last executing test programs: 2.94551631s ago: executing program 3 (id=1403): sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8011) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x2}, 0x2, 0x0, 0x100, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x9}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000004100000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x3, 0x9, 0x7, 0x3, 0x0, 0xffffffffffffffff, 0x800, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0xc0000, 0x4, @perf_config_ext={0x9, 0x9}, 0x10800, 0x4, 0x7, 0x1, 0x8000, 0xfffffffb, 0x6, 0x0, 0x3, 0x0, 0x1000}, 0x0, 0xf, 0xffffffffffffffff, 0x3) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r2, 0x0, 0x24000840) perf_event_open(0x0, 0x0, 0xffff000000000001, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a40000000000180000000000000090ffffff0000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94) 2.886681145s ago: executing program 1 (id=1404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x110, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x3, 0x0, 0x4, {0xfc}, {0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x3}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfff00000, 0x800, 0xffffffffffffffff, 0x7, 0x91}}]}, {0x4}, {0xc}, {0x4a, 0x8, {0x2}}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5c00000028006b05c84e21020ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e61821466cdc3dc0048dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x10, &(0x7f0000000000), 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x23, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0xdefe, 0x0, 0x0, 0x0, 0x6}, @ldst={0x1, 0x3, 0x4, 0x8, 0x1, 0x50}, @ringbuf_query, @map_idx={0x18, 0x2, 0x5, 0x0, 0x10}, @ldst={0x3, 0x2, 0x1, 0x8, 0x2, 0x18, 0x10}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @generic={0x74, 0x2, 0x3, 0x6, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000000c80)=""/4096, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x2, 0x3, 0x2, 0x7fff}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f0000000380)=[{0x4, 0x3, 0x0, 0x9}, {0x0, 0x2, 0xa}, {0x3, 0x1, 0xf, 0x2}], 0x10, 0xf}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x401c5820, &(0x7f0000000000)=0x818) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r4, r5}, 0xc) sendmsg$inet(r3, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x20008000) r6 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x10e, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:', @ANYRESOCT=r8], 0xa) sendmsg$inet(r3, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0xfe33) 2.572499899s ago: executing program 3 (id=1407): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x85, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 2.154951572s ago: executing program 1 (id=1408): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x2a, 0xa, 0x9, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000a40)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2e}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x1, 0x4}, {0x8}, {0xe, 0x5}]}]}}, 0x0, 0x46, 0x0, 0x1, 0x8}, 0x28) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x10, 0x453, 0x4, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0x21, 0x2, 0xa) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x2004fc10) close(r5) 2.154410378s ago: executing program 3 (id=1409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001100)={0x2c, 0x7, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x94, 0x7, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x58, 0x7, 0x1, 0x0, "66cbfb5cef172101e39eeebad206694aaefb427b56a2ff813b89fda76e05f2d676a1530f98b1e79de48cfff974a015ce97f772ba789b989eebec715ce9d75c94857474e76fe181be209e8706fb4b80ed25eeffa7"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 1.9873681s ago: executing program 3 (id=1412): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0xe0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r3 = openat$cgroup_int(r0, &(0x7f0000000a40)='hugetlb.1GB.failcnt\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03080000000a00"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000500"/28], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYRES8, @ANYRES32, @ANYRESOCT, @ANYRES8=r0, @ANYRES32=r4, @ANYBLOB="0300000002000000020000000010000000000000000000000000f57bc7b95bd76502fd760c844ef61821134c1772930000e5f87811c881695758a6c2b6bac7f476c847977092ef31f1179b6d31cafd93fabd124b23d5885035a673d5e8cc5cf1fd5ac66ce338a40d0999076fecdbf1c1f823"], 0x50) close(0xffffffffffffffff) r5 = getpid() r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x2013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x40000000006, 0x830e}, 0x100080, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x6}, 0x0, 0xe, 0xffffffffffffffff, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r9, &(0x7f0000000380)={&(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x0, 0x3, {0xa, 0x4e20, 0x0, @remote, 0x5}}}, 0x80, 0x0}, 0x20000800) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="48010000100013070000000000000000fe8000000000000000000000000000aafe800000000000001c000000000000aada951672690b756a0000202000000000", @ANYRES32=0x0, @ANYRESHEX=r8, @ANYBLOB="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"], 0x148}, 0x1, 0x0, 0x0, 0x4080}, 0x4040800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0x0) close(r10) socket$nl_generic(0x10, 0x3, 0x10) 1.907088881s ago: executing program 4 (id=1413): r0 = socket(0x400000000010, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x18}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000900)=r6, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) 1.685281333s ago: executing program 1 (id=1415): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="b61975279d4fecb2", @ANYRES8=r3, @ANYRES32, @ANYRES32=r2, @ANYRES64=r0, @ANYRES8=r4, @ANYRES8=r4, @ANYRES64=r0, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xb0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x88, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x50, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x1c, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "849f0ee4f4fb567164ac716042d4d48f42"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x124}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r8) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.51564199s ago: executing program 2 (id=1418): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000030007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.514366002s ago: executing program 3 (id=1419): r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.low\x00', 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100004, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfd, {0x1f}}, 0x14}}, 0x0) write$cgroup_int(r0, &(0x7f00000001c0)=0x5e1, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0xd, 0x4, 0x3, 0x220, r6, 0xf, '\x00', r8, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000023"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='xprtrdma_err_unrecognized\x00', r9, 0x0, 0xfffffffffffffffe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 1.511808176s ago: executing program 4 (id=1420): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0xa2, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 1.426019315s ago: executing program 0 (id=1421): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000000c0), 0x12) (async) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x8000, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x2ff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000700000005000000000000080300000002000000000000080100000000000000000000010000000000006100005f"], 0x0, 0x43}, 0x20) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) (async) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r7}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000"], 0x48) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff) 1.287247947s ago: executing program 4 (id=1422): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000280), 0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0xb, 0x5, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x88, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_PARMS={0x18, 0x1, {0x40, 0x0, 0x20000000, 0xff, 0xb4c4}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x7}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) 1.2504882s ago: executing program 2 (id=1423): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x29, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xc}, {0xb, 0xd}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8840) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x6992, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x17, @empty}, 0x10, &(0x7f00000000c0)=[{0x0, 0xffb9}], 0x1, &(0x7f0000001d00)=ANY=[], 0x7}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b12}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x3, 0x80240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x2, 0x6871, 0x0, 0x8, 0x43fe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000b40)={0x1, 0xffffffffffffffff}, 0x4) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000017c0)={0xffffffffffffffff, 0x137}, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x9, 0x4, 0x1, 0x0, r9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r10}, &(0x7f0000000840), &(0x7f0000000880)=r9}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001980)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x81}, {}, {}, [@tail_call, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x64, &(0x7f0000000600)=""/100, 0x41100, 0xad, '\x00', 0x0, 0x1652eae91ae5dc85, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xc, 0x800, 0x80000000}, 0x10, 0x8fb8, 0xffffffffffffffff, 0x6, &(0x7f0000001800)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r6, r7, r8, r9, r11], &(0x7f0000001840)=[{0x2, 0x1, 0xf, 0x8}, {0x4, 0x4, 0xb, 0x2}, {0x5, 0x5, 0xb, 0x1}, {0x4, 0x4, 0x6, 0x5}, {0x2, 0x4, 0xb}, {0x2, 0x4, 0x1, 0xb}], 0x10, 0x7}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x1d14, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r13 = socket$kcm(0x2, 0x1000000000000002, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r13, 0x88, 0x67, &(0x7f00000002c0)=r14, 0x4) socket$kcm(0x11, 0xa, 0x300) 1.222864822s ago: executing program 0 (id=1424): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000030c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.135677473s ago: executing program 4 (id=1425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010037"], 0x1c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x34, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x30}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000050000000000ee000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, 0x0, 0x20048090) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f00000047c0)=""/4034, 0xfc2}, {&(0x7f0000000ec0)=""/4082, 0xff2}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000001ec0)=""/255, 0xff}], 0x7}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r6, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) 973.500878ms ago: executing program 0 (id=1426): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040010) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000600), 0x4) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x7}, 0x1112ba, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x24, 0x107, 0x70bd2d, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @ipv4=@broadcast}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 972.802198ms ago: executing program 2 (id=1427): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48) 861.94151ms ago: executing program 3 (id=1428): r0 = socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f00000004c0)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3201, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x20044000) r5 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xf}, 0x104101, 0x4, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f8, 0x10, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x22040040) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xb4}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x1e, 0x5, 0x0) sendmsg$nl_generic(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x140c, 0x301, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57}, 0x48) 837.310576ms ago: executing program 4 (id=1429): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socketpair(0x5, 0x5, 0x3, &(0x7f0000000dc0)) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4) syz_clone(0x9040000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xe, 0x17, &(0x7f0000000680)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffff001}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], &(0x7f0000000740)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x1125f81f3183eded, '\x00', 0x0, @sk_skb=0x26, r2, 0x8, &(0x7f0000000780)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x4, &(0x7f00000007c0)=[0x1, 0x1], &(0x7f0000000800)=[{0x5, 0x3, 0x1, 0x9}, {0x4, 0x4, 0x2, 0x3}, {0x5, 0x2, 0x8, 0x4}, {0x5, 0x1, 0xc}], 0x10, 0x7}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10000, '\x00', 0x0, r2, 0x5, 0x0, 0x1}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x2}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0x2}, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x4, 0x2, 0x2}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000d00), 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@bloom_filter={0x1e, 0x6, 0xd, 0x56, 0x8005, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x5, 0x2, 0x2, 0x1, @value=r2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x0, 0x8, 0x2, 0x8, 0x8, 0x1}, @alu={0x4, 0x1, 0x1, 0x8, 0x4, 0xffffffffffffffff, 0xfffffffffffffffc}, @exit, @ldst={0x0, 0x2, 0x1, 0x8, 0x0, 0xc, 0xfffffffffffffffc}, @ldst={0x3, 0x1, 0x1, 0x1, 0x51ad8189f0fd5c25, 0x18, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x9e, &(0x7f0000000440)=""/158, 0x40f00, 0x42, '\x00', r4, 0x1a, r2, 0x8, &(0x7f0000000500)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x2, 0x0, 0x8001}, 0x10, 0x25009, r5, 0x2, &(0x7f0000000bc0)=[r6, r7, r8, r9, 0x1, 0xffffffffffffffff, r10, r11], &(0x7f0000000c00)=[{0x2, 0x5, 0xa, 0x5}, {0x5, 0x3, 0x7, 0xb}]}, 0x94) r12 = socket$key(0xf, 0x3, 0x2) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000180)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8, {0xa, 0x4}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x6, 0x7, 0xff4f, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x38, 0x840, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0xe, 0x14, 0x0, 0x1, [@typed={0x4, 0xd, 0x0, 0x0, @binary}, @nested={0x4, 0x19}, @generic="2989"]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$key(r12, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x2, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "f1"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x800}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0xe, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xb28}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r15, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r15, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000700000aa4000000060a0b0400000000000000000200000078000480740001800a0001006d617463680000006400028008000240000000000c00010072617465657374004c0003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bdd3bcc00007da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e870b81e92a630900010073797a30000000000900020073797a320000"], 0xcc}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) 675.524214ms ago: executing program 2 (id=1430): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffe84) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x1, 0x0) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, &(0x7f0000000c40)=r3, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000300)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0xd8, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000280), 