last executing test programs: 8.277871051s ago: executing program 0 (id=1262): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000, 0x2}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000df00000000990098000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x1, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1005}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x3a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x1, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0xfffffffc, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.269004473s ago: executing program 1 (id=1263): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc2100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="00002a0000000076762110fb0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.857933696s ago: executing program 2 (id=1266): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc2100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="00002a0000000076762110fb0000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.729551811s ago: executing program 0 (id=1267): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {0x0}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x1, 0x84) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1, 0x7fffffff, 0x6, 0x3, 0x4008, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0xcfa}, 0x50) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000400)='\x00') socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x110, 0x6, 0x0, 0x19) (async) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000780)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x60010) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070705000080030005000000000002004e22ac14140a0000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) 6.675760915s ago: executing program 4 (id=1270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000200)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xe62, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.425776274s ago: executing program 4 (id=1271): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) socket$kcm(0x29, 0x5, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x50, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x38}, 0x0) close(0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24000801) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c, 0x3000000}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x60) 5.962450293s ago: executing program 3 (id=1273): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8}, 0x94) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000, 0x2}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x1c) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 5.571089824s ago: executing program 3 (id=1274): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000, 0x2}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x1c) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) 4.807955609s ago: executing program 2 (id=1275): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20004814) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100)=r2, 0x5042) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup, 0x36, 0x1, 0x4, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @multicast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000003080500000000468ce82f1af697b9000c00048008000140000000050500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008015}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="2000000004000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3ffbd3d7178290407f8cc3c51000388fad6283e23820334942779d4aa27fb7de915afb3dcd2b054c0fdce899700ee4eb8a927aea75e24896323fcc7a096913eda2e6cc6819c10dea1a6d15577cf6fc8d0a23e852f53507d1f5676f372796a49f30aaf98ad6ca5035c631d5aad248446010e98c5ad01781078dfbeeea424b64775b8fe2f94ba583ab5965e74f8f67da37c174ccc0a9444ac5de45f7", @ANYRES64=r4], 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, 0x0, 0x92) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, 0x0}, 0xf5ff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x198, 0x30, 0x400, 0x0, 0x0, {}, [{0x184, 0x1, [@m_connmark={0x180, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff9, 0x7953, 0x6, 0x2, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x231, 0xffffffffeffffff7, 0xcb, 0xfffffffd}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x5, 0x2, 0x20a2336f, 0xff}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x3, 0x0, 0xf8c}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0xf, 0x4}, 0x3}}]}, {0xc3, 0x6, "470fb8238a1575c028510b1b98dfd71a604ec23d6cc10c2bb410b96cc2f7c345a98814826baf076cefe05c66b5f7a25a5593eee179d51134db8dbded7b58a6e133f0db50f6b102994e3293194bf27a3cf6a38e2c10d99888d5afd6d2de824ffd538cc2fd0c946d1dfdadb3949283557f781985a94a1ef4991369501dd545669cb49561d08b742714a43441e69373c3acd44561ac007c10e30b8bfec8d19ab3adb98cb3d7ee385b86019f4ff6898e3623d53d54542571e1aa45b090c68ce9c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x198}}, 0x4004c094) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x45}, {0xe6, 0x5b, 0x2, 0x4}]}) 4.80744699s ago: executing program 4 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x8}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10001, 0x100, 0x200, 0x10, 0x0, 0x4, 0x40, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "0000007200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045d500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"}]}}]}, 0x170}}, 0x40000) r3 = socket(0x23, 0x0, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xee) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1394", 0x2}], 0x1}, 0x4051) recvmsg$unix(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89ef, &(0x7f0000000000)) fstat(r4, 0x0) r12 = syz_clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f0000001540), &(0x7f0000001580)) sendmsg$unix(r9, &(0x7f00000017c0)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001300)=[{0x0}, {0x0}], 0x2, &(0x7f0000001700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10}}}, @rights={{0x18, 0x1, 0x1, [r4, r4]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r12, 0x0, 0xee01}}}, @rights={{0x10}}], 0x78, 0x24000000}, 0x8000) fstat(r1, &(0x7f00000004c0)) r13 = getpid() sendmsg$nl_netfilter(r3, &(0x7f0000000a80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x2dc, 0x7, 0x1, 0x301, 0x70bd26, 0x25dfdbfc, {0x3, 0x0, 0x6}, [@nested={0x2b7, 0x2b2b, 0x0, 0x1, [@typed={0x7f, 0x150, 0x0, 0x0, @binary="dcb38ac8c243a5cf0d72016a87c2b3cb36cb4e9cef654745d26169e94dd4b5bdb7e3251ee445fba00bbd093028403acfab1d4dd172eac4f6480d734652e3301c2ec06c2a0ce57cd8ba7e1bf5eaf0e6df49ed8843b63126e59702c7a5c8eca6c72ed0a9960ca91ac92665017706615fca82e2d1ddaa4ec423542a09"}, @nested={0x4, 0x8d}, @generic="d90210cc7e9188e1744fc04e6a3f55e65b07fa0239c90530b5965a2b22740e77c6b9444725b4556de95fa720ee1b087ea405aee274b84b3ad21aafde9638ebbcdfc9c0554a2059d4c36ded4f7069e4e89743d5aab8ed43bd47ee6b4f0260350fa6316c6853", @typed={0x8, 0xa3, 0x0, 0x0, @uid=r10}, @generic="d9e800fd0db31d9293e7689b4f80aabeea5e601284a0e8a2a12f7a20f6339190da5822a0c6197654d20f49d952441a0935049da0bebd4be90289b459251ca4108f3e6621e8487c7c226c02102f2ebbcbc5ee55192c6ef4648ae15fe8088af49a331608bd8d1f5419c3e938f479bad3ffde94b041ac037adb0259a92a84f8dd2726f7efd0d4cffdbfca68007a8f175cdccd9c8ac975214ac1b388c1e190e405cc953d426aa8aae4324d7cc878f70c6ba7725c4742611c79aa93f87fadb77748ef1b357c87241361c8b099cf5e50b5d971196d68cd7026b9b1c9542196d005750e6f3e37a83e", @nested={0x4, 0xb2}, @nested={0x4, 0xb9}, @nested={0x4, 0x77}, @generic="f965535566941990685ded1b6ed1e78bf5f6d7a83f7d08ed9e8b206fb481ebd4343a1823db0c1e3f1d0b4bfad201de6f010a397516c860fbf7e93d329e794b8aa57da5ab0a6aaa29fbc9f9c8f751e2d36b73c8b5fdd4e58e41da8f1fb2ab8a0e964f66c7f3013636bd6dd445024184fab5822fbcdb186abbbdf02976865d8de9b96a05c227ac27e0ad73a660a641db80a33c4ce5b77c0591bf6d192d25a5827a7d34eca92885f3ea5ef93fb1f6473ef75b23b0771954fefd261efa81ec6f51b85133f2ffb405f710086b1acaf8bfa74f68"]}, @nested={0x8, 0xf4, 0x0, 0x1, [@nested={0x4, 0x48}]}, @typed={0x8, 0x107, 0x0, 0x0, @pid=r13}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x40000}, 0x20004c00) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000300)={0x1, &(0x7f0000000100)=[{0x2d, 0x40, 0x0, 0x1}]}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) 4.769169543s ago: executing program 1 (id=1277): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000980)={0x5, 0x80, 0xb7, 0x9, 0x7c, 0x2, 0x0, 0x7, 0xec8dc, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1ff, 0x0, @perf_config_ext={0x180000000000, 0x3c}, 0x18052, 0x6, 0x0, 0x4, 0x2000000000040, 0x805, 0x6, 0x0, 0x4, 0x0, 0x8000000000000001}, r0, 0xe, 0xffffffffffffffff, 0x8) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0x80000000000000c}, 0x10000, 0x0, 0x6, 0x8, 0x3fe}, r0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000240)='syz0\x00', 0x1ff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x9f, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000180001032400002b69124db134"], 0x14}}, 0x41000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0xffffffdf, 0x0, 0x0, 0x68000000}, 0x44800) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1f, &(0x7f0000000100), 0x120) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x2, 0x11, 0x8, 0xb, 0x1f, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d6}, @sadb_x_nat_t_type={0x1}, @sadb_x_filter={0x5, 0x1a, @in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x21, 0x4}, @sadb_sa={0x2, 0x1, 0x4d5, 0x47, 0xf8, 0x85, 0x0, 0x40000000}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_lifetime={0x4, 0x2, 0x7fff, 0x6d1b, 0x8, 0x2}, @sadb_address={0x5, 0x17, 0x32, 0x0, 