last executing test programs: 7m58.101391157s ago: executing program 4 (id=243): socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x30}, 0x4000000) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0xfffffeff, 0x0, r2, 0xe9ad, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000200)=r1}, 0x20) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r8, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x7a, &(0x7f0000000340), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x13, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYRES32=r9, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="010000000200"/28], 0x50) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./cgroup\x00', r13, 0x4000, r12}, 0x18) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./cgroup\x00', r13, 0x4000, r12}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x28, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x12}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x3, 0x3, 0x2, 0x4, 0x0, 0x40, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x589}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5e1, 0x0, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x7, 0xbc, &(0x7f0000000580)=""/188, 0x41000, 0x8, '\x00', r10, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0x7, 0x3, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000680)=[r13, r0], 0x0, 0x10, 0x7fff}, 0x94) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) 7m57.798786208s ago: executing program 4 (id=246): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080b01000000e8fe55a1180015000600142603600e120800180000000401080016000a000140", 0x38}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b0000000000000000000000000000000001"], 0xcfa4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800001801"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) 7m57.14597546s ago: executing program 4 (id=252): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x80, 0x5, 0xe, 0x68, 0x2, 0x0, 0x95, 0x4042d, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb5, 0x2, @perf_config_ext={0x8, 0x5bd}, 0x0, 0x8, 0x4, 0x6, 0xe6d, 0x4, 0xfff, 0x0, 0x0, 0x0, 0x1}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$rxrpc(0x21, 0x2, 0xa) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x21, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0xb, 0x0, 0x9, 0xfffffffffffffffe, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x42}, @alu={0x0, 0x0, 0x1, 0x5, 0x2, 0xfffffffffffffff0, 0x8}, @map_fd={0x18, 0x4, 0x1, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0xfd, &(0x7f0000000240)=""/253, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[{0x3, 0x2, 0x0, 0x957ee0f91253e3e5}, {0x4, 0x2, 0xf, 0x1}, {0x1, 0x4, 0x4, 0x7f92142b434a5b22}, {0x2, 0x4, 0xd, 0x1}, {0x0, 0x4, 0xd, 0x3}], 0x10, 0x7}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r4, 0x25, 0x14, @val=@kprobe_multi=@addrs={0x1, 0x6, 0x0, &(0x7f0000000580)=[0x0, 0xfff, 0x477000000000000, 0x8001, 0x8f46, 0x3], 0x8}}, 0x30) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000640)='\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000006c0)={'lo\x00', 0x4000}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x7, 0x7, 0xc, 0x9, 0x2800, 0x1, 0x8, '\x00', 0x0, r6, 0x0, 0x1, 0x4}, 0x50) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xd3, '\x00', r4, r6, 0x4, 0x3, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r2}, 0x20) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x19, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@jmp={0x5, 0x1, 0x3, 0x7, 0xc, 0xfffffffffffffff8, 0x8}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @generic={0x9, 0x4, 0x7, 0x6, 0x1}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000000}, @call={0x85, 0x0, 0x0, 0xb1}, @alu={0x0, 0x0, 0xcd6d71485b67e1c3, 0x4, 0x7, 0xffffffffffffffff, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000880)='GPL\x00', 0x9, 0x43, &(0x7f00000008c0)=""/67, 0x40f00, 0x8, '\x00', r4, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000980)={0x0, 0xb, 0x5, 0x401}, 0x10, 0x115a, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[r9, r10], 0x0, 0x10, 0x7}, 0x94) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c00), 0x2000, 0x0) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f0000000c80)={0x7, &(0x7f0000000c40)=[{0x5, 0x7f, 0x2, 0x42a}, {0x2, 0x33, 0x5, 0x8}, {0x7f, 0x8, 0x4, 0x7}, {0x5, 0xfa, 0x6, 0x5}, {0x6, 0x6, 0x81, 0x1}, {0x0, 0xe, 0x8, 0xb}, {0xfbff, 0x5, 0xf0, 0x2}]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e00)={r9, &(0x7f0000000cc0)="fcff045327bf9836b6ae0cd3074b4232b9e89f70c5af0773131977eb1951e3535be843286aca9d566cc23ac4c4d8faec12b1ad7c4d0c0597adcf815ddc845e86bb1f3c9c6aebcb9d620aa3ca8985c2bee4c0413fe4434072119d57709a40ab18f28566eb1a9da63efe31da328e3a7905831495de88357f4e0e15f93cf7b3114078ec4bd3d480f8963d50e20d5a36ca022cbaaa2d599d48de7db42d5f9a27d4a337bb6b279d2a21cb5ab1732c0ff6dc2502fba9422268b5e77d3ab9323aa362dbfa5d2d1280d8e164109bd4afeacea2e231c1507036b8076d5085fc46c2d4c0780d7c98bd98145d9421", &(0x7f0000000dc0)=""/47}, 0x20) syz_clone(0x4100000, &(0x7f0000000e40)="601bdd1fcacbbb00786316eabaf6992c119b5bb0aeb24e30550001c2b499ab31b46469", 0x23, &(0x7f0000000e80), &(0x7f0000000ec0), &(0x7f0000000f00)="a1b50b445236f5c335c095ce04d28cdb4cfdff642af0846d77300092160e1b0731341dded258aaa17dc4eaae1814fddb99f1418aabeaa58c87e87ec840a147c97f470d9c0b069a5205b113be29693a355ebc3045c1f9814d55f5d0b700dacb0b5c434b7ed836080d") ioctl$SIOCSIFHWADDR(r12, 0x8924, &(0x7f0000000f80)={'bond_slave_1\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001340)={r6, 0x20, &(0x7f0000001300)={&(0x7f00000011c0)=""/4, 0x4, 0x0, &(0x7f0000001200)=""/244, 0xf4}}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x7, 0x1d, &(0x7f0000001380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6}, @printk={@s}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001480)='syzkaller\x00', 0x9, 0xae, &(0x7f00000014c0)=""/174, 0x41000, 0x5, '\x00', 0x0, @fallback=0x26, r6, 0x8, &(0x7f0000001580)={0x2, 0x5}, 0x8, 0x10, &(0x7f00000015c0)={0x0, 0xe, 0x1, 0x9}, 0x10, 0xffffffffffffffff, r11, 0x0, &(0x7f0000001600)=[r10, r8, r10, r9, r9, r10, r8, r10, r10], 0x0, 0x10, 0x7}, 0x94) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x131, 0xffffff7f, 0x80, 0x200, r10, 0x8, '\x00', 0x0, r6, 0x3, 0x2, 0x0, 0x8}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001800)={{r8, 0xffffffffffffffff}, &(0x7f0000001780), &(0x7f00000017c0)='%+9llu \x00'}, 0x20) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001840)={r3, 0x3, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x5, 0x17, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @jmp={0x5, 0x1, 0x7, 0x0, 0x6, 0xffffffffffffffce, 0x8000000000000010}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff}, @exit, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20c0}, @ldst={0x2, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001080)='syzkaller\x00', 0x80, 0x80, &(0x7f00000010c0)=""/128, 0x41100, 0x10, '\x00', r4, @fallback=0x31, r6, 0x8, &(0x7f0000001140)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001180)={0x1, 0x6, 0x7fffffff, 0x9}, 0x10, r13, r14, 0xa, &(0x7f0000001880)=[r9, r10, r8, r8, r15, r16, r10, r17, r9, r9], &(0x7f00000018c0)=[{0x2, 0x1, 0xc, 0xc}, {0x3, 0x1, 0x3}, {0x5, 0x5, 0x6, 0xc}, {0x1, 0x4, 0xd, 0xb}, {0x5, 0x5, 0x8, 0x8}, {0x0, 0x4, 0x5}, {0x0, 0x1, 0x2, 0xa}, {0x1, 0x3, 0xc, 0x4}, {0x7, 0x4, 0x5, 0x3}, {0x1, 0x2, 0xb, 0x6}], 0x10, 0x5}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet(r5, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001a40)="87bc1b7b172543e4d352a8362e121d50d893c5b8071eca2470ffcc4b703f77646bc4c44cdbbeecf451159f9576c2e51b9e288216ed9f49628d59bb11e6b99376472881f107986ce3a944fd8fef58aff97389d08c558261a7300dae", 0x5b}, {&(0x7f0000001ac0)="796c0432cbd332a506cdce4e8f5f677ad65b504a02e811e629fb5fba8a4c754ae35d2372a4ee11b1fe122d632657246236839453f147c91d74d90afa49c93bc50f31951c8ff9591f3ba1b244c97e0e07e2acf50cb2dd8087905338291e33bbb8125ffe3697205cb24fc7d2fcf8ceb3f4713f", 0x72}, {&(0x7f0000001b40)="cb349a47cd9fbda02cf3570f3af616d99de6aab1ba50af9473b430cd262b2c263e5be92930756aff8a2bcc00cf6891e4573bb8dcb4b16c2c503a824931ef10f32ba69f217c7e03ec409897b8583e38d0318b6e191302d360bd15c6cf9d8e5906a45d9edc72b2cb6dc3fe1168a282135f516e3cc0a1bab8db6b78fcd970bc9b129ffc", 0x82}], 0x3, &(0x7f0000001c40)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xad, 0x1, 0x1, [{@broadcast, 0x761}, {@loopback, 0xc46}, {@dev={0xac, 0x14, 0x14, 0x3a}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x8}, {@dev={0xac, 0x14, 0x14, 0xd}, 0x8}, {@broadcast, 0x9}]}, @timestamp={0x44, 0x24, 0x69, 0x0, 0x5, [0xfffffffb, 0x6, 0x8, 0x1, 0x6, 0xc, 0x5, 0x9]}, @rr={0x7, 0x2b, 0x85, [@broadcast, @multicast2, @multicast2, @broadcast, @rand_addr=0x64010100, @empty, @multicast1, @rand_addr=0x64010102, @rand_addr=0x64010101, @local]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x67, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x7, 0x87, [@broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @loopback}}}], 0xe0}, 0x20044814) r18 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001e80)={@fallback=r18, 0x35, 0x0, 0xfffffffd, &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 7m56.85443727s ago: executing program 4 (id=257): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000040000000200040001000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000001100020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7m56.617498637s ago: executing program 4 (id=263): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000500000002000000070000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a0000000500000002000000070000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1943}, 0x101020, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x23, 0x2, 0x0) (async) socket$kcm(0x23, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x5, 0x0, 0x6, 0x0, 0x0, 0xe4b, 0x8000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xef, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x484a, 0x8, 0x5e4ef743, 0x0, 0x200, 0x6, 0x3ff, 0x0, 0x7f}, r3, 0x8, r1, 0x1) (async) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x5, 0x0, 0x6, 0x0, 0x0, 0xe4b, 0x8000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xef, 0x1, @perf_bp={&(0x7f0000000380), 0x8}, 0x484a, 0x8, 0x5e4ef743, 0x0, 0x200, 0x6, 0x3ff, 0x0, 0x7f}, r3, 0x8, r1, 0x1) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES16=r2], 0xc4}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000", @ANYRES16=r2], 0xc4}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010108007000fcffffff110000000800030047000000"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) perf_event_open(&(0x7f0000000640)={0x5, 0xffffffffffffff77, 0x8, 0x6, 0xfa, 0xa5, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0xc}, 0x318a, 0xffffffff80000002, 0x0, 0x5, 0x4121, 0x4, 0xff00, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x9, 0x0, 0x800, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x9, 0x0, 0x800, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2}]}, 0x20}}, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x50, 0x1409, 0x401, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) 7m52.567866155s ago: executing program 4 (id=296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@loopback, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x1c00000000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0x7ff}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000001a83a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7m37.424869407s ago: executing program 32 (id=296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001880)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in6=@loopback, 0x4e22, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x1c00000000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0x7ff}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000001a83a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m55.789445399s ago: executing program 2 (id=1692): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003"], 0x48) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000900000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) 4m55.551067094s ago: executing program 2 (id=1697): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$kcm(r0, 0x0, 0x10) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x31, 0xfffffbff, 0x3, 0xb8, 0x8000000, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x24, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random="0000230c1100"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000000001000000000000", 0x20}], 0x1}, 0x40000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) r4 = socket$kcm(0x2a, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}, 0x181, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x10, 0x0, 0x0, 0x0, 0x804, 0x16cf, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext={0x5, 0x5}, 0x20a0, 0x58, 0x7ffffffc, 0x4, 0x2, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x6e8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) unlink(&(0x7f00000004c0)='./cgroup\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 4m54.771995509s ago: executing program 2 (id=1708): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0xfffffffe, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8902, &(0x7f0000000380)='\x06\xec\xb1G\x19=9\x1f\"M\xca\xc4n\xfa\xf1\xec\xdf1\xfa\x9c,\x7f\xbfo\xbf\x1fG\xf3\xa6\x8e\xa3_\xbbx\b_5i1\xc4\xaa\xf6\xc3l4\x0eI\xa0\n\f\xbd\x16\xd3o\xd1\xfc\x1d\x86\xf9@\xce\xcaE\xdc<\x10\xf5\xe6\xba\x97\xf5\x92\r\xeb\xc6U\x88Xv\xec\x84\xb4\x19\xffk\xb2\xee\x89\x8e\x91 \xb2\x0e\x9a{\xac/\xe7R\xa5\x9chZ\xcd\x99>\x15vx\xc3\x7f\x9c\xe7\xd5\x84\xbe\v\xea\x98\'\xb7\xd1\x12\x00LN^\xc8\xb7\x80F!\xf9\x85\xc3\xe7#\x1e\x9e\xbfj\x89\xf4\xaf\xd5\xad\xaf\xb7\xdc\xac') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x1}, 0x1904, 0x1fc, 0x0, 0x7, 0x0, 0x200000a, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000900)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, 0x1404, 0x100, 0x70bd2c, 0xfffffa00, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4008840) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x2101, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72d, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0xfffffffffffffffc, 0x7, 0x3, 0xffffffffffffffff, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0xff, 0x0, 0x1000, 0x20848, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x24, 0x80}, 0xac84, 0x86d, 0x1, 0x4, 0x5, 0x0, 0x6, 0x0, 0xffffbffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xc, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xf, 0x2}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x4}]}, {0x0, [0x30, 0x5f, 0x2e, 0x30, 0x30, 0x30, 0x2e, 0x0, 0x30, 0x61]}}, 0x0, 0x48, 0x0, 0x1, 0x3}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x10, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) 4m54.31046743s ago: executing program 2 (id=1714): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000200000000fffffff80000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000008000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 4m54.240672313s ago: executing program 2 (id=1717): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m54.093987831s ago: executing program 2 (id=1721): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4020001}, 0x880) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d11, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x42160110, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000600), 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$kcm(r4, 0x0, 0x40) recvmsg$kcm(r7, &(0x7f0000001640)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0, 0x0, &(0x7f0000000580)=""/120, 0x78}, 0x40000000) 4m38.950939113s ago: executing program 33 (id=1721): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4020001}, 0x880) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x3}, 0x0, 0x0, 0x40000, 0x0, 0x21, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d11, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x28}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_clone(0x42160110, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000600), 0x4}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x2}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$kcm(r4, 0x0, 0x40) recvmsg$kcm(r7, &(0x7f0000001640)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0, 0x0, &(0x7f0000000580)=""/120, 0x78}, 0x40000000) 19.710671218s ago: executing program 5 (id=3938): socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x922000000001, 0x106) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa56}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x403, 0xffffffffffffffff, 0xa) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x58, 0xfd, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x3}, 0x9190, 0x0, 0x0, 0xf, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2}, r3, 0xb, r2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc000000000000030000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa33030009020000000200020000000000000000000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000fc0200000000000000000000000000003c0000000000000008000800"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x60) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18.59826395s ago: executing program 5 (id=3946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe8000000000000000000000fd00003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc02000000000000000000000000000100000000000000002bbf0000000000013c0400000000000008000a00ac1414bb00000000000000000000000020010000000000000000000000000000ce14143900000000000000fc0200000000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x94) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 18.312786171s ago: executing program 5 (id=3948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000000fc0100000000000000000000000000ff3f0000000000000005000500000000000a000000000000000000000000000000000000000000deff00000000000000000800120002000200000000000000000030002b000303"], 0xa0}}, 0x0) 18.237398469s ago: executing program 5 (id=3949): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000532000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) 18.05423654s ago: executing program 5 (id=3955): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000640)={0x5, 0xffffffffffffff77, 0x8, 0x6, 0xfa, 0xa5, 0x0, 0x0, 0x40, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb, 0x4, @perf_bp={0x0, 0xc}, 0x318a, 0xffffffff80000002, 0x0, 0x5, 0x4121, 0x4, 0xff00, 0x0, 0x200, 0x0, 0x6}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='mm_lru_activate\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "407327c360"}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) 17.348938252s ago: executing program 5 (id=3964): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='hrtimer_start\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='hrtimer_start\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x128}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xa, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xff, 0x7, 0x0, 0x7fffffff, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x8}, 0x11, 0x0, 0x3, 0x8, 0x81, 0x8005, 0x3, 0x0, 0x2cb, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2ffc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.153525832s ago: executing program 6 (id=4048): r0 = socket$kcm(0xa, 0x3, 0x11) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @empty, 0xfffffffd, 0xffffffff}, 0x80, 0x0}, 0x4810) 2.461129311s ago: executing program 6 (id=4053): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r2 = socket$kcm(0xa, 0x3, 0x3a) (async, rerun: 64) r3 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x6, &(0x7f0000000040), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) (async) sendmsg$kcm(r2, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0xfffffffe, @mcast1, 0x20000000}, 0x80, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000017780004000000000f03778f59fdee3f34a4abd081402c3aa5c569da1f2e440d7b2d90631c6c2bf46f6c42a52b92612af87c0000000000000048836c5030912d4a9d7562d58ef238c4e98630ac5990bf16d36dde464db2522d1ffb2cb0278da0e5c983f496d7f9b0afa46304e8a9b43cac9369f394811d46fc0c40e53df0b69d1de83e24d878c3095b552abccaee1609a9ad190306bf00"], 0x18}, 0x0) (async) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x1c2) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8, @ANYRES32=r2, @ANYRES32=r2, @ANYRESOCT=r4, @ANYRES64=r2, @ANYRESOCT, @ANYRESDEC=r5], 0x9a) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800002}, 0x94) (async, rerun: 32) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xc, @private0={0xfc, 0x0, '\x00', 0x1}, 0x97}}}, 0x62, 0x0, 0x0, 0x0, 0x5c8}, 0x2000f765) (async, rerun: 32) r6 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x80000001, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, r6, 0xa) (async, rerun: 64) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (rerun: 64) r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (rerun: 32) socket$nl_audit(0x10, 0x3, 0x9) (async) recvmsg$unix(r8, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x92, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x104000, 0x0, 0x0, 0x2, 0x7, 0x0, 0x20, 0x0, 0xffffbffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, 0x0) 2.211915049s ago: executing program 34 (id=3964): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='hrtimer_start\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='hrtimer_start\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x128}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0xa, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$qrtr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x40040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0xff, 0x7, 0x0, 0x7fffffff, 0xd3751, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x1, 0x8}, 0x11, 0x0, 0x3, 0x8, 0x81, 0x8005, 0x3, 0x0, 0x2cb, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2ffc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.197489207s ago: executing program 1 (id=4056): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x19, 0x0, 0xffffffffffffffff, 0xfffffff3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x3, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x20, 0x0, 0x24, 0x7}, @enum={0x6, 0x7, 0x0, 0x6, 0x4, [{0x7}, {0x8, 0x90}, {0x10, 0x36}, {0xa, 0x400}, {0x1, 0x8}, {0x3, 0x6}, {0xd, 0x2}]}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0xf, 0x2}, {0x1, 0x3}, {0x8, 0x5}, {0x3, 0x2}, {0xe, 0x5}, {0x1, 0x4}, {0xf, 0x3}, {0x2, 0x4}]}]}, {0x0, [0x30]}}, &(0x7f0000000280)=""/224, 0xbb, 0xe0, 0x0, 0x4b1c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, 0x0, 0x40008) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000020000070040000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000000000000000000fdffffffffffffff0000000000000000"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000700000000000000008000000000", @ANYRES32=r0, @ANYBLOB="0300"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="04000000020000000100"/28], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_COMPAT_NAME={0xf, 0x1, '\\,[$..