last executing test programs: 40.853563598s ago: executing program 0 (id=2122): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x19120, 0x0, 0x63, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x2f, 0x0, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x2, 0x3fe, 0x7ffffffc, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f00000000c0), 0x59}, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xcc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4088, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) r6 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0xd, &(0x7f00000000c0), 0x4f) socket$phonet_pipe(0x23, 0x5, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f00000001c0)=ANY=[@ANYRES16=r4], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000200)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x2, 0x10, 0x1, 0x3, 0xe, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0x0, 0x10, 0x0, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}, @sadb_address={0x5, 0x5, 0x32, 0x0, 0x0, @in6={0xa, 0x4e24, 0x0, @private2, 0x5}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd2a, 0x3507}]}, 0x70}}, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e9703000000000000", 0xcb}], 0x1}, 0xc8d2) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r5, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES32=r9, @ANYRES8=r4, @ANYRES64=0x0], 0x20) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 40.575472857s ago: executing program 0 (id=2124): r0 = socket$kcm(0xa, 0x1, 0x0) recvmsg(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x1a062) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10041, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x14, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x15, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8080, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x15, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r7 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f00000007c0)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80, 0x0}, 0x24014180) 39.53863696s ago: executing program 0 (id=2140): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000004, 0x40000002}, 0x0, 0x0, 0x0, 0x8, 0x400, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000ac0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x2, 0x300) socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0xf, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="08001efbb07d5a6e", 0x8}], 0x1}, 0x4850) 39.241746663s ago: executing program 0 (id=2145): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) close(0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00S\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300840011000000110002de0e116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r0, 0x58, &(0x7f0000000600)}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xf, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r8, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940), 0x0, 0x52, &(0x7f0000000980), 0x0, 0x10, &(0x7f00000009c0), &(0x7f0000000a00), 0x8, 0xd5, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0)=r9, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 38.937070693s ago: executing program 2 (id=2149): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x485, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_bp={0x0, 0x9}, 0x30f070, 0x6, 0xfffffbff, 0x4, 0x2, 0x7, 0x6, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r4 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r4}, 0x20) recvmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xfffffffffffffed6, 0x0}, 0x4000a140) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x5, 0x3, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r5}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) socket$kcm(0x23, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000034000b45d30000000000000001d25a80", 0x14}], 0x1}, 0x0) r9 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x0, 0x485, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e0000002d008188042f8eeae0b8402e7b6e67d83c00000020000000000003000000002000e9ffffff0000000000", 0x2e}], 0x1}, 0x2004c090) 38.658690738s ago: executing program 2 (id=2152): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x11, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd4b3547", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) 38.630407894s ago: executing program 2 (id=2154): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) (async) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 38.466755511s ago: executing program 2 (id=2156): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r0, r1, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x90}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x40b9}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb0}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000020040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r7, 0x400454d9, 0x0) 38.205625222s ago: executing program 0 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4048040}, 0x40014) 37.994419809s ago: executing program 2 (id=2163): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 37.882957928s ago: executing program 0 (id=2166): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x8, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005", 0x15}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x2}, {0x6, 0xff, 0x0, 0x4}]}) 29.323462114s ago: executing program 2 (id=2170): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x43, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0xeaffffff}, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfe}, 0x10}}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000ff08000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000ac050000060000000800000000080400", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000029a3917846ca5f9c3300030000002500000000000000000005"], 0x50) 21.434826026s ago: executing program 32 (id=2166): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000008, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x8, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005", 0x15}], 0x1}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000000)={0x2, &(0x7f00000004c0)=[{0x2}, {0x6, 0xff, 0x0, 0x4}]}) 21.235908759s ago: executing program 33 (id=2170): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x43, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x23, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0, 0x0, 0x0, 0x0, 0xeaffffff}, 0x0) sendmsg$AUDIT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfe}, 0x10}}, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000ff08000540000000020900020073797a310000000008000a40fffffffc0800034000000010400000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff4305000f1100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000ac050000060000000800000000080400", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000029a3917846ca5f9c3300030000002500000000000000000005"], 0x50) 4.998673044s ago: executing program 4 (id=2268): bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="eb0000000000000000000000000000000022000000000000000000004c37c5dd03d0799ad78fa675842dfc72892902cc77c1be3650dc660be41bac34f955e6cb95d88f96f3e9ff42becced0b7211638af90589b442e73d781a9f910f094fad0dad08f24edff49d2b3f0887f52349ae0a96ef7f28c5ac6b49c41e9155638081bd3dfe89f188b773e0f25267c676c2848ef3a91674356ed4d18cb041d7c00efc543c79b3bc5ba81cf6d8dd0b40fd"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x15, 0xf, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000300), 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000a000004000000000000000000000029fcb64575b5500ea7b4aa"], 0x50) (async) r1 = socket$kcm(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='freezer.self_freezing\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x7c, &(0x7f0000000000)=r2, 0x62) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x4, 0x8, &(0x7f00000006c0)="2f070225", &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r4 = socket$kcm(0xa, 0x1, 0x106) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40010060) (async) sendmsg$sock(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)="975d50c4e35b233d818fc3adad12426b45ef561aea5cba64653b819e81c643359f9384ec38e25863af9503e4353abef01ad91606ed0d350dc96fba5ffba3be08e85e0e06e1e4fac17b6dd1e335a633606cfdeccc8e9a155bf6db0e3bd1baa6bf9fac6bed084994a96947482b9217d1efa521cff2aaca46d10bdd85bd1e08adb19fb16b140f382fc925cd6ed425e2f1976f9a5d2afdf1a2cdde94948e1f7e33e141a1b1fea9caf7a42463ad3abef652116733bf060262da856cc2a05ad116ef5781083a86c47de3759d54487e1af74f4e0b08a73b0fe4bab93c85d828da5822fa", 0xe0}, {&(0x7f0000000200)="c8860df767", 0x5}, {&(0x7f00000008c0)="b2160d24b2b16eecd52f72c1b33ad70f28fb6acc998958d0566c98286316e25059feb89134cf8b09208cd05c86b503a458257704b62bce2471c1ea0ad5afa4f62223b177a66ee100213147a37b1f466e0ec3082223d056d62647e1f4f8c65af29e35ccd224b9ec374f4337", 0x6b}], 0x3, &(0x7f0000000a40)}, 0x40000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000a8ffffff000000000300000085000004750000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2111, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x8028, 0x0, 0x0, 0x8, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffefff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x6, 0x18}, 0xc) (async, rerun: 64) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0c00e3ff00000000424e2603bbb2df7f901b4394a7119b2ee6f7e010e6c9ac4518ccba79f0aa23eb44fe1ca7c119106a7ab9b6e7c6613e31b5d32b7884da55d1f8f778567801591af7b399b504ddf42920", @ANYRES32, @ANYBLOB, @ANYRES32=r3, @ANYBLOB, @ANYRES64=0x0], 0x20) socket$kcm(0xa, 0x922000000003, 0x11) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x5, 0x2, 0x4}, 0x48) (async) r7 = socket$kcm(0x11, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701000000ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000006000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r8}, 0x38) (async) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000840)=@phonet={0x23, 0x0, 0x0, 0xa}, 0x80, 0x0}, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000002c0), 0x4) 4.818808325s ago: executing program 4 (id=2270): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x81}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0x13, 0x1000, &(0x7f0000000000)="582b1e3b666375c83ac04d276ae3eccbc76d29", &(0x7f0000000a40)=""/4096, 0x0, 0x0, 0x5b, 0x6e, &(0x7f0000000040)="46c6fb8ec71d7359e404ad9fe3ba000cc954269d1b78b08a2b24410acdfc7850bf51751175956834ade21d4336c5005ae549fe14562264aca44fe0dd2e2e2a74cf28b496640dd4dde4ecf6886a1ddc5ec81fa569d8009cbc5b2e40", &(0x7f00000000c0)="e558fb3b487ca457bac82831f3f223d6da2f9034e8c3f5b44219f96a289721e6c0554dc43b60ebab267bd753bb490a71ed92e48f263b9cb0b029fb4dd2497083cc7c49fd74eec9119bc96ce3220a3e96fc483497939298ea162e6d54c0d3c35d5072582f581c7177e9860e8a28a2", 0x0, 0x0, 0xed3f}, 0x50) 4.793441145s ago: executing program 1 (id=2271): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0x7, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x2e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x748, 0xfffffffe, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60489660b7a6470a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$can_raw(r4, &(0x7f0000000180)={&(0x7f0000000880)={0x1d, r7}, 0x10, &(0x7f0000000140)={&(0x7f0000000600)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x1b, 0x3, 0x0, 0x0, "b4f79014e5323e6e21fb27b1a5d75208388792b22384d5fe50ff116148b70d8c4bddf469161f852133ee8c369bf996838ef24258f527fff45b1514c68d6227e6"}, 0x48}, 0x1, 0x0, 0x0, 0x8044}, 0x8001) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x20, &(0x7f0000000580)={&(0x7f0000000680)=""/239, 0xef, 0x0, &(0x7f0000000780)=""/131, 0x83}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000b40)=ANY=[@ANYBLOB="18580000010000000000000000000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x6e, '\x00', r7, 0x1b, r1, 0x8, &(0x7f00000002c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x9, 0x1, 0x7fffffff}, 0x10, r8, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x10, 0x8}, 0x94) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x19}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r1, @ANYBLOB="14df00"/20, @ANYRES32=r6, @ANYRES32=r1, @ANYBLOB="04000000050000000500000000c18bd777b74fb28c00000000000000"], 0x50) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000300)="1e", 0x1}], 0x1, 0x0, 0x0, 0x24000080}, 0x20040010) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f00000000c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='syzkaller\x00', 0x48, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x7}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x8, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200), &(0x7f0000000240)=[{0x1, 0x1, 0x2, 0x3}], 0x10, 0x800}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffffff360000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x449d7}, 0x0) 4.73049938s ago: executing program 4 (id=2272): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9a) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0)=r1, 0x4) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xa2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) fstat(r2, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r16 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmsg$unix(r4, &(0x7f00000013c0)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {&(0x7f0000000440)="20ed02298f4e96169f2fb0f33b9051b77a4e2a0b4755281385e1a75a4b0e5bb1ead4a96eddf1be18f208d17bce0a86eb3a1dc811be64ad0f5417696576943fba2cc94256213172e2b75166e0cc44c17aab5d", 0x52}, {&(0x7f00000004c0)="7d380c6f2d0e593e50bf7532cb9d4dac18a81d59d534095ea5325e0c9485ede71f9c676ec8ad8e57e3025da37ab3d795f981c8ae3cb1c085234ddadb96f2713f0571e9d3cfa55063e6c68f25dea95ae656372693acbb6d5689148671fd2c6d57507e151219ae4b8f3816fb14a86d2d8ce87f10c62c304314b4600b537dc0928d9ddbce6db9ff479b91fdad509ff0efb6a0c248c3995890a946afba4f8734d1b713090e2c61dd27ed0c968e263dfe74081aecd57ea096acc8e2005f14b1", 0xbd}, {&(0x7f0000000240)}, {&(0x7f0000000600)="b43e24b37fede329999ce5607a594f3f96435756e28a97131c50932e6a3b821d3e7777ba", 0x24}, {&(0x7f0000000740)="72e2d4807cf71da42ca6ce11076c850377676af083c885283ff4a3b86f657be57d7ca3dc247722571054db10ca4f0f04c1d9bc9d53d3e6a46151b9e22c6a1b36aa6383a58933cc6e5336e7eb90a6a3001dfa5f43b6eec0b2cf1d96c83a7cc30ad7d78239f8e087fb706fb60f6fc17399d458499172bf6a", 0x77}, {&(0x7f0000000640)="a9217fe5c5e1d6250f69cb414b5eac4c72bb5fd6c83c4bc0476b9c5b4c6377db4e7e58b2f5f276fe649a40fc5c152906", 0x30}, {&(0x7f00000007c0)="6545f8d304cdf8a7b1ae20470798545bba499e6837719c647aae194488e0e07b262bb2", 0x23}], 0x8, &(0x7f0000001240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r12, 0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}, @rights={{0x34, 0x1, 0x1, [r7, r8, r8, r11, 0xffffffffffffffff, r15, r9, r0, r12]}}, @rights={{0x18, 0x1, 0x1, [r10, r16]}}], 0x158, 0x4}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000f00)="709b1edc2051e5ac8c09051c1c0c6fc51376aa7e1cd252a2", 0x18}], 0x2}, 0x800) 3.721774691s ago: executing program 4 (id=2273): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRES32=r1], &(0x7f00000002c0)='syzkaller\x00', 0xa}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4) (async) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x4) socket$kcm(0x15, 0x5, 0x0) (async) r4 = socket$kcm(0x15, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/105, 0x69}, 0x42) syz_clone(0xa0000280, &(0x7f0000001040), 0x0, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0xcf, 0x7f, 0x9, 0x0, 0xffffffffffffffaf, 0x400, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6e78, 0x1, @perf_config_ext={0x6, 0x1000}, 0xd144, 0x1, 0x3, 0x7, 0x200002, 0x407, 0x4, 0x0, 0xb, 0x0, 0x3}, 0x0, 0x4, r0, 0xb) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x80, 0xcf, 0x7f, 0x9, 0x0, 0xffffffffffffffaf, 0x400, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6e78, 0x1, @perf_config_ext={0x6, 0x1000}, 0xd144, 0x1, 0x3, 0x7, 0x200002, 0x407, 0x4, 0x0, 0xb, 0x0, 0x3}, 0x0, 0x4, r0, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xb3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x21, 0x80000001, 0x3, 0x9, 0xa300, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300001004000000040000000a00000000000000", @ANYRES32=r5, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000100008000"/28], 0x50) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x76, 0x1ef9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000540)) perf_event_open(0x0, r8, 0x3, r0, 0x0) syz_clone(0x8001500, 0x0, 0x0, 0x0, 0x0, 0x0) 2.318988965s ago: executing program 3 (id=2274): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfc, 0x4, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x240400c0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.214696895s ago: executing program 1 (id=2275): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000580)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000000}, @exit, @tail_call]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x40c0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4f34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x3}, 0x42, 0xc8, 0x0, 0x5, 0x65, 0x0, 0x211, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x4, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xb65, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r3, r7}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1}, 0x94) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10000) write$cgroup_subtree(r9, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) 2.163208672s ago: executing program 3 (id=2276): r0 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0xbc, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x33}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x401}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xbc}}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf706", 0x11}], 0x1}, 0x20000800) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x1, 0x0, 0x0, 0x4, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x0, @perf_config_ext={0x3, 0x8001}, 0x114443, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x0, 0x3, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2, 0x200000000000001, 0x106) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x3}, 