last executing test programs: 7.148460812s ago: executing program 0 (id=957): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x101410, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.973049949s ago: executing program 1 (id=961): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, &(0x7f0000000180)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x401}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x9, &(0x7f0000000440)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1080000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 6.971771855s ago: executing program 0 (id=962): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0xffffffffffffff0c}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r5, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1000000015004d"], 0x10}], 0x1, 0x0, 0x0, 0x74000000}, 0xc0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r4, 0x5452, &(0x7f00000013c0)) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xc, [@enum={0x6, 0x5, 0x0, 0x6, 0x4, [{0x7, 0x8}, {0x2, 0x51f}, {0x10, 0x1}, {0x5, 0x80000000}, {0x1, 0x3}]}]}, {0x0, [0x61, 0x5f, 0x0, 0x2e, 0x61, 0x5f, 0x5f, 0x5f, 0x2e, 0x0]}}, &(0x7f00000000c0)=""/103, 0x58, 0x67, 0x1, 0x9}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x2, '\x00', 0x0, r6, 0x4, 0x2}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000044000701feffffff00000000037c0000040042800c00018006000600800a0000100002"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 6.870736301s ago: executing program 4 (id=963): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x212d, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x1000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x34000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001180)={'rose0\x00', @random="0a1f107cfeb0"}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route_sched(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=@newtclass={0x4c, 0x28, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x12}, {0x0, 0xd}, {0x1, 0xa}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xa, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x68}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4042080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000003f0007012dbd7000fbdbdf25047c00000400fc800c0001800600"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b08b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000), 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 6.395065799s ago: executing program 1 (id=966): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r0}) 6.297027003s ago: executing program 4 (id=968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="278292ad9f2064c2bc127fc73cf41ac2e1ee35357e6dbfde9efb835d04982ef739c7c7f77b410cdaee2362dfa1b0733402a3d78648073357fdea8b09449b89"], 0x7c}, 0x1, 0x0, 0x0, 0x408c5}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1820000003266ee3d0000000fcffffff9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r2, 0x4, r2}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r1, 0x0, 0x25, 0x10, @void}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400000, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0900000000000000f9ffffff004f4ce20f00"/28], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="cd6487de6b", 0x5}], 0x1}, 0x40084) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r5, @ANYRES16=r1, @ANYBLOB="f73d86355831d381c7e7ed37685f4df914ccb93530ea98455deddd", @ANYRESHEX=r3, @ANYRESDEC=r7, @ANYRES64=r7], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, &(0x7f00000007c0), &(0x7f0000000640)=r7}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x830d}, 0x210, 0x2, 0xfffffffe, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r8, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r8, 0x0, &(0x7f0000000400)=""/154}, 0x20) 6.065367473s ago: executing program 1 (id=970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000003200000095"], &(0x7f00000003c0)='syzkaller\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) write$cgroup_type(r2, &(0x7f0000000100), 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 5.873970657s ago: executing program 0 (id=971): socket$nl_rdma(0x10, 0x3, 0x14) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000d, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext, 0x101021, 0x9, 0x8, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x90) r2 = socket$kcm(0x2, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000025000103241d133b61f7746c32000000040029"], 0x18}}, 0x20008808) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) 5.65630369s ago: executing program 4 (id=972): r0 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x40}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4814}, 0x20004000) (fail_nth: 10) 5.610386563s ago: executing program 3 (id=973): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x7, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x4, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8941, &(0x7f0000000080)) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfffffffe}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x4}]}}]}, 0x40}}, 0x4000010) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 5.532933288s ago: executing program 1 (id=974): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x76, 0x1ef7}, 0x10eaa, 0x4, 0x98, 0x0, 0x2, 0xfffff273, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b702000008000000bfa300000000000007030000ffffffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000000000095000000000000006623848adf1dc9a764ab51a064caff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b81ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6b6981978d51514b00dcc4a2748b376358c33c9753beab62bdf27dc04e4cb4bc598affd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b770009524edd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd88345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1757b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c35af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d9900000011000003971b32fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d677d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc37e5aa23bff8cce0600000000000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68f536a03353a55a8a8e176e5d48887d31c8e0f77f2c1e68ec7c01bd5a2028a8fc107007f5f4c67600a6ade3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d9029f071fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b4492510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2020ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a017ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f6c3652c423ce6ecc1be5d4e8133fc32f68ea86a2df1e7df98a0ae216c405d0ae9eed114ff2d6fe27dfdff1cf9194849c4cc0da9533e5983863e526a7dc0d8728f3b573ca4427bdb44df9341e9b8420e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9467b51d92e0993af4beaf1f3d47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c27c318475802e2c62681bd1a331422a6e47bbd40857d52c4894944fae5c5000000000000000000000000e0c47613e950b6aefeae054fc723f62ac7d13941de11b018f1f48ac50335df91c771729f81929128135b2803562c1171ee00a3f4a31281aa363e087d53d86dd85e3ff979a7e72d16fdd7e1a0f07a1c8e6085d280d760f74975ceb3a5be6cfb4da8e0aeb769b8b75f4aad803ed77d34872eed2711aa40a3b38099dc2752e8ec9b520faf39e416752aa0830206736570f5d41a4df848c9052551cf8dcb1be000000000eb2577188e8e96bd825d462350905d3eb916b397d2a46a64081e85661d7a5a2716cc87cb1976d15d9b6418e94f165911803e43830432226c660f4da67bb7c8ceb3755c07197d8b80b8d16b12c2ec63bebe107aa2350a7ae564bf69a6c52a2da1496016dd66a1c1b112"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x22, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x6, 0x0, 0x2000000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000003c0)="2e3217ffc66b81ceace9ce0cdbbedfff5595d826b14ff39779faa80fbf30481cce1ed24eace8af83", 0x0, 0xffffffffffffffff, 0x4}, 0x38) socket$kcm(0x29, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0xb, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0xe, 0x1, 'syzkaller\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 5.250859256s ago: executing program 0 (id=975): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = gettid() perf_event_open(&(0x7f0000000740)={0x4, 0x80, 0x6, 0xcb, 0x3, 0xcc, 0x0, 0xc38, 0x8000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x1200000000000}, 0x1019, 0x80000001, 0x6, 0x6, 0x5, 0xc0, 0x0, 0x0, 0x100, 0x0, 0x3}, r3, 0x8, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x0, 0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fdffffff06"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) recvmsg(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0xba1b474e0b1c775a) 5.238142168s ago: executing program 3 (id=976): socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x8010) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000044) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x201, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, @perf_config_ext={0xf, 0x8}, 0xa100, 0xc8, 0x3, 0x658a89a2c6d24982, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3b05}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088"], 0xfdef) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffca}, 0x164) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x500}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="d2ff0307600300", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x2, 0x922000000001, 0x106) 4.976506972s ago: executing program 4 (id=977): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000440)={0x2, &(0x7f0000000000)=[{0xac, 0x0, 0x1}, {0x6}]}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x10000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x400006, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, r0, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r2, &(0x7f0000000cc0), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x5, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='rxrpc_skb\x00', r5, 0x0, 0x101}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.973639601s ago: executing program 2 (id=978): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x212d, 0x0, 0x0, 0x0, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x1000}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001140), 0x34000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001180)={'rose0\x00', @random="0a1f107cfeb0"}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_route_sched(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)=@newtclass={0x4c, 0x28, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x12}, {0x0, 0xd}, {0x1, 0xa}}, [@tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xa, 0x8}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x68}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4042080) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000003f0007012dbd7000fbdbdf25047c00000400fc800c0001800600"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b08b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000), 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 4.725031805s ago: executing program 3 (id=979): socket$kcm(0xa, 0x3, 0x73) r0 = socket$kcm(0x2, 0x3, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}], 0x20}, 0x0) 4.720209851s ago: executing program 2 (id=980): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004200523a608463a3f"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x35}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) socket$kcm(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1000000830d}, 0x0, 0x2, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x28, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x1, 0x2, 0x201, 0x0, 0x0, {0x6, 0x0, 0x1}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4040080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.465563518s ago: executing program 3 (id=981): socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x8010) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$tipc(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000044) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xfff}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x201, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2002, 0x0, @perf_config_ext={0xf, 0x8}, 0xa100, 0xc8, 0x3, 0x658a89a2c6d24982, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3b05}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088"], 0xfdef) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffca}, 0x164) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x500}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f00000002c0)="d2ff0307600300", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket$kcm(0x2, 0x922000000001, 0x106) 1.662709151s ago: executing program 2 (id=982): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x3}, 0x114905, 0x30f6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x10001, 0x7fe6, 0x1}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x4000004) 1.560679445s ago: executing program 0 (id=983): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b80)={0x2, 0x80, 0x48, 0x1, 0xa, 0x4, 0x0, 0x4, 0x20, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a0104000000000000000000000000480b0001006578746864720000240002800c0001800b00010947a1fbabf19a9df300736f636b657400000900010073797a30000000000900020073797a32000000001400000011000100000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x841) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000540)={&(0x7f0000000200)=@can, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000280)=""/228, 0xe4}, {&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000800)=""/237, 0xed}, {&(0x7f0000000380)=""/124, 0x7c}, {&(0x7f0000000400)=""/12, 0xc}, {&(0x7f00000005c0)=""/91, 0x5b}, {&(0x7f0000000900)=""/243, 0xf3}], 0x8, &(0x7f0000000a80)=""/200, 0xc8}, 0x40000060) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000007b5c07ce801110d2c22000000000000071122e000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x1e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x23, '\x00', r2, @fallback=0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4800000000000006, 0x954b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x480000000, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0x5, 0xfffc, 0x0, 0x0, 0x0, 0x1c}, 0x0, 0xfffdffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$TUNSETPERSIST(r6, 0x400454c9, 0x1) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x5) socket$kcm(0x2, 0x5, 0x84) 1.474480688s ago: executing program 2 (id=984): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8310}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x86e46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xb, 0x2}, 0x40, 0x8, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x7, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000300)=ANY=[@ANYBLOB="28e300000840000000000000fddbdf250800035c390dcf44aa6b01d29d487b16000100000008003f000100000008"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x80, 0xaa, 0xfa, 0x1, 0x3, 0x0, 0x2, 0x408a0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}, 0x80, 0x6, 0xff, 0x3, 0x3, 0x1ff, 0x10, 0x0, 0xfffffffc, 0x0, 0x3}, r4, 0x3, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x181}, 0x80) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2d1b47cadf767bbd, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 701.550918ms ago: executing program 3 (id=985): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8941, &(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xfffffffe}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x4}]}}]}, 0x40}}, 0x4000010) socket$kcm(0x11, 0xa, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 699.128199ms ago: executing program 4 (id=986): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (fail_nth: 2) 698.179473ms ago: executing program 1 (id=987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0x2, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) 648.860094ms ago: executing program 2 (id=988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) (async) socket$packet(0x11, 0x3, 0x300) (async) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x8, 0x808, 0x0, 0xffffffffffffffff, 0x6}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) (async) close(0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 270.191858ms ago: executing program 0 (id=989): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0xe, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r4}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0xb22, [{0x5, 0x2001}]}]}}, &(0x7f0000000f40)=""/4069, 0x32, 0xfe5, 0x1, 0xffffffff}, 0x28) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x44004) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000040)='\x00') perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x10, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) r6 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000700)={r3}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) 159.010031ms ago: executing program 2 (id=990): socket$kcm(0x21, 0x2, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_crypto(0x10, 0x3, 0x15) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={r3, 0x20, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000540)=r4, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r4, 0x4) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0xfffff800, '\x00', 0x0, r0, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x5, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3eb7613c, 0x0, 0x0, 0x0, 0x4}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1000, 0x1000, &(0x7f0000001980)=""/4096, 0x0, 0x30, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r5, 0x1], &(0x7f0000000740), 0x10, 0x6}, 0x94) sendmsg$nl_crypto(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c80)=@get={0xe0, 0x13, 0x701, 0x70bd2d, 0x25dfdbff, {{'gcm(aes)\x00'}, '\x00', '\x00', 0x4400, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x41, 0xfffff028}, {0x6}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r10}, 0x18) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x1c, 0x35, 0x107, 0xffffffff, 0xfffffffe, {0x5, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x2000300, 0x24, 0x0, &(0x7f0000000500)="63ecdd8e46dc292ba08a98a364ee0e7831a8213d384061f8d21b43471a9146a000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0), 0x4f) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0000000210001000000000000000000ac1414bb000000000000000000000000fe880000000000000000000000000001fffc00004e23ffff0a00e08001a80000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4a050) 