}&:(\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x40000) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x16, 0x5, 0x6, 0x20, 0x0, 0x70bd27, 0x25dfdbfe, [@sadb_ident={0x2, 0x0, 0x7f, 0x0, 0x5}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@loopback, 0x25, 0x10, 0x4}, @sadb_key={0x12, 0x9, 0x430, 0x0, "b5d99361ddd1b09d100cb203eb5fdce04d8d20ef2330de75debe73d7769aaa57c09816c65326bdd3a17cab47f35fc7c754fcf4fa3c2d6fab08fbe58774980a6bc52455bd4b61e13a261883a84eeda3fc63917a8344a51f905aa83a38d31c36cbc2ba0b048c037686a2722e31949bcad1a7836b2b5854904c6aa7ffe91a83ab1870cdb7a8cb29"}, @sadb_address={0x5, 0x3, 0x32, 0x80, 0x0, @in6={0xa, 0x4e20, 0x5, @private2, 0x639a2138}}]}, 0x100}}, 0x48810) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000540)=""/66, 0x42, 0x0, &(0x7f00000005c0)=""/105, 0x69}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r9, 0x4) 2.10091558s ago: executing program 6 (id=4058): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8923, &(0x7f0000000140)='lo:\x96\xf3?o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x98\x15 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\xc60\xc3t\xc9\xe3-\xb2h\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0xd4, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x65, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0x4, &(0x7f0000000200)=@raw=[@alu={0x4, 0x1, 0xa, 0x1, 0x3, 0x0, 0xfffffffffffffffc}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xbf}], &(0x7f0000000240)='syzkaller\x00', 0x3ff, 0x83, &(0x7f0000000580)=""/131, 0x41000, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x2, 0xa, 0x4}, 0x10, r9, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000ac0)=[{0x1, 0x5, 0x9, 0x3}, {0x0, 0x3, 0xf, 0xf}, {0x3, 0x3, 0x0, 0xc}, {0x3, 0x2, 0xd, 0xa}, {0x0, 0x3, 0xc, 0x5}, {0x3, 0x5, 0xc, 0x7}, {0x4, 0x4, 0x1, 0xb}, {0x5, 0x4, 0x4, 0x4}, {0x2, 0x3, 0xa, 0xa}, {0x0, 0x1, 0xf, 0xb}], 0x10, 0xfffffffe}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1}, 0x4) 1.981113729s ago: executing program 3 (id=4059): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x800}, 0x0, 0xc6, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff03076804268c989e14f0b6a6", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, 0x0, 0x30004081) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000"], 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/198, 0xc6}, {&(0x7f0000000340)=""/150, 0x96}, {&(0x7f0000000280)=""/24, 0x18}], 0x3, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80x0}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007f"], 0xfdef) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0xae59, 0xd, 0x5, 0x512, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x7, 0x2, 0x7}, 0x50) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x2, &(0x7f0000000000)=r7, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10, r0}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x18) r11 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x64, &(0x7f0000000000)=r13, 0x10) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x9, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="4f150c0010000000186000000d0000001000000008000000"], &(0x7f0000000140)='GPL\x00', 0x7, 0x1000, &(0x7f0000001040)=""/4096, 0x40f00, 0x2, '\x00', r1, @fallback=0x30, r3, 0x8, &(0x7f0000000300)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x9, 0x3, 0x100000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000800)=[r4, 0x1, r7, r8, r9, r10, r13, r14], &(0x7f0000000840)=[{0x4, 0x5, 0x10, 0x2}, {0x3, 0x2, 0xa, 0xa}, {0x5, 0x4, 0xf, 0x6}, {0x2, 0x1, 0xa, 0xa}, {0x1, 0x5, 0x0, 0x4}, {0x5, 0x1, 0xe, 0x1}, {0x3, 0x4, 0xd, 0xc}, {0x0, 0x5, 0xe, 0xc}], 0x10, 0x7ff}, 0x94) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f00000009c0)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/177, 0xb1}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0x9}, 0x40012100) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r15, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 1.101631785s ago: executing program 1 (id=4068): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000083500010029bd7000fedbdf250200000008f08ab00b"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x40008010) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x3, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3ff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xb8, &(0x7f0000000440)=""/184, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x8, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='qgroup_update_counters\x00', r2, 0x0, 0x9}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 986.85423ms ago: executing program 3 (id=4069): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x200000, 0x1, 0x1ff, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2, 0x5, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000200000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e0270300000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000650d000000000000e1000000000000000007000000ff0f0000000000000000000008000b000000000008001600000000000c001500000000005d0000000401050000000000"], 0x254}}, 0x0) 905.07399ms ago: executing program 0 (id=4070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x10, 0xa, 0x481, 0x0, 0x0, {0x1bc987273a0d9bec, 0x0, 0x5}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700110000000c00018008000140850101010c00028008"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 784.795385ms ago: executing program 1 (id=4071): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007020100f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x94) 784.501724ms ago: executing program 0 (id=4072): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="ac5f3867c40f10298f983d46297251", 0xf}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="1400000000000000000000000100000088000000000000001100024100000000000000000100000008000000000000001400000000000000000000000100000000800000000000001c0000000000000000000000070000009404000086075d861ef061000000000014000000000000000000000002000000d70000000000000014"], 0x98}, 0x4000) 706.389214ms ago: executing program 0 (id=4073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x80) 688.889958ms ago: executing program 3 (id=4074): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003"], 0x48) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020306001b0000000000000000000000040003000000000000000000000000000000000000000000000000000020000005000600000000000a0000000000000100000000000000000000000000000000000000000000000004000400000080000000000000000000000000000000000000000000000000000200010000000000000000fd0000000005000500000000000a00000000000000fe8800000000000000000000000000010000000000000000030007000000000002000000ffffffff0000000000000000020013"], 0xd8}}, 0x0) 634.13227ms ago: executing program 1 (id=4075): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x4c}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x4, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000fcff000000000000000000850000002200000085000000070000009500000000000000e3b791f4a4a3972200e1d2acd44498f2cfbf4ae21867953463a9211404aa0e942d2460473901162b5db03303d2731c0e8ff5f76396f3a69ef52a00e8ae396de506de923c26c5bc87e3461c93cca3b186787c11d06d49d19896534d476fb6550cd031867572ce45503f6f46284b1ce64c582ae6c0e66319f800991ca2b186824cd560affec254ea32ac97873b303fdaa7cdbd52b2f10fc45beb3b5eb9b866fea3b1d06ecc"], &(0x7f0000000080)='GPL\x00', 0x4, 0xcb, &(0x7f0000000340)=""/203}, 0x25) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000024c0)=@o_path={&(0x7f0000002480)='./file0\x00', 0x0, 0x4008, r3}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002580)={0x6, 0x2a, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff26ba, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x0, 0x0, 0x7, 0x0, 0x50, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x63b}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @exit, @jmp={0x5, 0x1, 0x8, 0xb, 0x5, 0xfffffffffffffe7b, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000001440)='syzkaller\x00', 0x2, 0x27, &(0x7f0000001480)=""/39, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000022c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002300)={0x3, 0xe, 0x6, 0x1}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002500)=[r4, 0xffffffffffffffff, r5], &(0x7f0000002540)=[{0x1, 0x2, 0x10}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 471.872988ms ago: executing program 0 (id=4076): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="0c0100003e0007010000000000000000017c000004008e000c00018006000600800a0000e8000280de00"], 0x10c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2e}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x4020080) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r3}, 0x3d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x2, 0x1, 0x84) 251.058008ms ago: executing program 3 (id=4077): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x128}, 0x24000085) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80000000a06030000000000000000000000000964000880100007800c00018008000140ffffffff0c00078008000940000000010c00078008000b4000000005180007801400170073797a6b616c6c657231000000000000100007800a0011000000000000000000100007800900130073797a30000000002c0007800800084000000002050007003200000008000b40fffffe0108001c4000000004060004404e24000005000100070000000900020073797a3000000000a084b6c7049b91e82ece7ec55db560cf896b095476672e8fa531"], 0xb8}, 0x1, 0x0, 0x0, 0x10040080}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000001946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xda, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x2}, 0x102, 0x0, 0x0, 0x9, 0x400, 0x8007}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0xa, 0x1, 0x106) r9 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x9, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="089a93b6945d526a1832ae933958165a5428261c837601901042f77db867da13174dc8cdcc1a8330be4632991bbb9ac9ec283c50b9454d705d3150cf0df74856a60b89b7b1cad5baff6a19da3f54470ffe4b3a97f21a2ac8bc3ecba03dd5a02a262b449d912d924c6f418e6c3f10735a00000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, 0x0, 0x0) 0s ago: executing program 6 (id=4078): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xfc}}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x34000}], 0x1}, 0x900000000000000) (fail_nth: 8) kernel console output (not intermixed with test programs): parsing attributes in process `syz.3.2981'. [ 476.421911][T14840] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2989'. [ 476.550848][T14839] delete_channel: no stack [ 476.946090][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 476.977325][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 476.986707][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 476.997447][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.007745][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 477.121960][ T8813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.255419][T14869] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2998'. [ 477.297666][ T8813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.549329][ T8813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.609280][T14878] FAULT_INJECTION: forcing a failure. [ 477.609280][T14878] name failslab, interval 1, probability 0, space 0, times 0 [ 477.627379][T14878] CPU: 1 UID: 0 PID: 14878 Comm: syz.0.3002 Not tainted syzkaller #0 PREEMPT(full) [ 477.627411][T14878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.627424][T14878] Call Trace: [ 477.627432][T14878] [ 477.627441][T14878] dump_stack_lvl+0x189/0x250 [ 477.627472][T14878] ? __pfx____ratelimit+0x10/0x10 [ 477.627493][T14878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.627518][T14878] ? __pfx__printk+0x10/0x10 [ 477.627539][T14878] ? __pfx___might_resched+0x10/0x10 [ 477.627562][T14878] ? fs_reclaim_acquire+0x7d/0x100 [ 477.627598][T14878] should_fail_ex+0x414/0x560 [ 477.627632][T14878] should_failslab+0xa8/0x100 [ 477.627662][T14878] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 477.627688][T14878] ? __pfx_xfrm_pol_bin_cmp+0x10/0x10 [ 477.627706][T14878] ? __alloc_skb+0x112/0x2d0 [ 477.627732][T14878] __alloc_skb+0x112/0x2d0 [ 477.627757][T14878] alloc_skb_with_frags+0xca/0x890 [ 477.627785][T14878] ? xfrm_policy_lookup_bytype+0x123/0x1250 [ 477.627825][T14878] sock_alloc_send_pskb+0x84d/0x980 [ 477.627873][T14878] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 477.627917][T14878] ? xfrm_expand_policies+0xc7/0x6a0 [ 477.627950][T14878] rawv6_send_hdrinc+0x267/0x1790 [ 477.627989][T14878] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 477.628008][T14878] ? txopt_get+0x335/0x3f0 [ 477.628029][T14878] ? aa_label_sk_perm+0x4cd/0x630 [ 477.628056][T14878] ? __pfx_txopt_get+0x10/0x10 [ 477.628088][T14878] rawv6_sendmsg+0x12e2/0x1820 [ 477.628128][T14878] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 477.628183][T14878] ? __pfx_aa_sk_perm+0x10/0x10 [ 477.628215][T14878] ? sock_rps_record_flow+0x19/0x410 [ 477.628247][T14878] ? inet_sendmsg+0x2f4/0x370 [ 477.628274][T14878] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.628298][T14878] __sock_sendmsg+0x19c/0x270 [ 477.628331][T14878] ____sys_sendmsg+0x505/0x830 [ 477.628368][T14878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.628404][T14878] ? import_iovec+0x74/0xa0 [ 477.628433][T14878] ___sys_sendmsg+0x21f/0x2a0 [ 477.628460][T14878] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.628526][T14878] ? __fget_files+0x2a/0x420 [ 477.628553][T14878] ? __fget_files+0x3a0/0x420 [ 477.628593][T14878] __x64_sys_sendmsg+0x19b/0x260 [ 477.628616][T14878] ? perf_trace_run_bpf_submit+0x100/0x170 [ 477.628650][T14878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.628685][T14878] ? __pfx_ksys_write+0x10/0x10 [ 477.628709][T14878] ? rcu_is_watching+0x15/0xb0 [ 477.628739][T14878] ? do_syscall_64+0xbe/0x3b0 [ 477.628765][T14878] do_syscall_64+0xfa/0x3b0 [ 477.628786][T14878] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.628805][T14878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.628825][T14878] ? clear_bhb_loop+0x60/0xb0 [ 477.628851][T14878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.628871][T14878] RIP: 0033:0x7f6b0ff8eec9 [ 477.628889][T14878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.628905][T14878] RSP: 002b:00007f6b10ecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.628924][T14878] RAX: ffffffffffffffda RBX: 00007f6b101e5fa0 RCX: 00007f6b0ff8eec9 [ 477.628936][T14878] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 477.628948][T14878] RBP: 00007f6b10ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 477.628962][T14878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.628974][T14878] R13: 00007f6b101e6038 R14: 00007f6b101e5fa0 R15: 00007ffe51f7e608 [ 477.629007][T14878] [ 478.222319][ T8813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.359306][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 478.394114][T14894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 478.424110][T14894] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 478.449106][ T8813] bridge0: port 3(batadv0) entered disabled state [ 478.525238][ T8813] bridge_slave_1: left allmulticast mode [ 478.531136][ T8813] bridge_slave_1: left promiscuous mode [ 478.537251][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.577975][ T8813] bridge_slave_0: left allmulticast mode [ 478.612798][ T8813] bridge_slave_0: left promiscuous mode [ 478.647082][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.778819][T14906] ref_ctr_offset mismatch. inode: 0x9b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 479.011840][T14912] netlink: 'syz.1.3014': attribute type 10 has an invalid length. [ 479.121324][ T51] Bluetooth: hci4: command tx timeout [ 479.424600][ T8813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.436476][ T8813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.447995][ T8813] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 479.457681][ T8813] veth1_vlan: left allmulticast mode [ 479.467446][ T8813] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 479.481977][ T8813] bond0 (unregistering): Released all slaves [ 479.607274][T14932] netlink: 'syz.6.3021': attribute type 10 has an invalid length. [ 479.776105][T14923] netlink: 'syz.0.3019': attribute type 29 has an invalid length. [ 479.804831][T14853] chnl_net:caif_netlink_parms(): no params data found [ 480.113513][T14932] bridge0: port 4(batadv0) entered disabled state [ 480.131676][T14932] batadv0: left allmulticast mode [ 480.137251][T14932] batadv0: left promiscuous mode [ 480.199398][T14932] bridge0: port 4(batadv0) entered disabled state [ 480.337142][T14932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.359070][T14932] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 480.369307][ T8813] : left promiscuous mode [ 480.388457][T14929] netlink: 'syz.0.3019': attribute type 29 has an invalid length. [ 480.575252][T14943] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3023'. [ 480.601572][T14942] delete_channel: no stack [ 480.824174][T14853] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.844845][T14853] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.857333][T14853] bridge_slave_0: entered allmulticast mode [ 480.869499][T14853] bridge_slave_0: entered promiscuous mode [ 480.884741][T14853] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.897861][T14853] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.907062][T14853] bridge_slave_1: entered allmulticast mode [ 480.933565][T14853] bridge_slave_1: entered promiscuous mode [ 481.190432][ T51] Bluetooth: hci4: command tx timeout [ 481.203225][T14972] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3032'. [ 481.245806][T14971] delete_channel: no stack [ 481.257963][T14975] netlink: 'syz.5.3033': attribute type 32 has an invalid length. [ 481.321278][T14954] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 481.398082][T14959] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 481.512775][T14853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.551672][T14853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.659028][T14985] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3037'. [ 481.685826][T14984] delete_channel: no stack [ 481.788336][T14853] team0: Port device team_slave_0 added [ 481.817358][T14853] team0: Port device team_slave_1 added [ 481.957712][T15004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3045'. [ 481.993120][T15002] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.3043'. [ 482.022151][T15002] netlink: zone id is out of range [ 482.028479][T15001] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3044'. [ 482.039883][T15000] delete_channel: no stack [ 482.044916][T15002] netlink: zone id is out of range [ 482.068581][T15002] netlink: get zone limit has 8 unknown bytes [ 482.089229][T14853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.156829][T15006] netlink: 'syz.1.3046': attribute type 2 has an invalid length. [ 482.195242][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.255952][T14853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.582018][T14853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.589022][T14853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.651478][T14853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.801946][T15027] FAULT_INJECTION: forcing a failure. [ 482.801946][T15027] name failslab, interval 1, probability 0, space 0, times 0 [ 482.910042][T15027] CPU: 0 UID: 0 PID: 15027 Comm: syz.6.3053 Not tainted syzkaller #0 PREEMPT(full) [ 482.910081][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 482.910094][T15027] Call Trace: [ 482.910103][T15027] [ 482.910112][T15027] dump_stack_lvl+0x189/0x250 [ 482.910145][T15027] ? __pfx____ratelimit+0x10/0x10 [ 482.910167][T15027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.910195][T15027] ? __pfx__printk+0x10/0x10 [ 482.910212][T15027] ? stack_trace_save+0x9c/0xe0 [ 482.910248][T15027] ? stack_depot_save_flags+0x40/0x860 [ 482.910280][T15027] ? __pfx_stack_trace_save+0x10/0x10 [ 482.910316][T15027] should_fail_ex+0x414/0x560 [ 482.910352][T15027] should_failslab+0xa8/0x100 [ 482.910384][T15027] __kmalloc_noprof+0xcb/0x4f0 [ 482.910411][T15027] ? ___neigh_create+0x6d5/0x2260 [ 482.910460][T15027] ___neigh_create+0x6d5/0x2260 [ 482.910500][T15027] ? __ipv6_neigh_lookup_noref+0x52a/0x710 [ 482.910555][T15027] ip6_finish_output2+0xb4d/0x16a0 [ 482.910580][T15027] ? ip6_finish_output2+0x701/0x16a0 [ 482.910606][T15027] ? ip6_mtu+0x7d/0x3f0 [ 482.910634][T15027] ? __pfx_ip6_finish_output2+0x10/0x10 [ 482.910655][T15027] ? ip6_mtu+0x7d/0x3f0 [ 482.910681][T15027] ? ip6_mtu+0x321/0x3f0 [ 482.910712][T15027] ? ip6_finish_output+0x2ef/0x4e0 [ 482.910747][T15027] ip6_mr_output+0x4e9/0x1100 [ 482.910799][T15027] ? ip6_mr_output+0x1ca/0x1100 [ 482.910833][T15027] ? __pfx_ip6_mr_output+0x10/0x10 [ 482.910872][T15027] ? _copy_from_iter+0x24f/0x1790 [ 482.910900][T15027] ? __lock_acquire+0xab9/0xd20 [ 482.910941][T15027] ? skb_dst+0x4f/0xd0 [ 482.910964][T15027] ? dst_output+0x17b/0x1c0 [ 482.910984][T15027] ? rawv6_send_hdrinc+0xc09/0x1790 [ 482.911009][T15027] rawv6_send_hdrinc+0xda3/0x1790 [ 482.911059][T15027] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 482.911079][T15027] ? txopt_get+0x335/0x3f0 [ 482.911100][T15027] ? aa_label_sk_perm+0x4cd/0x630 [ 482.911128][T15027] ? __pfx_txopt_get+0x10/0x10 [ 482.911160][T15027] rawv6_sendmsg+0x12e2/0x1820 [ 482.911201][T15027] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 482.911250][T15027] ? __pfx_aa_sk_perm+0x10/0x10 [ 482.911281][T15027] ? sock_rps_record_flow+0x19/0x410 [ 482.911314][T15027] ? inet_sendmsg+0x2f4/0x370 [ 482.911342][T15027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 482.911366][T15027] __sock_sendmsg+0x19c/0x270 [ 482.911401][T15027] ____sys_sendmsg+0x505/0x830 [ 482.911432][T15027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.911468][T15027] ? import_iovec+0x74/0xa0 [ 482.911497][T15027] ___sys_sendmsg+0x21f/0x2a0 [ 482.911524][T15027] ? __pfx____sys_sendmsg+0x10/0x10 [ 482.911591][T15027] ? __fget_files+0x2a/0x420 [ 482.911619][T15027] ? __fget_files+0x3a0/0x420 [ 482.911658][T15027] __x64_sys_sendmsg+0x19b/0x260 [ 482.911681][T15027] ? perf_trace_run_bpf_submit+0x100/0x170 [ 482.911715][T15027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 482.911751][T15027] ? __pfx_ksys_write+0x10/0x10 [ 482.911773][T15027] ? rcu_is_watching+0x15/0xb0 [ 482.911822][T15027] ? do_syscall_64+0xbe/0x3b0 [ 482.911855][T15027] do_syscall_64+0xfa/0x3b0 [ 482.911876][T15027] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.911901][T15027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.911922][T15027] ? clear_bhb_loop+0x60/0xb0 [ 482.911948][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.911968][T15027] RIP: 0033:0x7f401458eec9 [ 482.911988][T15027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.912007][T15027] RSP: 002b:00007f401548d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.912029][T15027] RAX: ffffffffffffffda RBX: 00007f40147e5fa0 RCX: 00007f401458eec9 [ 482.912045][T15027] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 482.912066][T15027] RBP: 00007f401548d090 R08: 0000000000000000 R09: 0000000000000000 [ 482.912079][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.912092][T15027] R13: 00007f40147e6038 R14: 00007f40147e5fa0 R15: 00007fff04345458 [ 482.912128][T15027] [ 483.371745][T15033] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3054'. [ 483.386465][T15034] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3054'. [ 483.409850][ T51] Bluetooth: hci4: command tx timeout [ 483.627400][T14853] hsr_slave_0: entered promiscuous mode [ 483.645559][T14853] hsr_slave_1: entered promiscuous mode [ 483.653539][T14853] debugfs: 'hsr0' already exists in 'hsr' [ 483.659326][T14853] Cannot create hsr debugfs directory [ 484.417277][T15065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.493878][T15066] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3067'. [ 484.507302][T15063] delete_channel: no stack [ 484.548281][ T8813] hsr_slave_0: left promiscuous mode [ 484.573846][ T8813] hsr_slave_1: left promiscuous mode [ 484.580713][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.606667][ T8813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.607245][T15067] netlink: 'syz.0.3065': attribute type 27 has an invalid length. [ 484.632002][ T8813] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 484.680378][ T8813] batman_adv: batadv0: Removing interface: virt_wifi0 [ 484.718664][T15069] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3068'. [ 484.730466][T15068] delete_channel: no stack [ 484.912436][ T8813] veth1_vlan: left promiscuous mode [ 484.924751][ T8813] veth0_vlan: left promiscuous mode [ 485.425453][T15087] netlink: 'syz.5.3073': attribute type 10 has an invalid length. [ 485.440052][ T51] Bluetooth: hci4: command tx timeout [ 485.555451][T15094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3076'. [ 485.810883][T15101] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3078'. [ 485.834735][T15100] delete_channel: no stack [ 486.366701][T15092] sit0: left promiscuous mode [ 486.475938][T15098] sit0: entered promiscuous mode [ 486.708564][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 486.839738][T15119] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3085'. [ 487.079504][T15129] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.159681][T15133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.233382][T15134] netlink: 'syz.1.3089': attribute type 27 has an invalid length. [ 487.424856][T15135] netlink: 'syz.0.3091': attribute type 27 has an invalid length. [ 487.441781][T15131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3090'. [ 487.863827][T14853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 488.007702][T14853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.169748][T14853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.207091][T14853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 488.605813][T14853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.649333][T14853] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.690570][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.697905][ T8824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.720842][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.728228][ T8824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.008055][T15167] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.144959][T15170] netlink: 'syz.5.3099': attribute type 10 has an invalid length. [ 489.159332][T15170] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3099'. [ 489.178865][T15170] batadv0: left promiscuous mode [ 489.185886][T15170] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 489.387814][T14853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.504022][T14853] veth0_vlan: entered promiscuous mode [ 489.541044][T14853] veth1_vlan: entered promiscuous mode [ 489.619575][T14853] veth0_macvtap: entered promiscuous mode [ 489.647469][T14853] veth1_macvtap: entered promiscuous mode [ 489.703983][T14853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.728090][T14853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.777180][ T8818] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.795728][ T8818] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.814093][ T8818] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.847365][ T8818] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.463665][ T8824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.482374][ T8824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.582330][ T30] audit: type=1107 audit(1759353205.886:6): pid=15176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 491.872704][ T8819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.948467][ T8819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.152892][T15192] FAULT_INJECTION: forcing a failure. [ 492.152892][T15192] name failslab, interval 1, probability 0, space 0, times 0 [ 492.185560][T15192] CPU: 0 UID: 0 PID: 15192 Comm: syz.3.2986 Not tainted syzkaller #0 PREEMPT(full) [ 492.185590][T15192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.185604][T15192] Call Trace: [ 492.185612][T15192] [ 492.185621][T15192] dump_stack_lvl+0x189/0x250 [ 492.185655][T15192] ? __pfx____ratelimit+0x10/0x10 [ 492.185677][T15192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.185705][T15192] ? __pfx__printk+0x10/0x10 [ 492.185729][T15192] ? __pfx___might_resched+0x10/0x10 [ 492.185753][T15192] ? fs_reclaim_acquire+0x7d/0x100 [ 492.185791][T15192] should_fail_ex+0x414/0x560 [ 492.185827][T15192] should_failslab+0xa8/0x100 [ 492.185875][T15192] __kmalloc_noprof+0xcb/0x4f0 [ 492.185901][T15192] ? tomoyo_encode+0x28b/0x550 [ 492.185939][T15192] tomoyo_encode+0x28b/0x550 [ 492.185980][T15192] tomoyo_realpath_from_path+0x58d/0x5d0 [ 492.186016][T15192] ? tomoyo_domain+0xd9/0x130 [ 492.186045][T15192] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 492.186073][T15192] tomoyo_path_number_perm+0x1e8/0x5a0 [ 492.186106][T15192] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 492.186141][T15192] ? ksys_write+0x1cb/0x250 [ 492.186217][T15192] ? __fget_files+0x2a/0x420 [ 492.186252][T15192] ? __fget_files+0x2a/0x420 [ 492.186280][T15192] ? __fget_files+0x3a0/0x420 [ 492.186307][T15192] ? __fget_files+0x2a/0x420 [ 492.186343][T15192] security_file_ioctl+0xcb/0x2d0 [ 492.186372][T15192] __se_sys_ioctl+0x47/0x170 [ 492.186405][T15192] do_syscall_64+0xfa/0x3b0 [ 492.186426][T15192] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.186447][T15192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.186468][T15192] ? clear_bhb_loop+0x60/0xb0 [ 492.186495][T15192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.186515][T15192] RIP: 0033:0x7fed3678eec9 [ 492.186535][T15192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.186553][T15192] RSP: 002b:00007fed3761f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 492.186576][T15192] RAX: ffffffffffffffda RBX: 00007fed369e5fa0 RCX: 00007fed3678eec9 [ 492.186592][T15192] RDX: 0000200000000040 RSI: 0000000000008b2b RDI: 0000000000000004 [ 492.186606][T15192] RBP: 00007fed3761f090 R08: 0000000000000000 R09: 0000000000000000 [ 492.186619][T15192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.186631][T15192] R13: 00007fed369e6038 R14: 00007fed369e5fa0 R15: 00007ffd3162d5f8 [ 492.186669][T15192] [ 492.186778][T15192] ERROR: Out of memory at tomoyo_realpath_from_path. [ 492.529706][T15196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 492.708476][T15200] netlink: 1057 bytes leftover after parsing attributes in process `syz.6.3107'. [ 492.754707][T15199] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3107'. [ 492.803015][T15196] netlink: 'syz.5.3106': attribute type 27 has an invalid length. [ 493.237120][T15213] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3113'. [ 493.314551][T15212] delete_channel: no stack [ 493.519821][T15225] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3117'. [ 493.789095][T15232] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3120'. [ 493.822496][T15235] FAULT_INJECTION: forcing a failure. [ 493.822496][T15235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.840436][T15232] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3120'. [ 493.875987][T15235] CPU: 1 UID: 0 PID: 15235 Comm: syz.0.3122 Not tainted syzkaller #0 PREEMPT(full) [ 493.876018][T15235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 493.876031][T15235] Call Trace: [ 493.876040][T15235] [ 493.876049][T15235] dump_stack_lvl+0x189/0x250 [ 493.876082][T15235] ? __pfx____ratelimit+0x10/0x10 [ 493.876102][T15235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.876129][T15235] ? __pfx__printk+0x10/0x10 [ 493.876149][T15235] ? __might_fault+0xb0/0x130 [ 493.876179][T15235] ? __might_fault+0xb0/0x130 [ 493.876213][T15235] should_fail_ex+0x414/0x560 [ 493.876250][T15235] _copy_from_user+0x2d/0xb0 [ 493.876277][T15235] wext_handle_ioctl+0xba/0x1c0 [ 493.876305][T15235] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 493.876350][T15235] sock_ioctl+0x15f/0x790 [ 493.876385][T15235] ? __pfx_sock_ioctl+0x10/0x10 [ 493.876421][T15235] ? __fget_files+0x2a/0x420 [ 493.876449][T15235] ? __fget_files+0x3a0/0x420 [ 493.876474][T15235] ? __fget_files+0x2a/0x420 [ 493.876507][T15235] ? bpf_lsm_file_ioctl+0x9/0x20 [ 493.876529][T15235] ? __pfx_sock_ioctl+0x10/0x10 [ 493.876557][T15235] __se_sys_ioctl+0xf9/0x170 [ 493.876584][T15235] do_syscall_64+0xfa/0x3b0 [ 493.876605][T15235] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.876625][T15235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.876645][T15235] ? clear_bhb_loop+0x60/0xb0 [ 493.876671][T15235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.876691][T15235] RIP: 0033:0x7f6b0ff8eec9 [ 493.876709][T15235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.876735][T15235] RSP: 002b:00007f6b10ecb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.876757][T15235] RAX: ffffffffffffffda RBX: 00007f6b101e5fa0 RCX: 00007f6b0ff8eec9 [ 493.876773][T15235] RDX: 0000200000000040 RSI: 0000000000008b2b RDI: 0000000000000004 [ 493.876786][T15235] RBP: 00007f6b10ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 493.876798][T15235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.876810][T15235] R13: 00007f6b101e6038 R14: 00007f6b101e5fa0 R15: 00007ffe51f7e608 [ 493.876845][T15235] [ 494.112483][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3121'. [ 494.402040][T15248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 494.838203][T15254] xt_l2tp: invalid flags combination: 0 [ 495.544934][T15278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3138'. [ 496.188799][T15290] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3141'. [ 496.508361][T15298] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3142'. [ 496.643380][T15300] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3145'. [ 496.655755][T15299] delete_channel: no stack [ 496.670525][T15306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.840560][T15314] netlink: 'syz.0.3146': attribute type 27 has an invalid length. [ 496.983049][T15310] xt_l2tp: invalid flags combination: 0 [ 497.065560][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3151'. [ 498.167730][T15339] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3158'. [ 498.189149][T15338] delete_channel: no stack [ 498.634821][T15367] netlink: 400 bytes leftover after parsing attributes in process `syz.0.3169'. [ 499.744672][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3180'. [ 499.865688][T15397] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3178'. [ 500.254997][T15415] FAULT_INJECTION: forcing a failure. [ 500.254997][T15415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.297366][T15415] CPU: 1 UID: 0 PID: 15415 Comm: syz.6.3190 Not tainted syzkaller #0 PREEMPT(full) [ 500.297397][T15415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 500.297410][T15415] Call Trace: [ 500.297419][T15415] [ 500.297429][T15415] dump_stack_lvl+0x189/0x250 [ 500.297466][T15415] ? __pfx____ratelimit+0x10/0x10 [ 500.297488][T15415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 500.297515][T15415] ? __pfx__printk+0x10/0x10 [ 500.297549][T15415] should_fail_ex+0x414/0x560 [ 500.297585][T15415] _copy_to_user+0x31/0xb0 [ 500.297613][T15415] simple_read_from_buffer+0xe1/0x170 [ 500.297647][T15415] proc_fail_nth_read+0x1b3/0x220 [ 500.297674][T15415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.297700][T15415] ? rw_verify_area+0x2a6/0x4d0 [ 500.297724][T15415] ? __lock_acquire+0xab9/0xd20 [ 500.297744][T15415] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 500.297768][T15415] vfs_read+0x1fd/0xa30 [ 500.297792][T15415] ? fdget_pos+0x247/0x320 [ 500.297826][T15415] ? __pfx___mutex_lock+0x10/0x10 [ 500.297850][T15415] ? __pfx_vfs_read+0x10/0x10 [ 500.297877][T15415] ? __fget_files+0x2a/0x420 [ 500.297911][T15415] ? __fget_files+0x3a0/0x420 [ 500.297938][T15415] ? __fget_files+0x2a/0x420 [ 500.297977][T15415] ksys_read+0x145/0x250 [ 500.298005][T15415] ? __pfx_ksys_read+0x10/0x10 [ 500.298036][T15415] ? do_syscall_64+0xbe/0x3b0 [ 500.298063][T15415] do_syscall_64+0xfa/0x3b0 [ 500.298083][T15415] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.298105][T15415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.298126][T15415] ? clear_bhb_loop+0x60/0xb0 [ 500.298152][T15415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.298172][T15415] RIP: 0033:0x7f401458d8dc [ 500.298191][T15415] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 500.298209][T15415] RSP: 002b:00007f401548d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 500.298232][T15415] RAX: ffffffffffffffda RBX: 00007f40147e5fa0 RCX: 00007f401458d8dc [ 500.298247][T15415] RDX: 000000000000000f RSI: 00007f401548d0a0 RDI: 0000000000000005 [ 500.298260][T15415] RBP: 00007f401548d090 R08: 0000000000000000 R09: 0000000000000000 [ 500.298273][T15415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.298285][T15415] R13: 00007f40147e6038 R14: 00007f40147e5fa0 R15: 00007fff04345458 [ 500.298319][T15415] [ 500.975117][T15429] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3196'. [ 500.986242][T15429] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3196'. [ 501.031662][T15429] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3196'. [ 501.073691][T15438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3200'. [ 501.359204][T15452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.612731][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.624132][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.707211][T15461] netlink: 'syz.6.3205': attribute type 27 has an invalid length. [ 501.900369][T15464] netlink: 'syz.3.3208': attribute type 10 has an invalid length. [ 502.705174][T15485] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3213'. [ 502.733194][T15480] delete_channel: no stack [ 502.825791][T15489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3216'. [ 503.061148][T15471] syzkaller0: entered promiscuous mode [ 503.067098][T15471] syzkaller0: entered allmulticast mode [ 503.454118][T15504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.565208][T15501] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.3221'. [ 503.622917][T15510] netlink: 'syz.6.3222': attribute type 27 has an invalid length. [ 503.627870][T15503] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.3221'. [ 503.860919][T15514] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3226'. [ 504.212837][T15518] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3228'. [ 504.241396][T15517] delete_channel: no stack [ 504.720707][T15544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.811368][T15547] netlink: 'syz.5.3240': attribute type 27 has an invalid length. [ 504.986382][T15549] delete_channel: no stack [ 506.240609][T15593] __nla_validate_parse: 5 callbacks suppressed [ 506.240638][T15593] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3258'. [ 506.278511][T15592] delete_channel: no stack [ 506.333111][T15596] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3259'. [ 506.375101][T15596] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3259'. [ 506.523282][T15596] netlink: 'syz.5.3259': attribute type 2 has an invalid length. [ 506.644444][T15605] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.741873][T15610] netlink: 'syz.1.3263': attribute type 27 has an invalid length. [ 507.091722][ T51] Bluetooth: hci5: unexpected event 0x05 length: 151 > 4 [ 507.516667][T15630] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3270'. [ 507.577280][T15624] delete_channel: no stack [ 507.701767][T15633] netlink: 277 bytes leftover after parsing attributes in process `syz.1.3273'. [ 507.804216][T15641] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.3276'. [ 511.228374][T15671] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 511.384464][T15676] netlink: 'syz.6.3283': attribute type 27 has an invalid length. [ 511.454354][T15673] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3285'. [ 511.465531][T15672] delete_channel: no stack [ 511.724465][T15686] netlink: 'syz.1.3290': attribute type 4 has an invalid length. [ 511.736205][T15686] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3290'. [ 511.874083][T15686] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 512.767735][T15708] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3299'. [ 512.795071][T15707] delete_channel: no stack [ 512.887642][T15717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.982951][T15717] netlink: 'syz.1.3302': attribute type 10 has an invalid length. [ 512.991454][T15717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3302'. [ 513.001191][T15717] batadv0: entered promiscuous mode [ 513.006611][T15717] batadv0: entered allmulticast mode [ 513.041577][T15717] bridge0: port 3(batadv0) entered blocking state [ 513.058814][T15717] bridge0: port 3(batadv0) entered disabled state [ 513.142600][T15717] bridge0: port 3(batadv0) entered blocking state [ 513.149743][T15717] bridge0: port 3(batadv0) entered forwarding state [ 513.299786][ T8818] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 513.309208][ T8818] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 513.941644][T15740] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3308'. [ 514.199814][T15753] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3314'. [ 514.228078][T15752] delete_channel: no stack [ 514.256482][T15758] netlink: 'syz.6.3316': attribute type 29 has an invalid length. [ 514.299171][T15762] netlink: 'syz.6.3316': attribute type 29 has an invalid length. [ 514.415679][T15765] netlink: 'syz.6.3316': attribute type 29 has an invalid length. [ 514.458121][T15758] netlink: 'syz.6.3316': attribute type 29 has an invalid