0x1}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_generic(r4, 0x0, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file\x00', 0x0) 624.173507ms ago: executing program 0 (id=1431): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8000, 0x200000000001}, 0x0, 0xfffe, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@acquire={0x128, 0x17, 0x1, 0x70bd25, 0x0, {{@in6=@mcast1, 0x0, 0x2b}, @in6=@remote, {@in6=@mcast1, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x56befe125658cb64, 0x87}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@local, 0x0, 0x0, 0x4, 0x4, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9, 0x38}}, 0x128}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b00000000000000000000000000ac"], 0xfdef) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='\x00', 0x0, 0x4018, r0}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map, 0x24, 0x1, 0x3, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x16, 0xb2eb, 0x0, 0x3, 0x800, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffcd, 0x0, 0x0, 0x0, 0x14}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0xa8, &(0x7f0000000680)=""/168, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000780)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f00000007c0)=[{0x5, 0x1, 0x4, 0x1}, {0x2, 0x3, 0x1, 0x2}, {0x5, 0x1, 0x1, 0x4}, {0x1, 0x5, 0x10, 0x6}, {0x4, 0x1, 0x2, 0xa}, {0x0, 0x5, 0xf, 0x1}, {0x3, 0x1, 0xb, 0xc}], 0x10, 0x95}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 554.126779ms ago: executing program 1 (id=1432): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0xe3, 0x73, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 278.694673ms ago: executing program 1 (id=1433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, @perf_bp={0x0, 0xd}, 0x400, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd8}, 0x0, 0xffffffffffdfffff, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r2}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000300000000000000000500"}}}]}, 0x48}}, 0x4000010) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r9, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x7, 0x4, 0x5, 0x4004, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8}, 0x50) r12 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, r13], 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x1f, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@call={0x85, 0x0, 0x0, 0x89}, @map_fd={0x18, 0x2}, @generic={0xc, 0x2, 0xe, 0x5, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x46, &(0x7f0000000540)=""/70, 0x41000, 0x3, '\x00', r7, @fallback=0x35, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x3, 0xb, 0x4, 0xfffff001}, 0x10, r10, r2, 0x0, &(0x7f0000000900)=[r11, r12, r13], 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r15 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r15, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@local, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="38410000100001004a16eedf00010000fe880000000000000000000001fc010000000000fbff00000000000001000107144e23000500000007000000000000006db77a20c090e0721bffc430e70c33ef996f3ea4330de28256c94d8bba1e8e55be7c0ca03d0305b660ddf4d7058611ed", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000003c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f0000000000000001000000000000000200000008000000000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r16 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000000)=[{0x2}, {0x80}, {0x6}]}) 177.170248ms ago: executing program 0 (id=1434): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) 145.721352ms ago: executing program 2 (id=1435): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0xbb, 0x1, 0x0, 0x0, 0x0, 0xe4b8, 0x800, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0xe, 0x4, 0x1, 0xff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[], 0xb8}}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) (async) perf_event_open(0x0, 0x0, 0xd, r4, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x8141) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) (async) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)=""/86}, 0x20) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000008f01d2000000050000000000000000000000000000cfb39451c679ca4158c7e0e69beb0f0ff5837f"], 0x48) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000f4ffffff00"/28], 0x48) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)}, 0xc8d2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x4080) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) (async) close(r10) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 127.074771ms ago: executing program 4 (id=1436): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, 0x0, 0x4000005) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x3}]}, {0x0, [0x0, 0x0, 0x2e, 0x25]}}, &(0x7f0000002200)=""/4110, 0x2a, 0x100e, 0x1}, 0x20) socketpair(0xb, 0x2, 0x99e1, &(0x7f0000000080)={0xffffffffffffffff}) close(r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xb74b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x18, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) 17.845138ms ago: executing program 0 (id=1437): r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x10, 0x89, 0x0, 0x0, 0x0, 0x4b701, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xb, 0x1}, 0x108c, 0x3, 0xfffffffe, 0x4, 0x2, 0xf, 0x100, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffccd, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000000640)=ANY=[@ANYRES16=r2, @ANYRES32=r0], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x2, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='/\x00'/12, @ANYRES32=r4, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v\x00\x00\x000 \x00\x00', @ANYRES32, @ANYBLOB="bdc9", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000140000000180a01010000000000000000000000000900010073797a300080000008000740000000010900010073797a31000000000900020073797a32000000000afdffff1100010000000000000000000000000a"], 0xa4}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="28000000150a01020000000000000000000000000900010073797a30"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000000a06010200000000000000000300000814000780060004404e22000008000b40000000033c000780060005404e20000008003a0047504c00050007003300000008000b400000000e0900130073797a30000000000c00194000000000000000040900020073627a3200000000"], 0x70}}, 0x4040081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="1830000001000000000000000000000018110000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x9afb}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000bc0033000701fefffffffedbdf25037c00000a00048031cd192a2d2a0000"], 0x20}, 0x1, 0x0, 0x0, 0x24048000}, 0x8010) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000700)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r8, 0x4) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000001090300000000000008000002000008"], 0x14}, 0x1, 0x0, 0x0, 0x48085}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@deltfilter={0x3c, 0x2d, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xf, 0x2}, {0xfff3, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8}, @TCA_RATE={0xfffffffffffffe8b, 0x5, {0xd, 0xff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008804}, 0x0) 16.976959ms ago: executing program 1 (id=1438): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x18) (fail_nth: 8) 0s ago: executing program 2 (id=1439): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010037"], 0x1c}}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000001b80)={&(0x7f0000000300)={0x2, 0x4e21, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x14, 0x0, 0x34, {[@noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}], 0x30}, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x11, 0x2, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000050000000000ee000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, 0x0, 0x20048090) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000000000000fc00400009"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/91, 0x5b}, {&(0x7f00000047c0)=""/4034, 0xfc2}, {&(0x7f0000000ec0)=""/4082, 0xff2}, {&(0x7f0000000800)=""/218, 0xda}, {&(0x7f0000000600)=""/239, 0xef}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000001ec0)=""/255, 0xff}], 0x7}, 0xbf9d5a5a4c2f3718) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 70.973768][ T5815] cgroup: Unknown subsys name 'net' [ 71.101865][ T5815] cgroup: Unknown subsys name 'cpuset' [ 71.111525][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.584171][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.590859][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.579025][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.742407][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.757208][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.765977][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.775844][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.784177][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.792243][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.800284][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.810159][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.819342][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.822121][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.828542][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.835653][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.843893][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.849918][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.856016][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.875044][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.875248][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.883823][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.891673][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.900598][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.905876][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.912022][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.929611][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.939738][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.939797][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.543614][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 75.632854][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 75.722348][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 75.764841][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 75.799632][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 75.830056][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.838735][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.846441][ T5829] bridge_slave_0: entered allmulticast mode [ 75.854340][ T5829] bridge_slave_0: entered promiscuous mode [ 75.904376][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.912280][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.920045][ T5829] bridge_slave_1: entered allmulticast mode [ 75.927041][ T5829] bridge_slave_1: entered promiscuous mode [ 76.056885][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.067125][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.076583][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.084900][ T5838] bridge_slave_0: entered allmulticast mode [ 76.092335][ T5838] bridge_slave_0: entered promiscuous mode [ 76.127625][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.138001][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.145759][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.153444][ T5838] bridge_slave_1: entered allmulticast mode [ 76.161072][ T5838] bridge_slave_1: entered promiscuous mode [ 76.189217][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.196468][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.204157][ T5833] bridge_slave_0: entered allmulticast mode [ 76.211819][ T5833] bridge_slave_0: entered promiscuous mode [ 76.250593][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.257998][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.265591][ T5835] bridge_slave_0: entered allmulticast mode [ 76.272834][ T5835] bridge_slave_0: entered promiscuous mode [ 76.281018][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.290152][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.297597][ T5833] bridge_slave_1: entered allmulticast mode [ 76.304848][ T5833] bridge_slave_1: entered promiscuous mode [ 76.332439][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.339830][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.347519][ T5827] bridge_slave_0: entered allmulticast mode [ 76.354984][ T5827] bridge_slave_0: entered promiscuous mode [ 76.363365][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.370713][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.377925][ T5835] bridge_slave_1: entered allmulticast mode [ 76.386467][ T5835] bridge_slave_1: entered promiscuous mode [ 76.404865][ T5829] team0: Port device team_slave_0 added [ 76.413423][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.422949][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.430477][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.437865][ T5827] bridge_slave_1: entered allmulticast mode [ 76.445195][ T5827] bridge_slave_1: entered promiscuous mode [ 76.475671][ T5829] team0: Port device team_slave_1 added [ 76.483336][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.515248][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.556270][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.567913][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.597255][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.610149][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.630437][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.637578][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.666233][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.680862][ T5838] team0: Port device team_slave_0 added [ 76.689320][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.724982][ T5838] team0: Port device team_slave_1 added [ 76.731567][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.738668][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.766263][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.806730][ T5833] team0: Port device team_slave_0 added [ 76.845144][ T5835] team0: Port device team_slave_0 added [ 76.853132][ T5833] team0: Port device team_slave_1 added [ 76.860726][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.867678][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.898763][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.912334][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.920342][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.947944][ T5845] Bluetooth: hci1: command tx timeout [ 76.948022][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.965686][ T5847] Bluetooth: hci0: command tx timeout [ 76.974145][ T5827] team0: Port device team_slave_0 added [ 76.981755][ T5835] team0: Port device team_slave_1 added [ 77.012652][ T5827] team0: Port device team_slave_1 added [ 77.018382][ T5847] Bluetooth: hci2: command tx timeout [ 77.018676][ T5847] Bluetooth: hci4: command tx timeout [ 77.018805][ T5847] Bluetooth: hci3: command tx timeout [ 77.084417][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.091516][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.118472][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.136365][ T5829] hsr_slave_0: entered promiscuous mode [ 77.143532][ T5829] hsr_slave_1: entered promiscuous mode [ 