last executing test programs: 5.599106964s ago: executing program 4 (id=840): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f085", 0x2}], 0x1}, 0x200c8061) socket$kcm(0x1e, 0x1, 0x0) 5.590431142s ago: executing program 3 (id=841): r0 = socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000010000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x118fa, 0x8, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) 5.329026551s ago: executing program 3 (id=844): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e50200"/32], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x4, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1c1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) 5.311015421s ago: executing program 4 (id=845): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x32}, 0xa, @in=@broadcast, 0x0, 0x1, 0x0, 0x0, 0x6000000}]}]}, 0x17c}}, 0x0) 5.125853893s ago: executing program 4 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000c80)="d8000000140081044e81f782db44b904022008f110000000040000a118000200e000000e00000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f8ab40e4c60b602661e4f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d58e91942a4dedf49278a9f022a22f899843004482eab5f87c537b4f9da6", 0xe8}], 0x1, 0x0, 0x0, 0x7400}, 0x20008890) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x71, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000300), 0x0, 0x47, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x0, 0x0, &(0x7f0000000400), 0x8, 0x4c, 0x8, 0x2d, 0x0}}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000001280), 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) r5 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r5, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000180)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x18}, 0x4000081) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2e, 0xfffffffffffffcf6, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000007006558", 0x0, 0x25, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001380)=@o_path={&(0x7f0000001340)='./file0\x00'}, 0x18) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000804) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a00005a27af542440d3b0310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c000280ff000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000010500000a3c0000000c0a010400810000000000000a0000070900020073797a317f0f00000900010073797a310000000010000380"], 0x64}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1d, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES8=r5, @ANYBLOB="00000000000000f8b706000014000000b70300e5ffffffff8400000044070000bca900000000000035090100000100009500000000000000bf98000000000000560800000100000000009500"/96], &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xe84db48b0225b623, '\x00', 0x0, @lsm=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @value=r2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x9, 0x0, 0x800000, 0xe1b2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.119552723s ago: executing program 2 (id=849): r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000001ec0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x8}, 0x5, 0xf7, 0x7, 0x2, 0xa, 'syz0\x00', "233db0b0906ebaa7784e00fffb61b17abd928eae016b7405ebb16fdd36fbd117", "3ac829ed2fd7d61ae00aa850874c0687028647730d7178f671b2b33b424d763e", [{0x8000, 0x2, {0x0, 0x10000}}, {0xe7fb, 0x2, {0x0, 0x6}}, {0x1, 0x5, {0x0, 0xb8d90000}}, {0xd, 0x5633, {0x0, 0x8}}, {0x8, 0x5ad, {0x3, 0x4}}, {0x6, 0x7, {0x1, 0x33}}, {0x66d9, 0x73, {0x3, 0x2}}, {0x3, 0x200, {0x1, 0x2}}, {0x73c, 0x4, {0x1, 0x5}}, {0x101, 0x2000, {0x1, 0x7}}, {0xff, 0xf, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x1}}, {0x9, 0x6, {0x1, 0x5}}, {0x9, 0xa3, {0x2, 0xd1fa}}, {0x8001, 0x4, {0x3, 0x8}}, {0x1b, 0xcf4f, {0x1, 0x5}}, {0x401, 0x9, {0x2, 0xfffffffc}}, {0x7fff, 0x1, {0x1, 0x3ff}}, {0x8000, 0x1, {0x2, 0x7ff}}, {0x81, 0x7, {0x0, 0x7}}, {0xd4, 0xb, {0x3, 0xf}}, {0xc53, 0xb553, {0x2, 0x3}}, {0xc1, 0x101, {0x1, 0x221}}, {0x800, 0x8, {0x3, 0x6}}, {0x66, 0xfff, {0x1, 0xa7c}}, {0x6d1, 0x2, {0x1, 0x2}}, {0x6, 0x2, {0x3, 0x2}}, {0x1, 0x7ff, {0x3, 0x7}}, {0x80, 0x6, {0x4, 0x3}}, {0x3, 0x2, {0x2, 0x7}}, {0x4, 0x2, {0x2, 0x2}}, {0xfffd, 0x47, {0x1, 0x80000000}}, {0xe, 0x0, {0x1, 0x9}}, {0x7ff, 0x6, {0x0, 0x8000}}, {0xb, 0x4, {0x3}}, {0x5, 0x9, {0x1, 0x3}}, {0x4, 0x7, {0x2, 0x4}}, {0xc8b4, 0x1, {0x3, 0x4}}, {0x5, 0x6, {0x1}}, {0x2, 0x0, {0x0, 0x2495}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000001000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 4.51532445s ago: executing program 0 (id=854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x5}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 4.447130245s ago: executing program 2 (id=855): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4010, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3ff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1}, 0x0) sendmsg$unix(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="f085", 0x2}], 0x1}, 0x200c8061) socket$kcm(0x1e, 0x1, 0x0) 4.370702787s ago: executing program 0 (id=856): r0 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800007001cdc0dca1d9f68846960e56de42944af05000600002000000a000000001000000000000000000000000000000000000102000000000000000200010000000000000007160000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 4.365434645s ago: executing program 3 (id=857): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073118b00000000008510000002000000850000284900000095000000000000009500a50500000002"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 4.172894111s ago: executing program 1 (id=859): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50, 0x11}, 0x3c00) 4.1219499s ago: executing program 3 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa0ee40000000000001400000000000c18000000000200000000000000000000001c000000080000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9c12c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x2010, 0x1, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x2000000000000035, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffff38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x1}]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="0033c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081414e81f782db010000001d080b01008100e8fe55", 0x1b}], 0x1}, 0xc000) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r7}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000040), &(0x7f0000000280)=""/201}, 0x20) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c064001000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000001010400000d00009e70d6b4230000040023804d8ac2000634bd9811896f2df512151f3fc5c342f2c6fb5eb00d216193a5466360f8e2f27c07b7ae01236b3046e97d"], 0x18}}, 0x0) 4.109156368s ago: executing program 0 (id=861): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x3, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={&(0x7f0000000280), 0x2}, 0x14105, 0x2e, 0x6, 0xc, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0x9, 0xffffffffffffffff, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000006840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0c00000002800000", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b04000000d86e6c1d000a847ea6ea6567e75110623400cdd46b44dacff32c6e020075e300250002000f000000172f71d34460bc24eab5560000000ebab8bebf9367b4fa51f60a64c9f4d4778037e786a6", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0xa, 0x3, 0xff, &(0x7f0000000180)) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtaction={0x254, 0x30, 0xb, 0xfffffffc, 0x0, {}, [{0x240, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_connmark={0x1bc, 0x4, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x3, 0xffffffffffffffff, 0x638, 0x9d}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x7, 0x4, 0x5}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xa5d, 0x6, 0x8, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf305, 0x6, 0x20000000, 0xb9, 0x7}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x7, 0x0, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x68d2, 0x7, 0x10000000, 0x95, 0x2}, 0x2}}]}, {0xe3, 0x6, "f63b71a1e7eec4b90c51dd7a07ba5acd09c2775c24bf47c427c28644027c490611d570bf2de8b3be95432888dd95fbe4c0b56cef8c102dd56279ffbaae007dab3f8e4846d1ca11d9303de0c2184445335bb98972a9470af0a758fab1645728ef310f55f5fc5f2fc176eb21fd96a3c431bfbcca93b316ea47f3402bcd9b60d72b5244d23cff8bd319bd3a6b06a142a0c57cf9bd15ef515a7f78d5f199c6a650d1d1f9cfb967f8054b51ad042ef30dd879e10011658bc107f0280ed80bc5b52015feb40b3c0d1429b681ef19acc15b30c5fa9ce7cf57a8cb681d2ea84b4d97b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x6, 0x3}}}}, @m_sample={0x50, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xdfe}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7f}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0xd11587c276d31f3c}}}}]}]}, 0x254}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffffffffe52, &(0x7f0000000240)=[{&(0x7f0000000140)="2e00000011008188040f80ec59acbc0413a181002e00000001010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x2004c044) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xf1000000}, 0x90) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x81, 0x6, 0x3, 0x0, 0x0, 0x8, 0x38c00, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9ac, 0x0, @perf_bp={&(0x7f00000002c0), 0x3}, 0x19a90, 0x3, 0xfffffffa, 0x4, 0x1, 0x3, 0x0, 0x0, 0xff09789, 0x0, 0x6}, 0xffffffffffffffff, 0xd, r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x2, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 3.913641143s ago: executing program 1 (id=862): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044120000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 3.747527814s ago: executing program 2 (id=863): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="03f9653ee80700000000000000000000000000008c7f7a18b139cfa004847dbb8016a0aabba20ca0c36e35f4c8bcd30002f8f42e41a28b866fbd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000001000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000200), &(0x7f00000003c0)=r3}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x7ff3, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x0, @perf_bp={0x0, 0x3}, 0x14105, 0x2e, 0xfffffbff, 0x7, 0x2, 0x80000001, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xf, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000000000618110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00400020207000200020001000200000000938037a786a6d0001000000e4509c5f05c2f070000000000000088bbcb", 0x52}, {&(0x7f0000000100)="9b25af20af07241a63c3", 0xa}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.82541866s ago: executing program 1 (id=864): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="b601000000000000bd110000000000008510000002000000852000007600000095000000000000009500a5050000000077d8f3b4000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d75357f21699cdc6751dfb265a0e3ccae669e173a649c1cfd6587d472d64e7cc955d77578f4c35235138d5421f9453559c35da860e8ef14142b2a3e314422b854421eed734ceb1efeecb9c66854c3b3ffe1b4ce25d7c983c005c03bf3a48dfe3e26e7a23129d6606fd28a697a9d552af6d9a9df2c3af333e2008e11bbec0727cb3f647535deb6277f5696833a71011a7d06602e2fd5234712596b696418f163d1a13ed38a682f87925bfa753f631cd027edd68149ee99eebc6f7d6dd4ae59af7588c8e1f4efab57644ccb1973d7879b70a70001040000000000000000d7900a820b63278f4e9a217b98ef7042ad2a923132f208fd8289eaf8cd00000000000009d27d753a300800000000000000a5686f2fccc33e3e34c3969c5ad781302d40e97a8ad10ce0cbe17366d5ac6af2fca2360a15b80400d52040ef7b28d300747877e176fe4c4b8e40dbf260f5a9f7eee30293c1b163b795d0aef4deb851a30000f569dc8f39943f889008e1ec914faa9e6cd0b3b4b3b5db666ebeb49d6a62019d76459e70b459543c4ac42e53b4ad4c77cff373ebd95848f01864e456969cd28000170996016aceb583df5ee4dd722e8c350af489f9a900000000a0dcc36b3d7c734a9cce0439f832a20d7cbdcda5dff3ba92dd66afb9d74aa222038994dcd3e7784dbea1e51a15b0f1a040cc63177f8fafa3192fc8e5552da1a982ab8dfe31ad1a0968faa47c2069d6bf09c3aa4f0fc128cb578d99b08a150b4cc4b22f6a464c6398c952519818a44a1b223ff502df87865c276588ea478e328e8277e811b99ce1acfecaf8e2c55ccc4b8eae0a61635514e99ffd438784060f23ba74c0b30b1180d935832deb686d789ba1d436d116394534e88492a42b8bf050c719661a2dc50b3a1dcfbc871e5c27e3d7260f6fa589e40000b89db451ff994845f6b49c12e89291398bcb3c06ef1289f74e0b0e2cab592d35f82a69e7284223a171c616b1f0fee6c4711d7aecb69746064d2c096554975d605ebe646302bf3d5cf32a9a09915ae3f3d4eb96615d7b237da56cd5e9904a19e145f25b6d98eb2c019967f553b61d0e80d6913cee9f8d18469a654a239a84a85debbc02846ac5791278f18c6759e3b513a68284d2efc30587e433431b2896a3bd48020af67e9ac071b2dd6dc3b9efae4ff03558fa619aea909c7f2416e7e7da1c51ccc7e6ac27412f728dc6d80da8adf317ca863ed683897321f8c8bb5a5d953d6783b7a06353ee496bbdff418de3e53234df87756eb99e330253cf5da4aa1a9648a38f07e2d302b4165983db4f7b8972923fffa8c03c288512a3a38fbd7c816a44634f7a03fab30811b7b93257bea4369ba46024dee5e9b0b2c3d3324e9b7c1f99ab9bb3f498b1485373b79ec84a67dad4e37575dab87ce55a9a69ed856a4c4410d1242ac1bd1539094a641cc086c2c53e363beafc74ab4e9ff320373705cbf5644586ffe60d293944fa2d9dc18b55f1af5c42f27747bef1ffd0c1766f062d47d61bf9f64e6ee288fa7fc12d48da526527b9f5c318c93ec447cb8b5eee7aa8a1e85696af3dfef96657c0545c8ebd96528d9c28828e5befd80d684b03b6d153da3e3cbd3bfbf4a9375b8ad04a1d241bcb5d5505cb6cc7a44e2e24bd0b1ca4879caaff59d0ce39dc7f3fea447f4e46967855208e63ec988bd2692afefbed2b001205e4b30ee8fe417defa566a73ace8f01f7181de0ef25f1744896a3c38859e6148c42454949cd64b1a888e7fe9c2d86bb01023b6ddeb67f5eb038af3e460c771518a4126c338b0390d459361e03adf6e6b558b3651a0e33d101b5febfff82794203da18db6fcf89715c2d338f78d8b9220171b41f528f857a7cb79ca990de1208777e13faaa9b9cb9e67797b07d9eb9e909410b50c5d981d9a72aa36498b630519d1530ef0000000000000000000037fcffffffffffffff8db8379bd2044c652dff399a9f8bfa4e9c507f049d18837464276830461ee203ba51f6102d262fc9a26bc3638ecce24e65c55da6efaa462f03d0e119c963a8c7a522b59f5a7b44d018cb2648383073d9e032492cae44350bc0a85697f431392eb22cae093e85954af97d6d7b2e6e8f43353062275ad1578a431594243452a2bfb89f91d8eaac038e9e17136e7c698f73faaabb3d00000000000080014573789425c4c32da528d89356aa6d2ae6da082e756c80cf39053431080ea6cbf9997a5a0ddad0b9d12bc3f880476ab32f0feaac5f16e61f7b72b8c9082eec423c6b3eaecfdcc9ec72795e7696421c83b76c2d6bac19bc875d009679778d8ef97d7e05329649d97b0dc54bea9b650873de2d3d702690176e0b23ee5cb5e469a8d1612d611722e6200e3a297d92f8e1de98326c5ef2b89d4e2d47767cd755783e5d865e373338e96ceb8399f296c59b2d70ca27735ecaff62982616d3ac1ab041733bce119d8002a6c8a2b08b32551b2313b1a2ff41b3f04af61c69c85cb2da48215727271bac2ffdeb62d9f5dc4845f1c3f63dc806e615ee8d28d6d7f181e30807afa27f41d0364c746a65a47464db68f3c433d88dd625db35fded2c86d75af88efaf20c8b37c644b6c4e773a9589200faa553bc92f916b75ddbfa18ab73979f46947b35914286d2499a0b8c970000000000000000f4fe74e0c26ab52329bd600627b256ca44dd121ffc8dbb6e5f70cbe03efccac70375b30cc927574d254d1b46c607e8b1ca7d1511568c3ef4b6b885f4582bdcef74e5e010627fc8e4fe00000000000000000000869d9640f06b11df2971909b90133983308ea4f033de613763f32d913bcbe9dd082a6fff197a20730269e6cfd31275395833f1c2b8a50a94c30cceae2a11fe9b9b835d0da73891c0b3ce22dea6bf31e7f51808cf72f44b4455b77a778440795e152dc1b7bb0a5636aa4742ce4d331a47de5836539cdf289176527277b70c8162aaf6f9475418b478329f3565450acfaf07000000eab8cabfa97e35081967bb92a264b07e8003d2f15537e72a1e4ca5ec1e2aaaf8236ecdefbaf512c75e636b6b6f518ad20521f909b12e9bc97e408e0dc82f950d12705f35708bc862196abb27e8d7991b5273987f38c4706289ff4f6130cee76465d487a07a74452f87da2029bd3debd9870335d58d3fe1ac80574fa3ea312997ab81bc6f569ffdb10ba3f20a86d95128d13e0c778998d3b3114bfb07bd61e4bff8a5e2ce4aa572c63e09b44ca4a181bcfe4eec3ce843c65c4948169fe639a186acc2b4a96c6b8d4d2e6d53ab97bea01eab953e6e89e3af34d4ada217bc6fda0fb2095c49195d0d6f365ca80a955b9ec81240a84ef672afa369fc8e3d444ba35d0f51a0065a3b982d09dfc6874fc0d8079b185447cb8a695e132d4d613a529d9c77e2a8f7320ecf698e8a2b170fd601dc1a9767a38b10788e92d1356f6a6c1bcfb2d31b46e735db13f1be80bac1b6be04fd98610000000000000000000000000000139af5493f74751c5e2501a4936bc4a0fa516117f4ccadc692003adee0a080eba2f1059660c0ee0e9aec72d4d0fe095632e4f641b0e34c611c5b3e0ba05fa36542d40837dda323910672a9097d68398fd3539686e4288db0d6bf7cb8a1835f46dfe11865a66ef47e736dada06677a5bca133d6cbc8fe5c4557e51b006bdccd7c5f32ff1d9e8b130f77df09236870fb3de5b87b4f8acc13df534eba329b86670000000000000000b27a2616c03cdf6c009447a652bca9b325e73c0737d5b717945e4fe7a169c5e2c54fc71a4104aa7cf0f5d30e2fcd9503650edbd8a5971a9a1fde5e5df37469ae204a6e899eacc1e63034cbabc5604739881cb82604bed3e53696a0606b26b879ef232a1a038291389593d1575cb79aa8284cf01a7e1a456acab9d8d608ad69d4c4b56492af7004e7ed9d47c5db3d76a00bea7c804f3a3638408bc1636f1009b7f185f51606918eaa0ab6bef11ae3d300"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 