length. [ 515.198013][T15784] netlink: 'syz.3.3323': attribute type 10 has an invalid length. [ 515.225608][T15783] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.3324'. [ 515.398928][T15784] geneve0: entered promiscuous mode [ 515.546077][T15784] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 515.622685][T15794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3328'. [ 515.798040][T15796] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3329'. [ 515.820646][T15795] delete_channel: no stack [ 516.277454][T15813] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3336'. [ 516.899354][T15829] can: request_module (can-proto-0) failed. [ 517.012541][T15835] __nla_validate_parse: 2 callbacks suppressed [ 517.012566][T15835] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3344'. [ 517.064309][T15835] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3344'. [ 517.290775][T15846] nft_compat: unsupported protocol 0 [ 517.734272][T15865] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3356'. [ 517.762846][T15864] delete_channel: no stack [ 517.934515][T15869] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3358'. [ 518.873551][T15892] tap0: tun_chr_ioctl cmd 1074025677 [ 518.883602][T15892] tap0: linktype set to 0 [ 519.426559][T15939] : entered promiscuous mode [ 519.728646][T15957] netlink: 15487 bytes leftover after parsing attributes in process `syz.6.3390'. [ 521.772789][T16011] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.3406'. [ 522.273836][T16030] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3413'. [ 522.669722][T16027] delete_channel: no stack [ 522.675941][T16032] netlink: 'syz.1.3414': attribute type 29 has an invalid length. [ 522.731757][T16032] netlink: 'syz.1.3414': attribute type 10 has an invalid length. [ 523.005479][T16032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.073700][T16032] team0: Port device bond0 added [ 523.587256][T16048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3417'. [ 523.717867][T16048] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3417'. [ 523.833317][T16056] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3419'. [ 523.882001][T16053] delete_channel: no stack [ 524.798454][T16076] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3426'. [ 525.176051][T16074] delete_channel: no stack [ 525.566783][T16085] netlink: 'syz.1.3431': attribute type 10 has an invalid length. [ 525.574986][T16085] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3431'. [ 525.652487][T16091] netlink: 'syz.6.3432': attribute type 27 has an invalid length. [ 526.727112][T16104] netlink: 'syz.5.3436': attribute type 2 has an invalid length. [ 526.874335][T16104] netlink: 119 bytes leftover after parsing attributes in process `syz.5.3436'. [ 527.579424][T16116] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3443'. [ 527.632745][T16115] delete_channel: no stack [ 527.944507][T16131] netlink: 'syz.1.3448': attribute type 21 has an invalid length. [ 527.953833][T16131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3448'. [ 528.208477][T16139] netlink: 'syz.5.3449': attribute type 27 has an invalid length. [ 528.948980][T16149] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3455'. [ 529.048106][T16149] netlink: 'syz.3.3455': attribute type 4 has an invalid length. [ 529.784484][T16164] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3459'. [ 530.144607][T16159] delete_channel: no stack [ 530.765596][T16187] netlink: 'syz.0.3468': attribute type 27 has an invalid length. [ 531.492425][T16191] netlink: 15487 bytes leftover after parsing attributes in process `syz.5.3469'. [ 531.907133][T16206] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3474'. [ 531.922912][T16204] delete_channel: no stack [ 532.266451][T16226] netlink: 'syz.6.3483': attribute type 27 has an invalid length. [ 532.347858][T16228] netlink: 'syz.1.3485': attribute type 29 has an invalid length. [ 532.361038][T16228] netlink: 'syz.1.3485': attribute type 29 has an invalid length. [ 532.411412][T16228] netlink: 500 bytes leftover after parsing attributes in process `syz.1.3485'. [ 533.117967][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3490'. [ 533.844060][T16249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.961955][T16254] netlink: 'syz.6.3492': attribute type 10 has an invalid length. [ 533.975775][T16254] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3492'. [ 533.998082][T16255] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3494'. [ 534.009766][T16254] batadv0: entered promiscuous mode [ 534.020088][T16254] batadv0: entered allmulticast mode [ 534.176842][T16254] bond0: (slave batadv0): Releasing backup interface [ 534.297433][T16254] bridge0: port 4(batadv0) entered blocking state [ 534.304709][T16254] bridge0: port 4(batadv0) entered disabled state [ 534.323229][ T8818] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 534.333058][ T8818] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 534.350590][T16252] delete_channel: no stack [ 534.846714][T16278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.894546][T16282] netlink: 'syz.3.3501': attribute type 10 has an invalid length. [ 535.002609][T16286] netlink: 'syz.5.3502': attribute type 27 has an invalid length. [ 535.187772][T16289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.274114][T16289] netlink: 'syz.6.3506': attribute type 10 has an invalid length. [ 535.301574][T16289] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3506'. [ 535.878313][T16298] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3509'. [ 535.900834][T16296] delete_channel: no stack [ 536.088856][T16304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3511'. [ 536.134729][T16301] netlink: 'syz.0.3510': attribute type 5 has an invalid length. [ 536.159174][T16301] netlink: 'syz.0.3510': attribute type 15 has an invalid length. [ 536.577512][T16329] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3524'. [ 536.641849][T16328] delete_channel: no stack [ 536.856624][T16344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3529'. [ 537.192472][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 537.202210][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 537.212144][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 537.222615][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 537.231058][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 537.317931][T16358] netlink: 'syz.1.3531': attribute type 1 has an invalid length. [ 537.356693][T16350] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3531'. [ 537.414498][T16358] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3531'. [ 537.860597][T16354] chnl_net:caif_netlink_parms(): no params data found [ 537.985481][T16370] delete_channel: no stack [ 538.043988][T16379] netlink: 'syz.0.3538': attribute type 18 has an invalid length. [ 538.133815][T16385] __nla_validate_parse: 4 callbacks suppressed [ 538.133838][T16385] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3541'. [ 538.158253][T16354] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.180682][T16354] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.188007][T16354] bridge_slave_0: entered allmulticast mode [ 538.220145][T16354] bridge_slave_0: entered promiscuous mode [ 538.235066][T16354] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.253981][T16354] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.269201][T16354] bridge_slave_1: entered allmulticast mode [ 538.290281][T16354] bridge_slave_1: entered promiscuous mode [ 538.315302][T16389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3542'. [ 538.419576][T16354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.458257][T16354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.591025][T16354] team0: Port device team_slave_0 added [ 538.612179][T16354] team0: Port device team_slave_1 added [ 538.924404][T16404] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.3548'. [ 539.281317][ T5852] Bluetooth: hci0: command tx timeout [ 539.319060][T16354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.330508][T16354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.370975][T16354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.388066][T16354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.398609][T16354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 539.438355][T16354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.497426][T16415] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3553'. [ 539.553168][T16354] hsr_slave_0: entered promiscuous mode [ 539.571172][T16354] hsr_slave_1: entered promiscuous mode [ 539.586692][T16354] debugfs: 'hsr0' already exists in 'hsr' [ 539.614454][T16354] Cannot create hsr debugfs directory [ 540.265714][T16354] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.360613][T16448] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3565'. [ 540.439189][T16354] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.744545][T16354] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.864193][T16354] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.142980][T16469] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3573'. [ 541.282391][T16354] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 541.306586][T16471] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3572'. [ 541.343398][T16470] delete_channel: no stack [ 541.357618][ T5852] Bluetooth: hci0: command tx timeout [ 541.372877][T16354] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 541.430112][T16354] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 541.459364][T16354] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 541.559624][T16489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.636844][T16489] netlink: 'syz.0.3578': attribute type 10 has an invalid length. [ 541.654033][T16489] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3578'. [ 541.731074][T16499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3583'. [ 541.746208][T16499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3583'. [ 541.780219][T16354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.850961][T16354] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.871245][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.878454][ T8824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.907397][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.914639][ T8821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.601143][T16354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.847412][T16528] netlink: zone id is out of range [ 542.875474][T16528] netlink: zone id is out of range [ 542.892389][T16528] netlink: get zone limit has 8 unknown bytes [ 542.993441][T16536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.056653][T16536] netlink: 'syz.6.3595': attribute type 10 has an invalid length. [ 543.222340][T16542] __nla_validate_parse: 6 callbacks suppressed [ 543.222362][T16542] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3597'. [ 543.436377][ T5852] Bluetooth: hci0: command tx timeout [ 543.699030][T16549] syzkaller0: entered promiscuous mode [ 543.726633][T16549] syzkaller0: entered allmulticast mode [ 545.515058][ T5852] Bluetooth: hci0: command tx timeout [ 547.307843][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3609'. [ 548.577312][T16354] veth0_vlan: entered promiscuous mode [ 548.632767][T16354] veth1_vlan: entered promiscuous mode [ 548.684707][T16577] FAULT_INJECTION: forcing a failure. [ 548.684707][T16577] name failslab, interval 1, probability 0, space 0, times 0 [ 548.729786][T16577] CPU: 0 UID: 0 PID: 16577 Comm: syz.0.3610 Not tainted syzkaller #0 PREEMPT(full) [ 548.729815][T16577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 548.729828][T16577] Call Trace: [ 548.729837][T16577] [ 548.729845][T16577] dump_stack_lvl+0x189/0x250 [ 548.729882][T16577] ? __pfx____ratelimit+0x10/0x10 [ 548.729903][T16577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 548.729929][T16577] ? __pfx__printk+0x10/0x10 [ 548.729955][T16577] ? __pfx___might_resched+0x10/0x10 [ 548.729984][T16577] should_fail_ex+0x414/0x560 [ 548.730021][T16577] should_failslab+0xa8/0x100 [ 548.730052][T16577] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 548.730080][T16577] ? __alloc_skb+0x112/0x2d0 [ 548.730108][T16577] __alloc_skb+0x112/0x2d0 [ 548.730133][T16577] netlink_sendmsg+0x5c6/0xb30 [ 548.730167][T16577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.730193][T16577] ? aa_sock_msg_perm+0xf1/0x1d0 [ 548.730225][T16577] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 548.730244][T16577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.730268][T16577] __sock_sendmsg+0x219/0x270 [ 548.730301][T16577] ____sys_sendmsg+0x505/0x830 [ 548.730342][T16577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.730379][T16577] ? import_iovec+0x74/0xa0 [ 548.730408][T16577] ___sys_sendmsg+0x21f/0x2a0 [ 548.730436][T16577] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.730507][T16577] ? __fget_files+0x2a/0x420 [ 548.730535][T16577] ? __fget_files+0x3a0/0x420 [ 548.730577][T16577] __x64_sys_sendmsg+0x19b/0x260 [ 548.730608][T16577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.730645][T16577] ? __pfx_ksys_write+0x10/0x10 [ 548.730668][T16577] ? rcu_is_watching+0x15/0xb0 [ 548.730698][T16577] ? do_syscall_64+0xbe/0x3b0 [ 548.730723][T16577] do_syscall_64+0xfa/0x3b0 [ 548.730742][T16577] ? lockdep_hardirqs_on+0x9c/0x150 [ 548.730761][T16577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.730781][T16577] ? clear_bhb_loop+0x60/0xb0 [ 548.730807][T16577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.730826][T16577] RIP: 0033:0x7f6b0ff8eec9 [ 548.730845][T16577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.730863][T16577] RSP: 002b:00007f6b10ecb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.730885][T16577] RAX: ffffffffffffffda RBX: 00007f6b101e5fa0 RCX: 00007f6b0ff8eec9 [ 548.730900][T16577] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 548.730913][T16577] RBP: 00007f6b10ecb090 R08: 0000000000000000 R09: 0000000000000000 [ 548.730926][T16577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.730937][T16577] R13: 00007f6b101e6038 R14: 00007f6b101e5fa0 R15: 00007ffe51f7e608 [ 548.730974][T16577] [ 549.005192][T16354] veth0_macvtap: entered promiscuous mode [ 549.016090][T16354] veth1_macvtap: entered promiscuous mode [ 549.038101][T16354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.050447][T16354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.065680][ T8818] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.076283][ T8818] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.154331][ T8818] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.172923][ T8818] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.218977][ T8822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.241515][ T8822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.293124][T16591] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3614'. [ 549.317694][T16586] delete_channel: no stack [ 549.380988][ T8818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.392422][ T8818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.100724][T16612] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3622'. [ 550.149678][T16615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3622'. [ 550.695637][T16625] pim6reg1: entered promiscuous mode [ 550.745519][T16625] pim6reg1: entered allmulticast mode [ 550.782881][T16629] netlink: 'syz.6.3629': attribute type 39 has an invalid length. [ 550.862494][T16625] netlink: 'syz.6.3629': attribute type 39 has an invalid length. [ 551.406003][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 551.417744][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 551.426699][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 551.437141][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 551.447072][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 551.456091][ T8819] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.571330][T16648] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.3636'. [ 551.601412][T16649] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3635'. [ 551.625689][T16649] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3635'. [ 551.639065][T16649] netlink: 'syz.5.3635': attribute type 5 has an invalid length. [ 551.648566][T16649] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3635'. [ 551.649060][ T8819] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.662539][T16650] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3635'. [ 551.692527][T16650] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3635'. [ 551.701811][T16650] netlink: 'syz.5.3635': attribute type 5 has an invalid length. [ 551.713307][T16650] netlink: 43 bytes leftover after parsing attributes in process `syz.5.3635'. [ 551.878289][T16659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.901822][ T8819] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.988692][T16659] netlink: 'syz.3.3641': attribute type 10 has an invalid length. [ 552.017381][T16659] batadv0: entered promiscuous mode [ 552.033296][T16659] batadv0: entered allmulticast mode [ 552.042011][T16659] bridge0: port 3(batadv0) entered blocking state [ 552.054492][T16659] bridge0: port 3(batadv0) entered disabled state [ 552.077321][T16659] bridge0: port 3(batadv0) entered blocking state [ 552.080876][T16663] Can't find ip_set type haSh:net,net [ 552.084677][T16659] bridge0: port 3(batadv0) entered forwarding state [ 552.108353][T16664] Can't find ip_set type haSh:net,net [ 552.263807][ T8819] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.374568][T16681] FAULT_INJECTION: forcing a failure. [ 552.374568][T16681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.428801][T16681] CPU: 1 UID: 0 PID: 16681 Comm: syz.5.3647 Not tainted syzkaller #0 PREEMPT(full) [ 552.428829][T16681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 552.428843][T16681] Call Trace: [ 552.428850][T16681] [ 552.428859][T16681] dump_stack_lvl+0x189/0x250 [ 552.428891][T16681] ? __pfx____ratelimit+0x10/0x10 [ 552.428913][T16681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.428939][T16681] ? __pfx__printk+0x10/0x10 [ 552.428958][T16681] ? __might_fault+0xb0/0x130 [ 552.428995][T16681] should_fail_ex+0x414/0x560 [ 552.429029][T16681] _copy_from_iter+0x1de/0x1790 [ 552.429058][T16681] ? rcu_is_watching+0x15/0xb0 [ 552.429083][T16681] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 552.429111][T16681] ? __pfx__copy_from_iter+0x10/0x10 [ 552.429134][T16681] ? __build_skb_around+0x257/0x3e0 [ 552.429162][T16681] ? netlink_sendmsg+0x642/0xb30 [ 552.429182][T16681] ? skb_put+0x11b/0x210 [ 552.429207][T16681] netlink_sendmsg+0x6b2/0xb30 [ 552.429247][T16681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.429272][T16681] ? aa_sock_msg_perm+0xf1/0x1d0 [ 552.429300][T16681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 552.429317][T16681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 552.429340][T16681] __sock_sendmsg+0x219/0x270 [ 552.429373][T16681] ____sys_sendmsg+0x505/0x830 [ 552.429403][T16681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 552.429437][T16681] ? import_iovec+0x74/0xa0 [ 552.429465][T16681] ___sys_sendmsg+0x21f/0x2a0 [ 552.429493][T16681] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.429557][T16681] ? __fget_files+0x2a/0x420 [ 552.429585][T16681] ? __fget_files+0x3a0/0x420 [ 552.429621][T16681] __x64_sys_sendmsg+0x19b/0x260 [ 552.429649][T16681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.429685][T16681] ? __pfx_ksys_write+0x10/0x10 [ 552.429707][T16681] ? rcu_is_watching+0x15/0xb0 [ 552.429736][T16681] ? do_syscall_64+0xbe/0x3b0 [ 552.429763][T16681] do_syscall_64+0xfa/0x3b0 [ 552.429782][T16681] ? lockdep_hardirqs_on+0x9c/0x150 [ 552.429803][T16681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.429829][T16681] ? clear_bhb_loop+0x60/0xb0 [ 552.429854][T16681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.429873][T16681] RIP: 0033:0x7f5f9218eec9 [ 552.429890][T16681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.429908][T16681] RSP: 002b:00007f5f92f78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.429929][T16681] RAX: ffffffffffffffda RBX: 00007f5f923e5fa0 RCX: 00007f5f9218eec9 [ 552.429944][T16681] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 552.429957][T16681] RBP: 00007f5f92f78090 R08: 0000000000000000 R09: 0000000000000000 [ 552.429969][T16681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.429981][T16681] R13: 00007f5f923e6038 R14: 00007f5f923e5fa0 R15: 00007ffcfa693668 [ 552.430014][T16681] [ 552.729815][ T8822] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 552.739164][ T8822] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 553.036157][T16640] chnl_net:caif_netlink_parms(): no params data found [ 553.166886][ T8819] bridge0: port 4(team0) entered disabled state [ 553.195620][ T8819] bridge0: port 3(dummy0) entered disabled state [ 553.233428][ T8819] bridge_slave_1: left allmulticast mode [ 553.249991][ T8819] bridge_slave_1: left promiscuous mode [ 553.257112][ T8819] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.295671][ T8819] bridge_slave_0: left allmulticast mode [ 553.308592][ T8819] bridge_slave_0: left promiscuous mode [ 553.321160][ T8819] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.397644][T16713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.407855][ T8819] bond_slave_1: left promiscuous mode [ 553.494931][T16713] netlink: 'syz.3.3658': attribute type 10 has an invalid length. [ 553.511313][ T5852] Bluetooth: hci1: command tx timeout [ 553.812704][T16731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 