77.161505][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.168922][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.195426][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.207258][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.214392][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.240766][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.262528][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.270176][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.296825][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.309747][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.316888][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.344085][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.381858][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.389085][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.415802][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.438786][ T5838] hsr_slave_0: entered promiscuous mode [ 77.445178][ T5838] hsr_slave_1: entered promiscuous mode [ 77.451914][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 77.457730][ T5838] Cannot create hsr debugfs directory [ 77.593718][ T5833] hsr_slave_0: entered promiscuous mode [ 77.600459][ T5833] hsr_slave_1: entered promiscuous mode [ 77.606653][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 77.612730][ T5833] Cannot create hsr debugfs directory [ 77.629814][ T5827] hsr_slave_0: entered promiscuous mode [ 77.636343][ T5827] hsr_slave_1: entered promiscuous mode [ 77.642761][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 77.648621][ T5827] Cannot create hsr debugfs directory [ 77.660617][ T5835] hsr_slave_0: entered promiscuous mode [ 77.667190][ T5835] hsr_slave_1: entered promiscuous mode [ 77.674172][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 77.680170][ T5835] Cannot create hsr debugfs directory [ 78.130101][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.147313][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.158555][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.171301][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.244140][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.254368][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.265271][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.276920][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.373065][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.397190][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.407813][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.419403][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.494844][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.507043][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.526843][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.554795][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.602240][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.656573][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.672089][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.683705][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.700794][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.736636][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.745607][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.777250][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.784772][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.817106][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.824481][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.876623][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.891827][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.919528][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.926675][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.961271][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.968541][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.986804][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.019384][ T5845] Bluetooth: hci1: command tx timeout [ 79.019391][ T5847] Bluetooth: hci0: command tx timeout [ 79.021700][ T736] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.037586][ T736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.075837][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.086899][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.094190][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.101820][ T5845] Bluetooth: hci3: command tx timeout [ 79.103474][ T5839] Bluetooth: hci2: command tx timeout [ 79.116168][ T5847] Bluetooth: hci4: command tx timeout [ 79.182965][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.227699][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.235067][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.266034][ T3019] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.273426][ T3019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.329127][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.396409][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.427961][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.455909][ T3019] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.463158][ T3019] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.513517][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.520864][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.707003][ T5829] veth0_vlan: entered promiscuous mode [ 79.735756][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.793715][ T5829] veth1_vlan: entered promiscuous mode [ 79.860743][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.982810][ T5829] veth0_macvtap: entered promiscuous mode [ 80.022811][ T5829] veth1_macvtap: entered promiscuous mode [ 80.089258][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.132642][ T5833] veth0_vlan: entered promiscuous mode [ 80.150824][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.171963][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.209689][ T4531] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.239733][ T4531] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.256405][ T4531] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.266266][ T5833] veth1_vlan: entered promiscuous mode [ 80.281596][ T4531] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.355312][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.431680][ T5838] veth0_vlan: entered promiscuous mode [ 80.447627][ T5833] veth0_macvtap: entered promiscuous mode [ 80.462613][ T5827] veth0_vlan: entered promiscuous mode [ 80.494331][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.497601][ T5838] veth1_vlan: entered promiscuous mode [ 80.529112][ T5833] veth1_macvtap: entered promiscuous mode [ 80.537434][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.554917][ T5827] veth1_vlan: entered promiscuous mode [ 80.599418][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.607483][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.621201][ T5827] veth0_macvtap: entered promiscuous mode [ 80.653254][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.661838][ T5827] veth1_macvtap: entered promiscuous mode [ 80.683204][ T5835] veth0_vlan: entered promiscuous mode [ 80.704899][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.723591][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.734098][ T5835] veth1_vlan: entered promiscuous mode [ 80.760214][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.769210][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.787728][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.811166][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.855644][ T5838] veth0_macvtap: entered promiscuous mode [ 80.900520][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.941760][ T5838] veth1_macvtap: entered promiscuous mode [ 80.956574][ T5835] veth0_macvtap: entered promiscuous mode [ 80.973654][ T5835] veth1_macvtap: entered promiscuous mode [ 80.984011][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.015706][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.027252][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.037520][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.053453][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.098662][ T5847] Bluetooth: hci0: command tx timeout [ 81.104688][ T5839] Bluetooth: hci1: command tx timeout [ 81.122637][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.178572][ T5845] Bluetooth: hci3: command tx timeout [ 81.179096][ T5839] Bluetooth: hci2: command tx timeout [ 81.184381][ T5847] Bluetooth: hci4: command tx timeout [ 81.195922][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.195963][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.220605][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.234100][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.297707][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.314754][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.341665][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.381452][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.402756][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.431955][ C0] hrtimer: interrupt took 69043 ns [ 81.449229][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.457288][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.477791][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.488329][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.554161][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.593903][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.622569][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.641326][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.770895][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.791232][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.920352][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.947832][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.965759][ T3019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.996883][ T3019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.023394][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8'. [ 82.023885][ T3019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.073771][ T3019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.162749][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.189056][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.370872][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 82.403433][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 82.562530][ T5986] netlink: 284 bytes leftover after parsing attributes in process `syz.1.11'. [ 83.169312][ T5994] netlink: 'syz.0.1': attribute type 46 has an invalid length. [ 83.178851][ T5845] Bluetooth: hci0: command tx timeout [ 83.181370][ T5994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.184517][ T5847] Bluetooth: hci1: command tx timeout [ 83.214311][ T5993] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 83.258682][ T5845] Bluetooth: hci4: command tx timeout [ 83.258736][ T5839] Bluetooth: hci3: command tx timeout [ 83.264475][ T5847] Bluetooth: hci2: command tx timeout [ 83.338044][ T5990] syzkaller0: entered allmulticast mode [ 83.628540][ T5847] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 84.023094][ T6013] netlink: 'syz.3.18': attribute type 2 has an invalid length. [ 84.082031][ T6018] netlink: 14 bytes leftover after parsing attributes in process `syz.2.20'. [ 84.098207][ T6013] netlink: 1 bytes leftover after parsing attributes in process `syz.3.18'. [ 85.022827][ T6018] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 85.249306][ T6043] netlink: 'syz.3.27': attribute type 21 has an invalid length. [ 85.271924][ T6043] netlink: 156 bytes leftover after parsing attributes in process `syz.3.27'. [ 85.342233][ T6045] openvswitch: netlink: Tunnel attr 114 out of range max 16 [ 85.539469][ T6053] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 85.601397][ T6058] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.912097][ T6076] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 86.950768][ T10] cfg80211: failed to load regulatory.db [ 86.958279][ T6076] netlink: 'syz.1.37': attribute type 4 has an invalid length. [ 86.996380][ T6082] netlink: 'syz.1.37': attribute type 1 has an invalid length. [ 86.996835][ T6076] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.37'. [ 87.029440][ T6080] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 87.076668][ T6082] netlink: 'syz.1.37': attribute type 4 has an invalid length. [ 87.089909][ T6082] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.37'. [ 87.651214][ T6089] netlink: 288 bytes leftover after parsing attributes in process `syz.4.42'. [ 87.940922][ T6091] netlink: 'syz.3.43': attribute type 39 has an invalid length. [ 88.088000][ T6095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.43'. [ 88.282601][ T6104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.46'. [ 88.470587][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 88.487578][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 88.534112][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 88.863811][ T6124] Zero length message leads to an empty skb [ 89.050055][ T6134] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 89.186285][ T6136] netlink: 72 bytes leftover after parsing attributes in process `syz.0.57'. [ 89.393003][ T6138] netlink: 'syz.4.58': attribute type 1 has an invalid length. [ 89.406193][ T6138] netlink: 'syz.4.58': attribute type 4 has an invalid length. [ 89.418426][ T6138] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.58'. [ 89.433326][ T6138] netlink: 'syz.4.58': attribute type 1 has an invalid length. [ 89.450625][ T6138] netlink: 'syz.4.58': attribute type 4 has an invalid length. [ 89.460022][ T6138] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.58'. [ 90.499712][ T6166] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 90.885029][ T6175] netlink: 'syz.3.70': attribute type 10 has an invalid length. [ 90.961758][ T6175] dummy0: entered promiscuous mode [ 90.986860][ T6175] bridge0: port 3(dummy0) entered blocking state [ 91.002891][ T6175] bridge0: port 3(dummy0) entered disabled state [ 91.021523][ T6175] dummy0: entered allmulticast mode [ 91.051249][ T6175] bridge0: port 3(dummy0) entered blocking state [ 91.057899][ T6175] bridge0: port 3(dummy0) entered forwarding state [ 91.571296][ T6190] xt_l2tp: missing protocol rule (udp|l2tpip) [ 91.890149][ T6207] netlink: 'syz.2.80': attribute type 10 has an invalid length. [ 92.043673][ T6217] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 92.642202][ T6250] __nla_validate_parse: 5 callbacks suppressed [ 92.642223][ T6250] netlink: 40 bytes leftover after parsing attributes in process `syz.3.91'. [ 92.843477][ T6248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.91'. [ 92.880963][ T6248] netlink: 40 bytes leftover after parsing attributes in process `syz.3.91'. [ 93.133537][ T6264] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.96'. [ 93.460902][ T6274] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.100'. [ 93.860938][ T6279] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 93.913573][ T6281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.021607][ T6283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.103'. [ 94.455037][ T6297] netlink: 'syz.4.108': attribute type 10 has an invalid length. [ 94.485110][ T6298] netlink: 'syz.2.107': attribute type 3 has an invalid length. [ 94.646084][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 94.743610][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.108'. [ 94.933206][ T6298] netlink: 'syz.2.107': attribute type 10 has an invalid length. [ 94.962872][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.107'. [ 95.038834][ T6298] netlink: 44 bytes leftover after parsing attributes in process `syz.2.107'. [ 95.084836][ T6297] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 100.622365][ T6230] tipc: Subscription rejected, illegal request [ 100.790061][ T6347] __nla_validate_parse: 1 callbacks suppressed [ 100.790085][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 100.821395][ T6352] raw_sendmsg: syz.4.126 forgot to set AF_INET. Fix it! [ 