribute type 126 has an invalid length. [ 497.004876][T14869] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.2950'. [ 497.548719][T14885] netlink: 'syz.1.2955': attribute type 4 has an invalid length. [ 497.576519][T14885] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2955'. [ 498.693295][T14910] netlink: 'syz.1.2966': attribute type 9 has an invalid length. [ 498.779301][T14910] netlink: 193548 bytes leftover after parsing attributes in process `syz.1.2966'. [ 498.794354][ T8507] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 498.804654][ T8507] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 498.812762][ T8507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 498.822265][ T8507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 498.837343][ T8507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.978864][T14916] lo speed is unknown, defaulting to 1000 [ 499.849091][T14937] delete_channel: no stack [ 499.865775][T14937] delete_channel: no stack [ 499.874930][T14937] delete_channel: no stack [ 499.909870][T14937] delete_channel: no stack [ 499.919181][T14937] delete_channel: no stack [ 499.925193][T14937] delete_channel: no stack [ 499.930884][T14937] delete_channel: no stack [ 499.935962][T14937] delete_channel: no stack [ 499.941052][T14937] delete_channel: no stack [ 499.946092][T14937] delete_channel: no stack [ 499.953219][T14937] delete_channel: no stack [ 499.960124][T14937] delete_channel: no stack [ 499.965032][T14937] delete_channel: no stack [ 499.971375][T14937] delete_channel: no stack [ 499.976273][T14937] delete_channel: no stack [ 500.048701][T14937] delete_channel: no stack [ 500.053457][T14937] delete_channel: no stack [ 500.077134][T14937] delete_channel: no stack [ 500.081864][T14937] delete_channel: no stack [ 500.117223][T14937] delete_channel: no stack [ 500.121925][T14937] delete_channel: no stack [ 500.165884][T14937] delete_channel: no stack [ 500.171208][T14937] delete_channel: no stack [ 500.182783][T14937] delete_channel: no stack [ 500.202088][T14937] delete_channel: no stack [ 500.212605][T14937] delete_channel: no stack [ 500.242650][T14937] delete_channel: no stack [ 500.270284][T14937] delete_channel: no stack [ 500.300026][T14937] delete_channel: no stack [ 500.304748][T14937] delete_channel: no stack [ 500.525800][T14916] chnl_net:caif_netlink_parms(): no params data found [ 500.907547][ T8507] Bluetooth: hci1: command tx timeout [ 501.517370][T14976] bridge0: port 3(team0) entered disabled state [ 501.748334][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.755074][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.682826][T14976] bridge_slave_1: left allmulticast mode [ 502.724803][T14976] bridge_slave_1: left promiscuous mode [ 502.742906][T14976] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.763223][T14976] bridge_slave_0: left allmulticast mode [ 502.771838][T14976] bridge_slave_0: left promiscuous mode [ 502.780358][T14976] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.977847][ T8507] Bluetooth: hci1: command tx timeout [ 502.989918][T14916] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.997260][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.004683][T14916] bridge_slave_0: entered allmulticast mode [ 503.012716][T14916] bridge_slave_0: entered promiscuous mode [ 503.029767][T14916] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.037822][T14916] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.045112][T14916] bridge_slave_1: entered allmulticast mode [ 503.053031][T14916] bridge_slave_1: entered promiscuous mode [ 503.163085][T14999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2991'. [ 503.180887][T14916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.194966][T14916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.133799][T14916] team0: Port device team_slave_0 added [ 504.163658][T14916] team0: Port device team_slave_1 added [ 504.267578][T15015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2994'. [ 504.379539][T14916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.438010][T14916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.496766][T14916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.529151][T14916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.536154][T14916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.589278][T14916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.630775][T15026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 504.638281][T15026] IPv6: NLM_F_CREATE should be set when creating new route [ 504.645849][T15026] IPv6: NLM_F_CREATE should be set when creating new route [ 504.653280][T15026] IPv6: NLM_F_CREATE should be set when creating new route [ 504.940428][T14916] hsr_slave_0: entered promiscuous mode [ 504.957113][T14916] hsr_slave_1: entered promiscuous mode [ 504.981546][T14916] debugfs: 'hsr0' already exists in 'hsr' [ 504.996280][T15041] netlink: 'syz.5.3005': attribute type 10 has an invalid length. [ 505.016896][T14916] Cannot create hsr debugfs directory [ 505.031686][T15041] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3005'. [ 505.053807][T15043] netlink: 'syz.4.3004': attribute type 126 has an invalid length. [ 505.061944][ T8507] Bluetooth: hci1: command tx timeout [ 505.150442][T15046] netdevsim netdevsim3 ªªªªªª: renamed from netdevsim0 [ 505.290743][T15050] smc: removing ib device syz! [ 505.449412][T14916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.783665][T14916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.101111][T14916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.580603][T14916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.142557][ T8507] Bluetooth: hci1: command tx timeout [ 507.306838][T14916] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 507.352616][T14916] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 507.422310][T15081] netlink: 'syz.1.3020': attribute type 10 has an invalid length. [ 507.431628][T14916] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 507.478889][T14916] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 507.589301][T15081] veth0_vlan: left promiscuous mode [ 507.595923][T15081] veth0_vlan: entered promiscuous mode [ 507.604051][T15081] team0: Device veth0_vlan failed to register rx_handler [ 507.920312][T14916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.012413][T14916] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.071289][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.078548][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.130725][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.138050][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.157940][T15098] netlink: 'syz.4.3023': attribute type 13 has an invalid length. [ 508.165840][T15098] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3023'. [ 508.214836][T15105] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3025'. [ 508.267600][T14916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 508.376845][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3026'. [ 508.401982][T15110] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3025'. [ 508.889654][T15123] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3029'. [ 509.051139][T14916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.170526][T14916] veth0_vlan: entered promiscuous mode [ 509.213829][T14916] veth1_vlan: entered promiscuous mode [ 509.302215][T14916] veth0_macvtap: entered promiscuous mode [ 509.330917][T14916] veth1_macvtap: entered promiscuous mode [ 509.381104][T14916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.428797][T14916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.503344][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.530386][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.576419][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.615248][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.897599][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.932272][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.957451][T15156] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3042'. [ 510.000402][T15146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.060660][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.069559][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.947747][T15176] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3048'. [ 511.158584][T15180] FAULT_INJECTION: forcing a failure. [ 511.158584][T15180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.206607][T15180] CPU: 0 UID: 0 PID: 15180 Comm: syz.1.3049 Not tainted syzkaller #0 PREEMPT(full) [ 511.206637][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 511.206651][T15180] Call Trace: [ 511.206660][T15180] [ 511.206669][T15180] dump_stack_lvl+0x189/0x250 [ 511.206699][T15180] ? __pfx____ratelimit+0x10/0x10 [ 511.206728][T15180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.206806][T15180] ? __pfx__printk+0x10/0x10 [ 511.206867][T15180] should_fail_ex+0x414/0x560 [ 511.206900][T15180] _copy_to_user+0x31/0xb0 [ 511.206925][T15180] simple_read_from_buffer+0xe1/0x170 [ 511.206959][T15180] proc_fail_nth_read+0x1b3/0x220 [ 511.206986][T15180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.207012][T15180] ? rw_verify_area+0x2a6/0x4d0 [ 511.207043][T15180] ? __lock_acquire+0xab9/0xd20 [ 511.207091][T15180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 511.207118][T15180] vfs_read+0x200/0xa30 [ 511.207143][T15180] ? fdget_pos+0x247/0x320 [ 511.207181][T15180] ? __pfx___mutex_lock+0x10/0x10 [ 511.207211][T15180] ? __pfx_vfs_read+0x10/0x10 [ 511.207239][T15180] ? __fget_files+0x2a/0x420 [ 511.207262][T15180] ? __fget_files+0x3a0/0x420 [ 511.207279][T15180] ? __fget_files+0x2a/0x420 [ 511.207307][T15180] ksys_read+0x145/0x250 [ 511.207354][T15180] ? __pfx_ksys_read+0x10/0x10 [ 511.207379][T15180] ? rcu_is_watching+0x15/0xb0 [ 511.207406][T15180] ? do_syscall_64+0xbe/0x3b0 [ 511.207440][T15180] do_syscall_64+0xfa/0x3b0 [ 511.207468][T15180] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.207496][T15180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.207516][T15180] ? clear_bhb_loop+0x60/0xb0 [ 511.207542][T15180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.207562][T15180] RIP: 0033:0x7fa23838d5fc [ 511.207582][T15180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 511.207600][T15180] RSP: 002b:00007fa239225030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 511.207622][T15180] RAX: ffffffffffffffda RBX: 00007fa2385b6090 RCX: 00007fa23838d5fc [ 511.207637][T15180] RDX: 000000000000000f RSI: 00007fa2392250a0 RDI: 0000000000000011 [ 511.207650][T15180] RBP: 00007fa239225090 R08: 0000000000000000 R09: 0000000000000000 [ 511.207662][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.207674][T15180] R13: 00007fa2385b6128 R14: 00007fa2385b6090 R15: 00007ffc4cbad9f8 [ 511.207709][T15180] [ 511.595236][T15187] netlink: 'syz.2.3053': attribute type 21 has an invalid length. [ 511.621278][T15187] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3053'. [ 511.665147][T15189] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3052'. [ 511.696147][T15187] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3053'. [ 511.741195][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 511.750674][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 511.760535][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 511.792247][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 511.813263][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 511.858615][T15193] lo speed is unknown, defaulting to 1000 [ 511.909746][T15198] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3057'. [ 511.919925][T15199] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3057'. [ 512.283674][T15209] netlink: 'syz.5.3059': attribute type 126 has an invalid length. [ 512.360934][T15193] chnl_net:caif_netlink_parms(): no params data found [ 512.689860][T15193] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.701143][T15193] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.709413][T15193] bridge_slave_0: entered allmulticast mode [ 512.721176][T15193] bridge_slave_0: entered promiscuous mode [ 512.734128][T15193] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.744197][T15193] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.751764][T15193] bridge_slave_1: entered allmulticast mode [ 512.760366][T15193] bridge_slave_1: entered promiscuous mode [ 513.155960][T15193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.172901][T15193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.274612][T15193] team0: Port device team_slave_0 added [ 513.302726][T15193] team0: Port device team_slave_1 added [ 513.457810][T15240] netlink: 'syz.4.3069': attribute type 126 has an invalid length. [ 513.503047][T15193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.522365][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.567234][T15193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.580973][T15193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.593937][T15193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.624254][T15193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.679408][T15246] syz.5.3072: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 513.706432][T15246] CPU: 1 UID: 0 PID: 15246 Comm: syz.5.3072 Not tainted syzkaller #0 PREEMPT(full) [ 513.706464][T15246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 513.706478][T15246] Call Trace: [ 513.706486][T15246] [ 513.706496][T15246] dump_stack_lvl+0x189/0x250 [ 513.706528][T15246] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.706559][T15246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.706595][T15246] ? dump_stack+0x9/0x20 [ 513.706627][T15246] warn_alloc+0x214/0x310 [ 513.706663][T15246] ? stack_depot_save_flags+0x40/0x860 [ 513.706695][T15246] ? __pfx_warn_alloc+0x10/0x10 [ 513.706731][T15246] ? kasan_save_track+0x4f/0x80 [ 513.706760][T15246] ? xskq_create+0x56/0x170 [ 513.706786][T15246] ? xsk_init_queue+0xb0/0x110 [ 513.706818][T15246] ? xsk_setsockopt+0x57b/0x8d0 [ 513.706842][T15246] ? do_sock_setsockopt+0x17c/0x1b0 [ 513.706875][T15246] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 513.706893][T15246] ? do_syscall_64+0xfa/0x3b0 [ 513.706922][T15246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.706953][T15246] __vmalloc_node_range_noprof+0x125/0x12f0 [ 513.707022][T15246] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 513.707063][T15246] ? __kasan_kmalloc+0x93/0xb0 [ 513.707096][T15246] vmalloc_user_noprof+0xad/0xf0 [ 513.707128][T15246] ? xskq_create+0xbf/0x170 [ 513.707157][T15246] xskq_create+0xbf/0x170 [ 513.707189][T15246] xsk_init_queue+0xb0/0x110 [ 513.707221][T15246] xsk_setsockopt+0x57b/0x8d0 [ 513.707244][T15246] ? lockdep_hardirqs_on+0x9c/0x150 [ 513.707275][T15246] ? __pfx_xsk_setsockopt+0x10/0x10 [ 513.707309][T15246] ? security_socket_setsockopt+0x5b/0x2c0 [ 513.707338][T15246] ? __sanitizer_cov_trace_pc+0x3c/0x70 [ 513.707368][T15246] ? __pfx_xsk_setsockopt+0x10/0x10 [ 513.707396][T15246] do_sock_setsockopt+0x17c/0x1b0 [ 513.707436][T15246] __x64_sys_setsockopt+0x13f/0x1b0 [ 513.707463][T15246] do_syscall_64+0xfa/0x3b0 [ 513.707523][T15246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.707542][T15246] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 513.707563][T15246] ? clear_bhb_loop+0x60/0xb0 [ 513.707589][T15246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.707609][T15246] RIP: 0033:0x7f933278ebe9 [ 513.707629][T15246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.707648][T15246] RSP: 002b:00007f933361b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 513.707669][T15246] RAX: ffffffffffffffda RBX: 00007f93329b6090 RCX: 00007f933278ebe9 [ 513.707685][T15246] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 513.707697][T15246] RBP: 00007f9332811e19 R08: 0000000000000004 R09: 0000000000000000 [ 513.707711][T15246] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 513.707724][T15246] R13: 00007f93329b6128 R14: 00007f93329b6090 R15: 00007ffe05eca398 [ 513.707768][T15246] [ 514.004323][ T5863] Bluetooth: hci2: command tx timeout [ 514.018348][ T5863] Bluetooth: hci5: command 0x0406 tx timeout [ 514.046757][T15246] Mem-Info: [ 514.050272][T15246] active_anon:9314 inactive_anon:0 isolated_anon:0 [ 514.050272][T15246] active_file:21732 inactive_file:40013 isolated_file:0 [ 514.050272][T15246] unevictable:768 dirty:419 writeback:0 [ 514.050272][T15246] slab_reclaimable:11887 slab_unreclaimable:113680 [ 514.050272][T15246] mapped:30113 shmem:1356 pagetables:1114 [ 514.050272][T15246] sec_pagetables:0 bounce:0 [ 514.050272][T15246] kernel_misc_reclaimable:0 [ 514.050272][T15246] free:1286743 free_pcp:20944 free_cma:0 [ 514.120310][T15246] Node 0 active_anon:37272kB inactive_anon:0kB active_file:86928kB inactive_file:159852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120424kB dirty:1680kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12208kB pagetables:4444kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 514.153738][T15246] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 514.242244][T15246] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 514.276708][T15246] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 514.283105][T15246] Node 0 DMA32 free:1257340kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37128kB inactive_anon:0kB active_file:86928kB inactive_file:158272kB unevictable:1536kB writepending:1676kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:58196kB local_pcp:29124kB free_cma:0kB [ 514.328061][T15246] lowmem_reserve[]: 0 0 1 1 1 [ 514.333567][T15246] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 514.372452][T15246] lowmem_reserve[]: 0 0 0 0 0 [ 514.380201][T15193] hsr_slave_0: entered promiscuous mode [ 514.387495][T15193] hsr_slave_1: entered promiscuous mode [ 514.394101][T15193] debugfs: 'hsr0' already exists in 'hsr' [ 514.400078][T15193] Cannot create hsr debugfs directory [ 514.405860][T15246] Node 1 Normal free:3881172kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18400kB local_pcp:8288kB free_cma:0kB [ 514.457442][T15246] lowmem_reserve[]: 0 0 0 0 0 [ 514.462323][T15246] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 514.475256][T15246] Node 0 DMA32: 1647*4kB (UME) 1128*8kB (UME) 825*16kB (UME) 448*32kB (UM) 127*64kB (UME) 141*128kB (UME) 129*256kB (UME) 40*512kB (UME) 28*1024kB (UM) 4*2048kB (UM) 268*4096kB (UM) = 1257420kB [ 514.574672][T15246] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 514.600625][T15246] Node 1 Normal: 197*4kB (UME) 48*8kB (UME) 42*16kB (UME) 195*32kB (UME) 57*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 943*4096kB (M) = 3881172kB [ 514.623046][T15246] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.635918][T15246] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 514.648413][T15246] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 514.665807][T15246] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 514.676793][T15246] 63097 total pagecache pages [ 514.681657][T15246] 0 pages in swap cache [ 514.710617][T15246] Free swap = 124996kB [ 514.714868][T15246] Total swap = 124996kB [ 514.740092][T15246] 2097051 pages RAM [ 514.744069][T15246] 0 pages HighMem/MovableOnly [ 514.755536][T15259] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3079'. [ 514.755821][T15246] 425654 pages reserved [ 514.786715][T15246] 0 pages cma reserved [ 514.824794][T15259] team0: entered promiscuous mode [ 514.837438][T15259] team_slave_0: entered promiscuous mode [ 514.843348][T15259] team_slave_1: entered promiscuous mode [ 514.851694][T15259] team0: entered allmulticast mode [ 514.861028][T15259] team_slave_0: entered allmulticast mode [ 514.868105][T15259] team_slave_1: entered allmulticast mode [ 514.875527][T15263] netlink: 'syz.1.3081': attribute type 10 has an invalid length. [ 514.942300][T15263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3081'. [ 515.965789][T15193] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.000961][T15295] netlink: 212940 bytes leftover after parsing attributes in process `syz.5.3091'. [ 516.027341][ T8507] Bluetooth: hci2: command tx timeout [ 516.115037][T15193] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.330267][T15308] netlink: 'syz.4.3096': attribute type 2 has an invalid length. [ 516.343050][T15193] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.359300][T15308] netlink: 137592 bytes leftover after parsing attributes in process `syz.4.3096'. [ 516.489569][T15193] bond0: (slave ªªªªªª): Releasing backup interface [ 516.517769][T15193] netdevsim netdevsim3 ªªªªªª (unregistering): left promiscuous mode [ 516.526282][T15193] netdevsim netdevsim3 ªªªªªª (unregistering): left allmulticast mode [ 516.543443][T15193] netdevsim netdevsim3 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.573605][T15314] debugfs: '!' already exists in 'ieee80211' [ 516.808736][T15193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 516.839167][T15193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 516.857545][T15193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 516.886017][T15193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 517.209020][T15193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.295381][T15347] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3109'. [ 517.313781][T15193] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.348578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.355833][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.400004][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.407245][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.628888][T15355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.642839][T15355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.703970][T15355] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.801494][T15355] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.096739][ T8507] Bluetooth: hci2: command tx timeout [ 518.595345][T15383] netlink: 'syz.5.3121': attribute type 21 has an invalid length. [ 518.631834][T15383] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3121'. [ 518.661512][T15383] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3121'. [ 518.771734][T15193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.905546][T15193] veth0_vlan: entered promiscuous mode [ 518.936780][T15193] veth1_vlan: entered promiscuous mode [ 519.078424][T15193] veth0_macvtap: entered promiscuous mode [ 519.091377][T15193] veth1_macvtap: entered promiscuous mode [ 519.121060][T15193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.222121][T15193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.380308][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.412950][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.433463][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.493769][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.609012][T15405] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3129'. [ 519.630331][T15407] FAULT_INJECTION: forcing a failure. [ 519.630331][T15407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.669624][T15407] CPU: 0 UID: 0 PID: 15407 Comm: syz.5.3130 Not tainted syzkaller #0 PREEMPT(full) [ 519.669654][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 519.669668][T15407] Call Trace: [ 519.669676][T15407] [ 519.669685][T15407] dump_stack_lvl+0x189/0x250 [ 519.669717][T15407] ? __pfx____ratelimit+0x10/0x10 [ 519.669746][T15407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.669772][T15407] ? __pfx__printk+0x10/0x10 [ 519.669801][T15407] ? __might_fault+0xb0/0x130 [ 519.669846][T15407] should_fail_ex+0x414/0x560 [ 519.669880][T15407] _copy_from_user+0x2d/0xb0 [ 519.669905][T15407] ___sys_sendmsg+0x158/0x2a0 [ 519.669931][T15407] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.669996][T15407] ? __fget_files+0x2a/0x420 [ 519.670015][T15407] ? __fget_files+0x3a0/0x420 [ 519.670046][T15407] __x64_sys_sendmsg+0x19b/0x260 [ 519.670071][T15407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.670105][T15407] ? __pfx_ksys_write+0x10/0x10 [ 519.670130][T15407] ? rcu_is_watching+0x15/0xb0 [ 519.670156][T15407] ? do_syscall_64+0xbe/0x3b0 [ 519.670190][T15407] do_syscall_64+0xfa/0x3b0 [ 519.670218][T15407] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.670246][T15407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.670266][T15407] ? clear_bhb_loop+0x60/0xb0 [ 519.670292][T15407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.670312][T15407] RIP: 0033:0x7f933278ebe9 [ 519.670331][T15407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.670348][T15407] RSP: 002b:00007f933363c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.670369][T15407] RAX: ffffffffffffffda RBX: 00007f93329b5fa0 RCX: 00007f933278ebe9 [ 519.670392][T15407] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 519.670406][T15407] RBP: 00007f933363c090 R08: 0000000000000000 R09: 0000000000000000 [ 519.670419][T15407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.670430][T15407] R13: 00007f93329b6038 R14: 00007f93329b5fa0 R15: 00007ffe05eca398 [ 519.670464][T15407] [ 519.921404][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.929327][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.055768][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.102946][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.192992][ T8507] Bluetooth: hci2: command tx timeout [ 520.857986][T15433] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3136'. [ 521.213760][T15446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.231324][T15446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.254026][T15446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.396803][T15446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.416186][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.439734][T15465] netlink: 'syz.2.3148': attribute type 11 has an invalid length. [ 522.447981][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.467807][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.485552][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.528605][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 522.541640][T15462] netlink: 'syz.5.3147': attribute type 126 has an invalid length. [ 522.662965][T15471] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 522.672934][T15460] lo speed is unknown, defaulting to 1000 [ 522.853757][T15475] FAULT_INJECTION: forcing a failure. [ 522.853757][T15475] name failslab, interval 1, probability 0, space 0, times 0 [ 522.876614][T15475] CPU: 1 UID: 0 PID: 15475 Comm: syz.4.3152 Not tainted syzkaller #0 PREEMPT(full) [ 522.876644][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 522.876658][T15475] Call Trace: [ 522.876667][T15475] [ 522.876677][T15475] dump_stack_lvl+0x189/0x250 [ 522.876708][T15475] ? __pfx____ratelimit+0x10/0x10 [ 522.876737][T15475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 522.876763][T15475] ? __pfx__printk+0x10/0x10 [ 522.876799][T15475] ? __pfx___might_resched+0x10/0x10 [ 522.876818][T15475] ? fs_reclaim_acquire+0x7d/0x100 [ 522.876857][T15475] should_fail_ex+0x414/0x560 [ 522.876890][T15475] should_failslab+0xa8/0x100 [ 522.876923][T15475] __kmalloc_noprof+0xcb/0x4f0 [ 522.876952][T15475] ? bpf_test_init+0xc2/0x170 [ 522.876985][T15475] bpf_test_init+0xc2/0x170 [ 522.877018][T15475] bpf_prog_test_run_xdp+0x37c/0x1000 [ 522.877068][T15475] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 522.877104][T15475] ? __fget_files+0x2a/0x420 [ 522.877129][T15475] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 522.877173][T15475] bpf_prog_test_run+0x2c4/0x340 [ 522.877208][T15475] __sys_bpf+0x581/0x870 [ 522.877238][T15475] ? __pfx___sys_bpf+0x10/0x10 [ 522.877298][T15475] __x64_sys_bpf+0x7c/0x90 [ 522.877323][T15475] do_syscall_64+0xfa/0x3b0 [ 522.877355][T15475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.877375][T15475] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 522.877395][T15475] ? clear_bhb_loop+0x60/0xb0 [ 522.877421][T15475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.877440][T15475] RIP: 0033:0x7f0efa78ebe9 [ 522.877460][T15475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.877477][T15475] RSP: 002b:00007f0efb52d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 522.877499][T15475] RAX: ffffffffffffffda RBX: 00007f0efa9b5fa0 RCX: 00007f0efa78ebe9 [ 522.877515][T15475] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 522.877528][T15475] RBP: 00007f0efb52d090 R08: 0000000000000000 R09: 0000000000000000 [ 522.877540][T15475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.877552][T15475] R13: 00007f0efa9b6038 R14: 00007f0efa9b5fa0 R15: 00007ffd395d9c38 [ 522.877585][T15475] [ 523.420826][T15460] chnl_net:caif_netlink_parms(): no params data found [ 524.281263][T15460] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.307523][T15460] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.324576][T15460] bridge_slave_0: entered allmulticast mode [ 524.332710][T15460] bridge_slave_0: entered promiscuous mode [ 524.341854][T15460] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.349323][T15460] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.357884][T15460] bridge_slave_1: entered allmulticast mode [ 524.365976][T15460] bridge_slave_1: entered promiscuous mode [ 524.542518][T15511] wg2: entered promiscuous mode [ 524.555487][T15511] wg2: entered allmulticast mode [ 524.577280][ T8507] Bluetooth: hci3: command tx timeout [ 524.594948][T15460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.632964][T15460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.645629][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3165'. [ 524.665958][T15519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3165'. [ 524.686311][T15521] netlink: 'syz.2.3166': attribute type 21 has an invalid length. [ 524.694742][T15521] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3166'. [ 524.717642][T15521] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3166'. [ 524.736246][T15519] netlink: 'syz.4.3165': attribute type 22 has an invalid length. [ 524.746927][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3165'. [ 524.857191][T15460] team0: Port device team_slave_0 added [ 524.879017][T15460] team0: Port device team_slave_1 added [ 525.012824][T15460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.027039][T15460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.060640][T15460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.072122][T15532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3169'. [ 525.124136][T15460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.139488][T15460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.177174][T15460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.191434][T15536] netlink: 14212 bytes leftover after parsing attributes in process `syz.3.3170'. [ 525.535510][T15551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3176'. [ 525.581470][T15460] hsr_slave_0: entered promiscuous mode [ 525.602817][T15460] hsr_slave_1: entered promiscuous mode [ 525.611654][T15460] debugfs: 'hsr0' already exists in 'hsr' [ 525.629794][T15460] Cannot create hsr debugfs directory [ 526.471010][T15583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3184'. [ 526.594810][T15563] syzkaller0: entered promiscuous mode [ 526.608111][T15563] syzkaller0: entered allmulticast mode [ 526.619620][T15588] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3188'. [ 