553.858704][T16731] netlink: 'syz.5.3665': attribute type 10 has an invalid length. [ 553.947526][T16737] siw: device registration error -23 [ 553.955275][T16737] netlink: 'syz.6.3667': attribute type 1 has an invalid length. [ 553.971328][T16737] netlink: 'syz.6.3667': attribute type 2 has an invalid length. [ 553.979400][T16737] netlink: 'syz.6.3667': attribute type 2 has an invalid length. [ 554.070239][ T8819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.082897][ T8819] bond0 (unregistering): Released all slaves [ 554.109792][T16731] batadv0: entered promiscuous mode [ 554.119187][T16731] batadv0: entered allmulticast mode [ 554.132554][T16731] bridge0: port 3(batadv0) entered blocking state [ 554.140035][T16731] bridge0: port 3(batadv0) entered disabled state [ 554.158975][T16731] bridge0: port 3(batadv0) entered blocking state [ 554.166087][T16731] bridge0: port 3(batadv0) entered forwarding state [ 554.269824][T16743] FAULT_INJECTION: forcing a failure. [ 554.269824][T16743] name failslab, interval 1, probability 0, space 0, times 0 [ 554.286475][ T8822] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 554.295789][ T8822] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 554.334318][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.3.3669 Not tainted syzkaller #0 PREEMPT(full) [ 554.334347][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 554.334360][T16743] Call Trace: [ 554.334368][T16743] [ 554.334377][T16743] dump_stack_lvl+0x189/0x250 [ 554.334408][T16743] ? __pfx____ratelimit+0x10/0x10 [ 554.334430][T16743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.334456][T16743] ? __pfx__printk+0x10/0x10 [ 554.334478][T16743] ? __lock_acquire+0xab9/0xd20 [ 554.334510][T16743] should_fail_ex+0x414/0x560 [ 554.334546][T16743] should_failslab+0xa8/0x100 [ 554.334577][T16743] kmem_cache_alloc_noprof+0x73/0x3c0 [ 554.334602][T16743] ? skb_clone+0x212/0x3a0 [ 554.334635][T16743] skb_clone+0x212/0x3a0 [ 554.334665][T16743] __netlink_deliver_tap+0x404/0x850 [ 554.334701][T16743] ? netlink_deliver_tap+0x2e/0x1b0 [ 554.334725][T16743] netlink_deliver_tap+0x19c/0x1b0 [ 554.334748][T16743] netlink_unicast+0x7fa/0x9e0 [ 554.334789][T16743] ? __pfx_netlink_unicast+0x10/0x10 [ 554.334831][T16743] ? netlink_sendmsg+0x642/0xb30 [ 554.334851][T16743] ? skb_put+0x11b/0x210 [ 554.334878][T16743] netlink_sendmsg+0x805/0xb30 [ 554.334910][T16743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.334935][T16743] ? aa_sock_msg_perm+0xf1/0x1d0 [ 554.334968][T16743] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.334986][T16743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.335009][T16743] __sock_sendmsg+0x219/0x270 [ 554.335042][T16743] ____sys_sendmsg+0x505/0x830 [ 554.335075][T16743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.335110][T16743] ? import_iovec+0x74/0xa0 [ 554.335139][T16743] ___sys_sendmsg+0x21f/0x2a0 [ 554.335167][T16743] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.335231][T16743] ? __fget_files+0x2a/0x420 [ 554.335258][T16743] ? __fget_files+0x3a0/0x420 [ 554.335298][T16743] __x64_sys_sendmsg+0x19b/0x260 [ 554.335327][T16743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.335368][T16743] ? __pfx_ksys_write+0x10/0x10 [ 554.335390][T16743] ? rcu_is_watching+0x15/0xb0 [ 554.335421][T16743] ? do_syscall_64+0xbe/0x3b0 [ 554.335448][T16743] do_syscall_64+0xfa/0x3b0 [ 554.335467][T16743] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.335486][T16743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.335507][T16743] ? clear_bhb_loop+0x60/0xb0 [ 554.335531][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.335550][T16743] RIP: 0033:0x7fed3678eec9 [ 554.335568][T16743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.335587][T16743] RSP: 002b:00007fed3761f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.335610][T16743] RAX: ffffffffffffffda RBX: 00007fed369e5fa0 RCX: 00007fed3678eec9 [ 554.335625][T16743] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 554.335638][T16743] RBP: 00007fed3761f090 R08: 0000000000000000 R09: 0000000000000000 [ 554.335651][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.335662][T16743] R13: 00007fed369e6038 R14: 00007fed369e5fa0 R15: 00007ffd3162d5f8 [ 554.335695][T16743] [ 554.859762][T16751] __nla_validate_parse: 5 callbacks suppressed [ 554.859783][T16751] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.3672'. [ 554.931147][T16750] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.3671'. [ 555.033444][T16640] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.067260][T16640] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.120408][T16640] bridge_slave_0: entered allmulticast mode [ 555.168776][T16640] bridge_slave_0: entered promiscuous mode [ 555.221298][T16765] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3679'. [ 555.242531][T16640] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.259125][T16640] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.281236][T16640] bridge_slave_1: entered allmulticast mode [ 555.300491][T16640] bridge_slave_1: entered promiscuous mode [ 555.319392][T16764] delete_channel: no stack [ 555.524871][T16640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.563965][T16640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.590356][ T5852] Bluetooth: hci1: command tx timeout [ 555.976798][T16793] netlink: 15999 bytes leftover after parsing attributes in process `syz.6.3687'. [ 556.025246][ T8819] hsr_slave_0: left promiscuous mode [ 556.039385][ T8819] hsr_slave_1: left promiscuous mode [ 556.118597][ T8819] veth1_macvtap: left promiscuous mode [ 556.138841][ T8819] veth0_macvtap: left promiscuous mode [ 556.162784][ T8819] veth1_vlan: left promiscuous mode [ 556.168218][ T8819] veth0_vlan: left promiscuous mode [ 556.220922][T16800] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3689'. [ 556.272956][T16797] delete_channel: no stack [ 556.336050][T16804] validate_nla: 1 callbacks suppressed [ 556.336235][T16804] netlink: 'syz.1.3690': attribute type 21 has an invalid length. [ 556.438393][T16806] FAULT_INJECTION: forcing a failure. [ 556.438393][T16806] name failslab, interval 1, probability 0, space 0, times 0 [ 556.451419][T16806] CPU: 1 UID: 0 PID: 16806 Comm: syz.6.3691 Not tainted syzkaller #0 PREEMPT(full) [ 556.451446][T16806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 556.451459][T16806] Call Trace: [ 556.451468][T16806] [ 556.451476][T16806] dump_stack_lvl+0x189/0x250 [ 556.451509][T16806] ? __pfx____ratelimit+0x10/0x10 [ 556.451531][T16806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.451558][T16806] ? __pfx__printk+0x10/0x10 [ 556.451586][T16806] ? __pfx___might_resched+0x10/0x10 [ 556.451623][T16806] should_fail_ex+0x414/0x560 [ 556.451660][T16806] should_failslab+0xa8/0x100 [ 556.451691][T16806] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 556.451720][T16806] ? __alloc_skb+0x112/0x2d0 [ 556.451747][T16806] __alloc_skb+0x112/0x2d0 [ 556.451775][T16806] netlink_ack+0x146/0xa50 [ 556.451820][T16806] netlink_rcv_skb+0x28c/0x470 [ 556.451862][T16806] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 556.451897][T16806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 556.451934][T16806] ? bpf_lsm_capable+0x9/0x20 [ 556.451961][T16806] ? security_capable+0x7e/0x2e0 [ 556.452000][T16806] nfnetlink_rcv+0x26a/0x2520 [ 556.452036][T16806] ? __dev_queue_xmit+0x1d79/0x3b50 [ 556.452078][T16806] ? __dev_queue_xmit+0x27b/0x3b50 [ 556.452122][T16806] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 556.452153][T16806] ? __pfx___dev_queue_xmit+0x10/0x10 [ 556.452201][T16806] ? ref_tracker_free+0x63a/0x7d0 [ 556.452234][T16806] ? __asan_memcpy+0x40/0x70 [ 556.452256][T16806] ? __pfx_ref_tracker_free+0x10/0x10 [ 556.452285][T16806] ? __skb_clone+0x63/0x7a0 [ 556.452315][T16806] ? perf_trace_lock+0xec/0x3b0 [ 556.452338][T16806] ? __skb_clone+0x483/0x7a0 [ 556.452373][T16806] ? __pfx_perf_trace_lock+0x10/0x10 [ 556.452397][T16806] ? skb_clone+0x246/0x3a0 [ 556.452428][T16806] ? __netlink_deliver_tap+0x807/0x850 [ 556.452451][T16806] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.452482][T16806] ? netlink_deliver_tap+0x2e/0x1b0 [ 556.452515][T16806] netlink_unicast+0x82f/0x9e0 [ 556.452560][T16806] ? __pfx_netlink_unicast+0x10/0x10 [ 556.452595][T16806] ? netlink_sendmsg+0x642/0xb30 [ 556.452615][T16806] ? skb_put+0x11b/0x210 [ 556.452652][T16806] netlink_sendmsg+0x805/0xb30 [ 556.452688][T16806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.452716][T16806] ? aa_sock_msg_perm+0xf1/0x1d0 [ 556.452751][T16806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 556.452770][T16806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.452794][T16806] __sock_sendmsg+0x219/0x270 [ 556.452831][T16806] ____sys_sendmsg+0x505/0x830 [ 556.452865][T16806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.452904][T16806] ? import_iovec+0x74/0xa0 [ 556.452935][T16806] ___sys_sendmsg+0x21f/0x2a0 [ 556.452965][T16806] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.453020][T16806] ? __fget_files+0x2a/0x420 [ 556.453067][T16806] ? __fget_files+0x2a/0x420 [ 556.453094][T16806] ? __fget_files+0x3a0/0x420 [ 556.453138][T16806] __x64_sys_sendmsg+0x19b/0x260 [ 556.453162][T16806] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 556.453197][T16806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.453237][T16806] ? __pfx_ksys_write+0x10/0x10 [ 556.453260][T16806] ? rcu_is_watching+0x15/0xb0 [ 556.453293][T16806] ? do_syscall_64+0xbe/0x3b0 [ 556.453321][T16806] do_syscall_64+0xfa/0x3b0 [ 556.453342][T16806] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.453363][T16806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.453384][T16806] ? clear_bhb_loop+0x60/0xb0 [ 556.453411][T16806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.453431][T16806] RIP: 0033:0x7f401458eec9 [ 556.453451][T16806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.453469][T16806] RSP: 002b:00007f401548d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.453491][T16806] RAX: ffffffffffffffda RBX: 00007f40147e5fa0 RCX: 00007f401458eec9 [ 556.453506][T16806] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 556.453519][T16806] RBP: 00007f401548d090 R08: 0000000000000000 R09: 0000000000000000 [ 556.453532][T16806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.453544][T16806] R13: 00007f40147e6038 R14: 00007f40147e5fa0 R15: 00007fff04345458 [ 556.453582][T16806] [ 556.935090][T16807] netlink: 'syz.1.3690': attribute type 10 has an invalid length. [ 557.608340][ T8819] team_slave_1 (unregistering): left promiscuous mode [ 557.615363][ T8819] team_slave_1 (unregistering): left allmulticast mode [ 557.626797][ T8819] team0 (unregistering): Port device team_slave_1 removed [ 557.676836][ T5852] Bluetooth: hci1: command tx timeout [ 557.685300][ T8819] team_slave_0 (unregistering): left promiscuous mode [ 557.692862][ T8819] team_slave_0 (unregistering): left allmulticast mode [ 557.701219][ T8819] team0 (unregistering): Port device team_slave_0 removed [ 558.171057][T16640] team0: Port device team_slave_0 added [ 558.208843][T16640] team0: Port device team_slave_1 added [ 558.454007][T16640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.473239][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.548895][T16640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.599745][T16640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.620636][T16827] FAULT_INJECTION: forcing a failure. [ 558.620636][T16827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.629996][T16640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.660138][T16827] CPU: 1 UID: 0 PID: 16827 Comm: syz.5.3699 Not tainted syzkaller #0 PREEMPT(full) [ 558.660168][T16827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 558.660181][T16827] Call Trace: [ 558.660189][T16827] [ 558.660198][T16827] dump_stack_lvl+0x189/0x250 [ 558.660230][T16827] ? __pfx____ratelimit+0x10/0x10 [ 558.660252][T16827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.660278][T16827] ? __pfx__printk+0x10/0x10 [ 558.660298][T16827] ? __might_fault+0xb0/0x130 [ 558.660338][T16827] should_fail_ex+0x414/0x560 [ 558.660373][T16827] _copy_from_user+0x2d/0xb0 [ 558.660399][T16827] ___sys_sendmsg+0x158/0x2a0 [ 558.660428][T16827] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.660494][T16827] ? __fget_files+0x2a/0x420 [ 558.660522][T16827] ? __fget_files+0x3a0/0x420 [ 558.660561][T16827] __x64_sys_sendmsg+0x19b/0x260 [ 558.660590][T16827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.660627][T16827] ? __pfx_ksys_write+0x10/0x10 [ 558.660650][T16827] ? rcu_is_watching+0x15/0xb0 [ 558.660686][T16827] ? do_syscall_64+0xbe/0x3b0 [ 558.660713][T16827] do_syscall_64+0xfa/0x3b0 [ 558.660732][T16827] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.660752][T16827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.660773][T16827] ? clear_bhb_loop+0x60/0xb0 [ 558.660797][T16827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.660817][T16827] RIP: 0033:0x7f5f9218eec9 [ 558.660835][T16827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.660853][T16827] RSP: 002b:00007f5f92f78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.660875][T16827] RAX: ffffffffffffffda RBX: 00007f5f923e5fa0 RCX: 00007f5f9218eec9 [ 558.660890][T16827] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 558.660903][T16827] RBP: 00007f5f92f78090 R08: 0000000000000000 R09: 0000000000000000 [ 558.660916][T16827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.660928][T16827] R13: 00007f5f923e6038 R14: 00007f5f923e5fa0 R15: 00007ffcfa693668 [ 558.660961][T16827] [ 558.876758][T16640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.923831][T16830] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3700'. [ 559.057558][T16640] hsr_slave_0: entered promiscuous mode [ 559.064437][T16640] hsr_slave_1: entered promiscuous mode [ 559.071085][T16640] debugfs: 'hsr0' already exists in 'hsr' [ 559.076893][T16640] Cannot create hsr debugfs directory [ 559.244377][T16837] netlink: 'syz.3.3704': attribute type 29 has an invalid length. [ 559.287150][T16837] netlink: 'syz.3.3704': attribute type 29 has an invalid length. [ 559.324938][T16837] netlink: 'syz.3.3704': attribute type 29 has an invalid length. [ 559.383237][T16837] netlink: 'syz.3.3704': attribute type 29 has an invalid length. [ 559.413160][T16843] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.3707'. [ 559.449613][T16843] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.3707'. [ 559.481862][T16843] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.3707'. [ 559.497456][T16843] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.3707'. [ 559.760885][ T5852] Bluetooth: hci1: command tx timeout [ 559.951076][T16857] __nla_validate_parse: 29 callbacks suppressed [ 559.951097][T16857] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.3711'. [ 559.998027][T16855] netlink: 'syz.1.3710': attribute type 10 has an invalid length. [ 560.057590][T16856] netlink: 'syz.1.3710': attribute type 29 has an invalid length. [ 560.477831][T16640] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 561.129365][T16640] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 561.158730][T16640] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 561.179802][T16640] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 561.428367][T16891] FAULT_INJECTION: forcing a failure. [ 561.428367][T16891] name failslab, interval 1, probability 0, space 0, times 0 [ 561.464857][T16891] CPU: 0 UID: 0 PID: 16891 Comm: syz.5.3719 Not tainted syzkaller #0 PREEMPT(full) [ 561.464885][T16891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 561.464899][T16891] Call Trace: [ 561.464907][T16891] [ 561.464915][T16891] dump_stack_lvl+0x189/0x250 [ 561.464947][T16891] ? __pfx____ratelimit+0x10/0x10 [ 561.464967][T16891] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.464992][T16891] ? __pfx__printk+0x10/0x10 [ 561.465008][T16891] ? nfnetlink_rcv+0x26a/0x2520 [ 561.465039][T16891] ? ____sys_sendmsg+0x505/0x830 [ 561.465062][T16891] ? __x64_sys_sendmsg+0x19b/0x260 [ 561.465099][T16891] should_fail_ex+0x414/0x560 [ 561.465134][T16891] should_failslab+0xa8/0x100 [ 561.465164][T16891] kmem_cache_alloc_noprof+0x73/0x3c0 [ 561.465189][T16891] ? skb_clone+0x212/0x3a0 [ 561.465220][T16891] skb_clone+0x212/0x3a0 [ 561.465250][T16891] __netlink_deliver_tap+0x404/0x850 [ 561.465286][T16891] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.465310][T16891] netlink_deliver_tap+0x19c/0x1b0 [ 561.465333][T16891] netlink_sendskb+0x68/0x140 [ 561.465367][T16891] netlink_unicast+0x397/0x9e0 [ 561.465402][T16891] ? __asan_memcpy+0x40/0x70 [ 561.465433][T16891] ? __pfx_netlink_unicast+0x10/0x10 [ 561.465475][T16891] netlink_rcv_skb+0x28c/0x470 [ 561.465497][T16891] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 561.465528][T16891] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 561.465563][T16891] ? bpf_lsm_capable+0x9/0x20 [ 561.465587][T16891] ? security_capable+0x7e/0x2e0 [ 561.465624][T16891] nfnetlink_rcv+0x26a/0x2520 [ 561.465658][T16891] ? __dev_queue_xmit+0x1d79/0x3b50 [ 561.465697][T16891] ? __dev_queue_xmit+0x27b/0x3b50 [ 561.465738][T16891] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 561.465768][T16891] ? __pfx___dev_queue_xmit+0x10/0x10 [ 561.465810][T16891] ? ref_tracker_free+0x63a/0x7d0 [ 561.465841][T16891] ? __asan_memcpy+0x40/0x70 [ 561.465862][T16891] ? __pfx_ref_tracker_free+0x10/0x10 [ 561.465890][T16891] ? __skb_clone+0x63/0x7a0 [ 561.465920][T16891] ? __skb_clone+0x483/0x7a0 [ 561.465953][T16891] ? skb_clone+0x246/0x3a0 [ 561.465982][T16891] ? __netlink_deliver_tap+0x807/0x850 [ 561.466016][T16891] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.466044][T16891] ? netlink_deliver_tap+0x2e/0x1b0 [ 561.466074][T16891] netlink_unicast+0x82f/0x9e0 [ 561.466115][T16891] ? __pfx_netlink_unicast+0x10/0x10 [ 561.466148][T16891] ? netlink_sendmsg+0x642/0xb30 [ 561.466168][T16891] ? skb_put+0x11b/0x210 [ 561.466194][T16891] netlink_sendmsg+0x805/0xb30 [ 561.466227][T16891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.466253][T16891] ? aa_sock_msg_perm+0xf1/0x1d0 [ 561.466286][T16891] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 561.466305][T16891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.466326][T16891] __sock_sendmsg+0x219/0x270 [ 561.466359][T16891] ____sys_sendmsg+0x505/0x830 [ 561.466396][T16891] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.466430][T16891] ? import_iovec+0x74/0xa0 [ 561.466458][T16891] ___sys_sendmsg+0x21f/0x2a0 [ 561.466486][T16891] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.466550][T16891] ? __fget_files+0x2a/0x420 [ 561.466577][T16891] ? __fget_files+0x3a0/0x420 [ 561.466616][T16891] __x64_sys_sendmsg+0x19b/0x260 [ 561.466644][T16891] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 561.466681][T16891] ? __pfx_ksys_write+0x10/0x10 [ 561.466701][T16891] ? rcu_is_watching+0x15/0xb0 [ 561.466731][T16891] ? do_syscall_64+0xbe/0x3b0 [ 561.466758][T16891] do_syscall_64+0xfa/0x3b0 [ 561.466777][T16891] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.466796][T16891] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.466817][T16891] ? clear_bhb_loop+0x60/0xb0 [ 561.466841][T16891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.466860][T16891] RIP: 0033:0x7f5f9218eec9 [ 561.466878][T16891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.466895][T16891] RSP: 002b:00007f5f92f78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.466916][T16891] RAX: ffffffffffffffda RBX: 00007f5f923e5fa0 RCX: 00007f5f9218eec9 [ 561.466930][T16891] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 561.466942][T16891] RBP: 00007f5f92f78090 R08: 0000000000000000 R09: 0000000000000000 [ 561.466955][T16891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.466967][T16891] R13: 00007f5f923e6038 R14: 00007f5f923e5fa0 R15: 00007ffcfa693668 [ 561.467000][T16891] [ 561.989924][T16889] netlink: 'syz.1.3720': attribute type 21 has an invalid length. [ 562.153385][T16892] netlink: 'syz.1.3720': attribute type 4 has an invalid length. [ 562.350325][T16892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3720'. [ 562.583622][T16640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.722833][T16640] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.815147][ T8818] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.822397][ T8818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.834325][T16894] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3721'. [ 562.881772][T16893] delete_channel: no stack [ 562.947606][ T8819] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.954865][ T8819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.967600][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.974846][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.274169][T16920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.298893][T16921] netlink: 'syz.3.3727': attribute type 11 has an invalid length. [ 563.308803][T16921] netlink: 'syz.3.3727': attribute type 11 has an invalid length. [ 563.376983][T16920] netlink: 'syz.1.3731': attribute type 10 has an invalid length. [ 563.455800][T16920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3731'. [ 564.042590][T16640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.194178][T16948] netlink: 'syz.5.3735': attribute type 27 has an invalid length. [ 564.229065][T16942] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3736'. [ 564.243846][T16941] delete_channel: no stack [ 564.375697][T16952] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 564.431078][T16640] veth0_vlan: entered promiscuous mode [ 564.445871][T16955] netlink: 'syz.6.3739': attribute type 10 has an invalid