0x0, @in6={0xa, 0x4e23, 0xfffffd2f, @remote, 0x200}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e1e, @loopback}, @in6={0xa, 0x4e22, 0x7fff, @mcast2, 0x3}}, @sadb_sa={0x2, 0x1, 0x4d6, 0x6, 0x3, 0x20, 0x0, 0xc0000000}]}, 0xf8}}, 0x8000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=@getstat={0xe0, 0x15, 0x1, 0x70bd2d, 0x25dfdbfc, {{'sm3-ce\x00'}, '\x00', '\x00', 0x0, 0x400}}, 0xe0}, 0x1, 0x0, 0x0, 0x24008094}, 0x800) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0x19c, 0x10, 0x1, 0x70bc2c, 0x0, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@rand_addr=0x64010101, 0x0, 0x32}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000}, {0x1, 0x400800, 0x6, 0x292}, {0x1000}, 0x0, 0x3507, 0xa, 0x4, 0x0, 0x2c}, [@algo_crypt={0x60, 0x2, {{'cbc(des3_ede)\x00'}, 0xc0, "6e000bfff000002000ff8000000000000000000100001800"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x19c}}, 0x4044050) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) 4.740964599s ago: executing program 3 (id=1278): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e381, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xb, 0xffffffffffffffff}, 0x8, 0x0, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x400200000000003b}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x11, 0x2, 0x300) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000e40)='ns/time\x00') ioctl$SIOCSIFHWADDR(r0, 0x40305828, &(0x7f0000000280)={'lo\x00', @multicast}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xf}, 0x387477a52cdbf731, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4048044) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) 4.609971832s ago: executing program 0 (id=1279): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000020000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 4.321562923s ago: executing program 3 (id=1280): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x8}, 0x106581, 0x2, 0x2, 0x1, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8000, 0x81, 0x6, 0xac, 0x5}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x14, &(0x7f0000000040), 0x3b) recvmsg$unix(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYBLOB="0b313900a23fb9", @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x5, '\x00', 0x0, @fallback=0xb}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x400, 0x4, 0x0, 0x2, 0xfffff271, 0xfffc}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000002000)='cgroup.clone_children\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) 4.22620652s ago: executing program 2 (id=1281): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000020001000900000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000b10036000701fe017c00000c00038008001700", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4015}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000022000000000000000000800a6000000000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0xd}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x114905, 0x4, 0x0, 0x5, 0x7, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0xeaff) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x18000000000002a0, 0x2f, 0x0, &(0x7f0000000240)="b9fa030711a5f32e019e14f088a847e0ffff009ecdbe171c715db863124000638477fbac141416e000030a94029f03", 0x0, 0xfffffffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newtfilter={0x60, 0x2c, 0x409, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x2}, {0xfff3, 0xffff}, {0x3, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x8000}, @filter_kind_options=@f_u32={{0x8}, {0x24, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x8}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_HASH={0x8, 0x2, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4000050) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x84) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000080000800c00018008000400", @ANYRES32=r4], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 4.127176001s ago: executing program 0 (id=1282): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc2100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="00002a0000000076762110fb0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xa0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.991526264s ago: executing program 4 (id=1283): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x404010}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="00010000110000042abd700003dcdf256d6f72757331323830000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002400000004000000000000000000000000010009000000080001000104000008000800010006000000000000000000"], 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x4000094) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5400000003060500000000000000000007000002050001000700002205000100070000000900020073797a300000000005000100070000000900020073797a310000000005000100070000000500010007000000"], 0x54}, 0x1, 0x0, 0x0, 0x811}, 0x44884) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000003d0003ca2d812b0c7006df25080000000a0003002527252abe49cde9d229000000e35cb4679ab9d3c00f6f0f91b5773c1a26c89c972f33df541500e6367cd84d103b339549d8a13abc953cf0577cfc976fa3f23974093f9c224f77d6858f99bc20c9c69dfed1ad206be358f49b068032012eb449d0"], 0x20}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = getpid() r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff, 0xb}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = syz_clone(0x0, 0x0, 0x1c, 0x0, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="7400000000010104000000000000000002000004240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002800500010000000000080007400000000010000d"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = socket$kcm(0x1e, 0x2, 0x0) sendmsg$kcm(r11, 0x0, 0x20008044) 3.903856049s ago: executing program 1 (id=1284): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000, 0x2}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000016000b63d25a80648c2594011d24fc60", 0x14}], 0x1}, 0x20000000) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.483384543s ago: executing program 2 (id=1285): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc2100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x3}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000800000000000000", @ANYRES32, @ANYBLOB="00002a0000000076762110fb0000000000000000", @ANYRES32=0x0, @ANYRES32], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.285441886s ago: executing program 3 (id=1286): socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000fe03", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000100)}, 0x10c002, 0xac5d, 0x10000200, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200"], &(0x7f0000000c00)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x11, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x401}, 0x10c002, 0xac5b}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10062) write$cgroup_subtree(r2, &(0x7f0000000000), 0x15) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) socket$kcm(0x29, 0x7, 0x0) r3 = socket$kcm(0x28, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2160) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000d000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 3.195547096s ago: executing program 1 (id=1287): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0x0, 0xfffffffe}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x6, 0x8, 0x9, 0x6}, 0x5, r2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, @perf_config_ext={0x7a1b, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = getpid() r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x4018, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000020}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r5, 0x4008240b, &(0x7f0000000400)={0x5, 0x80, 0xfe, 0x6, 0x6, 0x5, 0x0, 0x2, 0x200, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xdaa, 0x2, @perf_bp={&(0x7f0000000000), 0xe}, 0x10000, 0x5, 0x1, 0x5, 0x6, 0x3, 0x7, 0x0, 0xbc, 0x0, 0x8000000000000001}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0xc, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r3, 0x4) (async) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000600)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5}, 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40014) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a8c000000060a030400000000000000000a0000050900010073797a31000000004c000480480001800b000100746172676574000038000280240003007339f2f304fdd672bad09dfb040000000000000001f9580dabf95ddc91967c200800024000000000080001004c4f47000900020073797a3200000000140005800800024000000002080001000011"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) 719.931724ms ago: executing program 4 (id=1288): r0 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe00, 0x1, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x10fc1d, 0x3, 0x4, 0x9, 0x0, 0x8, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000200000002000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000740)="2705020059feff000600002fb96dbcf7bae1050007008100000608", 0x1b}, {&(0x7f0000000200)="88a872a1f721d2d10e81bb0d00000000fe59319e5b7bd28eaa0ab797e28efcdc6b0d7ed6042fda0c54db7f00000000000000099c996e466e", 0x38}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada", 0xbe}], 0x3}, 0x890) 672.018586ms ago: executing program 2 (id=1289): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x28) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b700000000000000"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0xc0189436, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10000}, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf7ffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000002600010125bd7000fcffffff390000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x409d6}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710425000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000800)={0x1, 