526.656727][ T8507] Bluetooth: hci3: command tx timeout [ 526.727875][T15460] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.819568][T15593] netlink: 'syz.5.3191': attribute type 10 has an invalid length. [ 526.942314][T15460] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.487344][T15618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.736590][ T8507] Bluetooth: hci3: command tx timeout [ 528.923856][T15460] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.971070][T15617] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 529.058808][T15622] FAULT_INJECTION: forcing a failure. [ 529.058808][T15622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.076944][T15622] CPU: 1 UID: 0 PID: 15622 Comm: syz.2.3201 Not tainted syzkaller #0 PREEMPT(full) [ 529.076974][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 529.076986][T15622] Call Trace: [ 529.076994][T15622] [ 529.077003][T15622] dump_stack_lvl+0x189/0x250 [ 529.077033][T15622] ? __pfx____ratelimit+0x10/0x10 [ 529.077061][T15622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.077085][T15622] ? __pfx__printk+0x10/0x10 [ 529.077112][T15622] ? __might_fault+0xb0/0x130 [ 529.077151][T15622] should_fail_ex+0x414/0x560 [ 529.077180][T15622] _copy_from_user+0x2d/0xb0 [ 529.077203][T15622] ___sys_sendmsg+0x158/0x2a0 [ 529.077226][T15622] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.077283][T15622] ? __fget_files+0x2a/0x420 [ 529.077299][T15622] ? __fget_files+0x3a0/0x420 [ 529.077326][T15622] __x64_sys_sendmsg+0x19b/0x260 [ 529.077349][T15622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.077379][T15622] ? __pfx_ksys_write+0x10/0x10 [ 529.077402][T15622] ? rcu_is_watching+0x15/0xb0 [ 529.077437][T15622] ? do_syscall_64+0xbe/0x3b0 [ 529.077488][T15622] do_syscall_64+0xfa/0x3b0 [ 529.077514][T15622] ? lockdep_hardirqs_on+0x9c/0x150 [ 529.077540][T15622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.077560][T15622] ? clear_bhb_loop+0x60/0xb0 [ 529.077585][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.077604][T15622] RIP: 0033:0x7f77dc78ebe9 [ 529.077622][T15622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.077640][T15622] RSP: 002b:00007f77dd651038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.077661][T15622] RAX: ffffffffffffffda RBX: 00007f77dc9b5fa0 RCX: 00007f77dc78ebe9 [ 529.077676][T15622] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 529.077688][T15622] RBP: 00007f77dd651090 R08: 0000000000000000 R09: 0000000000000000 [ 529.077700][T15622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.077711][T15622] R13: 00007f77dc9b6038 R14: 00007f77dc9b5fa0 R15: 00007ffd88f47de8 [ 529.077742][T15622] [ 529.336341][T15460] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.465788][ T3472] bridge0: port 3(team0) entered disabled state [ 529.479865][ T3472] bridge_slave_1: left allmulticast mode [ 529.485564][ T3472] bridge_slave_1: left promiscuous mode [ 529.506836][ T3472] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.554089][ T3472] bridge_slave_0: left allmulticast mode [ 529.569906][ T3472] bridge_slave_0: left promiscuous mode [ 529.581060][ T3472] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.141357][ T3472] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.152237][ T3472] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.163015][ T3472] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 530.174079][ T3472] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 530.186123][ T3472] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 530.198201][ T3472] bond0 (unregistering): Released all slaves [ 530.218104][T15643] netlink: 'syz.4.3209': attribute type 29 has an invalid length. [ 530.300223][ T3472] : left promiscuous mode [ 530.382378][T15460] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 530.409932][T15460] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 530.438862][T15460] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 530.559919][T15460] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 530.818962][ T8507] Bluetooth: hci3: command tx timeout [ 532.012438][T15460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.058870][ T3472] hsr_slave_0: left promiscuous mode [ 532.067606][ T3472] hsr_slave_1: left promiscuous mode [ 532.095882][ T3472] veth1_macvtap: left allmulticast mode [ 532.113074][ T3472] veth1_macvtap: left promiscuous mode [ 532.169475][ T3472] veth0_macvtap: left promiscuous mode [ 532.881203][ T3472] team_slave_1 (unregistering): left promiscuous mode [ 532.888389][ T3472] team_slave_1 (unregistering): left allmulticast mode [ 532.896287][ T3472] team0 (unregistering): Port device team_slave_1 removed [ 532.937990][ T3472] C (unregistering): left promiscuous mode [ 532.943894][ T3472] C (unregistering): left allmulticast mode [ 532.951135][ T3472] team0 (unregistering): Port device C removed [ 533.393708][T15460] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.443366][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.450647][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.482851][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.490147][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.504266][T15709] netlink: 'syz.5.3230': attribute type 21 has an invalid length. [ 533.524626][T15709] __nla_validate_parse: 2 callbacks suppressed [ 533.524663][T15709] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3230'. [ 533.550282][T15709] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3230'. [ 533.754050][T15716] warn_alloc: 2 callbacks suppressed [ 533.754071][T15716] syz.4.3231: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 533.906279][T15716] CPU: 1 UID: 0 PID: 15716 Comm: syz.4.3231 Not tainted syzkaller #0 PREEMPT(full) [ 533.906320][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 533.906334][T15716] Call Trace: [ 533.906343][T15716] [ 533.906352][T15716] dump_stack_lvl+0x189/0x250 [ 533.906388][T15716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.906415][T15716] ? __pfx__printk+0x10/0x10 [ 533.906449][T15716] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 533.906475][T15716] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 533.906502][T15716] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 533.906531][T15716] warn_alloc+0x214/0x310 [ 533.906566][T15716] ? stack_depot_save_flags+0x40/0x860 [ 533.906598][T15716] ? __pfx_warn_alloc+0x10/0x10 [ 533.906634][T15716] ? kasan_save_track+0x4f/0x80 [ 533.906661][T15716] ? xskq_create+0x56/0x170 [ 533.906687][T15716] ? xsk_init_queue+0xb0/0x110 [ 533.906711][T15716] ? xsk_setsockopt+0x57b/0x8d0 [ 533.906734][T15716] ? do_sock_setsockopt+0x17c/0x1b0 [ 533.906765][T15716] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 533.906783][T15716] ? do_syscall_64+0xfa/0x3b0 [ 533.906823][T15716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.906852][T15716] __vmalloc_node_range_noprof+0x125/0x12f0 [ 533.906918][T15716] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 533.906956][T15716] ? __kasan_kmalloc+0x93/0xb0 [ 533.907006][T15716] vmalloc_user_noprof+0xad/0xf0 [ 533.907038][T15716] ? xskq_create+0xbf/0x170 [ 533.907066][T15716] xskq_create+0xbf/0x170 [ 533.907097][T15716] xsk_init_queue+0xb0/0x110 [ 533.907127][T15716] xsk_setsockopt+0x57b/0x8d0 [ 533.907157][T15716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 533.907182][T15716] ? __pfx_aa_sk_perm+0x10/0x10 [ 533.907217][T15716] ? __fget_files+0x2a/0x420 [ 533.907233][T15716] ? aa_sock_opt_perm+0xff/0x1b0 [ 533.907257][T15716] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 533.907280][T15716] ? __pfx_xsk_setsockopt+0x10/0x10 [ 533.907314][T15716] do_sock_setsockopt+0x17c/0x1b0 [ 533.907354][T15716] __x64_sys_setsockopt+0x13f/0x1b0 [ 533.907382][T15716] do_syscall_64+0xfa/0x3b0 [ 533.907411][T15716] ? lockdep_hardirqs_on+0x9c/0x150 [ 533.907440][T15716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.907462][T15716] ? clear_bhb_loop+0x60/0xb0 [ 533.907488][T15716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.907521][T15716] RIP: 0033:0x7f0efa78ebe9 [ 533.907539][T15716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.907557][T15716] RSP: 002b:00007f0ef89f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 533.907580][T15716] RAX: ffffffffffffffda RBX: 00007f0efa9b6090 RCX: 00007f0efa78ebe9 [ 533.907596][T15716] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 533.907608][T15716] RBP: 00007f0efa811e19 R08: 0000000000000004 R09: 0000000000000000 [ 533.907621][T15716] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 533.907635][T15716] R13: 00007f0efa9b6128 R14: 00007f0efa9b6090 R15: 00007ffd395d9c38 [ 533.907670][T15716] [ 534.225000][T15460] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.235599][T15460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.651474][T15727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3229'. [ 534.763487][T15716] Mem-Info: [ 534.766887][T15716] active_anon:9335 inactive_anon:0 isolated_anon:0 [ 534.766887][T15716] active_file:21732 inactive_file:40023 isolated_file:0 [ 534.766887][T15716] unevictable:768 dirty:167 writeback:0 [ 534.766887][T15716] slab_reclaimable:12185 slab_unreclaimable:115466 [ 534.766887][T15716] mapped:35243 shmem:1356 pagetables:1118 [ 534.766887][T15716] sec_pagetables:0 bounce:0 [ 534.766887][T15716] kernel_misc_reclaimable:0 [ 534.766887][T15716] free:1289809 free_pcp:14718 free_cma:0 [ 534.790208][T15725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3234'. [ 534.852544][T15725] netlink: 'syz.5.3234': attribute type 2 has an invalid length. [ 534.985810][T15716] Node 0 active_anon:37440kB inactive_anon:0kB active_file:86928kB inactive_file:159892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141072kB dirty:664kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12624kB pagetables:4332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 535.677162][T15712] mac80211_hwsim hwsim37 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 536.105571][T15716] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 536.138868][T15716] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 536.234634][T15716] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 536.247159][T15716] Node 0 DMA32 free:1262664kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37312kB inactive_anon:0kB active_file:86928kB inactive_file:158312kB unevictable:1536kB writepending:776kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:41832kB local_pcp:21088kB free_cma:0kB [ 536.340586][T15716] lowmem_reserve[]: 0 0 1 1 1 [ 536.345428][T15716] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 536.426564][T15716] lowmem_reserve[]: 0 0 0 0 0 [ 536.453486][T15716] Node 1 Normal free:3881684kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17888kB local_pcp:8032kB free_cma:0kB [ 536.507919][T15716] lowmem_reserve[]: 0 0 0 0 0 [ 536.512729][T15716] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 536.526824][T15716] Node 0 DMA32: 1250*4kB (UME) 816*8kB (UME) 839*16kB (UME) 804*32kB (UM) 253*64kB (UME) 154*128kB (UM) 107*256kB (ME) 27*512kB (UM) 29*1024kB (UM) 4*2048kB (UM) 268*4096kB (UM) = 1263416kB [ 536.561844][T15460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.608210][T15716] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 536.621177][T15716] Node 1 Normal: 197*4kB (UME) 48*8kB (UME) 42*16kB (UME) 205*32kB (UME) 60*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 943*4096kB (M) = 3881684kB [ 536.655714][T15716] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.679768][T15460] veth0_vlan: entered promiscuous mode [ 536.695490][T15716] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.707308][T15716] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 536.717252][T15716] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 536.727643][T15716] 63108 total pagecache pages [ 536.732358][T15716] 0 pages in swap cache [ 536.737873][T15716] Free swap = 124996kB [ 536.770006][T15716] Total swap = 124996kB [ 536.776062][T15716] 2097051 pages RAM [ 536.783113][T15716] 0 pages HighMem/MovableOnly [ 536.794298][T15716] 425654 pages reserved [ 536.799601][T15716] 0 pages cma reserved [ 537.275049][T15460] veth1_vlan: entered promiscuous mode [ 537.403993][T15460] veth0_macvtap: entered promiscuous mode [ 537.419815][T15460] veth1_macvtap: entered promiscuous mode [ 537.471746][T15460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.579752][T15764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3242'. [ 537.594066][T15460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.761200][ T6117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.811769][ T6117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.822098][ T6117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.832834][ T6117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.333489][T15769] netlink: 96 bytes leftover after parsing attributes in process `syz.5.3246'. [ 538.628387][T15784] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.630848][T15785] netlink: 'syz.5.3250': attribute type 126 has an invalid length. [ 538.752801][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.789137][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.019214][T15796] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3251'. [ 539.034491][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.074410][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.214023][T15792] netlink: 'syz.4.3252': attribute type 4 has an invalid length. [ 539.298767][T15795] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3252'. [ 539.673574][T15805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.692661][T15805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.853259][T15805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.883734][T15805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.166253][T15817] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.3257'. [ 540.831577][T15822] netlink: 'syz.5.3260': attribute type 126 has an invalid length. [ 541.081960][T15829] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.3262'. [ 541.244660][T15834] netlink: 'syz.2.3264': attribute type 10 has an invalid length. [ 541.261947][T15838] netlink: 'syz.4.3267': attribute type 10 has an invalid length. [ 541.262337][T15838] veth0_vlan: left promiscuous mode [ 541.263854][T15838] veth0_vlan: entered promiscuous mode [ 541.267037][T15838] team0: Device veth0_vlan failed to register rx_handler [ 541.509076][T15834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.582149][T15834] team0: Port device bond0 added [ 541.789833][T15836] lo speed is unknown, defaulting to 1000 [ 541.849623][T15852] netlink: 'syz.3.3269': attribute type 21 has an invalid length. [ 541.858042][T15852] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3269'. [ 541.877613][T15852] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3269'. [ 542.263882][T15861] netlink: 'syz.2.3273': attribute type 126 has an invalid length. [ 542.429887][T15858] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3272'. [ 542.680494][T15877] FAULT_INJECTION: forcing a failure. [ 542.680494][T15877] name failslab, interval 1, probability 0, space 0, times 0 [ 542.694560][T15877] CPU: 1 UID: 0 PID: 15877 Comm: syz.2.3276 Not tainted syzkaller #0 PREEMPT(full) [ 542.694594][T15877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.694606][T15877] Call Trace: [ 542.694614][T15877] [ 542.694622][T15877] dump_stack_lvl+0x189/0x250 [ 542.694652][T15877] ? __pfx____ratelimit+0x10/0x10 [ 542.694680][T15877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 542.694704][T15877] ? __pfx__printk+0x10/0x10 [ 542.694745][T15877] ? __pfx___might_resched+0x10/0x10 [ 542.694770][T15877] should_fail_ex+0x414/0x560 [ 542.694802][T15877] should_failslab+0xa8/0x100 [ 542.694832][T15877] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 542.694862][T15877] ? __alloc_skb+0x112/0x2d0 [ 542.694888][T15877] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 542.694923][T15877] __alloc_skb+0x112/0x2d0 [ 542.694957][T15877] pfkey_sendmsg+0x1dd/0x1090 [ 542.694994][T15877] ? __pfx___might_resched+0x10/0x10 [ 542.695011][T15877] ? __lock_acquire+0xab9/0xd20 [ 542.695046][T15877] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 542.695084][T15877] ? aa_sk_perm+0x81e/0x950 [ 542.695118][T15877] ? __pfx_aa_sk_perm+0x10/0x10 [ 542.695144][T15877] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 542.695171][T15877] ? aa_sock_msg_perm+0xf1/0x1d0 [ 542.695204][T15877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 542.695226][T15877] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 542.695256][T15877] __sock_sendmsg+0x21c/0x270 [ 542.695285][T15877] ____sys_sendmsg+0x505/0x830 [ 542.695311][T15877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.695341][T15877] ? import_iovec+0x74/0xa0 [ 542.695368][T15877] ___sys_sendmsg+0x21f/0x2a0 [ 542.695391][T15877] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.695450][T15877] ? __fget_files+0x2a/0x420 [ 542.695466][T15877] ? __fget_files+0x3a0/0x420 [ 542.695495][T15877] __x64_sys_sendmsg+0x19b/0x260 [ 542.695514][T15877] ? perf_trace_run_bpf_submit+0x100/0x170 [ 542.695537][T15877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 542.695568][T15877] ? __pfx_ksys_write+0x10/0x10 [ 542.695592][T15877] ? rcu_is_watching+0x15/0xb0 [ 542.695618][T15877] ? do_syscall_64+0xbe/0x3b0 [ 542.695651][T15877] do_syscall_64+0xfa/0x3b0 [ 542.695678][T15877] ? lockdep_hardirqs_on+0x9c/0x150 [ 542.695704][T15877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.695748][T15877] ? clear_bhb_loop+0x60/0xb0 [ 542.695774][T15877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.695794][T15877] RIP: 0033:0x7f77dc78ebe9 [ 542.695812][T15877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.695828][T15877] RSP: 002b:00007f77dd651038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 542.695849][T15877] RAX: ffffffffffffffda RBX: 00007f77dc9b5fa0 RCX: 00007f77dc78ebe9 [ 542.695864][T15877] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 542.695876][T15877] RBP: 00007f77dd651090 R08: 0000000000000000 R09: 0000000000000000 [ 542.695888][T15877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.695899][T15877] R13: 00007f77dc9b6038 R14: 00007f77dc9b5fa0 R15: 00007ffd88f47de8 [ 542.695932][T15877] [ 543.844134][T15901] netlink: 'syz.1.3285': attribute type 126 has an invalid length. [ 543.907782][T15904] netlink: 208344 bytes leftover after parsing attributes in process `syz.5.3287'. [ 544.224389][T15916] netlink: 'syz.1.3292': attribute type 21 has an invalid length. [ 544.275516][T15916] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3292'. [ 544.291489][T15916] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3292'. [ 544.394033][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 544.625929][T15929] : entered promiscuous mode [ 545.029756][ T8507] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 545.030324][ T8507] Bluetooth: hci3: connection err: -111 [ 545.544837][T15961] netlink: 'syz.2.3306': attribute type 21 has an invalid length. [ 545.616742][T15963] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3307'. [ 545.897947][T15973] netlink: 'syz.3.3311': attribute type 126 has an invalid length. [ 546.752593][T16000] netlink: 'syz.4.3318': attribute type 29 has an invalid length. [ 546.821765][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3320'. [ 547.327574][T16016] netlink: 6 bytes leftover after parsing attributes in process `syz.5.3323'. [ 547.635301][T16023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3328'. [ 548.002220][T16032] netlink: 'syz.5.3331': attribute type 126 has an invalid length. [ 548.920201][T16049] netlink: 'syz.3.3337': attribute type 21 has an invalid length. [ 548.984023][T16049] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3337'. [ 549.011457][T16047] netlink: 'syz.4.3335': attribute type 126 has an invalid length. [ 549.022790][T16049] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3337'. [ 549.323988][T16055] netlink: 'syz.2.3340': attribute type 10 has an invalid length. [ 549.487096][T16055] veth0_vlan: left promiscuous mode [ 549.508396][T16055] veth0_vlan: entered promiscuous mode [ 549.592356][T16055] team0: Device veth0_vlan failed to register rx_handler [ 549.913075][T16074] netlink: 'syz.1.3345': attribute type 11 has an invalid length. [ 550.723178][T16106] team_slave_0: left promiscuous mode [ 550.745401][T16106] team_slave_0: left allmulticast mode [ 550.777194][T16106] team0: Port device team_slave_0 removed [ 550.808650][T16106] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 551.012607][T16116] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3362'. [ 551.036609][T16116] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3362'. [ 551.059400][T16117] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 551.311539][T16128] netlink: 'syz.3.3366': attribute type 4 has an invalid length. [ 551.321284][T16125] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3364'. [ 551.331026][T16128] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3366'. [ 551.341315][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3367'. [ 551.421165][T16125] netlink: 'syz.5.3364': attribute type 3 has an invalid length. [ 551.442405][T16125] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3364'. [ 551.529918][T16134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3368'. [ 551.550502][T16134] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3368'. [ 551.566370][T16134] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3368'. [ 551.988018][T16153] netlink: 'syz.3.3376': attribute type 2 has an invalid length. [ 552.005838][T16153] netlink: 'syz.3.3376': attribute type 8 has an invalid length. [ 552.442578][T16166] netlink: 'syz.3.3381': attribute type 21 has an invalid length. [ 552.479082][T16164] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 552.667875][T16164] veth1_macvtap: left promiscuous mode [ 553.089302][T16164] veth1_macvtap: entered promiscuous mode [ 553.108100][T16164] macsec0: entered promiscuous mode [ 553.125508][T16164] macsec0: entered allmulticast mode [ 553.163587][T16164] veth1_macvtap: entered allmulticast mode [ 553.280048][T16178] netlink: 'syz.5.3384': attribute type 29 has an invalid length. [ 553.443901][T16191] veth1_macvtap: left promiscuous mode [ 553.474842][T16191] FAULT_INJECTION: forcing a failure. [ 553.474842][T16191] name failslab, interval 1, probability 0, space 0, times 0 [ 553.487693][T16191] CPU: 1 UID: 0 PID: 16191 Comm: syz.4.3389 Not tainted syzkaller #0 PREEMPT(full) [ 553.487721][T16191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 553.487734][T16191] Call Trace: [ 553.487743][T16191] [ 553.487752][T16191] dump_stack_lvl+0x189/0x250 [ 553.487782][T16191] ? __pfx____ratelimit+0x10/0x10 [ 553.487809][T16191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.487833][T16191] ? __pfx__printk+0x10/0x10 [ 553.487882][T16191] should_fail_ex+0x414/0x560 [ 553.487915][T16191] should_failslab+0xa8/0x100 [ 553.487962][T16191] __kmalloc_cache_noprof+0x70/0x3d0 [ 553.487991][T16191] ? __hw_addr_add_ex+0x1f4/0x770 [ 553.488017][T16191] __hw_addr_add_ex+0x1f4/0x770 [ 553.488047][T16191] dev_uc_add+0xa1/0x120 [ 553.488072][T16191] macsec_dev_open+0xd9/0x530 [ 553.488104][T16191] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 553.488130][T16191] ? __pfx_macsec_dev_open+0x10/0x10 [ 553.488161][T16191] ? ib_device_get_by_netdev+0x84/0x4d0 [ 553.488183][T16191] ? hsr_netdev_notify+0x29e/0xcf0 [ 553.488204][T16191] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 553.488231][T16191] ? udp_tunnel_nic_netdevice_event+0x1a7/0x19f0 [ 553.488268][T16191] ? ip6_route_dev_notify+0x9a/0x5b0 [ 553.488294][T16191] ? notifier_call_chain+0x3bf/0x3e0 [ 553.488325][T16191] __dev_open+0x470/0x880 [ 553.488360][T16191] ? __pfx___dev_open+0x10/0x10 [ 553.488399][T16191] __dev_change_flags+0x1ea/0x6d0 [ 553.488426][T16191] ? __pfx___dev_change_flags+0x10/0x10 [ 553.488447][T16191] ? full_name_hash+0x92/0xe0 [ 553.488476][T16191] netif_change_flags+0x88/0x1a0 [ 553.488502][T16191] dev_change_flags+0x130/0x260 [ 553.488538][T16191] dev_ioctl+0x7b4/0x1150 [ 553.488582][T16191] sock_do_ioctl+0x22c/0x300 [ 553.488612][T16191] ? __pfx_sock_do_ioctl+0x10/0x10 [ 553.488633][T16191] ? __lock_acquire+0xab9/0xd20 [ 553.488680][T16191] sock_ioctl+0x576/0x790 [ 553.488706][T16191] ? __pfx_sock_ioctl+0x10/0x10 [ 553.488730][T16191] ? __fget_files+0x2a/0x420 [ 553.488746][T16191] ? __fget_files+0x3a0/0x420 [ 553.488763][T16191] ? __fget_files+0x2a/0x420 [ 553.488799][T16191] ? bpf_lsm_file_ioctl+0x9/0x20 [ 553.488824][T16191] ? __pfx_sock_ioctl+0x10/0x10 [ 553.488847][T16191] __se_sys_ioctl+0xfc/0x170 [ 553.488883][T16191] do_syscall_64+0xfa/0x3b0 [ 553.488910][T16191] ? lockdep_hardirqs_on+0x9c/0x150 [ 553.488937][T16191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.488957][T16191] ? clear_bhb_loop+0x60/0xb0 [ 553.488981][T16191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.489019][T16191] RIP: 0033:0x7f0efa78ebe9 [ 553.489038][T16191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.489057][T16191] RSP: 002b:00007f0efb52d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.489078][T16191] RAX: ffffffffffffffda RBX: 00007f0efa9b5fa0 RCX: 00007f0efa78ebe9 [ 553.489094][T16191] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000006 [ 553.489106][T16191] RBP: 00007f0efb52d090 R08: 0000000000000000 R09: 0000000000000000 [ 553.489119][T16191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.489131][T16191] R13: 00007f0efa9b6038 R14: 00007f0efa9b5fa0 R15: 00007ffd395d9c38 [ 553.489165][T16191] [ 553.840430][T16191] macsec0: entered promiscuous mode [ 553.847393][T16191] macsec0: entered allmulticast mode [ 554.193115][T16215] netlink: 'syz.4.3398': attribute type 21 has an invalid length. [ 554.339704][T16217] netlink: 'syz.2.3399': attribute type 21 has an invalid length. [ 554.582946][T16229] netlink: 'syz.1.3402': attribute type 10 has an invalid length. [ 554.751880][T16231] netlink: 'syz.2.3401': attribute type 10 has an invalid length. [ 554.809232][T16231] veth0_vlan: left promiscuous mode [ 554.822089][T16231] veth0_vlan: entered promiscuous mode [ 554.845011][T16231] team0: Device veth0_vlan failed to register rx_handler [ 554.854947][T16235] netlink: 'syz.1.3404': attribute type 16 has an invalid length. [ 555.386396][T16250] netlink: 'syz.5.3410': attribute type 21 has an invalid length. [ 555.711364][T16273] FAULT_INJECTION: forcing a failure. [ 555.711364][T16273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.743639][T16273] CPU: 0 UID: 0 PID: 16273 Comm: syz.2.3418 Not tainted syzkaller #0 PREEMPT(full) [ 555.743671][T16273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.743683][T16273] Call Trace: [ 555.743691][T16273] [ 555.743700][T16273] dump_stack_lvl+0x189/0x250 [ 555.743730][T16273] ? __pfx____ratelimit+0x10/0x10 [ 555.743759][T16273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.743783][T16273] ? __pfx__printk+0x10/0x10 [ 555.743811][T16273] ? __might_fault+0xb0/0x130 [ 555.743851][T16273] should_fail_ex+0x414/0x560 [ 555.743883][T16273] _copy_from_iter+0x1db/0x16f0 [ 555.743916][T16273] ? __pfx__copy_from_iter+0x10/0x10 [ 555.743933][T16273] ? sock_alloc_send_pskb+0x875/0x990 [ 555.743962][T16273] ? __pfx__copy_from_iter+0x10/0x10 [ 555.743985][T16273] ? page_copy_sane+0x16a/0x280 [ 555.744004][T16273] copy_page_from_iter+0xdd/0x170 [ 555.744029][T16273] skb_copy_datagram_from_iter+0x306/0x720 [ 555.744066][T16273] tun_get_user+0x1691/0x3e20 [ 555.744107][T16273] ? aa_file_perm+0x44d/0x1550 [ 555.744126][T16273] ? __pfx_tun_get_user+0x10/0x10 [ 555.744142][T16273] ? perf_swevent_event+0x113/0x5e0 [ 555.744184][T16273] ? ref_tracker_alloc+0x318/0x460 [ 555.744209][T16273] ? __lock_acquire+0xab9/0xd20 [ 555.744240][T16273] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 555.744274][T16273] ? tun_get+0x1c/0x2f0 [ 555.744298][T16273] ? tun_get+0x1c/0x2f0 [ 555.744316][T16273] ? tun_get+0x1c/0x2f0 [ 555.744339][T16273] tun_chr_write_iter+0x113/0x200 [ 555.744373][T16273] vfs_write+0x5c6/0xb30 [ 555.744406][T16273] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 555.744437][T16273] ? __pfx_vfs_write+0x10/0x10 [ 555.744487][T16273] ? __fget_files+0x2a/0x420 [ 555.744515][T16273] ksys_write+0x145/0x250 [ 555.744544][T16273] ? __pfx_ksys_write+0x10/0x10 [ 555.744568][T16273] ? rcu_is_watching+0x15/0xb0 [ 555.744593][T16273] ? do_syscall_64+0xbe/0x3b0 [ 555.744626][T16273] do_syscall_64+0xfa/0x3b0 [ 555.744653][T16273] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.744680][T16273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.744700][T16273] ? clear_bhb_loop+0x60/0xb0 [ 555.744724][T16273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.744743][T16273] RIP: 0033:0x7f77dc78ebe9 [ 555.744761][T16273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.744776][T16273] RSP: 002b:00007f77dd651038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 555.744796][T16273] RAX: ffffffffffffffda RBX: 00007f77dc9b5fa0 RCX: 00007f77dc78ebe9 [ 555.744810][T16273] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 555.744822][T16273] RBP: 00007f77dd651090 R08: 0000000000000000 R09: 0000000000000000 [ 555.744834][T16273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.744845][T16273] R13: 00007f77dc9b6038 R14: 00007f77dc9b5fa0 R15: 00007ffd88f47de8 [ 555.744876][T16273] [ 556.041184][T16280] netlink: 'syz.4.3419': attribute type 126 has an invalid length. [ 556.061741][T16278] netlink: 'syz.1.3420': attribute type 41 has an invalid length. [ 556.072046][T16278] __nla_validate_parse: 13 callbacks suppressed [ 556.072068][T16278] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3420'. [ 556.082371][T16269] syzkaller0: entered promiscuous mode [ 556.093041][T16269] syzkaller0: entered allmulticast mode [ 556.592426][T16301] netlink: 'syz.4.3427': attribute type 21 has an invalid length. [ 556.605143][T16301] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3427'. [ 556.673917][T16305] netlink: 196 bytes leftover after parsing attributes in process `syz.1.3425'. [ 557.962214][T16301] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3427'. [ 558.138540][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3432'. [ 558.144801][T16316] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3431'. [ 558.150327][T16318] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 558.165398][T16318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.418393][T16322] netlink: 'syz.2.3430': attribute type 4 has an invalid length. [ 558.676693][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3437'. [ 558.731908][T16334] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3437'. [ 558.983633][T16338] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3439'. [ 559.006908][T16338] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3439'. [ 559.973391][T16379] C: renamed from team_slave_0 (while UP) [ 560.229943][T16384] validate_nla: 1 callbacks suppressed [ 560.229964][T16384] netlink: 'syz.4.3452': attribute type 2 has an invalid length. [ 560.252338][T16384] netlink: 'syz.4.3452': attribute type 1 has an invalid length. [ 560.399946][T16379] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 560.408041][T16379] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 560.506685][T16387] netlink: 'syz.5.3454': attribute type 21 has an invalid length. [ 561.096319][T16404] __nla_validate_parse: 4 callbacks suppressed [ 561.096383][T16404] netlink: 