109.690905ms ago: executing program 3 (id=991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x300, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) sendmsg$sock(r1, 0x0, 0x4080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x16, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, 0x0, 0x4000080) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0xd, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000841}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd63e8ffffffffffffff80002000000000101000007f06000800000000000000090000000000000011"], 0xfdef) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) 58.019859ms ago: executing program 4 (id=992): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6118, 0x0, 0x2, 0x7, 0x3fe, 0x7ffffffc, 0x401, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40001) r2 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x40000) socketpair(0x1d, 0x3, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) (fail_nth: 6) 0s ago: executing program 1 (id=993): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0400, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2a0400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00'}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'macvlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x697, 0x2}}]}, 0x54}}, 0x8010) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFULA_CFG_MODE={0xa, 0x2, {0x3, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x2, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x697, 0x2}}]}, 0x54}}, 0x8010) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x16, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000006c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)=@gettfilter={0x44, 0x2e, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {0xfff2}, {0x6, 0xfff2}}, [{0x8, 0xb, 0x8000}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0xd3}]}, 0x44}}, 0x0) r5 = perf_event_open(&(0x7f0000000740)={0x3, 0x80, 0x3, 0xa7, 0x8, 0x1, 0x0, 0x0, 0x10000, 0x5, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffff853, 0x2, @perf_bp={&(0x7f0000000700), 0x1}, 0x8, 0x3d, 0x7fff, 0x2, 0x7, 0xa, 0x3, 0x0, 0xe, 0x0, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x1) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@o_path={&(0x7f00000007c0)='./file0\x00', 0x0, 0x4010, r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) fstat(r6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r0, 0x400454cc, r7) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', r6}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000900)=@generic={&(0x7f00000008c0)='./file0\x00', r6}, 0x18) r8 = openat$cgroup_ro(r5, &(0x7f0000000940)='devices.list\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3c78, '\x00', r3, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x9, [@restrict={0x10}, @datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x3, 0xf77, 0xfffffffb}], "f9"}, @restrict={0xf, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x30, 0x0, 0x2e, 0x72]}}, &(0x7f0000000d40)=""/142, 0x55, 0x8e, 0x1, 0x4}, 0x28) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ec0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xe47c, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000f40)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x24, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@jmp={0x5, 0x1, 0x8, 0x7, 0xa, 0x80, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xbf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0x49}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c00)='GPL\x00', 0x52, 0x63, &(0x7f0000000c40)=""/99, 0x41100, 0x0, '\x00', r3, @fallback=0x37, r11, 0x8, &(0x7f0000000e40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x3, 0x0, 0xffffffff, 0x7fff}, 0x10, r4, r6, 0x5, &(0x7f0000000f80)=[r12, r13], &(0x7f0000000fc0)=[{0x3, 0x4, 0x4, 0x2}, {0x0, 0x1, 0x2, 0x8}, {0x0, 0x3, 0x2, 0xb}, {0x5, 0x1, 0xe, 0x8}, {0x2, 0x2, 0x1, 0x6}], 0x10, 0x4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x24, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@jmp={0x5, 0x1, 0x8, 0x7, 0xa, 0x80, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xbf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffe01, 0x0, 0x0, 0x0, 0x49}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c00)='GPL\x00', 0x52, 0x63, &(0x7f0000000c40)=""/99, 0x41100, 0x0, '\x00', r3, @fallback=0x37, r11, 0x8, &(0x7f0000000e40)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x3, 0x0, 0xffffffff, 0x7fff}, 0x10, r4, r6, 0x5, &(0x7f0000000f80)=[r12, r13], &(0x7f0000000fc0)=[{0x3, 0x4, 0x4, 0x2}, {0x0, 0x1, 0x2, 0x8}, {0x0, 0x3, 0x2, 0xb}, {0x5, 0x1, 0xe, 0x8}, {0x2, 0x2, 0x1, 0x6}], 0x10, 0x4}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x71, '\x00', 0x0, r11, 0x3, 0x3}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001100)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x71, '\x00', 0x0, r11, 0x3, 0x3}, 0x50) socket$isdn(0x22, 0x3, 0x2) (async) socket$isdn(0x22, 0x3, 0x2) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000001340)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f00000011c0)={0x118, 0xb, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_ADT={0xb0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xb}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'bond0\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'pim6reg0\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x11, 0x1a, 'devices.list\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x13, 0x1a, 'callforwarding\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_bridge\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'vlan0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x48800}, 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000013c0)={0x2, 0x80, 0x5, 0x5, 0xa7, 0xff, 0x0, 0x9, 0x10, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000001380), 0x2}, 0x2000, 0x5, 0x1, 0x0, 0x6f, 0xff, 0xc, 0x0, 0x7, 0x0, 0x7}) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f00000013c0)={0x2, 0x80, 0x5, 0x5, 0xa7, 0xff, 0x0, 0x9, 0x10, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000001380), 0x2}, 0x2000, 0x5, 0x1, 0x0, 0x6f, 0xff, 0xc, 0x0, 0x7, 0x0, 0x7}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001540)={&(0x7f0000001480)={0x88, 0x1403, 0x4, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x842) sendmsg$key(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000015c0)={0x2, 0x6, 0x6, 0x5, 0x29, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0xa}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x5}, @in6={0xa, 0x4e22, 0x8000, @mcast2, 0x3}}, @sadb_lifetime={0x4, 0x3, 0x80, 0x3, 0x1, 0x5}, @sadb_x_sec_ctx={0x17, 0x18, 0x5, 0x6, 0xad, "f32a3e0f3aec5800424ebf8765cd05d01324d93172ca499cc9a399608320fde04d83b2c7334c1dcf08702759b9c4e56b4693a4928bef5836add4baaa14c09f585c83147c3198050f7906191ab3a66d90dc41938b42326b83ff54d528de3e50a5739a938973da01ab3622c1e2abd3b06a10b22e75e82f84904511888ebda2ab01f3cfa58f2cb7c06481bad2938acaebff895289e4b2640efb6f2ab270b7652544ebcf035ef598f03277a629197f"}, @sadb_address={0x3, 0x7, 0xff, 0x80, 0x0, @in={0x2, 0x4e20, @local}}]}, 0x148}}, 0x801) (async) sendmsg$key(r8, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000015c0)={0x2, 0x6, 0x6, 0x5, 0x29, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1, 0x14, 0xa}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x4, @rand_addr=' \x01\x00', 0x5}, @in6={0xa, 0x4e22, 0x8000, @mcast2, 0x3}}, @sadb_lifetime={0x4, 0x3, 0x80, 0x3, 0x1, 0x5}, @sadb_x_sec_ctx={0x17, 0x18, 0x5, 0x6, 0xad, "f32a3e0f3aec5800424ebf8765cd05d01324d93172ca499cc9a399608320fde04d83b2c7334c1dcf08702759b9c4e56b4693a4928bef5836add4baaa14c09f585c83147c3198050f7906191ab3a66d90dc41938b42326b83ff54d528de3e50a5739a938973da01ab3622c1e2abd3b06a10b22e75e82f84904511888ebda2ab01f3cfa58f2cb7c06481bad2938acaebff895289e4b2640efb6f2ab270b7652544ebcf035ef598f03277a629197f"}, @sadb_address={0x3, 0x7, 0xff, 0x80, 0x0, @in={0x2, 0x4e20, @local}}]}, 0x148}}, 0x801) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001800)=@o_path={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8, r12}, 0x18) openat$ppp(0xffffffffffffff9c, &(0x7f0000001840), 0x117b02, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x1a, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xd, 0x5, 0x0, 0xc}, @exit, @jmp={0x5, 0x1, 0x8, 0x9, 0xb, 0xffffffffffffffc0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000001980)='GPL\x00', 0x4, 0x31, &(0x7f00000019c0)=""/49, 0x40f00, 0x0, '\x00', r3, 0x25, r8, 0x8, &(0x7f0000001a00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xe, 0x3, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[r13, 0xffffffffffffffff, r12, r12, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b80)={0x6, 0x1a, &(0x7f0000001880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@exit, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @map_idx={0x18, 0xd, 0x5, 0x0, 0xc}, @exit, @jmp={0x5, 0x1, 0x8, 0x9, 0xb, 0xffffffffffffffc0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}]}, &(0x7f0000001980)='GPL\x00', 0x4, 0x31, &(0x7f00000019c0)=""/49, 0x40f00, 0x0, '\x00', r3, 0x25, r8, 0x8, &(0x7f0000001a00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xe, 0x3, 0x7fffffff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[r13, 0xffffffffffffffff, r12, r12, 0xffffffffffffffff], 0x0, 0x10, 0x9}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 80.218324][ T5817] cgroup: Unknown subsys name 'net' [ 80.347476][ T5817] cgroup: Unknown subsys name 'cpuset' [ 80.356774][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.874211][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.465751][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.483585][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.492004][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.504102][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.504713][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.518647][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.527116][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.534785][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.536850][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.545544][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.550631][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.557629][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.571217][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.579323][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.586950][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.595029][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.598656][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.602778][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.610269][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.628227][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.670705][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.678710][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.691839][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.702904][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.711997][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.255675][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 85.321872][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 85.341671][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 85.446543][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 85.493634][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 85.573518][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.580803][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.588938][ T5834] bridge_slave_0: entered allmulticast mode [ 85.596449][ T5834] bridge_slave_0: entered promiscuous mode [ 85.646646][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.653919][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.661045][ T5834] bridge_slave_1: entered allmulticast mode [ 85.668301][ T5834] bridge_slave_1: entered promiscuous mode [ 85.695662][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.702771][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.709990][ T5832] bridge_slave_0: entered allmulticast mode [ 85.717173][ T5832] bridge_slave_0: entered promiscuous mode [ 85.762738][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.770205][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.777852][ T5832] bridge_slave_1: entered allmulticast mode [ 85.786005][ T5832] bridge_slave_1: entered promiscuous mode [ 85.827565][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.834762][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.841908][ T5835] bridge_slave_0: entered allmulticast mode [ 85.849216][ T5835] bridge_slave_0: entered promiscuous mode [ 85.857313][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.864841][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.871977][ T5835] bridge_slave_1: entered allmulticast mode [ 85.879324][ T5835] bridge_slave_1: entered promiscuous mode [ 85.900683][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.921028][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.928168][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.935356][ T5850] bridge_slave_0: entered allmulticast mode [ 85.942481][ T5850] bridge_slave_0: entered promiscuous mode [ 85.964929][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.976535][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.996683][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.003899][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.011031][ T5850] bridge_slave_1: entered allmulticast mode [ 86.018346][ T5850] bridge_slave_1: entered promiscuous mode [ 86.038009][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.058735][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.065914][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.073017][ T5837] bridge_slave_0: entered allmulticast mode [ 86.080522][ T5837] bridge_slave_0: entered promiscuous mode [ 86.089141][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.096362][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.103510][ T5837] bridge_slave_1: entered allmulticast mode [ 86.110742][ T5837] bridge_slave_1: entered promiscuous mode [ 86.131901][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.191086][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.224967][ T5834] team0: Port device team_slave_0 added [ 86.232240][ T5832] team0: Port device team_slave_0 added [ 86.251201][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.273341][ T5834] team0: Port device team_slave_1 added [ 86.280868][ T5832] team0: Port device team_slave_1 added [ 86.299697][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.311322][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.334987][ T5835] team0: Port device team_slave_0 added [ 86.365239][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.387277][ T5835] team0: Port device team_slave_1 added [ 86.395690][ T5850] team0: Port device team_slave_0 added [ 86.415399][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.422360][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.448893][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.485064][ T5850] team0: Port device team_slave_1 added [ 86.503099][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.510799][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.536856][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.548481][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.555746][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.581977][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.629962][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.644624][ T5848] Bluetooth: hci1: command tx timeout [ 86.644796][ T5844] Bluetooth: hci2: command tx timeout [ 86.650378][ T5845] Bluetooth: hci0: command tx timeout [ 86.656165][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.688842][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.702191][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.709681][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.735727][ T5845] Bluetooth: hci3: command tx timeout [ 86.741906][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.754550][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.761513][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.788294][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.813935][ T5845] Bluetooth: hci4: command tx timeout [ 86.839346][ T5837] team0: Port device team_slave_0 added [ 86.903650][ T5832] hsr_slave_0: entered promiscuous mode [ 86.910470][ T5832] hsr_slave_1: entered promiscuous mode [ 86.920369][ T5837] team0: Port device team_slave_1 added [ 86.943412][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.950648][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.976720][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.989887][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.996952][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.023235][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.093126][ T5835] hsr_slave_0: entered promiscuous mode [ 87.099579][ T5835] hsr_slave_1: entered promiscuous mode [ 87.105941][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 87.111746][ T5835] Cannot create hsr debugfs directory [ 87.118034][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.125016][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.150963][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.179033][ T5834] hsr_slave_0: entered promiscuous mode [ 87.185559][ T5834] hsr_slave_1: entered promiscuous mode [ 87.191672][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 87.197474][ T5834] Cannot create hsr debugfs directory [ 87.221890][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.228933][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.255099][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.334074][ T5850] hsr_slave_0: entered promiscuous mode [ 87.340299][ T5850] hsr_slave_1: entered promiscuous mode [ 87.346590][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 87.352322][ T5850] Cannot create hsr debugfs directory [ 87.390033][ T5837] hsr_slave_0: entered promiscuous mode [ 87.396381][ T5837] hsr_slave_1: entered promiscuous mode [ 87.402410][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 87.408264][ T5837] Cannot create hsr debugfs