length. [ 564.594594][T16955] bridge0: port 5(netdevsim0) entered blocking state [ 564.658726][T16955] bridge0: port 5(netdevsim0) entered disabled state [ 564.712366][T16955] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 564.758586][T16955] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 564.883205][T16640] veth1_vlan: entered promiscuous mode [ 565.054979][T16640] veth0_macvtap: entered promiscuous mode [ 565.083979][T16640] veth1_macvtap: entered promiscuous mode [ 565.149661][T16640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.197040][T16640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.255993][ T8819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.269009][ T8819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.289744][ T8819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.312963][T16967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.316335][ T8819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.398597][T16967] netlink: 'syz.1.3743': attribute type 10 has an invalid length. [ 565.408630][T16967] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3743'. [ 565.623976][ T8822] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.672091][ T8822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.766506][ T8819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.789577][ T8819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.896631][T16984] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3749'. [ 565.931125][T16982] delete_channel: no stack [ 566.033183][T16987] netlink: 'syz.0.3624': attribute type 10 has an invalid length. [ 566.100980][T16987] team0: Device ipvlan1 failed to register rx_handler [ 566.471745][T17007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.528735][T17010] netlink: 'syz.6.3758': attribute type 10 has an invalid length. [ 566.537296][T17010] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3758'. [ 566.624056][T17013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.954203][T17019] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3764'. [ 566.993380][T17018] delete_channel: no stack [ 567.601498][T17046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.761948][T17054] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3776'. [ 567.774158][T17053] delete_channel: no stack [ 567.791783][T17046] netlink: 'syz.3.3773': attribute type 10 has an invalid length. [ 567.809804][T17058] netlink: 'syz.5.3779': attribute type 10 has an invalid length. [ 567.829335][T17046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3773'. [ 567.841554][T17058] veth1_macvtap: left promiscuous mode [ 568.452455][T17087] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3786'. [ 568.496405][T17087] netlink: zone id is out of range [ 568.524689][T17087] netlink: zone id is out of range [ 568.570151][T17087] netlink: zone id is out of range [ 568.575344][T17087] netlink: zone id is out of range [ 568.610888][T17087] netlink: zone id is out of range [ 568.637023][T17087] netlink: zone id is out of range [ 568.660363][T17087] netlink: zone id is out of range [ 568.673383][T17084] netlink: 280 bytes leftover after parsing attributes in process `syz.1.3788'. [ 568.674590][T17087] netlink: zone id is out of range [ 568.730069][T17087] netlink: zone id is out of range [ 568.738893][T17098] lo speed is unknown, defaulting to 1000 [ 568.748087][T17087] netlink: zone id is out of range [ 568.786238][T17098] lo speed is unknown, defaulting to 1000 [ 568.929776][T17101] netlink: 'syz.6.3793': attribute type 3 has an invalid length. [ 568.953904][T17098] lo speed is unknown, defaulting to 1000 [ 568.998773][T17104] FAULT_INJECTION: forcing a failure. [ 568.998773][T17104] name failslab, interval 1, probability 0, space 0, times 0 [ 569.014080][T17101] netlink: 16066 bytes leftover after parsing attributes in process `syz.6.3793'. [ 569.100560][T17104] CPU: 0 UID: 0 PID: 17104 Comm: syz.5.3794 Not tainted syzkaller #0 PREEMPT(full) [ 569.100598][T17104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 569.100611][T17104] Call Trace: [ 569.100620][T17104] [ 569.100631][T17104] dump_stack_lvl+0x189/0x250 [ 569.100665][T17104] ? __pfx____ratelimit+0x10/0x10 [ 569.100687][T17104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 569.100716][T17104] ? __pfx__printk+0x10/0x10 [ 569.100744][T17104] ? __pfx___might_resched+0x10/0x10 [ 569.100777][T17104] should_fail_ex+0x414/0x560 [ 569.100814][T17104] should_failslab+0xa8/0x100 [ 569.100846][T17104] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 569.100875][T17104] ? __alloc_skb+0x112/0x2d0 [ 569.100904][T17104] __alloc_skb+0x112/0x2d0 [ 569.100933][T17104] netlink_ack+0x146/0xa50 [ 569.100979][T17104] netlink_rcv_skb+0x28c/0x470 [ 569.101004][T17104] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 569.101039][T17104] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 569.101076][T17104] ? bpf_lsm_capable+0x9/0x20 [ 569.101103][T17104] ? security_capable+0x7e/0x2e0 [ 569.101142][T17104] nfnetlink_rcv+0x26a/0x2520 [ 569.101179][T17104] ? __dev_queue_xmit+0x1d79/0x3b50 [ 569.101221][T17104] ? __dev_queue_xmit+0x27b/0x3b50 [ 569.101266][T17104] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 569.101297][T17104] ? __pfx___dev_queue_xmit+0x10/0x10 [ 569.101344][T17104] ? ref_tracker_free+0x63a/0x7d0 [ 569.101377][T17104] ? __asan_memcpy+0x40/0x70 [ 569.101399][T17104] ? __pfx_ref_tracker_free+0x10/0x10 [ 569.101428][T17104] ? __skb_clone+0x63/0x7a0 [ 569.101459][T17104] ? perf_trace_lock+0xec/0x3b0 [ 569.101482][T17104] ? __skb_clone+0x483/0x7a0 [ 569.101513][T17104] ? __pfx_perf_trace_lock+0x10/0x10 [ 569.101538][T17104] ? skb_clone+0x246/0x3a0 [ 569.101571][T17104] ? __netlink_deliver_tap+0x807/0x850 [ 569.101599][T17104] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.101630][T17104] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.101663][T17104] netlink_unicast+0x82f/0x9e0 [ 569.101708][T17104] ? __pfx_netlink_unicast+0x10/0x10 [ 569.101743][T17104] ? netlink_sendmsg+0x642/0xb30 [ 569.101763][T17104] ? skb_put+0x11b/0x210 [ 569.101791][T17104] netlink_sendmsg+0x805/0xb30 [ 569.101827][T17104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.101855][T17104] ? aa_sock_msg_perm+0xf1/0x1d0 [ 569.101889][T17104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 569.101909][T17104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.101933][T17104] __sock_sendmsg+0x219/0x270 [ 569.101969][T17104] ____sys_sendmsg+0x505/0x830 [ 569.102003][T17104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.102043][T17104] ? import_iovec+0x74/0xa0 [ 569.102074][T17104] ___sys_sendmsg+0x21f/0x2a0 [ 569.102104][T17104] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.102159][T17104] ? __fget_files+0x2a/0x420 [ 569.102205][T17104] ? __fget_files+0x2a/0x420 [ 569.102233][T17104] ? __fget_files+0x3a0/0x420 [ 569.102276][T17104] __x64_sys_sendmsg+0x19b/0x260 [ 569.102300][T17104] ? perf_trace_run_bpf_submit+0xf9/0x170 [ 569.102335][T17104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.102376][T17104] ? __pfx_ksys_write+0x10/0x10 [ 569.102399][T17104] ? rcu_is_watching+0x15/0xb0 [ 569.102432][T17104] ? do_syscall_64+0xbe/0x3b0 [ 569.102460][T17104] do_syscall_64+0xfa/0x3b0 [ 569.102481][T17104] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.102502][T17104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.102522][T17104] ? clear_bhb_loop+0x60/0xb0 [ 569.102549][T17104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.102569][T17104] RIP: 0033:0x7f5f9218eec9 [ 569.102595][T17104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.102613][T17104] RSP: 002b:00007f5f92f78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.102636][T17104] RAX: ffffffffffffffda RBX: 00007f5f923e5fa0 RCX: 00007f5f9218eec9 [ 569.102651][T17104] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 569.102665][T17104] RBP: 00007f5f92f78090 R08: 0000000000000000 R09: 0000000000000000 [ 569.102677][T17104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.102689][T17104] R13: 00007f5f923e6038 R14: 00007f5f923e5fa0 R15: 00007ffcfa693668 [ 569.102727][T17104] [ 569.811040][T17113] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3795'. [ 569.834515][T17109] netlink: 'syz.6.3796': attribute type 10 has an invalid length. [ 570.001396][T17098] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 570.207929][T17098] lo speed is unknown, defaulting to 1000 [ 570.350217][T17098] lo speed is unknown, defaulting to 1000 [ 570.409234][T17098] lo speed is unknown, defaulting to 1000 [ 570.493098][T17098] lo speed is unknown, defaulting to 1000 [ 570.549647][T17098] lo speed is unknown, defaulting to 1000 [ 570.652371][T17098] lo speed is unknown, defaulting to 1000 [ 570.721027][T17136] netlink: 'syz.6.3806': attribute type 10 has an invalid length. [ 571.677531][T17167] __nla_validate_parse: 1 callbacks suppressed [ 571.677552][T17167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3816'. [ 572.271466][T17184] FAULT_INJECTION: forcing a failure. [ 572.271466][T17184] name failslab, interval 1, probability 0, space 0, times 0 [ 572.284978][T17184] CPU: 1 UID: 0 PID: 17184 Comm: syz.5.3826 Not tainted syzkaller #0 PREEMPT(full) [ 572.285006][T17184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 572.285020][T17184] Call Trace: [ 572.285028][T17184] [ 572.285038][T17184] dump_stack_lvl+0x189/0x250 [ 572.285071][T17184] ? __pfx____ratelimit+0x10/0x10 [ 572.285092][T17184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 572.285119][T17184] ? __pfx__printk+0x10/0x10 [ 572.285136][T17184] ? nfnetlink_rcv+0x26a/0x2520 [ 572.285167][T17184] ? ____sys_sendmsg+0x505/0x830 [ 572.285191][T17184] ? __x64_sys_sendmsg+0x19b/0x260 [ 572.285228][T17184] should_fail_ex+0x414/0x560 [ 572.285263][T17184] should_failslab+0xa8/0x100 [ 572.285294][T17184] kmem_cache_alloc_noprof+0x73/0x3c0 [ 572.285320][T17184] ? skb_clone+0x212/0x3a0 [ 572.285359][T17184] skb_clone+0x212/0x3a0 [ 572.285390][T17184] __netlink_deliver_tap+0x404/0x850 [ 572.285427][T17184] ? netlink_deliver_tap+0x2e/0x1b0 [ 572.285450][T17184] netlink_deliver_tap+0x19c/0x1b0 [ 572.285474][T17184] netlink_sendskb+0x68/0x140 [ 572.285507][T17184] netlink_unicast+0x397/0x9e0 [ 572.285536][T17184] ? __asan_memcpy+0x40/0x70 [ 572.285567][T17184] ? __pfx_netlink_unicast+0x10/0x10 [ 572.285610][T17184] netlink_rcv_skb+0x28c/0x470 [ 572.285633][T17184] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 572.285667][T17184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 572.285701][T17184] ? bpf_lsm_capable+0x9/0x20 [ 572.285726][T17184] ? security_capable+0x7e/0x2e0 [ 572.285763][T17184] nfnetlink_rcv+0x26a/0x2520 [ 572.285797][T17184] ? __dev_queue_xmit+0x1d79/0x3b50 [ 572.285837][T17184] ? __dev_queue_xmit+0x27b/0x3b50 [ 572.285878][T17184] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 572.285909][T17184] ? __pfx___dev_queue_xmit+0x10/0x10 [ 572.285951][T17184] ? ref_tracker_free+0x63a/0x7d0 [ 572.285984][T17184] ? __asan_memcpy+0x40/0x70 [ 572.286004][T17184] ? __pfx_ref_tracker_free+0x10/0x10 [ 572.286033][T17184] ? __skb_clone+0x63/0x7a0 [ 572.286063][T17184] ? __skb_clone+0x483/0x7a0 [ 572.286097][T17184] ? skb_clone+0x246/0x3a0 [ 572.286127][T17184] ? __netlink_deliver_tap+0x807/0x850 [ 572.286149][T17184] ? netlink_deliver_tap+0x2e/0x1b0 [ 572.286178][T17184] ? netlink_deliver_tap+0x2e/0x1b0 [ 572.286209][T17184] netlink_unicast+0x82f/0x9e0 [ 572.286250][T17184] ? __pfx_netlink_unicast+0x10/0x10 [ 572.286284][T17184] ? netlink_sendmsg+0x642/0xb30 [ 572.286304][T17184] ? skb_put+0x11b/0x210 [ 572.286331][T17184] netlink_sendmsg+0x805/0xb30 [ 572.286370][T17184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.286396][T17184] ? aa_sock_msg_perm+0xf1/0x1d0 [ 572.286428][T17184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 572.286448][T17184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.286472][T17184] __sock_sendmsg+0x219/0x270 [ 572.286506][T17184] ____sys_sendmsg+0x505/0x830 [ 572.286538][T17184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.286574][T17184] ? import_iovec+0x74/0xa0 [ 572.286604][T17184] ___sys_sendmsg+0x21f/0x2a0 [ 572.286632][T17184] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.286699][T17184] ? __fget_files+0x2a/0x420 [ 572.286727][T17184] ? __fget_files+0x3a0/0x420 [ 572.286768][T17184] __x64_sys_sendmsg+0x19b/0x260 [ 572.286797][T17184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.286834][T17184] ? __pfx_ksys_write+0x10/0x10 [ 572.286857][T17184] ? rcu_is_watching+0x15/0xb0 [ 572.286887][T17184] ? do_syscall_64+0xbe/0x3b0 [ 572.286914][T17184] do_syscall_64+0xfa/0x3b0 [ 572.286934][T17184] ? lockdep_hardirqs_on+0x9c/0x150 [ 572.286955][T17184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.286976][T17184] ? clear_bhb_loop+0x60/0xb0 [ 572.287001][T17184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.287021][T17184] RIP: 0033:0x7f5f9218eec9 [ 572.287038][T17184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.287057][T17184] RSP: 002b:00007f5f92f78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.287079][T17184] RAX: ffffffffffffffda RBX: 00007f5f923e5fa0 RCX: 00007f5f9218eec9 [ 572.287094][T17184] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 572.287107][T17184] RBP: 00007f5f92f78090 R08: 0000000000000000 R09: 0000000000000000 [ 572.287119][T17184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.287131][T17184] R13: 00007f5f923e6038 R14: 00007f5f923e5fa0 R15: 00007ffcfa693668 [ 572.287165][T17184] [ 573.038238][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'. [ 573.070413][T17181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3822'. [ 573.095918][T17181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3822'. [ 573.184953][T17193] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3824'. [ 573.888938][T17229] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3838'. [ 573.955550][T17236] netlink: 'syz.5.3836': attribute type 13 has an invalid length. [ 573.963836][T17236] netlink: 'syz.5.3836': attribute type 58 has an invalid length. [ 573.972044][T17236] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3836'. [ 573.989058][T17236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3836'. [ 574.019379][T17231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3837'. [ 574.128801][T17241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3841'. [ 574.219539][T17244] netlink: 'syz.1.3843': attribute type 11 has an invalid length. [ 574.631483][T17242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.540232][T17277] hsr_slave_0: left promiscuous mode [ 575.550977][T17277] hsr_slave_1: left promiscuous mode [ 575.778246][T17289] netlink: 'syz.1.3857': attribute type 10 has an invalid length. [ 575.872276][T17289] team0: Device ipvlan1 failed to register rx_handler [ 576.014573][T17295] netlink: 'syz.3.3855': attribute type 10 has an invalid length. [ 576.154785][T17295] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 576.317528][T17305] netlink: 'syz.1.3860': attribute type 1 has an invalid length. [ 576.734345][T17317] net_ratelimit: 76 callbacks suppressed [ 576.734367][T17317] netlink: del zone limit has 4 unknown bytes [ 576.991106][T17334] __nla_validate_parse: 11 callbacks suppressed [ 576.991129][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3870'. [ 577.019525][T17332] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3871'. [ 577.092315][T17336] -1: renamed from syzkaller0 [ 577.352669][T17342] netlink: 'syz.1.3874': attribute type 3 has an invalid length. [ 577.370475][T17342] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3874'. [ 577.394423][T17346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3873'. [ 577.622231][T17342] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3874'. [ 578.308885][T17375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3886'. [ 578.606471][T17389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.701640][T17389] netlink: 'syz.5.3892': attribute type 10 has an invalid length. [ 578.709677][T17389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3892'. [ 579.062119][T17401] netlink: 'syz.5.3897': attribute type 27 has an invalid length. [ 579.094629][T17401] netlink: 164 bytes leftover after parsing attributes in process `syz.5.3897'. [ 579.174953][T17401] netlink: 'syz.5.3897': attribute type 4 has an invalid length. [ 579.253051][T17401] netlink: 'syz.5.3897': attribute type 1 has an invalid length. [ 579.315758][T17401] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.3897'. [ 579.427461][T17401] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3897'. [ 579.752256][T17413] xt_socket: unknown flags 0x40 [ 579.944223][T17423] netlink: 'syz.5.3904': attribute type 2 has an invalid length. [ 579.965703][T17423] netlink: 'syz.5.3904': attribute type 8 has an invalid length. [ 580.208224][T17440] openvswitch: netlink: Flow actions attr not present in new flow. [ 580.216991][T17439] openvswitch: netlink: Flow actions attr not present in new flow. [ 580.344255][T17444] netlink: 'syz.0.3909': attribute type 27 has an invalid length. [ 580.394057][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 582.005749][T17477] __nla_validate_parse: 6 callbacks suppressed [ 582.005770][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3919'. [ 582.185601][T17485] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3924'. [ 582.213701][T17485] openvswitch: netlink: Flow actions attr not present in new flow. [ 582.229647][T17487] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3922'. [ 582.446196][T17490] netlink: 'syz.0.3924': attribute type 27 has an invalid length. [ 583.391368][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3932'. [ 583.401041][T17507] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.3931'. [ 583.791194][T17527] netlink: 16054 bytes leftover after parsing attributes in process `syz.6.3939'. [ 584.002676][T17527] netlink: 'syz.6.3939': attribute type 10 has an invalid length. [ 584.109347][T17527] bond0: (slave bond_slave_0): Releasing backup interface [ 585.368919][T17575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.427887][T17578] netlink: 'syz.3.3954': attribute type 10 has an invalid length. [ 585.435975][T17578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3954'. [ 585.502659][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3957'. [ 585.641055][T17590] FAULT_INJECTION: forcing a failure. [ 585.641055][T17590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 585.660865][T17590] CPU: 0 UID: 0 PID: 17590 Comm: syz.1.3959 Not tainted syzkaller #0 PREEMPT(full) [ 585.660896][T17590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 585.660908][T17590] Call Trace: [ 585.660916][T17590] [ 585.660925][T17590] dump_stack_lvl+0x189/0x250 [ 585.660957][T17590] ? __pfx____ratelimit+0x10/0x10 [ 585.660977][T17590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 585.661004][T17590] ? __pfx__printk+0x10/0x10 [ 585.661036][T17590] ? __might_fault+0xb0/0x130 [ 585.661075][T17590] should_fail_ex+0x414/0x560 [ 585.661108][T17590] _copy_from_user+0x2d/0xb0 [ 585.661133][T17590] ___sys_sendmsg+0x158/0x2a0 [ 585.661161][T17590] ? __pfx____sys_sendmsg+0x10/0x10 [ 585.661224][T17590] ? __fget_files+0x2a/0x420 [ 585.661252][T17590] ? __fget_files+0x3a0/0x420 [ 585.661291][T17590] __x64_sys_sendmsg+0x19b/0x260 [ 585.661319][T17590] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 585.661354][T17590] ? __pfx_ksys_write+0x10/0x10 [ 585.661377][T17590] ? rcu_is_watching+0x15/0xb0 [ 585.661407][T17590] ? do_syscall_64+0xbe/0x3b0 [ 585.661433][T17590] do_syscall_64+0xfa/0x3b0 [ 585.661452][T17590] ? lockdep_hardirqs_on+0x9c/0x150 [ 585.661471][T17590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.661492][T17590] ? clear_bhb_loop+0x60/0xb0 [ 585.661516][T17590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.661536][T17590] RIP: 0033:0x7fa64f38eec9 [ 585.661554][T17590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 585.661572][T17590] RSP: 002b:00007fa6502ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 585.661593][T17590] RAX: ffffffffffffffda RBX: 00007fa64f5e5fa0 RCX: 00007fa64f38eec9 [ 585.661608][T17590] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 585.661622][T17590] RBP: 00007fa6502ce090 R08: 0000000000000000 R09: 0000000000000000 [ 585.661634][T17590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.661647][T17590] R13: 00007fa64f5e6038 R14: 00007fa64f5e5fa0 R15: 00007ffc4f6dbfb8 [ 585.661679][T17590] [ 586.601006][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3968'. [ 586.736098][T17617] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3969'. [ 586.893964][T17618] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.959656][T17618] netlink: 'syz.1.3970': attribute type 10 has an invalid length. [ 588.922929][T17643] FAULT_INJECTION: forcing a failure. [ 588.922929][T17643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.958112][T17643] CPU: 0 UID: 0 PID: 17643 Comm: syz.3.3980 Not tainted syzkaller #0 PREEMPT(full) [ 588.958141][T17643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 588.958154][T17643] Call Trace: [ 588.958163][T17643] [ 588.958171][T17643] dump_stack_lvl+0x189/0x250 [ 588.958205][T17643] ? __pfx____ratelimit+0x10/0x10 [ 588.958227][T17643] ? __pfx_dump_stack_lvl+0x10/0x10 [ 588.958254][T17643] ? __pfx__printk+0x10/0x10 [ 588.958273][T17643] ? __might_fault+0xb0/0x130 [ 588.958303][T17643] ? __might_fault+0xb0/0x130 [ 588.958336][T17643] should_fail_ex+0x414/0x560 [ 588.958372][T17643] _copy_to_iter+0x404/0x1790 [ 588.958399][T17643] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 588.958443][T17643] ? __pfx__copy_to_iter+0x10/0x10 [ 588.958462][T17643] ? __skb_try_recv_from_queue+0x58f/0x730 [ 588.958498][T17643] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 588.958535][T17643] __skb_datagram_iter+0xf8/0x990 [ 588.958564][T17643] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 588.958604][T17643] skb_copy_datagram_iter+0xc5/0x230 [ 588.958734][T17643] netlink_recvmsg+0x2ab/0xa30 [ 588.958782][T17643] ? __pfx_netlink_recvmsg+0x10/0x10 [ 588.958817][T17643] ? aa_sock_msg_perm+0xf1/0x1d0 [ 588.958851][T17643] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 588.958870][T17643] ? security_socket_recvmsg+0x7e/0x2e0 [ 588.958892][T17643] ? __pfx_netlink_recvmsg+0x10/0x10 [ 588.958914][T17643] sock_recvmsg+0x229/0x270 [ 588.958951][T17643] ____sys_recvmsg+0x1c9/0x460 [ 588.958990][T17643] ? __pfx_____sys_recvmsg+0x10/0x10 [ 588.959036][T17643] ? import_iovec+0x74/0xa0 [ 588.959067][T17643] ___sys_recvmsg+0x1b5/0x510 [ 588.959101][T17643] ? __pfx____sys_recvmsg+0x10/0x10 [ 588.959161][T17643] ? __fget_files+0x3a0/0x420 [ 588.959205][T17643] __x64_sys_recvmsg+0x198/0x260 [ 588.959239][T17643] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 588.959279][T17643] ? __pfx_ksys_write+0x10/0x10 [ 588.959303][T17643] ? rcu_is_watching+0x15/0xb0 [ 588.959335][T17643] ? do_syscall_64+0xbe/0x3b0 [ 588.959363][T17643] do_syscall_64+0xfa/0x3b0 [ 588.959385][T17643] ? lockdep_hardirqs_on+0x9c/0x150 [ 588.959416][T17643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.959438][T17643] ? clear_bhb_loop+0x60/0xb0 [ 588.959465][T17643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.959485][T17643] RIP: 0033:0x7fed3678eec9 [ 588.959504][T17643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.959522][T17643] RSP: 002b:00007fed3761f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 588.959545][T17643] RAX: ffffffffffffffda RBX: 00007fed369e5fa0 RCX: 00007fed3678eec9 [ 588.959560][T17643] RDX: 0000000040010102 RSI: 0000200000000240 RDI: 0000000000000003 [ 588.959574][T17643] RBP: 00007fed3761f090 R08: 0000000000000000 R09: 0000000000000000 [ 588.959586][T17643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.959599][T17643] R13: 00007fed369e6038 R14: 00007fed369e5fa0 R15: 00007ffd3162d5f8 [ 588.959636][T17643] [ 589.792321][T17651] __nla_validate_parse: 1 callbacks suppressed [ 589.792374][T17651] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3983'. [ 589.863604][T17648] delete_channel: no stack [ 590.658968][T17667] netlink: 'syz.1.3990': attribute type 40 has an invalid length. [ 590.736018][T17667] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.985946][T17681] FAULT_INJECTION: forcing a failure. [ 590.985946][T17681] name failslab, interval 1, probability 0, space 0, times 0 [ 591.000596][T17681] CPU: 0 UID: 0 PID: 17681 Comm: syz.6.3995 Not tainted syzkaller #0 PREEMPT(full) [ 591.000625][T17681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 591.000638][T17681] Call Trace: [ 591.000647][T17681] [ 591.000656][T17681] dump_stack_lvl+0x189/0x250 [ 591.000688][T17681] ? __pfx____ratelimit+0x10/0x10 [ 591.000709][T17681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.000735][T17681] ? __pfx__printk+0x10/0x10 [ 591.000761][T17681] ? __pfx___might_resched+0x10/0x10 [ 591.000784][T17681] ? fs_reclaim_acquire+0x7d/0x100 [ 591.000819][T17681] should_fail_ex+0x414/0x560 [ 591.000854][T17681] should_failslab+0xa8/0x100 [ 591.000884][T17681] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 591.000910][T17681] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.000928][T17681] ? __alloc_skb+0x112/0x2d0 [ 591.000955][T17681] __alloc_skb+0x112/0x2d0 [ 591.000981][T17681] sock_wmalloc+0xb2/0x130 [ 591.001010][T17681] l2tp_ip_sendmsg+0x1bb/0x1650 [ 591.001041][T17681] ? sock_rps_record_flow+0x19/0x410 [ 591.001075][T17681] ? inet_sendmsg+0x2f4/0x370 [ 591.001102][T17681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.001127][T17681] __sock_sendmsg+0x19c/0x270 [ 591.001161][T17681] ____sys_sendmsg+0x505/0x830 [ 591.001193][T17681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.001229][T17681] ? import_iovec+0x74/0xa0 [ 591.001258][T17681] ___sys_sendmsg+0x21f/0x2a0 [ 591.001286][T17681] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.001353][T17681] ? __fget_files+0x2a/0x420 [ 591.001381][T17681] ? __fget_files+0x3a0/0x420 [ 591.001421][T17681] __x64_sys_sendmsg+0x19b/0x260 [ 591.001456][T17681] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.001492][T17681] ? __pfx_ksys_write+0x10/0x10 [ 591.001515][T17681] ? rcu_is_watching+0x15/0xb0 [ 591.001546][T17681] ? do_syscall_64+0xbe/0x3b0 [ 591.001572][T17681] do_syscall_64+0xfa/0x3b0 [ 591.001592][T17681] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.001611][T17681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.001632][T17681] ? clear_bhb_loop+0x60/0xb0 [ 591.001656][T17681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.001676][T17681] RIP: 0033:0x7f401458eec9 [ 591.001694][T17681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.001712][T17681] RSP: 002b:00007f401548d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.001733][T17681] RAX: ffffffffffffffda RBX: 00007f40147e5fa0 RCX: 00007f401458eec9 [ 591.001749][T17681] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 591.001762][T17681] RBP: 00007f401548d090 R08: 0000000000000000 R09: 0000000000000000 [ 591.001774][T17681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.001786][T17681] R13: 00007f40147e6038 R14: 00007f40147e5fa0 R15: 00007fff04345458 [ 591.001820][T17681] [ 592.066566][T17703] netlink: 'syz.3.4003': attribute type 16 has an invalid length. [ 592.110409][T17703] netlink: 'syz.3.4003': attribute type 17 has an invalid length. [ 592.758954][T17722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4010'. [ 593.286454][T17733] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.396039][T17734] netlink: 'syz.1.4013': attribute type 10 has an invalid length. [ 593.427065][T17734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4013'. [ 593.796729][T17740] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.505710][T17745] netlink: 'syz.6.4016': attribute type 10 has an invalid length. [ 594.554864][T17745] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.4016'. [ 595.360977][T17766] netlink: 'syz.1.4025': attribute type 41 has an invalid length. [ 595.368979][T17766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4025'. [ 597.267237][T17789] netlink: 'syz.1.4032': attribute type 6 has an invalid length. [ 597.330976][T17789] netlink: 'syz.1.4032': attribute type 1 has an invalid length. [ 597.338875][T17789] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4032'. [ 597.697577][T17802] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4036'. [ 597.745726][T17799] delete_channel: no stack [ 598.043834][T17812] syz.1.4041: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 598.137479][T17812] CPU: 1 UID: 0 PID: 17812 Comm: syz.1.4041 Not tainted syzkaller #0 PREEMPT(full) [ 598.137511][T17812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 598.137527][T17812] Call Trace: [ 598.137542][T17812] [ 598.137557][T17812] dump_stack_lvl+0x189/0x250 [ 598.137604][T17812] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.137639][T17812] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.137785][T17812] warn_alloc+0x214/0x310 [ 598.137839][T17812] ? stack_depot_save_flags+0x41b/0x860 [ 598.137895][T17812] ? __pfx_warn_alloc+0x10/0x10 [ 598.137953][T17812] ? kasan_save_track+0x4f/0x80 [ 598.137991][T17812] ? xskq_create+0x56/0x170 [ 598.138010][T17812] ? xsk_init_queue+0xb0/0x110 [ 598.138028][T17812] ? xsk_setsockopt+0x57b/0x8d0 [ 598.138059][T17812] ? do_sock_setsockopt+0x179/0x1b0 [ 598.138083][T17812] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 598.138152][T17812] ? do_syscall_64+0xfa/0x3b0 [ 598.138184][T17812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.138262][T17812] __vmalloc_node_range_noprof+0x125/0x12f0 [ 598.138486][T17812] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 598.138565][T17812] ? __kasan_kmalloc+0x93/0xb0 [ 598.138624][T17812] vmalloc_user_noprof+0xad/0xf0 [ 598.138666][T17812] ? xskq_create+0xbf/0x170 [ 598.138704][T17812] xskq_create+0xbf/0x170 [ 598.138752][T17812] xsk_init_queue+0xb0/0x110 [ 598.138811][T17812] xsk_setsockopt+0x57b/0x8d0 [ 598.138873][T17812] ? __pfx_xsk_setsockopt+0x10/0x10 [ 598.138918][T17812] ? __pfx_aa_sk_perm+0x10/0x10 [ 598.138979][T17812] ? __fget_files+0x2a/0x420 [ 598.139007][T17812] ? aa_sock_opt_perm+0xff/0x1b0 [ 598.139069][T17812] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 598.139091][T17812] ? __pfx_xsk_setsockopt+0x10/0x10 [ 598.139144][T17812] do_sock_setsockopt+0x179/0x1b0 [ 598.139207][T17812] __x64_sys_setsockopt+0x13f/0x1b0 [ 598.139276][T17812] do_syscall_64+0xfa/0x3b0 [ 598.139313][T17812] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.139334][T17812] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 598.139356][T17812] ? clear_bhb_loop+0x60/0xb0 [ 598.139406][T17812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.139430][T17812] RIP: 0033:0x7fa64f38eec9 [ 598.139458][T17812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.139477][T17812] RSP: 002b:00007fa6502ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 598.139501][T17812] RAX: ffffffffffffffda RBX: 00007fa64f5e5fa0 RCX: 00007fa64f38eec9 [ 598.139518][T17812] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000a [ 598.139531][T17812] RBP: 00007fa64f411f91 R08: 0000000000000004 R09: 0000000000000000 [ 598.139545][T17812] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 598.139559][T17812] R13: 00007fa64f5e6038 R14: 00007fa64f5e5fa0 R15: 00007ffc4f6dbfb8 [ 598.139671][T17812] [ 598.139838][T17812] Mem-Info: [ 598.614039][T17812] active_anon:16953 inactive_anon:0 isolated_anon:0 [ 598.614039][T17812] active_file:17064 inactive_file:40098 isolated_file:0 [ 598.614039][T17812] unevictable:768 dirty:224 writeback:50 [ 598.614039][T17812] slab_reclaimable:6531 slab_unreclaimable:103918 [ 598.614039][T17812] mapped:34555 shmem:13220 pagetables:977 [ 598.614039][T17812] sec_pagetables:0 bounce:0 [ 598.614039][T17812] kernel_misc_reclaimable:0 [ 598.614039][T17812] free:1294500 free_pcp:13068 free_cma:0 [ 598.849525][T17815] netlink: 'syz.6.4042': attribute type 29 has an invalid length. [ 598.990849][T17812] Node 0 active_anon:59652kB inactive_anon:0kB active_file:68256kB inactive_file:160196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138268kB dirty:828kB writeback:0kB shmem:42956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11664kB pagetables:3824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 599.038674][T17815] netlink: 'syz.6.4042': attribute type 29 has an invalid length. [ 599.061189][T17812] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 599.112155][T17820] netlink: 'syz.6.4042': attribute type 29 has an invalid length. [ 599.161187][T17815] netlink: 'syz.6.4042': attribute type 29 has an invalid length. [ 599.184338][T17812] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.270699][T17812] lowmem_reserve[]: 0 2505 2506 2506 2506 [ 599.287454][T17812] Node 0 DMA32 free:1261552kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56816kB inactive_anon:0kB active_file:68256kB inactive_file:159876kB unevictable:1536kB writepending:828kB present:3129332kB managed:2565784kB mlocked:0kB bounce:0kB free_pcp:50416kB local_pcp:20896kB free_cma:0kB [ 599.321922][T17820] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4042'. [ 599.386680][T17812] lowmem_reserve[]: 0 0 0 0 0 [ 599.395644][T17812] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 599.411958][T17823] FAULT_INJECTION: forcing a failure. [ 599.411958][T17823] name failslab, interval 1, probability 0, space 0, times 0 [ 599.470198][T17823] CPU: 0 UID: 0 PID: 17823 Comm: syz.0.4043 Not tainted syzkaller #0 PREEMPT(full) [ 599.470227][T17823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 599.470239][T17823] Call Trace: [ 599.470248][T17823] [ 599.470256][T17823] dump_stack_lvl+0x189/0x250 [ 599.470289][T17823] ? __pfx____ratelimit+0x10/0x10 [ 599.470312][T17823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.470340][T17823] ? __pfx__printk+0x10/0x10 [ 599.470366][T17823] ? perf_trace_preemptirq_template+0xa3/0x340 [ 599.470387][T17823] ? exc_page_fault+0x92/0xf0 [ 599.470418][T17823] should_fail_ex+0x414/0x560 [ 599.470458][T17823] should_failslab+0xa8/0x100 [ 599.470490][T17823] kmem_cache_alloc_noprof+0x73/0x3c0 [ 599.470516][T17823] ? dst_alloc+0x105/0x170 [ 599.470550][T17823] dst_alloc+0x105/0x170 [ 599.470585][T17823] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 599.470638][T17823] ? ip_route_output_key_hash+0xde/0x2e0 [ 599.470671][T17823] ip_route_output_key_hash+0x1b9/0x2e0 [ 599.470704][T17823] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 599.470764][T17823] ? l2tp_ip_sendmsg+0x43e/0x1650 [ 599.470805][T17823] ip_route_output_flow+0x2a/0x150 [ 599.470837][T17823] l2tp_ip_sendmsg+0xdef/0x1650 [ 599.470868][T17823] ? l2tp_ip_sendmsg+0x43e/0x1650 [ 599.470912][T17823] __sock_sendmsg+0x19c/0x270 [ 599.470950][T17823] ____sys_sendmsg+0x505/0x830 [ 599.470987][T17823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.471030][T17823] ? import_iovec+0x74/0xa0 [ 599.471062][T17823] ___sys_sendmsg+0x21f/0x2a0 [ 599.471093][T17823] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.471155][T17823] ? __fget_files+0x2a/0x420 [ 599.471205][T17823] ? __fget_files+0x2a/0x420 [ 599.471236][T17823] ? __fget_files+0x3a0/0x420 [ 599.471283][T17823] __x64_sys_sendmsg+0x19b/0x260 [ 599.471314][T17823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.471357][T17823] ? __pfx_ksys_write+0x10/0x10 [ 599.471380][T17823] ? rcu_is_watching+0x15/0xb0 [ 599.471414][T17823] ? do_syscall_64+0xbe/0x3b0 [ 599.471444][T17823] do_syscall_64+0xfa/0x3b0 [ 599.471472][T17823] ? lockdep_hardirqs_on+0x9c/0x150 [ 599.471492][T17823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.471513][T17823] ? clear_bhb_loop+0x60/0xb0 [ 599.471541][T17823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.471561][T17823] RIP: 0033:0x7f0cb618eec9 [ 599.471580][T17823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.471599][T17823] RSP: 002b:00007f0cb6fe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.471630][T17823] RAX: ffffffffffffffda RBX: 00007f0cb63e5fa0 RCX: 00007f0cb618eec9 [ 599.471646][T17823] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 599.471660][T17823] RBP: 00007f0cb6fe9090 R08: 0000000000000000 R09: 0000000000000000 [ 599.471673][T17823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.471686][T17823] R13: 00007f0cb63e6038 R14: 00007f0cb63e5fa0 R15: 00007fffcd4e1288 [ 599.471728][T17823] [ 599.487311][T17812] lowmem_reserve[]: 0 0 0 0 0 [ 599.797059][T17812] Node 1 Normal free:3903196kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10592kB local_pcp:4064kB free_cma:0kB [ 599.837206][T17812] lowmem_reserve[]: 0 0 0 0 0 [ 599.860910][T17812] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 599.914999][T17812] Node 0 DMA32: 902*4kB (ME) 1042*8kB (UME) 665*16kB (UME) 140*32kB (UME) 82*64kB (UME) 101*128kB (UME) 111*256kB (UME) 46*512kB (UME) 12*1024kB (UME) 6*2048kB (UM) 280*4096kB (UM) = 1268664kB [ 599.957987][T17812] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.986597][T17812] Node 1 Normal: 201*4kB (UME) 51*8kB (UME) 36*16kB (UME) 203*32kB (UME) 58*64kB (UME) 12*128kB (UME) 4*256kB (UME) 3*512kB (ME) 2*1024kB (UM) 1*2048kB (E) 948*4096kB (M) = 3903196kB [ 600.034010][T17812] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.047102][T17812] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 600.063510][T17812] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 600.081126][T17812] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 600.100059][T17812] 63077 total pagecache pages [ 600.104990][T17812] 0 pages in swap cache [ 600.109174][T17812] Free swap = 124996kB [ 600.160055][T17812] Total swap = 124996kB [ 600.172448][T17812] 2097051 pages RAM [ 600.176352][T17812] 0 pages HighMem/MovableOnly [ 600.230713][T17812] 423899 pages reserved [ 600.234946][T17812] 0 pages cma reserved [ 600.891532][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4052'. [ 600.994236][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 601.336692][T17859] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4056'. [ 601.366137][T17861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.408087][T17861] netlink: 'syz.0.4057': attribute type 10 has an invalid length. [ 601.416486][T17861] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4057'. [ 601.436107][T17861] batadv0: entered promiscuous mode [ 601.443198][T17861] batadv0: entered allmulticast mode [ 601.466063][T17861] bridge0: port 3(batadv0) entered blocking state [ 601.499578][T17861] bridge0: port 3(batadv0) entered disabled state [ 601.564425][T17861] bridge0: port 3(batadv0) entered blocking state [ 601.571559][T17861] bridge0: port 3(batadv0) entered forwarding state [ 601.641866][T17867] tQ±6ã×\b‹¡Y­4: renamed from lo (while UP) [ 601.855263][ T8813] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 601.864865][ T8813] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 602.073713][T17878] netlink: 'syz.3.4064': attribute type 3 has an invalid length. [ 602.085059][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4064'. [ 602.287650][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 602.297028][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 602.310638][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 602.321093][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 602.329049][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 602.333428][T17885] netlink: 'syz.6.4067': attribute type 29 has an invalid length. [ 602.433784][T17893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4069'. [ 602.485281][ T8813] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.614455][T17899] netlink: 'syz.6.4067': attribute type 29 has an invalid length. [ 602.703948][ T8813] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.757661][T17899] netlink: 'syz.6.4067': attribute type 29 has an invalid length. [ 602.772455][T17886] lo speed is unknown, defaulting to 1000 [ 602.903992][ T8813] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.079049][T17911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 603.292171][T17914] netlink: 'syz.0.4076': attribute type 27 has an invalid length. [ 603.423139][ T8813] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.466147][T17918] FAULT_INJECTION: forcing a failure. [ 603.466147][T17918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.467446][T17918] [ 603.467457][T17918] ====================================================== [ 603.467467][T17918] WARNING: possible circular locking dependency detected [ 603.467482][T17918] syzkaller #0 Not tainted [ 603.467493][T17918] ------------------------------------------------------ [ 603.467501][T17918] syz.6.4078/17918 is trying to acquire lock: [ 603.467513][T17918] ffffffff8dd2e920 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 603.467574][T17918] [ 603.467574][T17918] but task is already holding lock: [ 603.467581][T17918] ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 603.467627][T17918] [ 603.467627][T17918] which lock already depends on the new lock. [ 603.467627][T17918] [ 603.467634][T17918] [ 603.467634][T17918] the existing dependency chain (in reverse order) is: [ 603.467642][T17918] [ 603.467642][T17918] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 603.467669][T17918] lock_acquire+0x120/0x360 [ 603.467688][T17918] _raw_spin_lock_nested+0x32/0x50 [ 603.467707][T17918] raw_spin_rq_lock_nested+0x2a/0x140 [ 603.467726][T17918] task_rq_lock+0xbc/0x470 [ 603.467745][T17918] cgroup_move_task+0x92/0x2a0 [ 603.467768][T17918] css_set_move_task+0x658/0x9e0 [ 603.467794][T17918] cgroup_post_fork+0x1ef/0x790 [ 603.467818][T17918] copy_process+0x3862/0x3c00 [ 603.467841][T17918] kernel_clone+0x21e/0x840 [ 603.467864][T17918] user_mode_thread+0xdd/0x140 [ 603.467887][T17918] rest_init+0x23/0x300 [ 603.467910][T17918] start_kernel+0x3ae/0x410 [ 603.467933][T17918] x86_64_start_reservations+0x24/0x30 [ 603.467951][T17918] x86_64_start_kernel+0x143/0x1c0 [ 603.467968][T17918] common_startup_64+0x13e/0x147 [ 603.467997][T17918] [ 603.467997][T17918] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 603.468031][T17918] lock_acquire+0x120/0x360 [ 603.468049][T17918] _raw_spin_lock_irqsave+0xa7/0xf0 [ 603.468077][T17918] try_to_wake_up+0x67/0x12b0 [ 603.468103][T17918] __wake_up_common_lock+0x137/0x1f0 [ 603.468132][T17918] tty_port_default_wakeup+0xa2/0xf0 [ 603.468155][T17918] serial8250_tx_chars+0x72e/0x970 [ 603.468174][T17918] serial8250_handle_irq+0x633/0xbb0 [ 603.468194][T17918] serial8250_default_handle_irq+0xbf/0x1e0 [ 603.468218][T17918] serial8250_interrupt+0x8d/0x160 [ 603.468245][T17918] __handle_irq_event_percpu+0x292/0xab0 [ 603.468273][T17918] handle_irq_event+0x8b/0x1e0 [ 603.468299][T17918] handle_edge_irq+0x23b/0xa10 [ 603.468322][T17918] __common_interrupt+0x141/0x1f0 [ 603.468341][T17918] common_interrupt+0xb6/0xe0 [ 603.468366][T17918] asm_common_interrupt+0x26/0x40 [ 603.468384][T17918] pv_native_safe_halt+0x13/0x20 [ 603.468401][T17918] default_idle+0x13/0x20 [ 603.468422][T17918] default_idle_call+0x73/0xb0 [ 603.468444][T17918] do_idle+0x1e7/0x510 [ 603.468463][T17918] cpu_startup_entry+0x44/0x60 [ 603.468484][T17918] rest_init+0x2de/0x300 [ 603.468507][T17918] start_kernel+0x3ae/0x410 [ 603.468529][T17918] x86_64_start_reservations+0x24/0x30 [ 603.468547][T17918] x86_64_start_kernel+0x143/0x1c0 [ 603.468563][T17918] common_startup_64+0x13e/0x147 [ 603.468591][T17918] [ 603.468591][T17918] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 603.468618][T17918] lock_acquire+0x120/0x360 [ 603.468647][T17918] _raw_spin_lock_irqsave+0xa7/0xf0 [ 603.468674][T17918] __wake_up_common_lock+0x2f/0x1f0 [ 603.468700][T17918] tty_port_default_wakeup+0xa2/0xf0 [ 603.468721][T17918] serial8250_tx_chars+0x72e/0x970 [ 603.468739][T17918] serial8250_handle_irq+0x633/0xbb0 [ 603.468757][T17918] serial8250_default_handle_irq+0xbf/0x1e0 [ 603.468781][T17918] serial8250_interrupt+0x8d/0x160 [ 603.468807][T17918] __handle_irq_event_percpu+0x292/0xab0 [ 603.468834][T17918] handle_irq_event+0x8b/0x1e0 [ 603.468858][T17918] handle_edge_irq+0x23b/0xa10 [ 603.468881][T17918] __common_interrupt+0x141/0x1f0 [ 603.468898][T17918] common_interrupt+0xb6/0xe0 [ 603.468921][T17918] asm_common_interrupt+0x26/0x40 [ 603.468939][T17918] pv_native_safe_halt+0x13/0x20 [ 603.468955][T17918] default_idle+0x13/0x20 [ 603.468975][T17918] default_idle_call+0x73/0xb0 [ 603.468996][T17918] do_idle+0x1e7/0x510 [ 603.469015][T17918] cpu_startup_entry+0x44/0x60 [ 603.469041][T17918] rest_init+0x2de/0x300 [ 603.469062][T17918] start_kernel+0x3ae/0x410 [ 603.469084][T17918] x86_64_start_reservations+0x24/0x30 [ 603.469101][T17918] x86_64_start_kernel+0x143/0x1c0 [ 603.469117][T17918] common_startup_64+0x13e/0x147 [ 603.469144][T17918] [ 603.469144][T17918] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 603.469170][T17918] lock_acquire+0x120/0x360 [ 603.469186][T17918] _raw_spin_lock_irqsave+0xa7/0xf0 [ 603.469213][T17918] serial8250_console_write+0x17e/0x1ba0 [ 603.469234][T17918] console_flush_all+0x728/0xc40 [ 603.469259][T17918] console_unlock+0xc4/0x270 [ 603.469280][T17918] vprintk_emit+0x5b7/0x7a0 [ 603.469302][T17918] _printk+0xcf/0x120 [ 603.469317][T17918] register_console+0xa8b/0xf90 [ 603.469341][T17918] univ8250_console_init+0x3a/0x70 [ 603.469359][T17918] console_init+0x10e/0x430 [ 603.469386][T17918] start_kernel+0x254/0x410 [ 603.469408][T17918] x86_64_start_reservations+0x24/0x30 [ 603.469425][T17918] x86_64_start_kernel+0x143/0x1c0 [ 603.469440][T17918] common_startup_64+0x13e/0x147 [ 603.469467][T17918] [ 603.469467][T17918] -> #0 (console_owner){-...