0x2122) 2.079936384s ago: executing program 4 (id=2277): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000240)={&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="6ba2315364d44ed4ddf619", 0xb}, {&(0x7f0000000600)="80ba4960443282a1f78f69c9fbf4d155b78b3395b359bc48f406df2616be008b6950e671a5107119acffff93d51e9df5a658702c9df257fdbf7971e10c02efee0c7621519a5ac774abe33e0c30c119c86b77dea3585799e7e33e54e87cd0be8cb85f448e5ba2de3bf7b0b21bab8e455734c8a66c5324a68216c875b58be8d572066202ec7d27c822231c1d874d5284cb0e8e7f81f5650fedfec95c21fb35fd4a0b", 0xa1}, {&(0x7f0000000140)="7f418c11b0f5f6", 0x7}], 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="300000000000000084000000010000000100fdff01020000030000000400000000000000070000000c000000", @ANYRES32=0x0, @ANYBLOB="300000000000050084000000010000000700080000400000010400008b9f000099400500060000001000000095b5915f9119259acf455f", @ANYRES32=0x0, @ANYBLOB="1800000000000000840000000000000002003a4c0000e000"], 0x78, 0x4000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r4 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r4, &(0x7f0000000840)={&(0x7f00000007c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1, &(0x7f0000000740)=""/15, 0xf}, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x787}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffffffffff2d, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0x12, &(0x7f00000008c0), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r8, &(0x7f0000001980)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf706e105000700810003008100", 0x1c}, {&(0x7f0000000700)="e554bb04af32f00bd876", 0xa}], 0x2}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) 1.767971107s ago: executing program 1 (id=2278): r0 = socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0xbc, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x40}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x33}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x401}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xbc}}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000005c0)="270502001c0014000600002fb96dbcf706", 0x11}], 0x1}, 0x20000800) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x1, 0x0, 0x0, 0x4, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x0, @perf_config_ext={0x3, 0x8001}, 0x114443, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xa4706, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x320, 0x0, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0x0, 0x3, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x0, 0x18, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f00000001c0)=""/124, 0x7c}], 0x3}, 0x2122) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c9fe00001d0081536b4360e44751f8cc5e1a873b1ebde2a8cb110f7b91f557933f8215ddc22001", 0x27}], 0x1, 0x0, 0x0, 0x5865}, 0x8008010) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0xfe33) r5 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r5, 0x0, 0x2000) sendmsg$inet(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000d40)="5c00000052006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e", 0x2d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4895) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40010143) 1.501507894s ago: executing program 3 (id=2279): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1942}, 0x504c, 0x0, 0x0, 0x8, 0x3fe, 0x80000002, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c00038008000500", @ANYRES32=0x0, @ANYBLOB="6563111ca9c71bd2cb128e35784097c157794e9e5c76168243dcf1b980433efd14b9151580fc4868653f3520cce3e83a7080074d3be49dd1a1cfd50f7db982e615d1e69d39290e47715fd053875ea0b252ee98165c076d3f67eb988ea6e7f62264acbab22393dc2ea72c5eb59bebbdee42ce001b23193a7fa33840c93bd1c03177514ece6459760200000000000000eb6f63341aec2753e937f5cd294de4ef8a840b25838ed28dc45535a132b4f3c7a262346e3816f53a5f7e6da62d6e69ccf5"], 0x20}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) socket$kcm(0x29, 0xd, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='thermal_temperature\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2, 0x0, 0x1, 0xc, 0x0, 0xb53, 0x80, 0x10, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xd, 0x1, @perf_config_ext={0x9, 0x3}, 0x108, 0x5, 0xfffffffa, 0x7, 0x0, 0x2, 0x7, 0x0, 0x7fff, 0x0, 0xa05}, r1, 0x4, r2, 0x1) 1.334717617s ago: executing program 3 (id=2280): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20008000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f5ff0000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c00028008000140000000082000feffffff0100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0xc0}, 0x20050800) 1.15565299s ago: executing program 6 (id=2177): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8005}, 0x4040840) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r2, &(0x7f0000000300), 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 780.32875ms ago: executing program 1 (id=2281): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x18, 0x29, 0x5, {0x2c, 0x0, 0x2, 0x1}}}, @dstopts={{0x18, 0x29, 0x37, {0x67}}}], 0x30}, 0x0) 718.899639ms ago: executing program 3 (id=2282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 705.782551ms ago: executing program 6 (id=2283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 583.902771ms ago: executing program 5 (id=2176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x4048040}, 0x40014) 545.554246ms ago: executing program 6 (id=2284): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x1, 0x70bd2c, 0x25dfdbfc, 0x4, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x240400c0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x70bd27, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xdffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x3, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 537.634218ms ago: executing program 1 (id=2285): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x37, 0x1, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x107, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @uid=r1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newspdinfo={0x24, 0x24, 0x1, 0x70bd2c, 0x25dfdbfc, 0x4, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x240400c0) 526.955268ms ago: executing program 3 (id=2286): socket$kcm(0x10, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 456.960544ms ago: executing program 4 (id=2287): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c80)={0x6, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000008cf800000000000004000000100c060008000000184100893f000000000010000000000085100000030000a91e09c500070000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xc2, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x1, 0x8, 0x7fff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], 0x0, 0x10, 0xe0e4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0x21, 0x3a, &(0x7f0000000580)="6557a151dbc850e152d1e0879ea865076dde3c359ed49c23b9de2153b50b1583cc", &(0x7f00000005c0)=""/58, 0x5, 0x0, 0x0, 0xcb, 0x0, &(0x7f0000000b80)="18343e7b82a687452ca2b9e22bf1a1a1bf3708c9dc9acc016cb4140e41ffad821fcfd665273c657ec7f4cbcc8b3c2bcf68cceda157b3db28a988c4c5c3b0b0fd587549fd973592f4c4784a12e784047d9b7fb49111095d5b725f3457492c99cebe08cc80160afb5620ce4d8df24e6c0cc1fb27954ec611253bb5475f238b5968646d4460ef591fb8726d36ed3a2dac73f2c6f503ed94cd43f7b1724627adebb9d5116ec0e3d2fcc914d4929516468381f86cfa87183e818f6b06eda507ca80437e88c6b7d1e95d006dbbb4", 0x0, 0x0, 0xfffffa30}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x240080d6}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000002000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014440000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000180003801400000708000180040001000800034000000001140000001100010000000000000000000100000a"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x108}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d61737100000000140002800800024000000008"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x68, 0x12, 0x0, 0x70bd26, 0x25dfdbfc, {0x8, 0x6, 0xa, 0xff, {0x4e24, 0x4e23, [0xfffffff8, 0x3, 0x6], [0x400, 0x9, 0x8, 0x9], 0x0, [0x1, 0x3]}, 0x4, 0xb}, [@INET_DIAG_REQ_BYTECODE={0xb, 0x1, "f102dcf29effcd15cd649e6a6437eb61afd9d8ae2b0e265d"}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000010f43bf20000ffff00000018000000040000000000000007000000851000003403fbff06ff186410100600000004ed9e10030000000000000002000000810000000000e8d1fb0072047326b6b2a77caa9841d6546c626fe91c7e2028a18a8ff02201020000e07f0002000000000000cc7564bb"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c0002800800014000000011080002400000000a0500030006000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00!\x00'/17], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r8, 0x58, &(0x7f0000000600)}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='net_prio.prioidx\x00', 0x26e1, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xfffffd26) 317.562679ms ago: executing program 6 (id=2288): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000008, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff9a) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x19, &(0x7f0000000ec0)=r1, 0x4) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xa2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) fstat(r2, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r16 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmsg$unix(r4, &(0x7f00000013c0)={&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f00000001c0)}, {&(0x7f0000000440)="20ed02298f4e96169f2fb0f33b9051b77a4e2a0b4755281385e1a75a4b0e5bb1ead4a96eddf1be18f208d17bce0a86eb3a1dc811be64ad0f5417696576943fba2cc94256213172e2b75166e0cc44c17aab5d", 0x52}, {&(0x7f00000004c0)="7d380c6f2d0e593e50bf7532cb9d4dac18a81d59d534095ea5325e0c9485ede71f9c676ec8ad8e57e3025da37ab3d795f981c8ae3cb1c085234ddadb96f2713f0571e9d3cfa55063e6c68f25dea95ae656372693acbb6d5689148671fd2c6d57507e151219ae4b8f3816fb14a86d2d8ce87f10c62c304314b4600b537dc0928d9ddbce6db9ff479b91fdad509ff0efb6a0c248c3995890a946afba4f8734d1b713090e2c61dd27ed0c968e263dfe74081aecd57ea096acc8e2005f14b1", 0xbd}, {&(0x7f0000000240)}, {&(0x7f0000000600)="b43e24b37fede329999ce5607a594f3f96435756e28a97131c50932e6a3b821d3e7777ba", 0x24}, {&(0x7f0000000740)="72e2d4807cf71da42ca6ce11076c850377676af083c885283ff4a3b86f657be57d7ca3dc247722571054db10ca4f0f04c1d9bc9d53d3e6a46151b9e22c6a1b36aa6383a58933cc6e5336e7eb90a6a3001dfa5f43b6eec0b2cf1d96c83a7cc30ad7d78239f8e087fb706fb60f6fc17399d458499172bf6a", 0x77}, {&(0x7f0000000640)="a9217fe5c5e1d6250f69cb414b5eac4c72bb5fd6c83c4bc0476b9c5b4c6377db4e7e58b2f5f276fe649a40fc5c152906", 0x30}, {&(0x7f00000007c0)="6545f8d304cdf8a7b1ae20470798545bba499e6837719c647aae194488e0e07b262bb2", 0x23}], 0x8, &(0x7f0000001240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r12, 0xffffffffffffffff, r6]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r14}}}, @rights={{0x34, 0x1, 0x1, [r7, r8, r8, r11, 0xffffffffffffffff, r15, r9, r0, r12]}}, @rights={{0x18, 0x1, 0x1, [r10, r16]}}], 0x158, 0x4}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000f00)="709b1edc2051e5ac8c09051c1c0c6fc51376aa7e1cd252a2", 0x18}], 0x2}, 0x800) 291.395009ms ago: executing program 1 (id=2289): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000d29500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0xfffffd6e, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x2000000, 0x4}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r0}, 0x18) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000686ee79c9ea3a2eb00ffdbdf250900020072797a310000000008000000736977001416040076657468305f742924a29680f2bfd700"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r3, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x93c6}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r4, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0xd, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xf1, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="11000000000080ff020000004900000000200000", @ANYRES32=r4, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRES32], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8}, &(0x7f00000001c0), &(0x7f0000000300)=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000000), &(0x7f0000000500)=@tcp=r4, 0x1}, 0x20) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8408, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x1, 0x1d61, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x4, 0x1946}, 0x2, 0x0, 0x0, 0x9, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 5 (id=2290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x1, 0x7, 0x801, 0x0, 0x0, {0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000071110900000000008510000002000000850000002700000095000000000000009500a505000000005253c3c28e2c374041a6975ae3b5722913f93d4a772c9422bd55d83190ab144f4ae493e92271f06e32de2442263616038f770320c26ab27b4874ccbecf4adf8370228d32028ee472ac9e2ee50ccb6d930b6e40c77cf349e699fd37ddb02c5f7133b5cda82f68f442699c1be8e2c6ad39236f28d53a642caa4f8874dd"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): . [ 265.526848][T10556] bond0: (slave dummy0): Releasing backup interface [ 265.532611][T10560] netlink: 'syz.2.1582': attribute type 10 has an invalid length. [ 265.551565][T10556] team0: Port device dummy0 added [ 265.625956][T10560] team0: Port device dummy0 removed [ 265.648479][T10560] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 265.803771][T10567] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1584'. [ 266.210054][T10576] netlink: 'syz.4.1588': attribute type 10 has an invalid length. [ 266.228794][T10576] bond0: (slave dummy0): Releasing backup interface [ 266.252431][T10576] team0: Port device dummy0 added [ 266.317983][T10576] team0: Port device dummy0 removed [ 266.347158][T10576] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 266.429668][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 266.493201][T10587] netlink: 'syz.4.1591': attribute type 11 has an invalid length. [ 266.518188][T10587] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1591'. [ 266.530517][T10589] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 266.554868][T10586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.173666][T10604] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 267.261317][T10606] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1598'. [ 267.840812][T10621] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 268.255171][T10645] validate_nla: 2 callbacks suppressed [ 268.255189][T10645] netlink: 'syz.0.1612': attribute type 39 has an invalid length. [ 268.552258][T10659] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 269.015085][T10678] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 269.145880][T10682] netlink: 'syz.4.1625': attribute type 10 has an invalid length. [ 269.165063][T10682] bond0: (slave dummy0): Releasing backup interface [ 269.176199][T10682] team0: Port device dummy0 added [ 269.192194][T10682] netlink: 'syz.4.1625': attribute type 10 has an invalid length. [ 269.208347][T10682] team0: Port device dummy0 removed [ 269.216518][T10682] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 269.473083][T10690] __nla_validate_parse: 8 callbacks suppressed [ 269.473135][T10690] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1629'. [ 269.876348][T10704] netlink: 'syz.0.1634': attribute type 11 has an invalid length. [ 269.886594][T10704] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1634'. [ 269.899003][T10703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.911462][T10702] syzkaller0: entered promiscuous mode [ 269.917003][T10702] syzkaller0: entered allmulticast mode [ 269.945375][T10701] netlink: 'syz.4.1633': attribute type 39 has an invalid length. [ 270.021088][T10713] netlink: 'syz.2.1636': attribute type 10 has an invalid length. [ 270.024574][T10712] netlink: 'syz.0.1637': attribute type 10 has an invalid length. [ 270.038927][T10713] bond0: (slave dummy0): Releasing backup interface [ 270.051735][T10713] team0: Port device dummy0 added [ 270.066624][T10713] netlink: 'syz.2.1636': attribute type 10 has an invalid length. [ 270.076123][T10712] bond0: (slave dummy0): Releasing backup interface [ 270.103310][T10712] team0: Port device dummy0 added [ 270.108060][T10715] netlink: 'syz.0.1637': attribute type 10 has an invalid length. [ 270.140332][T10713] team0: Port device dummy0 removed [ 270.168937][T10713] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 270.205630][T10715] team0: Port device dummy0 removed [ 270.224970][T10715] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 270.292570][T10725] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 270.312432][T10726] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 270.394208][T10730] xt_l2tp: v2 sid > 0xffff: 1114112 [ 270.448869][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1642'. [ 270.850850][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 270.860178][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 270.903816][T10743] netlink: 'syz.0.1647': attribute type 11 has an invalid length. [ 270.912167][T10743] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1647'. [ 270.923829][T10742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.111142][T10754] netlink: 'syz.1.1652': attribute type 10 has an invalid length. [ 271.135231][T10751] warn_alloc: 3 callbacks suppressed [ 271.135270][T10751] syz.4.1650: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 271.162496][T10751] CPU: 0 UID: 0 PID: 10751 Comm: syz.4.1650 Not tainted syzkaller #0 PREEMPT(full) [ 271.162525][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.162535][T10751] Call Trace: [ 271.162544][T10751] [ 271.162553][T10751] dump_stack_lvl+0x189/0x250 [ 271.162590][T10751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.162612][T10751] ? __pfx__printk+0x10/0x10 [ 271.162635][T10751] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 271.162667][T10751] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 271.162696][T10751] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 271.162728][T10751] warn_alloc+0x214/0x310 [ 271.162755][T10751] ? stack_depot_save_flags+0x40/0x860 [ 271.162796][T10751] ? __pfx_warn_alloc+0x10/0x10 [ 271.162827][T10751] ? kasan_save_track+0x3e/0x80 [ 271.162847][T10751] ? __kasan_kmalloc+0x93/0xb0 [ 271.162874][T10751] ? xsk_setsockopt+0x57b/0x8d0 [ 271.162893][T10751] ? do_sock_setsockopt+0x17c/0x1b0 [ 271.162913][T10751] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 271.162933][T10751] ? do_syscall_64+0xfa/0xfa0 [ 271.162956][T10751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.163001][T10751] __vmalloc_node_range_noprof+0x125/0x12d0 [ 271.163106][T10751] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.163141][T10751] ? __kasan_kmalloc+0x93/0xb0 [ 271.163183][T10751] vmalloc_user_noprof+0xad/0xf0 [ 271.163208][T10751] ? xskq_create+0xbf/0x170 [ 271.163237][T10751] xskq_create+0xbf/0x170 [ 271.163271][T10751] xsk_init_queue+0xb0/0x110 [ 271.163304][T10751] xsk_setsockopt+0x57b/0x8d0 [ 271.163337][T10751] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.163372][T10751] ? __pfx_aa_sk_perm+0x10/0x10 [ 271.163401][T10751] ? aa_sock_opt_perm+0xff/0x1b0 [ 271.163435][T10751] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 271.163459][T10751] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.163488][T10751] do_sock_setsockopt+0x17c/0x1b0 [ 271.163528][T10751] __x64_sys_setsockopt+0x13f/0x1b0 [ 271.163570][T10751] do_syscall_64+0xfa/0xfa0 [ 271.163599][T10751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.163616][T10751] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.163633][T10751] ? clear_bhb_loop+0x60/0xb0 [ 271.163670][T10751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.163689][T10751] RIP: 0033:0x7f229c98eec9 [ 271.163710][T10751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.163724][T10751] RSP: 002b:00007f229abcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.163744][T10751] RAX: ffffffffffffffda RBX: 00007f229cbe6090 RCX: 00007f229c98eec9 [ 271.163757][T10751] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000010 [ 271.163768][T10751] RBP: 00007f229ca11f91 R08: 0000000000000004 R09: 0000000000000000 [ 271.163779][T10751] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 271.163791][T10751] R13: 00007f229cbe6128 R14: 00007f229cbe6090 R15: 00007ffd57638ff8 [ 271.163857][T10751] [ 271.163906][T10751] Mem-Info: [ 271.421828][T10757] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1651'. [ 271.425145][T10755] netlink: 'syz.1.1652': attribute type 10 has an invalid length. [ 271.448321][T10751] active_anon:5503 inactive_anon:0 isolated_anon:0 [ 271.448321][T10751] active_file:14887 inactive_file:39961 isolated_file:0 [ 271.448321][T10751] unevictable:768 dirty:261 writeback:0 [ 271.448321][T10751] slab_reclaimable:11435 slab_unreclaimable:101686 [ 271.448321][T10751] mapped:29750 shmem:1906 pagetables:1191 [ 271.448321][T10751] sec_pagetables:0 bounce:0 [ 271.448321][T10751] kernel_misc_reclaimable:0 [ 271.448321][T10751] free:1308000 free_pcp:15202 free_cma:0 [ 271.558663][T10754] bond0: (slave dummy0): Releasing backup interface [ 271.564006][T10751] Node 0 active_anon:23812kB inactive_anon:0kB active_file:59548kB inactive_file:159644kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120900kB dirty:1044kB writeback:0kB shmem:8088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11700kB pagetables:4628kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.736032][T10751] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 271.775681][T10751] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.778249][T10754] team0: Port device dummy0 added [ 271.825745][T10751] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 271.838279][T10751] Node 0 DMA32 free:1314916kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30012kB inactive_anon:0kB active_file:59548kB inactive_file:159644kB unevictable:1536kB writepending:1044kB zspages:0kB present:3129332kB managed:2561888kB mlocked:0kB bounce:0kB free_pcp:41024kB local_pcp:20868kB free_cma:0kB [ 271.897526][T10751] lowmem_reserve[]: 0 0 1 1 1 [ 271.917885][T10751] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 271.949344][T10755] team0: Port device dummy0 removed [ 271.954022][T10751] lowmem_reserve[]: 0 0 0 0 0 [ 271.969641][T10755] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 272.018908][T10751] Node 1 Normal free:3893824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19712kB local_pcp:9056kB free_cma:0kB [ 272.051703][T10751] lowmem_reserve[]: 0 0 0 0 0 [ 272.079510][T10751] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 272.135000][T10751] Node 0 DMA32: 1143*4kB (UM) 1152*8kB (UE) 859*16kB (U) 622*32kB (UE) 593*64kB (UM) 445*128kB (UME) 245*256kB (UM) 225*512kB (UM) 133*1024kB (UM) 4*2048kB (UE) 205*4096kB (M) = 1304332kB [ 272.168621][T10751] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 272.212904][T10751] Node 1 Normal: 214*4kB (UE) 45*8kB (UM) 48*16kB (UME) 68*32kB (UME) 32*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3893824kB [ 272.235050][T10751] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.287155][T10751] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.308249][T10751] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 272.328948][T10770] netlink: 'syz.2.1658': attribute type 11 has an invalid length. [ 272.334295][T10751] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 272.346467][T10751] 62086 total pagecache pages [ 272.351982][T10751] 0 pages in swap cache [ 272.352473][T10770] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1658'. [ 272.356141][T10751] Free swap = 124996kB [ 272.391178][T10769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.420419][T10751] Total swap = 124996kB [ 272.424749][T10751] 2097051 pages RAM [ 272.428865][T10751] 0 pages HighMem/MovableOnly [ 272.433543][T10751] 424489 pages reserved [ 272.438406][T10751] 0 pages cma reserved [ 272.494359][T10779] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1663'. [ 272.578523][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1657'. [ 273.125690][T10807] netlink: 'syz.2.1672': attribute type 11 has an invalid length. [ 273.160235][T10806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.521467][T10820] FAULT_INJECTION: forcing a failure. [ 273.521467][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 273.582469][T10820] CPU: 1 UID: 0 PID: 10820 Comm: syz.4.1679 Not tainted syzkaller #0 PREEMPT(full) [ 273.582493][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 273.582502][T10820] Call Trace: [ 273.582509][T10820] [ 273.582516][T10820] dump_stack_lvl+0x189/0x250 [ 273.582539][T10820] ? __pfx____ratelimit+0x10/0x10 [ 273.582561][T10820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.582580][T10820] ? __pfx__printk+0x10/0x10 [ 273.582605][T10820] ? __pfx___might_resched+0x10/0x10 [ 273.582628][T10820] should_fail_ex+0x414/0x560 [ 273.582657][T10820] should_failslab+0xa8/0x100 [ 273.582681][T10820] __kmalloc_noprof+0xcb/0x7f0 [ 273.582701][T10820] ? ovs_nla_copy_actions+0x68/0x3d0 [ 273.582720][T10820] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 273.582742][T10820] ovs_nla_copy_actions+0x68/0x3d0 [ 273.582756][T10820] ? __asan_memcpy+0x40/0x70 [ 273.582780][T10820] ovs_flow_cmd_new+0x528/0xd80 [ 273.582811][T10820] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 273.582894][T10820] ? rcu_is_watching+0x15/0xb0 [ 273.582917][T10820] ? __nla_parse+0x40/0x60 [ 273.582938][T10820] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 273.582966][T10820] genl_family_rcv_msg_doit+0x215/0x300 [ 273.583006][T10820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 273.583047][T10820] ? bpf_lsm_capable+0x9/0x20 [ 273.583064][T10820] ? security_capable+0x7e/0x2e0 [ 273.583087][T10820] genl_rcv_msg+0x60e/0x790 [ 273.583119][T10820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.583140][T10820] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 273.583162][T10820] ? __asan_memcpy+0x40/0x70 [ 273.583179][T10820] ? __pfx_ref_tracker_free+0x10/0x10 [ 273.583205][T10820] netlink_rcv_skb+0x205/0x470 [ 273.583223][T10820] ? __lock_acquire+0xab9/0xd20 [ 273.583248][T10820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.583274][T10820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.583319][T10820] ? down_read+0x1ad/0x2e0 [ 273.583338][T10820] genl_rcv+0x28/0x40 [ 273.583357][T10820] netlink_unicast+0x82c/0x9e0 [ 273.583388][T10820] ? __pfx_netlink_unicast+0x10/0x10 [ 273.583410][T10820] ? netlink_sendmsg+0x642/0xb30 [ 273.583435][T10820] ? skb_put+0x11b/0x210 [ 273.583460][T10820] netlink_sendmsg+0x805/0xb30 [ 273.583491][T10820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.583514][T10820] ? aa_sock_msg_perm+0xf1/0x1d0 [ 273.583536][T10820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 273.583558][T10820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.583580][T10820] __sock_sendmsg+0x219/0x270 [ 273.583603][T10820] ____sys_sendmsg+0x505/0x830 [ 273.583634][T10820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.583669][T10820] ? import_iovec+0x74/0xa0 [ 273.583694][T10820] ___sys_sendmsg+0x21f/0x2a0 [ 273.583720][T10820] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.583771][T10820] ? __fget_files+0x2a/0x420 [ 273.583810][T10820] ? __fget_files+0x2a/0x420 [ 273.583830][T10820] ? __fget_files+0x3a0/0x420 [ 273.583865][T10820] __x64_sys_sendmsg+0x19b/0x260 [ 273.583891][T10820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 273.583912][T10820] ? perf_trace_preemptirq_template+0xa3/0x340 [ 273.583949][T10820] ? __pfx_ksys_write+0x10/0x10 [ 273.583975][T10820] ? do_syscall_64+0xbe/0xfa0 [ 273.584003][T10820] do_syscall_64+0xfa/0xfa0 [ 273.584023][T10820] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.584044][T10820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.584060][T10820] ? clear_bhb_loop+0x60/0xb0 [ 273.584083][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.584099][T10820] RIP: 0033:0x7f229c98eec9 [ 273.584115][T10820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.584129][T10820] RSP: 002b:00007f229abee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.584148][T10820] RAX: ffffffffffffffda RBX: 00007f229cbe5fa0 RCX: 00007f229c98eec9 [ 273.584160][T10820] RDX: 000000002000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 273.584170][T10820] RBP: 00007f229abee090 R08: 0000000000000000 R09: 0000000000000000 [ 273.584180][T10820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.584190][T10820] R13: 00007f229cbe6038 R14: 00007f229cbe5fa0 R15: 00007ffd57638ff8 [ 273.584226][T10820] [ 273.584236][T10820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.700512][T10823] validate_nla: 2 callbacks suppressed [ 273.700530][T10823] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 274.174430][T10840] FAULT_INJECTION: forcing a failure. [ 274.174430][T10840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.189795][T10840] CPU: 1 UID: 0 PID: 10840 Comm: syz.4.1684 Not tainted syzkaller #0 PREEMPT(full) [ 274.189819][T10840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.189829][T10840] Call Trace: [ 274.189836][T10840] [ 274.189843][T10840] dump_stack_lvl+0x189/0x250 [ 274.189866][T10840] ? __pfx____ratelimit+0x10/0x10 [ 274.189888][T10840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.189903][T10840] ? __pfx__printk+0x10/0x10 [ 274.189920][T10840] ? __might_fault+0xb0/0x130 [ 274.189949][T10840] should_fail_ex+0x414/0x560 [ 274.189971][T10840] _copy_from_user+0x2d/0xb0 [ 274.189988][T10840] generic_map_update_batch+0x525/0x7f0 [ 274.190011][T10840] ? __pfx_generic_map_update_batch+0x10/0x10 [ 274.190026][T10840] ? __fget_files+0x2a/0x420 [ 274.190047][T10840] ? __pfx_generic_map_update_batch+0x10/0x10 [ 274.190061][T10840] bpf_map_do_batch+0x39b/0x630 [ 274.190077][T10840] __sys_bpf+0x690/0x860 [ 274.190094][T10840] ? __pfx___sys_bpf+0x10/0x10 [ 274.190123][T10840] ? ksys_write+0x22a/0x250 [ 274.190141][T10840] ? __pfx_ksys_write+0x10/0x10 [ 274.190160][T10840] __x64_sys_bpf+0x7c/0x90 [ 274.190175][T10840] do_syscall_64+0xfa/0xfa0 [ 274.190193][T10840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.190204][T10840] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.190216][T10840] ? clear_bhb_loop+0x60/0xb0 [ 274.190231][T10840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.190245][T10840] RIP: 0033:0x7f229c98eec9 [ 274.190260][T10840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.190272][T10840] RSP: 002b:00007f229abee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.190290][T10840] RAX: ffffffffffffffda RBX: 00007f229cbe5fa0 RCX: 00007f229c98eec9 [ 274.190300][T10840] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 274.190308][T10840] RBP: 00007f229abee090 R08: 0000000000000000 R09: 0000000000000000 [ 274.190316][T10840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.190324][T10840] R13: 00007f229cbe6038 R14: 00007f229cbe5fa0 R15: 00007ffd57638ff8 [ 274.190346][T10840] [ 274.195596][T10841] netlink: 'syz.2.1685': attribute type 11 has an invalid length. [ 274.435560][T10839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.601142][T10849] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 274.647318][T10849] bond0: (slave dummy0): Releasing backup interface [ 274.668103][T10855] netlink: 'syz.2.1688': attribute type 10 has an invalid length. [ 274.686615][T10849] team0: Port device dummy0 added [ 274.707458][T10855] team0: Port device dummy0 removed [ 274.719273][T10855] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 274.831767][T10853] __nla_validate_parse: 9 callbacks suppressed [ 274.831785][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1689'. [ 274.886665][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 274.896170][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 274.935250][T10866] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 274.973478][T10866] bond0: (slave dummy0): Releasing backup interface [ 274.986443][T10866] team0: Port device dummy0 added [ 274.997335][T10866] netlink: 'syz.2.1694': attribute type 10 has an invalid length. [ 275.024823][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1695'. [ 275.035212][T10866] team0: Port device dummy0 removed [ 275.051216][T10866] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 275.335130][T10881] netlink: 'syz.4.1698': attribute type 14 has an invalid length. [ 275.343725][T10881] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1698'. [ 275.463953][T10885] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 275.494180][T10884] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1701'. [ 275.969405][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 276.058717][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1711'. [ 276.130163][T10915] netlink: 'syz.1.1711': attribute type 1 has an invalid length. [ 276.141629][T10915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1711'. [ 276.316511][T10928] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1716'. [ 276.434121][T10932] xt_l2tp: v2 sid > 0xffff: 1114112 [ 277.029968][T10954] netlink: 'syz.0.1725': attribute type 1 has an invalid length. [ 277.150796][T10965] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 277.490926][T10973] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 277.890409][T10979] netlink: 'syz.3.1733': attribute type 21 has an invalid length. [ 277.953670][T10981] FAULT_INJECTION: forcing a failure. [ 277.953670][T10981] name failslab, interval 1, probability 0, space 0, times 0 [ 277.969417][T10981] CPU: 1 UID: 0 PID: 10981 Comm: syz.4.1734 Not tainted syzkaller #0 PREEMPT(full) [ 277.969443][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.969454][T10981] Call Trace: [ 277.969461][T10981] [ 277.969469][T10981] dump_stack_lvl+0x189/0x250 [ 277.969493][T10981] ? __pfx____ratelimit+0x10/0x10 [ 277.969516][T10981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.969535][T10981] ? __pfx__printk+0x10/0x10 [ 277.969563][T10981] ? __pfx___might_resched+0x10/0x10 [ 277.969577][T10981] ? fs_reclaim_acquire+0x7d/0x100 [ 277.969607][T10981] should_fail_ex+0x414/0x560 [ 277.969638][T10981] should_failslab+0xa8/0x100 [ 277.969663][T10981] __kvmalloc_node_noprof+0x158/0x910 [ 277.969688][T10981] ? bpf_test_run_xdp_live+0x193/0x1b20 [ 277.969720][T10981] bpf_test_run_xdp_live+0x193/0x1b20 [ 277.969742][T10981] ? bpf_dispatcher_change_prog+0xb35/0xc90 [ 277.969771][T10981] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 277.969804][T10981] ? synchronize_rcu+0x11a/0x310 [ 277.969823][T10981] ? __pfx_synchronize_rcu+0x10/0x10 [ 277.969844][T10981] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 277.969863][T10981] ? 0xffffffffa02057c0 [ 277.969899][T10981] ? 