0x80, 0x6b, 0x8, 0x9, 0x6, 0x0, 0x0, 0x2801, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x8eb, 0x7}, 0x5501, 0x3, 0x1ff, 0x3, 0x9, 0x5, 0x0, 0x0, 0x522d00bc, 0x0, 0xf}, r1, 0x6, r3, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000880)='%-010d \x00') perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYBLOB, @ANYBLOB, @ANYRES32], 0x48) socket$nl_crypto(0x10, 0x3, 0x15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r4, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x30, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000000a40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x4008001) 653.200202ms ago: executing program 3 (id=1290): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000000c0)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x80) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="1c0000001c0081064e81f782db44b9040a1d080404000000000081a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f00000026c0)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x12}, 0x99) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=@newsa={0x148, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in6=@loopback, 0x1234, 0x1234, 0x0, 0x0, 0xa}, {@in6=@loopback, 0x4d2, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x80d9}, {0x0, 0xe9}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x56, 0x14, {{'hmac(sha1)\x00'}, 0x50, 0xa0, '0123456789'}}]}, 0x148}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000000200)={&(0x7f0000000400)={0xa, 0x1234, 0x0, @loopback}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1, &(0x7f0000000500)=[@hoplimit={{0x14, 0x29, 0x34, 0x40}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000002dc0)="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", 0x0, 0xa3}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010073850000000000000200000a1400000011000100000c0000000000000210007a"], 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, 0x0) 649.128563ms ago: executing program 0 (id=1291): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x20004814) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x30, &(0x7f0000000100)=r2, 0x5042) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup, 0x36, 0x1, 0x4, &(0x7f0000000640)=[0x0, 0x0], 0x2, 0x0, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], 0x0}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @multicast}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000003080500000000468ce82f1af697b9000c00048008000140000000050500030006000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008015}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="2000000004000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="3ffbd3d7178290407f8cc3c51000388fad6283e23820334942779d4aa27fb7de915afb3dcd2b054c0fdce899700ee4eb8a927aea75e24896323fcc7a096913eda2e6cc6819c10dea1a6d15577cf6fc8d0a23e852f53507d1f5676f372796a49f30aaf98ad6ca5035c631d5aad248446010e98c5ad01781078dfbeeea424b64775b8fe2f94ba583ab5965e74f8f67da37c174ccc0a9444ac5de45f7", @ANYRES64=r4], 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r7, 0x0, 0x92) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e22}}, 0x80, 0x0}, 0xf5ff) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x198, 0x30, 0x400, 0x0, 0x0, {}, [{0x184, 0x1, [@m_connmark={0x180, 0x6, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff9, 0x7953, 0x6, 0x2, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x231, 0xffffffffeffffff7, 0xcb, 0xfffffffd}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x5, 0x2, 0x20a2336f, 0xff}, 0xfff8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x3, 0x0, 0xf8c}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0xf, 0x4}, 0x3}}]}, {0xc3, 0x6, "470fb8238a1575c028510b1b98dfd71a604ec23d6cc10c2bb410b96cc2f7c345a98814826baf076cefe05c66b5f7a25a5593eee179d51134db8dbded7b58a6e133f0db50f6b102994e3293194bf27a3cf6a38e2c10d99888d5afd6d2de824ffd538cc2fd0c946d1dfdadb3949283557f781985a94a1ef4991369501dd545669cb49561d08b742714a43441e69373c3acd44561ac007c10e30b8bfec8d19ab3adb98cb3d7ee385b86019f4ff6898e3623d53d54542571e1aa45b090c68ce9c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x198}}, 0x4004c094) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x45}, {0xe6, 0x5b, 0x2, 0x4}]}) 525.793324ms ago: executing program 1 (id=1292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x40, 0x3, 0x1, 0x9, 0x0, 0x6, 0x80, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x7, @perf_bp={&(0x7f0000000040)}, 0x400, 0x7, 0x7, 0x4, 0x616, 0x1, 0x1000, 0x0, 0x8, 0x0, 0x7fffffffffffffff}, r2, 0xa, 0xffffffffffffffff, 0x9) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2e, 0x25dfdc02, {0x0, 0x0, 0x12, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xf, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x5}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8004080}, 0x8084) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', r4, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r5, r0}, 0xc) 163.163644ms ago: executing program 1 (id=1293): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) close(r2) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xac141410}, 0x10, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000340)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400"], 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a840000000c0a010100002100000000000a0000060900020073797a31000000000900010073797a310000000058000380540000800c00018006000100d103000044000b802c000180090001006c617374000000001c000280080001400000000508000140000001ff080001400000000614000180090001006c617374"], 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) (fail_nth: 7) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000038000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000550400000000"], 0x50) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)=""/4117, 0x1015}, {&(0x7f0000002b80)=""/4094, 0xffe}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000003c0)=""/218, 0xda}, {&(0x7f0000000040)=""/104, 0x68}, {&(0x7f00000006c0)=""/109, 0x6d}], 0x6}, 0x22) recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000001ac0)=[{&(0x7f0000000a40)}, {&(0x7f0000001a40)="95a1acb99881479d646d77dde0befc8172ff1f357753a8a1f0c9a2008d7d371a9b8bad349af5ad69600c7628f824f99d26f2f52617dafb46fdc356b5e5e01c8d9c1674f3ca4e0a60713f9783e48b766177aed8b0a9363587797e551da3d18106", 0x60}], 0x2}, 0x3e8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r3, 0xffffffffffffffff}, 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000006c0)={&(0x7f00000000c0)="f5aeaedd60d4e6cbf7d0191f04b840c4b5b7f26cb1ee41fcc40a5c0e1de03b3dcf778a9a715f6102aac4be9c2fe03b6255daea03d88f8e54e1ae247ed705b175baca45f2ad0cedabc32644628168c69c9cfa37ed14b6acea2c1462f759384b47d250396e11a514fe2f5c890f23f0710e6f08fbaf89902485cd93ec448ec654a1f90a80cc9acfd9", &(0x7f0000000380)=""/133, &(0x7f0000000500)="4d6b5dde8dd28e06df067e02d2990a49e863fcda8752d74080c312630c8654bea29f77a88e4ee42034e16ccfd6b9cec4fbd669dcf468e138556ed112fb293f99157d21df6dbc0139983df28db0f91465fa49a4", &(0x7f0000000580)="5c19569ca3d38d2eefc3c08a74a3ea1c38ddcf4514a09b5861b06e5dcaa85698d5c2508f3682b4bdac6b593b9112e789fe85f4b9be6c52fcb515de5f392a0e8972ef5827c2b1ca80f279670e24d1b24e1bed84d5f51f25cc2b6c804bd5fffcf4ca8f59b9c978b8f1cd357f78ff32b46187717d6e6a79e4c14b1bde4c87a0ee4b722c43c20484317ef062a76f0b12a406b9eee4551f53d1b62b8ef6c07cac757472077ae831cbae0c628d797a2d07de2042d550498ffbdb368959f0c8589a9e7e06be11f3789fb44abc1926a141f40e7a62dfa8f61e", 0x61, r7, 0x4}, 0x38) 153.32337ms ago: executing program 0 (id=1294): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_GC_INTERVAL={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x12100) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1f9}, 0x0, 0x7, 0xffffffffffffffff, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007200000095"], 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x40088c0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r6 = socket$kcm(0x10, 0x400000002, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000001000000000000004000000000000000302e6561633000"], &(0x7f00000003c0)=""/5, 0x20, 0x5, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r7, 0x20, &(0x7f0000000580)={&(0x7f0000000340)=""/118, 0x76, 0x0, &(0x7f0000000500)=""/85, 0x55}}, 0x10) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40000) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000800000079"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x5}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x24}}, 0xc000) perf_event_open$cgroup(&(0x7f0000000600)={0x3, 0x80, 0x9, 0xc, 0xc3, 0x2, 0x0, 0x0, 0x60000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000200), 0x9}, 0x401, 0x6, 0x2, 0x0, 0x7, 0x28c, 0x9, 0x0, 0x62, 0x0, 0x5a8000}, 0xffffffffffffffff, 0x9, r7, 0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ac00000041000701fefeffff00000000017c00008000428008009d00640101024c007a80180013800c00680007000000000000000600db000000000014009a000000000000000000000000000000000108001d00", @ANYRES32=0x0, @ANYBLOB="1400d680040044800c001e0000010000000000001400690000000000000000000000ffffac1414aa0c0007800800e28004000a8008004e00", @ANYRESOCT=r9, @ANYBLOB="1400018006000600800a000008001500e0000001040002"], 0xac}, 0x1, 0x0, 0x0, 0x48815}, 0x20044002) 148.975131ms ago: executing program 2 (id=1295): r0 = socket$kcm(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x8881}, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x36) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32=r0, @ANYRESHEX=0x0], 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 4 (id=1296): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[], 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10000000131401fbffffff0000000000"], 0x10}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$inet(r0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x9, 0x7}, 0x4, 0x0, 0x0, 0x1, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x11, 0xa, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) perf_event_open(&(0x7f0000000480)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x656ee910, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETLINK(r4, 0x400454cd, 0x3a) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 79.619357][ T5599] cgroup: Unknown subsys name 'net' [ 79.738407][ T5599] cgroup: Unknown subsys name 'cpuset' [ 79.748279][ T5599] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.436989][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.296156][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.305756][ T5628] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.315618][ T5628] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.325758][ T5628] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.329506][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.336461][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.345796][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.353218][ T5628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.356272][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.368748][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.376473][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.385395][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.389811][ T5628] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.395027][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.407846][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.408396][ T5628] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.417986][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.430087][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.432022][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.440640][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.452849][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.460534][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.467890][ T5628] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.481248][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.498474][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.416542][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.425079][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.433046][ T5611] bridge_slave_0: entered allmulticast mode [ 87.448442][ T5611] bridge_slave_0: entered promiscuous mode [ 87.460154][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.467481][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.475053][ T5611] bridge_slave_1: entered allmulticast mode [ 87.482850][ T5611] bridge_slave_1: entered promiscuous mode [ 87.545958][ T50] Bluetooth: hci0: command tx timeout [ 87.545964][ T5630] Bluetooth: hci4: command tx timeout [ 87.548040][ T5615] Bluetooth: hci1: command tx timeout [ 87.559889][ T5630] Bluetooth: hci3: command tx timeout [ 87.563116][ T50] Bluetooth: hci2: command tx timeout [ 87.685395][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.692642][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.699910][ T5612] bridge_slave_0: entered allmulticast mode [ 87.707577][ T5612] bridge_slave_0: entered promiscuous mode [ 87.718910][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.751395][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.758683][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.765955][ T5612] bridge_slave_1: entered allmulticast mode [ 87.773166][ T5612] bridge_slave_1: entered promiscuous mode [ 87.782923][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.809644][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.816857][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.824012][ T5610] bridge_slave_0: entered allmulticast mode [ 87.831458][ T5610] bridge_slave_0: entered promiscuous mode [ 87.878769][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.886024][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.893399][ T5610] bridge_slave_1: entered allmulticast mode [ 87.901001][ T5610] bridge_slave_1: entered promiscuous mode [ 87.926791][ T5611] team0: Port device team_slave_0 added [ 87.968162][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.979717][ T5611] team0: Port device team_slave_1 added [ 87.985577][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.992868][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.000486][ T5617] bridge_slave_0: entered allmulticast mode [ 88.007799][ T5617] bridge_slave_0: entered promiscuous mode [ 88.040324][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.061527][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.068904][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.076244][ T5617] bridge_slave_1: entered allmulticast mode [ 88.083581][ T5617] bridge_slave_1: entered promiscuous mode [ 88.092872][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.102459][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.109720][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.117092][ T5613] bridge_slave_0: entered allmulticast mode [ 88.124450][ T5613] bridge_slave_0: entered promiscuous mode [ 88.166021][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.175528][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.182730][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.191935][ T5613] bridge_slave_1: entered allmulticast mode [ 88.200938][ T5613] bridge_slave_1: entered promiscuous mode [ 88.219239][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.226330][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.252429][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.298198][ T5612] team0: Port device team_slave_0 added [ 88.304947][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.311947][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.338086][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.351845][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.385807][ T5612] team0: Port device team_slave_1 added [ 88.402302][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.413425][ T5610] team0: Port device team_slave_0 added [ 88.422821][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.466489][ T5610] team0: Port device team_slave_1 added [ 88.474276][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.495201][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.502280][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.528463][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.584229][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.591515][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.617746][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.630979][ T5617] team0: Port device team_slave_0 added [ 88.661206][ T5613] team0: Port device team_slave_0 added [ 88.676197][ T5617] team0: Port device team_slave_1 added [ 88.682634][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.689916][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.716542][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.734916][ T5611] hsr_slave_0: entered promiscuous mode [ 88.741512][ T5611] hsr_slave_1: entered promiscuous mode [ 88.753132][ T5613] team0: Port device team_slave_1 added [ 88.785626][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.792713][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.819562][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.849957][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.857079][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.883195][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.938548][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.945802][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.974991][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.986904][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.993860][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.019948][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.032731][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.039939][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.065914][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.157176][ T5612] hsr_slave_0: entered promiscuous mode [ 89.163651][ T5612] hsr_slave_1: entered promiscuous mode [ 89.170159][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 89.176433][ T5612] Cannot create hsr debugfs directory [ 89.197890][ T5610] hsr_slave_0: entered promiscuous mode [ 89.204229][ T5610] hsr_slave_1: entered promiscuous mode [ 89.211019][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 89.217290][ T5610] Cannot create hsr debugfs directory [ 89.324823][ T5613] hsr_slave_0: entered promiscuous mode [ 89.331294][ T5613] hsr_slave_1: entered promiscuous mode [ 89.337699][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 89.343445][ T5613] Cannot create hsr debugfs directory [ 89.397102][ T5617] hsr_slave_0: entered promiscuous mode [ 89.403486][ T5617] hsr_slave_1: entered promiscuous mode [ 89.409869][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 89.415853][ T5617] Cannot create hsr debugfs directory [ 89.624587][ T50] Bluetooth: hci1: command tx