directory [ 87.855872][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.868892][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.879814][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.896933][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.958372][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.968977][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.980226][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.009261][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.056937][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.071607][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.081501][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.098527][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.203750][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.216358][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.230036][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.239966][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.287064][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.342647][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.362206][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.378718][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.386010][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.406624][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.427851][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.435011][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.445824][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.456811][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.481783][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.549839][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.586559][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.593676][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.613488][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.650416][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.657570][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.687210][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.724838][ T5848] Bluetooth: hci1: command tx timeout [ 88.724847][ T5844] Bluetooth: hci2: command tx timeout [ 88.739273][ T5845] Bluetooth: hci0: command tx timeout [ 88.746344][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.771482][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.805931][ T5845] Bluetooth: hci3: command tx timeout [ 88.808473][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.818533][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.862996][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.870222][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.880163][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.887303][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.896257][ T5845] Bluetooth: hci4: command tx timeout [ 88.932039][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.958535][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.965743][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.042840][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.082185][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.113122][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.120364][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.132003][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.139182][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.157184][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.271575][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.429992][ T5832] veth0_vlan: entered promiscuous mode [ 89.470795][ T5832] veth1_vlan: entered promiscuous mode [ 89.485421][ T5850] veth0_vlan: entered promiscuous mode [ 89.530913][ T5850] veth1_vlan: entered promiscuous mode [ 89.573793][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.591948][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.662728][ T5832] veth0_macvtap: entered promiscuous mode [ 89.689566][ T5850] veth0_macvtap: entered promiscuous mode [ 89.716989][ T5832] veth1_macvtap: entered promiscuous mode [ 89.738332][ T5850] veth1_macvtap: entered promiscuous mode [ 89.759310][ T5837] veth0_vlan: entered promiscuous mode [ 89.781098][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.821656][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.837054][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.859809][ T5837] veth1_vlan: entered promiscuous mode [ 89.880407][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.888612][ T1149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.899096][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.928656][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.939087][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.950729][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.976753][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.010275][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.019631][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.051670][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.176772][ T5837] veth0_macvtap: entered promiscuous mode [ 90.189215][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.197874][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.205743][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.215647][ T5834] veth0_vlan: entered promiscuous mode [ 90.222427][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.227048][ T5837] veth1_macvtap: entered promiscuous mode [ 90.261509][ T5835] veth0_vlan: entered promiscuous mode [ 90.280958][ T5834] veth1_vlan: entered promiscuous mode [ 90.300324][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.309173][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.327162][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.341455][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.369246][ T5835] veth1_vlan: entered promiscuous mode [ 90.390724][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.399784][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.409200][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.419655][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.442100][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.451495][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.458912][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.488385][ T5834] veth0_macvtap: entered promiscuous mode [ 90.530306][ T5834] veth1_macvtap: entered promiscuous mode [ 90.631659][ T5835] veth0_macvtap: entered promiscuous mode [ 90.688121][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.733325][ T5948] ======================================================= [ 90.733325][ T5948] WARNING: The mand mount option has been deprecated and [ 90.733325][ T5948] and is ignored by this kernel. Remove the mand [ 90.733325][ T5948] option from the mount to silence this warning. [ 90.733325][ T5948] ======================================================= [ 90.734241][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.781065][ T5835] veth1_macvtap: entered promiscuous mode [ 90.801422][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.811319][ T5845] Bluetooth: hci0: command tx timeout [ 90.821330][ T1149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.824577][ T5845] Bluetooth: hci1: command tx timeout [ 90.834361][ T5848] Bluetooth: hci2: command tx timeout [ 90.846804][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.877216][ T1149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.886246][ T5844] Bluetooth: hci3: command tx timeout [ 90.931532][ T1149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.940909][ T1149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.964451][ T5844] Bluetooth: hci4: command tx timeout [ 90.989906][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.996220][ T5952] Zero length message leads to an empty skb [ 91.033466][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.048725][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.058587][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.067315][ T5952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'. [ 91.091638][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.117482][ T5952] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 91.223093][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.247499][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.351169][ T5952] team0 (unregistering): Port device team_slave_0 removed [ 91.368798][ T5952] team0 (unregistering): Port device team_slave_1 removed [ 91.460576][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.533820][ C1] hrtimer: interrupt took 37015 ns [ 91.688205][ T917] cfg80211: failed to load regulatory.db [ 91.715260][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.740694][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.958223][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.985001][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.037896][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.073024][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.180727][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.217650][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.292103][ T5970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.428593][ T5971] delete_channel: no stack [ 92.884222][ T5848] Bluetooth: hci1: command tx timeout [ 92.889716][ T5848] Bluetooth: hci0: command tx timeout [ 92.895506][ T5844] Bluetooth: hci2: command tx timeout [ 92.964300][ T5844] Bluetooth: hci3: command tx timeout [ 93.044488][ T5844] Bluetooth: hci4: command tx timeout [ 93.122531][ T5992] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 93.633299][ T6001] FAULT_INJECTION: forcing a failure. [ 93.633299][ T6001] name failslab, interval 1, probability 0, space 0, times 1 [ 93.707194][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(full) [ 93.707219][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.707237][ T6001] Call Trace: [ 93.707245][ T6001] [ 93.707252][ T6001] dump_stack_lvl+0x189/0x250 [ 93.707290][ T6001] ? __pfx____ratelimit+0x10/0x10 [ 93.707313][ T6001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.707336][ T6001] ? __pfx__printk+0x10/0x10 [ 93.707360][ T6001] ? __pfx___might_resched+0x10/0x10 [ 93.707384][ T6001] should_fail_ex+0x414/0x560 [ 93.707416][ T6001] should_failslab+0xa8/0x100 [ 93.707436][ T6001] __kmalloc_noprof+0xcb/0x7f0 [ 93.707467][ T6001] ? kfree+0x4d/0x6d0 [ 93.707487][ T6001] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 93.707513][ T6001] ? rcu_is_watching+0x15/0xb0 [ 93.707538][ T6001] tomoyo_realpath_from_path+0xe3/0x5d0 [ 93.707575][ T6001] ? tomoyo_mount_permission+0x27a/0x970 [ 93.707601][ T6001] tomoyo_mount_permission+0x377/0x970 [ 93.707630][ T6001] ? tomoyo_mount_permission+0x27a/0x970 [ 93.707656][ T6001] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 93.707713][ T6001] ? kasan_quarantine_put+0x3d/0x220 [ 93.707755][ T6001] security_sb_mount+0xec/0x350 [ 93.707785][ T6001] path_mount+0xbc/0xfe0 [ 93.707810][ T6001] ? user_path_at+0x44/0x60 [ 93.707828][ T6001] ? kmem_cache_free+0x19b/0x690 [ 93.707881][ T6001] __se_sys_mount+0x313/0x410 [ 93.707905][ T6001] ? __pfx___se_sys_mount+0x10/0x10 [ 93.707926][ T6001] ? do_syscall_64+0xbe/0xfa0 [ 93.707949][ T6001] ? __x64_sys_mount+0x20/0xc0 [ 93.707969][ T6001] do_syscall_64+0xfa/0xfa0 [ 93.707992][ T6001] ? lockdep_hardirqs_on+0x9c/0x150 [ 93.708017][ T6001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.708035][ T6001] ? clear_bhb_loop+0x60/0xb0 [ 93.708057][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.708075][ T6001] RIP: 0033:0x7f8f83f8f6c9 [ 93.708099][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.708114][ T6001] RSP: 002b:00007f8f84f0f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.708134][ T6001] RAX: ffffffffffffffda RBX: 00007f8f841e5fa0 RCX: 00007f8f83f8f6c9 [ 93.708147][ T6001] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 93.708158][ T6001] RBP: 00007f8f84f0f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.708169][ T6001] R10: 0000000000084000 R11: 0000000000000246 R12: 0000000000000001 [ 93.708180][ T6001] R13: 00007f8f841e6038 R14: 00007f8f841e5fa0 R15: 00007fffae4ae3c8 [ 93.708215][ T6001] [ 93.977001][ T6001] ERROR: Out of memory at tomoyo_realpath_from_path. [ 94.134686][ T6004] netlink: 'syz.3.25': attribute type 13 has an invalid length. [ 94.317624][ T6009] netlink: 'syz.0.26': attribute type 4 has an invalid length. [ 94.327553][ T6009] netlink: 'syz.0.26': attribute type 17 has an invalid length. [ 94.447592][ T6013] syz.1.24 uses obsolete (PF_INET,SOCK_PACKET) [ 95.035942][ T6024] lo speed is unknown, defaulting to 1000 [ 95.055734][ T6024] lo speed is unknown, defaulting to 1000 [ 95.121363][ T6024] lo speed is unknown, defaulting to 1000 [ 95.243424][ T6026] : entered promiscuous mode [ 95.264512][ T6019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.420808][ T6024] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.559705][ T6024] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.295836][ T6024] lo speed is unknown, defaulting to 1000 [ 96.409300][ T6024] lo speed is unknown, defaulting to 1000 [ 96.581351][ T6024] lo speed is unknown, defaulting to 1000 [ 96.751409][ T6024] lo speed is unknown, defaulting to 1000 [ 96.926532][ T6024] lo speed is unknown, defaulting to 1000 [ 99.239052][ T6064] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.379183][ T6073] netlink: 763 bytes leftover after parsing attributes in process `syz.1.44'. [ 99.462781][ T6071] netlink: 'syz.3.41': attribute type 10 has an invalid length. [ 99.548096][ T6073] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.895001][ T6082] netlink: 5 bytes leftover after parsing attributes in process `syz.4.46'. [ 102.904084][ T6082] openvswitch: netlink: Tunnel attr 15060 out of range max 16 [ 108.273964][ T6071] geneve0: entered promiscuous mode [ 108.372528][ T6071] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 108.490373][ T6089] netlink: 164 bytes leftover after parsing attributes in process `syz.0.48'. [ 108.677539][ T6101] netlink: 'syz.4.50': attribute type 3 has an invalid length. [ 108.765170][ T6101] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.50'. [ 108.847445][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 109.386591][ T6115] : renamed from gre0 (while UP) [ 109.857432][ T6111] delete_channel: no stack [ 110.374017][ T6133] netlink: 60 bytes leftover after parsing attributes in process `syz.2.61'. [ 110.388513][ T6133] C: renamed from team_slave_0 (while UP) [ 110.406358][ T6133] netlink: 'syz.2.61': attribute type 1 has an invalid length. [ 110.414403][ T6133] netlink: 152 bytes leftover after parsing attributes in process `syz.2.61'. [ 110.434383][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 110.692728][ T6142] netlink: 16 bytes leftover after parsing attributes in process `syz.0.63'. [ 111.730068][ T6153] netlink: 'syz.3.67': attribute type 27 has an invalid length. [ 111.754858][ T6153] netlink: 128 bytes leftover after parsing attributes in process `syz.3.67'. [ 111.981453][ T6166] veth1_macvtap: left promiscuous mode [ 112.407950][ T6178] warning: `syz.4.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.514731][ T6175] netlink: 60 bytes leftover after parsing attributes in process `syz.4.75'. [ 112.584446][ T6175] netlink: 60 bytes leftover after parsing attributes in process `syz.4.75'. [ 112.611847][ T6175] netlink: 'syz.4.75': attribute type 13 has an invalid length. [ 112.623956][ T6175] netlink: 'syz.4.75': attribute type 27 has an invalid length. [ 112.648247][ T6189] netlink: 'syz.0.78': attribute type 6 has an invalid length. [ 115.710655][ T6206] netlink: 'syz.3.83': attribute type 27 has an invalid length. [ 115.755075][ T6206] __nla_validate_parse: 1 callbacks suppressed [ 115.755091][ T6206] netlink: 128 bytes leftover after parsing attributes in process `syz.3.83'. [ 116.175243][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.3.91'. [ 116.208074][ T6228] netlink: 40 bytes leftover after parsing attributes in process `syz.3.91'. [ 116.223043][ T6226] can: request_module (can-proto-0) failed. [ 116.281494][ T6234] netlink: 'syz.1.93': attribute type 27 has an invalid length. [ 116.290219][ T6234] netlink: 128 bytes leftover after parsing attributes in process `syz.1.93'. [ 116.740032][ T6253] netlink: 'syz.4.101': attribute type 27 has an invalid length. [ 116.751342][ T6253] netlink: 128 bytes leftover after parsing attributes in process `syz.4.101'. [ 117.877758][ T6301] netlink: 'syz.1.118': attribute type 27 has an invalid length. [ 117.894249][ T6301] netlink: 128 bytes leftover after parsing attributes in process `syz.1.118'. [ 118.637384][ T6324] syzkaller0: entered promiscuous mode [ 118.643038][ T6324] syzkaller0: entered allmulticast mode [ 119.013748][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 119.039964][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.128'. [ 119.959128][ T6354] netlink: 'syz.0.134': attribute type 27 has an invalid length. [ 119.974413][ T6354] netlink: 128 bytes leftover after parsing attributes in process `syz.0.134'. [ 121.919481][ T6398] netlink: 220 bytes leftover after parsing attributes in process `syz.1.146'. [ 121.953677][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 122.204117][ T6404] netlink: 'syz.1.149': attribute type 27 has an invalid length. [ 122.216301][ T6404] netlink: 128 bytes leftover after parsing attributes in process `syz.1.149'. [ 126.886546][ T6450] netlink: 'syz.1.165': attribute type 27 has an invalid length. [ 126.894409][ T6450] netlink: 128 bytes leftover after parsing attributes in process `syz.1.165'. [ 127.055599][ T6457] netlink: 164 bytes leftover after parsing attributes in process `syz.2.168'. [ 128.778981][ T6479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.131700][ T6504] netlink: 'syz.2.184': attribute type 27 has an invalid length. [ 130.139716][ T6504] netlink: 128 bytes leftover after parsing attributes in process `syz.2.184'. [ 131.390573][ T6527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.448391][ T6529] netlink: 'syz.4.190': attribute type 10 has an invalid length. [ 131.458930][ T30] audit: type=1107 audit(1763157859.853:2): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 131.507003][ T6534] netlink: 2060 bytes leftover after parsing attributes in process `syz.4.190'. [ 131.526549][ T6534] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.190'. [ 131.561601][ T6529] team0: Port device wlan1 added [ 132.105631][ T6528] syz.1.191 (6528) used greatest stack depth: 14320 bytes left [ 132.660791][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.670128][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.301058][ T6557] netlink: 'syz.2.199': attribute type 27 has an invalid length. [ 133.324274][ T6557] netlink: 128 bytes leftover after parsing attributes in process `syz.2.199'. [ 134.964274][ T6576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.205'. [ 135.004137][ T6576] netlink: 16 bytes leftover after parsing attributes in process `syz.3.205'. [ 135.149548][ T6578] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.470916][ T6580] netlink: 104 bytes leftover after parsing attributes in process `syz.1.207'. [ 135.557932][ T6581] netlink: 24 bytes leftover after parsing attributes in process `syz.1.207'. [ 136.073623][ T6581] netlink: 132 bytes leftover after parsing attributes in process `syz.1.207'. [ 137.337533][ T6608] netlink: 'syz.0.213': attribute type 21 has an invalid length. [ 137.432193][ T6609] netlink: 'syz.0.213': attribute type 21 has an invalid length. [ 137.539466][ T6608] netlink: 'syz.0.213': attribute type 11 has an invalid length. [ 137.604905][ T6609] netlink: 'syz.0.213': attribute type 11 has an invalid length. [ 138.582898][ T6616] netlink: 'syz.2.214': attribute type 27 has an invalid length. [ 138.977613][ T6616] netlink: 128 bytes leftover after parsing attributes in process `syz.2.214'. [ 140.972802][ T6633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.221'. [ 143.379230][ T6656] netlink: 76 bytes leftover after parsing attributes in process `syz.3.228'. [ 144.778339][ T6667] netlink: 36 bytes leftover after parsing attributes in process `syz.3.231'. [ 144.987827][ T6674] netlink: 168 bytes leftover after parsing attributes in process `syz.1.232'. [ 145.074153][ T6674] netlink: 73 bytes leftover after parsing attributes in process `syz.1.232'. [ 145.525091][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 145.689252][ T6678] netlink: 'syz.2.233': attribute type 27 has an invalid length. [ 145.714115][ T6678] netlink: 128 bytes leftover after parsing attributes in process `syz.2.233'. [ 145.868441][ T6685] netlink: 'syz.0.234': attribute type 1 has an invalid length. [ 149.331986][ T6711] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 149.406236][ T6711] netlink: 20 bytes leftover after parsing attributes in process `syz.3.244'. [ 149.451630][ T6711] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 152.816378][ T6730] netlink: 'syz.0.249': attribute type 27 has an invalid length. [ 152.994221][ T6730] netlink: 128 bytes leftover after parsing attributes in process `syz.0.249'. [ 153.417418][ T6736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.269195][ T6750] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.254'. [ 156.432082][ T6755] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.254'. [ 157.206482][ T6763] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 158.512397][ T6778] netlink: 'syz.4.264': attribute type 27 has an invalid length. [ 158.520443][ T6778] netlink: 128 bytes leftover after parsing attributes in process `syz.4.264'. [ 160.870615][ T6785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.554853][ T6789] netlink: 'syz.3.266': attribute type 274 has an invalid length. [ 163.795079][ T6807] netlink: 'syz.2.271': attribute type 17 has an invalid length. [ 163.823687][ T6807] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 164.066131][ T6820] ªªªªª!: renamed from vlan0 (while UP) [ 164.116994][ T6821] FAULT_INJECTION: forcing a failure. [ 164.116994][ T6821] name failslab, interval 1, probability 0, space 0, times 0 [ 164.171450][ T6821] CPU: 0 UID: 0 PID: 6821 Comm: syz.2.274 Not tainted syzkaller #0 PREEMPT(full) [ 164.171474][ T6821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 164.171485][ T6821] Call Trace: [ 164.171492][ T6821] [ 164.171501][ T6821] dump_stack_lvl+0x189/0x250 [ 164.171532][ T6821] ? __pfx____ratelimit+0x10/0x10 [ 164.171556][ T6821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.171581][ T6821] ? __pfx__printk+0x10/0x10 [ 164.171608][ T6821] ? __pfx___might_resched+0x10/0x10 [ 164.171634][ T6821] should_fail_ex+0x414/0x560 [ 164.171669][ T6821] should_failslab+0xa8/0x100 [ 164.171690][ T6821] __kmalloc_noprof+0xcb/0x7f0 [ 164.171714][ T6821] ? kfree+0x4d/0x6d0 [ 164.171734][ T6821] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 164.171771][ T6821] tomoyo_realpath_from_path+0xe3/0x5d0 [ 164.171801][ T6821] ? tomoyo_domain+0xd9/0x130 [ 164.171825][ T6821] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 164.171849][ T6821] tomoyo_path_number_perm+0x1e8/0x5a0 [ 164.171876][ T6821] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.171945][ T6821] ? __fget_files+0x2a/0x420 [ 164.171969][ T6821] ? __fget_files+0x3a0/0x420 [ 164.171985][ T6821] ? __fget_files+0x2a/0x420 [ 164.172007][ T6821] security_file_ioctl+0xcb/0x2d0 [ 164.172032][ T6821] __se_sys_ioctl+0x47/0x170 [ 164.172059][ T6821] do_syscall_64+0xfa/0xfa0 [ 164.172103][ T6821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.172122][ T6821] ? clear_bhb_loop+0x60/0xb0 [ 164.172146][ T6821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.172164][ T6821] RIP: 0033:0x7f5c4638f6c9 [ 164.172186][ T6821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.172207][ T6821] RSP: 002b:00007f5c472a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.172226][ T6821] RAX: ffffffffffffffda RBX: 00007f5c465e6090 RCX: 00007f5c4638f6c9 [ 164.172240][ T6821] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000007 [ 164.172251][ T6821] RBP: 00007f5c472a7090 R08: 0000000000000000 R09: 0000000000000000 [ 164.172279][ T6821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.172290][ T6821] R13: 00007f5c465e6128 R14: 00007f5c465e6090 R15: 00007fffd1608198 [ 164.172328][ T6821] [ 164.172336][ T6821] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.417394][ T6821] ªªªªª!: renamed from vlan0 (while UP) [ 164.520687][ T6829] netlink: 'syz.4.278': attribute type 27 has an invalid length. [ 164.528874][ T6829] netlink: 128 bytes leftover after parsing attributes in process `syz.4.278'. [ 164.824319][ T6833] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.056278][ T6843] netlink: 164 bytes leftover after parsing attributes in process `syz.3.283'. [ 167.582212][ T6867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.290'. [ 167.594207][ T6867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.290'. [ 167.623662][ T6867] netlink: 60 bytes leftover after parsing attributes in process `syz.2.290'. [ 167.644406][ T6867] netlink: 'syz.2.290': attribute type 13 has an invalid length. [ 167.652178][ T6867] netlink: 'syz.2.290': attribute type 27 has an invalid length. [ 168.481757][ T6883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.119820][ T6900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 169.185704][ T6900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.193353][ T6900] IPv6: NLM_F_CREATE should be set when creating new route [ 169.200999][ T6900] IPv6: NLM_F_CREATE should be set when creating new route [ 169.208469][ T6900] IPv6: NLM_F_CREATE should be set when creating new route [ 169.255843][ T6904] netlink: 'syz.2.303': attribute type 4 has an invalid length. [ 169.275484][ T6904] netlink: 152 bytes leftover after parsing attributes in process `syz.2.303'. [ 169.355687][ T6900] netlink: 48 bytes leftover after parsing attributes in process `syz.2.303'. [ 169.400301][ T6904] .`: renamed from bond0 (while UP) [ 169.714269][ T6916] netlink: 'syz.2.306': attribute type 4 has an invalid length. [ 169.733891][ T6916] netlink: 'syz.2.306': attribute type 17 has an invalid length. [ 169.792659][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 169.813037][ T6912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.306'. [ 170.043355][ T6929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 170.223508][ T6935] netlink: 'syz.1.313': attribute type 39 has an invalid length. [ 171.230513][ T6964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.672099][ T6976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.094484][ T6985] netlink: 'syz.4.330': attribute type 6 has an invalid length. [ 172.291533][ T6995] FAULT_INJECTION: forcing a failure. [ 172.291533][ T6995] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 172.345245][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.3.336 Not tainted syzkaller #0 PREEMPT(full) [ 172.345269][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.345279][ T6995] Call Trace: [ 172.345286][ T6995] [ 172.345294][ T6995] dump_stack_lvl+0x189/0x250 [ 172.345323][ T6995] ? __pfx____ratelimit+0x10/0x10 [ 172.345348][ T6995] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.345372][ T6995] ? __pfx__printk+0x10/0x10 [ 172.345402][ T6995] should_fail_ex+0x414/0x560 [ 172.345434][ T6995] _copy_from_user+0x2d/0xb0 [ 172.345457][ T6995] memdup_sockptr_noprof+0x95/0x100 [ 172.345495][ T6995] ip_set_mcast_msfilter+0xcc/0x320 [ 172.345528][ T6995] do_ip_setsockopt+0x19e7/0x2d00 [ 172.345561][ T6995] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 172.345585][ T6995] ? __lock_acquire+0xab9/0xd20 [ 172.345610][ T6995] ? aa_sk_perm+0x81e/0x950 [ 172.345639][ T6995] ? __pfx_aa_sk_perm+0x10/0x10 [ 172.345666][ T6995] ? aa_sock_opt_perm+0xff/0x1b0 [ 172.345696][ T6995] ip_setsockopt+0x66/0x110 [ 172.345710][ T6995] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 172.345737][ T6995] do_sock_setsockopt+0x17c/0x1b0 [ 172.345760][ T6995] __x64_sys_setsockopt+0x13f/0x1b0 [ 172.345784][ T6995] do_syscall_64+0xfa/0xfa0 [ 172.345823][ T6995] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.345848][ T6995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.345867][ T6995] ? clear_bhb_loop+0x60/0xb0 [ 172.345890][ T6995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.345918][ T6995] RIP: 0033:0x7f847418f6c9 [ 172.345933][ T6995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.345948][ T6995] RSP: 002b:00007f847507e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 172.345965][ T6995] RAX: ffffffffffffffda RBX: 00007f84743e5fa0 RCX: 00007f847418f6c9 [ 172.345978][ T6995] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 172.345987][ T6995] RBP: 00007f847507e090 R08: 0000000000000108 R09: 0000000000000000 [ 172.345998][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.346007][ T6995] R13: 00007f84743e6038 R14: 00007f84743e5fa0 R15: 00007ffc7c29f2f8 [ 172.346038][ T6995] [ 172.666454][ T7002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.330545][ T7019] netlink: 60 bytes leftover after parsing attributes in process `syz.1.343'. [ 173.358923][ T7019] C: renamed from team_slave_0 [ 173.370821][ T7019] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 173.385018][ T7019] netlink: 152 bytes leftover after parsing attributes in process `syz.1.343'. [ 173.424594][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.343'. [ 173.544509][ T7024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 173.556378][ T7024] netlink: 556 bytes leftover after parsing attributes in process `syz.2.344'. [ 173.660439][ T7034] netlink: 14 bytes leftover after parsing attributes in process `syz.0.350'. [ 174.474909][ T7034] hsr_slave_0: left promiscuous mode [ 174.500579][ T7034] hsr_slave_1: left promiscuous mode [ 175.013690][ T7055] netlink: 'syz.0.354': attribute type 13 has an invalid length. [ 176.386533][ T7067] FAULT_INJECTION: forcing a failure. [ 176.386533][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 176.414543][ T7068] netlink: 200 bytes leftover after parsing attributes in process `syz.0.359'. [ 176.441332][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.1.360 Not tainted syzkaller #0 PREEMPT(full) [ 176.441356][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.441366][ T7067] Call Trace: [ 176.441373][ T7067] [ 176.441380][ T7067] dump_stack_lvl+0x189/0x250 [ 176.441409][ T7067] ? __pfx____ratelimit+0x10/0x10 [ 176.441432][ T7067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.441456][ T7067] ? __pfx__printk+0x10/0x10 [ 176.441480][ T7067] ? __pfx___might_resched+0x10/0x10 [ 176.441498][ T7067] ? fs_reclaim_acquire+0x7d/0x100 [ 176.441530][ T7067] should_fail_ex+0x414/0x560 [ 176.441562][ T7067] should_failslab+0xa8/0x100 [ 176.441581][ T7067] __kmalloc_noprof+0xcb/0x7f0 [ 176.441605][ T7067] ? bpf_test_init+0x9f/0x150 [ 176.441637][ T7067] bpf_test_init+0x9f/0x150 [ 176.441667][ T7067] bpf_prog_test_run_skb+0x206/0x1550 [ 176.441695][ T7067] ? __fget_files+0x2a/0x420 [ 176.441717][ T7067] ? __fget_files+0x2a/0x420 [ 176.441738][ T7067] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 176.441765][ T7067] bpf_prog_test_run+0x2c7/0x340 [ 176.441805][ T7067] __sys_bpf+0x562/0x860 [ 176.441825][ T7067] ? __pfx___sys_bpf+0x10/0x10 [ 176.441858][ T7067] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 176.441876][ T7067] ? ksys_write+0x22a/0x250 [ 176.441905][ T7067] ? __pfx_ksys_write+0x10/0x10 [ 176.441937][ T7067] __x64_sys_bpf+0x7c/0x90 [ 176.441965][ T7067] do_syscall_64+0xfa/0xfa0 [ 176.441990][ T7067] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.442015][ T7067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.442034][ T7067] ? clear_bhb_loop+0x60/0xb0 [ 176.442084][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.442103][ T7067] RIP: 0033:0x7f99ed78f6c9 [ 176.442121][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.442137][ T7067] RSP: 002b:00007f99ee64b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 176.442158][ T7067] RAX: ffffffffffffffda RBX: 00007f99ed9e5fa0 RCX: 00007f99ed78f6c9 [ 176.442171][ T7067] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 176.442183][ T7067] RBP: 00007f99ee64b090 R08: 0000000000000000 R09: 0000000000000000 [ 176.442194][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.442204][ T7067] R13: 00007f99ed9e6038 R14: 00007f99ed9e5fa0 R15: 00007ffc977b2118 [ 176.442237][ T7067] [ 176.788764][ T7073] netlink: 60 bytes leftover after parsing attributes in process `syz.1.362'. [ 176.816151][ T7077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.361'. [ 176.842538][ T7073] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 176.842565][ T7073] netlink: 152 bytes leftover after parsing attributes in process `syz.1.362'. [ 177.115408][ T7087] netlink: 'syz.4.365': attribute type 32 has an invalid length. [ 177.171960][ T7087] netlink: 72 bytes leftover after parsing attributes in process `syz.4.365'. [ 177.234901][ T7087] netlink: 76 bytes leftover after parsing attributes in process `syz.4.365'. [ 177.337404][ T7098] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'. [ 180.699404][ T7119] C: renamed from team_slave_0 (while UP) [ 180.772491][ T7122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.375'. [ 180.831474][ T7119] netlink: 'syz.3.374': attribute type 1 has an invalid length. [ 180.903968][ T7119] netlink: 152 bytes leftover after parsing attributes in process `syz.3.374'. [ 181.105007][ T7124] netlink: 'syz.2.376': attribute type 21 has an invalid length. [ 181.112876][ T7124] netlink: 'syz.2.376': attribute type 1 has an invalid length. [ 181.128677][ T7124] netlink: 132 bytes leftover after parsing attributes in process `syz.2.376'. [ 181.212019][ T7124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.234836][ T7124] netlink: 'syz.2.376': attribute type 4 has an invalid length. [ 181.242568][ T7135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.745571][ T7147] openvswitch: netlink: ufid size 7776 bytes exceeds the range (1, 16) [ 181.763693][ T7147] sch_tbf: burst 11 is lower than device veth0_to_bridge mtu (1514) ! [ 184.782508][ T7167] __nla_validate_parse: 2 callbacks suppressed [ 184.782527][ T7167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.389'. [ 185.121779][ T7184] FAULT_INJECTION: forcing a failure. [ 185.121779][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 185.168357][ T7184] CPU: 1 UID: 0 PID: 7184 Comm: syz.3.395 Not tainted syzkaller #0 PREEMPT(full) [ 185.168393][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 185.168415][ T7184] Call Trace: [ 185.168422][ T7184] [ 185.168429][ T7184] dump_stack_lvl+0x189/0x250 [ 185.168470][ T7184] ? __pfx____ratelimit+0x10/0x10 [ 185.168493][ T7184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.168517][ T7184] ? __pfx__printk+0x10/0x10 [ 185.168540][ T7184] ? __pfx___might_resched+0x10/0x10 [ 185.168559][ T7184] ? fs_reclaim_acquire+0x7d/0x100 [ 185.168590][ T7184] should_fail_ex+0x414/0x560 [ 185.168621][ T7184] should_failslab+0xa8/0x100 [ 185.168640][ T7184] kmem_cache_alloc_node_noprof+0x77/0x710 [ 185.168664][ T7184] ? __alloc_skb+0x112/0x2d0 [ 185.168680][ T7184] ? netlink_autobind+0xdb/0x300 [ 185.168702][ T7184] __alloc_skb+0x112/0x2d0 [ 185.168722][ T7184] netlink_sendmsg+0x5c6/0xb30 [ 185.168748][ T7184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.168768][ T7184] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.168796][ T7184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.168813][ T7184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.168831][ T7184] __sock_sendmsg+0x21c/0x270 [ 185.168857][ T7184] ____sys_sendmsg+0x505/0x830 [ 185.168881][ T7184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.168909][ T7184] ? import_iovec+0x74/0xa0 [ 185.168934][ T7184] ___sys_sendmsg+0x21f/0x2a0 [ 185.168956][ T7184] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.169008][ T7184] ? __fget_files+0x2a/0x420 [ 185.169027][ T7184] ? __fget_files+0x3a0/0x420 [ 185.169054][ T7184] __x64_sys_sendmsg+0x19b/0x260 [ 185.169075][ T7184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.169092][ T7184] ? perf_trace_preemptirq_template+0xa3/0x340 [ 185.169120][ T7184] ? __pfx_ksys_write+0x10/0x10 [ 185.169148][ T7184] ? do_syscall_64+0xbe/0xfa0 [ 185.169174][ T7184] do_syscall_64+0xfa/0xfa0 [ 185.169196][ T7184] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.169219][ T7184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.169236][ T7184] ? clear_bhb_loop+0x60/0xb0 [ 185.169257][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.169273][ T7184] RIP: 0033:0x7f847418f6c9 [ 185.169295][ T7184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.169309][ T7184] RSP: 002b:00007f847507e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.169341][ T7184] RAX: ffffffffffffffda RBX: 