2.643207702s ago: executing program 1 (id=865): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x800, 0x4, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000400082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000940)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x6}, 0x50) 2.203434376s ago: executing program 1 (id=866): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='br_fdb_add\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f8001d000a00a0e69eeab556a7e60f1e611ca66982949a36c23d3b48dfd8cdbf9367b4fa0a640800030006010000080003001100000000", 0x55}, {&(0x7f0000000180)="6a6203000000dd", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4040844) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x1, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48051}, 0x24004801) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000f6000000006debff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000004c0)='signal_generate\x00', r6}, 0x10) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) r7 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=@migrate={0xec, 0x21, 0x1, 0x0, 0x25dfdbff, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@remote, @in=@loopback, @in=@multicast2, @in=@local, 0x32, 0x2, 0x0, 0x0, 0x2, 0xa}, {@in6=@loopback, @in=@loopback, @in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x2b, 0x0, 0x0, 0x3506, 0x2, 0xa}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r7, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000600)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0xf6, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={r7, 0x20, &(0x7f0000000d40)={&(0x7f0000000c00)=""/80, 0x50, 0x0, &(0x7f0000000c80)=""/183, 0xb7}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x13, &(0x7f0000000dc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x28}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@exit, @exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x800}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000e80)='syzkaller\x00', 0x8, 0x6b, &(0x7f0000000ec0)=""/107, 0x40f00, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f40)={0x4, 0x0, 0xfffff751, 0x2}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000f80)=[{0x1, 0x3, 0x2, 0x6}, {0x0, 0x2, 0x2, 0x4}], 0x10, 0x100}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r7}, &(0x7f0000001080), &(0x7f00000010c0)=r0}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r11) socket$kcm(0x1e, 0x4, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) 1.185487927s ago: executing program 4 (id=867): socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.13254955s ago: executing program 0 (id=868): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x18558, 0x2, 0x0, 0x0, 0xffff, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006", @ANYRESHEX=r0, @ANYRESOCT=r0, @ANYRES16=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000340)={0x3, 0x80, 0x7, 0x3, 0x83, 0x7, 0x0, 0x368, 0xdc000, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc87a, 0x0, @perf_config_ext={0x9, 0x63}, 0x800, 0x9, 0xfaf4, 0x6, 0x2, 0x3, 0xfffe, 0x0, 0xf, 0x0, 0xd7}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdir(0x0, 0x0) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r6, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7}, 0x4a88, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = openat$cgroup_int(r7, &(0x7f0000001700)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000001cc0)=ANY=[], 0x27) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1d, 0x5, &(0x7f0000000880)=ANY=[@ANYRESDEC=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20004810) setsockopt$sock_attach_bpf(r11, 0x6, 0x4, &(0x7f0000000040), 0x4) 1.132167287s ago: executing program 3 (id=869): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000400)="e8", &(0x7f0000000480)=@tcp6=r0, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.029957021s ago: executing program 3 (id=870): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r0], 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000280)='./file0\x00', 0x0, 0x4000}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="830000000d000000ffff00000e00000002000000", @ANYRES32=r2, @ANYBLOB="45e9000000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000050000000100"/28], 0x50) r5 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x400, 0xae7}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="f9ffffff00"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000030000000300000000000000"], 0x50) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3d, 0x0, 0x1, 0x20}, {0x1d}, {0x6, 0x0, 0xfe}]}) r7 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r7, 0x0, 0x4c040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)}, 0x4000) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r10) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000006c0), 0xa}, 0x80, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000071102e000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b40)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000004000000020000000000001103000000ffffffff000000000000000901000000020000"], 0x0, 0x44}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x22, 0x3, 0x0, &(0x7f0000003a00)) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 989.174743ms ago: executing program 4 (id=871): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8d08ae394948"}) 812.900288ms ago: executing program 2 (id=872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000010a20000000000a01030000000000000000050000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a3100000000080002"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 725.608065ms ago: executing program 1 (id=873): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xf, 0x0, &(0x7f0000000200)="486f1a56ea51f3d32b7d88c6b907ba", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)}, 0x10) socket$kcm(0x29, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x8, 0x78d3f, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffffffffff, 0x10}, 0x2, 0xfffffffffffffffb, 0xfff, 0x5, 0x81, 0x5, 0x6, 0x0, 0xa, 0x0, 0x2}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x84, &(0x7f0000000000), 0x90) sendmsg$inet(r7, &(0x7f0000000e40)={&(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="d4", 0x1}], 0x1}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x20e}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r8, 0xc040ff0b, 0x110c2300fe) 583.915557ms ago: executing program 2 (id=874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000040)) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)=0x1) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='napi_poll\x00', r1, 0x0, 0x100000001}, 0x18) fstat(r0, &(0x7f00000001c0)) write$cgroup_freezer_state(r1, &(0x7f0000000240)='FREEZING\x00', 0x9) mkdirat$cgroup(r1, &(0x7f0000000280)='syz1\x00', 0x1ff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r1, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000300)="3d6ea3b5102080cd0cdddc52d0b179602d5193cdebac7ddddf4584575e3caafd25e829fc103f2a800ed0bf8936dafb2ad3e10ff64bc22115fd26fb6684aa346ab47865494044df972b988447ae5db52f2978fef45f7bf788a0d0e36ca5789c0c2146f80607cb31eaa93631aa314579db4964070460e70555358161d3624a417fc64a4f9166d6a0c112277a6bea7e057f790b123d7f22716c6adc89db07c70ca00b934b231551d1b7", 0xa8}, {&(0x7f00000003c0)="a2cc57e0ef0854b4f568650054b3f50e4739bfcd88eaa754deb5224888344cd7965f0679bb74f517a4e60f7bf706bad600c7eaf9ae783f7f004b73b13cb42c7303e05a35f37f68057e7fb72ba3556da216371cb61c1de8582c42591e18f327aafa9a8964e031f7be9710275133fd724f7db7d323a8700e75b3905aded67356ddf9ffd5a18ee5d2e37cdfb646dfe79f9f4a3e3afb07faee97a11ed81fb99d41539d5997b9a5c9079e750cc5e6c534491cfafa6220d9644b32ec36a7d73bdb43b02d6435d8f029cccff704113141", 0xcd}, {&(0x7f00000004c0)="82ff5283f7ecf1298ee7d711b3cccff299863ba0ec9375b8e509eed87a67585b7e871dcac09117d8fc4f019d0babb8a8e969a757aa356ea73ac33c501d288597ee2c910f8ee04a7c9bc55c6a89444b08b05df261ad0c5e387a4a33e9e5468e9d98f0965c329a71bc3559fd54779aa13500f9247b68acc0a594ac8df276773a9774a3eae5fa2cb8f4c607d2f13563b3bde473003b8a0713f8fa7d0507cdbe9ec9d23a9c94ee56cc70c0ed216d299352ee04034405016f32acb211cb65714ae6608af1bbb6c0f88d1aa5ed442a02cc", 0xce}], 0x3, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @remote, @private=0xa010102}}}], 0x78}, 0x4000010) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000840)={'hsr0\x00', 0x200}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x100, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x103) sendmsg$kcm(r1, &(0x7f0000000dc0)={&(0x7f00000008c0)=@ll={0x11, 0x16, r3, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000940)="3745dd63cb84d9ee4fe0ad5d2c0826a42a71faf6a3408925325cf1ad1cc58e3b1a953528d8b35708e36e7157cf691873e46953b6eefcf37d41ee32f826c2071a9ebee940e426ae3629fd0c995d18e87f6f6ec4f557a143a83a6bf51fb60ce09e22bfc23bec4c0772eed204cdd5e6c09065f28e53c0cf1c325b9faba9787789f70d5e599ae40b9e17d0bccea9957d0e7adfb110e43f580277466f9e074d", 0x9d}, {&(0x7f0000000a00)="512d668f0efc606f5c036dcbbf10aeba4d2fe69b6cfc16b03f6b7b42df508265818bbb89833af7dd45c02578c137362c1622dc2f1bb79d594a1c7535b4947e7e6ffd3fa6a69b8b049eb140f98d29665b54683f81a4e1b6a7ed16a9ff3df6d51577fd0de6e51fb1faf5a333a7f7359c6d23ce3309f5db12b938cb7c72b996926bf0322158e905ee9584", 0x89}, {&(0x7f0000000ac0)="e106abd4cab72e25bf35e6f27aa0a4ca5423e0b3141a694cda6a64a03de783df8519387e5435328d2bca21dbee1ec4146b4e4d4b332d5238f5922c4a", 0x3c}, {&(0x7f0000000b00)="7225bdd99e3dec92fcd8803a5d3f5f92f2ee431053e354f69298c5d18c640852bc74dee8d4dd6ee84a559acb96a5eb61bbedbf80db289decfc0bcaaa154022cc8bcef86bd651f2904db64ff473dc19b10358520351cce91d920f2e4940a8578914f6630704", 0x65}, {&(0x7f0000000b80)="2598b539cf300fa05ca7537748f2bc283a2a980f75563390c73ea1a35747a67482614bf0f0fd5dab6ae1132d7947f4721bbef1d5ef37f94f2146c734b1a49c4b6fed9a99a2286a53399c1e2fefc7539867b0613305a086a8ff3e6c369c11109d1df75b2ee7f1740a2827d602b994c43f461bd60a239f2adcfd95bfe335d7915731529ef1619921a2685dcab66fc43298fe1104b870bc9c7bf01d92", 0x9b}, {&(0x7f0000000c40)="2e24f6787eb85fa7ade08238b3f9f33472156ab030891eccb0b6615b06b7f4bc360ae58f8c43127b9701797f7bf88793c7afcd7104d1f594b284bed3d63ff04aec92439e4e73e58035428297af978e96132d7c9abdc1e346e0e787ea18e369435a3cdd622c61a5e05401028b805b15621eb67f3037cd098bfeb835dab6cd57fa02a167922d0f55e5f43ade37002af485ad35827fc1ba4cf36a296a7b8fcd7ba92e90de17d5a2145ab33c2e71c92db63d6025ceaae478de634de31470d2", 0xbd}, {&(0x7f0000000d00)="a383b31f4dba7e2116bc5d93bceba69951b6", 0x12}], 0x7}, 0x20008080) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{r1, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)=r1}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000f40)={{r1, 0xffffffffffffffff}, &(0x7f0000000ec0), &(0x7f0000000f00)='%pS \x00'}, 0x20) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001200)={{r1, 0xffffffffffffffff}, &(0x7f0000001180), &(0x7f00000011c0)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001240)={r1, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x1e, 0x1e, &(0x7f0000000f80)=@raw=[@jmp={0x5, 0x0, 0x3, 0x3, 0x8, 0xffffffffffffffc0, 0x8}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x49f}}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x93}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x5, 0x1, 0x0, r6}, @alu={0x4, 0x1, 0xd, 0x0, 0x2, 0x8, 0x1}], &(0x7f0000001080)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, @fallback=0x12, r1, 0x8, &(0x7f00000010c0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r8, 0x2, &(0x7f0000001280)=[r6, r1, r1, r6, r1, r9, r10, r6, r1], &(0x7f00000012c0)=[{0x5, 0x4, 0x6, 0x9}, {0x2, 0x2, 0x9, 0xc}], 0x10, 0x6}, 0x94) ioctl$TUNSETVNETLE(r11, 0x400454dc, &(0x7f00000013c0)) r12 = gettid() perf_event_open(&(0x7f0000001400)={0x4, 0x80, 0x3, 0x80, 0x0, 0x3, 0x0, 0x3f4e, 0xa0058, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x9, 0x0, @perf_config_ext={0xffffffffffffffff, 0xb5a}, 0x0, 0x1, 0x2, 0x4, 0x6, 0x50e, 0x0, 0x0, 0x9d, 0x0, 0x7fffffff}, r12, 0x5, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000001480)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000014c0)) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001640)=@o_path={&(0x7f0000001600)='./file0\x00', 0x0, 0x0, r10}, 0x18) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000001700)={0x7, &(0x7f00000016c0)=[{0x7ff, 0x7f, 0x42, 0x9}, {0xfff7, 0x1, 0x1, 0x3}, {0xf358, 0xe7, 0x1, 0x1}, {0x3ff, 0xf8, 0x4, 0x6}, {0xe, 0x10, 0x3d, 0x3}, {0x40, 0x7, 0x3, 0x7fffffff}, {0x8, 0xf8, 0x4, 0x3}]}) 571.279836ms ago: executing program 0 (id=875): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x403, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073f"], 0xfe33) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e00073f"], 0xfe33) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x4010) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x4010) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) (async) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x103fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0x2a979d) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1c0000001d008102e00f80ecdb4cb9f207c804a00d00000088081afb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="1c0000001d008102e00f80ecdb4cb9f207c804a00d00000088081afb", 0x1c}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000fd0000000000000000010000851000000100400d95000000000000008500000041000000003e6272a53f8dbe4844c759c66ae4a9b4411fa3fa8f956bb5d801cd484982befa1732ab48527687"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x0, r1}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socket$kcm(0x10, 0x2, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x2000c000) (async) sendmsg$kcm(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a00144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x2000c000) setsockopt$sock_attach_bpf(r3, 0x29, 0x43, &(0x7f0000000000)=r6, 0x4) 473.951645ms ago: executing program 4 (id=876): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x401000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x34004}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x29, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000080)={r1}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0xfffffffc, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r6, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004de7f9c7643600e0000200", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 145.532922ms ago: executing program 2 (id=877): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 6) 0s ago: executing program 0 (id=878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x8c, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x5}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. [ 82.151135][ T5850] cgroup: Unknown subsys name 'net' [ 82.326475][ T5850] cgroup: Unknown subsys name 'cpuset' [ 