timeout [ 89.625364][ T5630] Bluetooth: hci4: command tx timeout [ 89.635060][ T5622] Bluetooth: hci0: command tx timeout [ 89.637308][ T5615] Bluetooth: hci3: command tx timeout [ 89.642226][ T50] Bluetooth: hci2: command tx timeout [ 89.941792][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.962386][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.976651][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.987107][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.995981][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.006906][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.014974][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.028059][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.110724][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.127226][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.140654][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.153645][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.162724][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.174046][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.182142][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.193650][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.295800][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.308550][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.317346][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.328419][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.342681][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.353933][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.368100][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.379944][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.494345][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.501492][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.512419][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.530126][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.540147][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.565004][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.576136][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.584303][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.594263][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.652161][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.698764][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.706452][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.721825][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.732877][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.748778][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.755937][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.766762][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.780961][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.799305][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.813448][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.829389][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.841031][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.867786][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.932820][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.959276][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.966498][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.999694][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.006894][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.049735][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.153320][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.211019][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.218344][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.281639][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.296081][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.303698][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.448734][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.458884][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.500583][ T977] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.507888][ T977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.547543][ T977] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.554774][ T977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.592950][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.656294][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.663551][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.698635][ T1146] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.705879][ T1146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.713969][ T50] Bluetooth: hci3: command tx timeout [ 91.723328][ T50] Bluetooth: hci4: command tx timeout [ 91.731502][ T50] Bluetooth: hci2: command tx timeout [ 91.732061][ T5615] Bluetooth: hci0: command tx timeout [ 91.739186][ T50] Bluetooth: hci1: command tx timeout [ 92.221620][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.231452][ T45] cfg80211: failed to load regulatory.db [ 92.484966][ T5611] veth0_vlan: entered promiscuous mode [ 92.538422][ T5611] veth1_vlan: entered promiscuous mode [ 92.659637][ T5611] veth0_macvtap: entered promiscuous mode [ 92.688694][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.728254][ T5611] veth1_macvtap: entered promiscuous mode [ 92.820696][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.878399][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.935387][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.999579][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.016017][ T5610] veth0_vlan: entered promiscuous mode [ 93.096541][ T5610] veth1_vlan: entered promiscuous mode [ 93.193369][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.261570][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.312802][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.322105][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.343260][ T5610] veth0_macvtap: entered promiscuous mode [ 93.393355][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.403698][ T5613] veth0_vlan: entered promiscuous mode [ 93.412445][ T5610] veth1_macvtap: entered promiscuous mode [ 93.445442][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.458313][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.487185][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.489602][ T5613] veth1_vlan: entered promiscuous mode [ 93.533197][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.601998][ T5611] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.621351][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.639335][ T5617] veth0_vlan: entered promiscuous mode [ 93.690009][ T5617] veth1_vlan: entered promiscuous mode [ 93.744959][ T1146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.785128][ T5622] Bluetooth: hci0: command tx timeout [ 93.791983][ T50] Bluetooth: hci2: command tx timeout [ 93.792005][ T5615] Bluetooth: hci4: command tx timeout [ 93.801247][ T50] Bluetooth: hci3: command tx timeout [ 93.803653][ T5630] Bluetooth: hci1: command tx timeout [ 93.829756][ T5613] veth0_macvtap: entered promiscuous mode [ 93.869584][ T5613] veth1_macvtap: entered promiscuous mode [ 93.964187][ T5617] veth0_macvtap: entered promiscuous mode [ 93.991261][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.000016][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.006517][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.056772][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.068988][ T5617] veth1_macvtap: entered promiscuous mode [ 94.115808][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.125393][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.158515][ T5612] veth0_vlan: entered promiscuous mode [ 94.205369][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.233062][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.263713][ T5612] veth1_vlan: entered promiscuous mode [ 94.308122][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.496419][ T152] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.560929][ T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.595780][ T82] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.611612][ T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.743830][ T5612] veth0_macvtap: entered promiscuous mode [ 94.789818][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.797692][ T152] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.797882][ T152] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.798070][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.824551][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.872418][ T5612] veth1_macvtap: entered promiscuous mode [ 94.946709][ T1146] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.979294][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.996415][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.013313][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.040789][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.263244][ T5832] Zero length message leads to an empty skb [ 95.322005][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.342621][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.354857][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.404697][ T1146] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.047147][ T82] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.077760][ T82] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.115149][ T82] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.206746][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.255259][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.294686][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.356887][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.369850][ T5841] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13'. [ 96.395676][ T5844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 96.487225][ T5844] bond0: (slave bond_slave_0): Releasing backup interface [ 96.659489][ T5844] bond_slave_0: entered promiscuous mode [ 96.691435][ T5844] bond_slave_0: entered allmulticast mode [ 96.763631][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.787369][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.913574][ T5615] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 96.966482][ T5859] netlink: 'syz.1.17': attribute type 10 has an invalid length. [ 96.987178][ T5859] netlink: 'syz.1.17': attribute type 8 has an invalid length. [ 97.028905][ T5859] warning: `syz.1.