100.888325][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.125'. [ 103.336678][ T6369] netlink: 272 bytes leftover after parsing attributes in process `syz.4.131'. [ 104.841587][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 104.957941][ T6375] sit0: entered promiscuous mode [ 105.012976][ T6375] sit0: entered allmulticast mode [ 110.243259][ T6397] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 110.264388][ T6402] FAULT_INJECTION: forcing a failure. [ 110.264388][ T6402] name failslab, interval 1, probability 0, space 0, times 1 [ 110.270529][ T6397] netlink: 'syz.2.138': attribute type 4 has an invalid length. [ 110.278027][ T6402] CPU: 1 UID: 0 PID: 6402 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(full) [ 110.278053][ T6402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.278075][ T6402] Call Trace: [ 110.278089][ T6402] [ 110.278100][ T6402] dump_stack_lvl+0xe8/0x150 [ 110.278149][ T6402] should_fail_ex+0x412/0x560 [ 110.278201][ T6402] should_failslab+0xa8/0x100 [ 110.278241][ T6402] kmem_cache_alloc_noprof+0x87/0x6e0 [ 110.278287][ T6402] ? skb_clone+0x212/0x3a0 [ 110.278324][ T6402] skb_clone+0x212/0x3a0 [ 110.278339][ T6402] ? dev_queue_xmit_nit+0x268/0xad0 [ 110.278380][ T6402] dev_queue_xmit_nit+0x29a/0xad0 [ 110.278413][ T6402] ? dev_queue_xmit_nit+0x2d/0xad0 [ 110.278480][ T6402] dev_hard_start_xmit+0x1c1/0x7f0 [ 110.278573][ T6402] __dev_queue_xmit+0x14dd/0x32a0 [ 110.278590][ T6402] ? netlink_unicast+0x80f/0x9b0 [ 110.278627][ T6402] ? do_syscall_64+0xe2/0xf80 [ 110.278654][ T6402] ? __dev_queue_xmit+0x2a7/0x32a0 [ 110.278760][ T6402] ? __pfx___dev_queue_xmit+0x10/0x10 [ 110.278823][ T6402] ? __copy_skb_header+0xa3/0x4a0 [ 110.278858][ T6402] ? __asan_memcpy+0x40/0x70 [ 110.278875][ T6402] ? __skb_clone+0x63/0x7a0 [ 110.278926][ T6402] ? __skb_clone+0x483/0x7a0 [ 110.278987][ T6402] ? skb_clone+0x246/0x3a0 [ 110.279024][ T6402] __netlink_deliver_tap+0x5ad/0x850 [ 110.279104][ T6402] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.279143][ T6402] netlink_deliver_tap+0x19c/0x1b0 [ 110.279179][ T6402] netlink_sendskb+0x68/0x140 [ 110.279220][ T6402] netlink_unicast+0x3a3/0x9b0 [ 110.279295][ T6402] ? __pfx_netlink_unicast+0x10/0x10 [ 110.279369][ T6402] netlink_rcv_skb+0x2b6/0x4b0 [ 110.279405][ T6402] ? __pfx_genl_rcv_msg+0x10/0x10 [ 110.279440][ T6402] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.279461][ T6402] ? genl_rcv+0x19/0x40 [ 110.279559][ T6402] ? down_read+0x272/0x2e0 [ 110.279580][ T6402] ? genl_rcv+0xd/0x40 [ 110.279615][ T6402] genl_rcv+0x28/0x40 [ 110.279637][ T6402] netlink_unicast+0x80f/0x9b0 [ 110.279709][ T6402] ? __pfx_netlink_unicast+0x10/0x10 [ 110.279736][ T6402] ? __alloc_skb+0x193/0x390 [ 110.279765][ T6402] ? netlink_sendmsg+0x650/0xb40 [ 110.279779][ T6402] ? skb_put+0x11b/0x210 [ 110.279825][ T6402] netlink_sendmsg+0x813/0xb40 [ 110.279887][ T6402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.279925][ T6402] ? aa_sock_msg_perm+0xf1/0x1b0 [ 110.279964][ T6402] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.279986][ T6402] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.280013][ T6402] __sock_sendmsg+0x21c/0x270 [ 110.280055][ T6402] ____sys_sendmsg+0x4d7/0x810 [ 110.280085][ T6402] ? __pfx_perf_trace_lock+0x10/0x10 [ 110.280141][ T6402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.280211][ T6402] ? import_iovec+0x73/0xa0 [ 110.280258][ T6402] ___sys_sendmsg+0x2a5/0x360 [ 110.280321][ T6402] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.280442][ T6402] ? __fget_files+0x2a/0x420 [ 110.280523][ T6402] ? __fget_files+0x2a/0x420 [ 110.280546][ T6402] ? __fget_files+0x3a0/0x420 [ 110.280618][ T6402] __x64_sys_sendmsg+0x1bd/0x2a0 [ 110.280661][ T6402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.280732][ T6402] ? __pfx_ksys_write+0x10/0x10 [ 110.280809][ T6402] do_syscall_64+0xe2/0xf80 [ 110.280834][ T6402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.280850][ T6402] ? trace_irq_disable+0x37/0x100 [ 110.280871][ T6402] ? clear_bhb_loop+0x60/0xb0 [ 110.280907][ T6402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.280926][ T6402] RIP: 0033:0x7f381b39acb9 [ 110.280965][ T6402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.280979][ T6402] RSP: 002b:00007f381c1e8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.280998][ T6402] RAX: ffffffffffffffda RBX: 00007f381b616090 RCX: 00007f381b39acb9 [ 110.281011][ T6402] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 110.281022][ T6402] RBP: 00007f381c1e8090 R08: 0000000000000000 R09: 0000000000000000 [ 110.281032][ T6402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.281041][ T6402] R13: 00007f381b616128 R14: 00007f381b616090 R15: 00007ffca211ea88 [ 110.281131][ T6402] [ 110.758823][ T6398] netlink: 'syz.2.138': attribute type 1 has an invalid length. [ 110.758857][ T6398] netlink: 'syz.2.138': attribute type 4 has an invalid length. [ 110.758880][ T6398] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.138'. [ 111.974657][ T6397] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.138'. [ 113.815601][ T6427] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 117.431515][ T6442] ======================================================= [ 117.431515][ T6442] WARNING: The mand mount option has been deprecated and [ 117.431515][ T6442] and is ignored by this kernel. Remove the mand [ 117.431515][ T6442] option from the mount to silence this warning. [ 117.431515][ T6442] ======================================================= [ 122.339786][ T6514] netlink: 284 bytes leftover after parsing attributes in process `syz.4.172'. [ 123.538485][ T6551] netlink: 'syz.3.184': attribute type 39 has an invalid length. [ 123.618586][ T6553] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 123.705261][ T6551] veth0_macvtap: left promiscuous mode [ 123.761292][ T6528] veth1_macvtap: left promiscuous mode [ 123.781186][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.793811][ T6553] team0: Port device batadv0 added [ 123.997219][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 124.003673][ T6559] netlink: 'syz.4.186': attribute type 11 has an invalid length. [ 124.010025][ T6563] netlink: 312 bytes leftover after parsing attributes in process `syz.2.187'. [ 124.025035][ T6563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 124.198927][ T6564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.452154][ T6574] netlink: 'syz.1.190': attribute type 9 has an invalid length. [ 124.491312][ T6575] xt_l2tp: missing protocol rule (udp|l2tpip) [ 124.852381][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 124.998272][ T6591] netlink: 312 bytes leftover after parsing attributes in process `syz.0.199'. [ 125.007376][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 125.682666][ T6598] macvtap0: refused to change device tx_queue_len [ 125.880221][ T6603] netlink: 68 bytes leftover after parsing attributes in process `syz.3.202'. [ 126.403155][ T6626] netlink: 284 bytes leftover after parsing attributes in process `syz.0.205'. [ 127.218962][ T6667] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 127.239508][ T6667] netlink: 'syz.1.208': attribute type 4 has an invalid length. [ 127.247377][ T6667] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.208'. [ 127.290504][ T6667] netlink: 'syz.1.208': attribute type 1 has an invalid length. [ 127.318827][ T6667] netlink: 'syz.1.208': attribute type 4 has an invalid length. [ 127.342161][ T6671] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 127.351634][ T6667] __nla_validate_parse: 3 callbacks suppressed [ 127.351654][ T6667] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.208'. [ 127.391692][ T6671] netlink: 'syz.2.210': attribute type 4 has an invalid length. [ 127.393871][ T6664] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 127.402755][ T6671] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.210'. [ 127.468830][ T6664] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.210'. [ 128.441373][ T6693] netlink: 40 bytes leftover after parsing attributes in process `syz.2.216'. [ 129.639998][ T6678] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 129.652565][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 129.855583][ T6700] validate_nla: 1 callbacks suppressed [ 129.855646][ T6700] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 130.080299][ T6710] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.222'. [ 130.126682][ T6713] netlink: 'syz.2.224': attribute type 10 has an invalid length. [ 130.137105][ T6713] netlink: 152 bytes leftover after parsing attributes in process `syz.2.224'. [ 130.184491][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 130.205089][ T6715] netlink: 312 bytes leftover after parsing attributes in process `syz.0.223'. [ 130.217591][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.223'. [ 130.305864][ T6700] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 130.387190][ T6720] netlink: 'syz.1.225': attribute type 9 has an invalid length. [ 130.401614][ T6720] netlink: 'syz.1.225': attribute type 11 has an invalid length. [ 130.436991][ T6720] netlink: 'syz.1.225': attribute type 12 has an invalid length. [ 130.920991][ T6743] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.017964][ T6740] syzkaller0: entered promiscuous mode [ 131.057757][ T6740] syzkaller0: entered allmulticast mode [ 132.173839][ T6762] syz.4.239 uses obsolete (PF_INET,SOCK_PACKET) [ 132.267085][ T6766] netlink: 'syz.2.242': attribute type 10 has an invalid length. [ 132.446009][ T30] audit: type=1107 audit(1768918193.038:2): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 133.035744][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.042936][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.059211][ T6766] batman_adv: batadv0: Adding interface: virt_wifi0 [ 134.065927][ T6766] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.094932][ T6766] batman_adv: batadv0: Interface activated: virt_wifi0 [ 134.362353][ T6810] __nla_validate_parse: 4 callbacks suppressed [ 134.362385][ T6810] netlink: 284 bytes leftover after parsing attributes in process `syz.2.254'. [ 134.391521][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 134.401803][ T6816] netlink: 312 bytes leftover after parsing attributes in process `syz.3.257'. [ 134.411868][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 134.531924][ T6817] netlink: 60 bytes leftover after parsing attributes in process `syz.4.255'. [ 134.646018][ T6819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.258'. [ 134.655749][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.258'. [ 135.279676][ T6858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 135.281104][ T6861] syz_tun: refused to change device tx_queue_len [ 135.297099][ T6860] netlink: 284 bytes leftover after parsing attributes in process `syz.2.271'. [ 135.401457][ T6864] netlink: 164 bytes leftover after parsing attributes in process `syz.4.273'. [ 135.419275][ T6864] C: renamed from team_slave_0 (while UP) [ 135.568355][ T3473] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.724897][ T6917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.914878][ T6945] netlink: 'syz.3.291': attribute type 16 has an invalid length. [ 136.923459][ T6945] netlink: 'syz.3.291': attribute type 17 has an invalid length. [ 137.143064][ T6945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.561699][ T6968] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 137.573419][ T6968] netlink: 'syz.0.298': attribute type 1 has an invalid length. [ 138.014052][ T6993] warning: `syz.3.305' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 138.189891][ T6999] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 138.197764][ T6999] netlink: 'syz.4.308': attribute type 4 has an invalid length. [ 138.206456][ T6999] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 138.247601][ T6999] netlink: 'syz.4.308': attribute type 4 has an invalid length. [ 138.259203][ T7002] netlink: 'syz.2.310': attribute type 1 has an invalid length. [ 138.277447][ T7006] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 138.524653][ T7015] TCP: TCP_TX_DELAY enabled [ 138.607945][ T7025] netlink: 'syz.2.318': attribute type 14 has an invalid length. [ 139.063070][ T7034] veth0_vlan: left promiscuous mode [ 139.074753][ T7034] veth0_vlan: entered promiscuous mode [ 139.130386][ T7034] team0: Device veth0_vlan failed to register rx_handler [ 139.456432][ T7048] __nla_validate_parse: 8 callbacks suppressed [ 139.456479][ T7048] netlink: 284 bytes leftover after parsing attributes in process `syz.3.326'. [ 139.694585][ T7051] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.327'. [ 139.730632][ T7051] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.327'. [ 140.046819][ T7067] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 140.308030][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.339'. [ 140.491011][ T7088] netlink: 284 bytes leftover after parsing attributes in process `syz.1.340'. [ 142.220117][ T7103] validate_nla: 7 callbacks suppressed [ 142.220142][ T7103] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 142.279718][ T7106] netlink: 'syz.1.345': attribute type 1 has an invalid length. [ 142.287784][ T7106] netlink: 'syz.1.345': attribute type 4 has an invalid length. [ 142.312058][ T7103] netlink: 'syz.1.345': attribute type 4 has an invalid length. [ 142.342098][ T7106] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.345'. [ 142.352281][ T7103] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.345'. [ 142.717331][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.353'. [ 143.056203][ T7135] netlink: 284 bytes leftover after parsing attributes in process `syz.0.355'. [ 143.410607][ T7151] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 143.580205][ T7155] netlink: 180 bytes leftover after parsing attributes in process `syz.4.364'. [ 143.777258][ T7159] xt_l2tp: missing protocol rule (udp|l2tpip) [ 146.963584][ T7208] __nla_validate_parse: 1 callbacks suppressed [ 146.963607][ T7208] netlink: 15674 bytes leftover after parsing attributes in process `syz.1.382'. [ 147.104646][ T7207] syz.0.381: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 147.259379][ T7207] CPU: 0 UID: 0 PID: 7207 Comm: syz.0.381 Not tainted syzkaller #0 PREEMPT(full) [ 147.259408][ T7207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.259419][ T7207] Call Trace: [ 147.259439][ T7207] [ 147.259450][ T7207] dump_stack_lvl+0xe8/0x150 [ 147.259507][ T7207] warn_alloc+0x249/0x340 [ 147.259539][ T7207] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 147.259582][ T7207] ? __pfx_warn_alloc+0x10/0x10 [ 147.259643][ T7207] ? kasan_save_track+0x4f/0x80 [ 147.259662][ T7207] ? kasan_save_track+0x3e/0x80 [ 147.259680][ T7207] ? __kasan_kmalloc+0x93/0xb0 [ 147.259697][ T7207] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 147.259715][ T7207] ? xskq_create+0x56/0x170 [ 147.259738][ T7207] ? xsk_setsockopt+0x603/0x990 [ 147.259754][ T7207] ? do_sock_setsockopt+0x17c/0x1b0 [ 147.259777][ T7207] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 147.259799][ T7207] ? do_syscall_64+0xe2/0xf80 [ 147.259842][ T7207] __vmalloc_node_range_noprof+0x132/0x1730 [ 147.260013][ T7207] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.260070][ T7207] ? __kasan_kmalloc+0x93/0xb0 [ 147.260124][ T7207] vmalloc_user_noprof+0xad/0xe0 [ 147.260151][ T7207] ? xskq_create+0xbf/0x170 [ 147.260184][ T7207] xskq_create+0xbf/0x170 [ 147.260226][ T7207] xsk_init_queue+0xad/0x110 [ 147.260267][ T7207] xsk_setsockopt+0x603/0x990 [ 147.260307][ T7207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.260339][ T7207] ? __pfx_aa_sk_perm+0x10/0x10 [ 147.260385][ T7207] ? __fget_files+0x2a/0x420 [ 147.260407][ T7207] ? aa_sock_opt_perm+0xff/0x1a0 [ 147.260461][ T7207] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 147.260480][ T7207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.260515][ T7207] do_sock_setsockopt+0x17c/0x1b0 [ 147.260568][ T7207] __x64_sys_setsockopt+0x13d/0x1b0 [ 147.260626][ T7207] do_syscall_64+0xe2/0xf80 [ 147.260653][ T7207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.260671][ T7207] ? trace_irq_disable+0x37/0x100 [ 147.260692][ T7207] ? clear_bhb_loop+0x60/0xb0 [ 147.260732][ T7207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.260752][ T7207] RIP: 0033:0x7f23d399acb9 [ 147.260781][ T7207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.260796][ T7207] RSP: 002b:00007f23d4773028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.260817][ T7207] RAX: ffffffffffffffda RBX: 00007f23d3c15fa0 RCX: 00007f23d399acb9 [ 147.260831][ T7207] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000b [ 147.260842][ T7207] RBP: 00007f23d3a08bf7 R08: 0000000000000004 R09: 0000000000000000 [ 147.260854][ T7207] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 147.260866][ T7207] R13: 00007f23d3c16038 R14: 00007f23d3c15fa0 R15: 00007ffe433288c8 [ 147.260962][ T7207] [ 147.548029][ T7207] Mem-Info: [ 147.553311][ T7207] active_anon:7813 inactive_anon:0 isolated_anon:0 [ 147.553311][ T7207] active_file:14405 inactive_file:39950 isolated_file:0 [ 147.553311][ T7207] unevictable:768 dirty:192 writeback:0 [ 147.553311][ T7207] slab_reclaimable:10607 slab_unreclaimable:97177 [ 147.553311][ T7207] mapped:30894 shmem:3335 pagetables:1296 [ 147.553311][ T7207] sec_pagetables:0 bounce:0 [ 147.553311][ T7207] kernel_misc_reclaimable:0 [ 147.553311][ T7207] free:1314576 free_pcp:13759 free_cma:0 [ 147.602436][ T7207] Node 0 active_anon:31252kB inactive_anon:0kB active_file:57620kB inactive_file:159596kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123576kB dirty:768kB writeback:0kB shmem:11804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12608kB pagetables:5044kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.636957][ T7207] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 147.683027][ T7207] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.716747][ T7207] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 147.724413][ T7207] Node 0 DMA32 free:1363800kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31252kB inactive_anon:0kB active_file:57620kB inactive_file:159596kB unevictable:1536kB writepending:768kB zspages:0kB present:3129332kB managed:2557036kB mlocked:0kB bounce:0kB free_pcp:37704kB local_pcp:17084kB free_cma:0kB [ 147.768284][ T7207] lowmem_reserve[]: 0 0 1 1 1 [ 147.773308][ T7207] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.809266][ T7207] lowmem_reserve[]: 0 0 0 0 0 [ 147.814127][ T7207] Node 1 Normal free:3879144kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17312kB local_pcp:10720kB free_cma:0kB [ 147.849480][ T7207] lowmem_reserve[]: 0 0 0 0 0 [ 147.854554][ T7207] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.916657][ T7207] Node 0 DMA32: 2124*4kB (UME) 1343*8kB (UM) 826*16kB (UM) 526*32kB (UME) 203*64kB (UM) 171*128kB (UME) 108*256kB (UME) 49*512kB (UM) 24*1024kB (UME) 9*2048kB (UM) 289*4096kB (UM) = 1363656kB [ 147.967144][ T7207] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 148.010271][ T7207] Node 1 Normal: 216*4kB (UE) 69*8kB (UME) 54*16kB (UME) 66*32kB (UME) 31*64kB (UME) 8*128kB (UME) 2*256kB (M) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 943*4096kB (M) = 3879144kB [ 148.050978][ T7207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.101810][ T7207] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.138659][ T7207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.169979][ T7207] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.191069][ T7207] 58314 total pagecache pages [ 148.224154][ T7207] 0 pages in swap cache [ 148.248544][ T7207] Free swap = 124996kB [ 148.259767][ T7207] Total swap = 124996kB [ 148.264163][ T7207] 2097051 pages RAM [ 148.288324][ T7207] 0 pages HighMem/MovableOnly [ 148.293411][ T7207] 425830 pages reserved [ 148.297592][ T7207] 0 pages cma reserved [ 149.429030][ T7222] netlink: 'syz.0.387': attribute type 21 has an invalid length. [ 155.323434][ T7249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.392'. [ 157.969931][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 158.352413][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.397'. [ 158.801343][ T7273] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 158.945384][ T7248] infiniband !yz!: set active [ 158.968581][ T7248] infiniband !yz!: added team_slave_0 [ 159.027941][ T7248] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 159.056837][ T7248] infiniband !yz!: Couldn't open port 1 [ 159.383764][ T7248] RDS/IB: !yz!: added [ 159.390363][ T7248] smc: adding ib device !yz! with port count 1 [ 159.397066][ T7248] smc: ib device !yz! port 1 has no pnetid [ 159.421751][ T7289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.401'. [ 160.247036][ T7297] netlink: 'syz.0.404': attribute type 2 has an invalid length. [ 160.318287][ T7297] netlink: 'syz.0.404': attribute type 2 has an invalid length. [ 161.540188][ T7309] netlink: 56 bytes leftover after parsing attributes in process `syz.0.409'. [ 161.598341][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 161.617996][ T7309] netlink: 31 bytes leftover after parsing attributes in process `syz.0.409'. [ 161.705814][ T7312] netlink: 72 bytes leftover after parsing attributes in process `syz.2.408'. [ 161.715539][ T7309] netlink: 'syz.0.409': attribute type 3 has an invalid length. [ 161.759605][ T7309] netlink: 'syz.0.409': attribute type 2 has an invalid length. [ 161.855908][ T7309] netlink: 31 bytes leftover after parsing attributes in process `syz.0.409'. [ 161.986280][ T7309] netlink: 'syz.0.409': attribute type 1 has an invalid length. [ 162.055965][ T7309] netlink: 'syz.0.409': attribute type 2 has an invalid length. [ 163.049125][ T7321] netlink: 'syz.4.410': attribute type 2 has an invalid length. [ 163.103178][ T7321] : entered promiscuous mode [ 163.121311][ T7322] netlink: 'syz.4.410': attribute type 2 has an invalid length. [ 163.161322][ T7322] : left promiscuous mode [ 164.402046][ T7346] openvswitch: netlink: IP tunnel dst address not specified [ 164.570216][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.420'. [ 164.585563][ T7355] netlink: 32 bytes leftover after parsing attributes in process `syz.4.420'. [ 165.491640][ T7373] syzkaller0: entered promiscuous mode [ 165.532767][ T7373] syzkaller0: entered allmulticast mode [ 166.219674][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 166.272067][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.279998][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.301658][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.314796][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.513049][ T7398] netlink: 'syz.2.435': attribute type 2 has an invalid length. [ 166.556909][ T7399] netlink: 'syz.2.435': attribute type 2 has an invalid length. [ 167.135137][ T7431] netlink: 'syz.2.447': attribute type 2 has an invalid length. [ 167.152639][ T7431] netlink: 'syz.2.447': attribute type 3 has an invalid length. [ 167.180737][ T7428] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 167.188947][ T7429] netlink: 'syz.1.446': attribute type 10 has an invalid length. [ 167.216962][ T7429] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 167.248897][ T7431] netlink: 132 bytes leftover after parsing attributes in process `syz.2.447'. [ 169.233290][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 169.235691][ T7474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.461'. [ 169.242524][ T7475] netlink: 'syz.3.463': attribute type 2 has an invalid length. [ 169.259947][ T7475] netlink: 'syz.3.463': attribute type 2 has an invalid length. [ 169.268492][ T7474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.461'. [ 169.279606][ T7474] sit0: left promiscuous mode [ 169.280786][ T7476] nft_compat: unsupported protocol 5 [ 169.284327][ T7474] sit0: left allmulticast mode [ 169.301900][ T7474] netlink: 'syz.0.461': attribute type 2 has an invalid length. [ 169.724479][ T7477] syzkaller0: entered promiscuous mode [ 169.789182][ T7477] syzkaller0: entered allmulticast mode [ 170.106530][ T7497] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 171.369891][ T7515] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.474'. [ 171.473184][ T7528] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 171.486344][ T7524] xt_l2tp: missing protocol rule (udp|l2tpip) [ 171.639051][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 171.643863][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 171.673924][ T7533] openvswitch: netlink: Flow actions attr not present in new flow. [ 171.845516][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 172.326815][ T7564] netlink: 16 bytes leftover after parsing attributes in process `syz.1.492'. [ 173.254698][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 173.339988][ T7583] netlink: 'syz.2.496': attribute type 10 has an invalid length. [ 173.381621][ T7586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.499'. [ 173.403425][ T7585] netlink: 60 bytes leftover after parsing attributes in process `syz.0.499'. [ 173.435162][ T7587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.499'. [ 173.496467][ T7583] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.525335][ T7583] bond0: (slave team0): Enslaving as an active interface with an up link [ 173.606423][ T7593] netlink: 104 bytes leftover after parsing attributes in process `syz.3.498'. [ 173.677291][ T7598] xt_l2tp: missing protocol rule (udp|l2tpip) [ 173.875840][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.504'. [ 174.975235][ T7631] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 174.983218][ T7631] netlink: 'syz.1.511': attribute type 4 has an invalid length. [ 174.991577][ T7631] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.511'. [ 175.004099][ T7631] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 175.013641][ T7631] netlink: 'syz.1.511': attribute type 4 has an invalid length. [ 175.021759][ T7631] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.511'. [ 175.922886][ T7621] netlink: 60 bytes leftover after parsing attributes in process `syz.0.507'. [ 176.103285][ T7637] netlink: 'syz.1.512': attribute type 1 has an invalid length. [ 176.112854][ T7637] netlink: 'syz.1.512': attribute type 4 has an invalid length. [ 176.122629][ T7637] netlink: 'syz.1.512': attribute type 1 has an invalid length. [ 176.130612][ T7637] netlink: 'syz.1.512': attribute type 4 has an invalid length. [ 176.363080][ T7647] xt_l2tp: missing protocol rule (udp|l2tpip) [ 176.740432][ T7659] @: renamed from bond_slave_0 (while UP) [ 177.353418][ T7696] xt_l2tp: missing protocol rule (udp|l2tpip) [ 177.514718][ T7702] tap0: tun_chr_ioctl cmd 1074025677 [ 177.528037][ T7702] tap0: linktype set to 823 [ 177.539205][ T7702] tap0: tun_chr_ioctl cmd 1074025688 [ 177.560798][ T7702] __nla_validate_parse: 9 callbacks suppressed [ 177.560821][ T7702] netlink: 88 bytes leftover after parsing attributes in process `syz.1.532'. [ 177.580724][ T7706] delete_channel: no stack [ 177.597534][ T7706] delete_channel: no stack [ 178.200434][ T7717] netlink: 36 bytes leftover after parsing attributes in process `syz.3.537'. [ 178.504548][ T7717] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.555867][ T7719] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.537'. [ 178.562558][ T7717] netlink: 'syz.3.537': attribute type 21 has an invalid length. [ 178.588748][ T7717] netlink: 164 bytes leftover after parsing attributes in process `syz.3.537'. [ 179.092914][ T7741] xt_l2tp: missing protocol rule (udp|l2tpip) [ 179.316318][ T7749] netlink: 'syz.1.548': attribute type 1 has an invalid length. [ 179.361242][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 179.705108][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.553'. [ 179.756204][ T7789] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 180.702853][ T7802] netlink: 'syz.3.555': attribute type 9 has an invalid length. [ 180.768270][ T7802] netlink: 'syz.3.555': attribute type 11 has an invalid length. [ 180.788013][ T7792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.554'. [ 180.827824][ T7802] netlink: 'syz.3.555': attribute type 12 has an invalid length. [ 180.923934][ T7802] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.555'. [ 181.015846][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.555'. [ 181.771995][ T7842] netlink: 64 bytes leftover after parsing attributes in process `syz.3.565'. [ 182.624641][ T7882] delete_channel: no stack [ 183.158461][ T7901] netlink: 830 bytes leftover after parsing attributes in process `syz.4.595'. [ 184.428754][ T7913] delete_channel: no stack [ 184.491160][ T7934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.607'. [ 184.508852][ T7934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.607'. [ 184.658109][ T7939] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 184.666149][ T7939] netlink: 'syz.4.609': attribute type 4 has an invalid length. [ 184.684302][ T7939] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.609'. [ 184.730755][ T7936] netlink: 'syz.4.609': attribute type 1 has an invalid length. [ 184.774115][ T7936] netlink: 'syz.4.609': attribute type 4 has an invalid length. [ 184.809990][ T5847] Bluetooth: hci2: Malformed LE Event: 0x0d [ 184.814400][ T7936] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.609'. [ 184.817671][ T7949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.982240][ T7959] netlink: 'syz.1.617': attribute type 29 has an invalid length. [ 184.992774][ T7959] netlink: 'syz.1.617': attribute type 29 has an invalid length. [ 185.002916][ T7959] netlink: 44 bytes leftover after parsing attributes in process `syz.1.617'. [ 185.051665][ T7962] netlink: 'syz.1.618': attribute type 5 has an invalid length. [ 185.059955][ T7962] netlink: 176 bytes leftover after parsing attributes in process `syz.1.618'. [ 185.070649][ T7962] netlink: zone id is out of range [ 185.075779][ T7962] netlink: zone id is out of range [ 185.088597][ T7962] netlink: get zone limit has 8 unknown bytes [ 185.525796][ T7982] netlink: 'syz.4.628': attribute type 27 has an invalid length. [ 185.536110][ T7982] netlink: 152 bytes leftover after parsing attributes in process `syz.4.628'. [ 185.546335][ T7982] A link change request failed with some changes committed already. Interface may have been left with an inconsistent configuration, please check. [ 185.565264][ T7982] netlink: 80 bytes leftover after parsing attributes in process `syz.4.628'. [ 185.683316][ T7988] xt_l2tp: missing protocol rule (udp|l2tpip) [ 185.906968][ T7998] netlink: 'syz.3.633': attribute type 2 has an invalid length. [ 185.922252][ T7992] syzkaller0: entered allmulticast mode [ 185.928393][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 185.949961][ T7998] netlink: 'syz.3.633': attribute type 2 has an invalid length. [ 188.029059][ T8055] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 188.794532][ T8084] xt_l2tp: missing protocol rule (udp|l2tpip) [ 189.761722][ T8102] __nla_validate_parse: 6 callbacks suppressed [ 189.761743][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.671'. [ 189.810059][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.671'. [ 189.868944][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.1.671'. [ 190.146395][ T8113] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.436873][ T8125] validate_nla: 1 callbacks suppressed [ 190.436894][ T8125] netlink: 'syz.1.677': attribute type 7 has an invalid length. [ 190.519152][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 190.828637][ T8138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.681'. [ 191.409489][ T8143] netlink: 'syz.0.682': attribute type 10 has an invalid length. [ 191.502645][ T8143] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 192.112905][ T8166] netlink: 'syz.4.689': attribute type 2 has an invalid length. [ 192.153490][ T8166] netlink: 'syz.4.689': attribute type 