0xffffffffa0203754 [ 277.969944][T10981] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 277.969973][T10981] ? _copy_from_user+0x94/0xb0 [ 277.970000][T10981] ? bpf_test_init+0x113/0x150 [ 277.970014][T10981] ? xdp_convert_md_to_buff+0x5b/0x330 [ 277.970032][T10981] bpf_prog_test_run_xdp+0x75b/0x10e0 [ 277.970055][T10981] ? __fget_files+0x2a/0x420 [ 277.970082][T10981] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.970104][T10981] ? __fget_files+0x2a/0x420 [ 277.970127][T10981] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 277.970144][T10981] bpf_prog_test_run+0x2c7/0x340 [ 277.970168][T10981] __sys_bpf+0x562/0x860 [ 277.970189][T10981] ? __pfx___sys_bpf+0x10/0x10 [ 277.970226][T10981] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 277.970247][T10981] ? ksys_write+0x22a/0x250 [ 277.970268][T10981] ? __pfx_ksys_write+0x10/0x10 [ 277.970291][T10981] __x64_sys_bpf+0x7c/0x90 [ 277.970311][T10981] do_syscall_64+0xfa/0xfa0 [ 277.970329][T10981] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.970346][T10981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.970360][T10981] ? clear_bhb_loop+0x60/0xb0 [ 277.970378][T10981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.970391][T10981] RIP: 0033:0x7f229c98eec9 [ 277.970404][T10981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.970415][T10981] RSP: 002b:00007f229abee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.970431][T10981] RAX: ffffffffffffffda RBX: 00007f229cbe5fa0 RCX: 00007f229c98eec9 [ 277.970442][T10981] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 277.970450][T10981] RBP: 00007f229abee090 R08: 0000000000000000 R09: 0000000000000000 [ 277.970459][T10981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.970467][T10981] R13: 00007f229cbe6038 R14: 00007f229cbe5fa0 R15: 00007ffd57638ff8 [ 277.970500][T10981] [ 278.744552][T10997] netlink: 'syz.1.1740': attribute type 11 has an invalid length. [ 278.780005][T10995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.914877][T10979] lo speed is unknown, defaulting to 1000 [ 280.052660][T11015] netlink: 'syz.2.1746': attribute type 39 has an invalid length. [ 280.262505][T10979] hsr0 speed is unknown, defaulting to 1000 [ 280.375503][T11030] netlink: 'syz.1.1751': attribute type 11 has an invalid length. [ 280.478260][T11030] __nla_validate_parse: 6 callbacks suppressed [ 280.478282][T11030] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1751'. [ 280.517081][T11028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.578399][T11034] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 280.673752][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1753'. [ 281.158019][T11038] netlink: 'syz.4.1753': attribute type 1 has an invalid length. [ 281.176255][T11038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 281.312590][T11053] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1758'. [ 281.363079][T11056] xt_l2tp: v2 sid > 0xffff: 1114112 [ 281.455558][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1759'. [ 282.183716][T11074] netlink: 'syz.4.1763': attribute type 39 has an invalid length. [ 282.378462][T11076] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1764'. [ 282.593211][T11079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1765'. [ 282.599712][T11077] netlink: 'syz.1.1764': attribute type 1 has an invalid length. [ 282.628058][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.631515][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1764'. [ 282.859361][T11079] bridge_slave_0 (unregistering): left allmulticast mode [ 282.886867][T11079] bridge_slave_0 (unregistering): left promiscuous mode [ 282.898179][T11079] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.234915][T11103] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1773'. [ 283.421566][T11109] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 283.602242][T11116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1775'. [ 284.733233][T11124] netlink: 'syz.2.1777': attribute type 10 has an invalid length. [ 284.768840][T11124] bond0: (slave dummy0): Releasing backup interface [ 284.796889][T11124] team0: Port device dummy0 added [ 284.802365][T11129] netlink: 'syz.2.1777': attribute type 10 has an invalid length. [ 285.004596][T11129] team0: Port device dummy0 removed [ 285.036426][T11129] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 285.352618][T11149] warn_alloc: 1 callbacks suppressed [ 285.352637][T11149] syz.0.1784: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 285.387961][T11149] CPU: 0 UID: 0 PID: 11149 Comm: syz.0.1784 Not tainted syzkaller #0 PREEMPT(full) [ 285.387984][T11149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 285.387992][T11149] Call Trace: [ 285.387999][T11149] [ 285.388005][T11149] dump_stack_lvl+0x189/0x250 [ 285.388028][T11149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.388044][T11149] ? __pfx__printk+0x10/0x10 [ 285.388059][T11149] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 285.388080][T11149] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 285.388099][T11149] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 285.388118][T11149] warn_alloc+0x214/0x310 [ 285.388137][T11149] ? stack_depot_save_flags+0x40/0x860 [ 285.388160][T11149] ? __pfx_warn_alloc+0x10/0x10 [ 285.388182][T11149] ? kasan_save_track+0x3e/0x80 [ 285.388200][T11149] ? __kasan_kmalloc+0x93/0xb0 [ 285.388222][T11149] ? xsk_setsockopt+0x57b/0x8d0 [ 285.388239][T11149] ? do_sock_setsockopt+0x17c/0x1b0 [ 285.388259][T11149] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 285.388278][T11149] ? do_syscall_64+0xfa/0xfa0 [ 285.388299][T11149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.388327][T11149] __vmalloc_node_range_noprof+0x125/0x12d0 [ 285.388385][T11149] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 285.388411][T11149] ? __kasan_kmalloc+0x93/0xb0 [ 285.388441][T11149] vmalloc_user_noprof+0xad/0xf0 [ 285.388462][T11149] ? xskq_create+0xbf/0x170 [ 285.388483][T11149] xskq_create+0xbf/0x170 [ 285.388507][T11149] xsk_init_queue+0xb0/0x110 [ 285.388532][T11149] xsk_setsockopt+0x57b/0x8d0 [ 285.388559][T11149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.388595][T11149] ? __pfx_aa_sk_perm+0x10/0x10 [ 285.388619][T11149] ? aa_sock_opt_perm+0xff/0x1b0 [ 285.388644][T11149] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 285.388663][T11149] ? __pfx_xsk_setsockopt+0x10/0x10 [ 285.388684][T11149] do_sock_setsockopt+0x17c/0x1b0 [ 285.388710][T11149] __x64_sys_setsockopt+0x13f/0x1b0 [ 285.388737][T11149] do_syscall_64+0xfa/0xfa0 [ 285.388758][T11149] ? lockdep_hardirqs_on+0x9c/0x150 [ 285.388781][T11149] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.388799][T11149] ? clear_bhb_loop+0x60/0xb0 [ 285.388822][T11149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.388839][T11149] RIP: 0033:0x7f41fb38eec9 [ 285.388856][T11149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.388870][T11149] RSP: 002b:00007f41fc259038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.388889][T11149] RAX: ffffffffffffffda RBX: 00007f41fb5e6180 RCX: 00007f41fb38eec9 [ 285.388903][T11149] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f [ 285.388913][T11149] RBP: 00007f41fb411f91 R08: 0000000000000004 R09: 0000000000000000 [ 285.388924][T11149] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 285.388935][T11149] R13: 00007f41fb5e6218 R14: 00007f41fb5e6180 R15: 00007ffcd305b8c8 [ 285.388971][T11149] [ 285.389081][T11149] Mem-Info: [ 285.436701][T11147] netlink: 'syz.1.1786': attribute type 1 has an invalid length. [ 285.455569][T11149] active_anon:4844 inactive_anon:0 isolated_anon:0 [ 285.455569][T11149] active_file:17063 inactive_file:39967 isolated_file:0 [ 285.455569][T11149] unevictable:768 dirty:314 writeback:0 [ 285.455569][T11149] slab_reclaimable:11494 slab_unreclaimable:102520 [ 285.455569][T11149] mapped:29557 shmem:1356 pagetables:1106 [ 285.455569][T11149] sec_pagetables:0 bounce:0 [ 285.455569][T11149] kernel_misc_reclaimable:0 [ 285.455569][T11149] free:1300348 free_pcp:20551 free_cma:0 [ 285.540584][T11157] __nla_validate_parse: 2 callbacks suppressed [ 285.540602][T11157] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1787'. [ 285.543227][T11147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1786'. [ 285.651106][T11149] Node 0 active_anon:19476kB inactive_anon:0kB active_file:68252kB inactive_file:159668kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122228kB dirty:1256kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11680kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.819232][T11149] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 285.858295][T11149] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.891231][T11149] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 285.897057][T11149] Node 0 DMA32 free:1292048kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19648kB inactive_anon:0kB active_file:68252kB inactive_file:159668kB unevictable:1536kB writepending:1260kB zspages:0kB present:3129332kB managed:2561888kB mlocked:0kB bounce:0kB free_pcp:61548kB local_pcp:20816kB free_cma:0kB [ 285.931458][T11149] lowmem_reserve[]: 0 0 1 1 1 [ 285.931770][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 285.936224][T11149] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 285.936291][T11149] lowmem_reserve[]: 0 0 0 0 0 [ 285.983872][T11149] Node 1 Normal free:3893824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19712kB local_pcp:10656kB free_cma:0kB [ 286.017173][T11149] lowmem_reserve[]: 0 0 0 0 0 [ 286.024621][T11149] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 286.045656][T11149] Node 0 DMA32: 1763*4kB (UM) 1695*8kB (UME) 1274*16kB (UM) 696*32kB (UME) 619*64kB (UM) 429*128kB (UME) 255*256kB (UM) 234*512kB (UM) 139*1024kB (UM) 4*2048kB (UE) 196*4096kB (M) = 1296228kB [ 286.065487][T11149] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 286.102606][T11149] Node 1 Normal: 214*4kB (UE) 45*8kB (UM) 48*16kB (UME) 68*32kB (UME) 32*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3893824kB [ 286.126084][T11149] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.138832][T11149] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.150076][T11149] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 286.159898][T11149] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 286.179183][T11149] 58382 total pagecache pages [ 286.198493][T11149] 0 pages in swap cache [ 286.204922][T11149] Free swap = 124996kB [ 286.210232][T11149] Total swap = 124996kB [ 286.214526][T11149] 2097051 pages RAM [ 286.218468][T11149] 0 pages HighMem/MovableOnly [ 286.223216][T11149] 424489 pages reserved [ 286.241182][T11149] 0 pages cma reserved [ 287.205709][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1796'. [ 287.215061][T11186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 287.253921][T11187] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 289.756738][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1802'. [ 289.832683][T11211] netlink: 'syz.0.1805': attribute type 11 has an invalid length. [ 289.847375][T11211] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1805'. [ 289.859445][T11210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.882951][T11206] netlink: 'syz.3.1802': attribute type 1 has an invalid length. [ 289.923536][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 290.786682][T11240] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 290.807222][T11240] bond0: (slave dummy0): Releasing backup interface [ 290.823225][T11240] team0: Port device dummy0 added [ 290.833136][T11239] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 290.846034][T11240] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 290.869848][T11240] team0: Port device dummy0 removed [ 290.901848][T11240] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 291.111949][T11245] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1818'. [ 291.264814][T11245] netlink: 'syz.1.1818': attribute type 1 has an invalid length. [ 291.284094][T11245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1818'. [ 291.516169][T11255] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1822'. [ 291.643407][T11263] xt_l2tp: v2 sid > 0xffff: 1114112 [ 291.977984][T11271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1828'. [ 292.175163][T11277] netlink: 'syz.2.1831': attribute type 10 has an invalid length. [ 292.194918][T11277] bond0: (slave dummy0): Releasing backup interface [ 292.216775][T11280] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1833'. [ 292.234866][T11287] netlink: 'syz.2.1831': attribute type 10 has an invalid length. [ 292.242441][T11277] team0: Port device dummy0 added [ 292.359910][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1834'. [ 292.370783][T11291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1834'. [ 292.406250][T11287] team0: Port device dummy0 removed [ 292.424540][T11287] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 292.624838][T11297] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1836'. [ 292.688266][T11300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1837'. [ 292.715466][T11303] netlink: 'syz.4.1838': attribute type 11 has an invalid length. [ 292.723762][T11303] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1838'. [ 292.734914][T11302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.830881][T11307] netlink: 'syz.4.1840': attribute type 10 has an invalid length. [ 292.860805][T11307] bond0: (slave dummy0): Releasing backup interface [ 292.935862][T11311] netlink: 'syz.4.1840': attribute type 10 has an invalid length. [ 293.012819][T11307] team0: Port device dummy0 added [ 293.073331][T11311] team0: Port device dummy0 removed [ 293.109583][T11311] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 293.130351][T11309] netlink: 'syz.0.1837': attribute type 1 has an invalid length. [ 293.384139][T11328] xt_l2tp: v2 sid > 0xffff: 1114112 [ 293.660395][T11337] netlink: 'syz.1.1850': attribute type 11 has an invalid length. [ 293.671134][T11336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.944683][T11341] netlink: 'syz.2.1849': attribute type 1 has an invalid length. [ 294.542025][T11362] netlink: 'syz.3.1858': attribute type 1 has an invalid length. [ 294.837434][T11384] xt_l2tp: v2 sid > 0xffff: 1114112 [ 294.845181][T11385] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 295.822978][T11397] warn_alloc: 3 callbacks suppressed [ 295.823018][T11397] syz.3.1867: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 295.862689][T11397] CPU: 0 UID: 0 PID: 11397 Comm: syz.3.1867 Not tainted syzkaller #0 PREEMPT(full) [ 295.862714][T11397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.862726][T11397] Call Trace: [ 295.862735][T11397] [ 295.862745][T11397] dump_stack_lvl+0x189/0x250 [ 295.862782][T11397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.862804][T11397] ? __pfx__printk+0x10/0x10 [ 295.862827][T11397] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.862852][T11397] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 295.862884][T11397] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 295.862918][T11397] warn_alloc+0x214/0x310 [ 295.862961][T11397] ? __pfx_warn_alloc+0x10/0x10 [ 295.863006][T11397] ? do_sock_setsockopt+0x17c/0x1b0 [ 295.863027][T11397] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 295.863050][T11397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.863095][T11397] __vmalloc_node_range_noprof+0x125/0x12d0 [ 295.863129][T11397] ? perf_trace_preemptirq_template+0x280/0x340 [ 295.863159][T11397] ? irqentry_exit+0x74/0x90 [ 295.863190][T11397] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 295.863253][T11397] ? irqentry_exit+0x74/0x90 [ 295.863282][T11397] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.863342][T11397] vmalloc_user_noprof+0xad/0xf0 [ 295.863367][T11397] ? xskq_create+0xbf/0x170 [ 295.863397][T11397] xskq_create+0xbf/0x170 [ 295.863430][T11397] xsk_init_queue+0xb0/0x110 [ 295.863461][T11397] xsk_setsockopt+0x57b/0x8d0 [ 295.863490][T11397] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.863528][T11397] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.863548][T11397] ? aa_sock_opt_perm+0xb3/0x1b0 [ 295.863570][T11397] ? aa_sock_opt_perm+0xff/0x1b0 [ 295.863598][T11397] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 295.863622][T11397] ? __pfx_xsk_setsockopt+0x10/0x10 [ 295.863648][T11397] do_sock_setsockopt+0x17c/0x1b0 [ 295.863682][T11397] __x64_sys_setsockopt+0x13f/0x1b0 [ 295.863721][T11397] do_syscall_64+0xfa/0xfa0 [ 295.863751][T11397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.863768][T11397] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 295.863785][T11397] ? clear_bhb_loop+0x60/0xb0 [ 295.863815][T11397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.863832][T11397] RIP: 0033:0x7fb728d8eec9 [ 295.863851][T11397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.863865][T11397] RSP: 002b:00007fb729baf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.863884][T11397] RAX: ffffffffffffffda RBX: 00007fb728fe6090 RCX: 00007fb728d8eec9 [ 295.863897][T11397] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f [ 295.863909][T11397] RBP: 00007fb728e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 295.863919][T11397] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 295.863930][T11397] R13: 00007fb728fe6128 R14: 00007fb728fe6090 R15: 00007ffe58667528 [ 295.863987][T11397] [ 295.864041][T11397] Mem-Info: [ 296.237967][T11397] active_anon:12347 inactive_anon:0 isolated_anon:0 [ 296.237967][T11397] active_file:17063 inactive_file:39971 isolated_file:0 [ 296.237967][T11397] unevictable:768 dirty:437 writeback:0 [ 296.237967][T11397] slab_reclaimable:11432 slab_unreclaimable:102532 [ 296.237967][T11397] mapped:36731 shmem:8822 pagetables:1254 [ 296.237967][T11397] sec_pagetables:0 bounce:0 [ 296.237967][T11397] kernel_misc_reclaimable:0 [ 296.237967][T11397] free:1301570 free_pcp:12393 free_cma:0 [ 296.333972][T11397] Node 0 active_anon:50388kB inactive_anon:0kB active_file:68252kB inactive_file:159684kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:147924kB dirty:1748kB writeback:0kB shmem:34852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11616kB pagetables:4880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.412622][T11397] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 296.484712][T11397] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.538678][T11397] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 296.554908][T11397] Node 0 DMA32 free:1287496kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:54288kB inactive_anon:0kB active_file:70252kB inactive_file:159684kB unevictable:1536kB writepending:1748kB zspages:0kB present:3129332kB managed:2561888kB mlocked:0kB bounce:0kB free_pcp:31372kB local_pcp:21364kB free_cma:0kB [ 296.638696][T11397] lowmem_reserve[]: 0 0 1 1 1 [ 296.648263][T11397] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 296.715382][T11397] lowmem_reserve[]: 0 0 0 0 0 [ 296.725529][T11397] Node 1 Normal free:3893824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19712kB local_pcp:9056kB free_cma:0kB [ 296.797766][T11397] lowmem_reserve[]: 0 0 0 0 0 [ 296.802698][T11397] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 296.835886][T11397] Node 0 DMA32: 1101*4kB (UM) 1163*8kB (UE) 1026*16kB (U) 665*32kB (UE) 566*64kB (UME) 457*128kB (UM) 268*256kB (UME) 251*512kB (UM) 150*1024kB (UM) 3*2048kB (UE) 190*4096kB (M) = 1281228kB [ 296.886072][T11397] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 296.907816][T11397] Node 1 Normal: 214*4kB (UE) 45*8kB (UM) 48*16kB (UME) 68*32kB (UME) 32*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3893824kB [ 296.947818][T11397] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 296.969133][T11397] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 296.997772][T11397] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 297.017662][T11397] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 297.030307][T11397] 71386 total pagecache pages [ 297.035012][T11397] 0 pages in swap cache [ 297.047768][T11397] Free swap = 124996kB [ 297.052101][T11397] Total swap = 124996kB [ 297.056270][T11397] 2097051 pages RAM [ 297.079100][T11397] 