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.069145][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.094107][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.707527][ T5867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20'. [ 98.985443][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 99.154151][ T5901] netlink: 'syz.4.25': attribute type 10 has an invalid length. [ 99.194215][ T5898] wg0 speed is unknown, defaulting to 1000 [ 99.232096][ T5901] netlink: 'syz.4.25': attribute type 8 has an invalid length. [ 99.303369][ T5898] wg0 speed is unknown, defaulting to 1000 [ 99.360786][ T5898] wg0 speed is unknown, defaulting to 1000 [ 99.432297][ T5898] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 99.598096][ T5898] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 99.668281][ T5898] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 99.694508][ T5909] wg0 speed is unknown, defaulting to 1000 [ 99.791269][ T5914] netlink: 16 bytes leftover after parsing attributes in process `syz.3.27'. [ 99.822293][ T5913] netlink: 68 bytes leftover after parsing attributes in process `syz.3.27'. [ 99.839170][ T5898] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.584364][ T5898] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 100.922213][ T5898] wg0 speed is unknown, defaulting to 1000 [ 100.949537][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.2.29'. [ 100.969193][ T5895] wg0 speed is unknown, defaulting to 1000 [ 101.001750][ T5898] wg0 speed is unknown, defaulting to 1000 [ 101.076410][ T5929] netlink: 24 bytes leftover after parsing attributes in process `syz.3.30'. [ 101.107644][ T5935] netlink: 'syz.1.31': attribute type 10 has an invalid length. [ 101.124294][ T5898] wg0 speed is unknown, defaulting to 1000 [ 101.131048][ T5935] netlink: 'syz.1.31': attribute type 8 has an invalid length. [ 101.247957][ T5898] wg0 speed is unknown, defaulting to 1000 [ 101.322528][ T5898] wg0 speed is unknown, defaulting to 1000 [ 101.515015][ T5927] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 101.555226][ T5927] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 101.579818][ T5927] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 101.646638][ T5937] wg0 speed is unknown, defaulting to 1000 [ 101.739894][ T5927] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.842369][ T5948] netlink: 24 bytes leftover after parsing attributes in process `syz.3.32'. [ 102.289572][ T69] smbdirect: ib_dev[syz2] removed [ 102.290024][ T5948] siw: device registration error -23 [ 106.256311][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.44'. [ 106.309884][ T5995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'. [ 106.470914][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.0.47'. [ 107.180254][ T5997] wg0 speed is unknown, defaulting to 1000 [ 107.973907][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.56'. [ 111.100492][ T6059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.58'. [ 117.592668][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.62'. [ 118.134333][ T6078] No such timeout policy "s" [ 118.173054][ T6078] netlink: Failed to associated timeout policy 's' [ 118.452937][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 118.488467][ T6095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.68'. [ 118.527378][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 118.856371][ T6107] netlink: 24 bytes leftover after parsing attributes in process `syz.2.72'. [ 119.072499][ T6107] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 119.094891][ T6112] netlink: 72 bytes leftover after parsing attributes in process `syz.3.74'. [ 119.115250][ T6107] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 119.138858][ T6107] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 119.179517][ T6107] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 119.251393][ T6112] syz.3.74 (6112) used greatest stack depth: 18496 bytes left [ 119.706807][ T69] smbdirect: ib_dev[syz2] removed [ 119.927534][ T6138] netlink: 'syz.1.81': attribute type 10 has an invalid length. [ 119.970843][ T6138] netlink: 'syz.1.81': attribute type 8 has an invalid length. [ 120.530953][ T6147] tap0: tun_chr_ioctl cmd 1074025678 [ 120.565617][ T6147] tap0: group set to 0 [ 120.828600][ T6153] tap0: tun_chr_ioctl cmd 1074025677 [ 120.849515][ T6153] tap0: linktype set to 58 [ 120.868170][ T6139] wg0 speed is unknown, defaulting to 1000 [ 121.534344][ T6190] tap0: tun_chr_ioctl cmd 1074025678 [ 121.555716][ T6190] tap0: group set to 0 [ 121.716421][ T6196] tap0: tun_chr_ioctl cmd 1074025677 [ 121.723073][ T6196] tap0: linktype set to 58 [ 122.112364][ T6202] Illegal XDP return value 4294967274 on prog (id 68) dev N/A, expect packet loss! [ 122.887852][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'. [ 123.019943][ T6223] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 123.112117][ T6232] FAULT_INJECTION: forcing a failure. [ 123.112117][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 123.133720][ T6232] CPU: 1 UID: 0 PID: 6232 Comm: syz.3.100 Not tainted syzkaller #0 PREEMPT(full) [ 123.133759][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.133778][ T6232] Call Trace: [ 123.133786][ T6232] [ 123.133799][ T6232] dump_stack_lvl+0xe8/0x150 [ 123.133855][ T6232] should_fail_ex+0x410/0x560 [ 123.133899][ T6232] should_failslab+0xa8/0x100 [ 123.133936][ T6232] __kmalloc_noprof+0xfe/0x720 [ 123.133961][ T6232] ? perf_trace_lock_acquire+0x10a/0x440 [ 123.133999][ T6232] ? bpf_test_init+0x9f/0x150 [ 123.134019][ T6232] ? bpf_test_init+0x9f/0x150 [ 123.134049][ T6232] bpf_test_init+0x9f/0x150 [ 123.134079][ T6232] bpf_prog_test_run_skb+0x31e/0x2230 [ 123.134124][ T6232] ? __fget_files+0x2a/0x420 [ 123.134176][ T6232] ? __fget_files+0x3a2/0x420 [ 123.134209][ T6232] ? __fget_files+0x2a/0x420 [ 123.134247][ T6232] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 123.134285][ T6232] bpf_prog_test_run+0x2c5/0x340 [ 123.134324][ T6232] __sys_bpf+0xa22/0xd90 [ 123.134380][ T6232] ? __pfx___sys_bpf+0x10/0x10 [ 123.134461][ T6232] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 123.134494][ T6232] ? ksys_write+0x242/0x270 [ 123.134533][ T6232] ? __pfx_ksys_write+0x10/0x10 [ 123.134576][ T6232] __x64_sys_bpf+0xba/0xd0 [ 123.134613][ T6232] do_syscall_64+0x166/0x520 [ 123.134639][ T6232] ? trace_irq_disable+0x3b/0x140 [ 123.134667][ T6232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.134691][ T6232] ? clear_bhb_loop+0x70/0xc0 [ 123.134722][ T6232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.134744][ T6232] RIP: 0033:0x7fd4f939e159 [ 123.134776][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.134794][ T6232] RSP: 002b:00007fd4fa307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.134826][ T6232] RAX: ffffffffffffffda RBX: 00007fd4f9625fa0 RCX: 00007fd4f939e159 [ 123.134842][ T6232] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 123.134855][ T6232] RBP: 00007fd4fa307090 R08: 0000000000000000 R09: 0000000000000000 [ 123.134868][ T6232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.134880][ T6232] R13: 00007fd4f9626038 R14: 00007fd4f9625fa0 R15: 00007fff2d3b9248 [ 123.134923][ T6232] [ 123.512867][ T6237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 123.687791][ T6239] netlink: 'syz.0.103': attribute type 10 has an invalid length. [ 123.900462][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.1.104'. [ 124.049849][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 124.065105][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 124.078486][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 124.142459][ T6241] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 124.177171][ T6243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 124.233127][ T6241] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 124.274140][ T6241] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 124.299600][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.4.108'. [ 124.306957][ T6241] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 124.459455][ T6243] siw: device registration error -23 [ 124.570805][ T35] smbdirect: ib_dev[syz2] removed [ 125.272267][ T6273] wg0 speed is unknown, defaulting to 1000 [ 125.677077][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 125.736365][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 126.935652][ T6334] netlink: 'syz.1.129': attribute type 11 has an invalid length. [ 130.222406][ T6356] __nla_validate_parse: 3 callbacks suppressed [ 130.223714][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 130.262695][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 130.286898][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 130.341565][ T6360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 