2 has an invalid length. [ 192.194062][ T8157] syzkaller0: entered promiscuous mode [ 192.216416][ T8157] syzkaller0: entered allmulticast mode [ 193.047863][ T8189] netlink: 'syz.1.696': attribute type 1 has an invalid length. [ 193.137428][ T8189] netlink: 9188 bytes leftover after parsing attributes in process `syz.1.696'. [ 193.437345][ T8196] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 193.704099][ T8205] netlink: 'syz.2.702': attribute type 2 has an invalid length. [ 193.738458][ T8205] netlink: 'syz.2.702': attribute type 2 has an invalid length. [ 194.464710][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.478500][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.739385][ T8188] netlink: 132 bytes leftover after parsing attributes in process `syz.0.697'. [ 194.762065][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.697'. [ 194.771338][ T8194] netlink: 28 bytes leftover after parsing attributes in process `syz.0.697'. [ 194.798316][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.697'. [ 194.951526][ T8221] netlink: 'syz.2.708': attribute type 21 has an invalid length. [ 194.979508][ T8221] netlink: 'syz.2.708': attribute type 1 has an invalid length. [ 195.000519][ T8221] netlink: 132 bytes leftover after parsing attributes in process `syz.2.708'. [ 195.394025][ T8237] netlink: 830 bytes leftover after parsing attributes in process `syz.4.714'. [ 195.723933][ T8227] netlink: 'syz.0.710': attribute type 7 has an invalid length. [ 196.402420][ T8259] netlink: 'syz.3.719': attribute type 2 has an invalid length. [ 196.430565][ T8259] netlink: 'syz.3.719': attribute type 2 has an invalid length. [ 196.902630][ T8283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.732'. [ 196.933706][ T8283] netlink: 60 bytes leftover after parsing attributes in process `syz.2.732'. [ 197.948919][ T8293] netlink: 40 bytes leftover after parsing attributes in process `syz.4.736'. [ 198.196065][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 198.657511][ T8328] netlink: 124 bytes leftover after parsing attributes in process `syz.3.749'. [ 198.691177][ T8328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.749'. [ 199.677741][ T8382] netlink: 'syz.1.772': attribute type 2 has an invalid length. [ 199.708348][ T8382] netlink: 'syz.1.772': attribute type 1 has an invalid length. [ 199.743019][ T8382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.777097][ T8386] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 199.786758][ T8386] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 199.796710][ T8386] __nla_validate_parse: 5 callbacks suppressed [ 199.796743][ T8386] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.773'. [ 199.820855][ T8386] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 199.834931][ T8386] netlink: 'syz.4.773': attribute type 4 has an invalid length. [ 199.843464][ T8386] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.773'. [ 199.843532][ T8390] netlink: 40 bytes leftover after parsing attributes in process `syz.3.774'. [ 200.079903][ T8406] netlink: 40 bytes leftover after parsing attributes in process `syz.0.780'. [ 200.361443][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'. [ 201.397585][ T8431] netlink: 132 bytes leftover after parsing attributes in process `syz.1.787'. [ 201.408051][ T8434] net veth1_virt_wifi : renamed from virt_wifi0 [ 201.670096][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 201.670420][ T5836] Bluetooth: hci0: command 0x0406 tx timeout [ 201.676363][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 201.683400][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 201.689935][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 201.811802][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 201.902917][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 203.071519][ T8478] netlink: 'syz.2.802': attribute type 10 has an invalid length. [ 203.779202][ T8492] netlink: 68 bytes leftover after parsing attributes in process `syz.3.808'. [ 203.851262][ T8491] netlink: 'syz.0.809': attribute type 29 has an invalid length. [ 203.868193][ T8493] netlink: 'syz.0.809': attribute type 29 has an invalid length. [ 204.287927][ T8504] delete_channel: no stack [ 204.513235][ T8512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 205.059502][ T8514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.805619][ T8544] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 206.209369][ T8554] delete_channel: no stack [ 206.387471][ T8570] netlink: 'syz.3.838': attribute type 29 has an invalid length. [ 206.405139][ T8568] netlink: 'syz.3.838': attribute type 29 has an invalid length. [ 206.591565][ T8573] netlink: 'syz.1.839': attribute type 3 has an invalid length. [ 207.574315][ T8594] __nla_validate_parse: 2 callbacks suppressed [ 207.574339][ T8594] netlink: 188 bytes leftover after parsing attributes in process `syz.1.846'. [ 207.646835][ T8595] netlink: 172 bytes leftover after parsing attributes in process `syz.0.847'. [ 207.779505][ T8605] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 207.844267][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 207.849524][ T8610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.851'. [ 207.863484][ T8607] netlink: 312 bytes leftover after parsing attributes in process `syz.0.852'. [ 207.873908][ T8604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.851'. [ 207.904158][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 208.064481][ T8618] netlink: 'syz.4.856': attribute type 3 has an invalid length. [ 208.127735][ T8618] netlink: 132 bytes leftover after parsing attributes in process `syz.4.856'. [ 208.153644][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.857'. [ 208.241600][ T8618] netlink: 'syz.4.856': attribute type 1 has an invalid length. [ 208.276863][ T8618] netlink: 'syz.4.856': attribute type 2 has an invalid length. [ 208.328689][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 208.479595][ T8630] syzkaller0: entered allmulticast mode [ 209.509297][ T8670] xt_l2tp: missing protocol rule (udp|l2tpip) [ 209.862649][ T8688] tc_dump_action: action bad kind [ 209.870981][ T8683] delete_channel: no stack [ 210.681920][ T8692] syz.3.885 (8692) used greatest stack depth: 15360 bytes left [ 211.185452][ T8717] netlink: 'syz.1.892': attribute type 1 has an invalid length. [ 211.214927][ T8726] sctp: [Deprecated]: syz.2.893 (pid 8726) Use of int in max_burst socket option deprecated. [ 211.214927][ T8726] Use struct sctp_assoc_value instead [ 211.331946][ T8726] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.470417][ T8770] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 212.478565][ T8770] netlink: 'syz.3.899': attribute type 4 has an invalid length. [ 212.489199][ T8770] netlink: 'syz.3.899': attribute type 1 has an invalid length. [ 212.501139][ T8770] netlink: 'syz.3.899': attribute type 4 has an invalid length. [ 212.610448][ T8769] netlink: 'syz.4.900': attribute type 27 has an invalid length. [ 212.630680][ T8769] __nla_validate_parse: 9 callbacks suppressed [ 212.630713][ T8769] netlink: 116 bytes leftover after parsing attributes in process `syz.4.900'. [ 212.858838][ T8782] delete_channel: no stack [ 213.548005][ T8807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.622626][ T8807] netlink: 'syz.1.906': attribute type 6 has an invalid length. [ 213.630983][ T8807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.906'. [ 214.365729][ T8818] netlink: 'syz.3.912': attribute type 3 has an invalid length. [ 214.374839][ T8818] netlink: 132 bytes leftover after parsing attributes in process `syz.3.912'. [ 214.432447][ T8820] xt_l2tp: missing protocol rule (udp|l2tpip) [ 214.517504][ T8818] netlink: 128 bytes leftover after parsing attributes in process `syz.3.912'. [ 214.537161][ T8818] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 215.316347][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 215.352453][ T8851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.235084][ T8881] netlink: 'syz.2.935': attribute type 11 has an invalid length. [ 216.351550][ T8884] netlink: 'syz.2.935': attribute type 21 has an invalid length. [ 216.423016][ T8884] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.431357][ T8884] netlink: 'syz.2.935': attribute type 1 has an invalid length. [ 217.114657][ T8898] bridge_slave_1: left allmulticast mode [ 217.122123][ T8898] bridge_slave_1: left promiscuous mode [ 217.130616][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.162911][ T8898] bridge_slave_0: left allmulticast mode [ 217.182047][ T8898] bridge_slave_0: left promiscuous mode [ 217.208331][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.357478][ T8893] netlink: 76 bytes leftover after parsing attributes in process `syz.0.939'. [ 221.905170][ T8996] netlink: 'syz.1.970': attribute type 13 has an invalid length. [ 223.122516][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.982'. [ 223.153944][ T9037] xt_l2tp: missing protocol rule (udp|l2tpip) [ 225.239373][ T6055] tipc: Subscription rejected, illegal request [ 225.370568][ T9109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1008'. [ 225.408944][ T9110] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 226.173125][ T9068] netlink: 11930 bytes leftover after parsing attributes in process `syz.3.991'. [ 226.239900][ T9128] netlink: 'syz.4.1013': attribute type 29 has an invalid length. [ 226.252678][ T9128] netlink: 'syz.4.1013': attribute type 29 has an invalid length. [ 226.421191][ T9132] Can't find ip_set type [ 226.475819][ T9134] Can't find ip_set type [ 227.070435][ T9155] netlink: 'syz.1.1021': attribute type 2 has an invalid length. [ 227.080975][ T9155] netlink: 'syz.1.1021': attribute type 3 has an invalid length. [ 227.092964][ T9155] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1021'. [ 229.756715][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 229.816628][ T9176] netlink: 'syz.3.1028': attribute type 10 has an invalid length. [ 229.949950][ T9176] hsr_slave_0 (unregistering): left promiscuous mode [ 230.597516][ T9202] FAULT_INJECTION: forcing a failure. [ 230.597516][ T9202] name failslab, interval 1, probability 0, space 0, times 0 [ 230.628951][ T9202] CPU: 1 UID: 0 PID: 9202 Comm: syz.2.1035 Not tainted syzkaller #0 PREEMPT(full) [ 230.628977][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.628989][ T9202] Call Trace: [ 230.628999][ T9202] [ 230.629010][ T9202] dump_stack_lvl+0xe8/0x150 [ 230.629053][ T9202] should_fail_ex+0x412/0x560 [ 230.629106][ T9202] should_failslab+0xa8/0x100 [ 230.629143][ T9202] __kmalloc_noprof+0xde/0x7e0 [ 230.629165][ T9202] ? kfree+0x4d/0x650 [ 230.629186][ T9202] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 230.629244][ T9202] tomoyo_realpath_from_path+0xe3/0x5d0 [ 230.629323][ T9202] ? tomoyo_path_number_perm+0x219/0x630 [ 230.629353][ T9202] tomoyo_path_number_perm+0x246/0x630 [ 230.629396][ T9202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 230.629420][ T9202] ? __lock_acquire+0x6b5/0x2cf0 [ 230.629516][ T9202] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 230.629639][ T9202] ? __fget_files+0x2a/0x420 [ 230.629682][ T9202] ? __fget_files+0x2a/0x420 [ 230.629706][ T9202] ? __fget_files+0x3a0/0x420 [ 230.629730][ T9202] ? __fget_files+0x2a/0x420 [ 230.629779][ T9202] security_file_ioctl+0xc3/0x2a0 [ 230.629818][ T9202] __se_sys_ioctl+0x47/0x170 [ 230.629859][ T9202] do_syscall_64+0xe2/0xf80 [ 230.629886][ T9202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.629909][ T9202] ? trace_irq_disable+0x37/0x100 [ 230.629930][ T9202] ? clear_bhb_loop+0x60/0xb0 [ 230.629970][ T9202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.629989][ T9202] RIP: 0033:0x7f04a439acb9 [ 230.630013][ T9202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.630027][ T9202] RSP: 002b:00007f04a5243028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 230.630046][ T9202] RAX: ffffffffffffffda RBX: 00007f04a4615fa0 RCX: 00007f04a439acb9 [ 230.630060][ T9202] RDX: 0000200000000180 RSI: 00000000401054d5 RDI: 0000000000000003 [ 230.630072][ T9202] RBP: 00007f04a5243090 R08: 0000000000000000 R09: 0000000000000000 [ 230.630083][ T9202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.630094][ T9202] R13: 00007f04a4616038 R14: 00007f04a4615fa0 R15: 00007ffee19a68e8 [ 230.630190][ T9202] [ 230.871720][ T9202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 231.285696][ T9206] netlink: 'syz.4.1036': attribute type 2 has an invalid length. [ 231.359364][ T9207] netlink: 'syz.4.1036': attribute type 3 has an invalid length. [ 231.533699][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'. [ 231.598205][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1037'. [ 232.509302][ T9233] workqueue: name exceeds WQ_NAME_LEN. Truncating to: &%Q0@æjʫ} [ 232.560194][ T9234] netlink: 'syz.3.1044': attribute type 5 has an invalid length. [ 232.568057][ T9234] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1044'. [ 232.616665][ T9225] netlink: 'syz.1.1042': attribute type 5 has an invalid length. [ 232.625036][ T9225] netlink: 'syz.1.1042': attribute type 5 has an invalid length. [ 233.083926][ T9240] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1046'. [ 234.190962][ T9254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1050'. [ 234.382988][ T9262] netlink: 'syz.0.1052': attribute type 10 has an invalid length. [ 234.581835][ T9266] netlink: 'syz.3.1055': attribute type 8 has an invalid length. [ 235.289487][ T9279] veth0_vlan: entered allmulticast mode [ 235.369374][ T9282] : renamed from vlan1 [ 235.553479][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1063'. [ 235.588484][ T9304] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1064'. [ 235.605062][ T9304] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1064'. [ 235.621668][ T9304] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 235.745732][ T9304] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 235.951965][ T9310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.014848][ T9312] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1070'. [ 236.149509][ T9322] netlink: 284 bytes leftover after parsing attributes in process `syz.2.1071'. [ 236.188948][ T9320] netlink: 'syz.4.1072': attribute type 9 has an invalid length. [ 236.223242][ T9320] netlink: 'syz.4.1072': attribute type 4 has an invalid length. [ 236.534357][ T9338] xt_l2tp: missing protocol rule (udp|l2tpip) [ 236.863777][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 236.877139][ T9355] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1082'. [ 236.893245][ T9355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 236.939314][ T736] tipc: Subscription rejected, illegal request [ 236.966797][ T9352] netlink: 'syz.3.1080': attribute type 21 has an invalid length. [ 237.357610][ T9362] xt_l2tp: missing protocol rule (udp|l2tpip) [ 237.923871][ T9369] syzkaller0: entered allmulticast mode [ 238.054566][ T9391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 238.064565][ T9390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1090'. [ 240.611989][ T9446] netlink: 'syz.0.1109': attribute type 10 has an invalid length. [ 241.139781][ T9460] __nla_validate_parse: 6 callbacks suppressed [ 241.139803][ T9460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1114'. [ 241.168484][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 241.254476][ T9455] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1111'. [ 241.284226][ T9455] netlink: 'syz.1.1111': attribute type 21 has an invalid length. [ 241.328473][ T9455] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1111'. [ 241.618889][ T9467] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1117'. [ 241.636777][ T9468] xt_NFQUEUE: number of queues (65297) out of range (got 111634) [ 241.655487][ T9467] bridge0: port 4(veth0_to_bridge) entered blocking state [ 241.663439][ T9467] bridge0: port 4(veth0_to_bridge) entered disabled state [ 241.719790][ T9467] veth0_to_bridge: entered allmulticast mode [ 241.728024][ T9467] veth0_to_bridge: entered promiscuous mode [ 241.779754][ T9467] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 241.796503][ T9467] bridge0: port 4(veth0_to_bridge) entered blocking state [ 241.804444][ T9467] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 241.962728][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1117'. [ 241.976517][ T9481] netlink: 'syz.4.1121': attribute type 39 has an invalid length. [ 242.183702][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1126'. [ 242.213504][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 244.536253][ T9567] delete_channel: no stack [ 244.637543][ T9575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1152'. [ 245.181290][ T9598] netlink: 548 bytes leftover after parsing attributes in process `syz.1.1159'. [ 246.288432][ T9604] delete_channel: no stack [ 249.663116][ T9659] __nla_validate_parse: 2 callbacks suppressed [ 249.663141][ T9659] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1181'. [ 250.499685][ T9683] FAULT_INJECTION: forcing a failure. [ 250.499685][ T9683] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 250.516313][ T9683] CPU: 1 UID: 0 PID: 9683 Comm: syz.2.1186 Not tainted syzkaller #0 PREEMPT(full) [ 250.516338][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.516349][ T9683] Call Trace: [ 250.516357][ T9683] [ 250.516364][ T9683] dump_stack_lvl+0xe8/0x150 [ 250.516389][ T9683] should_fail_ex+0x412/0x560 [ 250.516411][ T9683] _copy_to_user+0x31/0xb0 [ 250.516435][ T9683] bpf_test_finish+0x53c/0x6b0 [ 250.516467][ T9683] ? __pfx____migrate_enable+0x10/0x10 [ 250.516491][ T9683] ? __pfx_bpf_test_finish+0x10/0x10 [ 250.516533][ T9683] bpf_prog_test_run_flow_dissector+0x478/0x610 [ 250.516572][ T9683] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 250.516600][ T9683] ? __fget_files+0x2a/0x420 [ 250.516638][ T9683] ? __fget_files+0x2a/0x420 [ 250.516663][ T9683] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 250.516688][ T9683] bpf_prog_test_run+0x2c7/0x340 [ 250.516719][ T9683] __sys_bpf+0x643/0x950 [ 250.516743][ T9683] ? __pfx___sys_bpf+0x10/0x10 [ 250.516783][ T9683] ? ksys_write+0x242/0x270 [ 250.516805][ T9683] ? __pfx_ksys_write+0x10/0x10 [ 250.516830][ T9683] __x64_sys_bpf+0x7c/0x90 [ 250.516851][ T9683] do_syscall_64+0xe2/0xf80 [ 250.516871][ T9683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.516887][ T9683] ? trace_irq_disable+0x37/0x100 [ 250.516907][ T9683] ? clear_bhb_loop+0x60/0xb0 [ 250.516926][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.516941][ T9683] RIP: 0033:0x7f04a439acb9 [ 250.516958][ T9683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.516972][ T9683] RSP: 002b:00007f04a5243028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 250.516990][ T9683] RAX: ffffffffffffffda RBX: 00007f04a4615fa0 RCX: 00007f04a439acb9 [ 250.517003][ T9683] RDX: 0000000000000050 RSI: 0000200000000540 RDI: 000000000000000a [ 250.517014][ T9683] RBP: 00007f04a5243090 R08: 0000000000000000 R09: 0000000000000000 [ 250.517023][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.517032][ T9683] R13: 00007f04a4616038 R14: 00007f04a4615fa0 R15: 00007ffee19a68e8 [ 250.517064][ T9683] [ 251.119258][ T9702] delete_channel: no stack [ 254.232777][ T9767] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1210'. [ 255.279257][ T9777] delete_channel: no stack [ 255.911732][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.918418][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.531535][ T9813] netlink: 'syz.2.1226': attribute type 9 has an invalid length. [ 258.638765][ T9813] netlink: 'syz.2.1226': attribute type 4 has an invalid length. [ 259.589727][ T9826] delete_channel: no stack [ 263.685841][ T9874] delete_channel: no stack [ 264.084232][ T9888] netlink: 'syz.0.1247': attribute type 9 has an invalid length. [ 264.162343][ T9888] netlink: 'syz.0.1247': attribute type 4 has an invalid length. [ 266.410143][ T9938] netlink: 'syz.2.1265': attribute type 2 has an invalid length. [ 266.428501][ T9938] netlink: 'syz.2.1265': attribute type 2 has an invalid length. [ 266.503810][ T9936] delete_channel: no stack [ 267.469400][ T9977] netlink: 'syz.3.1278': attribute type 10 has an invalid length. [ 267.495047][ T9977] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.525716][ T9977] bond0: (slave team0): Enslaving as an active interface with an up link [ 267.537018][ T3507] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 267.618680][ T9982] netlink: 'syz.0.1279': attribute type 9 has an invalid length. [ 267.641752][ T9982] netlink: 'syz.0.1279': attribute type 4 has an invalid length. [ 268.000065][ T9999] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 268.267536][T10016] xt_l2tp: missing protocol rule (udp|l2tpip) [ 269.027911][T10021] netlink: 'syz.3.1296': attribute type 1 has an invalid length. [ 269.040680][T10021] netlink: 10084 bytes leftover after parsing attributes in process `syz.3.1296'. [ 269.705467][T10045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1305'. [ 270.164847][ T6653] tipc: Subscription rejected, illegal request [ 271.755184][T10090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1321'. [ 271.790130][T10090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1321'. [ 271.823456][T10092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 271.853108][T10092] netlink: 32740 bytes leftover after parsing attributes in process `syz.0.1322'. [ 272.581677][T10125] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1333'. [ 272.594309][T10121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.906016][T10143] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1339'. [ 272.928495][T10131] netlink: 'syz.1.1335': attribute type 12 has an invalid length. [ 272.943386][T10131] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1335'. [ 272.965192][T10143] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1339'. [ 273.996759][T10164] netlink: 'syz.0.1344': attribute type 2 has an invalid length. [ 274.057392][T10164] : entered promiscuous mode [ 274.082842][T10163] netlink: 'syz.0.1344': attribute type 2 has an invalid length. [ 274.117273][T10163] : left promiscuous mode [ 274.401016][T10180] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1351'. [ 274.742871][T10181] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1349'. [ 274.904704][T10186] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 274.928857][T10189] FAULT_INJECTION: forcing a failure. [ 274.928857][T10189] name failslab, interval 1, probability 0, space 0, times 0 [ 274.998363][T10189] CPU: 1 UID: 0 PID: 10189 Comm: syz.1.1354 Not tainted syzkaller #0 PREEMPT(full) [ 274.998391][T10189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 274.998402][T10189] Call Trace: [ 274.998409][T10189] [ 274.998421][T10189] dump_stack_lvl+0xe8/0x150 [ 274.998449][T10189] should_fail_ex+0x412/0x560 [ 274.998474][T10189] should_failslab+0xa8/0x100 [ 274.998498][T10189] __kmalloc_noprof+0xde/0x7e0 [ 274.998517][T10189] ? bpf_test_init+0x9f/0x150 [ 274.998547][T10189] bpf_test_init+0x9f/0x150 [ 274.998575][T10189] bpf_prog_test_run_skb+0x375/0x1d50 [ 274.998606][T10189] ? __fget_files+0x2a/0x420 [ 274.998632][T10189] ? __fget_files+0x2a/0x420 [ 274.998653][T10189] ? __fget_files+0x3a0/0x420 [ 274.998674][T10189] ? __fget_files+0x2a/0x420 [ 274.998700][T10189] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 274.998726][T10189] bpf_prog_test_run+0x2c7/0x340 [ 274.998754][T10189] __sys_bpf+0x643/0x950 [ 274.998779][T10189] ? __pfx___sys_bpf+0x10/0x10 [ 274.998816][T10189] ? do_syscall_64+0x9f/0xf80 [ 274.998839][T10189] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 274.998866][T10189] ? __pfx_ksys_write+0x10/0x10 [ 274.998892][T10189] __x64_sys_bpf+0x7c/0x90 [ 274.998915][T10189] do_syscall_64+0xe2/0xf80 [ 274.998936][T10189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.998953][T10189] ? trace_irq_disable+0x37/0x100 [ 274.998973][T10189] ? clear_bhb_loop+0x60/0xb0 [ 274.999017][T10189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.999035][T10189] RIP: 0033:0x7f83dd59acb9 [ 274.999052][T10189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.999066][T10189] RSP: 002b:00007f83de375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 274.999086][T10189] RAX: ffffffffffffffda RBX: 00007f83dd815fa0 RCX: 00007f83dd59acb9 [ 274.999099][T10189] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 274.999110][T10189] RBP: 00007f83de375090 R08: 0000000000000000 R09: 0000000000000000 [ 274.999121][T10189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.999132][T10189] R13: 00007f83dd816038 R14: 00007f83dd815fa0 R15: 00007ffecf4ee3d8 [ 274.999161][T10189] [ 275.989423][T10219] syzkaller0: entered promiscuous mode [ 275.995025][T10219] syzkaller0: entered allmulticast mode [ 276.010540][T10214] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1363'. [ 276.027537][T10222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.855972][T10255] netlink: 'syz.2.1373': attribute type 3 has an invalid length. [ 276.894494][T10255] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1373'. [ 278.259594][T10253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1371'. [ 278.261476][T10238] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 278.278635][T10238] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 278.278854][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1371'. [ 278.288317][T10238] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 278.388402][T10254] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1371'. [ 278.501041][T10267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'. [ 278.525143][T10269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1375'. [ 278.555074][T10277] netlink: 'syz.1.1378': attribute type 39 has an invalid length. [ 278.797446][T10283] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1379'. [ 279.452351][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1389'. [ 279.494168][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1389'. [ 279.535089][T10317] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1389'. [ 279.890895][T10332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.920885][T10331] netlink: 'syz.4.1396': attribute type 1 has an invalid length. [ 280.006431][T10331] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1396'. [ 280.065169][T10336] netlink: 'syz.1.1398': attribute type 2 has an invalid length. [ 280.107006][T10336] netlink: 'syz.1.1398': attribute type 2 has an invalid length. [ 280.804590][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 280.833324][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1404'. [ 280.923623][T10357] FAULT_INJECTION: forcing a failure. [ 280.923623][T10357] name failslab, interval 1, probability 0, space 0, times 0 [ 280.992397][T10357] CPU: 1 UID: 0 PID: 10357 Comm: syz.4.1405 Not tainted syzkaller #0 PREEMPT(full) [ 280.992425][T10357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 280.992436][T10357] Call Trace: [ 280.992444][T10357] [ 280.992452][T10357] dump_stack_lvl+0xe8/0x150 [ 280.992481][T10357] should_fail_ex+0x412/0x560 [ 280.992515][T10357] should_failslab+0xa8/0x100 [ 280.992541][T10357] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 280.992570][T10357] ? __d_alloc+0x37/0x6f0 [ 280.992601][T10357] __d_alloc+0x37/0x6f0 [ 280.992626][T10357] ? perf_trace_lock+0xf8/0x3f0 [ 280.992650][T10357] d_alloc_pseudo+0x21/0xc0 [ 280.992676][T10357] alloc_file_pseudo+0xdd/0x240 [ 280.992705][T10357] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 280.992730][T10357] ? idr_preload_end+0xe4/0x200 [ 280.992767][T10357] anon_inode_getfile+0xc5/0x1a0 [ 280.992791][T10357] bpf_link_prime+0xfc/0x220 [ 280.992816][T10357] bpf_raw_tp_link_attach+0x4c4/0x700 [ 280.992842][T10357] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 280.992876][T10357] ? __fget_files+0x2a/0x420 [ 280.992910][T10357] bpf_raw_tracepoint_open+0x1b2/0x220 [ 280.992939][T10357] __sys_bpf+0x846/0x950 [ 280.992965][T10357] ? __pfx___sys_bpf+0x10/0x10 [ 280.993006][T10357] ? do_syscall_64+0x9f/0xf80 [ 280.993031][T10357] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 280.993057][T10357] ? __pfx_ksys_write+0x10/0x10 [ 280.993086][T10357] __x64_sys_bpf+0x7c/0x90 [ 280.993109][T10357] do_syscall_64+0xe2/0xf80 [ 280.993131][T10357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.993147][T10357] ? trace_irq_disable+0x37/0x100 [ 280.993168][T10357] ? clear_bhb_loop+0x60/0xb0 [ 280.993190][T10357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.993208][T10357] RIP: 0033:0x7faab199acb9 [ 280.993225][T10357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.993239][T10357] RSP: 002b:00007faab2915028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 280.993258][T10357] RAX: ffffffffffffffda RBX: 00007faab1c15fa0 RCX: 00007faab199acb9 [ 280.993271][T10357] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000011 [ 280.993283][T10357] RBP: 00007faab2915090 R08: 0000000000000000 R09: 0000000000000000 [ 280.993293][T10357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.993303][T10357] R13: 00007faab1c16038 R14: 00007faab1c15fa0 R15: 00007ffe02cb5778 [ 280.993336][T10357] [ 281.361099][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1389'. [ 281.518366][ T52] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 281.717297][T10381] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1412'. [ 281.741264][T10382] netlink: 'syz.2.1414': attribute type 2 has an invalid length. [ 281.751255][T10382] netlink: 'syz.2.1414': attribute type 2 has an invalid length. [ 282.065908][T10392] xt_l2tp: missing protocol rule (udp|l2tpip) [ 282.576285][T10411] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1425'. [ 282.595937][T10410] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1425'. [ 282.760617][T10413] netlink: 'syz.0.1426': attribute type 2 has an invalid length. [ 282.788365][T10413] netlink: 'syz.0.1426': attribute type 2 has an invalid length. [ 283.600974][T10452] FAULT_INJECTION: forcing a failure. [ 283.600974][T10452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.602005][T10452] [ 283.602014][T10452] ====================================================== [ 283.602021][T10452] WARNING: possible circular locking dependency detected [ 283.602042][T10452] syzkaller #0 Not tainted [ 283.602051][T10452] ------------------------------------------------------ [ 283.602057][T10452] syz.1.1438/10452 is trying to acquire lock: [ 283.602066][T10452] ffffffff8e3359a0 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x123/0xb20 [ 283.602117][T10452] [ 283.602117][T10452] but task is already holding lock: [ 283.602122][T10452] ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 283.602159][T10452] [ 283.602159][T10452] which lock already depends on the new lock. [ 283.602159][T10452] [ 283.602164][T10452] [ 283.602164][T10452] the existing dependency chain (in reverse order) is: [ 283.602168][T10452] [ 283.602168][T10452] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 283.602186][T10452] _raw_spin_lock_nested+0x32/0x50 [ 283.602203][T10452] raw_spin_rq_lock_nested+0x2a/0x140 [ 283.602218][T10452] task_rq_lock+0xbc/0x460 [ 283.602233][T10452] cgroup_move_task+0x9a/0x2b0 [ 283.602252][T10452] css_set_move_task+0x658/0x9e0 [ 283.602268][T10452] cgroup_post_fork+0x209/0x7d0 [ 283.602282][T10452] copy_process+0x365f/0x3980 [ 283.602299][T10452] kernel_clone+0x248/0x870 [ 283.602315][T10452] user_mode_thread+0x110/0x180 [ 283.602332][T10452] rest_init+0x23/0x300 [ 283.602345][T10452] start_kernel+0x380/0x3d0 [ 283.602359][T10452] x86_64_start_reservations+0x24/0x30 [ 283.602379][T10452] x86_64_start_kernel+0x143/0x1c0 [ 283.602398][T10452] common_startup_64+0x13e/0x147 [ 283.602426][T10452] [ 283.602426][T10452] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 283.602449][T10452] _raw_spin_lock_irqsave+0x40/0x60 [ 283.602467][T10452] try_to_wake_up+0x66/0x12a0 [ 283.602487][T10452] create_worker+0x5c6/0x7e0 [ 283.602508][T10452] workqueue_init+0x3ea/0x690 [ 283.602527][T10452] kernel_init_freeable+0x274/0x3d0 [ 283.602543][T10452] kernel_init+0x1d/0x1d0 [ 283.602557][T10452] ret_from_fork+0x51b/0xa40 [ 283.602571][T10452] ret_from_fork_asm+0x1a/0x30 [ 283.602592][T10452] [ 283.602592][T10452] -> #3 (&pool->lock){-.