0 pages HighMem/MovableOnly [ 297.088077][T11397] 424489 pages reserved [ 297.094495][T11397] 0 pages cma reserved [ 299.060886][T11415] FAULT_INJECTION: forcing a failure. [ 299.060886][T11415] name failslab, interval 1, probability 0, space 0, times 0 [ 299.074399][T11415] CPU: 0 UID: 0 PID: 11415 Comm: syz.0.1873 Not tainted syzkaller #0 PREEMPT(full) [ 299.074423][T11415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 299.074433][T11415] Call Trace: [ 299.074440][T11415] [ 299.074447][T11415] dump_stack_lvl+0x189/0x250 [ 299.074470][T11415] ? __pfx____ratelimit+0x10/0x10 [ 299.074492][T11415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.074509][T11415] ? __pfx__printk+0x10/0x10 [ 299.074532][T11415] ? __pfx___might_resched+0x10/0x10 [ 299.074546][T11415] ? fs_reclaim_acquire+0x7d/0x100 [ 299.074570][T11415] should_fail_ex+0x414/0x560 [ 299.074596][T11415] should_failslab+0xa8/0x100 [ 299.074620][T11415] __kmalloc_noprof+0xcb/0x7f0 [ 299.074637][T11415] ? bpf_prog_bind_map+0x3a4/0x690 [ 299.074659][T11415] bpf_prog_bind_map+0x3a4/0x690 [ 299.074681][T11415] __sys_bpf+0x7cc/0x860 [ 299.074706][T11415] ? __pfx___sys_bpf+0x10/0x10 [ 299.074761][T11415] __x64_sys_bpf+0x7c/0x90 [ 299.074784][T11415] do_syscall_64+0xfa/0xfa0 [ 299.074807][T11415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.074823][T11415] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 299.074838][T11415] ? clear_bhb_loop+0x60/0xb0 [ 299.074858][T11415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.074874][T11415] RIP: 0033:0x7f41fb38eec9 [ 299.074889][T11415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.074902][T11415] RSP: 002b:00007f41fc29b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.074921][T11415] RAX: ffffffffffffffda RBX: 00007f41fb5e5fa0 RCX: 00007f41fb38eec9 [ 299.074933][T11415] RDX: 000000000000000c RSI: 0000200000000000 RDI: 0000000000000023 [ 299.074943][T11415] RBP: 00007f41fc29b090 R08: 0000000000000000 R09: 0000000000000000 [ 299.074954][T11415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.074963][T11415] R13: 00007f41fb5e6038 R14: 00007f41fb5e5fa0 R15: 00007ffcd305b8c8 [ 299.075002][T11415] [ 299.338536][T11420] __nla_validate_parse: 9 callbacks suppressed [ 299.338568][T11420] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1877'. [ 299.375886][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 299.472644][T11427] xt_l2tp: v2 sid > 0xffff: 1114112 [ 299.602336][T11431] FAULT_INJECTION: forcing a failure. [ 299.602336][T11431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.637477][T11431] CPU: 0 UID: 0 PID: 11431 Comm: syz.3.1880 Not tainted syzkaller #0 PREEMPT(full) [ 299.637501][T11431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 299.637512][T11431] Call Trace: [ 299.637520][T11431] [ 299.637528][T11431] dump_stack_lvl+0x189/0x250 [ 299.637552][T11431] ? __pfx____ratelimit+0x10/0x10 [ 299.637575][T11431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.637594][T11431] ? __pfx__printk+0x10/0x10 [ 299.637612][T11431] ? __might_fault+0xb0/0x130 [ 299.637647][T11431] should_fail_ex+0x414/0x560 [ 299.637679][T11431] _copy_from_iter+0x1de/0x1790 [ 299.637710][T11431] ? _copy_from_iter+0x24f/0x1790 [ 299.637735][T11431] ? __pfx__copy_from_iter+0x10/0x10 [ 299.637752][T11431] ? sock_alloc_send_pskb+0x86b/0x980 [ 299.637784][T11431] ? __pfx__copy_from_iter+0x10/0x10 [ 299.637807][T11431] ? page_copy_sane+0x16a/0x280 [ 299.637830][T11431] copy_page_from_iter+0xdd/0x170 [ 299.637856][T11431] skb_copy_datagram_from_iter+0x306/0x720 [ 299.637896][T11431] tun_get_user+0x1691/0x3e90 [ 299.637948][T11431] ? aa_file_perm+0x44d/0x1550 [ 299.637968][T11431] ? __pfx_tun_get_user+0x10/0x10 [ 299.637984][T11431] ? perf_trace_lock_acquire+0xf5/0x410 [ 299.638011][T11431] ? perf_trace_lock_acquire+0xf5/0x410 [ 299.638030][T11431] ? perf_trace_lock_acquire+0xf5/0x410 [ 299.638055][T11431] ? ref_tracker_alloc+0x318/0x460 [ 299.638070][T11431] ? __lock_acquire+0xab9/0xd20 [ 299.638096][T11431] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 299.638121][T11431] ? tun_get+0x1c/0x2f0 [ 299.638147][T11431] ? tun_get+0x1c/0x2f0 [ 299.638165][T11431] ? tun_get+0x1c/0x2f0 [ 299.638190][T11431] tun_chr_write_iter+0x113/0x200 [ 299.638213][T11431] vfs_write+0x5c6/0xb30 [ 299.638241][T11431] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 299.638261][T11431] ? __pfx_vfs_write+0x10/0x10 [ 299.638296][T11431] ? __fget_files+0x2a/0x420 [ 299.638329][T11431] ksys_write+0x145/0x250 [ 299.638354][T11431] ? __pfx_ksys_write+0x10/0x10 [ 299.638388][T11431] do_syscall_64+0xfa/0xfa0 [ 299.638409][T11431] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.638432][T11431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.638449][T11431] ? clear_bhb_loop+0x60/0xb0 [ 299.638471][T11431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.638488][T11431] RIP: 0033:0x7fb728d8eec9 [ 299.638504][T11431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.638518][T11431] RSP: 002b:00007fb729bd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.638537][T11431] RAX: ffffffffffffffda RBX: 00007fb728fe5fa0 RCX: 00007fb728d8eec9 [ 299.638550][T11431] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 00000000000000c8 [ 299.638561][T11431] RBP: 00007fb729bd0090 R08: 0000000000000000 R09: 0000000000000000 [ 299.638572][T11431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.638582][T11431] R13: 00007fb728fe6038 R14: 00007fb728fe5fa0 R15: 00007ffe58667528 [ 299.638618][T11431] [ 300.388212][T11439] validate_nla: 1 callbacks suppressed [ 300.388229][T11439] netlink: 'syz.3.1884': attribute type 13 has an invalid length. [ 300.404529][T11443] netlink: 'syz.2.1883': attribute type 21 has an invalid length. [ 300.414444][T11443] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1883'. [ 300.576882][T11454] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 300.795405][T11439] lo speed is unknown, defaulting to 1000 [ 300.967090][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1890'. [ 301.000538][T11462] netlink: 'syz.2.1891': attribute type 10 has an invalid length. [ 301.015106][T11439] hsr0 speed is unknown, defaulting to 1000 [ 301.056140][T11463] netlink: 'syz.2.1891': attribute type 10 has an invalid length. [ 301.064937][T11462] bond0: (slave dummy0): Releasing backup interface [ 301.099228][T11462] team0: Port device dummy0 added [ 301.130915][T11463] team0: Port device dummy0 removed [ 301.152059][T11463] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 301.723295][T11478] xt_l2tp: v2 sid > 0xffff: 1114112 [ 301.811707][T11485] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1899'. [ 301.859568][T11488] netlink: 'syz.4.1900': attribute type 10 has an invalid length. [ 301.912603][T11490] netlink: 'syz.4.1900': attribute type 10 has an invalid length. [ 302.116835][T11488] bond0: (slave dummy0): Releasing backup interface [ 302.162189][T11488] team0: Port device dummy0 added [ 302.266947][T11490] team0: Port device dummy0 removed [ 302.295720][T11490] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 302.423005][T11496] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1902'. [ 302.995633][T11514] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 303.841175][T11529] netlink: 220 bytes leftover after parsing attributes in process `syz.3.1913'. [ 304.300568][T11537] openvswitch: netlink: Flow key attr not present in new flow. [ 304.633401][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1916'. [ 304.790064][T11556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1921'. [ 304.902466][T11568] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 306.125300][T11588] netlink: 'syz.1.1934': attribute type 39 has an invalid length. [ 306.263256][T11595] netlink: 'syz.4.1937': attribute type 39 has an invalid length. [ 306.523231][T11610] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 306.552040][T11614] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1943'. [ 306.647026][T11614] netlink: 'syz.4.1943': attribute type 1 has an invalid length. [ 306.656976][T11614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1943'. [ 307.360184][T11620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1947'. [ 307.382039][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1947'. [ 307.512548][T11628] warn_alloc: 2 callbacks suppressed [ 307.512586][T11628] syz.0.1946: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 307.563050][T11630] netlink: 'syz.4.1950': attribute type 39 has an invalid length. [ 307.577921][T11628] CPU: 1 UID: 0 PID: 11628 Comm: syz.0.1946 Not tainted syzkaller #0 PREEMPT(full) [ 307.577947][T11628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.577970][T11628] Call Trace: [ 307.577980][T11628] [ 307.577989][T11628] dump_stack_lvl+0x189/0x250 [ 307.578027][T11628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.578050][T11628] ? __pfx__printk+0x10/0x10 [ 307.578075][T11628] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.578101][T11628] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 307.578131][T11628] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 307.578164][T11628] warn_alloc+0x214/0x310 [ 307.578191][T11628] ? stack_depot_save_flags+0x40/0x860 [ 307.578239][T11628] ? __pfx_warn_alloc+0x10/0x10 [ 307.578270][T11628] ? kasan_save_track+0x3e/0x80 [ 307.578289][T11628] ? __kasan_kmalloc+0x93/0xb0 [ 307.578316][T11628] ? xsk_setsockopt+0x57b/0x8d0 [ 307.578335][T11628] ? do_sock_setsockopt+0x17c/0x1b0 [ 307.578356][T11628] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 307.578376][T11628] ? do_syscall_64+0xfa/0xfa0 [ 307.578398][T11628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.578442][T11628] __vmalloc_node_range_noprof+0x125/0x12d0 [ 307.578544][T11628] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 307.578580][T11628] ? __kasan_kmalloc+0x93/0xb0 [ 307.578622][T11628] vmalloc_user_noprof+0xad/0xf0 [ 307.578648][T11628] ? xskq_create+0xbf/0x170 [ 307.578676][T11628] xskq_create+0xbf/0x170 [ 307.578710][T11628] xsk_init_queue+0xb0/0x110 [ 307.578744][T11628] xsk_setsockopt+0x57b/0x8d0 [ 307.578777][T11628] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.578846][T11628] ? __pfx_xsk_setsockopt+0x10/0x10 [ 307.578875][T11628] do_sock_setsockopt+0x17c/0x1b0 [ 307.578914][T11628] __x64_sys_setsockopt+0x13f/0x1b0 [ 307.578955][T11628] do_syscall_64+0xfa/0xfa0 [ 307.578984][T11628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.579001][T11628] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 307.579018][T11628] ? clear_bhb_loop+0x60/0xb0 [ 307.579048][T11628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.579066][T11628] RIP: 0033:0x7f41fb38eec9 [ 307.579085][T11628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.579099][T11628] RSP: 002b:00007f41fc27a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 307.579118][T11628] RAX: ffffffffffffffda RBX: 00007f41fb5e6090 RCX: 00007f41fb38eec9 [ 307.579131][T11628] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000f [ 307.579141][T11628] RBP: 00007f41fb411f91 R08: 0000000000000004 R09: 0000000000000000 [ 307.579153][T11628] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 307.579165][T11628] R13: 00007f41fb5e6128 R14: 00007f41fb5e6090 R15: 00007ffcd305b8c8 [ 307.579234][T11628] [ 307.581396][T11628] Mem-Info: [ 307.709799][T11636] netlink: 'syz.2.1952': attribute type 10 has an invalid length. [ 307.825391][T11628] active_anon:4869 inactive_anon:0 isolated_anon:0 [ 307.825391][T11628] active_file:19239 inactive_file:39975 isolated_file:0 [ 307.825391][T11628] unevictable:768 dirty:525 writeback:0 [ 307.825391][T11628] slab_reclaimable:11276 slab_unreclaimable:102950 [ 307.825391][T11628] mapped:29608 shmem:1356 pagetables:1206 [ 307.825391][T11628] sec_pagetables:0 bounce:0 [ 307.825391][T11628] kernel_misc_reclaimable:0 [ 307.825391][T11628] free:1302393 free_pcp:15541 free_cma:0 [ 307.882679][T11639] netlink: 'syz.1.1953': attribute type 11 has an invalid length. [ 307.887562][T11628] Node 0 active_anon:19548kB inactive_anon:0kB active_file:76956kB inactive_file:159700kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118456kB dirty:2100kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11644kB pagetables:4748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 307.900392][T11636] bond0: (slave dummy0): Releasing backup interface [ 307.900683][T11639] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1953'. [ 308.012955][T11641] netlink: 'syz.2.1952': attribute type 10 has an invalid length. [ 308.027307][T11638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.281098][T11628] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 308.311738][T11628] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.313136][T11636] team0: Port device dummy0 added [ 308.412243][T11641] team0: Port device dummy0 removed [ 308.413535][T11628] lowmem_reserve[]: 0 [ 308.429139][T11641] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 308.442197][T11628] 2501 2503 2503 2503 [ 308.458288][T11628] Node 0 DMA32 free:1302068kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19372kB inactive_anon:0kB active_file:76956kB inactive_file:159700kB unevictable:1536kB writepending:2100kB zspages:0kB present:3129332kB managed:2561888kB mlocked:0kB bounce:0kB free_pcp:39280kB local_pcp:18640kB free_cma:0kB [ 308.527683][T11628] lowmem_reserve[]: 0 0 1 1 1 [ 308.546654][T11628] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 308.618158][T11628] lowmem_reserve[]: 0 0 0 0 0 [ 308.622944][T11628] Node 1 Normal free:3893824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19712kB local_pcp:10656kB free_cma:0kB [ 308.666385][T11651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1956'. [ 308.671697][T11628] lowmem_reserve[]: 0 0 0 0 0 [ 308.680670][T11628] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 308.694552][T11628] Node 0 DMA32: 1311*4kB (UM) 1954*8kB (UME) 1460*16kB (UM) 674*32kB (UME) 683*64kB (UME) 482*128kB (UM) 298*256kB (UME) 264*512kB (UM) 158*1024kB (U) 4*2048kB (UE) 183*4096kB (UM) = 1302220kB [ 308.715857][T11628] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 308.735043][T11628] Node 1 Normal: 214*4kB (UE) 45*8kB (UM) 48*16kB (UME) 68*32kB (UME) 32*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3893824kB [ 308.787664][T11651] netlink: 'syz.1.1956': attribute type 1 has an invalid length. [ 308.797054][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1956'. [ 308.798870][T11628] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.817925][T11628] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.827686][T11628] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 308.843942][T11628] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 308.858698][T11628] 60566 total pagecache pages [ 308.864470][T11628] 0 pages in swap cache [ 308.870142][T11628] Free swap = 124996kB [ 308.876531][T11628] Total swap = 124996kB [ 308.882470][T11628] 2097051 pages RAM [ 308.887092][T11628] 0 pages HighMem/MovableOnly [ 308.891866][T11628] 424489 pages reserved [ 308.896129][T11628] 0 pages cma reserved [ 309.021812][T11665] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 309.261313][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1966'. [ 310.064690][T11705] __nla_validate_parse: 3 callbacks suppressed [ 310.064724][T11705] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1978'. [ 310.154611][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1982'. [ 310.164507][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 310.173555][T11717] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1982'. [ 310.193235][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 310.213615][T11717] netlink: 33 bytes leftover after parsing attributes in process `syz.1.1982'. [ 310.260692][T11721] netlink: 'syz.3.1984': attribute type 10 has an invalid length. [ 310.273610][T11721] bond0: (slave dummy0): Releasing backup interface [ 310.283965][T11721] team0: Port device dummy0 added [ 310.293015][T11721] netlink: 'syz.3.1984': attribute type 10 has an invalid length. [ 310.309159][T11721] team0: Port device dummy0 removed [ 310.322528][T11721] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 310.991705][T11745] netlink: 'syz.4.1994': attribute type 10 has an invalid length. [ 311.026750][T11745] bond0: (slave dummy0): Releasing backup interface [ 311.039764][T11745] team0: Port device dummy0 added [ 311.099008][T11745] team0: Port device dummy0 removed [ 311.112134][T11745] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 311.132892][T11748] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1995'. [ 311.172300][T11752] FAULT_INJECTION: forcing a failure. [ 311.172300][T11752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.207416][T11752] CPU: 1 UID: 0 PID: 11752 Comm: syz.1.1997 Not tainted syzkaller #0 PREEMPT(full) [ 311.207440][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.207451][T11752] Call Trace: [ 311.207458][T11752] [ 311.207466][T11752] dump_stack_lvl+0x189/0x250 [ 311.207489][T11752] ? __pfx____ratelimit+0x10/0x10 [ 311.207512][T11752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.207530][T11752] ? __pfx__printk+0x10/0x10 [ 311.207550][T11752] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 311.207584][T11752] should_fail_ex+0x414/0x560 [ 311.207614][T11752] _copy_to_user+0x31/0xb0 [ 311.207637][T11752] bpf_test_finish+0x1ab/0x700 [ 311.207665][T11752] ? __pfx_bpf_test_finish+0x10/0x10 [ 311.207685][T11752] ? bpf_test_timer_leave+0x21e/0x310 [ 311.207711][T11752] bpf_prog_test_run_flow_dissector+0x44e/0x5c0 [ 311.207743][T11752] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 311.207767][T11752] ? __fget_files+0x2a/0x420 [ 311.207796][T11752] ? __fget_files+0x2a/0x420 [ 311.207830][T11752] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 311.207853][T11752] bpf_prog_test_run+0x2c7/0x340 [ 311.207882][T11752] __sys_bpf+0x562/0x860 [ 311.207907][T11752] ? __pfx___sys_bpf+0x10/0x10 [ 311.207945][T11752] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 311.207968][T11752] ? ksys_write+0x22a/0x250 [ 311.207991][T11752] ? __pfx_ksys_write+0x10/0x10 [ 311.208017][T11752] __x64_sys_bpf+0x7c/0x90 [ 311.208039][T11752] do_syscall_64+0xfa/0xfa0 [ 311.208063][T11752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.208079][T11752] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.208097][T11752] ? clear_bhb_loop+0x60/0xb0 [ 311.208118][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.208135][T11752] RIP: 0033:0x7f60d4d8eec9 [ 311.208151][T11752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.208166][T11752] RSP: 002b:00007f60d5cfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.208184][T11752] RAX: ffffffffffffffda RBX: 00007f60d4fe5fa0 RCX: 00007f60d4d8eec9 [ 311.208196][T11752] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 311.208207][T11752] RBP: 00007f60d5cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 311.208216][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.208225][T11752] R13: 00007f60d4fe6038 R14: 00007f60d4fe5fa0 R15: 00007ffc21925e88 [ 311.208254][T11752] [ 311.792864][T11778] validate_nla: 1 callbacks suppressed [ 311.792883][T11778] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 311.822908][T11778] bond0: (slave dummy0): Releasing backup interface [ 311.845422][T11778] team0: Port device dummy0 added [ 311.877737][T11784] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2009'. [ 311.957591][T11778] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 312.016928][T11778] team0: Port device dummy0 removed [ 312.037882][T11778] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 312.153131][T11792] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2010'. [ 312.436379][T11800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.554154][T11805] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2016'. [ 312.941748][T11820] netlink: 'syz.3.2022': attribute type 3 has an invalid length. [ 313.954337][T11868] netlink: 'syz.2.2038': attribute type 39 has an invalid length. [ 314.047588][T11874] netlink: 'syz.4.2040': attribute type 10 has an invalid length. [ 314.088763][T11874] bond0: (slave dummy0): Releasing backup interface [ 314.101839][T11874] team0: Port device dummy0 added [ 314.148171][T11874] netlink: 'syz.4.2040': attribute type 10 has an invalid length. [ 314.171665][T11875] xt_l2tp: v2 sid > 0xffff: 1114112 [ 314.254163][T11874] team0: Port device dummy0 removed [ 314.288126][T11874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 314.732856][T11891] netlink: 'syz.4.2048': attribute type 1 has an invalid length. [ 314.913292][T11903] netlink: 'syz.3.2053': attribute type 1 has an invalid length. [ 315.802649][T11919] netlink: 'syz.3.2057': attribute type 10 has an invalid length. [ 315.833825][T11919] __nla_validate_parse: 11 callbacks suppressed [ 315.833845][T11919] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2057'. [ 316.390386][T11941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2067'. [ 316.425130][T11942] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2068'. [ 316.482169][T11941] netlink: 'syz.0.2067': attribute type 1 has an invalid length. [ 316.492081][T11941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2067'. [ 316.517344][T11948] xt_l2tp: v2 sid > 0xffff: 1114112 [ 316.583187][T11949] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.2070'. [ 316.610658][T11949] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2070'. [ 316.820191][T11956] validate_nla: 1 callbacks suppressed [ 316.820209][T11956] netlink: 'syz.0.2072': attribute type 39 has an invalid length. [ 317.098334][T11971] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 317.141690][T11970] FAULT_INJECTION: forcing a failure. [ 317.141690][T11970] name failslab, interval 1, probability 0, space 0, times 0 [ 317.154698][T11970] CPU: 0 UID: 0 PID: 11970 Comm: syz.1.2077 Not tainted syzkaller #0 PREEMPT(full) [ 317.154722][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 317.154732][T11970] Call Trace: [ 317.154740][T11970] [ 317.154749][T11970] dump_stack_lvl+0x189/0x250 [ 317.154774][T11970] ? __pfx____ratelimit+0x10/0x10 [ 317.154801][T11970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.154820][T11970] ? __pfx__printk+0x10/0x10 [ 317.154834][T11970] ? kasan_save_track+0x4f/0x80 [ 317.154858][T11970] ? dst_alloc+0x105/0x170 [ 317.154880][T11970] ? fib6_rule_lookup+0x1fc/0x6f0 [ 317.154900][T11970] ? ip6_route_output_flags+0x364/0x5d0 [ 317.154919][T11970] ? ip6_dst_lookup_tail+0x1ae/0x1510 [ 317.154941][T11970] ? rawv6_sendmsg+0xdbf/0x1830 [ 317.154956][T11970] ? __sock_sendmsg+0x19c/0x270 [ 317.154969][T11970] ? ____sys_sendmsg+0x505/0x830 [ 317.154986][T11970] ? ___sys_sendmsg+0x21f/0x2a0 [ 317.155004][T11970] ? __x64_sys_sendmsg+0x19b/0x260 [ 317.155033][T11970] should_fail_ex+0x414/0x560 [ 317.155074][T11970] should_failslab+0xa8/0x100 [ 317.155105][T11970] __kmalloc_node_noprof+0xd2/0x800 [ 317.155127][T11970] ? alloc_slab_obj_exts+0x3d/0xc0 [ 317.155164][T11970] alloc_slab_obj_exts+0x3d/0xc0 [ 317.155188][T11970] __memcg_slab_post_alloc_hook+0x31d/0x7d0 [ 317.155254][T11970] kmem_cache_alloc_noprof+0x417/0x6e0 [ 317.155278][T11970] ? dst_alloc+0x105/0x170 [ 317.155305][T11970] ? __pfx_ip6_dst_gc+0x10/0x10 [ 317.155330][T11970] dst_alloc+0x105/0x170 [ 317.155367][T11970] ip6_pol_route+0xa21/0x1180 [ 317.155389][T11970] ? ip6_pol_route+0x162/0x1180 [ 317.155426][T11970] ? __pfx_ip6_pol_route+0x10/0x10 [ 317.155501][T11970] fib6_rule_lookup+0x1fc/0x6f0 [ 317.155529][T11970] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 317.155554][T11970] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 317.155617][T11970] ? dev_get_by_index_rcu+0xf4/0x110 [ 317.155655][T11970] ip6_route_output_flags+0x364/0x5d0 [ 317.155679][T11970] ? ip6_route_output_flags+0x2e/0x5d0 [ 317.155710][T11970] ip6_dst_lookup_tail+0x1ae/0x1510 [ 317.155755][T11970] ? txopt_get+0x7a/0x3f0 [ 317.155785][T11970] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 317.155815][T11970] ? txopt_get+0x7a/0x3f0 [ 317.155835][T11970] ? txopt_get+0x7a/0x3f0 [ 317.155851][T11970] ? txopt_get+0x7a/0x3f0 [ 317.155875][T11970] ? txopt_get+0x335/0x3f0 [ 317.155904][T11970] ? __pfx_txopt_get+0x10/0x10 [ 317.155937][T11970] ip6_dst_lookup_flow+0x47/0xe0 [ 317.155970][T11970] rawv6_sendmsg+0xdbf/0x1830 [ 317.156031][T11970] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 317.156122][T11970] ? __pfx_aa_sk_perm+0x10/0x10 [ 317.156155][T11970] ? sock_rps_record_flow+0x19/0x410 [ 317.156187][T11970] ? inet_sendmsg+0x2f4/0x370 [ 317.156206][T11970] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.156242][T11970] __sock_sendmsg+0x19c/0x270 [ 317.156272][T11970] ____sys_sendmsg+0x505/0x830 [ 317.156316][T11970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.156368][T11970] ? import_iovec+0x74/0xa0 [ 317.156404][T11970] ___sys_sendmsg+0x21f/0x2a0 [ 317.156438][T11970] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.156530][T11970] ? __fget_files+0x2a/0x420 [ 317.156589][T11970] ? __fget_files+0x2a/0x420 [ 317.156611][T11970] ? __fget_files+0x3a0/0x420 [ 317.156666][T11970] __x64_sys_sendmsg+0x19b/0x260 [ 317.156700][T11970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.156719][T11970] ? __might_fault+0xb0/0x130 [ 317.156768][T11970] ? rcu_is_watching+0x15/0xb0 [ 317.156811][T11970] do_syscall_64+0xfa/0xfa0 [ 317.156832][T11970] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.156857][T11970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.156874][T11970] ? clear_bhb_loop+0x60/0xb0 [ 317.156903][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.156920][T11970] RIP: 0033:0x7f60d4d8eec9 [ 317.156939][T11970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.156951][T11970] RSP: 002b:00007f60d5cfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.156971][T11970] RAX: ffffffffffffffda RBX: 00007f60d4fe5fa0 RCX: 00007f60d4d8eec9 [ 317.156983][T11970] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 317.156994][T11970] RBP: 00007f60d5cfc090 R08: 0000000000000000 R09: 0000000000000000 [ 317.157003][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.157013][T11970] R13: 00007f60d4fe6038 R14: 00007f60d4fe5fa0 R15: 00007ffc21925e88 [ 317.157071][T11970] [ 317.169059][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.600388][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.272115][T11981] netlink: 'syz.1.2081': attribute type 10 has an invalid length. [ 318.294702][T11981] bond0: (slave dummy0): Releasing backup interface [ 318.332983][T11986] netlink: 'syz.1.2081': attribute type 10 has an invalid length. [ 318.358886][T11985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2082'. [ 318.368355][T11981] team0: Port device dummy0 added [ 318.430183][T11986] team0: Port device dummy0 removed [ 318.464281][T11986] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 318.487637][T11985] netlink: 'syz.4.2082': attribute type 1 has an invalid length. [ 318.496178][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2082'. [ 318.530822][T11989] FAULT_INJECTION: forcing a failure. [ 318.530822][T11989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.574638][T11989] CPU: 0 UID: 0 PID: 11989 Comm: syz.0.2084 Not tainted syzkaller #0 PREEMPT(full) [ 318.574661][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.574672][T11989] Call Trace: [ 318.574679][T11989] [ 318.574687][T11989] dump_stack_lvl+0x189/0x250 [ 318.574709][T11989] ? __pfx____ratelimit+0x10/0x10 [ 318.574732][T11989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.574747][T11989] ? __pfx__printk+0x10/0x10 [ 318.574764][T11989] ? __might_fault+0xb0/0x130 [ 318.574794][T11989] should_fail_ex+0x414/0x560 [ 318.574824][T11989] _copy_from_user+0x2d/0xb0 [ 318.574844][T11989] ___sys_sendmsg+0x158/0x2a0 [ 318.574869][T11989] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.574923][T11989] ? __fget_files+0x2a/0x420 [ 318.574944][T11989] ? __fget_files+0x3a0/0x420 [ 318.574972][T11989] __x64_sys_sendmsg+0x19b/0x260 [ 318.574996][T11989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.575016][T11989] ? perf_trace_preemptirq_template+0xa3/0x340 [ 318.575047][T11989] ? __pfx_ksys_write+0x10/0x10 [ 318.575068][T11989] ? do_syscall_64+0xbe/0xfa0 [ 318.575092][T11989] do_syscall_64+0xfa/0xfa0 [ 318.575111][T11989] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.575141][T11989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.575158][T11989] ? clear_bhb_loop+0x60/0xb0 [ 318.575179][T11989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.575194][T11989] RIP: 0033:0x7f41fb38eec9 [ 318.575209][T11989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.575222][T11989] RSP: 002b:00007f41fc29b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.575239][T11989] RAX: ffffffffffffffda RBX: 00007f41fb5e5fa0 RCX: 00007f41fb38eec9 [ 318.575250][T11989] RDX: 0000000020000040 RSI: 0000200000004100 RDI: 0000000000000005 [ 318.575261][T11989] RBP: 00007f41fc29b090 R08: 0000000000000000 R09: 0000000000000000 [ 318.575271][T11989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.575281][T11989] R13: 00007f41fb5e6038 R14: 00007f41fb5e5fa0 R15: 00007ffcd305b8c8 [ 318.575309][T11989] [ 318.876222][T12004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2088'. [ 319.404569][ T134] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 319.468913][T12019] xt_l2tp: v2 sid > 0xffff: 1114112 [ 319.777422][T12033] netlink: 'syz.3.2097': attribute type 4 has an invalid length. [ 319.838291][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2101'. [ 320.091827][T12049] netlink: 'syz.0.2102': attribute type 39 has an invalid length. [ 320.377461][T12059] syz.4.2104: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 320.420314][T12059] CPU: 1 UID: 0 PID: 12059 Comm: syz.4.2104 Not tainted syzkaller #0 PREEMPT(full) [ 320.420343][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.420354][T12059] Call Trace: [ 320.420362][T12059] [ 320.420373][T12059] dump_stack_lvl+0x189/0x250 [ 320.420401][T12059] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 320.420433][T12059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.420456][T12059] ? __pfx__printk+0x10/0x10 [ 320.420476][T12059] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 320.420498][T12059] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 320.420541][T12059] warn_alloc+0x214/0x310 [ 320.420565][T12059] ? stack_depot_save_flags+0x40/0x860 [ 320.420603][T12059] ? __pfx_warn_alloc+0x10/0x10 [ 320.420628][T12059] ? kasan_save_track+0x3e/0x80 [ 320.420644][T12059] ? __kasan_kmalloc+0x93/0xb0 [ 320.420668][T12059] ? xsk_setsockopt+0x57b/0x8d0 [ 320.420686][T12059] ? do_sock_setsockopt+0x17c/0x1b0 [ 320.420706][T12059] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 320.420724][T12059] ? do_syscall_64+0xfa/0xfa0 [ 320.420742][T12059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.420785][T12059] __vmalloc_node_range_noprof+0x125/0x12d0 [ 320.420887][T12059] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 320.420920][T12059] ? __kasan_kmalloc+0x93/0xb0 [ 320.420969][T12059] vmalloc_user_noprof+0xad/0xf0 [ 320.420995][T12059] ? xskq_create+0xbf/0x170 [ 320.421023][T12059] xskq_create+0xbf/0x170 [ 320.421057][T12059] xsk_init_queue+0xb0/0x110 [ 320.421088][T12059] xsk_setsockopt+0x57b/0x8d0 [ 320.421118][T12059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.421149][T12059] ? __pfx_aa_sk_perm+0x10/0x10 [ 320.421175][T12059] ? aa_sock_opt_perm+0xff/0x1b0 [ 320.421207][T12059] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 320.421229][T12059] ? __pfx_xsk_setsockopt+0x10/0x10 [ 320.421259][T12059] do_sock_setsockopt+0x17c/0x1b0 [ 320.421299][T12059] __x64_sys_setsockopt+0x13f/0x1b0 [ 320.421340][T12059] do_syscall_64+0xfa/0xfa0 [ 320.421369][T12059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.421382][T12059] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.421396][T12059] ? clear_bhb_loop+0x60/0xb0 [ 320.421421][T12059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.421438][T12059] RIP: 0033:0x7f229c98eec9 [ 320.421456][T12059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.421472][T12059] RSP: 002b:00007f229abcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 320.421490][T12059] RAX: ffffffffffffffda RBX: 00007f229cbe6090 RCX: 00007f229c98eec9 [ 320.421501][T12059] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000010 [ 320.421511][T12059] RBP: 00007f229ca11f91 R08: 0000000000000004 R09: 0000000000000000 [ 320.421521][T12059] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 320.421529][T12059] R13: 00007f229cbe6128 R14: 00007f229cbe6090 R15: 00007ffd57638ff8 [ 320.421588][T12059] [ 320.421625][T12059] Mem-Info: [ 320.913125][T12059] active_anon:21025 inactive_anon:0 isolated_anon:0 [ 320.913125][T12059] active_file:21114 inactive_file:39981 isolated_file:0 [ 320.913125][T12059] unevictable:768 dirty:537 writeback:0 [ 320.913125][T12059] slab_reclaimable:11359 slab_unreclaimable:102622 [ 320.913125][T12059] mapped:39685 shmem:17517 pagetables:1139 [ 320.913125][T12059] sec_pagetables:0 bounce:0 [ 320.913125][T12059] kernel_misc_reclaimable:0 [ 320.913125][T12059] free:1289824 free_pcp:10735 free_cma:0 [ 321.047925][T12059] Node 0 active_anon:84700kB inactive_anon:0kB active_file:84456kB inactive_file:159724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155340kB dirty:2148kB writeback:0kB shmem:69232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11548kB pagetables:4420kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 321.091263][T12059] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 321.181473][T12059] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.258728][T12059] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 321.317829][T12059] Node 0 DMA32 free:1248812kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:80200kB inactive_anon:0kB active_file:84456kB inactive_file:159724kB unevictable:1536kB writepending:2148kB zspages:0kB present:3129332kB managed:2561888kB mlocked:0kB bounce:0kB free_pcp:28672kB local_pcp:11988kB free_cma:0kB [ 321.354050][T12059] lowmem_reserve[]: 0 0 1 1 1 [ 321.364091][T12059] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 321.407319][T12083] __nla_validate_parse: 1 callbacks suppressed [ 321.407336][T12083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2114'. [ 321.438526][T12059] lowmem_reserve[]: 0 0 0 0 0 [ 321.448040][T12059] Node 1 Normal free:3893824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19712kB local_pcp:10656kB free_cma:0kB [ 321.467887][T12083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 321.511797][T12089] netlink: 'syz.3.2116': attribute type 29 has an invalid length. [ 321.523072][T12059] lowmem_reserve[]: 0 0 0 0 0 [ 321.532991][T12059] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 321.547490][T12059] Node 0 DMA32: 1323*4kB (UE) 1300*8kB (UME) 1094*16kB (UE) 564*32kB (UME) 582*64kB (UE) 413*128kB (UM) 256*256kB (UE) 250*512kB (U) 162*1024kB (U) 5*2048kB (UME) 180*4096kB (UM) = 1248300kB [ 321.611884][T12059] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 321.638307][T12059] Node 1 Normal: 214*4kB (UE) 45*8kB (UM) 48*16kB (UME) 68*32kB (UME) 32*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3893824kB [ 321.686863][T12059] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.730868][T12059] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.764357][T12100] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2120'. [ 321.774038][T12059] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 321.792372][T12059] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 321.821194][T12059] 68058 total pagecache pages [ 321.829276][T12059] 0 pages in swap cache [ 321.833551][T12059] Free swap = 124996kB [ 321.854058][T12059] Total swap = 124996kB [ 321.868930][T12059] 2097051 pages RAM [ 321.873076][T12059] 0 pages HighMem/MovableOnly [ 321.883388][T12059] 424489 pages reserved [ 321.887651][T12059] 0 pages cma reserved [ 322.059960][T12108] netlink: 'syz.0.2122': attribute type 39 has an invalid length. [ 322.500143][T12123] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2127'. [ 323.596175][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2143'. [ 323.609523][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2143'. [ 323.683802][T12168] xt_l2tp: v2 sid > 0xffff: 1114112 [ 324.005414][T12177] net veth1_virt_wifi €Â: renamed from virt_wifi0 [ 324.066675][T12177] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2149'. [ 324.227429][T12186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2153'. [ 324.236871][T12186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2153'. [ 