196 bytes leftover after parsing attributes in process `syz.2.3459'. [ 561.271819][T16404] netlink: 703 bytes leftover after parsing attributes in process `syz.2.3459'. [ 561.438154][T16416] netlink: 'syz.1.3462': attribute type 10 has an invalid length. [ 561.456403][T16416] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.467372][T16416] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.554213][T16416] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.562474][T16416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.573162][T16416] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.581186][T16416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.691114][T16416] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 561.931725][ T30] audit: type=1107 audit(1755626198.412:10): pid=16428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 562.014354][T16438] netlink: 752 bytes leftover after parsing attributes in process `syz.2.3470'. [ 562.025421][T16435] netlink: 'syz.1.3468': attribute type 21 has an invalid length. [ 562.033702][T16435] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3468'. [ 562.053529][T16439] netlink: 'syz.5.3469': attribute type 126 has an invalid length. [ 562.064615][T16435] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3468'. [ 562.120605][T16438] netlink: 'syz.2.3470': attribute type 10 has an invalid length. [ 562.133375][T16438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3470'. [ 562.711030][T16438] team0: entered promiscuous mode [ 562.720690][T16438] team_slave_0: entered promiscuous mode [ 562.808558][T16438] team_slave_1: entered promiscuous mode [ 563.039277][T16455] netlink: 'syz.1.3475': attribute type 5 has an invalid length. [ 563.147985][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.155443][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.582159][T16438] bond0: entered promiscuous mode [ 563.603318][T16438] bond_slave_0: entered promiscuous mode [ 563.612085][T16438] bond_slave_1: entered promiscuous mode [ 563.622659][T16438] team0: entered allmulticast mode [ 563.632408][T16438] team_slave_0: entered allmulticast mode [ 563.642687][T16438] team_slave_1: entered allmulticast mode [ 563.649115][T16438] bond0: entered allmulticast mode [ 563.655006][T16438] bond_slave_0: entered allmulticast mode [ 563.661176][T16438] bond_slave_1: entered allmulticast mode [ 563.683276][T16438] bridge0: port 3(team0) entered blocking state [ 563.703061][T16438] bridge0: port 3(team0) entered disabled state [ 563.723151][T16438] bridge0: port 3(team0) entered blocking state [ 563.729793][T16438] bridge0: port 3(team0) entered forwarding state [ 564.013581][T16477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3482'. [ 564.024673][T16477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3482'. [ 564.175758][T16481] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3483'. [ 564.337661][T16489] FAULT_INJECTION: forcing a failure. [ 564.337661][T16489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.380674][T16489] CPU: 0 UID: 0 PID: 16489 Comm: syz.3.3488 Not tainted syzkaller #0 PREEMPT(full) [ 564.380706][T16489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.380720][T16489] Call Trace: [ 564.380728][T16489] [ 564.380738][T16489] dump_stack_lvl+0x189/0x250 [ 564.380771][T16489] ? __pfx____ratelimit+0x10/0x10 [ 564.380801][T16489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.380828][T16489] ? __pfx__printk+0x10/0x10 [ 564.380869][T16489] ? __might_fault+0xb0/0x130 [ 564.380904][T16489] ? __might_fault+0xb0/0x130 [ 564.380942][T16489] should_fail_ex+0x414/0x560 [ 564.380978][T16489] _copy_from_iter+0x1db/0x16f0 [ 564.381006][T16489] ? rcu_is_watching+0x15/0xb0 [ 564.381031][T16489] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 564.381064][T16489] ? __pfx__copy_from_iter+0x10/0x10 [ 564.381090][T16489] ? __build_skb_around+0x257/0x3e0 [ 564.381128][T16489] ? netlink_sendmsg+0x642/0xb30 [ 564.381157][T16489] ? skb_put+0x11b/0x210 [ 564.381195][T16489] netlink_sendmsg+0x6b2/0xb30 [ 564.381240][T16489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.381277][T16489] ? aa_sock_msg_perm+0xf1/0x1d0 [ 564.381313][T16489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.381337][T16489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.381370][T16489] __sock_sendmsg+0x21c/0x270 [ 564.381406][T16489] ____sys_sendmsg+0x505/0x830 [ 564.381436][T16489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.381471][T16489] ? import_iovec+0x74/0xa0 [ 564.381500][T16489] ___sys_sendmsg+0x21f/0x2a0 [ 564.381526][T16489] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.381576][T16489] ? __fget_files+0x2a/0x420 [ 564.381614][T16489] ? __fget_files+0x2a/0x420 [ 564.381632][T16489] ? __fget_files+0x3a0/0x420 [ 564.381714][T16489] __x64_sys_sendmsg+0x19b/0x260 [ 564.381742][T16489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.381779][T16489] ? __pfx_ksys_write+0x10/0x10 [ 564.381804][T16489] ? rcu_is_watching+0x15/0xb0 [ 564.381833][T16489] ? do_syscall_64+0xbe/0x3b0 [ 564.381878][T16489] do_syscall_64+0xfa/0x3b0 [ 564.381908][T16489] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.381937][T16489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.381958][T16489] ? clear_bhb_loop+0x60/0xb0 [ 564.381985][T16489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.382005][T16489] RIP: 0033:0x7f314098ebe9 [ 564.382024][T16489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.382042][T16489] RSP: 002b:00007f313ebf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.382063][T16489] RAX: ffffffffffffffda RBX: 00007f3140bb5fa0 RCX: 00007f314098ebe9 [ 564.382078][T16489] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 564.382090][T16489] RBP: 00007f313ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 564.382103][T16489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.382114][T16489] R13: 00007f3140bb6038 R14: 00007f3140bb5fa0 R15: 00007fff1d815008 [ 564.382153][T16489] [ 564.844366][T16497] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3489'. [ 564.860444][T16498] netlink: 'syz.4.3490': attribute type 33 has an invalid length. [ 564.879171][T16498] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 565.260999][T16504] netlink: 'syz.4.3493': attribute type 126 has an invalid length. [ 565.812089][T16534] netlink: 'syz.5.3507': attribute type 126 has an invalid length. [ 566.108808][T16554] netlink: 'syz.4.3512': attribute type 10 has an invalid length. [ 566.139433][T16554] __nla_validate_parse: 2 callbacks suppressed [ 566.139453][T16554] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3512'. [ 566.263459][T16560] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3514'. [ 566.365561][T16560] caif0: entered promiscuous mode [ 566.380927][T16560] caif0: entered allmulticast mode [ 566.967556][T16584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 566.980975][T16584] netlink: 'syz.4.3522': attribute type 3 has an invalid length. [ 567.034160][T16584] netlink: 'syz.4.3522': attribute type 2 has an invalid length. [ 567.052324][T16584] netlink: 198112 bytes leftover after parsing attributes in process `syz.4.3522'. [ 567.211987][T16580] netlink: 'syz.2.3520': attribute type 10 has an invalid length. [ 567.225837][T16580] bridge0: port 3(team0) entered disabled state [ 567.243090][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.270095][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.799416][T16580] bridge0: port 3(team0) entered blocking state [ 567.815767][T16580] bridge0: port 3(team0) entered forwarding state [ 567.828635][T16580] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.842514][T16580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.861796][T16580] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.874766][T16580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.119592][T16597] netlink: 'syz.3.3524': attribute type 126 has an invalid length. [ 568.210438][T16580] bridge0: port 3(team0) entered disabled state [ 568.227574][T16580] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.228745][T16599] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3526'. [ 568.247661][T16580] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.316950][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3532'. [ 569.326213][T16620] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 569.480008][T16625] FAULT_INJECTION: forcing a failure. [ 569.480008][T16625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.493519][T16625] CPU: 1 UID: 0 PID: 16625 Comm: syz.4.3535 Not tainted syzkaller #0 PREEMPT(full) [ 569.493548][T16625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.493562][T16625] Call Trace: [ 569.493570][T16625] [ 569.493579][T16625] dump_stack_lvl+0x189/0x250 [ 569.493612][T16625] ? __pfx____ratelimit+0x10/0x10 [ 569.493641][T16625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.493667][T16625] ? __pfx__printk+0x10/0x10 [ 569.493697][T16625] ? __might_fault+0xb0/0x130 [ 569.493741][T16625] should_fail_ex+0x414/0x560 [ 569.493776][T16625] _copy_from_iter+0x1db/0x16f0 [ 569.493823][T16625] ? __pfx__copy_from_iter+0x10/0x10 [ 569.493841][T16625] ? sock_alloc_send_pskb+0x875/0x990 [ 569.493873][T16625] ? __pfx__copy_from_iter+0x10/0x10 [ 569.493898][T16625] ? page_copy_sane+0x16a/0x280 [ 569.493922][T16625] copy_page_from_iter+0xdd/0x170 [ 569.493950][T16625] skb_copy_datagram_from_iter+0x306/0x720 [ 569.493990][T16625] tun_get_user+0x1691/0x3e20 [ 569.494035][T16625] ? aa_file_perm+0x44d/0x1550 [ 569.494058][T16625] ? __pfx_tun_get_user+0x10/0x10 [ 569.494075][T16625] ? perf_swevent_event+0x113/0x5e0 [ 569.494121][T16625] ? ref_tracker_alloc+0x318/0x460 [ 569.494149][T16625] ? __lock_acquire+0xab9/0xd20 [ 569.494184][T16625] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 569.494220][T16625] ? tun_get+0x1c/0x2f0 [ 569.494247][T16625] ? tun_get+0x1c/0x2f0 [ 569.494267][T16625] ? tun_get+0x1c/0x2f0 [ 569.494292][T16625] tun_chr_write_iter+0x113/0x200 [ 569.494330][T16625] vfs_write+0x5c6/0xb30 [ 569.494365][T16625] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 569.494400][T16625] ? __pfx_vfs_write+0x10/0x10 [ 569.494441][T16625] ? __fget_files+0x2a/0x420 [ 569.494472][T16625] ksys_write+0x145/0x250 [ 569.494504][T16625] ? __pfx_ksys_write+0x10/0x10 [ 569.494530][T16625] ? rcu_is_watching+0x15/0xb0 [ 569.494559][T16625] ? do_syscall_64+0xbe/0x3b0 [ 569.494594][T16625] do_syscall_64+0xfa/0x3b0 [ 569.494623][T16625] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.494652][T16625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.494674][T16625] ? clear_bhb_loop+0x60/0xb0 [ 569.494702][T16625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.494723][T16625] RIP: 0033:0x7f0efa78ebe9 [ 569.494743][T16625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.494762][T16625] RSP: 002b:00007f0efb52d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 569.494785][T16625] RAX: ffffffffffffffda RBX: 00007f0efa9b5fa0 RCX: 00007f0efa78ebe9 [ 569.494808][T16625] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 569.494823][T16625] RBP: 00007f0efb52d090 R08: 0000000000000000 R09: 0000000000000000 [ 569.494837][T16625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 569.494850][T16625] R13: 00007f0efa9b6038 R14: 00007f0efa9b5fa0 R15: 00007ffd395d9c38 [ 569.494885][T16625] [ 570.978565][T16668] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3549'. [ 570.988218][T16668] team0: entered promiscuous mode [ 570.993302][T16668] team_slave_0: entered promiscuous mode [ 570.999547][T16668] team_slave_1: entered promiscuous mode [ 571.005473][T16668] team0: entered allmulticast mode [ 571.013660][T16668] team_slave_0: entered allmulticast mode [ 571.019549][T16668] team_slave_1: entered allmulticast mode [ 571.242394][T16674] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3552'. [ 571.261244][T16679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3553'. [ 571.273514][T16674] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3552'. [ 571.284204][T16679] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 571.292764][T16679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.343216][T16682] syz.1.3554: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 571.374285][T16682] CPU: 1 UID: 0 PID: 16682 Comm: syz.1.3554 Not tainted syzkaller #0 PREEMPT(full) [ 571.374318][T16682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 571.374333][T16682] Call Trace: [ 571.374343][T16682] [ 571.374353][T16682] dump_stack_lvl+0x189/0x250 [ 571.374386][T16682] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 571.374420][T16682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 571.374448][T16682] ? __pfx__printk+0x10/0x10 [ 571.374481][T16682] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 571.374509][T16682] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 571.374545][T16682] warn_alloc+0x214/0x310 [ 571.374590][T16682] ? trace_call_bpf+0x5ba/0x850 [ 571.374610][T16682] ? stack_depot_save_flags+0x40/0x860 [ 571.374643][T16682] ? __pfx_warn_alloc+0x10/0x10 [ 571.374686][T16682] ? xsk_init_queue+0xb0/0x110 [ 571.374711][T16682] ? xsk_setsockopt+0x57b/0x8d0 [ 571.374737][T16682] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 571.374757][T16682] ? do_syscall_64+0xfa/0x3b0 [ 571.374787][T16682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.374820][T16682] __vmalloc_node_range_noprof+0x125/0x12f0 [ 571.374858][T16682] ? perf_trace_preemptirq_template+0x280/0x340 [ 571.374891][T16682] ? irqentry_enter+0x3d/0x60 [ 571.374923][T16682] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 571.374976][T16682] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 571.375026][T16682] vmalloc_user_noprof+0xad/0xf0 [ 571.375059][T16682] ? xskq_create+0xbf/0x170 [ 571.375089][T16682] xskq_create+0xbf/0x170 [ 571.375123][T16682] xsk_init_queue+0xb0/0x110 [ 571.375155][T16682] xsk_setsockopt+0x57b/0x8d0 [ 571.375186][T16682] ? __pfx_xsk_setsockopt+0x10/0x10 [ 571.375213][T16682] ? __pfx_aa_sk_perm+0x10/0x10 [ 571.375249][T16682] ? __fget_files+0x2a/0x420 [ 571.375267][T16682] ? aa_sock_opt_perm+0xff/0x1b0 [ 571.375293][T16682] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 571.375317][T16682] ? __pfx_xsk_setsockopt+0x10/0x10 [ 571.375346][T16682] do_sock_setsockopt+0x17c/0x1b0 [ 571.375387][T16682] __x64_sys_setsockopt+0x13f/0x1b0 [ 571.375416][T16682] do_syscall_64+0xfa/0x3b0 [ 571.375450][T16682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.375471][T16682] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 571.375494][T16682] ? clear_bhb_loop+0x60/0xb0 [ 571.375522][T16682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.375544][T16682] RIP: 0033:0x7f50a158ebe9 [ 571.375582][T16682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.375602][T16682] RSP: 002b:00007f50a23ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 571.375624][T16682] RAX: ffffffffffffffda RBX: 00007f50a17b6090 RCX: 00007f50a158ebe9 [ 571.375640][T16682] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 571.375654][T16682] RBP: 00007f50a1611e19 R08: 0000000000000004 R09: 0000000000000000 [ 571.375666][T16682] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 571.375680][T16682] R13: 00007f50a17b6128 R14: 00007f50a17b6090 R15: 00007fff9a5bf798 [ 571.375715][T16682] [ 571.375744][T16682] Mem-Info: [ 571.743157][T16682] active_anon:9393 inactive_anon:0 isolated_anon:0 [ 571.743157][T16682] active_file:21732 inactive_file:40038 isolated_file:0 [ 571.743157][T16682] unevictable:768 dirty:228 writeback:0 [ 571.743157][T16682] slab_reclaimable:12133 slab_unreclaimable:117850 [ 571.743157][T16682] mapped:30179 shmem:1356 pagetables:1256 [ 571.743157][T16682] sec_pagetables:0 bounce:0 [ 571.743157][T16682] kernel_misc_reclaimable:0 [ 