130.443446][ T6341] wg0 speed is unknown, defaulting to 1000 [ 130.595058][ T6360] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 130.618767][ T6360] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 130.644233][ T6360] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 130.703433][ T6360] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 130.979179][ T35] smbdirect: ib_dev[syz2] removed [ 131.170460][ T6381] netlink: 60 bytes leftover after parsing attributes in process `syz.3.144'. [ 131.246728][ T5630] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 131.437838][ T6390] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.454021][ T6390] IPv6: NLM_F_CREATE should be set when creating new route [ 131.461378][ T6390] IPv6: NLM_F_CREATE should be set when creating new route [ 131.468835][ T6390] IPv6: NLM_F_CREATE should be set when creating new route [ 131.624209][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 131.644123][ T6393] netlink: 236 bytes leftover after parsing attributes in process `syz.2.150'. [ 131.756909][ T6393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.150'. [ 131.849120][ T6399] netlink: 76 bytes leftover after parsing attributes in process `syz.2.150'. [ 133.149874][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.159403][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.460739][ T6417] wg0 speed is unknown, defaulting to 1000 [ 134.053976][ T6460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.173'. [ 134.705067][ T6480] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 134.726399][ T6480] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 134.745699][ T6480] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 134.833110][ T6480] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 135.210089][ T35] smbdirect: ib_dev[syz2] removed [ 135.328356][ T6495] __nla_validate_parse: 1 callbacks suppressed [ 135.328385][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 135.394717][ T6495] netlink: 324 bytes leftover after parsing attributes in process `syz.2.183'. [ 136.106890][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.190'. [ 136.688601][ T6529] netlink: 288 bytes leftover after parsing attributes in process `syz.0.196'. [ 139.144715][ T6550] netlink: 'syz.2.200': attribute type 4 has an invalid length. [ 140.764769][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 140.813511][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 140.839877][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 140.961002][ T6564] netlink: 184 bytes leftover after parsing attributes in process `syz.4.207'. [ 141.076522][ T6564] team0: entered allmulticast mode [ 141.098864][ T6564] team_slave_0: entered allmulticast mode [ 141.119242][ T6564] team_slave_1: entered allmulticast mode [ 141.474491][ T6578] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 6 [ 141.733025][ T6580] netlink: 'syz.0.214': attribute type 1 has an invalid length. [ 144.277484][ T6594] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 147.363916][ T6594] team0: Device wg2 is of different type [ 147.690386][ T6610] wg0 speed is unknown, defaulting to 1000 [ 147.729212][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 147.763292][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 147.781481][ T6619] netlink: 4 bytes leftover after parsing attributes in process `syz.1.227'. [ 148.068001][ T6632] ======================================================= [ 148.068001][ T6632] WARNING: The mand mount option has been deprecated and [ 148.068001][ T6632] and is ignored by this kernel. Remove the mand [ 148.068001][ T6632] option from the mount to silence this warning. [ 148.068001][ T6632] ======================================================= [ 148.162768][ T6632] syz.0.230 uses obsolete (PF_INET,SOCK_PACKET) [ 148.226382][ T6632] netlink: 92 bytes leftover after parsing attributes in process `syz.0.230'. [ 151.270823][ T6653] xt_nfacct: accounting object `' does not exist [ 152.017148][ T6668] wg0 speed is unknown, defaulting to 1000 [ 152.069945][ T6678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.244'. [ 152.271758][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.4.248'. [ 153.295820][ T6685] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.248'. [ 154.074218][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 154.103814][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 154.117788][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 154.137114][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 154.159423][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 154.177147][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 154.189810][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.252'. [ 154.199766][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 154.217697][ T6704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.251'. [ 155.551236][ T6746] tap0: tun_chr_ioctl cmd 1074025678 [ 155.596551][ T6746] tap0: group set to 0 [ 155.646265][ T6740] tap0: tun_chr_ioctl cmd 1074025677 [ 155.670241][ T6740] tap0: linktype set to 58 [ 159.275179][ T6769] wg0 speed is unknown, defaulting to 1000 [ 159.509237][ T6779] FAULT_INJECTION: forcing a failure. [ 159.509237][ T6779] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 159.536932][ T6779] CPU: 1 UID: 0 PID: 6779 Comm: syz.4.271 Not tainted syzkaller #0 PREEMPT(full) [ 159.536962][ T6779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.536974][ T6779] Call Trace: [ 159.536984][ T6779] [ 159.536993][ T6779] dump_stack_lvl+0xe8/0x150 [ 159.537032][ T6779] should_fail_ex+0x410/0x560 [ 159.537072][ T6779] _copy_from_iter+0x1d3/0x1660 [ 159.537103][ T6779] ? kmem_cache_alloc_node_noprof+0x101/0x620 [ 159.537131][ T6779] ? rcu_is_watching+0x16/0xb0 [ 159.537153][ T6779] ? trace_kmem_cache_alloc+0x29/0xe0 [ 159.537180][ T6779] ? kmem_cache_alloc_node_noprof+0x3bc/0x620 [ 159.537205][ T6779] ? __pfx__copy_from_iter+0x10/0x10 [ 159.537239][ T6779] ? __alloc_skb+0x27a/0x7a0 [ 159.537266][ T6779] ? __alloc_skb+0x27a/0x7a0 [ 159.537301][ T6779] ? netlink_sendmsg+0x650/0xb40 [ 159.537324][ T6779] ? skb_put+0x112/0x210 [ 159.537365][ T6779] netlink_sendmsg+0x6c0/0xb40 [ 159.537399][ T6779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.537425][ T6779] ? aa_sock_msg_perm+0xf6/0x1c0 [ 159.537465][ T6779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 159.537486][ T6779] sock_sendmsg_nosec+0x13a/0x180 [ 159.537515][ T6779] ____sys_sendmsg+0x54e/0x850 [ 159.537554][ T6779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.537595][ T6779] ? import_iovec+0x73/0xa0 [ 159.537621][ T6779] ___sys_sendmsg+0x2a5/0x360 [ 159.537652][ T6779] ? __lock_acquire+0x683/0x2cf0 [ 159.537689][ T6779] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.537758][ T6779] ? __fget_files+0x2a/0x420 [ 159.537787][ T6779] ? __fget_files+0x3a2/0x420 [ 159.537828][ T6779] __x64_sys_sendmsg+0x1b1/0x290 [ 159.537865][ T6779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.537920][ T6779] do_syscall_64+0x166/0x520 [ 159.537946][ T6779] ? trace_irq_disable+0x3b/0x140 [ 159.537975][ T6779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.537997][ T6779] ? clear_bhb_loop+0x70/0xc0 [ 159.538024][ T6779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.538046][ T6779] RIP: 0033:0x7fef1399e159 [ 159.538066][ T6779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.538084][ T6779] RSP: 002b:00007fef1480a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.538106][ T6779] RAX: ffffffffffffffda RBX: 00007fef13c25fa0 RCX: 00007fef1399e159 [ 159.538122][ T6779] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 159.538135][ T6779] RBP: 00007fef1480a090 R08: 0000000000000000 R09: 0000000000000000 [ 159.538148][ T6779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.538160][ T6779] R13: 00007fef13c26038 R14: 00007fef13c25fa0 R15: 00007ffdfff48e18 [ 159.538193][ T6779] [ 159.837771][ T6783] __nla_validate_parse: 30 callbacks suppressed [ 159.837791][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.0.272'. [ 159.840331][ T6786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.268'. [ 159.975494][ T6783] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 160.017845][ T6783] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 160.071244][ T6783] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 160.145594][ T6783] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 160.572331][ T6800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 160.760915][ T3358] smbdirect: ib_dev[syz2] removed [ 161.938376][ T6816] bridge_slave_1: left allmulticast mode [ 161.963630][ T6816] bridge_slave_1: left promiscuous mode [ 161.988343][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.008373][ T6819] netlink: 48 bytes leftover after parsing attributes in process `syz.4.281'. [ 162.089872][ T6816] bridge_slave_0: left allmulticast mode [ 162.091634][ T6819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.281'. [ 162.133597][ T6816] bridge_slave_0: left promiscuous mode [ 162.191938][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.450881][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'. [ 162.452809][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'. [ 163.604610][ T6848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.291'. [ 164.021175][ T6844] wg0 speed is unknown, defaulting to 1000 [ 164.141497][ T6863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.296'. [ 164.299949][ T6871] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 164.447828][ T6871] bridge_slave_1: left allmulticast mode [ 