82.335837][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.981571][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.442059][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.450625][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.459195][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.467413][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.475285][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.574476][ T5183] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.582744][ T5183] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.590444][ T5183] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.599306][ T5183] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.613221][ T5183] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.671582][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.679705][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.687520][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.696666][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.710668][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.792643][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.800968][ T5873] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.808794][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.817472][ T5873] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.824787][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.825303][ T5873] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.834036][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.853553][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.862207][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.870460][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.382930][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 87.455290][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 87.754747][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.762024][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.770323][ T5860] bridge_slave_0: entered allmulticast mode [ 87.777699][ T5860] bridge_slave_0: entered promiscuous mode [ 87.786644][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.793864][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.801037][ T5860] bridge_slave_1: entered allmulticast mode [ 87.808632][ T5860] bridge_slave_1: entered promiscuous mode [ 87.840962][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 87.898982][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.906661][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.915018][ T5866] bridge_slave_0: entered allmulticast mode [ 87.924197][ T5866] bridge_slave_0: entered promiscuous mode [ 87.967298][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.976318][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.983716][ T5866] bridge_slave_1: entered allmulticast mode [ 87.990949][ T5866] bridge_slave_1: entered promiscuous mode [ 88.014849][ T5870] chnl_net:caif_netlink_parms(): no params data found [ 88.031606][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.044790][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.055032][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 88.162083][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.193202][ T5860] team0: Port device team_slave_0 added [ 88.214784][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.259784][ T5860] team0: Port device team_slave_1 added [ 88.299673][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.307222][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.314738][ T5868] bridge_slave_0: entered allmulticast mode [ 88.321929][ T5868] bridge_slave_0: entered promiscuous mode [ 88.358956][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.366113][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.392258][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.418963][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.426304][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.434110][ T5868] bridge_slave_1: entered allmulticast mode [ 88.441370][ T5868] bridge_slave_1: entered promiscuous mode [ 88.461375][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.468868][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.495325][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.508625][ T5866] team0: Port device team_slave_0 added [ 88.513448][ T51] Bluetooth: hci0: command tx timeout [ 88.521328][ T5866] team0: Port device team_slave_1 added [ 88.648660][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.658377][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.665711][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.672618][ T5872] Bluetooth: hci1: command tx timeout [ 88.674833][ T5870] bridge_slave_0: entered allmulticast mode [ 88.685626][ T5870] bridge_slave_0: entered promiscuous mode [ 88.694203][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.701749][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.709322][ T5870] bridge_slave_1: entered allmulticast mode [ 88.717278][ T5870] bridge_slave_1: entered promiscuous mode [ 88.724351][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.731450][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.739300][ T5875] bridge_slave_0: entered allmulticast mode [ 88.747061][ T5875] bridge_slave_0: entered promiscuous mode [ 88.755395][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.762534][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.788576][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.801168][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.808254][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.834409][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.845033][ T51] Bluetooth: hci2: command tx timeout [ 88.852814][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.877006][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.884247][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.891418][ T5875] bridge_slave_1: entered allmulticast mode [ 88.899561][ T5875] bridge_slave_1: entered promiscuous mode [ 88.912532][ T51] Bluetooth: hci3: command tx timeout [ 88.918534][ T5872] Bluetooth: hci4: command tx timeout [ 89.020220][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.031353][ T5868] team0: Port device team_slave_0 added [ 89.040350][ T5868] team0: Port device team_slave_1 added [ 89.049281][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.065897][ T5860] hsr_slave_0: entered promiscuous mode [ 89.072560][ T5860] hsr_slave_1: entered promiscuous mode [ 89.081439][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.131262][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.226113][ T5870] team0: Port device team_slave_0 added [ 89.234462][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.241454][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.267709][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.284934][ T5866] hsr_slave_0: entered promiscuous mode [ 89.291390][ T5866] hsr_slave_1: entered promiscuous mode [ 89.297913][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 89.303802][ T5866] Cannot create hsr debugfs directory [ 89.311341][ T5875] team0: Port device team_slave_0 added [ 89.326828][ T5870] team0: Port device team_slave_1 added [ 89.349297][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.356730][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.383030][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.404379][ T5875] team0: Port device team_slave_1 added [ 89.466970][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.474478][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.500521][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.554509][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.561487][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.587735][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.634440][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.641526][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.671868][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.732745][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.739822][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.766148][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.824102][ T5868] hsr_slave_0: entered promiscuous mode [ 89.830601][ T5868] hsr_slave_1: entered promiscuous mode [ 89.837271][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 89.843739][ T5868] Cannot create hsr debugfs directory [ 89.866453][ T5870] hsr_slave_0: entered promiscuous mode [ 89.873603][ T5870] hsr_slave_1: entered promiscuous mode [ 89.879767][ T5870] debugfs: 'hsr0' already exists in 'hsr' [ 89.885681][ T5870] Cannot create hsr debugfs directory [ 90.116614][ T5875] hsr_slave_0: entered promiscuous mode [ 90.124114][ T5875] hsr_slave_1: entered promiscuous mode [ 90.130295][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 90.136151][ T5875] Cannot create hsr debugfs directory [ 90.376325][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.428314][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.477040][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.519950][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.577009][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.587362][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.601673][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.609007][ T51] Bluetooth: hci0: command tx timeout [ 90.619903][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.696124][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.723454][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.738745][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.751793][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.759010][ T51] Bluetooth: hci1: command tx timeout [ 90.885853][ T5868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.898771][ T5868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.911444][ T5868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.923818][ T51] Bluetooth: hci2: command tx timeout [ 90.930176][ T5868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.994593][ T51] Bluetooth: hci3: command tx timeout [ 90.998538][ T5872] Bluetooth: hci4: command tx timeout [ 91.072127][ T5875] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.094802][ T5875] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.105929][ T5875] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.117807][ T5875] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.151071][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.205442][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.221668][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.265991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.273337][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.294617][ T472] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.301776][ T472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.319573][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.364184][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.371339][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.405978][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.413146][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.446993][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.460398][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.542798][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.566132][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.598475][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.605711][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.620341][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.627558][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.665685][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.672916][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.689183][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.696394][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.800261][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.877708][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.903415][ T9] cfg80211: failed to load regulatory.db [ 91.960480][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.967709][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.991060][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.998308][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.094933][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.296865][ T5860] veth0_vlan: entered promiscuous mode [ 92.395242][ T5860] veth1_vlan: entered promiscuous mode [ 92.461875][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.587939][ T5860] veth0_macvtap: entered promiscuous mode [ 92.630971][ T5860] veth1_macvtap: entered promiscuous mode [ 92.668385][ T5866] veth0_vlan: entered promiscuous mode [ 92.683029][ T5872] Bluetooth: hci0: command tx timeout [ 92.700526][ T5866] veth1_vlan: entered promiscuous mode [ 92.720054][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.749449][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.766939][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.788215][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.811452][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.840138][ T5872] Bluetooth: hci1: command tx timeout [ 92.850520][ T472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.879054][ T472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.920048][ T472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.929654][ T472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.994293][ T5872] Bluetooth: hci2: command tx timeout [ 93.035898][ T5866] veth0_macvtap: entered promiscuous mode [ 93.073587][ T5872] Bluetooth: hci3: command tx timeout [ 93.079061][ T5872] Bluetooth: hci4: command tx timeout [ 93.108898][ T5866] veth1_macvtap: entered promiscuous mode [ 93.173742][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.181739][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.207905][ T5870] veth0_vlan: entered promiscuous mode [ 93.229045][ T5875] veth0_vlan: entered promiscuous mode [ 93.257105][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.291119][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.304065][ T5875] veth1_vlan: entered promiscuous mode [ 93.313343][ T5870] veth1_vlan: entered promiscuous mode [ 93.331203][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.361119][ T3509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.370391][ T3509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.387964][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.391111][ T3509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.402378][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.524784][ T5860] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.527427][ T5870] veth0_macvtap: entered promiscuous mode [ 93.569312][ T5868] veth0_vlan: entered promiscuous mode [ 93.595221][ T5870] veth1_macvtap: entered promiscuous mode [ 93.628774][ T5875] veth0_macvtap: entered promiscuous mode [ 93.668017][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.680370][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.690214][ T5875] veth1_macvtap: entered promiscuous mode [ 93.729886][ T5868] veth1_vlan: entered promiscuous mode [ 93.748558][ T5977] netlink: 'syz.1.2': attribute type 5 has an invalid length. [ 93.763360][ T5977] netlink: 'syz.1.2': attribute type 7 has an invalid length. [ 93.763920][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.771166][ T5977] netlink: 137592 bytes leftover after parsing attributes in process `syz.1.2'. [ 93.798270][ T472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.814158][ T472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.827186][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.867049][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.882089][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.895159][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.971372][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.994719][ T3072] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.057303][ T3072] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.106665][ T3072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.116479][ T5980] netlink: 'syz.2.3': attribute type 6 has an invalid length. [ 94.125899][ T3072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.127380][ T5980] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.182658][ T3072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.192117][ T3072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.210240][ T5868] veth0_macvtap: entered promiscuous mode [ 94.224371][ T5868] veth1_macvtap: entered promiscuous mode [ 94.410250][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.526075][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.538578][ C1] hrtimer: interrupt took 55669 ns [ 94.553999][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.571447][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.753128][ T5872] Bluetooth: hci0: command tx timeout [ 94.768865][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.816070][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.855556][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.855731][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.868889][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.899914][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.917089][ T5872] Bluetooth: hci1: command tx timeout [ 94.929282][ T3072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.974126][ T3072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.079748][ T5872] Bluetooth: hci2: command tx timeout [ 95.154545][ T5872] Bluetooth: hci4: command tx timeout [ 95.161596][ T51] Bluetooth: hci3: command tx timeout [ 95.620377][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.631640][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.709513][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.739802][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.820932][ T6003] netlink: 'syz.0.1': attribute type 8 has an invalid length. [ 95.869096][ T6003] netlink: 'syz.0.1': attribute type 6 has an invalid length. [ 95.922038][ T6003] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.019584][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.067465][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.211901][ T6009] netlink: 'syz.2.12': attribute type 6 has an invalid length. [ 96.243216][ T6009] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12'. [ 96.967873][ T6038] Illegal XDP return value 2436861272 on prog (id 15) dev N/A, expect packet loss! [ 97.479406][ T6054] netlink: 'syz.3.22': attribute type 6 has an invalid length. [ 97.502773][ T6054] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.22'. [ 98.151241][ T6072] netlink: 176 bytes leftover after parsing attributes in process `syz.1.25'. [ 98.663740][ T6082] netlink: 'syz.0.28': attribute type 21 has an invalid length. [ 98.728799][ T6082] netlink: 164 bytes leftover after parsing attributes in process `syz.0.28'. [ 99.321947][ T6096] netlink: 'syz.1.32': attribute type 6 has an invalid length. [ 99.378723][ T6096] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.32'. [ 99.417856][ T6100] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.544986][ T6102] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 99.574482][ T6102] netlink: 152 bytes leftover after parsing attributes in process `syz.4.34'. [ 99.718389][ T6108] netlink: 948 bytes leftover after parsing attributes in process `syz.2.35'. [ 100.018191][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 100.314575][ T6114] netlink: 763 bytes leftover after parsing attributes in process `syz.1.37'. [ 100.674491][ T6117] netlink: 'syz.3.38': attribute type 6 has an invalid length. [ 100.682119][ T6117] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.38'. [ 100.699308][ T6118] netlink: 'syz.0.39': attribute type 8 has an invalid length. [ 100.727774][ T6118] netlink: 'syz.0.39': attribute type 6 has an invalid length. [ 100.735810][ T6118] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.39'. [ 100.746742][ T6120] netlink: 'syz.4.40': attribute type 8 has an invalid length. [ 100.803643][ T6120] netlink: 'syz.4.40': attribute type 6 has an invalid length. [ 100.817654][ T6120] netlink: 144448 bytes leftover after parsing attributes in process `syz.4.40'. [ 100.889075][ T6127] netlink: 68 bytes leftover after parsing attributes in process `syz.2.41'. [ 102.985995][ T6161] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.49'. [ 103.164646][ T6165] netlink: 'syz.2.52': attribute type 29 has an invalid length. [ 103.319619][ T6173] netlink: 'syz.2.52': attribute type 29 has an invalid length. [ 103.375552][ T6175] netlink: 'syz.2.52': attribute type 29 has an invalid length. [ 103.731670][ T6194] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 103.744304][ T6193] warning: `syz.3.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.840509][ T6193] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 104.851554][ T6215] __nla_validate_parse: 3 callbacks suppressed [ 104.851574][ T6215] netlink: 763 bytes leftover after parsing attributes in process `syz.0.65'. [ 105.873246][ T472] wlan1: Trigger new scan to find an IBSS to join [ 106.864150][ T6257] validate_nla: 2 callbacks suppressed [ 106.864171][ T6257] netlink: 'syz.4.77': attribute type 6 has an invalid length. [ 106.872549][ T6256] netlink: 228 bytes leftover after parsing attributes in process `syz.2.76'. [ 106.907073][ T6257] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.77'. [ 107.581394][ T6262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.78'. [ 108.995270][ T6282] netlink: 104 bytes leftover after parsing attributes in process `syz.4.85'. [ 109.023511][ T6282] netlink: 'syz.4.85': attribute type 10 has an invalid length. [ 109.079051][ T6279] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 109.143221][ T6282] veth0_vlan: left promiscuous mode [ 109.151266][ T6282] veth0_vlan: entered promiscuous mode [ 109.165527][ T6282] team0: Device veth0_vlan failed to register rx_handler [ 109.263630][ T6282] syz.4.85 (6282) used greatest stack depth: 18312 bytes left [ 109.399725][ T6293] netlink: 'syz.0.87': attribute type 10 has an invalid length. [ 109.471012][ T6296] FAULT_INJECTION: forcing a failure. [ 109.471012][ T6296] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.494915][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.4.90 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 109.494947][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.494968][ T6296] Call Trace: [ 109.494977][ T6296] [ 109.494987][ T6296] dump_stack_lvl+0x189/0x250 [ 109.495024][ T6296] ? __pfx____ratelimit+0x10/0x10 [ 109.495055][ T6296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.495082][ T6296] ? __pfx__printk+0x10/0x10 [ 109.495114][ T6296] ? __might_fault+0xb0/0x130 [ 109.495147][ T6296] ? __might_fault+0xb0/0x130 [ 109.495181][ T6296] should_fail_ex+0x414/0x560 [ 109.495215][ T6296] _copy_from_iter+0x1db/0x16f0 [ 109.495244][ T6296] ? rcu_is_watching+0x15/0xb0 [ 109.495267][ T6296] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 109.495299][ T6296] ? __pfx__copy_from_iter+0x10/0x10 [ 109.495324][ T6296] ? __build_skb_around+0x257/0x3e0 [ 109.495360][ T6296] ? netlink_sendmsg+0x642/0xb30 [ 109.495389][ T6296] ? skb_put+0x11b/0x210 [ 109.495412][ T6296] netlink_sendmsg+0x6b2/0xb30 [ 109.495458][ T6296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.495494][ T6296] ? aa_sock_msg_perm+0xf1/0x1d0 [ 109.495531][ T6296] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.495555][ T6296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.495588][ T6296] __sock_sendmsg+0x21c/0x270 [ 109.495619][ T6296] ____sys_sendmsg+0x505/0x830 [ 109.495650][ T6296] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.495694][ T6296] ? import_iovec+0x74/0xa0 [ 109.495725][ T6296] ___sys_sendmsg+0x21f/0x2a0 [ 109.495746][ T6296] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.495785][ T6296] ? __fget_files+0x2a/0x420 [ 109.495814][ T6296] ? __fget_files+0x2a/0x420 [ 109.495828][ T6296] ? __fget_files+0x3a0/0x420 [ 109.495853][ T6296] __x64_sys_sendmsg+0x19b/0x260 [ 109.495874][ T6296] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 109.495903][ T6296] ? __pfx_ksys_write+0x10/0x10 [ 109.495924][ T6296] ? rcu_is_watching+0x15/0xb0 [ 109.495946][ T6296] ? do_syscall_64+0xbe/0x3b0 [ 109.495976][ T6296] do_syscall_64+0xfa/0x3b0 [ 109.495999][ T6296] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.496023][ T6296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.496041][ T6296] ? clear_bhb_loop+0x60/0xb0 [ 109.496062][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.496080][ T6296] RIP: 0033:0x7f5a99f8ebe9 [ 109.496104][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.496120][ T6296] RSP: 002b:00007f5a9ae9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.496140][ T6296] RAX: ffffffffffffffda RBX: 00007f5a9a1b5fa0 RCX: 00007f5a99f8ebe9 [ 109.496154][ T6296] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 109.496166][ T6296] RBP: 00007f5a9ae9f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.496177][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.496186][ T6296] R13: 00007f5a9a1b6038 R14: 00007f5a9a1b5fa0 R15: 00007ffefc5b5a98 [ 109.496217][ T6296] [ 109.552263][ T6293] veth0_vlan: left promiscuous mode [ 109.909030][ T6293] veth0_vlan: entered promiscuous mode [ 110.021359][ T6293] team0: Device veth0_vlan failed to register rx_handler [ 110.182406][ T6312] FAULT_INJECTION: forcing a failure. [ 110.182406][ T6312] name failslab, interval 1, probability 0, space 0, times 1 [ 110.261449][ T6299] Zero length message leads to an empty skb [ 110.274757][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.1.91 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 110.274788][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.274801][ T6312] Call Trace: [ 110.274809][ T6312] [ 110.274818][ T6312] dump_stack_lvl+0x189/0x250 [ 110.274848][ T6312] ? __pfx____ratelimit+0x10/0x10 [ 110.274878][ T6312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.274905][ T6312] ? __pfx__printk+0x10/0x10 [ 110.274943][ T6312] ? __pfx___might_resched+0x10/0x10 [ 110.274972][ T6312] should_fail_ex+0x414/0x560 [ 110.275006][ T6312] should_failslab+0xa8/0x100 [ 110.275040][ T6312] __kmalloc_noprof+0xcb/0x4f0 [ 110.275067][ T6312] ? nf_tables_newrule+0x1506/0x2890 [ 110.275087][ T6312] ? nla_strcmp+0x106/0x140 [ 110.275124][ T6312] nf_tables_newrule+0x1506/0x2890 [ 110.275168][ T6312] ? __pfx_nf_tables_newrule+0x10/0x10 [ 110.275193][ T6312] ? nfnl_pernet+0x23/0x240 [ 110.275232][ T6312] ? __nla_parse+0x40/0x60 [ 110.275269][ T6312] nfnetlink_rcv+0x1132/0x2520 [ 110.275339][ T6312] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 110.275397][ T6312] ? ref_tracker_free+0x63a/0x7d0 [ 110.275462][ T6312] ? __netlink_deliver_tap+0x807/0x850 [ 110.275493][ T6312] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.275547][ T6312] netlink_unicast+0x82c/0x9e0 [ 110.275586][ T6312] ? __pfx_netlink_unicast+0x10/0x10 [ 110.275615][ T6312] ? netlink_sendmsg+0x642/0xb30 [ 110.275643][ T6312] ? skb_put+0x11b/0x210 [ 110.275666][ T6312] netlink_sendmsg+0x805/0xb30 [ 110.275709][ T6312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.275744][ T6312] ? aa_sock_msg_perm+0xf1/0x1d0 [ 110.275787][ T6312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.275810][ T6312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.275862][ T6312] __sock_sendmsg+0x21c/0x270 [ 110.275895][ T6312] ____sys_sendmsg+0x505/0x830 [ 110.275927][ T6312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.275963][ T6312] ? import_iovec+0x74/0xa0 [ 110.275994][ T6312] ___sys_sendmsg+0x21f/0x2a0 [ 110.276020][ T6312] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.276073][ T6312] ? __fget_files+0x2a/0x420 [ 110.276111][ T6312] ? __fget_files+0x2a/0x420 [ 110.276129][ T6312] ? __fget_files+0x3a0/0x420 [ 110.276164][ T6312] __x64_sys_sendmsg+0x19b/0x260 [ 110.276184][ T6312] ? perf_trace_run_bpf_submit+0x100/0x170 [ 110.276211][ T6312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.276249][ T6312] ? __pfx_ksys_write+0x10/0x10 [ 110.276276][ T6312] ? rcu_is_watching+0x15/0xb0 [ 110.276306][ T6312] ? do_syscall_64+0xbe/0x3b0 [ 110.276352][ T6312] do_syscall_64+0xfa/0x3b0 [ 110.276382][ T6312] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.276412][ T6312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.276434][ T6312] ? clear_bhb_loop+0x60/0xb0 [ 110.276462][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.276483][ T6312] RIP: 0033:0x7fa27a58ebe9 [ 110.276504][ T6312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.276521][ T6312] RSP: 002b:00007fa27b4a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.276544][ T6312] RAX: ffffffffffffffda RBX: 00007fa27a7b5fa0 RCX: 00007fa27a58ebe9 [ 110.276559][ T6312] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 110.276572][ T6312] RBP: 00007fa27b4a0090 R08: 0000000000000000 R09: 0000000000000000 [ 110.276585][ T6312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.276598][ T6312] R13: 00007fa27a7b6038 R14: 00007fa27a7b5fa0 R15: 00007ffe7a21b298 [ 110.276638][ T6312] [ 110.696485][ T6318] netlink: 'syz.4.93': attribute type 6 has an invalid length. [ 110.709151][ T6318] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.93'. [ 110.923426][ T1006] wlan1: Trigger new scan to find an IBSS to join [ 112.060161][ T3072] wlan1: Trigger new scan to find an IBSS to join [ 112.960781][ T60] wlan1: Trigger new scan to find an IBSS to join [ 112.976071][ T1006] wlan1: Creating new IBSS network, BSSID ce:1c:68:09:19:51 [ 113.295359][ T6357] netlink: 32 bytes leftover after parsing attributes in process `syz.0.98'. [ 113.321149][ T6357] netlink: 46 bytes leftover after parsing attributes in process `syz.0.98'. [ 113.338390][ T6357] netlink: 46 bytes leftover after parsing attributes in process `syz.0.98'. [ 113.592450][ T6369] netlink: 'syz.3.106': attribute type 6 has an invalid length. [ 113.600464][ T6369] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.106'. [ 113.958379][ T6379] FAULT_INJECTION: forcing a failure. [ 113.958379][ T6379] name failslab, interval 1, probability 0, space 0, times 0 [ 114.063012][ T6379] CPU: 0 UID: 0 PID: 6379 Comm: syz.1.109 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 114.063041][ T6379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.063054][ T6379] Call Trace: [ 114.063062][ T6379] [ 114.063071][ T6379] dump_stack_lvl+0x189/0x250 [ 114.063102][ T6379] ? __pfx____ratelimit+0x10/0x10 [ 114.063132][ T6379] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.063157][ T6379] ? __pfx__printk+0x10/0x10 [ 114.063192][ T6379] ? __pfx___might_resched+0x10/0x10 [ 114.063211][ T6379] ? fs_reclaim_acquire+0x7d/0x100 [ 114.063244][ T6379] should_fail_ex+0x414/0x560 [ 114.063277][ T6379] should_failslab+0xa8/0x100 [ 114.063309][ T6379] __kmalloc_noprof+0xcb/0x4f0 [ 114.063336][ T6379] ? nf_tables_newrule+0x1506/0x2890 [ 114.063356][ T6379] ? nla_strcmp+0x106/0x140 [ 114.063390][ T6379] nf_tables_newrule+0x1506/0x2890 [ 114.063430][ T6379] ? __pfx_nf_tables_newrule+0x10/0x10 [ 114.063454][ T6379] ? nfnl_pernet+0x23/0x240 [ 114.063491][ T6379] ? __nla_parse+0x40/0x60 [ 114.063532][ T6379] nfnetlink_rcv+0x1132/0x2520 [ 114.063595][ T6379] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.063640][ T6379] ? ref_tracker_free+0x63a/0x7d0 [ 114.063702][ T6379] ? __netlink_deliver_tap+0x807/0x850 [ 114.063733][ T6379] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.063783][ T6379] netlink_unicast+0x82c/0x9e0 [ 114.063821][ T6379] ? __pfx_netlink_unicast+0x10/0x10 [ 114.063851][ T6379] ? netlink_sendmsg+0x642/0xb30 [ 114.063878][ T6379] ? skb_put+0x11b/0x210 [ 114.063902][ T6379] netlink_sendmsg+0x805/0xb30 [ 114.063944][ T6379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.063978][ T6379] ? aa_sock_msg_perm+0xf1/0x1d0 [ 114.064013][ T6379] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.064035][ T6379] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.064067][ T6379] __sock_sendmsg+0x21c/0x270 [ 114.064098][ T6379] ____sys_sendmsg+0x505/0x830 [ 114.064127][ T6379] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.064159][ T6379] ? import_iovec+0x74/0xa0 [ 114.064187][ T6379] ___sys_sendmsg+0x21f/0x2a0 [ 114.064211][ T6379] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.064280][ T6379] ? __fget_files+0x2a/0x420 [ 114.064298][ T6379] ? __fget_files+0x3a0/0x420 [ 114.064329][ T6379] __x64_sys_sendmsg+0x19b/0x260 [ 114.064354][ T6379] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.064386][ T6379] ? __pfx_ksys_write+0x10/0x10 [ 114.064411][ T6379] ? rcu_is_watching+0x15/0xb0 [ 114.064438][ T6379] ? do_syscall_64+0xbe/0x3b0 [ 114.064473][ T6379] do_syscall_64+0xfa/0x3b0 [ 114.064501][ T6379] ? lockdep_hardirqs_on+0x9c/0x150 [ 114.064529][ T6379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.064550][ T6379] ? clear_bhb_loop+0x60/0xb0 [ 114.064576][ T6379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.064596][ T6379] RIP: 0033:0x7fa27a58ebe9 [ 114.064614][ T6379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.064631][ T6379] RSP: 002b:00007fa27b4a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.064653][ T6379] RAX: ffffffffffffffda RBX: 00007fa27a7b5fa0 RCX: 00007fa27a58ebe9 [ 114.064668][ T6379] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 114.064681][ T6379] RBP: 00007fa27b4a0090 R08: 0000000000000000 R09: 0000000000000000 [ 114.064693][ T6379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.064705][ T6379] R13: 00007fa27a7b6038 R14: 00007fa27a7b5fa0 R15: 00007ffe7a21b298 [ 114.064739][ T6379] [ 114.898411][ T6391] netlink: 56 bytes leftover after parsing attributes in process `syz.2.114'. [ 114.936511][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.112'. [ 115.015154][ T6389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.112'. [ 115.486239][ T6409] netlink: 14 bytes leftover after parsing attributes in process `syz.0.118'. [ 115.873115][ T1006] wlan1: Trigger new scan to find an IBSS to join [ 116.812715][ T6442] FAULT_INJECTION: forcing a failure. [ 116.812715][ T6442] name failslab, interval 1, probability 0, space 0, times 0 [ 116.899466][ T1006] wlan1: Creating new IBSS network, BSSID f2:aa:5f:1f:83:64 [ 116.938922][ T6442] CPU: 0 UID: 0 PID: 6442 Comm: syz.2.128 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 116.938954][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.938967][ T6442] Call Trace: [ 116.938975][ T6442] [ 116.938984][ T6442] dump_stack_lvl+0x189/0x250 [ 116.939023][ T6442] ? __pfx____ratelimit+0x10/0x10 [ 116.939053][ T6442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.939079][ T6442] ? __pfx__printk+0x10/0x10 [ 116.939116][ T6442] ? __pfx___might_resched+0x10/0x10 [ 116.939135][ T6442] ? fs_reclaim_acquire+0x7d/0x100 [ 116.939160][ T6442] should_fail_ex+0x414/0x560 [ 116.939192][ T6442] should_failslab+0xa8/0x100 [ 116.939224][ T6442] __kmalloc_cache_noprof+0x70/0x3d0 [ 116.939252][ T6442] ? ip_set_create+0x348/0x1940 [ 116.939280][ T6442] ip_set_create+0x348/0x1940 [ 116.939315][ T6442] ? __mutex_lock+0x335/0x1360 [ 116.939347][ T6442] ? __pfx_ip_set_create+0x10/0x10 [ 116.939411][ T6442] nfnetlink_rcv_msg+0xb4d/0x1130 [ 116.939438][ T6442] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 116.939484][ T6442] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.939519][ T6442] ? kasan_save_free_info+0x46/0x50 [ 116.939568][ T6442] ? perf_trace_preemptirq_template+0xa3/0x340 [ 116.939594][ T6442] ? kasan_quarantine_put+0x3d/0x220 [ 116.939637][ T6442] netlink_rcv_skb+0x208/0x470 [ 116.939667][ T6442] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 116.939693][ T6442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.939733][ T6442] ? bpf_lsm_capable+0x9/0x20 [ 116.939762][ T6442] ? security_capable+0x7e/0x2e0 [ 116.939801][ T6442] nfnetlink_rcv+0x26a/0x2520 [ 116.939831][ T6442] ? __dev_queue_xmit+0x1d79/0x3b50 [ 116.939866][ T6442] ? __dev_queue_xmit+0x27b/0x3b50 [ 116.939902][ T6442] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 116.939926][ T6442] ? __pfx___dev_queue_xmit+0x10/0x10 [ 116.939963][ T6442] ? ref_tracker_free+0x63a/0x7d0 [ 116.939990][ T6442] ? __asan_memcpy+0x40/0x70 [ 116.940017][ T6442] ? __pfx_ref_tracker_free+0x10/0x10 [ 116.940041][ T6442] ? __skb_clone+0x63/0x7a0 [ 116.940067][ T6442] ? __skb_clone+0x483/0x7a0 [ 116.940097][ T6442] ? skb_clone+0x246/0x3a0 [ 116.940122][ T6442] ? __netlink_deliver_tap+0x807/0x850 [ 116.940152][ T6442] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.940186][ T6442] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.940223][ T6442] netlink_unicast+0x82c/0x9e0 [ 116.940257][ T6442] ? __pfx_netlink_unicast+0x10/0x10 [ 116.940282][ T6442] ? netlink_sendmsg+0x642/0xb30 [ 116.940308][ T6442] ? skb_put+0x11b/0x210 [ 116.940328][ T6442] netlink_sendmsg+0x805/0xb30 [ 116.940369][ T6442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.940402][ T6442] ? aa_sock_msg_perm+0xf1/0x1d0 [ 116.940436][ T6442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 116.940458][ T6442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.940489][ T6442] __sock_sendmsg+0x21c/0x270 [ 116.940519][ T6442] ____sys_sendmsg+0x505/0x830 [ 116.940547][ T6442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.940578][ T6442] ? import_iovec+0x74/0xa0 [ 116.940606][ T6442] ___sys_sendmsg+0x21f/0x2a0 [ 116.940630][ T6442] ? __pfx____sys_sendmsg+0x10/0x10 [ 116.940692][ T6442] ? __fget_files+0x2a/0x420 [ 116.940710][ T6442] ? __fget_files+0x3a0/0x420 [ 116.940737][ T6442] __x64_sys_sendmsg+0x19b/0x260 [ 116.940762][ T6442] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 116.940795][ T6442] ? __pfx_ksys_write+0x10/0x10 [ 116.940820][ T6442] ? rcu_is_watching+0x15/0xb0 [ 116.940848][ T6442] ? do_syscall_64+0xbe/0x3b0 [ 116.940882][ T6442] do_syscall_64+0xfa/0x3b0 [ 116.940911][ T6442] ? lockdep_hardirqs_on+0x9c/0x150 [ 116.940938][ T6442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.940958][ T6442] ? clear_bhb_loop+0x60/0xb0 [ 116.940983][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.941002][ T6442] RIP: 0033:0x7fe1a498ebe9 [ 116.941027][ T6442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.941044][ T6442] RSP: 002b:00007fe1a579b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.941066][ T6442] RAX: ffffffffffffffda RBX: 00007fe1a4bb5fa0 RCX: 00007fe1a498ebe9 [ 116.941082][ T6442] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 116.941094][ T6442] RBP: 00007fe1a579b090 R08: 0000000000000000 R09: 0000000000000000 [ 116.941106][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.941118][ T6442] R13: 00007fe1a4bb6038 R14: 00007fe1a4bb5fa0 R15: 00007fff8401d798 [ 116.941151][ T6442] [ 116.955221][ T6444] netlink: 763 bytes leftover after parsing attributes in process `syz.0.130'. [ 117.955013][ T1006] wlan1: Trigger new scan to find an IBSS to join [ 118.544307][ T6468] netlink: 132 bytes leftover after parsing attributes in process `syz.2.135'. [ 118.666871][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.139'. [ 118.860605][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 119.060176][ T13] wlan1: Creating new IBSS network, BSSID 6e:ec:e7:8c:74:62 [ 119.289239][ T6500] netlink: 'syz.1.152': attribute type 2 has an invalid length. [ 119.309769][ T6498] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 119.332761][ T6500] netlink: 'syz.1.152': attribute type 1 has an invalid length. [ 119.341418][ T6502] Set syz0 is full, maxelem 0 reached [ 119.594836][ T6514] netlink: 'syz.0.157': attribute type 21 has an invalid length. [ 119.842968][ T6523] netlink: 'syz.4.161': attribute type 8 has an invalid length. [ 119.850757][ T6523] netlink: 48 bytes leftover after parsing attributes in process `syz.4.161'. [ 119.888599][ T6526] netlink: 'syz.2.163': attribute type 5 has an invalid length. [ 120.022818][ T6524] syz.1.160 (6524) used greatest stack depth: 17864 bytes left [ 120.378016][ T6543] netlink: 'syz.3.171': attribute type 6 has an invalid length. [ 120.615134][ T6546] netlink: 'syz.0.170': attribute type 29 has an invalid length. [ 122.568184][ T6564] netlink: 'syz.3.177': attribute type 6 has an invalid length. [ 122.589679][ T6564] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.177'. [ 123.074320][ T6592] netlink: 'syz.0.188': attribute type 3 has an invalid length. [ 123.128573][ T6592] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.188'. [ 123.240450][ T6602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.189'. [ 123.686216][ T6608] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 123.823365][ T6604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.187'. [ 124.083598][ T6628] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.197'. [ 124.269487][ T6608] hsr_slave_0 (unregistering): left promiscuous mode [ 124.639399][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.202'. [ 124.730546][ T6641] netlink: 40 bytes leftover after parsing attributes in process `syz.0.202'. [ 125.531328][ T6651] validate_nla: 3 callbacks suppressed [ 125.531383][ T6651] netlink: 'syz.4.206': attribute type 6 has an invalid length. [ 125.624063][ T6651] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.206'. [ 125.749385][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 125.762609][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 126.170795][ T6682] netlink: 'syz.1.211': attribute type 6 has an invalid length. [ 128.001022][ T6697] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 128.013631][ T472] wlan1: Selected IBSS BSSID f2:aa:5f:1f:83:64 based on configured SSID [ 128.029253][ T6705] sit0: entered allmulticast mode [ 128.056593][ T6708] sit0: entered promiscuous mode [ 128.738210][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.783028][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.821424][ T6728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.838797][ T6728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.007862][ T6741] netlink: 'syz.1.231': attribute type 10 has an invalid length. [ 129.039429][ T6741] __nla_validate_parse: 3 callbacks suppressed [ 129.039465][ T6741] netlink: 152 bytes leftover after parsing attributes in process `syz.1.231'. [ 130.376966][ T6774] netlink: 'syz.0.246': attribute type 6 has an invalid length. [ 130.414810][ T6774] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.246'. [ 130.705187][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.250'. [ 130.913529][ T6795] netlink: 'syz.1.252': attribute type 8 has an invalid length. [ 130.952580][ T6795] netlink: 'syz.1.252': attribute type 6 has an invalid length. [ 130.985183][ T6795] netlink: 144448 bytes leftover after parsing attributes in process `syz.1.252'. [ 131.667881][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 131.711103][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.258'. [ 132.837595][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.850579][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.992104][ T6824] netlink: 'syz.4.261': attribute type 6 has an invalid length. [ 133.024207][ T6824] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.261'. [ 133.281686][ T5872] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 134.299566][ T6865] netlink: 228 bytes leftover after parsing attributes in process `syz.3.273'. [ 134.879507][ T6877] netlink: 'syz.2.281': attribute type 10 has an invalid length. [ 134.914913][ T6877] netlink: 152 bytes leftover after parsing attributes in process `syz.2.281'. [ 135.066268][ T6882] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 135.074691][ T6882] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 135.127565][ T6882] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 135.163142][ T6882] netlink: 'syz.1.282': attribute type 1 has an invalid length. [ 135.315466][ T5872] Bluetooth: hci3: command tx timeout [ 135.615291][ T6898] netlink: 17 bytes leftover after parsing attributes in process `syz.3.288'. [ 135.633689][ T6898] netlink: zone id is out of range [ 135.639123][ T6898] netlink: zone id is out of range [ 135.649101][ T6898] netlink: zone id is out of range [ 135.659963][ T6898] netlink: zone id is out of range [ 135.669709][ T6898] netlink: zone id is out of range [ 135.681366][ T6898] netlink: zone id is out of range [ 135.689050][ T6898] netlink: zone id is out of range [ 135.708302][ T6898] netlink: zone id is out of range [ 135.744562][ T6898] netlink: zone id is out of range [ 135.767978][ T6898] netlink: zone id is out of range [ 136.325090][ T6918] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.293'. [ 136.460164][ T6929] netlink: 228 bytes leftover after parsing attributes in process `syz.1.295'. [ 136.600777][ T6928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 136.932751][ T6941] netlink: 'syz.3.300': attribute type 2 has an invalid length. [ 136.955290][ T6941] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 136.969648][ T6943] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.367842][ T6957] netlink: 'syz.4.306': attribute type 6 has an invalid length. [ 137.377777][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.303'. [ 137.892531][ T6975] syz.0.313 uses obsolete (PF_INET,SOCK_PACKET) [ 138.067928][ T6987] netlink: 228 bytes leftover after parsing attributes in process `syz.4.317'. [ 138.330624][ T6996] netlink: 'syz.1.321': attribute type 21 has an invalid length. [ 138.377911][ T6996] netlink: 'syz.1.321': attribute type 4 has an invalid length. [ 138.390055][ T6996] netlink: 156 bytes leftover after parsing attributes in process `syz.1.321'. [ 138.837104][ T7010] netlink: 44 bytes leftover after parsing attributes in process `syz.0.328'. [ 138.892699][ T7012] netlink: 'syz.1.327': attribute type 6 has an invalid length. [ 140.087521][ T7053] __nla_validate_parse: 1 callbacks suppressed [ 140.087542][ T7053] netlink: 228 bytes leftover after parsing attributes in process `syz.4.343'. [ 141.219619][ T7091] FAULT_INJECTION: forcing a failure. [ 141.219619][ T7091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.272648][ T7091] CPU: 0 UID: 0 PID: 7091 Comm: syz.0.359 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 141.272688][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.272701][ T7091] Call Trace: [ 141.272710][ T7091] [ 141.272720][ T7091] dump_stack_lvl+0x189/0x250 [ 141.272760][ T7091] ? __pfx____ratelimit+0x10/0x10 [ 141.272790][ T7091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.272823][ T7091] ? __pfx__printk+0x10/0x10 [ 141.272869][ T7091] should_fail_ex+0x414/0x560 [ 141.272906][ T7091] _copy_to_user+0x31/0xb0 [ 141.272933][ T7091] simple_read_from_buffer+0xe1/0x170 [ 141.272972][ T7091] proc_fail_nth_read+0x1b3/0x220 [ 141.273001][ T7091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.273030][ T7091] ? rw_verify_area+0x2a6/0x4d0 [ 141.273057][ T7091] ? __lock_acquire+0xab9/0xd20 [ 141.273087][ T7091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.273114][ T7091] vfs_read+0x1fd/0xa30 [ 141.273141][ T7091] ? fdget_pos+0x247/0x320 [ 141.273166][ T7091] ? __pfx___mutex_lock+0x10/0x10 [ 141.273210][ T7091] ? __pfx_vfs_read+0x10/0x10 [ 141.273240][ T7091] ? __fget_files+0x2a/0x420 [ 141.273264][ T7091] ? __fget_files+0x3a0/0x420 [ 141.273281][ T7091] ? __fget_files+0x2a/0x420 [ 141.273329][ T7091] ksys_read+0x145/0x250 [ 141.273361][ T7091] ? __pfx_ksys_read+0x10/0x10 [ 