00007f84743e5fa0 RCX: 00007f847418f6c9 [ 185.169353][ T7184] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 185.169364][ T7184] RBP: 00007f847507e090 R08: 0000000000000000 R09: 0000000000000000 [ 185.169374][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.169383][ T7184] R13: 00007f84743e6038 R14: 00007f84743e5fa0 R15: 00007ffc7c29f2f8 [ 185.169413][ T7184] [ 185.525489][ T7190] netlink: 56 bytes leftover after parsing attributes in process `syz.1.397'. [ 185.816777][ T7200] netlink: get zone limit has 8 unknown bytes [ 187.320171][ T7219] netlink: 'syz.4.408': attribute type 4 has an invalid length. [ 187.373863][ T7219] netlink: 'syz.4.408': attribute type 17 has an invalid length. [ 187.442476][ T6006] lo speed is unknown, defaulting to 1000 [ 187.449454][ T939] lo speed is unknown, defaulting to 1000 [ 187.486105][ T939] lo speed is unknown, defaulting to 1000 [ 188.743544][ T7246] netlink: 'syz.2.414': attribute type 10 has an invalid length. [ 188.853420][ T7246] netlink: 40 bytes leftover after parsing attributes in process `syz.2.414'. [ 189.173585][ T7246] bridge0: port 3(batadv0) entered blocking state [ 189.274974][ T7246] bridge0: port 3(batadv0) entered disabled state [ 189.283672][ T7246] batadv0: entered allmulticast mode [ 189.291520][ T7246] batadv0: entered promiscuous mode [ 189.297693][ T7246] bridge0: port 3(batadv0) entered blocking state [ 189.304437][ T7246] bridge0: port 3(batadv0) entered forwarding state [ 189.747005][ T1115] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 189.756915][ T1115] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 189.785318][ T7275] netlink: 'syz.0.423': attribute type 4 has an invalid length. [ 189.935353][ T7268] delete_channel: no stack [ 190.288020][ T7294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.386152][ T7302] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 192.158033][ T7336] openvswitch: netlink: Actions may not be safe on all matching packets [ 192.191754][ T7339] netlink: 'syz.4.440': attribute type 2 has an invalid length. [ 192.322760][ T7339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.440'. [ 192.561857][ T7342] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 194.000856][ T7328] batadv0: entered promiscuous mode [ 194.100747][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.113516][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.201427][ T7362] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.452'. [ 194.228290][ T7362] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 194.369341][ T7370] netlink: 72 bytes leftover after parsing attributes in process `syz.3.454'. [ 194.858565][ T7381] FAULT_INJECTION: forcing a failure. [ 194.858565][ T7381] name failslab, interval 1, probability 0, space 0, times 0 [ 194.893832][ T7381] CPU: 0 UID: 0 PID: 7381 Comm: syz.4.459 Not tainted syzkaller #0 PREEMPT(full) [ 194.893858][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.893869][ T7381] Call Trace: [ 194.893876][ T7381] [ 194.893884][ T7381] dump_stack_lvl+0x189/0x250 [ 194.893914][ T7381] ? __pfx____ratelimit+0x10/0x10 [ 194.893939][ T7381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.893964][ T7381] ? __pfx__printk+0x10/0x10 [ 194.893985][ T7381] ? __pfx___might_resched+0x10/0x10 [ 194.894005][ T7381] ? fs_reclaim_acquire+0x7d/0x100 [ 194.894039][ T7381] should_fail_ex+0x414/0x560 [ 194.894083][ T7381] should_failslab+0xa8/0x100 [ 194.894102][ T7381] __kmalloc_noprof+0xcb/0x7f0 [ 194.894126][ T7381] ? bpf_test_init+0x9f/0x150 [ 194.894158][ T7381] bpf_test_init+0x9f/0x150 [ 194.894187][ T7381] bpf_prog_test_run_xdp+0x503/0x10e0 [ 194.894238][ T7381] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.894261][ T7381] ? __fget_files+0x2a/0x420 [ 194.894284][ T7381] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 194.894302][ T7381] bpf_prog_test_run+0x2c7/0x340 [ 194.894325][ T7381] __sys_bpf+0x562/0x860 [ 194.894345][ T7381] ? __pfx___sys_bpf+0x10/0x10 [ 194.894394][ T7381] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 194.894411][ T7381] ? ksys_write+0x22a/0x250 [ 194.894438][ T7381] ? __pfx_ksys_write+0x10/0x10 [ 194.894473][ T7381] __x64_sys_bpf+0x7c/0x90 [ 194.894498][ T7381] do_syscall_64+0xfa/0xfa0 [ 194.894520][ T7381] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.894544][ T7381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.894561][ T7381] ? clear_bhb_loop+0x60/0xb0 [ 194.894582][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.894598][ T7381] RIP: 0033:0x7f60e098f6c9 [ 194.894614][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.894627][ T7381] RSP: 002b:00007f60e1784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 194.894646][ T7381] RAX: ffffffffffffffda RBX: 00007f60e0be5fa0 RCX: 00007f60e098f6c9 [ 194.894658][ T7381] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 194.894668][ T7381] RBP: 00007f60e1784090 R08: 0000000000000000 R09: 0000000000000000 [ 194.894678][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.894687][ T7381] R13: 00007f60e0be6038 R14: 00007f60e0be5fa0 R15: 00007ffed1ccc998 [ 194.894716][ T7381] [ 195.661844][ T7403] netlink: 196 bytes leftover after parsing attributes in process `syz.2.463'. [ 195.672456][ T7402] netlink: 'syz.4.464': attribute type 21 has an invalid length. [ 195.685586][ T7402] netlink: 152 bytes leftover after parsing attributes in process `syz.4.464'. [ 197.114458][ T7446] FAULT_INJECTION: forcing a failure. [ 197.114458][ T7446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.196823][ T7446] CPU: 1 UID: 0 PID: 7446 Comm: syz.2.478 Not tainted syzkaller #0 PREEMPT(full) [ 197.196847][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.196857][ T7446] Call Trace: [ 197.196864][ T7446] [ 197.196872][ T7446] dump_stack_lvl+0x189/0x250 [ 197.196901][ T7446] ? __pfx____ratelimit+0x10/0x10 [ 197.196925][ T7446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.196949][ T7446] ? __pfx__printk+0x10/0x10 [ 197.196974][ T7446] ? __might_fault+0xb0/0x130 [ 197.197004][ T7446] should_fail_ex+0x414/0x560 [ 197.197037][ T7446] strncpy_from_user+0x36/0x290 [ 197.197068][ T7446] bpf_raw_tp_link_attach+0x1d9/0x6c0 [ 197.197094][ T7446] ? __fget_files+0x2a/0x420 [ 197.197112][ T7446] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 197.197147][ T7446] ? __fget_files+0x2a/0x420 [ 197.197173][ T7446] bpf_raw_tracepoint_open+0x1b2/0x220 [ 197.197196][ T7446] __sys_bpf+0x73e/0x860 [ 197.197216][ T7446] ? __pfx___sys_bpf+0x10/0x10 [ 197.197258][ T7446] ? ksys_write+0x22a/0x250 [ 197.197286][ T7446] ? __pfx_ksys_write+0x10/0x10 [ 197.197318][ T7446] __x64_sys_bpf+0x7c/0x90 [ 197.197345][ T7446] do_syscall_64+0xfa/0xfa0 [ 197.197367][ T7446] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.197391][ T7446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.197409][ T7446] ? clear_bhb_loop+0x60/0xb0 [ 197.197431][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.197447][ T7446] RIP: 0033:0x7f5c4638f6c9 [ 197.197462][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.197476][ T7446] RSP: 002b:00007f5c472c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.197495][ T7446] RAX: ffffffffffffffda RBX: 00007f5c465e5fa0 RCX: 00007f5c4638f6c9 [ 197.197507][ T7446] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000011 [ 197.197518][ T7446] RBP: 00007f5c472c8090 R08: 0000000000000000 R09: 0000000000000000 [ 197.197528][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.197538][ T7446] R13: 00007f5c465e6038 R14: 00007f5c465e5fa0 R15: 00007fffd1608198 [ 197.197570][ T7446] [ 197.221073][ T7450] netlink: 4484 bytes leftover after parsing attributes in process `syz.0.479'. [ 197.592484][ T7455] Illegal XDP return value 192639144 on prog (id 384) dev N/A, expect packet loss! [ 198.527033][ T7491] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 199.113652][ T7508] FAULT_INJECTION: forcing a failure. [ 199.113652][ T7508] name failslab, interval 1, probability 0, space 0, times 0 [ 199.214805][ T7508] CPU: 0 UID: 0 PID: 7508 Comm: syz.4.501 Not tainted syzkaller #0 PREEMPT(full) [ 199.214831][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 199.214842][ T7508] Call Trace: [ 199.214850][ T7508] [ 199.214858][ T7508] dump_stack_lvl+0x189/0x250 [ 199.214890][ T7508] ? __pfx____ratelimit+0x10/0x10 [ 199.214918][ T7508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.214946][ T7508] ? __pfx__printk+0x10/0x10 [ 199.214974][ T7508] ? __pfx___might_resched+0x10/0x10 [ 199.215005][ T7508] should_fail_ex+0x414/0x560 [ 199.215042][ T7508] should_failslab+0xa8/0x100 [ 199.215062][ T7508] kmem_cache_alloc_node_noprof+0x77/0x710 [ 199.215094][ T7508] ? __alloc_skb+0x112/0x2d0 [ 199.215111][ T7508] ? netlink_autobind+0xdb/0x300 [ 199.215137][ T7508] __alloc_skb+0x112/0x2d0 [ 199.215160][ T7508] netlink_sendmsg+0x5c6/0xb30 [ 199.215191][ T7508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.215215][ T7508] ? aa_sock_msg_perm+0xf1/0x1d0 [ 199.215251][ T7508] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 199.215270][ T7508] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.215291][ T7508] __sock_sendmsg+0x21c/0x270 [ 199.215327][ T7508] ____sys_sendmsg+0x505/0x830 [ 199.215355][ T7508] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.215397][ T7508] ? import_iovec+0x74/0xa0 [ 199.215424][ T7508] ___sys_sendmsg+0x21f/0x2a0 [ 199.215447][ T7508] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.215490][ T7508] ? __fget_files+0x2a/0x420 [ 199.215522][ T7508] ? __fget_files+0x2a/0x420 [ 199.215537][ T7508] ? __fget_files+0x3a0/0x420 [ 199.215565][ T7508] __x64_sys_sendmsg+0x19b/0x260 [ 199.215588][ T7508] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.215619][ T7508] ? __pfx_ksys_write+0x10/0x10 [ 199.215649][ T7508] ? do_syscall_64+0xbe/0xfa0 [ 199.215678][ T7508] do_syscall_64+0xfa/0xfa0 [ 199.215700][ T7508] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.215724][ T7508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.215742][ T7508] ? clear_bhb_loop+0x60/0xb0 [ 199.215764][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.215802][ T7508] RIP: 0033:0x7f60e098f6c9 [ 199.215819][ T7508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.215835][ T7508] RSP: 002b:00007f60e1784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.215855][ T7508] RAX: ffffffffffffffda RBX: 00007f60e0be5fa0 RCX: 00007f60e098f6c9 [ 199.215868][ T7508] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 199.215879][ T7508] RBP: 00007f60e1784090 R08: 0000000000000000 R09: 0000000000000000 [ 199.215890][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.215901][ T7508] R13: 00007f60e0be6038 R14: 00007f60e0be5fa0 R15: 00007ffed1ccc998 [ 199.215936][ T7508] [ 200.748242][ T7525] netlink: 'syz.0.508': attribute type 16 has an invalid length. [ 200.756162][ T7525] netlink: 168 bytes leftover after parsing attributes in process `syz.0.508'. [ 201.232638][ T7546] FAULT_INJECTION: forcing a failure. [ 201.232638][ T7546] name failslab, interval 1, probability 0, space 0, times 0 [ 201.281416][ T7546] CPU: 1 UID: 0 PID: 7546 Comm: syz.1.517 Not tainted syzkaller #0 PREEMPT(full) [ 201.281441][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.281451][ T7546] Call Trace: [ 201.281458][ T7546] [ 201.281467][ T7546] dump_stack_lvl+0x189/0x250 [ 201.281496][ T7546] ? __pfx____ratelimit+0x10/0x10 [ 201.281520][ T7546] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.281544][ T7546] ? __pfx__printk+0x10/0x10 [ 201.281570][ T7546] ? __pfx___might_resched+0x10/0x10 [ 201.281596][ T7546] should_fail_ex+0x414/0x560 [ 201.281634][ T7546] should_failslab+0xa8/0x100 [ 201.281654][ T7546] kmem_cache_alloc_node_noprof+0x77/0x710 [ 201.281680][ T7546] ? __alloc_skb+0x112/0x2d0 [ 201.281695][ T7546] ? netlink_autobind+0xdb/0x300 [ 201.281719][ T7546] __alloc_skb+0x112/0x2d0 [ 201.281739][ T7546] netlink_sendmsg+0x5c6/0xb30 [ 201.281769][ T7546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.281790][ T7546] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.281819][ T7546] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.281835][ T7546] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.281873][ T7546] __sock_sendmsg+0x21c/0x270 [ 201.281901][ T7546] ____sys_sendmsg+0x505/0x830 [ 201.281927][ T7546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.281958][ T7546] ? import_iovec+0x74/0xa0 [ 201.281984][ T7546] ___sys_sendmsg+0x21f/0x2a0 [ 201.282006][ T7546] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.282049][ T7546] ? __fget_files+0x2a/0x420 [ 201.282080][ T7546] ? __fget_files+0x2a/0x420 [ 201.282117][ T7546] ? __fget_files+0x3a0/0x420 [ 201.282147][ T7546] __x64_sys_sendmsg+0x19b/0x260 [ 201.282171][ T7546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.282189][ T7546] ? perf_trace_preemptirq_template+0xa3/0x340 [ 201.282220][ T7546] ? __pfx_ksys_write+0x10/0x10 [ 201.282251][ T7546] ? do_syscall_64+0xbe/0xfa0 [ 201.282281][ T7546] do_syscall_64+0xfa/0xfa0 [ 201.282304][ T7546] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.282329][ T7546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.282347][ T7546] ? clear_bhb_loop+0x60/0xb0 [ 201.282370][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.282388][ T7546] RIP: 0033:0x7f99ed78f6c9 [ 201.282405][ T7546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.282420][ T7546] RSP: 002b:00007f99ee64b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.282440][ T7546] RAX: ffffffffffffffda RBX: 00007f99ed9e5fa0 RCX: 00007f99ed78f6c9 [ 201.282453][ T7546] RDX: 0000000022048090 RSI: 00002000000006c0 RDI: 0000000000000003 [ 201.282464][ T7546] RBP: 00007f99ee64b090 R08: 0000000000000000 R09: 0000000000000000 [ 201.282475][ T7546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.282486][ T7546] R13: 00007f99ed9e6038 R14: 00007f99ed9e5fa0 R15: 00007ffc977b2118 [ 201.282521][ T7546] [ 201.631743][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 201.909118][ T7558] FAULT_INJECTION: forcing a failure. [ 201.909118][ T7558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.088132][ T7558] CPU: 1 UID: 0 PID: 7558 Comm: syz.2.522 Not tainted syzkaller #0 PREEMPT(full) [ 202.088157][ T7558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.088168][ T7558] Call Trace: [ 202.088175][ T7558] [ 202.088183][ T7558] dump_stack_lvl+0x189/0x250 [ 202.088214][ T7558] ? __pfx____ratelimit+0x10/0x10 [ 202.088237][ T7558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.088263][ T7558] ? __pfx__printk+0x10/0x10 [ 202.088282][ T7558] ? __might_fault+0xb0/0x130 [ 202.088310][ T7558] ? __might_fault+0xb0/0x130 [ 202.088342][ T7558] should_fail_ex+0x414/0x560 [ 202.088376][ T7558] _copy_from_iter+0x1de/0x1790 [ 202.088401][ T7558] ? __pfx_perf_trace_lock+0x10/0x10 [ 202.088429][ T7558] ? ima_match_policy+0x10b/0x2150 [ 202.088452][ T7558] ? __pfx__copy_from_iter+0x10/0x10 [ 202.088475][ T7558] ? ima_match_policy+0x10b/0x2150 [ 202.088495][ T7558] ? look_up_lock_class+0x74/0x170 [ 202.088523][ T7558] ? register_lock_class+0x51/0x320 [ 202.088545][ T7558] udplite_getfrag+0x42/0xb0 [ 202.088572][ T7558] __ip6_append_data+0x21ee/0x3f30 [ 202.088626][ T7558] ? __pfx_udplite_getfrag+0x10/0x10 [ 202.088673][ T7558] ? __pfx___ip6_append_data+0x10/0x10 [ 202.088705][ T7558] ? __local_bh_enable_ip+0x12d/0x1c0 [ 202.088730][ T7558] ip6_append_data+0x1c1/0x380 [ 202.088762][ T7558] ? __pfx_udplite_getfrag+0x10/0x10 [ 202.088791][ T7558] udpv6_sendmsg+0xcbf/0x2510 [ 202.088821][ T7558] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.088852][ T7558] ? __pfx_udplite_getfrag+0x10/0x10 [ 202.088885][ T7558] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 202.088917][ T7558] ? __pfx___might_resched+0x10/0x10 [ 202.088937][ T7558] ? __pfx___irq_work_queue_local+0x10/0x10 [ 202.088973][ T7558] ? aa_sk_perm+0x81e/0x950 [ 202.089014][ T7558] ? inet_send_prepare+0x5c/0x270 [ 202.089036][ T7558] ? inet6_sendmsg+0xe4/0x120 [ 202.089066][ T7558] __sock_sendmsg+0xe5/0x270 [ 202.089095][ T7558] ____sys_sendmsg+0x505/0x830 [ 202.089121][ T7558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.089152][ T7558] ? import_iovec+0x74/0xa0 [ 202.089182][ T7558] ___sys_sendmsg+0x21f/0x2a0 [ 202.089205][ T7558] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.089250][ T7558] ? __fget_files+0x2a/0x420 [ 202.089282][ T7558] ? __fget_files+0x2a/0x420 [ 202.089298][ T7558] ? __fget_files+0x3a0/0x420 [ 202.089327][ T7558] __x64_sys_sendmsg+0x19b/0x260 [ 202.089350][ T7558] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.089381][ T7558] ? __pfx_ksys_write+0x10/0x10 [ 202.089412][ T7558] ? do_syscall_64+0xbe/0xfa0 [ 202.089441][ T7558] do_syscall_64+0xfa/0xfa0 [ 202.089463][ T7558] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.089487][ T7558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.089504][ T7558] ? clear_bhb_loop+0x60/0xb0 [ 202.089527][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.089544][ T7558] RIP: 0033:0x7f5c4638f6c9 [ 202.089560][ T7558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.089574][ T7558] RSP: 002b:00007f5c472c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.089592][ T7558] RAX: ffffffffffffffda RBX: 00007f5c465e5fa0 RCX: 00007f5c4638f6c9 [ 202.089605][ T7558] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 202.089615][ T7558] RBP: 00007f5c472c8090 R08: 0000000000000000 R09: 0000000000000000 [ 202.089625][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.089634][ T7558] R13: 00007f5c465e6038 R14: 00007f5c465e5fa0 R15: 00007fffd1608198 [ 202.089667][ T7558] [ 203.502187][ T7587] FAULT_INJECTION: forcing a failure. [ 203.502187][ T7587] name failslab, interval 1, probability 0, space 0, times 0 [ 203.528105][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.2.532 Not tainted syzkaller #0 PREEMPT(full) [ 203.528128][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.528138][ T7587] Call Trace: [ 203.528145][ T7587] [ 203.528153][ T7587] dump_stack_lvl+0x189/0x250 [ 203.528180][ T7587] ? __pfx____ratelimit+0x10/0x10 [ 203.528201][ T7587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.528223][ T7587] ? __pfx__printk+0x10/0x10 [ 203.528245][ T7587] ? __pfx___might_resched+0x10/0x10 [ 203.528263][ T7587] ? fs_reclaim_acquire+0x7d/0x100 [ 203.528295][ T7587] should_fail_ex+0x414/0x560 [ 203.528327][ T7587] should_failslab+0xa8/0x100 [ 203.528347][ T7587] kmem_cache_alloc_node_noprof+0x77/0x710 [ 203.528371][ T7587] ? __alloc_skb+0x112/0x2d0 [ 203.528385][ T7587] ? netlink_autobind+0xdb/0x300 [ 203.528407][ T7587] __alloc_skb+0x112/0x2d0 [ 