571.743157][T16682] free:1288883 free_pcp:14468 free_cma:0 [ 571.801124][T16682] Node 0 active_anon:37572kB inactive_anon:0kB active_file:86928kB inactive_file:159952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120716kB dirty:912kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12492kB pagetables:4784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 571.833831][T16682] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 571.913876][T16682] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 571.968085][T16682] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 571.983696][T16682] Node 0 DMA32 free:1258020kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37628kB inactive_anon:0kB active_file:86928kB inactive_file:158372kB unevictable:1536kB writepending:912kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:40340kB local_pcp:20760kB free_cma:0kB [ 572.220866][T16682] lowmem_reserve[]: 0 0 1 1 1 [ 572.226660][T16682] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 572.327413][T16682] lowmem_reserve[]: 0 0 0 0 0 [ 572.332285][T16682] Node 1 Normal free:3881940kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17632kB local_pcp:9600kB free_cma:0kB [ 572.432519][T16682] lowmem_reserve[]: 0 0 0 0 0 [ 572.469451][T16682] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 572.526697][T16682] Node 0 DMA32: 977*4kB (UM) 1185*8kB (UM) 895*16kB (UME) 617*32kB (UME) 248*64kB (UME) 154*128kB (UME) 109*256kB (UM) 25*512kB (UME) 30*1024kB (UME) 5*2048kB (UME) 267*4096kB (UM) = 1258332kB [ 572.547101][T16682] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 572.572417][T16682] Node 1 Normal: 197*4kB (UME) 48*8kB (UME) 42*16kB (UME) 209*32kB (UME) 62*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 943*4096kB (M) = 3881940kB [ 572.631379][T16682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.675984][T16682] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.702330][T16682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.723259][T16682] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.732934][T16682] 63124 total pagecache pages [ 572.745327][T16682] 0 pages in swap cache [ 572.753673][T16682] Free swap = 124996kB [ 572.768317][T16682] Total swap = 124996kB [ 572.772760][T16682] 2097051 pages RAM [ 572.782947][T16682] 0 pages HighMem/MovableOnly [ 572.792577][T16682] 425654 pages reserved [ 572.797784][T16682] 0 pages cma reserved [ 573.082228][T16710] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.3561'. [ 573.355084][T16721] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3566'. [ 573.435080][T16729] netlink: 'syz.2.3570': attribute type 126 has an invalid length. [ 573.556818][T16736] netlink: 'syz.2.3573': attribute type 1 has an invalid length. [ 574.610803][T16753] netlink: 'syz.4.3579': attribute type 29 has an invalid length. [ 574.652813][T16755] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.3580'. [ 574.665844][T16755] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.3580'. [ 574.763507][T16757] FAULT_INJECTION: forcing a failure. [ 574.763507][T16757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.798137][T16757] CPU: 1 UID: 0 PID: 16757 Comm: syz.2.3581 Not tainted syzkaller #0 PREEMPT(full) [ 574.798167][T16757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 574.798181][T16757] Call Trace: [ 574.798192][T16757] [ 574.798203][T16757] dump_stack_lvl+0x189/0x250 [ 574.798236][T16757] ? __pfx____ratelimit+0x10/0x10 [ 574.798269][T16757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 574.798297][T16757] ? __pfx__printk+0x10/0x10 [ 574.798323][T16757] ? irqentry_exit+0x74/0x90 [ 574.798396][T16757] should_fail_ex+0x414/0x560 [ 574.798443][T16757] _copy_from_iter+0x575/0x16f0 [ 574.798504][T16757] ? __pfx__copy_from_iter+0x10/0x10 [ 574.798536][T16757] ? __build_skb_around+0x257/0x3e0 [ 574.798580][T16757] ? netlink_sendmsg+0x642/0xb30 [ 574.798608][T16757] ? skb_put+0x11b/0x210 [ 574.798655][T16757] netlink_sendmsg+0x6b2/0xb30 [ 574.798716][T16757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.798760][T16757] ? aa_sock_msg_perm+0xf1/0x1d0 [ 574.798801][T16757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.798825][T16757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.798862][T16757] __sock_sendmsg+0x21c/0x270 [ 574.798902][T16757] ____sys_sendmsg+0x505/0x830 [ 574.798945][T16757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.798997][T16757] ? import_iovec+0x74/0xa0 [ 574.799036][T16757] ___sys_sendmsg+0x21f/0x2a0 [ 574.799069][T16757] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.799116][T16757] ? perf_trace_preemptirq_template+0xa3/0x340 [ 574.799146][T16757] ? irqentry_enter+0x3d/0x60 [ 574.799276][T16757] ? __x64_sys_sendmsg+0x180/0x260 [ 574.799320][T16757] __x64_sys_sendmsg+0x19b/0x260 [ 574.799341][T16757] ? clockevents_program_event+0x24d/0x360 [ 574.799379][T16757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.799457][T16757] ? do_syscall_64+0xbe/0x3b0 [ 574.799501][T16757] do_syscall_64+0xfa/0x3b0 [ 574.799536][T16757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.799555][T16757] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 574.799576][T16757] ? clear_bhb_loop+0x60/0xb0 [ 574.799611][T16757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.799631][T16757] RIP: 0033:0x7f77dc78ebe9 [ 574.799653][T16757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.799671][T16757] RSP: 002b:00007f77dd651038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.799692][T16757] RAX: ffffffffffffffda RBX: 00007f77dc9b5fa0 RCX: 00007f77dc78ebe9 [ 574.799707][T16757] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 574.799737][T16757] RBP: 00007f77dd651090 R08: 0000000000000000 R09: 0000000000000000 [ 574.799750][T16757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.799763][T16757] R13: 00007f77dc9b6038 R14: 00007f77dc9b5fa0 R15: 00007ffd88f47de8 [ 574.799828][T16757] [ 575.201567][T16765] netlink: 'syz.5.3584': attribute type 126 has an invalid length. [ 575.281229][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3585'. [ 575.791509][T16778] €Â0: renamed from bond_slave_1 (while UP) [ 576.088049][T16778] netlink: 636 bytes leftover after parsing attributes in process `syz.5.3589'. [ 576.120806][T16778] netlink: 2760 bytes leftover after parsing attributes in process `syz.5.3589'. [ 576.523210][T16796] netlink: 'syz.2.3595': attribute type 10 has an invalid length. [ 576.533476][T16796] veth0_vlan: left promiscuous mode [ 576.543341][T16796] veth0_vlan: entered promiscuous mode [ 576.570587][T16796] team0: Device veth0_vlan failed to register rx_handler [ 576.813558][T16800] netlink: 26 bytes leftover after parsing attributes in process `syz.4.3596'. [ 576.854112][T16800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3596'. [ 577.241572][T16806] netlink: 'syz.1.3598': attribute type 39 has an invalid length. [ 577.728096][T16815] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3601'. [ 578.357890][T16832] netlink: 'syz.4.3608': attribute type 126 has an invalid length. [ 580.268685][T16883] netlink: 'syz.2.3629': attribute type 39 has an invalid length. [ 581.706588][T16917] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.3642'. [ 582.222978][T16935] netlink: 'syz.4.3647': attribute type 29 has an invalid length. [ 582.255750][T16937] netlink: 548 bytes leftover after parsing attributes in process `syz.4.3647'. [ 582.320478][T16941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3649'. [ 582.330676][T16936] netlink: 'syz.4.3647': attribute type 29 has an invalid length. [ 582.340942][T16942] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3649'. [ 582.373183][T16941] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3649'. [ 582.844511][T16966] netlink: 'syz.3.3657': attribute type 126 has an invalid length. [ 583.179189][T16954] netlink: 'syz.2.3654': attribute type 2 has an invalid length. [ 583.753835][T16983] netlink: 'syz.2.3663': attribute type 126 has an invalid length. [ 584.252566][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3670'. [ 584.715808][T17024] netlink: 'syz.1.3676': attribute type 1 has an invalid length. [ 584.736644][T17024] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3676'. [ 584.814078][T17029] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3678'. [ 586.091482][T17064] tap0: tun_chr_ioctl cmd 1074812118 [ 586.320695][T17066] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3690'. [ 586.539161][T17074] netlink: 'syz.2.3693': attribute type 10 has an invalid length. [ 586.695955][T17074] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 586.706031][T17074] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 586.764584][T17084] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3698'. [ 586.997080][T17086] netlink: 'syz.1.3699': attribute type 126 has an invalid length. [ 587.317802][T17072] syzkaller0: entered promiscuous mode [ 587.332084][T17072] syzkaller0: entered allmulticast mode [ 587.558623][T17105] FAULT_INJECTION: forcing a failure. [ 587.558623][T17105] name failslab, interval 1, probability 0, space 0, times 0 [ 587.582258][T17105] CPU: 1 UID: 0 PID: 17105 Comm: syz.4.3704 Not tainted syzkaller #0 PREEMPT(full) [ 587.582284][T17105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.582295][T17105] Call Trace: [ 587.582302][T17105] [ 587.582311][T17105] dump_stack_lvl+0x189/0x250 [ 587.582337][T17105] ? __pfx____ratelimit+0x10/0x10 [ 587.582361][T17105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.582383][T17105] ? __pfx__printk+0x10/0x10 [ 587.582414][T17105] ? __pfx___might_resched+0x10/0x10 [ 587.582430][T17105] ? fs_reclaim_acquire+0x7d/0x100 [ 587.582462][T17105] should_fail_ex+0x414/0x560 [ 587.582491][T17105] should_failslab+0xa8/0x100 [ 587.582518][T17105] __kmalloc_noprof+0xcb/0x4f0 [ 587.582539][T17105] ? kfree+0x4d/0x440 [ 587.582557][T17105] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 587.582581][T17105] tomoyo_realpath_from_path+0xe3/0x5d0 [ 587.582600][T17105] ? tomoyo_domain+0xd9/0x130 [ 587.582624][T17105] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 587.582648][T17105] tomoyo_path_number_perm+0x1e8/0x5a0 [ 587.582675][T17105] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 587.582718][T17105] ? __lock_acquire+0xab9/0xd20 [ 587.582766][T17105] ? __fget_files+0x2a/0x420 [ 587.582785][T17105] ? __fget_files+0x2a/0x420 [ 587.582798][T17105] ? __fget_files+0x3a0/0x420 [ 587.582812][T17105] ? __fget_files+0x2a/0x420 [ 587.582831][T17105] security_file_ioctl+0xcb/0x2d0 [ 587.582857][T17105] __se_sys_ioctl+0x47/0x170 [ 587.582881][T17105] do_syscall_64+0xfa/0x3b0 [ 587.582911][T17105] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.582933][T17105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.582950][T17105] ? clear_bhb_loop+0x60/0xb0 [ 587.582971][T17105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.582988][T17105] RIP: 0033:0x7f0efa78ebe9 [ 587.583004][T17105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.583019][T17105] RSP: 002b:00007f0ef89f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 587.583038][T17105] RAX: ffffffffffffffda RBX: 00007f0efa9b6090 RCX: 00007f0efa78ebe9 [ 587.583050][T17105] RDX: 0000000000000000 RSI: 000000000000ff05 RDI: 0000000000000006 [ 587.583060][T17105] RBP: 00007f0ef89f6090 R08: 0000000000000000 R09: 0000000000000000 [ 587.583071][T17105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.583081][T17105] R13: 00007f0efa9b6128 R14: 00007f0efa9b6090 R15: 00007ffd395d9c38 [ 587.583120][T17105] [ 587.583182][T17105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 589.144499][ T1333] bridge0: port 3(team0) entered disabled state [ 589.209443][ T1333] bridge_slave_1: left allmulticast mode [ 589.228048][ T1333] bridge_slave_1: left promiscuous mode [ 589.256772][ T1333] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.371573][ T1333] bridge_slave_0: left allmulticast mode [ 589.399048][ T1333] bridge_slave_0: left promiscuous mode [ 589.418486][T17131] netlink: 'syz.3.3715': attribute type 126 has an invalid length. [ 589.436847][ T1333] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.646117][T17138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3716'. [ 589.658611][T17138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3716'. [ 589.766093][T17140] netlink: 'syz.2.3717': attribute type 126 has an invalid length. [ 590.701380][T17159] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3723'. [ 590.726244][T17157] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3722'. [ 590.745380][T17157] netlink: 'syz.2.3722': attribute type 1 has an invalid length. [ 590.756288][T17157] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.3722'. [ 590.935141][T17164] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3725'. [ 591.122433][ T1333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.134843][ T1333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.149347][ T1333] bond0 (unregistering): Released all slaves [ 591.693359][T17173] lo speed is unknown, defaulting to 1000 [ 592.682574][T17194] netlink: 'syz.1.3733': attribute type 126 has an invalid length. [ 593.338505][T17207] warn_alloc: 1 callbacks suppressed [ 593.338553][T17207] syz.3.3736: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 593.382902][T17207] CPU: 0 UID: 0 PID: 17207 Comm: syz.3.3736 Not tainted syzkaller #0 PREEMPT(full) [ 593.382930][T17207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 593.382942][T17207] Call Trace: [ 593.382950][T17207] [ 593.382960][T17207] dump_stack_lvl+0x189/0x250 [ 593.382992][T17207] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 593.383024][T17207] ? __pfx_dump_stack_lvl+0x10/0x10 [ 593.383049][T17207] ? __pfx__printk+0x10/0x10 [ 593.383079][T17207] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 593.383103][T17207] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 593.383136][T17207] warn_alloc+0x214/0x310 [ 593.383169][T17207] ? trace_call_bpf+0x5ba/0x850 [ 593.383187][T17207] ? stack_depot_save_flags+0x40/0x860 [ 593.383218][T17207] ? __pfx_warn_alloc+0x10/0x10 [ 593.383257][T17207] ? xsk_init_queue+0xb0/0x110 [ 593.383282][T17207] ? xsk_setsockopt+0x57b/0x8d0 [ 593.383306][T17207] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 593.383324][T17207] ? do_syscall_64+0xfa/0x3b0 [ 593.383353][T17207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.383383][T17207] __vmalloc_node_range_noprof+0x125/0x12f0 [ 593.383415][T17207] ? perf_trace_preemptirq_template+0x280/0x340 [ 593.383462][T17207] ? irqentry_enter+0x3d/0x60 [ 593.383502][T17207] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 593.383549][T17207] ? irqentry_exit+0x74/0x90 [ 593.383578][T17207] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 593.383619][T17207] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 593.383651][T17207] vmalloc_user_noprof+0xad/0xf0 [ 593.383695][T17207] ? xskq_create+0xbf/0x170 [ 593.383724][T17207] xskq_create+0xbf/0x170 [ 593.383764][T17207] xsk_init_queue+0xb0/0x110 [ 593.383795][T17207] xsk_setsockopt+0x57b/0x8d0 [ 593.383825][T17207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 593.383850][T17207] ? __pfx_aa_sk_perm+0x10/0x10 [ 593.383886][T17207] ? __fget_files+0x2a/0x420 [ 593.383919][T17207] ? aa_sock_opt_perm+0xff/0x1b0 [ 593.383944][T17207] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 593.383969][T17207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 593.383998][T17207] do_sock_setsockopt+0x17c/0x1b0 [ 593.384038][T17207] __x64_sys_setsockopt+0x13f/0x1b0 [ 593.384065][T17207] do_syscall_64+0xfa/0x3b0 [ 593.384097][T17207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.384117][T17207] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 593.384139][T17207] ? clear_bhb_loop+0x60/0xb0 [ 