141.273388][ T7091] ? rcu_is_watching+0x15/0xb0 [ 141.273416][ T7091] ? do_syscall_64+0xbe/0x3b0 [ 141.273453][ T7091] do_syscall_64+0xfa/0x3b0 [ 141.273482][ T7091] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.273511][ T7091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.273533][ T7091] ? clear_bhb_loop+0x60/0xb0 [ 141.273560][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.273581][ T7091] RIP: 0033:0x7f643058d5fc [ 141.273608][ T7091] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.273626][ T7091] RSP: 002b:00007f6431470030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.273654][ T7091] RAX: ffffffffffffffda RBX: 00007f64307b5fa0 RCX: 00007f643058d5fc [ 141.273670][ T7091] RDX: 000000000000000f RSI: 00007f64314700a0 RDI: 0000000000000004 [ 141.273683][ T7091] RBP: 00007f6431470090 R08: 0000000000000000 R09: 0000000000000000 [ 141.273695][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.273706][ T7091] R13: 00007f64307b6038 R14: 00007f64307b5fa0 R15: 00007ffe6ea66e18 [ 141.273742][ T7091] [ 141.972025][ T7095] netlink: 'syz.0.360': attribute type 6 has an invalid length. [ 142.580063][ T7116] netlink: 228 bytes leftover after parsing attributes in process `syz.1.367'. [ 142.614997][ T7114] netlink: 40 bytes leftover after parsing attributes in process `syz.4.368'. [ 142.933223][ T7121] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 142.955593][ T7121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.370'. [ 142.984679][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 143.012876][ T7121] team0: entered promiscuous mode [ 143.038764][ T7121] team_slave_0: entered promiscuous mode [ 143.088680][ T7121] team_slave_1: entered promiscuous mode [ 143.110350][ T7121] team0: entered allmulticast mode [ 143.135576][ T7121] team_slave_0: entered allmulticast mode [ 143.157185][ T7121] team_slave_1: entered allmulticast mode [ 143.189777][ T7121] bridge0: port 3(team0) entered blocking state [ 143.199985][ T7121] bridge0: port 3(team0) entered disabled state [ 143.225824][ T7121] bridge0: port 3(team0) entered blocking state [ 143.233085][ T7121] bridge0: port 3(team0) entered forwarding state [ 144.050757][ T7141] netlink: 'syz.4.378': attribute type 6 has an invalid length. [ 144.109046][ T7141] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.378'. [ 144.905267][ T7166] netlink: 228 bytes leftover after parsing attributes in process `syz.4.384'. [ 146.866121][ T7176] netlink: 'syz.0.388': attribute type 2 has an invalid length. [ 146.888270][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 148.625671][ T7198] netlink: 'syz.1.394': attribute type 6 has an invalid length. [ 148.633868][ T7198] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.394'. [ 148.982082][ T7206] netlink: 76 bytes leftover after parsing attributes in process `syz.0.399'. [ 149.123933][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 149.152714][ T7210] netlink: 228 bytes leftover after parsing attributes in process `syz.2.400'. [ 149.295703][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 149.353813][ T7218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 150.010357][ T7232] netlink: 120 bytes leftover after parsing attributes in process `syz.0.407'. [ 150.706206][ T7252] netlink: 14 bytes leftover after parsing attributes in process `syz.0.416'. [ 150.949022][ T7259] netlink: 228 bytes leftover after parsing attributes in process `syz.4.418'. [ 151.038447][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.2.420'. [ 151.809829][ T7292] netlink: 'syz.2.429': attribute type 3 has an invalid length. [ 152.011890][ T7300] netlink: 'syz.4.432': attribute type 6 has an invalid length. [ 152.041787][ T7300] __nla_validate_parse: 1 callbacks suppressed [ 152.041820][ T7300] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.432'. [ 152.107221][ T7307] netlink: 12 bytes leftover after parsing attributes in process `syz.0.435'. [ 152.535360][ T7326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.441'. [ 152.600376][ T7331] netlink: 'syz.3.443': attribute type 6 has an invalid length. [ 152.950211][ T7341] netlink: 'syz.4.447': attribute type 5 has an invalid length. [ 153.089090][ T7346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.449'. [ 153.891993][ T7351] netlink: 'syz.0.451': attribute type 6 has an invalid length. [ 153.920318][ T7351] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.451'. [ 154.135627][ T7359] netlink: 'syz.2.454': attribute type 6 has an invalid length. [ 154.150133][ T7359] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.454'. [ 155.394699][ T7387] netlink: 'syz.1.462': attribute type 21 has an invalid length. [ 155.404381][ T7387] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 155.551173][ T7396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.465'. [ 155.786069][ T7403] netlink: 'syz.0.468': attribute type 6 has an invalid length. [ 155.828947][ T7403] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.468'. [ 157.127952][ T7438] netlink: 'syz.1.480': attribute type 5 has an invalid length. [ 157.751484][ T7464] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.489'. [ 158.041165][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 158.207027][ T7471] netlink: 'syz.4.491': attribute type 39 has an invalid length. [ 159.103971][ T7492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 159.173076][ T7493] netlink: 44 bytes leftover after parsing attributes in process `syz.3.499'. [ 162.983806][ T7519] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.507'. [ 163.517444][ T7535] netlink: 228 bytes leftover after parsing attributes in process `syz.2.513'. [ 164.612182][ T7553] netlink: 'syz.2.521': attribute type 10 has an invalid length. [ 164.678102][ T7553] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 165.807873][ T7580] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.530'. [ 165.906330][ T7582] netlink: 228 bytes leftover after parsing attributes in process `syz.0.531'. [ 167.641621][ T7601] netlink: 80 bytes leftover after parsing attributes in process `syz.0.539'. [ 167.668582][ T7602] netlink: 44 bytes leftover after parsing attributes in process `syz.4.536'. [ 167.691679][ T7595] netlink: 44 bytes leftover after parsing attributes in process `syz.4.536'. [ 167.710388][ T7595] netlink: 44 bytes leftover after parsing attributes in process `syz.4.536'. [ 168.367399][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.547'. [ 168.427653][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.547'. [ 168.695957][ T7624] netlink: 'syz.2.546': attribute type 6 has an invalid length. [ 168.745618][ T7624] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.546'. [ 169.005731][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.547'. [ 169.043976][ T7620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.547'. [ 169.351956][ T7630] netlink: 228 bytes leftover after parsing attributes in process `syz.4.549'. [ 169.371251][ T7638] netlink: 80 bytes leftover after parsing attributes in process `syz.1.551'. [ 169.841232][ T7642] netlink: 'syz.3.553': attribute type 6 has an invalid length. [ 169.873963][ T7642] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.553'. [ 170.314379][ T7659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.559'. [ 170.596459][ T7672] netlink: 80 bytes leftover after parsing attributes in process `syz.0.564'. [ 171.389191][ T7696] netlink: 'syz.3.573': attribute type 6 has an invalid length. [ 171.541128][ T7700] netlink: 'syz.0.575': attribute type 10 has an invalid length. [ 172.281908][ T7700] hsr_slave_0 (unregistering): left promiscuous mode [ 173.787551][ T7747] __nla_validate_parse: 4 callbacks suppressed [ 173.787570][ T7747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.595'. [ 173.838722][ T7751] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 173.850108][ T7750] netlink: 'syz.1.596': attribute type 6 has an invalid length. [ 173.864566][ T7750] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.596'. [ 173.918220][ T7751] syzkaller0: entered promiscuous mode [ 173.924805][ T7751] syzkaller0: entered allmulticast mode [ 174.026761][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 174.258154][ T7769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.603'. [ 174.355657][ T7765] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 174.549663][ T7776] netlink: 56 bytes leftover after parsing attributes in process `syz.3.605'. [ 174.773948][ T7787] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.610'. [ 175.012056][ T7794] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 175.497671][ T7792] netlink: 'syz.0.612': attribute type 21 has an invalid length. [ 175.522918][ T7792] netlink: 128 bytes leftover after parsing attributes in process `syz.0.612'. [ 175.615624][ T7804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.616'. [ 175.722521][ T7792] netlink: 3 bytes leftover after parsing attributes in process `syz.0.612'. [ 175.984426][ T7816] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 176.402881][ T7833] netlink: 763 bytes leftover after parsing attributes in process `syz.0.627'. [ 176.416845][ T7819] netlink: 'syz.1.624': attribute type 4 has an invalid length. [ 176.459249][ T7819] netlink: 152 bytes leftover after parsing attributes in process `syz.1.624'. [ 176.543269][ T7819] net_ratelimit: 74 callbacks suppressed [ 176.543291][ T7819] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 176.905453][ T7830] netlink: 'syz.4.628': attribute type 6 has an invalid length. [ 177.150194][ T7840] netlink: 'syz.1.630': attribute type 6 has an invalid length. [ 178.317260][ T7870] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 178.836490][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 178.855956][ T7870] hsr_slave_0 (unregistering): left promiscuous mode [ 179.291490][ T7910] __nla_validate_parse: 4 callbacks suppressed [ 179.291512][ T7910] netlink: 44 bytes leftover after parsing attributes in process `syz.4.655'. [ 179.432163][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.657'. [ 179.875866][ T49] wlan1: Trigger new scan to find an IBSS to join [ 180.166164][ T472] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 180.639554][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'. [ 180.649145][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'. [ 180.987656][ T7964] netlink: 'syz.2.673': attribute type 8 has an invalid length. [ 181.019490][ T7964] netlink: 'syz.2.673': attribute type 6 has an invalid length. [ 181.093430][ T7964] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.673'. [ 181.218088][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'. [ 181.256273][ T7958] netlink: 40 bytes leftover after parsing attributes in process `syz.3.672'. [ 181.608735][ T7978] netlink: 44 bytes leftover after parsing attributes in process `syz.3.677'. [ 181.838501][ T7987] netlink: 16 bytes leftover after parsing attributes in process `syz.3.680'. [ 181.883549][ T7990] FAULT_INJECTION: forcing a failure. [ 181.883549][ T7990] name failslab, interval 1, probability 0, space 0, times 0 [ 181.949180][ T7990] CPU: 0 UID: 0 PID: 7990 Comm: syz.0.682 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 181.949211][ T7990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.949224][ T7990] Call Trace: [ 181.949232][ T7990] [ 181.949242][ T7990] dump_stack_lvl+0x189/0x250 [ 181.949272][ T7990] ? __pfx____ratelimit+0x10/0x10 [ 181.949302][ T7990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.949328][ T7990] ? __pfx__printk+0x10/0x10 [ 181.949373][ T7990] should_fail_ex+0x414/0x560 [ 181.949408][ T7990] should_failslab+0xa8/0x100 [ 181.949443][ T7990] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 181.949485][ T7990] ? __alloc_skb+0x112/0x2d0 [ 181.949522][ T7990] __alloc_skb+0x112/0x2d0 [ 181.949557][ T7990] __pfkey_xfrm_state2msg+0x495/0x3d30 [ 181.949599][ T7990] ? net_generic+0x1e/0x240 [ 181.949635][ T7990] pfkey_send_notify+0x1b0/0xdf0 [ 181.949664][ T7990] ? km_state_notify+0x25/0x1f0 [ 181.949686][ T7990] ? __pfx_pfkey_send_notify+0x10/0x10 [ 181.949715][ T7990] km_state_notify+0x110/0x1f0 [ 181.949743][ T7990] pfkey_add+0x2000/0x2e00 [ 181.949796][ T7990] ? __pfx_pfkey_add+0x10/0x10 [ 181.949833][ T7990] ? pfkey_sendmsg+0x961/0x1090 [ 181.949872][ T7990] pfkey_sendmsg+0xbfb/0x1090 [ 181.949929][ T7990] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 181.949988][ T7990] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 181.950019][ T7990] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.950054][ T7990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.950077][ T7990] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 181.950109][ T7990] __sock_sendmsg+0x21c/0x270 [ 181.950139][ T7990] ____sys_sendmsg+0x505/0x830 [ 181.950167][ T7990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.950201][ T7990] ? import_iovec+0x74/0xa0 [ 181.950229][ T7990] ___sys_sendmsg+0x21f/0x2a0 [ 181.950253][ T7990] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.950315][ T7990] ? __fget_files+0x2a/0x420 [ 181.950334][ T7990] ? __fget_files+0x3a0/0x420 [ 181.950364][ T7990] __x64_sys_sendmsg+0x19b/0x260 [ 181.950389][ T7990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.950439][ T7990] do_syscall_64+0xfa/0x3b0 [ 181.950471][ T7990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.950491][ T7990] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 181.950512][ T7990] ? clear_bhb_loop+0x60/0xb0 [ 181.950538][ T7990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.950558][ T7990] RIP: 0033:0x7f643058ebe9 [ 181.950577][ T7990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.950595][ T7990] RSP: 002b:00007f6431470038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.950617][ T7990] RAX: ffffffffffffffda RBX: 00007f64307b5fa0 RCX: 00007f643058ebe9 [ 181.950632][ T7990] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 181.950663][ T7990] RBP: 00007f6431470090 R08: 0000000000000000 R09: 0000000000000000 [ 181.950676][ T7990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.950688][ T7990] R13: 00007f64307b6038 R14: 00007f64307b5fa0 R15: 00007ffe6ea66e18 [ 181.950723][ T7990] [ 182.500886][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 182.523173][ T8003] netlink: 'syz.2.688': attribute type 10 has an invalid length. [ 182.531093][ T8003] bond0: entered promiscuous mode [ 182.538457][ T8003] bond_slave_0: entered promiscuous mode [ 182.544786][ T8003] bond_slave_1: entered promiscuous mode [ 182.550942][ T8003] dummy0: entered promiscuous mode [ 182.557104][ T8003] bridge0: port 4(bond0) entered blocking state [ 182.563908][ T8003] bridge0: port 4(bond0) entered disabled state [ 182.570392][ T8003] bond0: entered allmulticast mode [ 182.577399][ T8003] bond_slave_0: entered allmulticast mode [ 182.583231][ T8003] bond_slave_1: entered allmulticast mode [ 182.594411][ T8003] dummy0: entered allmulticast mode [ 182.628701][ T8003] bridge0: port 4(bond0) entered blocking state [ 182.635205][ T8003] bridge0: port 4(bond0) entered forwarding state [ 182.669734][ T8003] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 183.392416][ T5872] Bluetooth: hci2: unexpected subevent 0x03 length: 150 > 9 [ 183.873450][ T49] wlan1: Trigger new scan to find an IBSS to join [ 184.543004][ T8060] __nla_validate_parse: 4 callbacks suppressed [ 184.543024][ T8060] netlink: 16 bytes leftover after parsing attributes in process `syz.1.707'. [ 184.638851][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.708'. [ 184.840411][ T3509] wlan1: Trigger new scan to find an IBSS to join [ 185.034808][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 185.161531][ T8081] tap0: tun_chr_ioctl cmd 1074025677 [ 185.179094][ T13] wlan1: Creating new IBSS network, BSSID b2:a7:33:35:7c:15 [ 185.199579][ T8081] tap0: linktype