}-{0:0}: [ 603.469493][T17918] validate_chain+0xb9b/0x2140 [ 603.469515][T17918] __lock_acquire+0xab9/0xd20 [ 603.469532][T17918] lock_acquire+0x120/0x360 [ 603.469549][T17918] console_flush_all+0x6d2/0xc40 [ 603.469574][T17918] console_unlock+0xc4/0x270 [ 603.469595][T17918] vprintk_emit+0x5b7/0x7a0 [ 603.469616][T17918] _printk+0xcf/0x120 [ 603.469631][T17918] should_fail_ex+0x3f5/0x560 [ 603.469656][T17918] strncpy_from_user+0x36/0x290 [ 603.469680][T17918] strncpy_from_user_nofault+0x72/0x150 [ 603.469700][T17918] bpf_probe_read_compat_str+0xe2/0x180 [ 603.469722][T17918] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 603.469737][T17918] bpf_trace_run4+0x28e/0x4a0 [ 603.469764][T17918] __bpf_trace_sched_switch+0x17a/0x1e0 [ 603.469790][T17918] __traceiter_sched_switch+0x9a/0xd0 [ 603.469817][T17918] __schedule+0x238f/0x4cc0 [ 603.469844][T17918] preempt_schedule_irq+0xb5/0x150 [ 603.469860][T17918] irqentry_exit+0x6f/0x90 [ 603.469874][T17918] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 603.469892][T17918] skb_dst+0x0/0xd0 [ 603.469916][T17918] dst_output+0x10a/0x1c0 [ 603.469937][T17918] __ip_queue_xmit+0x1106/0x1b00 [ 603.469960][T17918] l2tp_ip_sendmsg+0x663/0x1650 [ 603.469986][T17918] __sock_sendmsg+0x19c/0x270 [ 603.470012][T17918] ____sys_sendmsg+0x505/0x830 [ 603.470039][T17918] ___sys_sendmsg+0x21f/0x2a0 [ 603.470059][T17918] __x64_sys_sendmsg+0x19b/0x260 [ 603.470081][T17918] do_syscall_64+0xfa/0x3b0 [ 603.470099][T17918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.470117][T17918] [ 603.470117][T17918] other info that might help us debug this: [ 603.470117][T17918] [ 603.470124][T17918] Chain exists of: [ 603.470124][T17918] console_owner --> &p->pi_lock --> &rq->__lock [ 603.470124][T17918] [ 603.470155][T17918] Possible unsafe locking scenario: [ 603.470155][T17918] [ 603.470161][T17918] CPU0 CPU1 [ 603.470167][T17918] ---- ---- [ 603.470173][T17918] lock(&rq->__lock); [ 603.470185][T17918] lock(&p->pi_lock); [ 603.470200][T17918] lock(&rq->__lock); [ 603.470214][T17918] lock(console_owner); [ 603.470227][T17918] [ 603.470227][T17918] *** DEADLOCK *** [ 603.470227][T17918] [ 603.470233][T17918] 7 locks held by syz.6.4078/17918: [ 603.470245][T17918] #0: ffff888054125658 (sk_lock-AF_INET){+.+.}-{0:0}, at: l2tp_ip_sendmsg+0x34/0x1650 [ 603.470299][T17918] #1: ffffffff8dd3a960 (rcu_read_lock){....}-{1:3}, at: l2tp_ip_sendmsg+0x43e/0x1650 [ 603.470352][T17918] #2: ffffffff8dd3a960 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00 [ 603.470402][T17918] #3: ffff8880b8839fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 603.470448][T17918] #4: ffffffff8dd3a960 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 603.470503][T17918] #5: ffffffff8dd2e980 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 603.470545][T17918] #6: ffffffff8dc16250 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 603.470598][T17918] [ 603.470598][T17918] stack backtrace: [ 603.470608][T17918] CPU: 0 UID: 0 PID: 17918 Comm: syz.6.4078 Not tainted syzkaller #0 PREEMPT(full) [ 603.470631][T17918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 603.470644][T17918] Call Trace: [ 603.470651][T17918] [ 603.470659][T17918] dump_stack_lvl+0x189/0x250 [ 603.470689][T17918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.470714][T17918] ? __pfx__printk+0x10/0x10 [ 603.470733][T17918] ? print_lock_name+0xde/0x100 [ 603.470765][T17918] print_circular_bug+0x2ee/0x310 [ 603.470793][T17918] check_noncircular+0x134/0x160 [ 603.470822][T17918] validate_chain+0xb9b/0x2140 [ 603.470859][T17918] __lock_acquire+0xab9/0xd20 [ 603.470882][T17918] ? console_flush_all+0x13a/0xc40 [ 603.470908][T17918] lock_acquire+0x120/0x360 [ 603.470926][T17918] ? console_flush_all+0x13a/0xc40 [ 603.470957][T17918] ? do_raw_spin_unlock+0x122/0x240 [ 603.470984][T17918] ? console_flush_all+0x13a/0xc40 [ 603.471012][T17918] console_flush_all+0x6d2/0xc40 [ 603.471044][T17918] ? console_flush_all+0x13a/0xc40 [ 603.471072][T17918] ? console_flush_all+0x13a/0xc40 [ 603.471103][T17918] ? __pfx_console_flush_all+0x10/0x10 [ 603.471135][T17918] ? is_printk_cpu_sync_owner+0x32/0x40 [ 603.471167][T17918] console_unlock+0xc4/0x270 [ 603.471193][T17918] ? __pfx_console_unlock+0x10/0x10 [ 603.471219][T17918] ? is_printk_cpu_sync_owner+0x32/0x40 [ 603.471252][T17918] vprintk_emit+0x5b7/0x7a0 [ 603.471277][T17918] ? __pfx_vprintk_emit+0x10/0x10 [ 603.471305][T17918] ? __lock_acquire+0xab9/0xd20 [ 603.471330][T17918] _printk+0xcf/0x120 [ 603.471347][T17918] ? __pfx____ratelimit+0x10/0x10 [ 603.471366][T17918] ? __pfx__printk+0x10/0x10 [ 603.471391][T17918] should_fail_ex+0x3f5/0x560 [ 603.471420][T17918] strncpy_from_user+0x36/0x290 [ 603.471449][T17918] strncpy_from_user_nofault+0x72/0x150 [ 603.471472][T17918] bpf_probe_read_compat_str+0xe2/0x180 [ 603.471498][T17918] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 603.471515][T17918] bpf_trace_run4+0x28e/0x4a0 [ 603.471545][T17918] ? bpf_trace_run4+0x19c/0x4a0 [ 603.471576][T17918] ? __pfx_bpf_trace_run4+0x10/0x10 [ 603.471603][T17918] ? sched_clock_cpu+0x74/0x430 [ 603.471627][T17918] ? trace_pelt_se_tp+0x39/0x130 [ 603.471654][T17918] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 603.471684][T17918] __bpf_trace_sched_switch+0x17a/0x1e0 [ 603.471714][T17918] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 603.471744][T17918] ? psi_group_change+0xab8/0x1050 [ 603.471771][T17918] ? __schedule+0x22e9/0x4cc0 [ 603.471803][T17918] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 603.471834][T17918] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 603.471863][T17918] __traceiter_sched_switch+0x9a/0xd0 [ 603.471893][T17918] __schedule+0x238f/0x4cc0 [ 603.471924][T17918] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 603.471955][T17918] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 603.471987][T17918] ? perf_trace_preemptirq_template+0xa3/0x340 [ 603.472006][T17918] ? __local_bh_enable_ip+0xce/0x1c0 [ 603.472035][T17918] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 603.472056][T17918] ? __lock_acquire+0xab9/0xd20 [ 603.472075][T17918] ? __pfx___schedule+0x10/0x10 [ 603.472105][T17918] ? __lock_acquire+0xab9/0xd20 [ 603.472131][T17918] ? preempt_schedule_irq+0xaa/0x150 [ 603.472152][T17918] preempt_schedule_irq+0xb5/0x150 [ 603.472170][T17918] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 603.472194][T17918] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 603.472220][T17918] irqentry_exit+0x6f/0x90 [ 603.472238][T17918] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 603.472257][T17918] RIP: 0010:skb_dst+0x0/0xd0 [ 603.472284][T17918] Code: 89 f0 eb 8d 89 d9 80 e1 07 80 c1 03 38 c1 7c c3 48 89 df e8 f2 f0 77 f8 eb b9 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 54 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 [ 603.472302][T17918] RSP: 0018:ffffc9000b2e7858 EFLAGS: 00000283 [ 603.472319][T17918] RAX: ffffffff89aa33e0 RBX: ffff888060a368c0 RCX: ffff888060301e40 [ 603.472334][T17918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888060a368c0 [ 603.472347][T17918] RBP: ffff88805cd15400 R08: ffff888060301e40 R09: 0000000000000004 [ 603.472362][T17918] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88805cd15430 [ 603.472374][T17918] R13: dffffc0000000000 R14: ffff888060a36918 R15: ffff888026b94900 [ 603.472394][T17918] ? __pfx_ip_output+0x10/0x10 [ 603.472423][T17918] ? __ip_local_out+0x4db/0x600 [ 603.472446][T17918] dst_output+0x10a/0x1c0 [ 603.472471][T17918] ? __ip_queue_xmit+0x63/0x1b00 [ 603.472495][T17918] __ip_queue_xmit+0x1106/0x1b00 [ 603.472528][T17918] ? __ip_queue_xmit+0x63/0x1b00 [ 603.472554][T17918] ? xfrm_lookup_route+0x103/0x1c0 [ 603.472584][T17918] l2tp_ip_sendmsg+0x663/0x1650 [ 603.472617][T17918] ? l2tp_ip_sendmsg+0x43e/0x1650 [ 603.472650][T17918] __sock_sendmsg+0x19c/0x270 [ 603.472680][T17918] ____sys_sendmsg+0x505/0x830 [ 603.472706][T17918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.472735][T17918] ? import_iovec+0x74/0xa0 [ 603.472760][T17918] ___sys_sendmsg+0x21f/0x2a0 [ 603.472785][T17918] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.472827][T17918] ? __fget_files+0x2a/0x420 [ 603.472855][T17918] ? __fget_files+0x3a0/0x420 [ 603.472887][T17918] __x64_sys_sendmsg+0x19b/0x260 [ 603.472913][T17918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.472942][T17918] ? __pfx_ksys_write+0x10/0x10 [ 603.472965][T17918] ? rcu_is_watching+0x15/0xb0 [ 603.472991][T17918] ? do_syscall_64+0xbe/0x3b0 [ 603.473014][T17918] do_syscall_64+0xfa/0x3b0 [ 603.473040][T17918] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.473060][T17918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.473079][T17918] ? clear_bhb_loop+0x60/0xb0 [ 603.473102][T17918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.473121][T17918] RIP: 0033:0x7f401458eec9 [ 603.473137][T17918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.473154][T17918] RSP: 002b:00007f401548d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.473174][T17918] RAX: ffffffffffffffda RBX: 00007f40147e5fa0 RCX: 00007f401458eec9 [ 603.473188][T17918] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 603.473202][T17918] RBP: 00007f401548d090 R08: 0000000000000000 R09: 0000000000000000 [ 603.473215][T17918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.473226][T17918] R13: 00007f40147e6038 R14: 00007f40147e5fa0 R15: 00007fff04345458 [ 603.473251][T17918] [ 604.941209][T17918] CPU: 0 UID: 0 PID: 17918 Comm: syz.6.4078 Not tainted syzkaller #0 PREEMPT(full) [ 604.941229][T17918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 604.941238][T17918] Call Trace: [ 604.941248][T17918] [ 604.941255][T17918] dump_stack_lvl+0x189/0x250 [ 604.941278][T17918] ? __pfx____ratelimit+0x10/0x10 [ 604.941293][T17918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.941310][T17918] ? __pfx__printk+0x10/0x10 [ 604.941328][T17918] should_fail_ex+0x414/0x560 [ 604.941351][T17918] strncpy_from_user+0x36/0x290 [ 604.941371][T17918] strncpy_from_user_nofault+0x72/0x150 [ 604.941389][T17918] bpf_probe_read_compat_str+0xe2/0x180 [ 604.941410][T17918] bpf_prog_573c5a647519ba93+0x3e/0x44 [ 604.941423][T17918] bpf_trace_run4+0x28e/0x4a0 [ 604.941445][T17918] ? bpf_trace_run4+0x19c/0x4a0 [ 604.941466][T17918] ? __pfx_bpf_trace_run4+0x10/0x10 [ 604.941486][T17918] ? sched_clock_cpu+0x74/0x430 [ 604.941504][T17918] ? trace_pelt_se_tp+0x39/0x130 [ 604.941523][T17918] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 604.941546][T17918] __bpf_trace_sched_switch+0x17a/0x1e0 [ 604.941567][T17918] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 604.941587][T17918] ? psi_group_change+0xab8/0x1050 [ 604.941608][T17918] ? __schedule+0x22e9/0x4cc0 [ 604.941630][T17918] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 604.941652][T17918] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 604.941672][T17918] __traceiter_sched_switch+0x9a/0xd0 [ 604.941695][T17918] __schedule+0x238f/0x4cc0 [ 604.941717][T17918] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 604.941739][T17918] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 604.941763][T17918] ? perf_trace_preemptirq_template+0xa3/0x340 [ 604.941776][T17918] ? __local_bh_enable_ip+0xce/0x1c0 [ 604.941792][T17918] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 604.941807][T17918] ? __lock_acquire+0xab9/0xd20 [ 604.941821][T17918] ? __pfx___schedule+0x10/0x10 [ 604.941842][T17918] ? __lock_acquire+0xab9/0xd20 [ 604.941860][T17918] ? preempt_schedule_irq+0xaa/0x150 [ 604.941874][T17918] preempt_schedule_irq+0xb5/0x150 [ 604.941891][T17918] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 604.941908][T17918] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 604.941927][T17918] irqentry_exit+0x6f/0x90 [ 604.941940][T17918] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.941956][T17918] RIP: 0010:skb_dst+0x0/0xd0 [ 604.941976][T17918] Code: 89 f0 eb 8d 89 d9 80 e1 07 80 c1 03 38 c1 7c c3 48 89 df e8 f2 f0 77 f8 eb b9 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 54 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 [ 604.941989][T17918] RSP: 0018:ffffc9000b2e7858 EFLAGS: 00000283 [ 604.942003][T17918] RAX: ffffffff89aa33e0 RBX: ffff888060a368c0 RCX: ffff888060301e40 [ 604.942014][T17918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888060a368c0 [ 604.942023][T17918] RBP: ffff88805cd15400 R08: ffff888060301e40 R09: 0000000000000004 [ 604.942033][T17918] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88805cd15430 [ 604.942042][T17918] R13: dffffc0000000000 R14: ffff888060a36918 R15: ffff888026b94900 [ 604.942056][T17918] ? __pfx_ip_output+0x10/0x10 [ 604.942076][T17918] ? __ip_local_out+0x4db/0x600 [ 604.942093][T17918] dst_output+0x10a/0x1c0 [ 604.942110][T17918] ? __ip_queue_xmit+0x63/0x1b00 [ 604.942128][T17918] __ip_queue_xmit+0x1106/0x1b00 [ 604.942147][T17918] ? __ip_queue_xmit+0x63/0x1b00 [ 604.942165][T17918] ? xfrm_lookup_route+0x103/0x1c0 [ 604.942187][T17918] l2tp_ip_sendmsg+0x663/0x1650 [ 604.942208][T17918] ? l2tp_ip_sendmsg+0x43e/0x1650 [ 604.942232][T17918] __sock_sendmsg+0x19c/0x270 [ 604.942255][T17918] ____sys_sendmsg+0x505/0x830 [ 604.942274][T17918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.942295][T17918] ? import_iovec+0x74/0xa0 [ 604.942313][T17918] ___sys_sendmsg+0x21f/0x2a0 [ 604.942331][T17918] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.942362][T17918] ? __fget_files+0x2a/0x420 [ 604.942381][T17918] ? __fget_files+0x3a0/0x420 [ 604.942405][T17918] __x64_sys_sendmsg+0x19b/0x260 [ 604.942423][T17918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.942444][T17918] ? __pfx_ksys_write+0x10/0x10 [ 604.942460][T17918] ? rcu_is_watching+0x15/0xb0 [ 604.942478][T17918] ? do_syscall_64+0xbe/0x3b0 [ 604.942495][T17918] do_syscall_64+0xfa/0x3b0 [ 604.942509][T17918] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.942522][T17918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.942535][T17918] ? clear_bhb_loop+0x60/0xb0 [ 604.942551][T17918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.942565][T17918] RIP: 0033:0x7f401458eec9 [ 604.942578][T17918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.942589][T17918] RSP: 002b:00007f401548d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.942603][T17918] RAX: ffffffffffffffda RBX: 00007f40147e5fa0 RCX: 00007f401458eec9 [ 604.942613][T17918] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 604.942622][T17918] RBP: 00007f401548d090 R08: 0000000000000000 R09: 0000000000000000 [ 604.942631][T17918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.942639][T17918] R13: 00007f40147e6038 R14: 00007f40147e5fa0 R15: 00007fff04345458 [ 604.942656][T17918] [ 605.650003][ T5852] Bluetooth: hci0: command tx timeout [ 605.903028][T17886] chnl_net:caif_netlink_parms(): no params data found [ 605.913535][ T8813] bridge0: port 3(batadv0) entered disabled state [ 605.922014][ T8813] bridge_slave_1: left allmulticast mode [ 605.927707][ T8813] bridge_slave_1: left promiscuous mode [ 605.933629][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.942187][ T8813] bridge_slave_0: left allmulticast mode [ 605.947871][ T8813] bridge_slave_0: left promiscuous mode [ 605.953882][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.076500][ T8813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.087657][ T8813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.098257][ T8813] bond0 (unregistering): Released all slaves [ 606.145818][T17886] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.153613][T17886] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.163567][T17886] bridge_slave_0: entered allmulticast mode [ 606.170929][T17886] bridge_slave_0: entered promiscuous mode [ 606.178749][T17886] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.186213][T17886] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.193947][T17886] bridge_slave_1: entered allmulticast mode [ 606.201388][T17886] bridge_slave_1: entered promiscuous mode [ 606.238940][T17886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.250941][T17886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 606.281740][T17886] team0: Port device team_slave_0 added [ 606.298851][T17886] team0: Port device team_slave_1 added [ 606.322590][T17886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.329730][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.356007][T17886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.368724][T17886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.375948][T17886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.403598][T17886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.423896][ T8813] hsr_slave_0: left promiscuous mode [ 606.429671][ T8813] hsr_slave_1: left promiscuous mode [ 606.435517][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.443079][ T8813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.451394][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.458833][ T8813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.469743][ T8813] veth0_macvtap: left promiscuous mode [ 606.478365][ T8813] veth1_vlan: left promiscuous mode [ 606.484105][ T8813] veth0_vlan: left promiscuous mode [ 606.639420][ T8813] team0 (unregistering): Port device team_slave_1 removed [ 606.667113][ T8813] team0 (unregistering): Port device team_slave_0 removed [ 606.789432][T17886] hsr_slave_0: entered promiscuous mode [ 606.798282][T17886] hsr_slave_1: entered promiscuous mode [ 606.805113][T17886] debugfs: 'hsr0' already exists in 'hsr' [ 606.811711][T17886] Cannot create hsr debugfs directory [ 606.934117][T17886] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 606.948211][T17886] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 606.957544][T17886] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 606.967804][T17886] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 607.026643][T17886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.044321][T17886] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.054449][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.061604][ T8821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.075238][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.082408][ T8821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.219426][T17886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.383407][T17886] veth0_vlan: entered promiscuous mode [ 607.394164][T17886] veth1_vlan: entered promiscuous mode [ 607.416995][T17886] veth0_macvtap: entered promiscuous mode [ 607.426398][T17886] veth1_macvtap: entered promiscuous mode [ 607.443621][T17886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.455954][T17886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 607.468008][ T8813] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.477336][ T8824] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.488006][ T8824] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.501203][ T8824] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.525569][T17886] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 607.547839][ T8821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.549565][T17886] ieee80211 phy43: Selected rate control algorithm 'minstrel_ht' [ 607.556197][ T8821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.587835][ T8821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.596766][ T8821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.670034][ T51] Bluetooth: hci0: command tx timeout [ 609.750016][ T51] Bluetooth: hci0: command tx timeout [ 611.830114][ T51] Bluetooth: hci0: command tx timeout