-.}-{2:2}: [ 283.602614][T10452] _raw_spin_lock+0x2e/0x40 [ 283.602630][T10452] __queue_work+0x7ea/0xf90 [ 283.602646][T10452] queue_work_on+0x106/0x1c0 [ 283.602661][T10452] rpm_suspend+0xe85/0x1700 [ 283.602678][T10452] __pm_runtime_idle+0x12f/0x1a0 [ 283.602695][T10452] __device_attach+0x34f/0x450 [ 283.602712][T10452] device_initial_probe+0xa1/0xd0 [ 283.602730][T10452] bus_probe_device+0x12a/0x220 [ 283.602745][T10452] device_add+0x7b6/0xb70 [ 283.602761][T10452] serial_base_port_add+0x18f/0x260 [ 283.602781][T10452] serial_core_register_port+0x375/0x2840 [ 283.602797][T10452] serial8250_register_8250_port+0x1658/0x1fd0 [ 283.602819][T10452] serial_pnp_probe+0x568/0x7f0 [ 283.602834][T10452] pnp_device_probe+0x30b/0x4c0 [ 283.602848][T10452] really_probe+0x26d/0xac0 [ 283.602866][T10452] __driver_probe_device+0x18c/0x320 [ 283.602884][T10452] driver_probe_device+0x4f/0x240 [ 283.602903][T10452] __driver_attach+0x349/0x640 [ 283.602921][T10452] bus_for_each_dev+0x23b/0x2c0 [ 283.602935][T10452] bus_add_driver+0x345/0x670 [ 283.602949][T10452] driver_register+0x23a/0x320 [ 283.602968][T10452] serial8250_init+0x8f/0x160 [ 283.602988][T10452] do_one_initcall+0x250/0x840 [ 283.603007][T10452] do_initcall_level+0x104/0x190 [ 283.603022][T10452] do_initcalls+0x59/0xa0 [ 283.603036][T10452] kernel_init_freeable+0x2a6/0x3d0 [ 283.603052][T10452] kernel_init+0x1d/0x1d0 [ 283.603065][T10452] ret_from_fork+0x51b/0xa40 [ 283.603078][T10452] ret_from_fork_asm+0x1a/0x30 [ 283.603098][T10452] [ 283.603098][T10452] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 283.603120][T10452] _raw_spin_lock_irqsave+0x40/0x60 [ 283.603137][T10452] __pm_runtime_resume+0x10f/0x180 [ 283.603155][T10452] __uart_start+0x171/0x460 [ 283.603169][T10452] uart_write+0xdc/0x130 [ 283.603184][T10452] n_tty_write+0xd84/0x12a0 [ 283.603203][T10452] file_tty_write+0x559/0xa20 [ 283.603217][T10452] vfs_write+0x61d/0xb90 [ 283.603232][T10452] ksys_write+0x150/0x270 [ 283.603247][T10452] do_syscall_64+0xe2/0xf80 [ 283.603266][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.603281][T10452] [ 283.603281][T10452] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 283.603303][T10452] _raw_spin_lock_irqsave+0x40/0x60 [ 283.603320][T10452] serial8250_console_write+0x150/0x1ba0 [ 283.603338][T10452] console_flush_all+0x718/0xb20 [ 283.603356][T10452] console_unlock+0xd1/0x1c0 [ 283.603373][T10452] vprintk_emit+0x485/0x560 [ 283.603391][T10452] _printk+0xdd/0x130 [ 283.603419][T10452] register_console+0xbad/0xf80 [ 283.603438][T10452] univ8250_console_init+0x3a/0x70 [ 283.603458][T10452] console_init+0xfc/0x3e0 [ 283.603476][T10452] start_kernel+0x226/0x3d0 [ 283.603490][T10452] x86_64_start_reservations+0x24/0x30 [ 283.603509][T10452] x86_64_start_kernel+0x143/0x1c0 [ 283.603528][T10452] common_startup_64+0x13e/0x147 [ 283.603546][T10452] [ 283.603546][T10452] -> #0 (console_owner){-.-.}-{0:0}: [ 283.603568][T10452] __lock_acquire+0x15a5/0x2cf0 [ 283.603583][T10452] lock_acquire+0x106/0x330 [ 283.603596][T10452] console_flush_all+0x6c1/0xb20 [ 283.603615][T10452] console_unlock+0xd1/0x1c0 [ 283.603632][T10452] vprintk_emit+0x485/0x560 [ 283.603649][T10452] _printk+0xdd/0x130 [ 283.603668][T10452] should_fail_ex+0x3f3/0x560 [ 283.603684][T10452] strncpy_from_user+0x36/0x2b0 [ 283.603698][T10452] strncpy_from_user_nofault+0x71/0x150 [ 283.603717][T10452] bpf_probe_read_user_str+0x2a/0x70 [ 283.603734][T10452] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 283.603748][T10452] bpf_trace_run4+0x2b0/0x4e0 [ 283.603767][T10452] __bpf_trace_sched_switch+0x1cb/0x230 [ 283.603789][T10452] __traceiter_sched_switch+0x9d/0xd0 [ 283.603813][T10452] __schedule+0x25a3/0x4fb0 [ 283.603829][T10452] preempt_schedule_common+0x82/0xd0 [ 283.603848][T10452] preempt_schedule_thunk+0x16/0x30 [ 283.603861][T10452] on_each_cpu_cond_mask+0x7a/0x80 [ 283.603884][T10452] smp_text_poke_batch_finish+0xec2/0x1160 [ 283.603906][T10452] arch_jump_label_transform_apply+0x1c/0x30 [ 283.603929][T10452] static_key_enable_cpuslocked+0x128/0x240 [ 283.603952][T10452] static_key_enable+0x1a/0x20 [ 283.603971][T10452] tracepoint_add_func+0x7c9/0x950 [ 283.603991][T10452] tracepoint_probe_register_prio_may_exist+0x5f/0xa0 [ 283.604013][T10452] bpf_raw_tp_link_attach+0x51a/0x700 [ 283.604029][T10452] bpf_raw_tracepoint_open+0x1b2/0x220 [ 283.604051][T10452] __sys_bpf+0x846/0x950 [ 283.604069][T10452] __x64_sys_bpf+0x7c/0x90 [ 283.604086][T10452] do_syscall_64+0xe2/0xf80 [ 283.604104][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.604119][T10452] [ 283.604119][T10452] other info that might help us debug this: [ 283.604119][T10452] [ 283.604125][T10452] Chain exists of: [ 283.604125][T10452] console_owner --> &p->pi_lock --> &rq->__lock [ 283.604125][T10452] [ 283.604151][T10452] Possible unsafe locking scenario: [ 283.604151][T10452] [ 283.604156][T10452] CPU0 CPU1 [ 283.604162][T10452] ---- ---- [ 283.604167][T10452] lock(&rq->__lock); [ 283.604178][T10452] lock(&p->pi_lock); [ 283.604190][T10452] lock(&rq->__lock); [ 283.604202][T10452] lock(console_owner); [ 283.604213][T10452] [ 283.604213][T10452] *** DEADLOCK *** [ 283.604213][T10452] [ 283.604217][T10452] 8 locks held by syz.1.1438/10452: [ 283.604227][T10452] #0: ffffffff8e399c48 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register_prio_may_exist+0x43/0xa0 [ 283.604273][T10452] #1: ffffffff8e1d9330 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 283.604318][T10452] #2: ffffffff8e401148 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 283.604363][T10452] #3: ffffffff8e1ecae8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 283.604414][T10452] #4: ffff8880b873a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 283.604454][T10452] #5: ffffffff8e341b20 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1be/0x4e0 [ 283.604497][T10452] #6: ffffffff8e335a00 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 283.604541][T10452] #7: ffffffff8e21d2b8 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xb20 [ 283.604585][T10452] [ 283.604585][T10452] stack backtrace: [ 283.604594][T10452] CPU: 1 UID: 0 PID: 10452 Comm: syz.1.1438 Not tainted syzkaller #0 PREEMPT(full) [ 283.604613][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.604624][T10452] Call Trace: [ 283.604631][T10452] [ 283.604638][T10452] dump_stack_lvl+0xe8/0x150 [ 283.604660][T10452] print_circular_bug+0x2e1/0x300 [ 283.604684][T10452] check_noncircular+0x12e/0x150 [ 283.604710][T10452] __lock_acquire+0x15a5/0x2cf0 [ 283.604744][T10452] ? console_flush_all+0x123/0xb20 [ 283.604765][T10452] lock_acquire+0x106/0x330 [ 283.604781][T10452] ? console_flush_all+0x123/0xb20 [ 283.604808][T10452] ? do_raw_spin_unlock+0x121/0x230 [ 283.604831][T10452] ? console_flush_all+0x123/0xb20 [ 283.604852][T10452] console_flush_all+0x6c1/0xb20 [ 283.604873][T10452] ? console_flush_all+0x123/0xb20 [ 283.604897][T10452] ? console_flush_all+0x123/0xb20 [ 283.604922][T10452] ? __pfx_console_flush_all+0x10/0x10 [ 283.604947][T10452] ? is_printk_cpu_sync_owner+0x32/0x40 [ 283.604974][T10452] console_unlock+0xd1/0x1c0 [ 283.604997][T10452] ? __pfx_console_unlock+0x10/0x10 [ 283.605016][T10452] ? _raw_spin_unlock_irqrestore+0x20/0x80 [ 283.605035][T10452] ? _printk+0xdd/0x130 [ 283.605062][T10452] vprintk_emit+0x485/0x560 [ 283.605084][T10452] ? __pfx_vprintk_emit+0x10/0x10 [ 283.605111][T10452] _printk+0xdd/0x130 [ 283.605138][T10452] ? __pfx__printk+0x10/0x10 [ 283.605164][T10452] ? ___ratelimit+0x58c/0x8d0 [ 283.605188][T10452] should_fail_ex+0x3f3/0x560 [ 283.605209][T10452] strncpy_from_user+0x36/0x2b0 [ 283.605229][T10452] strncpy_from_user_nofault+0x71/0x150 [ 283.605251][T10452] bpf_probe_read_user_str+0x2a/0x70 [ 283.605270][T10452] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 283.605286][T10452] bpf_trace_run4+0x2b0/0x4e0 [ 283.605309][T10452] ? bpf_trace_run4+0x1be/0x4e0 [ 283.605330][T10452] ? __pfx_bpf_trace_run4+0x10/0x10 [ 283.605355][T10452] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 283.605374][T10452] ? __bpf_trace_sched_switch+0x1a4/0x230 [ 283.605406][T10452] __bpf_trace_sched_switch+0x1cb/0x230 [ 283.605432][T10452] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 283.605455][T10452] ? psi_group_change+0xab8/0x1050 [ 283.605482][T10452] ? __schedule+0x24fd/0x4fb0 [ 283.605504][T10452] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 283.605526][T10452] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 283.605550][T10452] __traceiter_sched_switch+0x9d/0xd0 [ 283.605575][T10452] __schedule+0x25a3/0x4fb0 [ 283.605612][T10452] ? __pfx_do_sync_core+0x10/0x10 [ 283.605631][T10452] ? smp_call_function_many_cond+0xde6/0x1270 [ 283.605655][T10452] ? __pfx___schedule+0x10/0x10 [ 283.605676][T10452] ? __pfx_do_sync_core+0x10/0x10 [ 283.605701][T10452] ? preempt_schedule_thunk+0x16/0x30 [ 283.605718][T10452] preempt_schedule_common+0x82/0xd0 [ 283.605739][T10452] ? __pfx_do_sync_core+0x10/0x10 [ 283.605758][T10452] preempt_schedule_thunk+0x16/0x30 [ 283.605776][T10452] ? on_each_cpu_cond_mask+0x75/0x80 [ 283.605801][T10452] on_each_cpu_cond_mask+0x7a/0x80 [ 283.605826][T10452] smp_text_poke_batch_finish+0xec2/0x1160 [ 283.605855][T10452] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 283.605881][T10452] ? arch_jump_label_transform_queue+0x97/0x110 [ 283.605907][T10452] ? __jump_label_update+0x35a/0x380 [ 283.605935][T10452] arch_jump_label_transform_apply+0x1c/0x30 [ 283.605959][T10452] static_key_enable_cpuslocked+0x128/0x240 [ 283.605983][T10452] static_key_enable+0x1a/0x20 [ 283.606005][T10452] tracepoint_add_func+0x7c9/0x950 [ 283.606035][T10452] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 283.606057][T10452] tracepoint_probe_register_prio_may_exist+0x5f/0xa0 [ 283.606080][T10452] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 283.606105][T10452] bpf_raw_tp_link_attach+0x51a/0x700 [ 283.606127][T10452] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 283.606153][T10452] ? __fget_files+0x2a/0x420 [ 283.606181][T10452] bpf_raw_tracepoint_open+0x1b2/0x220 [ 283.606207][T10452] __sys_bpf+0x846/0x950 [ 283.606230][T10452] ? __pfx___sys_bpf+0x10/0x10 [ 283.606263][T10452] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 283.606285][T10452] ? ksys_write+0x242/0x270 [ 283.606304][T10452] ? __pfx_ksys_write+0x10/0x10 [ 283.606327][T10452] __x64_sys_bpf+0x7c/0x90 [ 283.606348][T10452] do_syscall_64+0xe2/0xf80 [ 283.606369][T10452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.606385][T10452] ? trace_irq_disable+0x37/0x100 [ 283.606422][T10452] ? clear_bhb_loop+0x60/0xb0 [ 283.606442][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.606459][T10452] RIP: 0033:0x7f83dd59acb9 [ 283.606475][T10452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.606489][T10452] RSP: 002b:00007f83de375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 283.606506][T10452] RAX: ffffffffffffffda RBX: 00007f83dd815fa0 RCX: 00007f83dd59acb9 [ 283.606520][T10452] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000011 [ 283.606531][T10452] RBP: 00007f83de375090 R08: 0000000000000000 R09: 0000000000000000 [ 283.606542][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.606552][T10452] R13: 00007f83dd816038 R14: 00007f83dd815fa0 R15: 00007ffecf4ee3d8 [ 283.606577][T10452] [ 284.979477][T10452] CPU: 1 UID: 0 PID: 10452 Comm: syz.1.1438 Not tainted syzkaller #0 PREEMPT(full) [ 284.979496][T10452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 284.979504][T10452] Call Trace: [ 284.979513][T10452] [ 284.979519][T10452] dump_stack_lvl+0xe8/0x150 [ 284.979540][T10452] should_fail_ex+0x412/0x560 [ 284.979554][T10452] strncpy_from_user+0x36/0x2b0 [ 284.979567][T10452] strncpy_from_user_nofault+0x71/0x150 [ 284.979581][T10452] bpf_probe_read_user_str+0x2a/0x70 [ 284.979595][T10452] bpf_prog_c762caf419d1c004+0x3e/0x44 [ 284.979605][T10452] bpf_trace_run4+0x2b0/0x4e0 [ 284.979620][T10452] ? bpf_trace_run4+0x1be/0x4e0 [ 284.979632][T10452] ? __pfx_bpf_trace_run4+0x10/0x10 [ 284.979647][T10452] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 284.979660][T10452] ? __bpf_trace_sched_switch+0x1a4/0x230 [ 284.979678][T10452] __bpf_trace_sched_switch+0x1cb/0x230 [ 284.979693][T10452] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 284.979707][T10452] ? psi_group_change+0xab8/0x1050 [ 284.979723][T10452] ? __schedule+0x24fd/0x4fb0 [ 284.979737][T10452] ? tracing_record_taskinfo_sched_switch+0x7d/0x370 [ 284.979752][T10452] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 284.979765][T10452] __traceiter_sched_switch+0x9d/0xd0 [ 284.979782][T10452] __schedule+0x25a3/0x4fb0 [ 284.979803][T10452] ? __pfx_do_sync_core+0x10/0x10 [ 284.979816][T10452] ? smp_call_function_many_cond+0xde6/0x1270 [ 284.979833][T10452] ? __pfx___schedule+0x10/0x10 [ 284.979845][T10452] ? __pfx_do_sync_core+0x10/0x10 [ 284.979859][T10452] ? preempt_schedule_thunk+0x16/0x30 [ 284.979869][T10452] preempt_schedule_common+0x82/0xd0 [ 284.979882][T10452] ? __pfx_do_sync_core+0x10/0x10 [ 284.979893][T10452] preempt_schedule_thunk+0x16/0x30 [ 284.979903][T10452] ? on_each_cpu_cond_mask+0x75/0x80 [ 284.979918][T10452] on_each_cpu_cond_mask+0x7a/0x80 [ 284.979933][T10452] smp_text_poke_batch_finish+0xec2/0x1160 [ 284.979951][T10452] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 284.979966][T10452] ? arch_jump_label_transform_queue+0x97/0x110 [ 284.979983][T10452] ? __jump_label_update+0x35a/0x380 [ 284.980001][T10452] arch_jump_label_transform_apply+0x1c/0x30 [ 284.980016][T10452] static_key_enable_cpuslocked+0x128/0x240 [ 284.980031][T10452] static_key_enable+0x1a/0x20 [ 284.980044][T10452] tracepoint_add_func+0x7c9/0x950 [ 284.980062][T10452] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 284.980076][T10452] tracepoint_probe_register_prio_may_exist+0x5f/0xa0 [ 284.980090][T10452] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 284.980105][T10452] bpf_raw_tp_link_attach+0x51a/0x700 [ 284.980126][T10452] ? __pfx_bpf_raw_tp_link_attach+0x10/0x10 [ 284.980141][T10452] ? __fget_files+0x2a/0x420 [ 284.980164][T10452] bpf_raw_tracepoint_open+0x1b2/0x220 [ 284.980183][T10452] __sys_bpf+0x846/0x950 [ 284.980197][T10452] ? __pfx___sys_bpf+0x10/0x10 [ 284.980215][T10452] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 284.980229][T10452] ? ksys_write+0x242/0x270 [ 284.980241][T10452] ? __pfx_ksys_write+0x10/0x10 [ 284.980253][T10452] __x64_sys_bpf+0x7c/0x90 [ 284.980266][T10452] do_syscall_64+0xe2/0xf80 [ 284.980280][T10452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.980289][T10452] ? trace_irq_disable+0x37/0x100 [ 284.980302][T10452] ? clear_bhb_loop+0x60/0xb0 [ 284.980313][T10452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.980324][T10452] RIP: 0033:0x7f83dd59acb9 [ 284.980337][T10452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.980345][T10452] RSP: 002b:00007f83de375028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 284.980359][T10452] RAX: ffffffffffffffda RBX: 00007f83dd815fa0 RCX: 00007f83dd59acb9 [ 284.980368][T10452] RDX: 0000000000000018 RSI: 0000200000000080 RDI: 0000000000000011 [ 284.980377][T10452] RBP: 00007f83de375090 R08: 0000000000000000 R09: 0000000000000000 [ 284.980386][T10452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.980394][T10452] R13: 00007f83dd816038 R14: 00007f83dd815fa0 R15: 00007ffecf4ee3d8 [ 284.980409][T10452] [ 285.454336][T10450] __nla_validate_parse: 2 callbacks suppressed [ 285.454358][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 285.489183][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 285.582638][T10450] syzkaller0: entered promiscuous mode [ 285.588357][T10450] syzkaller0: entered allmulticast mode