203.528426][ T7587] netlink_sendmsg+0x5c6/0xb30 [ 203.528452][ T7587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.528473][ T7587] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.528502][ T7587] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.528519][ T7587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.528538][ T7587] __sock_sendmsg+0x21c/0x270 [ 203.528564][ T7587] ____sys_sendmsg+0x505/0x830 [ 203.528589][ T7587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.528615][ T7587] ? import_iovec+0x74/0xa0 [ 203.528641][ T7587] ___sys_sendmsg+0x21f/0x2a0 [ 203.528669][ T7587] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.528722][ T7587] ? __fget_files+0x2a/0x420 [ 203.528738][ T7587] ? __fget_files+0x3a0/0x420 [ 203.528763][ T7587] __x64_sys_sendmsg+0x19b/0x260 [ 203.528784][ T7587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.528801][ T7587] ? perf_trace_preemptirq_template+0xa3/0x340 [ 203.528829][ T7587] ? __pfx_ksys_write+0x10/0x10 [ 203.528857][ T7587] ? do_syscall_64+0xbe/0xfa0 [ 203.528884][ T7587] do_syscall_64+0xfa/0xfa0 [ 203.528906][ T7587] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.528933][ T7587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.528950][ T7587] ? clear_bhb_loop+0x60/0xb0 [ 203.528971][ T7587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.528988][ T7587] RIP: 0033:0x7f5c4638f6c9 [ 203.529003][ T7587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.529017][ T7587] RSP: 002b:00007f5c472c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.529035][ T7587] RAX: ffffffffffffffda RBX: 00007f5c465e5fa0 RCX: 00007f5c4638f6c9 [ 203.529046][ T7587] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 203.529056][ T7587] RBP: 00007f5c472c8090 R08: 0000000000000000 R09: 0000000000000000 [ 203.529066][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.529075][ T7587] R13: 00007f5c465e6038 R14: 00007f5c465e5fa0 R15: 00007fffd1608198 [ 203.529104][ T7587] [ 203.530468][ T7589] netlink: 'syz.0.533': attribute type 29 has an invalid length. [ 203.821351][ T7590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.533'. [ 203.999334][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 204.434944][ T7622] FAULT_INJECTION: forcing a failure. [ 204.434944][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 204.468070][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.4.546 Not tainted syzkaller #0 PREEMPT(full) [ 204.468096][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.468106][ T7622] Call Trace: [ 204.468113][ T7622] [ 204.468121][ T7622] dump_stack_lvl+0x189/0x250 [ 204.468151][ T7622] ? __pfx____ratelimit+0x10/0x10 [ 204.468174][ T7622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.468198][ T7622] ? __pfx__printk+0x10/0x10 [ 204.468222][ T7622] ? __pfx___might_resched+0x10/0x10 [ 204.468241][ T7622] ? fs_reclaim_acquire+0x7d/0x100 [ 204.468274][ T7622] should_fail_ex+0x414/0x560 [ 204.468305][ T7622] should_failslab+0xa8/0x100 [ 204.468324][ T7622] kmem_cache_alloc_node_noprof+0x77/0x710 [ 204.468349][ T7622] ? __alloc_skb+0x112/0x2d0 [ 204.468364][ T7622] ? netlink_autobind+0xdb/0x300 [ 204.468387][ T7622] __alloc_skb+0x112/0x2d0 [ 204.468407][ T7622] netlink_sendmsg+0x5c6/0xb30 [ 204.468433][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.468454][ T7622] ? aa_sock_msg_perm+0xf1/0x1d0 [ 204.468483][ T7622] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 204.468499][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.468517][ T7622] __sock_sendmsg+0x21c/0x270 [ 204.468544][ T7622] ____sys_sendmsg+0x505/0x830 [ 204.468569][ T7622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.468604][ T7622] ? import_iovec+0x74/0xa0 [ 204.468630][ T7622] ___sys_sendmsg+0x21f/0x2a0 [ 204.468652][ T7622] ? __pfx____sys_sendmsg+0x10/0x10 [ 204.468704][ T7622] ? __fget_files+0x2a/0x420 [ 204.468720][ T7622] ? __fget_files+0x3a0/0x420 [ 204.468746][ T7622] __x64_sys_sendmsg+0x19b/0x260 [ 204.468768][ T7622] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 204.468796][ T7622] ? __pfx_ksys_write+0x10/0x10 [ 204.468824][ T7622] ? do_syscall_64+0xbe/0xfa0 [ 204.468852][ T7622] do_syscall_64+0xfa/0xfa0 [ 204.468874][ T7622] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.468898][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.468915][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 204.468936][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.468952][ T7622] RIP: 0033:0x7f60e098f6c9 [ 204.468968][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.468982][ T7622] RSP: 002b:00007f60e1784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.469000][ T7622] RAX: ffffffffffffffda RBX: 00007f60e0be5fa0 RCX: 00007f60e098f6c9 [ 204.469012][ T7622] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 204.469022][ T7622] RBP: 00007f60e1784090 R08: 0000000000000000 R09: 0000000000000000 [ 204.469032][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.469042][ T7622] R13: 00007f60e0be6038 R14: 00007f60e0be5fa0 R15: 00007ffed1ccc998 [ 204.469069][ T7622] [ 204.797434][ T7625] netlink: 'syz.2.549': attribute type 2 has an invalid length. [ 205.002060][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.552'. [ 205.584508][ T7661] netlink: 544 bytes leftover after parsing attributes in process `syz.2.558'. [ 205.933515][ T7670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.564'. [ 205.979053][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.3.563'. [ 206.175398][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.567'. [ 206.334600][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.569'. [ 206.411892][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.569'. [ 207.365659][ T7706] netlink: 830 bytes leftover after parsing attributes in process `syz.1.577'. [ 207.442419][ T7706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.577'. [ 207.540103][ T7714] netlink: 'syz.0.580': attribute type 1 has an invalid length. [ 207.740681][ T7719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.582'. [ 207.879378][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 209.721602][ T7762] netlink: 'syz.1.595': attribute type 6 has an invalid length. [ 209.809013][ T7758] netlink: 'syz.1.595': attribute type 4 has an invalid length. [ 209.834600][ T7758] netlink: 132 bytes leftover after parsing attributes in process `syz.1.595'. [ 209.856768][ T7758] netlink: 'syz.1.595': attribute type 10 has an invalid length. [ 209.954183][ T7758] geneve0: entered promiscuous mode [ 210.106096][ T7758] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 210.825689][ T7794] netlink: 'syz.2.609': attribute type 1 has an invalid length. [ 211.487376][ T7823] FAULT_INJECTION: forcing a failure. [ 211.487376][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 211.524022][ T5149] Bluetooth: hci0: command 0x0406 tx timeout [ 211.530134][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 211.537343][ T5847] Bluetooth: hci1: command 0x0406 tx timeout [ 211.538045][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 211.543374][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 211.587258][ T7823] CPU: 0 UID: 0 PID: 7823 Comm: syz.3.619 Not tainted syzkaller #0 PREEMPT(full) [ 211.587284][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.587295][ T7823] Call Trace: [ 211.587303][ T7823] [ 211.587312][ T7823] dump_stack_lvl+0x189/0x250 [ 211.587345][ T7823] ? __pfx____ratelimit+0x10/0x10 [ 211.587371][ T7823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.587395][ T7823] ? __pfx__printk+0x10/0x10 [ 211.587412][ T7823] ? ipt_do_table+0x2a3/0x1640 [ 211.587439][ T7823] ? iptable_mangle_hook+0x189/0x4c0 [ 211.587469][ T7823] should_fail_ex+0x414/0x560 [ 211.587506][ T7823] should_failslab+0xa8/0x100 [ 211.587529][ T7823] kmem_cache_alloc_noprof+0x74/0x6e0 [ 211.587555][ T7823] ? nf_hook+0x2f2/0x380 [ 211.587579][ T7823] ? dst_alloc+0x105/0x170 [ 211.587609][ T7823] dst_alloc+0x105/0x170 [ 211.587637][ T7823] rt_dst_clone+0x52/0x680 [ 211.587666][ T7823] ip_mc_finish_output+0xe9/0x2d0 [ 211.587699][ T7823] ip_mc_output+0x25c/0x590 [ 211.587733][ T7823] ip_push_pending_frames+0xbe/0x150 [ 211.587765][ T7823] raw_sendmsg+0x1440/0x18b0 [ 211.587811][ T7823] ? __pfx_raw_sendmsg+0x10/0x10 [ 211.587866][ T7823] ? aa_sk_perm+0x81e/0x950 [ 211.587900][ T7823] ? __pfx_aa_sk_perm+0x10/0x10 [ 211.587925][ T7823] ? tomoyo_socket_sendmsg_permission+0x216/0x300 [ 211.587961][ T7823] ? sock_rps_record_flow+0x19/0x410 [ 211.588008][ T7823] ? inet_sendmsg+0x2f4/0x370 [ 211.588023][ T7823] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.588054][ T7823] __sock_sendmsg+0x19c/0x270 [ 211.588082][ T7823] ____sys_sendmsg+0x505/0x830 [ 211.588105][ T7823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.588135][ T7823] ? import_iovec+0x74/0xa0 [ 211.588182][ T7823] ___sys_sendmsg+0x21f/0x2a0 [ 211.588207][ T7823] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.588270][ T7823] ? __fget_files+0x2a/0x420 [ 211.588304][ T7823] ? __fget_files+0x3a0/0x420 [ 211.588333][ T7823] __x64_sys_sendmsg+0x19b/0x260 [ 211.588357][ T7823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.588375][ T7823] ? perf_trace_preemptirq_template+0xa3/0x340 [ 211.588425][ T7823] ? __pfx_ksys_write+0x10/0x10 [ 211.588458][ T7823] ? do_syscall_64+0xbe/0xfa0 [ 211.588490][ T7823] do_syscall_64+0xfa/0xfa0 [ 211.588516][ T7823] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.588542][ T7823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.588562][ T7823] ? clear_bhb_loop+0x60/0xb0 [ 211.588587][ T7823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.588606][ T7823] RIP: 0033:0x7f847418f6c9 [ 211.588623][ T7823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.588639][ T7823] RSP: 002b:00007f847507e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.588659][ T7823] RAX: ffffffffffffffda RBX: 00007f84743e5fa0 RCX: 00007f847418f6c9 [ 211.588690][ T7823] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000004 [ 211.588702][ T7823] RBP: 00007f847507e090 R08: 0000000000000000 R09: 0000000000000000 [ 211.588714][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.588726][ T7823] R13: 00007f84743e6038 R14: 00007f84743e5fa0 R15: 00007ffc7c29f2f8 [ 211.588762][ T7823] [ 212.076194][ T7829] __nla_validate_parse: 1 callbacks suppressed [ 212.076224][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.622'. [ 212.182848][ T7829] : entered promiscuous mode [ 212.954335][ T7860] netlink: 124 bytes leftover after parsing attributes in process `syz.0.634'. [ 213.102928][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.636'. [ 213.156703][ T7870] FAULT_INJECTION: forcing a failure. [ 213.156703][ T7870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.216728][ T7870] CPU: 0 UID: 0 PID: 7870 Comm: syz.2.635 Not tainted syzkaller #0 PREEMPT(full) [ 213.216752][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.216763][ T7870] Call Trace: [ 213.216769][ T7870] [ 213.216777][ T7870] dump_stack_lvl+0x189/0x250 [ 213.216807][ T7870] ? __pfx____ratelimit+0x10/0x10 [ 213.216838][ T7870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.216863][ T7870] ? __pfx__printk+0x10/0x10 [ 213.216877][ T7870] ? __might_fault+0xb0/0x130 [ 213.216903][ T7870] ? __might_fault+0xb0/0x130 [ 213.216927][ T7870] ? rcu_is_watching+0x5a/0xb0 [ 213.216955][ T7870] should_fail_ex+0x414/0x560 [ 213.216988][ T7870] _copy_to_user+0x31/0xb0 [ 213.217014][ T7870] simple_read_from_buffer+0xe1/0x170 [ 213.217046][ T7870] proc_fail_nth_read+0x1b3/0x220 [ 213.217073][ T7870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.217101][ T7870] ? rw_verify_area+0x2a6/0x4d0 [ 213.217125][ T7870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.217149][ T7870] vfs_read+0x200/0xa30 [ 213.217172][ T7870] ? fdget_pos+0x247/0x320 [ 213.217193][ T7870] ? __pfx___mutex_lock+0x10/0x10 [ 213.217219][ T7870] ? __pfx_vfs_read+0x10/0x10 [ 213.217246][ T7870] ? __fget_files+0x2a/0x420 [ 213.217268][ T7870] ? __fget_files+0x3a0/0x420 [ 213.217284][ T7870] ? __fget_files+0x2a/0x420 [ 213.217312][ T7870] ksys_read+0x145/0x250 [ 213.217339][ T7870] ? __pfx_ksys_read+0x10/0x10 [ 213.217375][ T7870] do_syscall_64+0xfa/0xfa0 [ 213.217400][ T7870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.217416][ T7870] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 213.217432][ T7870] ? clear_bhb_loop+0x60/0xb0 [ 213.217454][ T7870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.217471][ T7870] RIP: 0033:0x7f5c4638e0dc [ 213.217486][ T7870] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.217500][ T7870] RSP: 002b:00007f5c472a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.217518][ T7870] RAX: ffffffffffffffda RBX: 00007f5c465e6090 RCX: 00007f5c4638e0dc [ 213.217530][ T7870] RDX: 000000000000000f RSI: 00007f5c472a70a0 RDI: 000000000000000c [ 213.217540][ T7870] RBP: 00007f5c472a7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.217549][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.217559][ T7870] R13: 00007f5c465e6128 R14: 00007f5c465e6090 R15: 00007fffd1608198 [ 213.217591][ T7870] [ 213.838147][ T7872] lo speed is unknown, defaulting to 1000 [ 213.924128][ T7874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.638'. [ 214.023296][ T7880] bridge_slave_1: left allmulticast mode [ 214.029143][ T7880] bridge_slave_1: left promiscuous mode [ 214.055623][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.230910][ T7887] netlink: 'syz.3.640': attribute type 27 has an invalid length. [ 214.271617][ T7887] netlink: 128 bytes leftover after parsing attributes in process `syz.3.640'. [ 214.293257][ T7880] bridge_slave_0: left allmulticast mode [ 214.300484][ T7880] bridge_slave_0: left promiscuous mode [ 214.344154][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.406667][ T7890] FAULT_INJECTION: forcing a failure. [ 214.406667][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.425379][ T7890] CPU: 1 UID: 0 PID: 7890 Comm: syz.4.641 Not tainted syzkaller #0 PREEMPT(full) [ 214.425399][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.425410][ T7890] Call Trace: [ 214.425416][ T7890] [ 214.425424][ T7890] dump_stack_lvl+0x189/0x250 [ 214.425452][ T7890] ? __pfx____ratelimit+0x10/0x10 [ 214.425476][ T7890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.425500][ T7890] ? __pfx__printk+0x10/0x10 [ 214.425518][ T7890] ? __might_fault+0xb0/0x130 [ 214.425544][ T7890] ? __might_fault+0xb0/0x130 [ 214.425574][ T7890] should_fail_ex+0x414/0x560 [ 214.425606][ T7890] _copy_from_user+0x2d/0xb0 [ 214.425629][ T7890] do_ipv6_setsockopt+0x23e/0x2eb0 [ 214.425656][ T7890] ? perf_trace_lock+0xec/0x3b0 [ 214.425680][ T7890] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 214.425720][ T7890] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 214.425757][ T7890] ? vfs_write+0x956/0xb30 [ 214.425783][ T7890] ? ksys_write+0x1cb/0x250 [ 214.425807][ T7890] ? __pfx___might_resched+0x10/0x10 [ 214.425829][ T7890] ? perf_trace_lock+0xec/0x3b0 [ 214.425854][ T7890] ? __pfx_perf_trace_lock+0x10/0x10 [ 214.425878][ T7890] ? aa_sk_perm+0x81e/0x950 [ 214.425903][ T7890] ? __fget_files+0x2a/0x420 [ 214.425921][ T7890] ? __pfx_aa_sk_perm+0x10/0x10 [ 214.425948][ T7890] ? aa_sock_opt_perm+0xff/0x1b0 [ 214.425979][ T7890] ipv6_setsockopt+0x59/0x170 [ 214.425995][ T7890] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 214.426023][ T7890] do_sock_setsockopt+0x17c/0x1b0 [ 214.426047][ T7890] __x64_sys_setsockopt+0x13f/0x1b0 [ 214.426072][ T7890] do_syscall_64+0xfa/0xfa0 [ 214.426094][ T7890] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.426118][ T7890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.426135][ T7890] ? clear_bhb_loop+0x60/0xb0 [ 214.426158][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.426175][ T7890] RIP: 0033:0x7f60e098f6c9 [ 214.426190][ T7890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.426203][ T7890] RSP: 002b:00007f60e1784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 214.426221][ T7890] RAX: ffffffffffffffda RBX: 00007f60e0be5fa0 RCX: 00007f60e098f6c9 [ 214.426233][ T7890] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000003 [ 214.426243][ T7890] RBP: 00007f60e1784090 R08: 0000000000000120 R09: 0000000000000000 [ 214.426253][ T7890] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 214.426264][ T7890] R13: 00007f60e0be6038 R14: 00007f60e0be5fa0 R15: 00007ffed1ccc998 [ 214.426297][ T7890] [ 215.287595][ T7903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.646'. [ 215.667879][ T7911] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.649'. [ 216.556975][ T7933] netlink: 40 bytes leftover after parsing attributes in process `syz.3.654'. [ 216.609468][ T7934] netlink: 'syz.4.655': attribute type 27 has an invalid length. [ 216.621427][ T7934] netlink: 128 bytes leftover after parsing attributes in process `syz.4.655'. [ 217.214078][ T7960] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.200118][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.1.671'. [ 218.574194][ T7988] netlink: 'syz.4.674': attribute type 25 has an invalid length. [ 218.606580][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.674'. [ 218.654115][ T7990] netlink: 28 bytes leftover after parsing attributes in process `syz.4.674'. [ 218.713683][ T7993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.858693][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 222.253342][ T8033] netlink: 'syz.1.689': attribute type 4 has an invalid length. [ 222.272372][ T8033] netlink: 'syz.1.689': attribute type 17 has an invalid length. [ 222.704353][ T8035] netlink: 64 bytes leftover after parsing attributes in process `syz.0.688'. [ 222.914460][ T8035] siw: device registration error -23 [ 223.469897][ T8048] netlink: 52 bytes leftover after parsing attributes in process `syz.3.693'. [ 226.987301][ T8118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.713'. [ 227.126892][ T8125] batadv0: left allmulticast mode [ 227.132032][ T8125] batadv0: left promiscuous mode [ 227.147803][ T8125] bridge0: port 3(batadv0) entered disabled state [ 227.199702][ T8125] bridge_slave_1: left allmulticast mode [ 227.224117][ T8125] bridge_slave_1: left promiscuous mode [ 227.275642][ T8125] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.357502][ T8125] bridge_slave_0: left allmulticast mode [ 227.363554][ T8125] bridge_slave_0: left promiscuous mode [ 227.384655][ T8125] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.410400][ T8135] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 227.758084][ T8132] netlink: 830 bytes leftover after parsing attributes in process `syz.2.717'. [ 227.804526][ T8144] netlink: 60 bytes leftover after parsing attributes in process `syz.4.722'. [ 228.776378][ T8172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.730'. [ 229.363876][ T8195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.740'. [ 229.416436][ T8198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.740'. [ 229.449959][ T8195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.740'. [ 229.463161][ T8195] netlink: 'syz.2.740': attribute type 10 has an invalid length. [ 229.471226][ T8195] netlink: 55 bytes leftover after parsing attributes in process `syz.2.740'. [ 229.561623][ T30] audit: type=1107 audit(1763157957.973:3): pid=8201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 229.581640][ T8198] netlink: 16 bytes leftover after parsing attributes in process `syz.2.740'. [ 232.389640][ T8240] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 232.676580][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.760'. [ 232.713655][ T8254] tmpfs: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 233.621356][ T8278] netlink: 324 bytes leftover after parsing attributes in process `syz.3.769'. [ 234.179927][ T8297] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 234.223413][ T8292] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.775'. [ 234.283362][ T8292] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 234.302647][ T8289] netlink: 156 bytes leftover after parsing attributes in process `syz.4.775'. [ 234.396736][ T8299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.776'. [ 234.415773][ T8298] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.775'. [ 234.451200][ T8300] netlink: 'syz.1.776': attribute type 10 has an invalid length. [ 234.483663][ T8300] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.491738][ T8300] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.555105][ T8300] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.562360][ T8300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.570096][ T8300] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.577375][ T8300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.601136][ T8300] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 235.188363][ T8323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.786'. [ 235.487274][ T8332] netlink: 'syz.3.790': attribute type 4 has an invalid length. [ 235.650084][ T8336] netlink: 'syz.0.792': attribute type 10 has an invalid length. [ 235.860979][ T8336] veth0_vlan: left promiscuous mode [ 235.907844][ T8336] veth0_vlan: entered promiscuous mode [ 235.971909][ T8336] team0: Device veth0_vlan failed to register rx_handler [ 236.161835][ T8356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.798'. [ 236.759756][ T8366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.802'. [ 236.886661][ T30] audit: type=1107 audit(1763157965.303:4): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 238.039110][ T8426] netlink: 'syz.4.823': attribute type 39 has an invalid length. [ 238.568585][ T8439] netlink: 'syz.0.825': attribute type 1 has an invalid length. [ 239.487204][ T8447] netlink: 'syz.1.829': attribute type 7 has an invalid length. [ 239.528988][ T8447] netlink: 'syz.1.829': attribute type 8 has an invalid length. [ 240.155580][ T8461] netlink: 'syz.1.834': attribute type 21 has an invalid length. [ 240.301417][ T8461] netlink: 'syz.1.834': attribute type 15 has an invalid length. [ 240.314985][ T8464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.834'. [ 240.376432][ T8461] netlink: 156 bytes leftover after parsing attributes in process `syz.1.834'. [ 240.467309][ T8461] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.874091][ T8461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 240.881628][ T8461] IPv6: NLM_F_CREATE should be set when creating new route [ 240.889672][ T8461] IPv6: NLM_F_CREATE should be set when creating new route [ 240.897453][ T8461] IPv6: NLM_F_CREATE should be set when creating new route [ 241.460740][ T8494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 241.490913][ T8496] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.845'. [ 241.521110][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.841'. [ 246.676794][ T8575] netlink: 48 bytes leftover after parsing attributes in process `syz.1.871'. [ 246.698117][ T8575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.775518][ T8585] netlink: 'syz.2.875': attribute type 4 has an invalid length. [ 246.783367][ T8585] netlink: 68 bytes leftover after parsing attributes in process `syz.2.875'. [ 247.165230][ T8599] netlink: 188 bytes leftover after parsing attributes in process `syz.3.879'. [ 247.400742][ T8605] netlink: 'syz.3.882': attribute type 10 has an invalid length. [ 247.534937][ T8605] veth0_vlan: left promiscuous mode [ 247.554986][ T8605] veth0_vlan: entered promiscuous mode [ 247.864124][ T8605] team0: Device veth0_vlan failed to register rx_handler [ 248.140283][ T8611] netlink: 36 bytes leftover after parsing attributes in process `syz.4.885'. [ 248.949290][ T8617] lo speed is unknown, defaulting to 1000 [ 249.034484][ T8611] žåÓD`¼ê: renamed from hsr_slave_1 (while UP) [ 249.372547][ T8617] lo speed is unknown, defaulting to 1000 [ 249.446353][ T8617] lo speed is unknown, defaulting to 1000 [ 249.637755][ T8628] netlink: 'syz.1.890': attribute type 23 has an invalid length. [ 249.810993][ T8633] netlink: 'syz.3.892': attribute type 1 has an invalid length. [ 250.143549][ T8646] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 250.145860][ T8617] infiniband syz2: set active [ 250.158131][ T5851] lo speed is unknown, defaulting to 1000 [ 250.184112][ T8617] infiniband syz2: added lo [ 250.190089][ T8617] syz2: rxe_create_cq: returned err = -12 [ 250.198938][ T8617] infiniband syz2: Couldn't create ib_mad CQ [ 250.214265][ T8617] infiniband syz2: Couldn't open port 1 [ 250.264857][ T8617] RDS/IB: syz2: added [ 250.269520][ T8617] smc: adding ib device syz2 with port count 1 [ 250.279910][ T8617] smc: ib device syz2 port 1 has no pnetid [ 250.306517][ T5851] lo speed is unknown, defaulting to 1000 [ 250.325974][ T8617] lo speed is unknown, defaulting to 1000 [ 250.447934][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 250.625925][ T8658] netlink: 'syz.0.902': attribute type 2 has an invalid length. [ 250.854840][ T8664] netlink: 6 bytes leftover after parsing attributes in process `syz.0.902'. [ 251.046844][ T8664] netlink: 8788 bytes leftover after parsing attributes in process `syz.0.902'. [ 251.123904][ T8664] netlink: 6 bytes leftover after parsing attributes in process `syz.0.902'. [ 251.427370][ T8617] lo speed is unknown, defaulting to 1000 [ 252.053649][ T8617] lo speed is unknown, defaulting to 1000 [ 252.265803][ T8682] netlink: 'syz.1.908': attribute type 28 has an invalid length. [ 252.273673][ T8682] netlink: 'syz.1.908': attribute type 29 has an invalid length. [ 252.281519][ T8682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.908'. [ 252.551627][ T8617] lo speed is unknown, defaulting to 1000 [ 252.991809][ T8617] lo speed is unknown, defaulting to 1000 [ 254.349213][ T8691] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 254.662718][ T8704] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 254.677298][ T8704] veth0_vlan: left promiscuous mode [ 254.692150][ T8704] veth0_vlan: entered promiscuous mode [ 254.721395][ T8704] team0: Device veth0_vlan failed to register rx_handler [ 254.920135][ T8711] netlink: 'syz.1.921': attribute type 2 has an invalid length. [ 255.379010][ T8728] netlink: 'syz.3.927': attribute type 5 has an invalid length. [ 255.405356][ T8735] netlink: 52 bytes leftover after parsing attributes in process `syz.0.926'. [ 255.413804][ T8728] netlink: 16 bytes leftover after parsing attributes in process `syz.3.927'. [ 255.532909][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.540006][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.589225][ T8737] lo speed is unknown, defaulting to 1000 [ 255.625913][ T8737] lo speed is unknown, defaulting to 1000 [ 256.832887][ T8789] netlink: 'syz.2.948': attribute type 3 has an invalid length. [ 256.840759][ T8789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.948'. [ 256.911290][ T8792] netlink: 200 bytes leftover after parsing attributes in process `syz.1.946'. [ 257.369242][ T8806] netlink: 60 bytes leftover after parsing attributes in process `syz.0.952'. [ 257.386799][ T8800] ªªªªªª: renamed from hsr0 (while UP) [ 257.502177][ T8806] IPv6: Can't replace route, no match found [ 257.510782][ T8806] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 257.556045][ T8813] netlink: 'syz.3.955': attribute type 10 has an invalid length. [ 257.593501][ T8813] veth0_vlan: left promiscuous mode [ 257.620659][ T8813] veth0_vlan: entered promiscuous mode [ 257.665554][ T8813] team0: Device veth0_vlan failed to register rx_handler [ 257.807816][ T8820] netlink: 24 bytes leftover after parsing attributes in process `syz.4.956'. [ 258.026456][ T8831] netlink: 'syz.1.961': attribute type 10 has an invalid length. [ 258.170699][ T8838] netlink: 60 bytes leftover after parsing attributes in process `syz.2.964'. [ 258.211818][ T8836] netlink: 'syz.0.962': attribute type 2 has an invalid length. [ 258.907477][ T8851] netlink: 'syz.3.969': attribute type 10 has an invalid length. [ 258.917912][ T8851] veth0_vlan: left promiscuous mode [ 258.926242][ T8851] veth0_vlan: entered promiscuous mode [ 258.938486][ T8851] team0: Device veth0_vlan failed to register rx_handler [ 259.445933][ T8860] netlink: 'syz.0.971': attribute type 41 has an invalid length. [ 259.612128][ T8864] FAULT_INJECTION: forcing a failure. [ 259.612128][ T8864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.627376][ T8864] CPU: 0 UID: 0 PID: 8864 Comm: syz.4.972 Not tainted syzkaller #0 PREEMPT(full) [ 259.627400][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.627411][ T8864] Call Trace: [ 259.627418][ T8864] [ 259.627426][ T8864] dump_stack_lvl+0x189/0x250 [ 259.627456][ T8864] ? __pfx____ratelimit+0x10/0x10 [ 259.627479][ T8864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.627504][ T8864] ? __pfx__printk+0x10/0x10 [ 259.627527][ T8864] ? __might_fault+0xb0/0x130 [ 259.627559][ T8864] should_fail_ex+0x414/0x560 [ 259.627592][ T8864] _copy_to_user+0x31/0xb0 [ 259.627617][ T8864] simple_read_from_buffer+0xe1/0x170 [ 259.627649][ T8864] proc_fail_nth_read+0x1b3/0x220 [ 259.627686][ T8864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.627712][ T8864] ? rw_verify_area+0x2a6/0x4d0 [ 259.627736][ T8864] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.627761][ T8864] vfs_read+0x200/0xa30 [ 259.627784][ T8864] ? fdget_pos+0x247/0x320 [ 259.627806][ T8864] ? __pfx___mutex_lock+0x10/0x10 [ 259.627832][ T8864] ? __pfx_vfs_read+0x10/0x10 [ 259.627858][ T8864] ? __fget_files+0x2a/0x420 [ 259.627880][ T8864] ? __fget_files+0x3a0/0x420 [ 259.627896][ T8864] ? __fget_files+0x2a/0x420 [ 259.627922][ T8864] ksys_read+0x145/0x250 [ 259.627950][ T8864] ? __pfx_ksys_read+0x10/0x10 [ 259.627979][ T8864] ? do_syscall_64+0xbe/0xfa0 [ 259.628007][ T8864] do_syscall_64+0xfa/0xfa0 [ 259.628029][ T8864] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.628052][ T8864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.628069][ T8864] ? clear_bhb_loop+0x60/0xb0 [ 259.628092][ T8864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.628108][ T8864] RIP: 0033:0x7f60e098e0dc [ 259.628124][ T8864] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 259.628139][ T8864] RSP: 002b:00007f60e1784030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.628158][ T8864] RAX: ffffffffffffffda RBX: 00007f60e0be5fa0 RCX: 00007f60e098e0dc [ 259.628170][ T8864] RDX: 000000000000000f RSI: 00007f60e17840a0 RDI: 0000000000000005 [ 259.628180][ T8864] RBP: 00007f60e1784090 R08: 0000000000000000 R09: 0000000000000000 [ 259.628191][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.628200][ T8864] R13: 00007f60e0be6038 R14: 00007f60e0be5fa0 R15: 00007ffed1ccc998 [ 259.628233][ T8864] [ 259.989238][ T8869] netlink: 144 bytes leftover after parsing attributes in process `syz.1.974'. [ 264.167362][ T8899] tap0: tun_chr_ioctl cmd 1074025680 [ 264.318826][ T8906] FAULT_INJECTION: forcing a failure. [ 264.318826][ T8906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.372970][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.4.986 Not tainted syzkaller #0 PREEMPT(full) [ 264.372996][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 264.373008][ T8906] Call Trace: [ 264.373019][ T8906] [ 264.373031][ T8906] dump_stack_lvl+0x189/0x250 [ 264.373070][ T8906] ? __pfx____ratelimit+0x10/0x10 [ 264.373104][ T8906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.373139][ T8906] ? __pfx__printk+0x10/0x10 [ 264.373201][ T8906] ? __might_fault+0xb0/0x130 [ 264.373259][ T8906] should_fail_ex+0x414/0x560 [ 264.373317][ T8906] strncpy_from_user+0x36/0x290 [ 264.373371][ T8906] bpf_raw_tp_link_attach+0x1d9/0x6c0 [ 264.373421][ T8906] ? __fget_files+0x2a/0x420 [ 264.373448][ T8906] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 264.373535][ T8906] ? __fget_files+0x2a/0x420 [ 264.373599][ T8906] bpf_raw_tracepoint_open+0x1b2/0x220 [ 264.373645][ T8906] __sys_bpf+0x73e/0x860 [ 264.373682][ T8906] ? __pfx___sys_bpf+0x10/0x10 [ 264.373783][ T8906] ? ksys_write+0x22a/0x250 [ 264.373827][ T8906] ? __pfx_ksys_write+0x10/0x10 [ 264.373885][ T8906] __x64_sys_bpf+0x7c/0x90 [ 264.373924][ T8906] do_syscall_64+0xfa/0xfa0 [ 264.373948][ T8906] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.373976][ T8906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.373997][ T8906] ? clear_bhb_loop+0x60/0xb0 [ 264.374033][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.374051][ T8906] RIP: 0033:0x7f60e098f6c9 [ 264.374073][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.374086][ T8906] RSP: 002b:00007f60e1784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 264.374104][ T8906] RAX: ffffffffffffffda RBX: 00007f60e0be5fa0 RCX: 00007f60e098f6c9 [ 264.374116][ T8906] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 264.374126][ T8906] RBP: 00007f60e1784090 R08: 0000000000000000 R09: 0000000000000000 [ 264.374137][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.374146][ T8906] R13: 00007f60e0be6038 R14: 00007f60e0be5fa0 R15: 00007ffed1ccc998 [ 264.374236][ T8906] [ 264.975840][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.992'. [ 265.019583][ T8917] FAULT_INJECTION: forcing a failure. [ 265.019583][ T8917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.020107][ T8917] [ 265.020114][ T8917] ====================================================== [ 265.020121][ T8917] WARNING: possible circular locking dependency detected [ 265.020133][ T8917] syzkaller #0 Not tainted [ 265.020142][ T8917] ------------------------------------------------------ [ 265.020148][ T8917] syz.4.992/8917 is trying to acquire lock: [ 265.020156][ T8917] ffffffff8df315a0 (console_owner){-...}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 265.020214][ T8917] [ 265.020214][ T8917] but task is already holding lock: [ 265.020219][ T8917] ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 265.020256][ T8917] [ 265.020256][ T8917] which lock already depends on the new lock. [ 265.020256][ T8917] [ 265.020262][ T8917] [ 265.020262][ T8917] the existing dependency chain (in reverse order) is: [ 265.020268][ T8917] [ 265.020268][ T8917] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 265.020291][ T8917] lock_acquire+0x120/0x360 [ 265.020306][ T8917] _raw_spin_lock_nested+0x32/0x50 [ 265.020327][ T8917] raw_spin_rq_lock_nested+0x2a/0x140 [ 265.020343][ T8917] task_rq_lock+0xbc/0x470 [ 265.020357][ T8917] cgroup_move_task+0x92/0x2a0 [ 265.020376][ T8917] css_set_move_task+0x658/0x9e0 [ 265.020398][ T8917] cgroup_post_fork+0x1ef/0x790 [ 265.020418][ T8917] copy_process+0x3862/0x3c00 [ 265.020436][ T8917] kernel_clone+0x21e/0x840 [ 265.020454][ T8917] user_mode_thread+0xdd/0x140 [ 265.020472][ T8917] rest_init+0x23/0x300 [ 265.020486][ T8917] start_kernel+0x3ae/0x410 [ 265.020509][ T8917] x86_64_start_reservations+0x24/0x30 [ 265.020527][ T8917] x86_64_start_kernel+0x143/0x1c0 [ 265.020544][ T8917] common_startup_64+0x13e/0x147 [ 265.020565][ T8917] [ 265.020565][ T8917] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 265.020586][ T8917] lock_acquire+0x120/0x360 [ 265.020600][ T8917] _raw_spin_lock_irqsave+0xa7/0xf0 [ 265.020618][ T8917] try_to_wake_up+0x67/0x12b0 [ 265.020638][ T8917] create_worker+0x503/0x720 [ 265.020661][ T8917] workqueue_init+0x3f0/0x6a0 [ 265.020680][ T8917] kernel_init_freeable+0x302/0x4b0 [ 265.020704][ T8917] kernel_init+0x1d/0x1d0 [ 265.020718][ T8917] ret_from_fork+0x4bc/0x870 [ 265.020733][ T8917] ret_from_fork_asm+0x1a/0x30 [ 265.020747][ T8917] [ 265.020747][ T8917] -> #3 (&pool->lock){-.-.}-{2:2}: [ 265.020769][ T8917] lock_acquire+0x120/0x360 [ 265.020783][ T8917] _raw_spin_lock+0x2e/0x40 [ 265.020800][ T8917] __queue_work+0x809/0xfb0 [ 265.020816][ T8917] queue_work_on+0x181/0x270 [ 265.020833][ T8917] rpm_suspend+0xe54/0x1720 [ 265.020851][ T8917] __pm_runtime_idle+0x12f/0x1a0 [ 265.020868][ T8917] __device_attach+0x342/0x400 [ 265.020886][ T8917] bus_probe_device+0x185/0x260 [ 265.020900][ T8917] device_add+0x7b6/0xb50 [ 265.020916][ T8917] serial_base_port_add+0x2e3/0x410 [ 265.020933][ T8917] serial_core_register_port+0x369/0x2800 [ 265.020954][ T8917] serial8250_register_8250_port+0x16db/0x2080 [ 265.020974][ T8917] serial_pnp_probe+0x527/0x790 [ 265.020993][ T8917] pnp_device_probe+0x30b/0x4c0 [ 265.021012][ T8917] really_probe+0x26d/0x9e0 [ 265.021033][ T8917] __driver_probe_device+0x18c/0x2f0 [ 265.021052][ T8917] driver_probe_device+0x4f/0x430 [ 265.021072][ T8917] __driver_attach+0x452/0x700 [ 265.021091][ T8917] bus_for_each_dev+0x233/0x2b0 [ 265.021105][ T8917] bus_add_driver+0x345/0x640 [ 265.021119][ T8917] driver_register+0x23a/0x320 [ 265.021140][ T8917] serial8250_init+0x8f/0x160 [ 265.021158][ T8917] do_one_initcall+0x236/0x820 [ 265.021201][ T8917] do_initcall_level+0x104/0x190 [ 265.021225][ T8917] do_initcalls+0x59/0xa0 [ 265.021249][ T8917] kernel_init_freeable+0x334/0x4b0 [ 265.021273][ T8917] kernel_init+0x1d/0x1d0 [ 265.021287][ T8917] ret_from_fork+0x4bc/0x870 [ 265.021301][ T8917] ret_from_fork_asm+0x1a/0x30 [ 265.021315][ T8917] [ 265.021315][ T8917] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 265.021337][ T8917] lock_acquire+0x120/0x360 [ 265.021351][ T8917] _raw_spin_lock_irqsave+0xa7/0xf0 [ 265.021370][ T8917] __pm_runtime_resume+0x10f/0x180 [ 265.021388][ T8917] __uart_start+0x171/0x460 [ 265.021408][ T8917] uart_write+0xdc/0x130 [ 265.021429][ T8917] n_tty_write+0xd27/0x1200 [ 265.021445][ T8917] file_tty_write+0x559/0xa20 [ 265.021465][ T8917] vfs_write+0x5c9/0xb30 [ 265.021487][ T8917] ksys_write+0x145/0x250 [ 265.021507][ T8917] do_syscall_64+0xfa/0xfa0 [ 265.021528][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.021544][ T8917] [ 265.021544][ T8917] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 265.021566][ T8917] lock_acquire+0x120/0x360 [ 265.021580][ T8917] _raw_spin_lock_irqsave+0xa7/0xf0 [ 265.021599][ T8917] serial8250_console_write+0x17e/0x1ba0 [ 265.021623][ T8917] console_flush_all+0x6f3/0xb10 [ 265.021644][ T8917] console_unlock+0xbb/0x190 [ 265.021662][ T8917] vprintk_emit+0x4c5/0x590 [ 265.021680][ T8917] _printk+0xcf/0x120 [ 265.021694][ T8917] register_console+0xa8b/0xf90 [ 265.021714][ T8917] univ8250_console_init+0x3a/0x70 [ 265.021732][ T8917] console_init+0x10e/0x430 [ 265.021748][ T8917] start_kernel+0x254/0x410 [ 265.021768][ T8917] x86_64_start_reservations+0x24/0x30 [ 265.021786][ T8917] x86_64_start_kernel+0x143/0x1c0 [ 265.021803][ T8917] common_startup_64+0x13e/0x147 [ 265.021824][ T8917] [ 265.021824][ T8917] -> #0 (console_owner){-...