set to 823 [ 185.233222][ T8081] tap0: tun_chr_ioctl cmd 2147767520 [ 186.530170][ T3509] wlan1: Creating new IBSS network, BSSID 26:95:d4:54:b9:46 [ 186.981106][ T8114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 187.155347][ T8115] netlink: 'syz.0.726': attribute type 10 has an invalid length. [ 187.281146][ T8119] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 187.573069][ T8115] team0: Port device wlan1 added [ 188.096704][ T8147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.737'. [ 189.876523][ T49] wlan1: Trigger new scan to find an IBSS to join [ 189.892746][ T49] wlan1: Trigger new scan to find an IBSS to join [ 190.047952][ T8188] netlink: 44 bytes leftover after parsing attributes in process `syz.3.750'. [ 190.088864][ T8194] netlink: 'syz.0.751': attribute type 8 has an invalid length. [ 190.097487][ T8193] netlink: 44 bytes leftover after parsing attributes in process `syz.4.753'. [ 190.106680][ T8194] netlink: 'syz.0.751': attribute type 6 has an invalid length. [ 190.115294][ T8194] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.751'. [ 190.310744][ T8201] netlink: 220 bytes leftover after parsing attributes in process `syz.2.755'. [ 190.326085][ T8198] netlink: 'syz.3.754': attribute type 6 has an invalid length. [ 190.344739][ T8198] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.754'. [ 190.370665][ T8203] netlink: 'syz.2.755': attribute type 10 has an invalid length. [ 190.393112][ T8204] netlink: 'syz.4.756': attribute type 10 has an invalid length. [ 190.982830][ T8203] bridge0: port 4(bond0) entered disabled state [ 191.159965][ T8203] bond0: left allmulticast mode [ 191.173214][ T8203] bond_slave_0: left allmulticast mode [ 191.185935][ T8203] bond_slave_1: left allmulticast mode [ 191.195691][ T8203] dummy0: left allmulticast mode [ 191.239953][ T8215] netlink: 'syz.1.758': attribute type 2 has an invalid length. [ 191.247999][ T8215] netlink: 156 bytes leftover after parsing attributes in process `syz.1.758'. [ 191.316614][ T8203] bond0: left promiscuous mode [ 191.325255][ T8203] bond_slave_0: left promiscuous mode [ 191.335300][ T8203] bond_slave_1: left promiscuous mode [ 191.342549][ T8203] dummy0: left promiscuous mode [ 191.353442][ T8203] bridge0: port 4(bond0) entered disabled state [ 191.505288][ T8203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.538813][ T8203] bond0: entered promiscuous mode [ 191.547131][ T8203] bond_slave_0: entered promiscuous mode [ 191.566340][ T8203] bond_slave_1: entered promiscuous mode [ 191.576308][ T8203] dummy0: entered promiscuous mode [ 191.605330][ T8203] bond0: entered allmulticast mode [ 191.611039][ T8203] bond_slave_0: entered allmulticast mode [ 191.650791][ T8203] bond_slave_1: entered allmulticast mode [ 191.661798][ T8203] dummy0: entered allmulticast mode [ 191.746668][ T8203] team0: Port device bond0 added [ 192.233504][ T8230] netlink: 'syz.3.762': attribute type 2 has an invalid length. [ 192.585841][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 192.599724][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 192.874588][ T8265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 192.892313][ T8265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.775'. [ 193.875800][ T8295] netlink: 'syz.4.785': attribute type 8 has an invalid length. [ 193.897770][ T8295] netlink: 'syz.4.785': attribute type 6 has an invalid length. [ 194.309905][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.317918][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.321672][ T8304] netlink: 'syz.1.788': attribute type 6 has an invalid length. [ 194.832744][ T36] wlan1: Trigger new scan to find an IBSS to join [ 194.839398][ T3072] wlan1: Trigger new scan to find an IBSS to join [ 195.088425][ T8296] bond0: (slave dummy0): Releasing backup interface [ 195.108967][ T8296] dummy0 (unregistering): left promiscuous mode [ 195.116218][ T8296] dummy0 (unregistering): left allmulticast mode [ 195.762766][ T49] wlan1: Creating new IBSS network, BSSID 1a:74:b2:4f:63:dc [ 195.774447][ T3072] wlan1: Creating new IBSS network, BSSID 76:ef:f0:64:09:5b [ 195.787072][ T8335] __nla_validate_parse: 8 callbacks suppressed [ 195.787090][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.801'. [ 195.820531][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 195.859966][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.799'. [ 195.973640][ T8347] netlink: 44 bytes leftover after parsing attributes in process `syz.3.806'. [ 196.413363][ T8359] netlink: 'syz.1.811': attribute type 10 has an invalid length. [ 197.177282][ T8359] hsr_slave_0 (unregistering): left promiscuous mode [ 197.569881][ T8390] FAULT_INJECTION: forcing a failure. [ 197.569881][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 197.596814][ T8390] CPU: 0 UID: 0 PID: 8390 Comm: syz.1.822 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 197.596845][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.596858][ T8390] Call Trace: [ 197.596867][ T8390] [ 197.596876][ T8390] dump_stack_lvl+0x189/0x250 [ 197.596906][ T8390] ? __pfx____ratelimit+0x10/0x10 [ 197.596935][ T8390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.596961][ T8390] ? __pfx__printk+0x10/0x10 [ 197.596996][ T8390] ? __pfx___might_resched+0x10/0x10 [ 197.597021][ T8390] should_fail_ex+0x414/0x560 [ 197.597054][ T8390] should_failslab+0xa8/0x100 [ 197.597087][ T8390] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 197.597117][ T8390] ? __alloc_skb+0x112/0x2d0 [ 197.597152][ T8390] __alloc_skb+0x112/0x2d0 [ 197.597187][ T8390] netlink_sendmsg+0x5c6/0xb30 [ 197.597229][ T8390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.597264][ T8390] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.597297][ T8390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.597319][ T8390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.597349][ T8390] __sock_sendmsg+0x21c/0x270 [ 197.597377][ T8390] ____sys_sendmsg+0x505/0x830 [ 197.597404][ T8390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.597435][ T8390] ? import_iovec+0x74/0xa0 [ 197.597463][ T8390] ___sys_sendmsg+0x21f/0x2a0 [ 197.597487][ T8390] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.597553][ T8390] ? __fget_files+0x2a/0x420 [ 197.597571][ T8390] ? __fget_files+0x3a0/0x420 [ 197.597601][ T8390] __x64_sys_sendmsg+0x19b/0x260 [ 197.597620][ T8390] ? perf_trace_run_bpf_submit+0x100/0x170 [ 197.597645][ T8390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.597677][ T8390] ? __pfx_ksys_write+0x10/0x10 [ 197.597702][ T8390] ? rcu_is_watching+0x15/0xb0 [ 197.597728][ T8390] ? do_syscall_64+0xbe/0x3b0 [ 197.597762][ T8390] do_syscall_64+0xfa/0x3b0 [ 197.597798][ T8390] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.597826][ T8390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.597846][ T8390] ? clear_bhb_loop+0x60/0xb0 [ 197.597872][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.597892][ T8390] RIP: 0033:0x7fa27a58ebe9 [ 197.597911][ T8390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.597928][ T8390] RSP: 002b:00007fa27b4a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.597950][ T8390] RAX: ffffffffffffffda RBX: 00007fa27a7b5fa0 RCX: 00007fa27a58ebe9 [ 197.597965][ T8390] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 197.597978][ T8390] RBP: 00007fa27b4a0090 R08: 0000000000000000 R09: 0000000000000000 [ 197.597990][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.598002][ T8390] R13: 00007fa27a7b6038 R14: 00007fa27a7b5fa0 R15: 00007ffe7a21b298 [ 197.598035][ T8390] [ 198.505901][ T8414] netlink: 'syz.3.831': attribute type 8 has an invalid length. [ 198.555545][ T8417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.832'. [ 198.566106][ T8414] netlink: 'syz.3.831': attribute type 6 has an invalid length. [ 198.602751][ T8414] netlink: 144448 bytes leftover after parsing attributes in process `syz.3.831'. [ 199.469240][ T8429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.835'. [ 200.728589][ T8463] FAULT_INJECTION: forcing a failure. [ 200.728589][ T8463] name failslab, interval 1, probability 0, space 0, times 0 [ 200.777006][ T8463] CPU: 0 UID: 0 PID: 8463 Comm: syz.0.847 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 200.777036][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 200.777049][ T8463] Call Trace: [ 200.777058][ T8463] [ 200.777067][ T8463] dump_stack_lvl+0x189/0x250 [ 200.777098][ T8463] ? __pfx____ratelimit+0x10/0x10 [ 200.777128][ T8463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.777155][ T8463] ? __pfx__printk+0x10/0x10 [ 200.777191][ T8463] ? __pfx___might_resched+0x10/0x10 [ 200.777217][ T8463] should_fail_ex+0x414/0x560 [ 200.777249][ T8463] should_failslab+0xa8/0x100 [ 200.777283][ T8463] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 200.777312][ T8463] ? __alloc_skb+0x112/0x2d0 [ 200.777348][ T8463] __alloc_skb+0x112/0x2d0 [ 200.777383][ T8463] netlink_sendmsg+0x5c6/0xb30 [ 200.777426][ T8463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.777467][ T8463] ? aa_sock_msg_perm+0xf1/0x1d0 [ 200.777504][ T8463] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 200.777528][ T8463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.777561][ T8463] __sock_sendmsg+0x21c/0x270 [ 200.777591][ T8463] ____sys_sendmsg+0x505/0x830 [ 200.777620][ T8463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.777651][ T8463] ? import_iovec+0x74/0xa0 [ 200.777679][ T8463] ___sys_sendmsg+0x21f/0x2a0 [ 200.777703][ T8463] ? __pfx____sys_sendmsg+0x10/0x10 [ 200.777765][ T8463] ? __fget_files+0x2a/0x420 [ 200.777783][ T8463] ? __fget_files+0x3a0/0x420 [ 200.777814][ T8463] __x64_sys_sendmsg+0x19b/0x260 [ 200.777839][ T8463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 200.777873][ T8463] ? __pfx_ksys_write+0x10/0x10 [ 200.777900][ T8463] ? rcu_is_watching+0x15/0xb0 [ 200.777926][ T8463] ? do_syscall_64+0xbe/0x3b0 [ 200.777961][ T8463] do_syscall_64+0xfa/0x3b0 [ 200.777990][ T8463] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.778024][ T8463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.778045][ T8463] ? clear_bhb_loop+0x60/0xb0 [ 200.778072][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.778092][ T8463] RIP: 0033:0x7f643058ebe9 [ 200.778112][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.778130][ T8463] RSP: 002b:00007f6431470038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.778153][ T8463] RAX: ffffffffffffffda RBX: 00007f64307b5fa0 RCX: 00007f643058ebe9 [ 200.778168][ T8463] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000004 [ 200.778182][ T8463] RBP: 00007f6431470090 R08: 0000000000000000 R09: 0000000000000000 [ 200.778194][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.778207][ T8463] R13: 00007f64307b6038 R14: 00007f64307b5fa0 R15: 00007ffe6ea66e18 [ 200.778247][ T8463] [ 201.231561][ T8471] netlink: 'syz.4.848': attribute type 2 has an invalid length. [ 201.293822][ T8471] netlink: 'syz.4.848': attribute type 8 has an invalid length. [ 201.369588][ T8471] netlink: 132 bytes leftover after parsing attributes in process `syz.4.848'. [ 201.513131][ T8471] netlink: 72 bytes leftover after parsing attributes in process `syz.4.848'. [ 202.032623][ T8495] netlink: 'syz.0.861': attribute type 10 has an invalid length. [ 202.408417][ T8500] netlink: 'syz.3.860': attribute type 6 has an invalid length. [ 202.461019][ T8500] netlink: 'syz.3.860': attribute type 1 has an invalid length. [ 202.564549][ T8500] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.860'. [ 203.001846][ T8503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.863'. [ 204.610576][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.662198][ T8503] bridge_slave_0 (unregistering): left allmulticast mode [ 204.669639][ T8503] bridge_slave_0 (unregistering): left promiscuous mode [ 204.702598][ T8503] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.829857][ T8510] netlink: 830 bytes leftover after parsing attributes in process `syz.1.866'. [ 205.535576][ T8531] netlink: 'syz.3.870': attribute type 10 has an invalid length. [ 205.573675][ T8531] netlink: 55 bytes leftover after parsing attributes in process `syz.3.870'. [ 206.151558][ T8545] FAULT_INJECTION: forcing a failure. [ 206.151558][ T8545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.152455][ T8545] [ 206.152464][ T8545] ====================================================== [ 206.152472][ T8545] WARNING: possible circular locking dependency detected [ 206.152494][ T8545] 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 Not tainted [ 206.152506][ T8545] ------------------------------------------------------ [ 206.152514][ T8545] syz.2.877/8545 is trying to acquire lock: [ 206.152524][ T8545] ffffffff8e12e120 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 206.152580][ T8545] [ 206.152580][ T8545] but task is already holding lock: [ 206.152587][ T8545] ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 206.152642][ T8545] [ 206.152642][ T8545] which lock already depends on the new lock. [ 206.152642][ T8545] [ 206.152649][ T8545] [ 206.152649][ T8545] the existing dependency chain (in reverse order) is: [ 206.152655][ T8545] [ 206.152655][ T8545] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 206.152682][ T8545] lock_acquire+0x120/0x360 [ 206.152711][ T8545] _raw_spin_lock_nested+0x32/0x50 [ 206.152737][ T8545] raw_spin_rq_lock_nested+0x2a/0x140 [ 206.152775][ T8545] task_rq_lock+0xbc/0x470 [ 206.152804][ T8545] cgroup_move_task+0x92/0x2a0 [ 206.152823][ T8545] css_set_move_task+0x658/0x9e0 [ 206.152845][ T8545] cgroup_post_fork+0x1ef/0x790 [ 206.152866][ T8545] copy_process+0x3862/0x3c00 [ 206.152886][ T8545] kernel_clone+0x21e/0x840 [ 206.152906][ T8545] user_mode_thread+0xdd/0x140 [ 206.152928][ T8545] rest_init+0x23/0x300 [ 206.152945][ T8545] start_kernel+0x3a9/0x410 [ 206.152963][ T8545] x86_64_start_reservations+0x24/0x30 [ 206.152989][ T8545] x86_64_start_kernel+0x143/0x1c0 [ 206.153013][ T8545] common_startup_64+0x13e/0x147 [ 206.153040][ T8545] [ 206.153040][ T8545] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 206.153067][ T8545] lock_acquire+0x120/0x360 [ 206.153094][ T8545] _raw_spin_lock_irqsave+0xa7/0xf0 [ 206.153117][ T8545] try_to_wake_up+0x67/0x12b0 [ 206.153139][ T8545] __wake_up_common_lock+0x134/0x1f0 [ 206.153164][ T8545] tty_port_default_wakeup+0xa2/0xf0 [ 206.153183][ T8545] serial8250_tx_chars+0x72e/0x970 [ 206.153212][ T8545] serial8250_handle_irq+0x633/0xbb0 [ 206.153242][ T8545] serial8250_default_handle_irq+0xbf/0x1e0 [ 206.153263][ T8545] serial8250_interrupt+0x8a/0x160 [ 206.153288][ T8545] __handle_irq_event_percpu+0x28c/0x980 [ 206.153312][ T8545] handle_irq_event+0x8b/0x1e0 [ 206.153335][ T8545] handle_edge_irq+0x23b/0xa10 [ 206.153354][ T8545] __common_interrupt+0x141/0x1f0 [ 206.153385][ T8545] common_interrupt+0xb6/0xe0 [ 206.153403][ T8545] asm_common_interrupt+0x26/0x40 [ 206.153422][ T8545] pv_native_safe_halt+0x13/0x20 [ 206.153446][ T8545] default_idle+0x13/0x20 [ 206.153461][ T8545] default_idle_call+0x74/0xb0 [ 206.153478][ T8545] do_idle+0x1e8/0x510 [ 206.153494][ T8545] cpu_startup_entry+0x44/0x60 [ 206.153511][ T8545] rest_init+0x2de/0x300 [ 206.153529][ T8545] start_kernel+0x3a9/0x410 [ 206.153546][ T8545] x86_64_start_reservations+0x24/0x30 [ 206.153571][ T8545] x86_64_start_kernel+0x143/0x1c0 [ 206.153596][ T8545] common_startup_64+0x13e/0x147 [ 206.153621][ T8545] [ 206.153621][ T8545] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 206.153649][ T8545] lock_acquire+0x120/0x360 [ 206.153676][ T8545] _raw_spin_lock_irqsave+0xa7/0xf0 [ 206.153699][ T8545] __wake_up_common_lock+0x2f/0x1f0 [ 206.153723][ T8545] tty_port_default_wakeup+0xa2/0xf0 [ 206.153748][ T8545] serial8250_tx_chars+0x72e/0x970 [ 206.153778][ T8545] serial8250_handle_irq+0x633/0xbb0 [ 206.153807][ T8545] serial8250_default_handle_irq+0xbf/0x1e0 [ 206.153828][ T8545] serial8250_interrupt+0x8a/0x160 [ 206.153854][ T8545] __handle_irq_event_percpu+0x28c/0x980 [ 206.153877][ T8545] handle_irq_event+0x8b/0x1e0 [ 206.153900][ T8545] handle_edge_irq+0x23b/0xa10 [ 206.153919][ T8545] __common_interrupt+0x141/0x1f0 [ 206.153949][ T8545] common_interrupt+0xb6/0xe0 [ 206.153967][ T8545] asm_common_interrupt+0x26/0x40 [ 206.153985][ T8545] pv_native_safe_halt+0x13/0x20 [ 206.154010][ T8545] default_idle+0x13/0x20 [ 206.154025][ T8545] default_idle_call+0x74/0xb0 [ 206.154041][ T8545] do_idle+0x1e8/0x510 [ 206.154057][ T8545] cpu_startup_entry+0x44/0x60 [ 206.154074][ T8545] rest_init+0x2de/0x300 [ 206.154091][ T8545] start_kernel+0x3a9/0x410 [ 206.154108][ T8545] x86_64_start_reservations+0x24/0x30 [ 206.154133][ T8545] x86_64_start_kernel+0x143/0x1c0 [ 206.154157][ T8545] common_startup_64+0x13e/0x147 [ 206.154183][ T8545] [ 206.154183][ T8545] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 206.154211][ T8545] lock_acquire+0x120/0x360 [ 206.154238][ T8545] _raw_spin_lock_irqsave+0xa7/0xf0 [ 206.154260][ T8545] serial8250_console_write+0x17e/0x1ba0 [ 206.154278][ T8545] console_flush_all+0x728/0xc40 [ 206.154300][ T8545] console_unlock+0xc4/0x270 [ 206.154319][ T8545] vprintk_emit+0x5b7/0x7a0 [ 206.154338][ T8545] _printk+0xcf/0x120 [ 206.154364][ T8545] register_console+0xa8b/0xf90 [ 206.154386][ T8545] univ8250_console_init+0x3a/0x70 [ 206.154412][ T8545] console_init+0x10e/0x430 [ 206.154435][ T8545] start_kernel+0x254/0x410 [ 206.154453][ T8545] x86_64_start_reservations+0x24/0x30 [ 206.154477][ T8545] x86_64_start_kernel+0x143/0x1c0 [ 206.154502][ T8545] common_startup_64+0x13e/0x147 [ 206.154528][ T8545] [ 206.154528][ T8545] -> #0 (console_owner){-...