593.384166][T17207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.384187][T17207] RIP: 0033:0x7f314098ebe9 [ 593.384207][T17207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 593.384227][T17207] RSP: 002b:00007f313ebd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 593.384251][T17207] RAX: ffffffffffffffda RBX: 00007f3140bb6090 RCX: 00007f314098ebe9 [ 593.384267][T17207] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000d [ 593.384281][T17207] RBP: 00007f3140a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 593.384295][T17207] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 593.384309][T17207] R13: 00007f3140bb6128 R14: 00007f3140bb6090 R15: 00007fff1d815008 [ 593.384343][T17207] [ 593.388733][T17207] Mem-Info: [ 593.806726][T17207] active_anon:9374 inactive_anon:0 isolated_anon:0 [ 593.806726][T17207] active_file:21732 inactive_file:40048 isolated_file:0 [ 593.806726][T17207] unevictable:768 dirty:381 writeback:0 [ 593.806726][T17207] slab_reclaimable:12078 slab_unreclaimable:115935 [ 593.806726][T17207] mapped:30149 shmem:1356 pagetables:1185 [ 593.806726][T17207] sec_pagetables:0 bounce:0 [ 593.806726][T17207] kernel_misc_reclaimable:0 [ 593.806726][T17207] free:1290536 free_pcp:14379 free_cma:0 [ 593.852942][T17207] Node 0 active_anon:37496kB inactive_anon:0kB active_file:86928kB inactive_file:159992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120596kB dirty:1520kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12060kB pagetables:4600kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 593.946944][T17207] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 593.978633][T17207] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 594.035913][T17207] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 594.047742][T17207] Node 0 DMA32 free:1265216kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37552kB inactive_anon:0kB active_file:86928kB inactive_file:158412kB unevictable:1536kB writepending:1520kB present:3129332kB managed:2557484kB mlocked:0kB bounce:0kB free_pcp:40060kB local_pcp:20920kB free_cma:0kB [ 594.090640][T17207] lowmem_reserve[]: 0 0 1 1 1 [ 594.117853][T17207] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1580kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 594.173619][T17207] lowmem_reserve[]: 0 0 0 0 0 [ 594.191178][T17207] Node 1 Normal free:3882196kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17376kB local_pcp:9600kB free_cma:0kB [ 594.252604][T17207] lowmem_reserve[]: 0 0 0 0 0 [ 594.258120][T17207] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 594.271099][T17207] Node 0 DMA32: 1014*4kB (UME) 1302*8kB (UME) 975*16kB (UME) 853*32kB (UME) 230*64kB (UME) 153*128kB (UME) 116*256kB (UME) 32*512kB (UME) 32*1024kB (UME) 7*2048kB (UME) 264*4096kB (M) = 1266200kB [ 594.371457][T17229] FAULT_INJECTION: forcing a failure. [ 594.371457][T17229] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 594.415550][T17207] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 594.433605][T17229] CPU: 1 UID: 0 PID: 17229 Comm: syz.4.3744 Not tainted syzkaller #0 PREEMPT(full) [ 594.433636][T17229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 594.433649][T17229] Call Trace: [ 594.433658][T17229] [ 594.433668][T17229] dump_stack_lvl+0x189/0x250 [ 594.433709][T17229] ? __pfx____ratelimit+0x10/0x10 [ 594.433740][T17229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 594.433765][T17229] ? __pfx__printk+0x10/0x10 [ 594.433799][T17229] ? fs_reclaim_acquire+0x7d/0x100 [ 594.433839][T17229] should_fail_ex+0x414/0x560 [ 594.433872][T17229] prepare_alloc_pages+0x213/0x610 [ 594.433901][T17229] __alloc_frozen_pages_noprof+0x123/0x370 [ 594.433927][T17229] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 594.433955][T17229] ? irqentry_exit+0x74/0x90 [ 594.433984][T17229] ? policy_nodemask+0x27c/0x720 [ 594.434019][T17229] alloc_pages_mpol+0x232/0x4a0 [ 594.434065][T17229] alloc_pages_noprof+0xa9/0x190 [ 594.434096][T17229] get_free_pages_noprof+0xf/0x80 [ 594.434115][T17229] kasan_populate_vmalloc+0x33/0x1a0 [ 594.434139][T17229] ? do_raw_spin_unlock+0x122/0x240 [ 594.434169][T17229] alloc_vmap_area+0xd51/0x1490 [ 594.434211][T17229] ? __pfx_alloc_vmap_area+0x10/0x10 [ 594.434238][T17229] ? __kasan_kmalloc+0x93/0xb0 [ 594.434267][T17229] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 594.434315][T17229] ? __get_vm_area_node+0x13f/0x300 [ 594.434341][T17229] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 594.434372][T17229] __get_vm_area_node+0x1f8/0x300 [ 594.434408][T17229] __vmalloc_node_range_noprof+0x301/0x12f0 [ 594.434440][T17229] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 594.434471][T17229] ? perf_trace_preemptirq_template+0x280/0x340 [ 594.434511][T17229] ? irqentry_enter+0x3d/0x60 [ 594.434550][T17229] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 594.434594][T17229] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 594.434621][T17229] __vmalloc_noprof+0xb1/0xf0 [ 594.434651][T17229] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 594.434683][T17229] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 594.434726][T17229] bpf_prog_alloc+0x3c/0x1a0 [ 594.434759][T17229] bpf_prog_load+0x735/0x1930 [ 594.434801][T17229] ? __pfx_bpf_prog_load+0x10/0x10 [ 594.434856][T17229] ? bpf_lsm_bpf+0x9/0x20 [ 594.434882][T17229] ? security_bpf+0x7e/0x300 [ 594.434913][T17229] __sys_bpf+0x528/0x870 [ 594.434944][T17229] ? __pfx___sys_bpf+0x10/0x10 [ 594.435004][T17229] __x64_sys_bpf+0x7c/0x90 [ 594.435031][T17229] do_syscall_64+0xfa/0x3b0 [ 594.435062][T17229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.435083][T17229] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 594.435105][T17229] ? clear_bhb_loop+0x60/0xb0 [ 594.435131][T17229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.435152][T17229] RIP: 0033:0x7f0efa78ebe9 [ 594.435172][T17229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.435191][T17229] RSP: 002b:00007f0efb52d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 594.435214][T17229] RAX: ffffffffffffffda RBX: 00007f0efa9b5fa0 RCX: 00007f0efa78ebe9 [ 594.435230][T17229] RDX: 0000000000000057 RSI: 0000200000000200 RDI: 0000000000000005 [ 594.435244][T17229] RBP: 00007f0efb52d090 R08: 0000000000000000 R09: 0000000000000000 [ 594.435258][T17229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.435271][T17229] R13: 00007f0efa9b6038 R14: 00007f0efa9b5fa0 R15: 00007ffd395d9c38 [ 594.435305][T17229] [ 594.476492][T17207] Node 1 [ 594.790873][ T1333] hsr_slave_0: left promiscuous mode [ 594.801908][T17207] Normal: 197*4kB (UME) 48*8kB (UME) 42*16kB (UME) 209*32kB (UME) 66*64kB (UME) 8*128kB (UME) 5*256kB (UME) 3*512kB (UM) 1*1024kB (M) 1*2048kB (E) 943*4096kB (M) = 3882196kB [ 594.835443][ T1333] hsr_slave_1: left promiscuous mode [ 594.848961][T17207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 594.869832][T17207] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 594.881309][ T1333] veth1_macvtap: left allmulticast mode [ 594.886981][T17207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 594.887013][T17207] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 594.887036][T17207] 63132 total pagecache pages [ 594.887051][T17207] 0 pages in swap cache [ 594.887065][T17207] Free swap = 124996kB [ 594.887130][T17207] Total swap = 124996kB [ 594.887146][T17207] 2097051 pages RAM [ 594.887161][T17207] 0 pages HighMem/MovableOnly [ 594.887175][T17207] 425654 pages reserved [ 594.887188][T17207] 0 pages cma reserved [ 594.951284][ T1333] veth1_macvtap: left promiscuous mode [ 594.985368][ T1333] veth0_macvtap: left promiscuous mode [ 595.004070][ T1333] veth1_vlan: left promiscuous mode [ 595.955628][ T1333] team_slave_1 (unregistering): left promiscuous mode [ 595.964259][ T1333] team_slave_1 (unregistering): left allmulticast mode [ 595.972360][ T1333] team0 (unregistering): Port device team_slave_1 removed [ 596.008526][ T1333] team_slave_0 (unregistering): left promiscuous mode [ 596.015432][ T1333] team_slave_0 (unregistering): left allmulticast mode [ 596.023674][ T1333] team0 (unregistering): Port device team_slave_0 removed [ 596.399821][T17260] pim6reg: tun_chr_ioctl cmd 1074025680 [ 596.447612][ T9] lo speed is unknown, defaulting to 1000 [ 596.453526][ T9] infiniband syz2: ib_query_port failed (-19) [ 596.793070][ T30] audit: type=1107 audit(1755626233.272:11): pid=17285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 596.915786][T17289] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3761'. [ 597.230755][T17305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 597.389398][T17307] netlink: 'syz.3.3764': attribute type 1 has an invalid length. [ 599.076996][ T1333]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 599.092800][ T1333]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 599.103191][ T1333]  (unregistering): Released all slaves [ 599.199661][ T1333] : left promiscuous mode [ 599.511016][T17352] FAULT_INJECTION: forcing a failure. [ 599.511016][T17352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.512467][T17352] [ 599.512479][T17352] ====================================================== [ 599.512489][T17352] WARNING: possible circular locking dependency detected [ 599.512513][T17352] syzkaller #0 Not tainted [ 599.512524][T17352] ------------------------------------------------------ [ 599.512533][T17352] syz.1.3784/17352 is trying to acquire lock: [ 599.512544][T17352] ffffffff8e12e100 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 599.512598][T17352] [ 599.512598][T17352] but task is already holding lock: [ 599.512606][T17352] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 599.512659][T17352] [ 599.512659][T17352] which lock already depends on the new lock. [ 599.512659][T17352] [ 599.512667][T17352] [ 599.512667][T17352] the existing dependency chain (in reverse order) is: [ 599.512675][T17352] [ 599.512675][T17352] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 599.512701][T17352] lock_acquire+0x120/0x360 [ 599.512728][T17352] _raw_spin_lock_nested+0x32/0x50 [ 599.512753][T17352] raw_spin_rq_lock_nested+0x2a/0x140 [ 599.512781][T17352] task_rq_lock+0xbc/0x470 [ 599.512806][T17352] cgroup_move_task+0x92/0x2a0 [ 599.512824][T17352] css_set_move_task+0x658/0x9e0 [ 599.512844][T17352] cgroup_post_fork+0x1ef/0x790 [ 599.512863][T17352] copy_process+0x3862/0x3c00 [ 599.512882][T17352] kernel_clone+0x21e/0x840 [ 599.512901][T17352] user_mode_thread+0xdd/0x140 [ 599.512921][T17352] rest_init+0x23/0x300 [ 599.512936][T17352] start_kernel+0x3a9/0x410 [ 599.512953][T17352] x86_64_start_reservations+0x24/0x30 [ 599.512978][T17352] x86_64_start_kernel+0x143/0x1c0 [ 599.513002][T17352] common_startup_64+0x13e/0x147 [ 599.513028][T17352] [ 599.513028][T17352] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 599.513054][T17352] lock_acquire+0x120/0x360 [ 599.513081][T17352] _raw_spin_lock_irqsave+0xa7/0xf0 [ 599.513104][T17352] try_to_wake_up+0x67/0x12b0 [ 599.513125][T17352] __wake_up_common_lock+0x137/0x1f0 [ 599.513149][T17352] tty_port_default_wakeup+0xa2/0xf0 [ 599.513168][T17352] serial8250_tx_chars+0x72e/0x970 [ 599.513195][T17352] serial8250_handle_irq+0x633/0xbb0 [ 599.513223][T17352] serial8250_default_handle_irq+0xbf/0x1e0 [ 599.513252][T17352] serial8250_interrupt+0x8a/0x160 [ 599.513275][T17352] __handle_irq_event_percpu+0x289/0x980 [ 599.513298][T17352] handle_irq_event+0x8b/0x1e0 [ 599.513320][T17352] handle_edge_irq+0x23b/0xa10 [ 599.513339][T17352] __common_interrupt+0x141/0x1f0 [ 599.513367][T17352] common_interrupt+0xb6/0xe0 [ 599.513386][T17352] asm_common_interrupt+0x26/0x40 [ 599.513413][T17352] pv_native_safe_halt+0x13/0x20 [ 599.513455][T17352] default_idle+0x13/0x20 [ 599.513471][T17352] default_idle_call+0x74/0xb0 [ 599.513502][T17352] do_idle+0x1e8/0x510 [ 599.513518][T17352] cpu_startup_entry+0x44/0x60 [ 599.513534][T17352] rest_init+0x2de/0x300 [ 599.513551][T17352] start_kernel+0x3a9/0x410 [ 599.513568][T17352] x86_64_start_reservations+0x24/0x30 [ 599.513593][T17352] x86_64_start_kernel+0x143/0x1c0 [ 599.513617][T17352] common_startup_64+0x13e/0x147 [ 599.513642][T17352] [ 599.513642][T17352] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 599.513670][T17352] lock_acquire+0x120/0x360 [ 599.513696][T17352] _raw_spin_lock_irqsave+0xa7/0xf0 [ 599.513718][T17352] __wake_up_common_lock+0x2f/0x1f0 [ 599.513742][T17352] tty_port_default_wakeup+0xa2/0xf0 [ 599.513760][T17352] serial8250_tx_chars+0x72e/0x970 [ 599.513788][T17352] serial8250_handle_irq+0x633/0xbb0 [ 599.513815][T17352] serial8250_default_handle_irq+0xbf/0x1e0 [ 599.513835][T17352] serial8250_interrupt+0x8a/0x160 [ 599.513859][T17352] __handle_irq_event_percpu+0x289/0x980 [ 599.513881][T17352] handle_irq_event+0x8b/0x1e0 [ 599.513903][T17352] handle_edge_irq+0x23b/0xa10 [ 599.513923][T17352] __common_interrupt+0x141/0x1f0 [ 599.513951][T17352] common_interrupt+0xb6/0xe0 [ 599.513969][T17352] asm_common_interrupt+0x26/0x40 [ 599.513987][T17352] pv_native_safe_halt+0x13/0x20 [ 599.514010][T17352] default_idle+0x13/0x20 [ 599.514026][T17352] default_idle_call+0x74/0xb0 [ 599.514042][T17352] do_idle+0x1e8/0x510 [ 599.514058][T17352] cpu_startup_entry+0x44/0x60 [ 599.514075][T17352] rest_init+0x2de/0x300 [ 599.514092][T17352] start_kernel+0x3a9/0x410 [ 599.514109][T17352] x86_64_start_reservations+0x24/0x30 [ 599.514133][T17352] x86_64_start_kernel+0x143/0x1c0 [ 599.514157][T17352] common_startup_64+0x13e/0x147 [ 599.514182][T17352] [ 599.514182][T17352] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 599.514209][T17352] lock_acquire+0x120/0x360 [ 599.514242][T17352] _raw_spin_lock_irqsave+0xa7/0xf0 [ 599.514264][T17352] serial8250_console_write+0x17e/0x1ba0 [ 599.514282][T17352] console_flush_all+0x728/0xc40 [ 599.514304][T17352] console_unlock+0xc4/0x270 [ 599.514322][T17352] vprintk_emit+0x5b7/0x7a0 [ 599.514340][T17352] _printk+0xcf/0x120 [ 599.514365][T17352] register_console+0xa8b/0xf90 [ 599.514387][T17352] univ8250_console_init+0x3a/0x70 [ 599.514412][T17352] console_init+0x10e/0x430 [ 599.514434][T17352] start_kernel+0x254/0x410 [ 599.514451][T17352] x86_64_start_reservations+0x24/0x30 [ 599.514477][T17352] x86_64_start_kernel+0x143/0x1c0 [ 599.514500][T17352] common_startup_64+0x13e/0x147 [ 599.514525][T17352] [ 599.514525][T17352] -> #0 (console_owner){-...