}-{0:0}: [ 265.021846][ T8917] validate_chain+0xb9b/0x2140 [ 265.021864][ T8917] __lock_acquire+0xab9/0xd20 [ 265.021878][ T8917] lock_acquire+0x120/0x360 [ 265.021891][ T8917] console_flush_all+0x69c/0xb10 [ 265.021911][ T8917] console_unlock+0xbb/0x190 [ 265.021929][ T8917] vprintk_emit+0x4c5/0x590 [ 265.021946][ T8917] _printk+0xcf/0x120 [ 265.021959][ T8917] should_fail_ex+0x3f5/0x560 [ 265.021982][ T8917] strncpy_from_user+0x36/0x290 [ 265.022003][ T8917] strncpy_from_user_nofault+0x72/0x150 [ 265.022020][ T8917] bpf_bprintf_prepare+0xb91/0x13a0 [ 265.022035][ T8917] bpf_trace_printk+0xdb/0x190 [ 265.022053][ T8917] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 265.022067][ T8917] bpf_trace_run2+0x284/0x4b0 [ 265.022090][ T8917] __bpf_trace_contention_begin+0xdc/0x130 [ 265.022108][ T8917] trace_contention_begin+0x114/0x140 [ 265.022129][ T8917] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 265.022152][ T8917] queued_spin_lock_slowpath+0x43/0x50 [ 265.022181][ T8917] do_raw_spin_lock+0x21f/0x290 [ 265.022202][ T8917] raw_spin_rq_lock_nested+0x2a/0x140 [ 265.022217][ T8917] try_to_wake_up+0x635/0x12b0 [ 265.022238][ T8917] swake_up_one+0x70/0x140 [ 265.022257][ T8917] rcu_preempt_deferred_qs_irqrestore+0xa11/0xce0 [ 265.022283][ T8917] rcu_read_unlock_special+0x3a2/0x4b0 [ 265.022307][ T8917] __rcu_read_unlock+0x84/0xe0 [ 265.022330][ T8917] nfnetlink_rcv_msg+0x9d0/0x1130 [ 265.022353][ T8917] netlink_rcv_skb+0x208/0x470 [ 265.022367][ T8917] nfnetlink_rcv+0x282/0x2590 [ 265.022388][ T8917] netlink_unicast+0x82f/0x9e0 [ 265.022410][ T8917] netlink_sendmsg+0x805/0xb30 [ 265.022424][ T8917] __sock_sendmsg+0x21c/0x270 [ 265.022444][ T8917] ____sys_sendmsg+0x505/0x830 [ 265.022459][ T8917] ___sys_sendmsg+0x21f/0x2a0 [ 265.022474][ T8917] __x64_sys_sendmsg+0x19b/0x260 [ 265.022489][ T8917] do_syscall_64+0xfa/0xfa0 [ 265.022510][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.022525][ T8917] [ 265.022525][ T8917] other info that might help us debug this: [ 265.022525][ T8917] [ 265.022530][ T8917] Chain exists of: [ 265.022530][ T8917] console_owner --> &p->pi_lock --> &rq->__lock [ 265.022530][ T8917] [ 265.022557][ T8917] Possible unsafe locking scenario: [ 265.022557][ T8917] [ 265.022562][ T8917] CPU0 CPU1 [ 265.022567][ T8917] ---- ---- [ 265.022572][ T8917] lock(&rq->__lock); [ 265.022583][ T8917] lock(&p->pi_lock); [ 265.022595][ T8917] lock(&rq->__lock); [ 265.022606][ T8917] lock(console_owner); [ 265.022617][ T8917] [ 265.022617][ T8917] *** DEADLOCK *** [ 265.022617][ T8917] [ 265.022622][ T8917] 6 locks held by syz.4.992/8917: [ 265.022631][ T8917] #0: ffffffff8df42eb0 (&rcu_state.gp_wq){..-.}-{2:2}, at: swake_up_one+0x21/0x140 [ 265.022674][ T8917] #1: ffff88801c6fe528 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x67/0x12b0 [ 265.022719][ T8917] #2: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 265.022763][ T8917] #3: ffffffff8df3d620 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 265.022810][ T8917] #4: ffffffff8df31600 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 265.022852][ T8917] #5: ffffffff8de18ed0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xb10 [ 265.022895][ T8917] [ 265.022895][ T8917] stack backtrace: [ 265.022904][ T8917] CPU: 1 UID: 0 PID: 8917 Comm: syz.4.992 Not tainted syzkaller #0 PREEMPT(full) [ 265.022922][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.022932][ T8917] Call Trace: [ 265.022939][ T8917] [ 265.022946][ T8917] dump_stack_lvl+0x189/0x250 [ 265.022972][ T8917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.022995][ T8917] ? __pfx__printk+0x10/0x10 [ 265.023012][ T8917] ? print_lock_name+0xde/0x100 [ 265.023031][ T8917] print_circular_bug+0x2ee/0x310 [ 265.023054][ T8917] check_noncircular+0x134/0x160 [ 265.023078][ T8917] validate_chain+0xb9b/0x2140 [ 265.023109][ T8917] __lock_acquire+0xab9/0xd20 [ 265.023129][ T8917] ? console_flush_all+0x13a/0xb10 [ 265.023151][ T8917] lock_acquire+0x120/0x360 [ 265.023165][ T8917] ? console_flush_all+0x13a/0xb10 [ 265.023199][ T8917] ? do_raw_spin_unlock+0x122/0x240 [ 265.023223][ T8917] ? console_flush_all+0x13a/0xb10 [ 265.023245][ T8917] console_flush_all+0x69c/0xb10 [ 265.023266][ T8917] ? console_flush_all+0x13a/0xb10 [ 265.023290][ T8917] ? console_flush_all+0x13a/0xb10 [ 265.023315][ T8917] ? __pfx_console_flush_all+0x10/0x10 [ 265.023343][ T8917] ? is_printk_cpu_sync_owner+0x32/0x40 [ 265.023370][ T8917] console_unlock+0xbb/0x190 [ 265.023390][ T8917] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 265.023413][ T8917] ? __pfx_console_unlock+0x10/0x10 [ 265.023438][ T8917] vprintk_emit+0x4c5/0x590 [ 265.023460][ T8917] ? __pfx_vprintk_emit+0x10/0x10 [ 265.023485][ T8917] ? ktime_get+0x45/0x200 [ 265.023509][ T8917] _printk+0xcf/0x120 [ 265.023526][ T8917] ? __pfx____ratelimit+0x10/0x10 [ 265.023548][ T8917] ? __pfx__printk+0x10/0x10 [ 265.023568][ T8917] ? visit_groups_merge+0x138d/0x1940 [ 265.023609][ T8917] ? perf_swevent_event+0x113/0x5e0 [ 265.023639][ T8917] should_fail_ex+0x3f5/0x560 [ 265.023668][ T8917] strncpy_from_user+0x36/0x290 [ 265.023696][ T8917] strncpy_from_user_nofault+0x72/0x150 [ 265.023729][ T8917] bpf_bprintf_prepare+0xb91/0x13a0 [ 265.023745][ T8917] ? __pfx_perf_tp_event+0x10/0x10 [ 265.023775][ T8917] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 265.023795][ T8917] ? bpf_trace_printk+0xc1/0x190 [ 265.023817][ T8917] bpf_trace_printk+0xdb/0x190 [ 265.023837][ T8917] ? __lock_acquire+0xab9/0xd20 [ 265.023871][ T8917] ? __pfx_bpf_trace_printk+0x10/0x10 [ 265.023894][ T8917] ? bpf_trace_run2+0x186/0x4b0 [ 265.023940][ T8917] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 265.023955][ T8917] bpf_trace_run2+0x284/0x4b0 [ 265.023980][ T8917] ? bpf_trace_run2+0x186/0x4b0 [ 265.024007][ T8917] ? __pfx_bpf_trace_run2+0x10/0x10 [ 265.024034][ T8917] ? __pfx_perf_tp_event+0x10/0x10 [ 265.024058][ T8917] ? __bpf_trace_contention_begin+0xcd/0x130 [ 265.024081][ T8917] __bpf_trace_contention_begin+0xdc/0x130 [ 265.024101][ T8917] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 265.024130][ T8917] trace_contention_begin+0x114/0x140 [ 265.024153][ T8917] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 265.024188][ T8917] ? __lock_acquire+0xab9/0xd20 [ 265.024204][ T8917] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 265.024236][ T8917] queued_spin_lock_slowpath+0x43/0x50 [ 265.024261][ T8917] do_raw_spin_lock+0x21f/0x290 [ 265.024285][ T8917] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 265.024313][ T8917] raw_spin_rq_lock_nested+0x2a/0x140 [ 265.024332][ T8917] try_to_wake_up+0x635/0x12b0 [ 265.024360][ T8917] swake_up_one+0x70/0x140 [ 265.024383][ T8917] rcu_preempt_deferred_qs_irqrestore+0xa11/0xce0 [ 265.024418][ T8917] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 265.024446][ T8917] ? __pfx___nla_validate_parse+0x10/0x10 [ 265.024467][ T8917] ? rcu_is_watching+0x15/0xb0 [ 265.024487][ T8917] rcu_read_unlock_special+0x3a2/0x4b0 [ 265.024513][ T8917] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 265.024538][ T8917] ? nfnl_pernet+0x23/0x240 [ 265.024567][ T8917] __rcu_read_unlock+0x84/0xe0 [ 265.024592][ T8917] nfnetlink_rcv_msg+0x9d0/0x1130 [ 265.024616][ T8917] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 265.024648][ T8917] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 265.024671][ T8917] ? trace_call_bpf+0xc7/0xb50 [ 265.024702][ T8917] ? irqentry_exit+0x74/0x90 [ 265.024725][ T8917] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 265.024750][ T8917] netlink_rcv_skb+0x208/0x470 [ 265.024767][ T8917] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 265.024792][ T8917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.024823][ T8917] ? bpf_lsm_capable+0x9/0x20 [ 265.024844][ T8917] ? security_capable+0x7e/0x2e0 [ 265.024870][ T8917] nfnetlink_rcv+0x282/0x2590 [ 265.024894][ T8917] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.024914][ T8917] ? __dev_queue_xmit+0x1d79/0x3b50 [ 265.024933][ T8917] ? kasan_save_track+0x3e/0x80 [ 265.024963][ T8917] ? __kasan_slab_alloc+0x6c/0x80 [ 265.024998][ T8917] ? __dev_queue_xmit+0x27b/0x3b50 [ 265.025023][ T8917] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 265.025045][ T8917] ? __pfx___dev_queue_xmit+0x10/0x10 [ 265.025070][ T8917] ? ref_tracker_free+0x63a/0x7d0 [ 265.025085][ T8917] ? __asan_memcpy+0x40/0x70 [ 265.025105][ T8917] ? __pfx_ref_tracker_free+0x10/0x10 [ 265.025119][ T8917] ? __skb_clone+0x63/0x7a0 [ 265.025138][ T8917] ? __skb_clone+0x483/0x7a0 [ 265.025156][ T8917] ? skb_clone+0x246/0x3a0 [ 265.025180][ T8917] ? __netlink_deliver_tap+0x807/0x850 [ 265.025195][ T8917] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.025213][ T8917] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.025231][ T8917] netlink_unicast+0x82f/0x9e0 [ 265.025257][ T8917] ? __pfx_netlink_unicast+0x10/0x10 [ 265.025281][ T8917] ? netlink_sendmsg+0x642/0xb30 [ 265.025295][ T8917] ? skb_put+0x11b/0x210 [ 265.025311][ T8917] netlink_sendmsg+0x805/0xb30 [ 265.025330][ T8917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.025351][ T8917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.025367][ T8917] __sock_sendmsg+0x21c/0x270 [ 265.025390][ T8917] ____sys_sendmsg+0x505/0x830 [ 265.025427][ T8917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.025450][ T8917] ? import_iovec+0x74/0xa0 [ 265.025474][ T8917] ___sys_sendmsg+0x21f/0x2a0 [ 265.025494][ T8917] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.025511][ T8917] ? irqentry_exit+0x74/0x90 [ 265.025553][ T8917] ? __fget_files+0x2a/0x420 [ 265.025570][ T8917] ? __fget_files+0x3a0/0x420 [ 265.025592][ T8917] __x64_sys_sendmsg+0x19b/0x260 [ 265.025612][ T8917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.025636][ T8917] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 265.025658][ T8917] ? do_syscall_64+0xbe/0xfa0 [ 265.025685][ T8917] do_syscall_64+0xfa/0xfa0 [ 265.025710][ T8917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.025727][ T8917] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.025746][ T8917] ? clear_bhb_loop+0x60/0xb0 [ 265.025766][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.025784][ T8917] RIP: 0033:0x7f60e098f6c9 [ 265.025799][ T8917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.025814][ T8917] RSP: 002b:00007f60e1784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.025833][ T8917] RAX: ffffffffffffffda RBX: 00007f60e0be5fa0 RCX: 00007f60e098f6c9 [ 265.025847][ T8917] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 265.025858][ T8917] RBP: 00007f60e1784090 R08: 0000000000000000 R09: 0000000000000000 [ 265.025869][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.025879][ T8917] R13: 00007f60e0be6038 R14: 00007f60e0be5fa0 R15: 00007ffed1ccc998 [ 265.025901][ T8917] [ 266.614173][ T8917] CPU: 1 UID: 0 PID: 8917 Comm: syz.4.992 Not tainted syzkaller #0 PREEMPT(full) [ 266.614190][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.614198][ T8917] Call Trace: [ 266.614205][ T8917] [ 266.614211][ T8917] dump_stack_lvl+0x189/0x250 [ 266.614232][ T8917] ? __pfx____ratelimit+0x10/0x10 [ 266.614248][ T8917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.614265][ T8917] ? __pfx__printk+0x10/0x10 [ 266.614278][ T8917] ? visit_groups_merge+0x138d/0x1940 [ 266.614295][ T8917] ? perf_swevent_event+0x113/0x5e0 [ 266.614315][ T8917] should_fail_ex+0x414/0x560 [ 266.614336][ T8917] strncpy_from_user+0x36/0x290 [ 266.614359][ T8917] strncpy_from_user_nofault+0x72/0x150 [ 266.614375][ T8917] bpf_bprintf_prepare+0xb91/0x13a0 [ 266.614387][ T8917] ? __pfx_perf_tp_event+0x10/0x10 [ 266.614408][ T8917] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 266.614422][ T8917] ? bpf_trace_printk+0xc1/0x190 [ 266.614438][ T8917] bpf_trace_printk+0xdb/0x190 [ 266.614452][ T8917] ? __lock_acquire+0xab9/0xd20 [ 266.614464][ T8917] ? __pfx_bpf_trace_printk+0x10/0x10 [ 266.614479][ T8917] ? bpf_trace_run2+0x186/0x4b0 [ 266.614503][ T8917] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 266.614514][ T8917] bpf_trace_run2+0x284/0x4b0 [ 266.614532][ T8917] ? bpf_trace_run2+0x186/0x4b0 [ 266.614551][ T8917] ? __pfx_bpf_trace_run2+0x10/0x10 [ 266.614570][ T8917] ? __pfx_perf_tp_event+0x10/0x10 [ 266.614588][ T8917] ? __bpf_trace_contention_begin+0xcd/0x130 [ 266.614604][ T8917] __bpf_trace_contention_begin+0xdc/0x130 [ 266.614619][ T8917] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 266.614639][ T8917] trace_contention_begin+0x114/0x140 [ 266.614655][ T8917] __pv_queued_spin_lock_slowpath+0xf0/0xb60 [ 266.614675][ T8917] ? __lock_acquire+0xab9/0xd20 [ 266.614686][ T8917] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 266.614708][ T8917] queued_spin_lock_slowpath+0x43/0x50 [ 266.614725][ T8917] do_raw_spin_lock+0x21f/0x290 [ 266.614743][ T8917] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 266.614762][ T8917] raw_spin_rq_lock_nested+0x2a/0x140 [ 266.614777][ T8917] try_to_wake_up+0x635/0x12b0 [ 266.614797][ T8917] swake_up_one+0x70/0x140 [ 266.614813][ T8917] rcu_preempt_deferred_qs_irqrestore+0xa11/0xce0 [ 266.614838][ T8917] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 266.614857][ T8917] ? __pfx___nla_validate_parse+0x10/0x10 [ 266.614871][ T8917] ? rcu_is_watching+0x15/0xb0 [ 266.614885][ T8917] rcu_read_unlock_special+0x3a2/0x4b0 [ 266.614904][ T8917] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 266.614922][ T8917] ? nfnl_pernet+0x23/0x240 [ 266.614943][ T8917] __rcu_read_unlock+0x84/0xe0 [ 266.614961][ T8917] nfnetlink_rcv_msg+0x9d0/0x1130 [ 266.614979][ T8917] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 266.615002][ T8917] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 266.615018][ T8917] ? trace_call_bpf+0xc7/0xb50 [ 266.615040][ T8917] ? irqentry_exit+0x74/0x90 [ 266.615056][ T8917] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 266.615075][ T8917] netlink_rcv_skb+0x208/0x470 [ 266.615086][ T8917] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 266.615104][ T8917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 266.615127][ T8917] ? bpf_lsm_capable+0x9/0x20 [ 266.615142][ T8917] ? security_capable+0x7e/0x2e0 [ 266.615160][ T8917] nfnetlink_rcv+0x282/0x2590 [ 266.615178][ T8917] ? __dev_queue_xmit+0x27b/0x3b50 [ 266.615193][ T8917] ? __dev_queue_xmit+0x1d79/0x3b50 [ 266.615206][ T8917] ? kasan_save_track+0x3e/0x80 [ 266.615223][ T8917] ? __kasan_slab_alloc+0x6c/0x80 [ 266.615245][ T8917] ? __dev_queue_xmit+0x27b/0x3b50 [ 266.615263][ T8917] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 266.615280][ T8917] ? __pfx___dev_queue_xmit+0x10/0x10 [ 266.615299][ T8917] ? ref_tracker_free+0x63a/0x7d0 [ 266.615310][ T8917] ? __asan_memcpy+0x40/0x70 [ 266.615326][ T8917] ? __pfx_ref_tracker_free+0x10/0x10 [ 266.615337][ T8917] ? __skb_clone+0x63/0x7a0 [ 266.615351][ T8917] ? __skb_clone+0x483/0x7a0 [ 266.615369][ T8917] ? skb_clone+0x246/0x3a0 [ 266.615384][ T8917] ? __netlink_deliver_tap+0x807/0x850 [ 266.615395][ T8917] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.615408][ T8917] ? netlink_deliver_tap+0x2e/0x1b0 [ 266.615422][ T8917] netlink_unicast+0x82f/0x9e0 [ 266.615442][ T8917] ? __pfx_netlink_unicast+0x10/0x10 [ 266.615460][ T8917] ? netlink_sendmsg+0x642/0xb30 [ 266.615471][ T8917] ? skb_put+0x11b/0x210 [ 266.615483][ T8917] netlink_sendmsg+0x805/0xb30 [ 266.615498][ T8917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.615513][ T8917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.615525][ T8917] __sock_sendmsg+0x21c/0x270 [ 266.615542][ T8917] ____sys_sendmsg+0x505/0x830 [ 266.615556][ T8917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.615572][ T8917] ? import_iovec+0x74/0xa0 [ 266.615588][ T8917] ___sys_sendmsg+0x21f/0x2a0 [ 266.615601][ T8917] ? __pfx____sys_sendmsg+0x10/0x10 [ 266.615613][ T8917] ? irqentry_exit+0x74/0x90 [ 266.615640][ T8917] ? __fget_files+0x2a/0x420 [ 266.615651][ T8917] ? __fget_files+0x3a0/0x420 [ 266.615665][ T8917] __x64_sys_sendmsg+0x19b/0x260 [ 266.615679][ T8917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 266.615695][ T8917] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 266.615709][ T8917] ? do_syscall_64+0xbe/0xfa0 [ 266.615727][ T8917] do_syscall_64+0xfa/0xfa0 [ 266.615743][ T8917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.615755][ T8917] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 266.615767][ T8917] ? clear_bhb_loop+0x60/0xb0 [ 266.615780][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.615793][ T8917] RIP: 0033:0x7f60e098f6c9 [ 266.615804][ T8917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.615815][ T8917] RSP: 002b:00007f60e1784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.615828][ T8917] RAX: ffffffffffffffda RBX: 00007f60e0be5fa0 RCX: 00007f60e098f6c9 [ 266.615837][ T8917] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 266.615845][ T8917] RBP: 00007f60e1784090 R08: 0000000000000000 R09: 0000000000000000 [ 266.615853][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.615860][ T8917] R13: 00007f60e0be6038 R14: 00007f60e0be5fa0 R15: 00007ffed1ccc998 [ 266.615876][ T8917]