}-{0:0}: [ 206.154566][ T8545] validate_chain+0xb9b/0x2140 [ 206.154584][ T8545] __lock_acquire+0xab9/0xd20 [ 206.154609][ T8545] lock_acquire+0x120/0x360 [ 206.154634][ T8545] console_flush_all+0x6d2/0xc40 [ 206.154655][ T8545] console_unlock+0xc4/0x270 [ 206.154673][ T8545] vprintk_emit+0x5b7/0x7a0 [ 206.154691][ T8545] _printk+0xcf/0x120 [ 206.154714][ T8545] should_fail_ex+0x3f5/0x560 [ 206.154736][ T8545] strncpy_from_user+0x36/0x290 [ 206.154763][ T8545] strncpy_from_user_nofault+0x72/0x150 [ 206.154786][ T8545] bpf_probe_read_user_str+0x2a/0x70 [ 206.154803][ T8545] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 206.154819][ T8545] bpf_trace_run4+0x28e/0x4a0 [ 206.154841][ T8545] __bpf_trace_sched_switch+0x17a/0x1e0 [ 206.154864][ T8545] __traceiter_sched_switch+0x9a/0xd0 [ 206.154886][ T8545] __schedule+0x238f/0x4cc0 [ 206.154907][ T8545] schedule+0x165/0x360 [ 206.154927][ T8545] schedule_preempt_disabled+0x13/0x30 [ 206.154950][ T8545] __mutex_lock+0x7e6/0x1360 [ 206.154974][ T8545] rtnetlink_rcv_msg+0x71c/0xb70 [ 206.155000][ T8545] netlink_rcv_skb+0x208/0x470 [ 206.155025][ T8545] netlink_unicast+0x82c/0x9e0 [ 206.155047][ T8545] netlink_sendmsg+0x805/0xb30 [ 206.155073][ T8545] __sock_sendmsg+0x21c/0x270 [ 206.155095][ T8545] ____sys_sendmsg+0x505/0x830 [ 206.155111][ T8545] ___sys_sendmsg+0x21f/0x2a0 [ 206.155127][ T8545] __x64_sys_sendmsg+0x19b/0x260 [ 206.155144][ T8545] do_syscall_64+0xfa/0x3b0 [ 206.155170][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.155187][ T8545] [ 206.155187][ T8545] other info that might help us debug this: [ 206.155187][ T8545] [ 206.155194][ T8545] Chain exists of: [ 206.155194][ T8545] console_owner --> &p->pi_lock --> &rq->__lock [ 206.155194][ T8545] [ 206.155224][ T8545] Possible unsafe locking scenario: [ 206.155224][ T8545] [ 206.155230][ T8545] CPU0 CPU1 [ 206.155236][ T8545] ---- ---- [ 206.155242][ T8545] lock(&rq->__lock); [ 206.155254][ T8545] lock(&p->pi_lock); [ 206.155267][ T8545] lock(&rq->__lock); [ 206.155280][ T8545] lock(console_owner); [ 206.155292][ T8545] [ 206.155292][ T8545] *** DEADLOCK *** [ 206.155292][ T8545] [ 206.155298][ T8545] 5 locks held by syz.2.877/8545: [ 206.155309][ T8545] #0: ffffffff8f537d08 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 206.155362][ T8545] #1: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 206.155416][ T8545] #2: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x19c/0x4a0 [ 206.155466][ T8545] #3: ffffffff8e12e180 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 206.155517][ T8545] #4: ffffffff8e015a50 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 206.155565][ T8545] [ 206.155565][ T8545] stack backtrace: [ 206.155575][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.2.877 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 206.155599][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.155611][ T8545] Call Trace: [ 206.155619][ T8545] [ 206.155627][ T8545] dump_stack_lvl+0x189/0x250 [ 206.155652][ T8545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.155676][ T8545] ? __pfx__printk+0x10/0x10 [ 206.155703][ T8545] ? print_lock_name+0xde/0x100 [ 206.155731][ T8545] print_circular_bug+0x2ee/0x310 [ 206.155762][ T8545] check_noncircular+0x134/0x160 [ 206.155786][ T8545] validate_chain+0xb9b/0x2140 [ 206.155818][ T8545] __lock_acquire+0xab9/0xd20 [ 206.155850][ T8545] ? console_flush_all+0x13a/0xc40 [ 206.155872][ T8545] lock_acquire+0x120/0x360 [ 206.155899][ T8545] ? console_flush_all+0x13a/0xc40 [ 206.155926][ T8545] ? do_raw_spin_unlock+0x122/0x240 [ 206.155949][ T8545] ? console_flush_all+0x13a/0xc40 [ 206.155973][ T8545] console_flush_all+0x6d2/0xc40 [ 206.155994][ T8545] ? console_flush_all+0x13a/0xc40 [ 206.156018][ T8545] ? console_flush_all+0x13a/0xc40 [ 206.156043][ T8545] ? __pfx_console_flush_all+0x10/0x10 [ 206.156071][ T8545] ? is_printk_cpu_sync_owner+0x32/0x40 [ 206.156099][ T8545] console_unlock+0xc4/0x270 [ 206.156121][ T8545] ? __pfx_console_unlock+0x10/0x10 [ 206.156143][ T8545] ? is_printk_cpu_sync_owner+0x32/0x40 [ 206.156171][ T8545] vprintk_emit+0x5b7/0x7a0 [ 206.156193][ T8545] ? __pfx_vprintk_emit+0x10/0x10 [ 206.156223][ T8545] _printk+0xcf/0x120 [ 206.156249][ T8545] ? __pfx____ratelimit+0x10/0x10 [ 206.156276][ T8545] ? __pfx__printk+0x10/0x10 [ 206.156309][ T8545] should_fail_ex+0x3f5/0x560 [ 206.156336][ T8545] strncpy_from_user+0x36/0x290 [ 206.156361][ T8545] strncpy_from_user_nofault+0x72/0x150 [ 206.156386][ T8545] bpf_probe_read_user_str+0x2a/0x70 [ 206.156406][ T8545] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 206.156423][ T8545] bpf_trace_run4+0x28e/0x4a0 [ 206.156447][ T8545] ? __update_load_avg_cfs_rq+0x6f6/0xbd0 [ 206.156471][ T8545] ? bpf_trace_run4+0x19c/0x4a0 [ 206.156495][ T8545] ? __pfx_bpf_trace_run4+0x10/0x10 [ 206.156517][ T8545] ? sched_clock_cpu+0x74/0x430 [ 206.156549][ T8545] ? trace_pelt_se_tp+0x39/0x130 [ 206.156572][ T8545] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 206.156598][ T8545] __bpf_trace_sched_switch+0x17a/0x1e0 [ 206.156625][ T8545] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 206.156649][ T8545] ? psi_group_change+0xab8/0x1050 [ 206.156673][ T8545] ? __schedule+0x22e9/0x4cc0 [ 206.156698][ T8545] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 206.156724][ T8545] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 206.156755][ T8545] __traceiter_sched_switch+0x9a/0xd0 [ 206.156782][ T8545] __schedule+0x238f/0x4cc0 [ 206.156810][ T8545] ? __lock_acquire+0xab9/0xd20 [ 206.156841][ T8545] ? __lock_acquire+0xab9/0xd20 [ 206.156870][ T8545] ? __pfx___schedule+0x10/0x10 [ 206.156901][ T8545] ? schedule+0x91/0x360 [ 206.156925][ T8545] schedule+0x165/0x360 [ 206.156950][ T8545] schedule_preempt_disabled+0x13/0x30 [ 206.156973][ T8545] __mutex_lock+0x7e6/0x1360 [ 206.157002][ T8545] ? __mutex_lock+0x5b6/0x1360 [ 206.157031][ T8545] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 206.157060][ T8545] ? __pfx___mutex_lock+0x10/0x10 [ 206.157096][ T8545] rtnetlink_rcv_msg+0x71c/0xb70 [ 206.157126][ T8545] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 206.157153][ T8545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.157178][ T8545] ? ref_tracker_free+0x63a/0x7d0 [ 206.157205][ T8545] ? __asan_memcpy+0x40/0x70 [ 206.157227][ T8545] ? __pfx_ref_tracker_free+0x10/0x10 [ 206.157252][ T8545] ? __skb_clone+0x63/0x7a0 [ 206.157275][ T8545] netlink_rcv_skb+0x208/0x470 [ 206.157303][ T8545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 206.157331][ T8545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.157382][ T8545] ? netlink_deliver_tap+0x2e/0x1b0 [ 206.157415][ T8545] netlink_unicast+0x82c/0x9e0 [ 206.157445][ T8545] ? __pfx_netlink_unicast+0x10/0x10 [ 206.157473][ T8545] ? netlink_sendmsg+0x642/0xb30 [ 206.157501][ T8545] ? skb_put+0x11b/0x210 [ 206.157519][ T8545] netlink_sendmsg+0x805/0xb30 [ 206.157554][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.157585][ T8545] ? aa_sock_msg_perm+0xf1/0x1d0 [ 206.157618][ T8545] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 206.157637][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.157660][ T8545] __sock_sendmsg+0x21c/0x270 [ 206.157681][ T8545] ____sys_sendmsg+0x505/0x830 [ 206.157698][ T8545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.157717][ T8545] ? import_iovec+0x74/0xa0 [ 206.157735][ T8545] ___sys_sendmsg+0x21f/0x2a0 [ 206.157758][ T8545] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.157786][ T8545] ? __fget_files+0x2a/0x420 [ 206.157799][ T8545] ? __fget_files+0x3a0/0x420 [ 206.157816][ T8545] __x64_sys_sendmsg+0x19b/0x260 [ 206.157832][ T8545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 206.157852][ T8545] ? __pfx_ksys_write+0x10/0x10 [ 206.157871][ T8545] ? rcu_is_watching+0x15/0xb0 [ 206.157888][ T8545] ? do_syscall_64+0xbe/0x3b0 [ 206.157913][ T8545] do_syscall_64+0xfa/0x3b0 [ 206.157934][ T8545] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.157954][ T8545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.157969][ T8545] ? clear_bhb_loop+0x60/0xb0 [ 206.157987][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.158003][ T8545] RIP: 0033:0x7fe1a498ebe9 [ 206.158017][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.158031][ T8545] RSP: 002b:00007fe1a579b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.158047][ T8545] RAX: ffffffffffffffda RBX: 00007fe1a4bb5fa0 RCX: 00007fe1a498ebe9 [ 206.158059][ T8545] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 206.158068][ T8545] RBP: 00007fe1a579b090 R08: 0000000000000000 R09: 0000000000000000 [ 206.158078][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.158087][ T8545] R13: 00007fe1a4bb6038 R14: 00007fe1a4bb5fa0 R15: 00007fff8401d798 [ 206.158105][ T8545] [ 207.566237][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.2.877 Not tainted 6.17.0-rc1-syzkaller-gbf0c2a84df9f #0 PREEMPT(full) [ 207.566258][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.566267][ T8545] Call Trace: [ 207.566275][ T8545] [ 207.566282][ T8545] dump_stack_lvl+0x189/0x250 [ 207.566303][ T8545] ? __pfx____ratelimit+0x10/0x10 [ 207.566323][ T8545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.566340][ T8545] ? __pfx__printk+0x10/0x10 [ 207.566365][ T8545] should_fail_ex+0x414/0x560 [ 207.566385][ T8545] strncpy_from_user+0x36/0x290 [ 207.566404][ T8545] strncpy_from_user_nofault+0x72/0x150 [ 207.566423][ T8545] bpf_probe_read_user_str+0x2a/0x70 [ 207.566438][ T8545] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 207.566451][ T8545] bpf_trace_run4+0x28e/0x4a0 [ 207.566469][ T8545] ? __update_load_avg_cfs_rq+0x6f6/0xbd0 [ 207.566487][ T8545] ? bpf_trace_run4+0x19c/0x4a0 [ 207.566505][ T8545] ? __pfx_bpf_trace_run4+0x10/0x10 [ 207.566522][ T8545] ? sched_clock_cpu+0x74/0x430 [ 207.566546][ T8545] ? trace_pelt_se_tp+0x39/0x130 [ 207.566562][ T8545] ? __bpf_trace_sched_switch+0x15f/0x1e0 [ 207.566582][ T8545] __bpf_trace_sched_switch+0x17a/0x1e0 [ 207.566602][ T8545] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 207.566620][ T8545] ? psi_group_change+0xab8/0x1050 [ 207.566638][ T8545] ? __schedule+0x22e9/0x4cc0 [ 207.566657][ T8545] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 207.566676][ T8545] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 207.566694][ T8545] __traceiter_sched_switch+0x9a/0xd0 [ 207.566714][ T8545] __schedule+0x238f/0x4cc0 [ 207.566736][ T8545] ? __lock_acquire+0xab9/0xd20 [ 207.566759][ T8545] ? __lock_acquire+0xab9/0xd20 [ 207.566779][ T8545] ? __pfx___schedule+0x10/0x10 [ 207.566802][ T8545] ? schedule+0x91/0x360 [ 207.566820][ T8545] schedule+0x165/0x360 [ 207.566838][ T8545] schedule_preempt_disabled+0x13/0x30 [ 207.566856][ T8545] __mutex_lock+0x7e6/0x1360 [ 207.566882][ T8545] ? __mutex_lock+0x5b6/0x1360 [ 207.566903][ T8545] ? rtnetlink_rcv_msg+0x71c/0xb70 [ 207.566926][ T8545] ? __pfx___mutex_lock+0x10/0x10 [ 207.566953][ T8545] rtnetlink_rcv_msg+0x71c/0xb70 [ 207.566975][ T8545] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 207.566994][ T8545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.567013][ T8545] ? ref_tracker_free+0x63a/0x7d0 [ 207.567033][ T8545] ? __asan_memcpy+0x40/0x70 [ 207.567049][ T8545] ? __pfx_ref_tracker_free+0x10/0x10 [ 207.567067][ T8545] ? __skb_clone+0x63/0x7a0 [ 207.567085][ T8545] netlink_rcv_skb+0x208/0x470 [ 207.567106][ T8545] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 207.567127][ T8545] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.567151][ T8545] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.567174][ T8545] netlink_unicast+0x82c/0x9e0 [ 207.567195][ T8545] ? __pfx_netlink_unicast+0x10/0x10 [ 207.567213][ T8545] ? netlink_sendmsg+0x642/0xb30 [ 207.567233][ T8545] ? skb_put+0x11b/0x210 [ 207.567246][ T8545] netlink_sendmsg+0x805/0xb30 [ 207.567270][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.567292][ T8545] ? aa_sock_msg_perm+0xf1/0x1d0 [ 207.567315][ T8545] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 207.567331][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.567352][ T8545] __sock_sendmsg+0x21c/0x270 [ 207.567371][ T8545] ____sys_sendmsg+0x505/0x830 [ 207.567387][ T8545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.567404][ T8545] ? import_iovec+0x74/0xa0 [ 207.567421][ T8545] ___sys_sendmsg+0x21f/0x2a0 [ 207.567435][ T8545] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.567462][ T8545] ? __fget_files+0x2a/0x420 [ 207.567474][ T8545] ? __fget_files+0x3a0/0x420 [ 207.567490][ T8545] __x64_sys_sendmsg+0x19b/0x260 [ 207.567505][ T8545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.567523][ T8545] ? __pfx_ksys_write+0x10/0x10 [ 207.567541][ T8545] ? rcu_is_watching+0x15/0xb0 [ 207.567556][ T8545] ? do_syscall_64+0xbe/0x3b0 [ 207.567578][ T8545] do_syscall_64+0xfa/0x3b0 [ 207.567598][ T8545] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.567616][ T8545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.567630][ T8545] ? clear_bhb_loop+0x60/0xb0 [ 207.567646][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.567660][ T8545] RIP: 0033:0x7fe1a498ebe9 [ 207.567673][ T8545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.567685][ T8545] RSP: 002b:00007fe1a579b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.567701][ T8545] RAX: ffffffffffffffda RBX: 00007fe1a4bb5fa0 RCX: 00007fe1a498ebe9 [ 207.567711][ T8545] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 207.567720][ T8545] RBP: 00007fe1a579b090 R08: 0000000000000000 R09: 0000000000000000 [ 207.567729][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.567737][ T8545] R13: 00007fe1a4bb6038 R14: 00007fe1a4bb5fa0 R15: 00007fff8401d798 [ 207.567753][ T8545] [ 208.072604][ T8519] caif:caif_disconnect_client(): nothing to disconnect [ 211.713426][ T8546] Bluetooth: hci2: command 0x0406 tx timeout [ 211.713798][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 211.722674][ T8546] Bluetooth: hci4: command 0x0406 tx timeout [ 211.727427][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 211.731478][ T8548] Bluetooth: hci0: command 0x0406 tx timeout