324.483365][T12195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2156'. [ 324.793556][T12208] netlink: 'syz.4.2161': attribute type 39 has an invalid length. [ 324.873917][T12214] netlink: 'syz.2.2163': attribute type 10 has an invalid length. [ 324.906055][T12214] bond0: (slave dummy0): Releasing backup interface [ 324.969842][T12220] netlink: 'syz.2.2163': attribute type 10 has an invalid length. [ 325.009828][T12214] team0: Port device dummy0 added [ 325.063335][T12220] team0: Port device dummy0 removed [ 325.079450][T12220] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 339.005156][T12241] __nla_validate_parse: 3 callbacks suppressed [ 339.005177][T12241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2172'. [ 339.447772][ C0] sched: DL replenish lagged too much [ 341.180520][T12243] xt_l2tp: v2 sid > 0xffff: 1114112 [ 341.754797][ T3571] batadv_slave_1: left allmulticast mode [ 341.781417][ T3571] bridge0: port 3(batadv_slave_1) entered disabled state [ 341.849012][T12254] netlink: 'syz.4.2178': attribute type 39 has an invalid length. [ 341.870767][ T3571] bridge_slave_1: left allmulticast mode [ 341.876456][ T3571] bridge_slave_1: left promiscuous mode [ 341.898167][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.939084][ T3571] bridge_slave_0: left allmulticast mode [ 341.944762][ T3571] bridge_slave_0: left promiscuous mode [ 342.006614][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.401448][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.410752][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.419691][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.437978][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.448050][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.527636][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 342.540595][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 342.555372][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 342.564534][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 342.576256][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.717427][ T3571] team0: Port device bridge0 removed [ 342.768912][T12271] warn_alloc: 3 callbacks suppressed [ 342.768950][T12271] syz.3.2182: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 342.791269][T12271] CPU: 0 UID: 0 PID: 12271 Comm: syz.3.2182 Not tainted syzkaller #0 PREEMPT(full) [ 342.791294][T12271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 342.791306][T12271] Call Trace: [ 342.791315][T12271] [ 342.791325][T12271] dump_stack_lvl+0x189/0x250 [ 342.791361][T12271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.791384][T12271] ? __pfx__printk+0x10/0x10 [ 342.791407][T12271] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 342.791432][T12271] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 342.791459][T12271] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 342.791488][T12271] warn_alloc+0x214/0x310 [ 342.791513][T12271] ? stack_depot_save_flags+0x40/0x860 [ 342.791551][T12271] ? __pfx_warn_alloc+0x10/0x10 [ 342.791581][T12271] ? kasan_save_track+0x3e/0x80 [ 342.791600][T12271] ? __kasan_kmalloc+0x93/0xb0 [ 342.791626][T12271] ? xsk_setsockopt+0x57b/0x8d0 [ 342.791645][T12271] ? do_sock_setsockopt+0x17c/0x1b0 [ 342.791665][T12271] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 342.791685][T12271] ? do_syscall_64+0xfa/0xfa0 [ 342.791707][T12271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.791752][T12271] __vmalloc_node_range_noprof+0x125/0x12d0 [ 342.791862][T12271] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 342.791893][T12271] ? __kasan_kmalloc+0x93/0xb0 [ 342.791933][T12271] vmalloc_user_noprof+0xad/0xf0 [ 342.791957][T12271] ? xskq_create+0xbf/0x170 [ 342.791985][T12271] xskq_create+0xbf/0x170 [ 342.792016][T12271] xsk_init_queue+0xb0/0x110 [ 342.792047][T12271] xsk_setsockopt+0x57b/0x8d0 [ 342.792079][T12271] ? __pfx_xsk_setsockopt+0x10/0x10 [ 342.792111][T12271] ? __pfx_aa_sk_perm+0x10/0x10 [ 342.792132][T12271] ? aa_sock_opt_perm+0xb3/0x1b0 [ 342.792155][T12271] ? aa_sock_opt_perm+0xff/0x1b0 [ 342.792185][T12271] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 342.792207][T12271] ? __pfx_xsk_setsockopt+0x10/0x10 [ 342.792232][T12271] do_sock_setsockopt+0x17c/0x1b0 [ 342.792269][T12271] __x64_sys_setsockopt+0x13f/0x1b0 [ 342.792308][T12271] do_syscall_64+0xfa/0xfa0 [ 342.792336][T12271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.792351][T12271] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.792368][T12271] ? clear_bhb_loop+0x60/0xb0 [ 342.792398][T12271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.792415][T12271] RIP: 0033:0x7fb728d8eec9 [ 342.792434][T12271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.792448][T12271] RSP: 002b:00007fb729bd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 342.792467][T12271] RAX: ffffffffffffffda RBX: 00007fb728fe5fa0 RCX: 00007fb728d8eec9 [ 342.792480][T12271] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000010 [ 342.792490][T12271] RBP: 00007fb728e11f91 R08: 0000000000000004 R09: 0000000000000000 [ 342.792500][T12271] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 342.792511][T12271] R13: 00007fb728fe6038 R14: 00007fb728fe5fa0 R15: 00007ffe58667528 [ 342.792573][T12271] [ 342.792643][T12271] Mem-Info: [ 343.126594][T12271] active_anon:18894 inactive_anon:0 isolated_anon:0 [ 343.126594][T12271] active_file:21114 inactive_file:39990 isolated_file:0 [ 343.126594][T12271] unevictable:768 dirty:275 writeback:0 [ 343.126594][T12271] slab_reclaimable:11386 slab_unreclaimable:103558 [ 343.126594][T12271] mapped:29641 shmem:15446 pagetables:1097 [ 343.126594][T12271] sec_pagetables:0 bounce:0 [ 343.126594][T12271] kernel_misc_reclaimable:0 [ 343.126594][T12271] free:1282697 free_pcp:18106 free_cma:0 [ 343.182227][T12271] Node 0 active_anon:75576kB inactive_anon:0kB active_file:84456kB inactive_file:159760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118564kB dirty:1100kB writeback:0kB shmem:60248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11568kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.215049][T12271] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 343.245745][T12271] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.281066][T12271] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 343.287671][T12271] Node 0 DMA32 free:1221604kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:75576kB inactive_anon:0kB active_file:84456kB inactive_file:159760kB unevictable:1536kB writepending:1100kB zspages:0kB present:3129332kB managed:2561888kB mlocked:0kB bounce:0kB free_pcp:53584kB local_pcp:31436kB free_cma:0kB [ 343.322790][T12271] lowmem_reserve[]: 0 0 1 1 1 [ 343.328611][T12271] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 343.359204][T12271] lowmem_reserve[]: 0 0 0 0 0 [ 343.371863][T12271] Node 1 Normal free:3893824kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19712kB local_pcp:10656kB free_cma:0kB [ 343.405264][T12271] lowmem_reserve[]: 0 0 0 0 0 [ 343.411014][T12271] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 343.425321][T12271] Node 0 DMA32: 202*4kB (UM) 47*8kB (UE) 42*16kB (UM) 42*32kB (UME) 523*64kB (UE) 460*128kB (UM) 289*256kB (UE) 267*512kB (UM) 170*1024kB (UM) 6*2048kB (UME) 178*4096kB (UM) = 1221696kB [ 343.446129][T12271] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 343.459179][T12271] Node 1 Normal: 214*4kB (UE) 45*8kB (UM) 48*16kB (UME) 68*32kB (UME) 32*64kB (UME) 6*128kB (UME) 5*256kB (UME) 3*512kB (ME) 1*1024kB (M) 2*2048kB (UE) 947*4096kB (M) = 3893824kB [ 343.484161][T12271] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.496065][T12271] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.496899][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.505737][T12271] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 343.524846][T12271] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 343.534507][T12271] 76546 total pagecache pages [ 343.536432][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.539399][T12271] 0 pages in swap cache [ 343.539469][T12271] Free swap = 124996kB [ 343.539567][T12271] Total swap = 124996kB [ 343.539639][T12271] 2097051 pages RAM [ 343.539733][T12271] 0 pages HighMem/MovableOnly [ 343.575972][T12271] 424489 pages reserved [ 343.582716][ T3571] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 343.588037][T12271] 0 pages cma reserved [ 343.601320][ T3571] bond0 (unregistering): (slave team0): Releasing backup interface [ 343.612333][ T3571] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 343.623219][ T3571] bond0 (unregistering): Released all slaves [ 343.754143][T12276] netlink: 'syz.4.2183': attribute type 3 has an invalid length. [ 343.776193][T12276] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2183'. [ 343.838429][T12276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2183'. [ 343.893125][ T3571] : left promiscuous mode [ 344.285329][T12289] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 344.528656][ T5825] Bluetooth: hci5: command tx timeout [ 344.678313][ T5825] Bluetooth: hci6: command tx timeout [ 344.773997][T12267] lo speed is unknown, defaulting to 1000 [ 344.794729][T12297] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.053459][T12305] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2193'. [ 345.203527][T12267] hsr0 speed is unknown, defaulting to 1000 [ 345.203546][T12263] lo speed is unknown, defaulting to 1000 [ 345.336503][T12310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2194'. [ 345.509435][T12263] hsr0 speed is unknown, defaulting to 1000 [ 345.657911][T12267] chnl_net:caif_netlink_parms(): no params data found [ 346.123680][ T3571] hsr_slave_0: left promiscuous mode [ 346.131567][ T3571] hsr_slave_1: left promiscuous mode [ 346.141102][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.149458][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.173473][ T3571] veth1_macvtap: left promiscuous mode [ 346.194288][ T3571] veth0_macvtap: left promiscuous mode [ 346.209316][ T3571] veth1_vlan: left promiscuous mode [ 346.214925][ T3571] veth0_vlan: left promiscuous mode [ 346.271684][T12323] netlink: 220 bytes leftover after parsing attributes in process `syz.3.2199'. [ 346.599523][ T5825] Bluetooth: hci5: command tx timeout [ 346.769583][ T5825] Bluetooth: hci6: command tx timeout [ 347.549295][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 347.628061][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 347.762978][T12347] xt_l2tp: v2 sid > 0xffff: 1114112 [ 348.674053][T12356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2207'. [ 348.688078][ T5825] Bluetooth: hci5: command tx timeout [ 348.703335][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.711144][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.719158][T12267] bridge_slave_0: entered allmulticast mode [ 348.726983][T12267] bridge_slave_0: entered promiscuous mode [ 348.735809][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.743483][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.750819][T12267] bridge_slave_1: entered allmulticast mode [ 348.758162][T12267] bridge_slave_1: entered promiscuous mode [ 348.782592][T12362] netlink: 'syz.3.2207': attribute type 1 has an invalid length. [ 348.790583][T12362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2207'. [ 348.807232][T12267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.838970][ T5825] Bluetooth: hci6: command tx timeout [ 348.842894][T12267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.911082][T12364] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 349.142182][T12267] team0: Port device team_slave_0 added [ 349.174768][T12267] team0: Port device team_slave_1 added [ 349.333857][T12267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.341728][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.372985][T12267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.391600][T12267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.401025][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.434585][T12267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.772424][T12263] chnl_net:caif_netlink_parms(): no params data found [ 349.799208][T12267] hsr_slave_0: entered promiscuous mode [ 349.807518][T12267] hsr_slave_1: entered promiscuous mode [ 349.814062][T12267] debugfs: 'hsr0' already exists in 'hsr' [ 349.820475][T12267] Cannot create hsr debugfs directory [ 349.847125][ T3571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.074204][T12387] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 350.334673][ T3571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.415563][ T3571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.431899][ T37] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 350.541197][ T3571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.559848][T12263] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.567398][T12263] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.574927][T12263] bridge_slave_0: entered allmulticast mode [ 350.584466][T12263] bridge_slave_0: entered promiscuous mode [ 350.698447][T12263] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.705962][T12263] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.714158][T12263] bridge_slave_1: entered allmulticast mode [ 350.729276][T12263] bridge_slave_1: entered promiscuous mode [ 350.757972][ T5825] Bluetooth: hci5: command tx timeout [ 350.869357][T12263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.891521][T12263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.918084][ T5825] Bluetooth: hci6: command tx timeout [ 350.947593][T12263] team0: Port device team_slave_0 added [ 350.967298][T12263] team0: Port device team_slave_1 added [ 351.212663][T12263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.230382][T12263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.270126][T12263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.389416][T12263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.396700][T12263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.428546][T12263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.457132][ T3571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.485918][T12267] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 351.498710][T12267] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 351.504037][T12411] FAULT_INJECTION: forcing a failure. [ 351.504037][T12411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.519074][T12411] CPU: 0 UID: 0 PID: 12411 Comm: syz.4.2220 Not tainted syzkaller #0 PREEMPT(full) [ 351.519119][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 351.519141][T12411] Call Trace: [ 351.519148][T12411] [ 351.519164][T12411] dump_stack_lvl+0x189/0x250 [ 351.519187][T12411] ? __pfx____ratelimit+0x10/0x10 [ 351.519209][T12411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.519226][T12411] ? __pfx__printk+0x10/0x10 [ 351.519243][T12411] ? __might_fault+0xb0/0x130 [ 351.519274][T12411] should_fail_ex+0x414/0x560 [ 351.519303][T12411] _copy_from_user+0x2d/0xb0 [ 351.519325][T12411] ___sys_sendmsg+0x158/0x2a0 [ 351.519350][T12411] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.519403][T12411] ? __fget_files+0x2a/0x420 [ 351.519423][T12411] ? __fget_files+0x3a0/0x420 [ 351.519453][T12411] __x64_sys_sendmsg+0x19b/0x260 [ 351.519478][T12411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.519507][T12411] ? __pfx_ksys_write+0x10/0x10 [ 351.519531][T12411] ? do_syscall_64+0xbe/0xfa0 [ 351.519556][T12411] do_syscall_64+0xfa/0xfa0 [ 351.519576][T12411] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.519597][T12411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.519613][T12411] ? clear_bhb_loop+0x60/0xb0 [ 351.519633][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.519649][T12411] RIP: 0033:0x7f229c98eec9 [ 351.519665][T12411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.519677][T12411] RSP: 002b:00007f229abcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.519695][T12411] RAX: ffffffffffffffda RBX: 00007f229cbe6090 RCX: 00007f229c98eec9 [ 351.519707][T12411] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 351.519717][T12411] RBP: 00007f229abcd090 R08: 0000000000000000 R09: 0000000000000000 [ 351.519728][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.519737][T12411] R13: 00007f229cbe6128 R14: 00007f229cbe6090 R15: 00007ffd57638ff8 [ 351.519767][T12411] [ 351.524054][T12267] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 351.661257][T12415] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2221'. [ 351.748547][T12267] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.826241][ T3571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.846894][T12419] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2222'. [ 351.924836][T12419] netlink: 'syz.3.2222': attribute type 1 has an invalid length. [ 351.925391][T12263] hsr_slave_0: entered promiscuous mode [ 351.933015][T12419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2222'. [ 351.949664][T12263] hsr_slave_1: entered promiscuous mode [ 351.956008][T12263] debugfs: 'hsr0' already exists in 'hsr' [ 351.963203][T12263] Cannot create hsr debugfs directory [ 352.016358][ T3571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.023439][T12430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2224'. [ 352.205338][T12433] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 352.214483][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'. [ 352.226755][ T3571] bond0: (slave netdevsim0): Releasing backup interface [ 352.257961][ T3571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.472189][T12442] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 352.576271][T12267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.647332][ T3571] bridge_slave_1: left allmulticast mode [ 352.654976][ T3571] bridge_slave_1: left promiscuous mode [ 352.661969][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.684458][ T3571] bridge_slave_0: left allmulticast mode [ 352.690855][ T3571] bridge_slave_0: left promiscuous mode [ 352.702501][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.721599][T12450] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2232'. [ 352.724358][ T3571] bridge_slave_1: left allmulticast mode [ 352.746609][ T3571] bridge_slave_1: left promiscuous mode [ 