}-{0:0}: [ 599.514551][T17352] validate_chain+0xb9b/0x2140 [ 599.514569][T17352] __lock_acquire+0xab9/0xd20 [ 599.514595][T17352] lock_acquire+0x120/0x360 [ 599.514620][T17352] console_flush_all+0x6d2/0xc40 [ 599.514640][T17352] console_unlock+0xc4/0x270 [ 599.514657][T17352] vprintk_emit+0x5b7/0x7a0 [ 599.514675][T17352] _printk+0xcf/0x120 [ 599.514697][T17352] should_fail_ex+0x3f5/0x560 [ 599.514718][T17352] strncpy_from_user+0x36/0x290 [ 599.514739][T17352] strncpy_from_user_nofault+0x72/0x150 [ 599.514759][T17352] bpf_probe_read_compat_str+0xe2/0x180 [ 599.514776][T17352] bpf_prog_d6dd19cc840370cc+0x49/0x60 [ 599.514798][T17352] bpf_trace_run2+0x281/0x4b0 [ 599.514820][T17352] __bpf_trace_tlb_flush+0xf5/0x150 [ 599.514845][T17352] trace_tlb_flush+0x115/0x140 [ 599.514868][T17352] switch_mm_irqs_off+0x53e/0x7a0 [ 599.514892][T17352] __schedule+0x110e/0x4cc0 [ 599.514913][T17352] preempt_schedule_common+0x83/0xd0 [ 599.514937][T17352] preempt_schedule+0xae/0xc0 [ 599.514959][T17352] preempt_schedule_thunk+0x16/0x30 [ 599.514988][T17352] _raw_spin_unlock+0x3f/0x50 [ 599.515009][T17352] __handle_mm_fault+0x3a6c/0x5440 [ 599.515033][T17352] handle_mm_fault+0x40a/0x8e0 [ 599.515056][T17352] do_user_addr_fault+0x764/0x1390 [ 599.515086][T17352] exc_page_fault+0x76/0xf0 [ 599.515108][T17352] asm_exc_page_fault+0x26/0x30 [ 599.515126][T17352] rep_movs_alternative+0x4a/0x90 [ 599.515146][T17352] _copy_from_iter+0x24c/0x16f0 [ 599.515162][T17352] pfkey_sendmsg+0x230/0x1090 [ 599.515190][T17352] __sock_sendmsg+0x21c/0x270 [ 599.515212][T17352] ____sys_sendmsg+0x505/0x830 [ 599.515229][T17352] ___sys_sendmsg+0x21f/0x2a0 [ 599.515251][T17352] __x64_sys_sendmsg+0x19b/0x260 [ 599.515268][T17352] do_syscall_64+0xfa/0x3b0 [ 599.515295][T17352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.515312][T17352] [ 599.515312][T17352] other info that might help us debug this: [ 599.515312][T17352] [ 599.515319][T17352] Chain exists of: [ 599.515319][T17352] console_owner --> &p->pi_lock --> &rq->__lock [ 599.515319][T17352] [ 599.515351][T17352] Possible unsafe locking scenario: [ 599.515351][T17352] [ 599.515358][T17352] CPU0 CPU1 [ 599.515364][T17352] ---- ---- [ 599.515371][T17352] lock(&rq->__lock); [ 599.515383][T17352] lock(&p->pi_lock); [ 599.515397][T17352] lock(&rq->__lock); [ 599.515410][T17352] lock(console_owner); [ 599.515423][T17352] [ 599.515423][T17352] *** DEADLOCK *** [ 599.515423][T17352] [ 599.515429][T17352] 6 locks held by syz.1.3784/17352: [ 599.515440][T17352] #0: ffff888024660ca0 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x32/0x300 [ 599.515495][T17352] #1: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x250 [ 599.515545][T17352] #2: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 599.515601][T17352] #3: ffffffff8e139ea0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 599.515650][T17352] #4: ffffffff8e12e160 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 599.515698][T17352] #5: ffffffff8e015a30 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 599.515743][T17352] [ 599.515743][T17352] stack backtrace: [ 599.515753][T17352] CPU: 0 UID: 0 PID: 17352 Comm: syz.1.3784 Not tainted syzkaller #0 PREEMPT(full) [ 599.515784][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.515797][T17352] Call Trace: [ 599.515808][T17352] [ 599.515820][T17352] dump_stack_lvl+0x189/0x250 [ 599.515861][T17352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.515891][T17352] ? __pfx__printk+0x10/0x10 [ 599.515937][T17352] ? print_lock_name+0xde/0x100 [ 599.516001][T17352] print_circular_bug+0x2ee/0x310 [ 599.516060][T17352] check_noncircular+0x134/0x160 [ 599.516131][T17352] validate_chain+0xb9b/0x2140 [ 599.516268][T17352] __lock_acquire+0xab9/0xd20 [ 599.516326][T17352] ? console_flush_all+0x13a/0xc40 [ 599.516345][T17352] lock_acquire+0x120/0x360 [ 599.516370][T17352] ? console_flush_all+0x13a/0xc40 [ 599.516413][T17352] ? do_raw_spin_unlock+0x122/0x240 [ 599.516434][T17352] ? console_flush_all+0x13a/0xc40 [ 599.516463][T17352] console_flush_all+0x6d2/0xc40 [ 599.516482][T17352] ? console_flush_all+0x13a/0xc40 [ 599.516514][T17352] ? console_flush_all+0x13a/0xc40 [ 599.516553][T17352] ? __pfx_console_flush_all+0x10/0x10 [ 599.516603][T17352] ? is_printk_cpu_sync_owner+0x32/0x40 [ 599.516637][T17352] console_unlock+0xc4/0x270 [ 599.516665][T17352] ? __pfx_console_unlock+0x10/0x10 [ 599.516696][T17352] ? is_printk_cpu_sync_owner+0x32/0x40 [ 599.516730][T17352] vprintk_emit+0x5b7/0x7a0 [ 599.516758][T17352] ? __pfx_vprintk_emit+0x10/0x10 [ 599.516828][T17352] _printk+0xcf/0x120 [ 599.516853][T17352] ? __pfx____ratelimit+0x10/0x10 [ 599.516886][T17352] ? __pfx__printk+0x10/0x10 [ 599.516906][T17352] ? perf_trace_lock_acquire+0xf5/0x410 [ 599.516957][T17352] should_fail_ex+0x3f5/0x560 [ 599.516994][T17352] strncpy_from_user+0x36/0x290 [ 599.517029][T17352] strncpy_from_user_nofault+0x72/0x150 [ 599.517059][T17352] bpf_probe_read_compat_str+0xe2/0x180 [ 599.517096][T17352] bpf_prog_d6dd19cc840370cc+0x49/0x60 [ 599.517117][T17352] bpf_trace_run2+0x281/0x4b0 [ 599.517143][T17352] ? bpf_trace_run2+0x186/0x4b0 [ 599.517173][T17352] ? __pfx_bpf_trace_run2+0x10/0x10 [ 599.517207][T17352] ? perf_trace_lock_acquire+0xf5/0x410 [ 599.517224][T17352] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 599.517271][T17352] __bpf_trace_tlb_flush+0xf5/0x150 [ 599.517304][T17352] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 599.517340][T17352] ? perf_cgroup_switch+0xe6/0x910 [ 599.517373][T17352] ? rcu_read_lock_sched_held+0x89/0x100 [ 599.517414][T17352] trace_tlb_flush+0x115/0x140 [ 599.517442][T17352] switch_mm_irqs_off+0x53e/0x7a0 [ 599.517481][T17352] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 599.517501][T17352] ? psi_task_switch+0x4e3/0x880 [ 599.517544][T17352] __schedule+0x110e/0x4cc0 [ 599.517595][T17352] ? perf_trace_preemptirq_template+0x280/0x340 [ 599.517621][T17352] ? irqentry_enter+0x3d/0x60 [ 599.517663][T17352] ? __pfx___schedule+0x10/0x10 [ 599.517699][T17352] ? __lock_acquire+0xab9/0xd20 [ 599.517741][T17352] ? page_table_check_set+0x18d/0x730 [ 599.517769][T17352] ? preempt_schedule+0xae/0xc0 [ 599.517796][T17352] preempt_schedule_common+0x83/0xd0 [ 599.517822][T17352] preempt_schedule+0xae/0xc0 [ 599.517845][T17352] ? __pfx_preempt_schedule+0x10/0x10 [ 599.517869][T17352] ? page_table_check_set+0x18d/0x730 [ 599.517910][T17352] preempt_schedule_thunk+0x16/0x30 [ 599.517953][T17352] _raw_spin_unlock+0x3f/0x50 [ 599.517973][T17352] __handle_mm_fault+0x3a6c/0x5440 [ 599.518063][T17352] ? __pfx___handle_mm_fault+0x10/0x10 [ 599.518137][T17352] ? find_vma+0xe7/0x160 [ 599.518160][T17352] ? __pfx_find_vma+0x10/0x10 [ 599.518191][T17352] handle_mm_fault+0x40a/0x8e0 [ 599.518247][T17352] do_user_addr_fault+0x764/0x1390 [ 599.518326][T17352] exc_page_fault+0x76/0xf0 [ 599.518346][T17352] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.518373][T17352] asm_exc_page_fault+0x26/0x30 [ 599.518388][T17352] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 599.518405][T17352] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 599.518418][T17352] RSP: 0018:ffffc9000bfcf638 EFLAGS: 00050206 [ 599.518431][T17352] RAX: ffffffff84c59301 RBX: ffff88805c400000 RCX: 0000000000006fe0 [ 599.518443][T17352] RDX: 0000000000000001 RSI: 000020000002d000 RDI: ffff88805c42d000 [ 599.518454][T17352] RBP: ffffc9000bfcf790 R08: ffff88805c433fdf R09: 1ffff1100b8867fb [ 599.518465][T17352] R10: dffffc0000000000 R11: ffffed100b8867fc R12: 1ffff920017f9fbf [ 599.518476][T17352] R13: 0000200000000000 R14: ffffc9000bfcfe08 R15: 0000000000033fe0 [ 599.518506][T17352] ? _copy_from_iter+0x171/0x16f0 [ 599.518537][T17352] _copy_from_iter+0x24c/0x16f0 [ 599.518565][T17352] ? rcu_is_watching+0x15/0xb0 [ 599.518586][T17352] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 599.518614][T17352] ? __pfx__copy_from_iter+0x10/0x10 [ 599.518637][T17352] ? __build_skb_around+0x257/0x3e0 [ 599.518672][T17352] ? skb_put+0x11b/0x210 [ 599.518706][T17352] pfkey_sendmsg+0x230/0x1090 [ 599.518746][T17352] ? __pfx___might_resched+0x10/0x10 [ 599.518759][T17352] ? __lock_acquire+0xab9/0xd20 [ 599.518802][T17352] ? perf_trace_lock_acquire+0xf5/0x410 [ 599.518819][T17352] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 599.518861][T17352] ? aa_sk_perm+0x81e/0x950 [ 599.518894][T17352] ? perf_trace_lock_acquire+0xf5/0x410 [ 599.518910][T17352] ? __pfx_aa_sk_perm+0x10/0x10 [ 599.518932][T17352] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 599.518963][T17352] ? aa_sock_msg_perm+0xf1/0x1d0 [ 599.519000][T17352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.519017][T17352] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 599.519045][T17352] __sock_sendmsg+0x21c/0x270 [ 599.519075][T17352] ____sys_sendmsg+0x505/0x830 [ 599.519107][T17352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.519147][T17352] ? import_iovec+0x74/0xa0 [ 599.519176][T17352] ___sys_sendmsg+0x21f/0x2a0 [ 599.519200][T17352] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.519307][T17352] ? __fget_files+0x2a/0x420 [ 599.519321][T17352] ? __fget_files+0x3a0/0x420 [ 599.519361][T17352] __x64_sys_sendmsg+0x19b/0x260 [ 599.519376][T17352] ? perf_trace_run_bpf_submit+0x100/0x170 [ 599.519400][T17352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.519440][T17352] ? __pfx_ksys_write+0x10/0x10 [ 599.519458][T17352] ? rcu_is_watching+0x15/0xb0 [ 599.519488][T17352] ? do_syscall_64+0xbe/0x3b0 [ 599.519520][T17352] do_syscall_64+0xfa/0x3b0 [ 599.519540][T17352] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.519562][T17352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.519578][T17352] ? clear_bhb_loop+0x60/0xb0 [ 599.519603][T17352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.519618][T17352] RIP: 0033:0x7f50a158ebe9 [ 599.519632][T17352] Code: Unable to access opcode bytes at 0x7f50a158ebbf. [ 599.519640][T17352] RSP: 002b:00007f50a2410038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.519654][T17352] RAX: ffffffffffffffda RBX: 00007f50a17b5fa0 RCX: 00007f50a158ebe9 [ 599.519665][T17352] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 599.519674][T17352] RBP: 00007f50a2410090 R08: 0000000000000000 R09: 0000000000000000 [ 599.519684][T17352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.519693][T17352] R13: 00007f50a17b6038 R14: 00007f50a17b5fa0 R15: 00007fff9a5bf798 [ 599.519742][T17352] [ 601.089202][T17352] CPU: 0 UID: 0 PID: 17352 Comm: syz.1.3784 Not tainted syzkaller #0 PREEMPT(full) [ 601.089222][T17352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.089232][T17352] Call Trace: [ 601.089241][T17352] [ 601.089251][T17352] dump_stack_lvl+0x189/0x250 [ 601.089277][T17352] ? __pfx____ratelimit+0x10/0x10 [ 601.089301][T17352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.089322][T17352] ? __pfx__printk+0x10/0x10 [ 601.089340][T17352] ? perf_trace_lock_acquire+0xf5/0x410 [ 601.089387][T17352] should_fail_ex+0x414/0x560 [ 601.089421][T17352] strncpy_from_user+0x36/0x290 [ 601.089452][T17352] strncpy_from_user_nofault+0x72/0x150 [ 601.089481][T17352] bpf_probe_read_compat_str+0xe2/0x180 [ 601.089508][T17352] bpf_prog_d6dd19cc840370cc+0x49/0x60 [ 601.089528][T17352] bpf_trace_run2+0x281/0x4b0 [ 601.089551][T17352] ? bpf_trace_run2+0x186/0x4b0 [ 601.089578][T17352] ? __pfx_bpf_trace_run2+0x10/0x10 [ 601.089609][T17352] ? perf_trace_lock_acquire+0xf5/0x410 [ 601.089623][T17352] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 601.089657][T17352] __bpf_trace_tlb_flush+0xf5/0x150 [ 601.089687][T17352] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 601.089720][T17352] ? perf_cgroup_switch+0xe6/0x910 [ 601.089749][T17352] ? rcu_read_lock_sched_held+0x89/0x100 [ 601.089774][T17352] trace_tlb_flush+0x115/0x140 [ 601.089800][T17352] switch_mm_irqs_off+0x53e/0x7a0 [ 601.089837][T17352] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 601.089854][T17352] ? psi_task_switch+0x4e3/0x880 [ 601.089893][T17352] __schedule+0x110e/0x4cc0 [ 601.089941][T17352] ? perf_trace_preemptirq_template+0x280/0x340 [ 601.089966][T17352] ? irqentry_enter+0x3d/0x60 [ 601.090004][T17352] ? __pfx___schedule+0x10/0x10 [ 601.090038][T17352] ? __lock_acquire+0xab9/0xd20 [ 601.090077][T17352] ? page_table_check_set+0x18d/0x730 [ 601.090101][T17352] ? preempt_schedule+0xae/0xc0 [ 601.090127][T17352] preempt_schedule_common+0x83/0xd0 [ 601.090150][T17352] preempt_schedule+0xae/0xc0 [ 601.090176][T17352] ? __pfx_preempt_schedule+0x10/0x10 [ 601.090198][T17352] ? page_table_check_set+0x18d/0x730 [ 601.090236][T17352] preempt_schedule_thunk+0x16/0x30 [ 601.090276][T17352] _raw_spin_unlock+0x3f/0x50 [ 601.090295][T17352] __handle_mm_fault+0x3a6c/0x5440 [ 601.090353][T17352] ? __pfx___handle_mm_fault+0x10/0x10 [ 601.090419][T17352] ? find_vma+0xe7/0x160 [ 601.090440][T17352] ? __pfx_find_vma+0x10/0x10 [ 601.090468][T17352] handle_mm_fault+0x40a/0x8e0 [ 601.090514][T17352] do_user_addr_fault+0x764/0x1390 [ 601.090575][T17352] exc_page_fault+0x76/0xf0 [ 601.090593][T17352] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.090620][T17352] asm_exc_page_fault+0x26/0x30 [ 601.090636][T17352] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 601.090653][T17352] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 601.090666][T17352] RSP: 0018:ffffc9000bfcf638 EFLAGS: 00050206 [ 601.090681][T17352] RAX: ffffffff84c59301 RBX: ffff88805c400000 RCX: 0000000000006fe0 [ 601.090692][T17352] RDX: 0000000000000001 RSI: 000020000002d000 RDI: ffff88805c42d000 [ 601.090702][T17352] RBP: ffffc9000bfcf790 R08: ffff88805c433fdf R09: 1ffff1100b8867fb [ 601.090713][T17352] R10: dffffc0000000000 R11: ffffed100b8867fc R12: 1ffff920017f9fbf [ 601.090743][T17352] R13: 0000200000000000 R14: ffffc9000bfcfe08 R15: 0000000000033fe0 [ 601.090773][T17352] ? _copy_from_iter+0x171/0x16f0 [ 601.090806][T17352] _copy_from_iter+0x24c/0x16f0 [ 601.090833][T17352] ? rcu_is_watching+0x15/0xb0 [ 601.090854][T17352] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 601.090882][T17352] ? __pfx__copy_from_iter+0x10/0x10 [ 601.090905][T17352] ? __build_skb_around+0x257/0x3e0 [ 601.090941][T17352] ? skb_put+0x11b/0x210 [ 601.090975][T17352] pfkey_sendmsg+0x230/0x1090 [ 601.091016][T17352] ? __pfx___might_resched+0x10/0x10 [ 601.091029][T17352] ? __lock_acquire+0xab9/0xd20 [ 601.091061][T17352] ? perf_trace_lock_acquire+0xf5/0x410 [ 601.091078][T17352] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 601.091120][T17352] ? aa_sk_perm+0x81e/0x950 [ 601.091152][T17352] ? perf_trace_lock_acquire+0xf5/0x410 [ 601.091173][T17352] ? __pfx_aa_sk_perm+0x10/0x10 [ 601.091194][T17352] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 601.091225][T17352] ? aa_sock_msg_perm+0xf1/0x1d0 [ 601.091255][T17352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.091273][T17352] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 601.091301][T17352] __sock_sendmsg+0x21c/0x270 [ 601.091332][T17352] ____sys_sendmsg+0x505/0x830 [ 601.091364][T17352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.091404][T17352] ? import_iovec+0x74/0xa0 [ 601.091433][T17352] ___sys_sendmsg+0x21f/0x2a0 [ 601.091458][T17352] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.091559][T17352] ? __fget_files+0x2a/0x420 [ 601.091573][T17352] ? __fget_files+0x3a0/0x420 [ 601.091613][T17352] __x64_sys_sendmsg+0x19b/0x260 [ 601.091627][T17352] ? perf_trace_run_bpf_submit+0x100/0x170 [ 601.091651][T17352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.091691][T17352] ? __pfx_ksys_write+0x10/0x10 [ 601.091709][T17352] ? rcu_is_watching+0x15/0xb0 [ 601.091738][T17352] ? do_syscall_64+0xbe/0x3b0 [ 601.091770][T17352] do_syscall_64+0xfa/0x3b0 [ 601.091790][T17352] ? lockdep_hardirqs_on+0x9c/0x150 [ 601.091812][T17352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.091827][T17352] ? clear_bhb_loop+0x60/0xb0 [ 601.091852][T17352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.091867][T17352] RIP: 0033:0x7f50a158ebe9 [ 601.091882][T17352] Code: Unable to access opcode bytes at 0x7f50a158ebbf. [ 601.091890][T17352] RSP: 002b:00007f50a2410038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.091904][T17352] RAX: ffffffffffffffda RBX: 00007f50a17b5fa0 RCX: 00007f50a158ebe9 [ 601.091926][T17352] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 601.091935][T17352] RBP: 00007f50a2410090 R08: 0000000000000000 R09: 0000000000000000 [ 601.091944][T17352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.091952][T17352] R13: 00007f50a17b6038 R14: 00007f50a17b5fa0 R15: 00007fff9a5bf798 [ 601.091998][T17352] [ 601.691778][T17354] netlink: 14212 bytes leftover after parsing attributes in process `syz.5.3782'. [ 601.808635][T17354] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 602.223888][ T1333] hsr_slave_0: left promiscuous mode [ 602.229790][ T1333] hsr_slave_1: left promiscuous mode [ 602.237755][ T1333] veth1_macvtap: left allmulticast mode [ 602.243400][ T1333] veth1_macvtap: left promiscuous mode [ 602.249001][ T1333] veth0_macvtap: left promiscuous mode [ 602.254551][ T1333] veth1_vlan: left promiscuous mode [ 602.420088][ T1333] team0 (unregistering): Port device 76žÿ removed [ 602.443154][ T1333] team0 (unregistering): Port device C removed [ 606.176499][ T5863] Bluetooth: hci0: command 0x0406 tx timeout