352.753774][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.768916][ T3571] bridge_slave_0: left promiscuous mode [ 352.777179][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.806543][T12456] netlink: 'syz.4.2231': attribute type 10 has an invalid length. [ 352.822172][T12456] netlink: 'syz.4.2231': attribute type 16 has an invalid length. [ 352.831024][T12456] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2231'. [ 353.209746][T12466] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 353.446212][T12469] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 353.763811][ T3571] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 353.905992][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.920676][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.938117][ T3571] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 353.948057][ T3571] bond0 (unregistering): Released all slaves [ 354.090839][ T3571] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 354.241854][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.254980][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.265573][ T3571] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 354.275162][ T3571] bond0 (unregistering): Released all slaves [ 354.311033][T12267] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.337532][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.344742][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.440673][T12263] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 354.453796][T12263] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 354.470310][ T3571] : left promiscuous mode [ 354.489043][T12263] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 354.521583][T12263] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 354.565078][T12485] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2243'. [ 354.609237][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.616434][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.651266][T12493] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2245'. [ 354.681907][T12493] openvswitch: netlink: Flow key attr not present in new flow. [ 354.913441][T12263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.946471][T12504] FAULT_INJECTION: forcing a failure. [ 354.946471][T12504] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.990089][T12504] CPU: 0 UID: 0 PID: 12504 Comm: syz.4.2247 Not tainted syzkaller #0 PREEMPT(full) [ 354.990117][T12504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.990127][T12504] Call Trace: [ 354.990135][T12504] [ 354.990143][T12504] dump_stack_lvl+0x189/0x250 [ 354.990167][T12504] ? __pfx____ratelimit+0x10/0x10 [ 354.990189][T12504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.990207][T12504] ? __pfx__printk+0x10/0x10 [ 354.990238][T12504] should_fail_ex+0x414/0x560 [ 354.990268][T12504] _copy_from_user+0x2d/0xb0 [ 354.990291][T12504] __copy_msghdr+0x3c5/0x5b0 [ 354.990318][T12504] ___sys_sendmsg+0x1a5/0x2a0 [ 354.990343][T12504] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.990401][T12504] ? __fget_files+0x2a/0x420 [ 354.990423][T12504] ? __fget_files+0x3a0/0x420 [ 354.990455][T12504] __x64_sys_sendmsg+0x19b/0x260 [ 354.990480][T12504] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.990513][T12504] ? __pfx_ksys_write+0x10/0x10 [ 354.990536][T12504] ? do_syscall_64+0xbe/0xfa0 [ 354.990562][T12504] do_syscall_64+0xfa/0xfa0 [ 354.990582][T12504] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.990604][T12504] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.990622][T12504] ? clear_bhb_loop+0x60/0xb0 [ 354.990642][T12504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.990659][T12504] RIP: 0033:0x7f229c98eec9 [ 354.990674][T12504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.990688][T12504] RSP: 002b:00007f229abee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.990707][T12504] RAX: ffffffffffffffda RBX: 00007f229cbe5fa0 RCX: 00007f229c98eec9 [ 354.990719][T12504] RDX: 0000000020000040 RSI: 0000200000004100 RDI: 0000000000000005 [ 354.990731][T12504] RBP: 00007f229abee090 R08: 0000000000000000 R09: 0000000000000000 [ 354.990742][T12504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.990752][T12504] R13: 00007f229cbe6038 R14: 00007f229cbe5fa0 R15: 00007ffd57638ff8 [ 354.990783][T12504] [ 355.003726][T12509] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 355.465115][T12263] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.548438][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.555701][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.612998][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.620239][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.854415][T12530] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2255'. [ 355.991693][T12267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.031274][T12539] netlink: 'syz.3.2257': attribute type 1 has an invalid length. [ 356.304467][T12553] FAULT_INJECTION: forcing a failure. [ 356.304467][T12553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.363824][T12553] CPU: 1 UID: 0 PID: 12553 Comm: syz.3.2259 Not tainted syzkaller #0 PREEMPT(full) [ 356.363851][T12553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.363860][T12553] Call Trace: [ 356.363867][T12553] [ 356.363875][T12553] dump_stack_lvl+0x189/0x250 [ 356.363898][T12553] ? __pfx____ratelimit+0x10/0x10 [ 356.363920][T12553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.363938][T12553] ? __pfx__printk+0x10/0x10 [ 356.363955][T12553] ? __might_fault+0xb0/0x130 [ 356.363987][T12553] should_fail_ex+0x414/0x560 [ 356.364016][T12553] _copy_from_user+0x2d/0xb0 [ 356.364039][T12553] generic_map_update_batch+0x57c/0x7f0 [ 356.364071][T12553] ? __pfx_generic_map_update_batch+0x10/0x10 [ 356.364092][T12553] ? __fget_files+0x2a/0x420 [ 356.364121][T12553] ? __pfx_generic_map_update_batch+0x10/0x10 [ 356.364140][T12553] bpf_map_do_batch+0x39b/0x630 [ 356.364161][T12553] __sys_bpf+0x690/0x860 [ 356.364185][T12553] ? __pfx___sys_bpf+0x10/0x10 [ 356.364224][T12553] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 356.364249][T12553] ? irqentry_exit_to_user_mode+0xce/0x110 [ 356.364273][T12553] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 356.364304][T12553] __x64_sys_bpf+0x7c/0x90 [ 356.364326][T12553] do_syscall_64+0xfa/0xfa0 [ 356.364349][T12553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.364365][T12553] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 356.364382][T12553] ? clear_bhb_loop+0x60/0xb0 [ 356.364403][T12553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.364419][T12553] RIP: 0033:0x7fb728d8eec9 [ 356.364434][T12553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.364448][T12553] RSP: 002b:00007fb729bd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.364467][T12553] RAX: ffffffffffffffda RBX: 00007fb728fe5fa0 RCX: 00007fb728d8eec9 [ 356.364479][T12553] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 356.364491][T12553] RBP: 00007fb729bd0090 R08: 0000000000000000 R09: 0000000000000000 [ 356.364502][T12553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.364526][T12553] R13: 00007fb728fe6038 R14: 00007fb728fe5fa0 R15: 00007ffe58667528 [ 356.364557][T12553] [ 356.520834][T12263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.832691][T12267] veth0_vlan: entered promiscuous mode [ 356.894064][T12267] veth1_vlan: entered promiscuous mode [ 357.030414][T12267] veth0_macvtap: entered promiscuous mode [ 357.073324][T12267] veth1_macvtap: entered promiscuous mode [ 357.117480][T12267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.130714][T12267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.150134][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.163681][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.190628][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.225900][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.344475][T12578] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 357.700280][T12584] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 357.821236][ T3571] hsr_slave_0: left promiscuous mode [ 357.838283][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.850856][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.891971][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.903378][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.920842][ T3571] hsr_slave_0: left promiscuous mode [ 357.927086][ T3571] hsr_slave_1: left promiscuous mode [ 357.934633][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.942303][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.968881][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.979295][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.006189][ T3571] veth1_macvtap: left promiscuous mode [ 358.012475][ T3571] veth0_macvtap: left promiscuous mode [ 358.018431][ T3571] veth1_vlan: left promiscuous mode [ 358.023922][ T3571] veth0_vlan: left promiscuous mode [ 358.032111][ T3571] veth1_macvtap: left promiscuous mode [ 358.037657][ T3571] veth0_macvtap: left promiscuous mode [ 358.573363][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 358.616205][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 358.960951][ T12] smc: removing ib device syz2 [ 359.807056][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 359.892578][ T3571] team0 (unregistering): Port device C removed [ 360.409195][ T134] smc: removing ib device syz0 [ 360.440572][ T5922] hsr0 speed is unknown, defaulting to 1000 [ 360.445621][ T5878] lo speed is unknown, defaulting to 1000 [ 360.447903][ T5922] infiniband syz1: ib_query_port failed (-19) [ 360.462700][ T5878] syz2: Port: 1 Link DOWN [ 360.499156][T12607] netlink: 'syz.4.2273': attribute type 12 has an invalid length. [ 360.529146][T12607] __nla_validate_parse: 2 callbacks suppressed [ 360.529165][T12607] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2273'. [ 360.769942][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.787114][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.885983][T12611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.949967][T12611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.956368][T12263] veth0_vlan: entered promiscuous mode [ 361.071597][T12263] veth1_vlan: entered promiscuous mode [ 361.117566][T12263] veth0_macvtap: entered promiscuous mode [ 361.132057][T12263] veth1_macvtap: entered promiscuous mode [ 361.187090][T12623] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 768 [ 361.223263][T12263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.270873][T12263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.446411][T12611] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.495133][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.533499][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.543175][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.648725][T12631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2280'. [ 361.834126][ T6198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.875268][ T6198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.002597][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.032493][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.166725][T12639] netlink: 'syz.6.2283': attribute type 10 has an invalid length. [ 362.184762][T12639] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 362.212033][T12637] netlink: 'syz.3.2282': attribute type 10 has an invalid length. [ 362.427369][T12651] netlink: 'syz.4.2287': attribute type 7 has an invalid length. [ 362.482743][T12651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2287'. [ 362.645934][T12657] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2289'. [ 362.680919][T12657] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2289'. [ 362.876973][ T3571] ------------[ cut here ]------------ [ 362.882789][ T3571] WARNING: CPU: 1 PID: 3571 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x26d/0x2f0 [ 362.892413][ T3571] Modules linked in: [ 362.896510][ T3571] CPU: 1 UID: 0 PID: 3571 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 362.906346][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 362.916473][ T3571] Workqueue: netns cleanup_net [ 362.921341][ T3571] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 362.927446][ T3571] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b f4 36 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 e5 16 f8 e8 64 51 d1 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 56 51 d1 f7 90 0f 0b 90 e9 60 fe ff ff [ 362.947536][ T3571] RSP: 0018:ffffc9000ca97878 EFLAGS: 00010293 [ 362.954155][ T3571] RAX: ffffffff89edd2ec RBX: ffff888032b20000 RCX: ffff888030cabc80 [ 362.962676][ T3571] RDX: 0000000000000000 RSI: ffffffff8d9cc7dc RDI: ffff888030cabc80 [ 362.970906][ T3571] RBP: ffffc9000ca97990 R08: ffffffff8f9db437 R09: 1ffffffff1f3b686 [ 362.978946][ T3571] R10: dffffc0000000000 R11: fffffbfff1f3b687 R12: ffffffff8f5d4bc0 [ 362.986942][ T3571] R13: 1ffff92001952f3c R14: ffff888032b214c0 R15: dffffc0000000000 [ 362.994965][ T3571] FS: 0000000000000000(0000) GS:ffff888125e27000(0000) knlGS:0000000000000000 [ 363.004067][ T3571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.010745][ T3571] CR2: 00007f63dbde7dac CR3: 000000007d3be000 CR4: 00000000003526f0 [ 363.019131][ T3571] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 363.027638][ T3571] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 363.036054][ T3571] Call Trace: [ 363.039389][ T3571] [ 363.042346][ T3571] xfrm_net_exit+0x2d/0x70 [ 363.046788][ T3571] ops_undo_list+0x497/0x990 [ 363.051514][ T3571] ? __pfx_ops_undo_list+0x10/0x10 [ 363.056652][ T3571] ? do_raw_spin_unlock+0x122/0x240 [ 363.061967][ T3571] cleanup_net+0x4d8/0x820 [ 363.066410][ T3571] ? __pfx_cleanup_net+0x10/0x10 [ 363.071407][ T3571] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.076623][ T3571] ? process_scheduled_works+0x9ef/0x17b0 [ 363.082420][ T3571] ? process_scheduled_works+0x9ef/0x17b0 [ 363.088206][ T3571] process_scheduled_works+0xade/0x17b0 [ 363.093814][ T3571] ? __pfx_process_scheduled_works+0x10/0x10 [ 363.099882][ T3571] worker_thread+0x8a0/0xda0 [ 363.104515][ T3571] kthread+0x70e/0x8a0 [ 363.108683][ T3571] ? __pfx_worker_thread+0x10/0x10 [ 363.113812][ T3571] ? __pfx_kthread+0x10/0x10 [ 363.118493][ T3571] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.123710][ T3571] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.129460][ T3571] ? __pfx_kthread+0x10/0x10 [ 363.134072][ T3571] ret_from_fork+0x4bc/0x870 [ 363.139094][ T3571] ? __pfx_ret_from_fork+0x10/0x10 [ 363.144258][ T3571] ? __switch_to_asm+0x39/0x70 [ 363.149103][ T3571] ? __switch_to_asm+0x33/0x70 [ 363.153879][ T3571] ? __pfx_kthread+0x10/0x10 [ 363.158644][ T3571] ret_from_fork_asm+0x1a/0x30 [ 363.163447][ T3571] [ 363.166491][ T3571] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 363.173773][ T3571] CPU: 1 UID: 0 PID: 3571 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 363.183233][ T3571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 363.193299][ T3571] Workqueue: netns cleanup_net [ 363.198085][ T3571] Call Trace: [ 363.201373][ T3571] [ 363.204307][ T3571] dump_stack_lvl+0x99/0x250 [ 363.208910][ T3571] ? __asan_memcpy+0x40/0x70 [ 363.213511][ T3571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.218702][ T3571] ? __pfx__printk+0x10/0x10 [ 363.223296][ T3571] vpanic+0x237/0x6d0 [ 363.227264][ T3571] ? __pfx_vpanic+0x10/0x10 [ 363.231800][ T3571] panic+0xb9/0xc0 [ 363.235513][ T3571] ? __pfx_panic+0x10/0x10 [ 363.239929][ T3571] __warn+0x31b/0x4b0 [ 363.243902][ T3571] ? xfrm_state_fini+0x26d/0x2f0 [ 363.248839][ T3571] ? xfrm_state_fini+0x26d/0x2f0 [ 363.253763][ T3571] report_bug+0x2be/0x4f0 [ 363.258077][ T3571] ? xfrm_state_fini+0x26d/0x2f0 [ 363.263003][ T3571] ? xfrm_state_fini+0x26d/0x2f0 [ 363.267929][ T3571] ? xfrm_state_fini+0x26f/0x2f0 [ 363.272854][ T3571] handle_bug+0x84/0x160 [ 363.277083][ T3571] exc_invalid_op+0x1a/0x50 [ 363.281567][ T3571] asm_exc_invalid_op+0x1a/0x20 [ 363.286399][ T3571] RIP: 0010:xfrm_state_fini+0x26d/0x2f0 [ 363.291929][ T3571] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 4b f4 36 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 e5 16 f8 e8 64 51 d1 f7 90 <0f> 0b 90 e9 fd fd ff ff e8 56 51 d1 f7 90 0f 0b 90 e9 60 fe ff ff [ 363.311517][ T3571] RSP: 0018:ffffc9000ca97878 EFLAGS: 00010293 [ 363.317568][ T3571] RAX: ffffffff89edd2ec RBX: ffff888032b20000 RCX: ffff888030cabc80 [ 363.325523][ T3571] RDX: 0000000000000000 RSI: ffffffff8d9cc7dc RDI: ffff888030cabc80 [ 363.333477][ T3571] RBP: ffffc9000ca97990 R08: ffffffff8f9db437 R09: 1ffffffff1f3b686 [ 363.341432][ T3571] R10: dffffc0000000000 R11: fffffbfff1f3b687 R12: ffffffff8f5d4bc0 [ 363.349385][ T3571] R13: 1ffff92001952f3c R14: ffff888032b214c0 R15: dffffc0000000000 [ 363.357347][ T3571] ? xfrm_state_fini+0x26c/0x2f0 [ 363.362280][ T3571] ? xfrm_state_fini+0x26c/0x2f0 [ 363.367204][ T3571] xfrm_net_exit+0x2d/0x70 [ 363.371603][ T3571] ops_undo_list+0x497/0x990 [ 363.376181][ T3571] ? __pfx_ops_undo_list+0x10/0x10 [ 363.381276][ T3571] ? do_raw_spin_unlock+0x122/0x240 [ 363.386468][ T3571] cleanup_net+0x4d8/0x820 [ 363.390870][ T3571] ? __pfx_cleanup_net+0x10/0x10 [ 363.395793][ T3571] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.400982][ T3571] ? process_scheduled_works+0x9ef/0x17b0 [ 363.406689][ T3571] ? process_scheduled_works+0x9ef/0x17b0 [ 363.412408][ T3571] process_scheduled_works+0xade/0x17b0 [ 363.417967][ T3571] ? __pfx_process_scheduled_works+0x10/0x10 [ 363.423944][ T3571] worker_thread+0x8a0/0xda0 [ 363.428543][ T3571] kthread+0x70e/0x8a0 [ 363.432604][ T3571] ? __pfx_worker_thread+0x10/0x10 [ 363.437694][ T3571] ? __pfx_kthread+0x10/0x10 [ 363.442282][ T3571] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.447483][ T3571] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.452668][ T3571] ? __pfx_kthread+0x10/0x10 [ 363.457270][ T3571] ret_from_fork+0x4bc/0x870 [ 363.461848][ T3571] ? __pfx_ret_from_fork+0x10/0x10 [ 363.466971][ T3571] ? __switch_to_asm+0x39/0x70 [ 363.471716][ T3571] ? __switch_to_asm+0x33/0x70 [ 363.476459][ T3571] ? __pfx_kthread+0x10/0x10 [ 363.481034][ T3571] ret_from_fork_asm+0x1a/0x30 [ 363.485804][ T3571] [ 363.489090][ T3571] Kernel Offset: disabled [ 363.493394][ T3571] Rebooting in 86400 seconds..