164.559615][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 164.782853][ T6871] bridge_slave_1: left promiscuous mode [ 164.805460][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.982766][ T6871] bridge_slave_0: left allmulticast mode [ 165.010455][ T6871] bridge_slave_0: left promiscuous mode [ 165.065788][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.243958][ T6886] netlink: 'syz.1.301': attribute type 17 has an invalid length. [ 165.693965][ T6895] __nla_validate_parse: 2 callbacks suppressed [ 165.693985][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.305'. [ 165.767292][ T3358] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.464733][ T6909] netlink: 'syz.4.306': attribute type 11 has an invalid length. [ 166.834042][ T6915] netlink: 'syz.1.310': attribute type 5 has an invalid length. [ 166.865328][ T6915] netlink: 'syz.1.310': attribute type 6 has an invalid length. [ 166.904738][ T6915] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.310'. [ 166.934084][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 167.556683][ T6939] netlink: 148 bytes leftover after parsing attributes in process `syz.4.320'. [ 167.597340][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.0.318'. [ 167.666445][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.1.321'. [ 167.828465][ T6948] netlink: 144 bytes leftover after parsing attributes in process `syz.0.323'. [ 168.033414][ T6937] wg0 speed is unknown, defaulting to 1000 [ 168.069049][ T6954] netlink: 'syz.0.323': attribute type 4 has an invalid length. [ 168.092392][ T6954] netlink: 152 bytes leftover after parsing attributes in process `syz.0.323'. [ 168.171012][ T6954] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 171.393409][ T6974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'. [ 171.454338][ T6981] netlink: 'syz.4.335': attribute type 1 has an invalid length. [ 171.502885][ T6981] netlink: 'syz.4.335': attribute type 2 has an invalid length. [ 171.518789][ T6981] netlink: 132 bytes leftover after parsing attributes in process `syz.4.335'. [ 171.981614][ T6998] netlink: 'syz.2.342': attribute type 10 has an invalid length. [ 172.102180][ T6998] team0: Device vlan0 is up. Set it down before adding it as a team port [ 172.130580][ T6996] tap0: tun_chr_ioctl cmd 1074025678 [ 172.143938][ T6996] tap0: group set to 0 [ 172.152705][ T7005] netlink: 'syz.3.344': attribute type 5 has an invalid length. [ 172.171961][ T7005] netlink: 'syz.3.344': attribute type 5 has an invalid length. [ 172.322218][ T6996] tap0: tun_chr_ioctl cmd 1074025677 [ 172.358766][ T6996] tap0: linktype set to 58 [ 172.693524][ T7016] No such timeout policy "s" [ 172.698780][ T7016] netlink: Failed to associated timeout policy 's' [ 174.753575][ T7007] wg0 speed is unknown, defaulting to 1000 [ 175.137017][ T7029] netlink: 'syz.1.355': attribute type 10 has an invalid length. [ 175.219233][ T7029] team0: Device wg2 is up. Set it down before adding it as a team port [ 175.825226][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 176.568524][ T7070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.371'. [ 177.156951][ T7077] xt_nfacct: accounting object `' does not exist [ 177.259067][ T7070] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.371'. [ 178.359661][ T7100] netlink: 'syz.4.382': attribute type 2 has an invalid length. [ 179.374733][ T7134] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 179.594573][ T5630] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 180.133758][ T7134] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.389'. [ 180.713747][ T7137] wg0 speed is unknown, defaulting to 1000 [ 183.173339][ T7162] netlink: 96 bytes leftover after parsing attributes in process `syz.0.399'. [ 183.485334][ T7166] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.399'. [ 183.905666][ T7162] netlink: 'syz.0.399': attribute type 21 has an invalid length. [ 184.115918][ T7162] netlink: 128 bytes leftover after parsing attributes in process `syz.0.399'. [ 184.360068][ T7162] netlink: 'syz.0.399': attribute type 4 has an invalid length. [ 184.627975][ T7162] netlink: 3 bytes leftover after parsing attributes in process `syz.0.399'. [ 184.947309][ T5630] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 184.996114][ T7170] netlink: 184 bytes leftover after parsing attributes in process `syz.1.402'. [ 185.039395][ T7170] team0: entered allmulticast mode [ 185.045082][ T7170] team_slave_0: entered allmulticast mode [ 185.051253][ T7170] team_slave_1: entered allmulticast mode [ 185.362801][ T7192] netlink: 16 bytes leftover after parsing attributes in process `syz.4.407'. [ 186.167273][ T7192] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.407'. [ 186.814603][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.410'. [ 186.938039][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 187.220125][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 187.315762][ T7221] wg0 speed is unknown, defaulting to 1000 [ 188.034815][ T7246] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 188.034815][ T7246] Please contact the netfilter-devel mailing list or update your nftables rules. [ 188.423677][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.3.425'. [ 189.039145][ T7256] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.425'. [ 189.807725][ T7280] syzkaller0: entered promiscuous mode [ 189.832311][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.436'. [ 189.843686][ T7280] syzkaller0: entered allmulticast mode [ 194.258804][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.444'. [ 194.336308][ T7313] FAULT_INJECTION: forcing a failure. [ 194.336308][ T7313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.350503][ T7313] CPU: 0 UID: 0 PID: 7313 Comm: syz.0.445 Not tainted syzkaller #0 PREEMPT(full) [ 194.350531][ T7313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.350544][ T7313] Call Trace: [ 194.350551][ T7313] [ 194.350560][ T7313] dump_stack_lvl+0xe8/0x150 [ 194.350596][ T7313] should_fail_ex+0x410/0x560 [ 194.350634][ T7313] _copy_from_user+0x2d/0xb0 [ 194.350659][ T7313] ___sys_sendmsg+0x1c6/0x360 [ 194.350685][ T7313] ? __lock_acquire+0x683/0x2cf0 [ 194.350714][ T7313] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.350768][ T7313] ? __fget_files+0x2a/0x420 [ 194.350791][ T7313] ? __fget_files+0x3a2/0x420 [ 194.350822][ T7313] __x64_sys_sendmsg+0x1b1/0x290 [ 194.350851][ T7313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.350893][ T7313] do_syscall_64+0x166/0x520 [ 194.350914][ T7313] ? trace_irq_disable+0x3b/0x140 [ 194.350941][ T7313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.350961][ T7313] ? clear_bhb_loop+0x70/0xc0 [ 194.350985][ T7313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.351003][ T7313] RIP: 0033:0x7fbddb79e159 [ 194.351020][ T7313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.351035][ T7313] RSP: 002b:00007fbddc6f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.351055][ T7313] RAX: ffffffffffffffda RBX: 00007fbddba25fa0 RCX: 00007fbddb79e159 [ 194.351069][ T7313] RDX: 0000000000000040 RSI: 0000200000000f00 RDI: 0000000000000003 [ 194.351080][ T7313] RBP: 00007fbddc6f0090 R08: 0000000000000000 R09: 0000000000000000 [ 194.351090][ T7313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.351100][ T7313] R13: 00007fbddba26038 R14: 00007fbddba25fa0 R15: 00007ffd9a001298 [ 194.351129][ T7313] [ 194.588258][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.594830][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.874164][ T7325] netlink: 40 bytes leftover after parsing attributes in process `syz.0.448'. [ 195.136282][ T7333] tipc: Started in network mode [ 195.192400][ T7333] tipc: Node identity 805e0004, cluster identity 4711 [ 195.225990][ T7333] tipc: Node number set to 2153644036 [ 198.074681][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.454'. [ 198.332082][ T7346] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 6 [ 198.586705][ T7350] netlink: 164 bytes leftover after parsing attributes in process `syz.1.460'. [ 198.626316][ T7350] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 198.656800][ T7354] netlink: 20 bytes leftover after parsing attributes in process `syz.4.461'. [ 198.960862][ T5630] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 200.037324][ T7371] tap0: tun_chr_ioctl cmd 1074025678 [ 200.086636][ T7371] tap0: group set to 0 [ 200.103127][ T7371] tap0: tun_chr_ioctl cmd 1074025677 [ 200.127733][ T7371] tap0: linktype set to 58 [ 200.358560][ T7393] netlink: 'syz.1.473': attribute type 17 has an invalid length. [ 200.406032][ T7393] netlink: 148 bytes leftover after parsing attributes in process `syz.1.473'. [ 200.435664][ T7393] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 200.842285][ T7406] netlink: 20 bytes leftover after parsing attributes in process `syz.1.475'. [ 203.330648][ T7416] netlink: 'syz.0.479': attribute type 10 has an invalid length. [ 204.271274][ T7444] netlink: 'syz.3.486': attribute type 32 has an invalid length. [ 204.355977][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.485'. [ 204.581869][ T7453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.488'. [ 206.298483][ T7505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.503'. [ 206.344236][ T7509] netlink: 'syz.3.504': attribute type 1 has an invalid length. [ 206.379440][ T7509] netlink: 'syz.3.504': attribute type 3 has an invalid length. [ 208.281408][ T7541] FAULT_INJECTION: forcing a failure. [ 208.281408][ T7541] name failslab, interval 1, probability 0, space 0, times 0 [ 208.390529][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz.0.515 Not tainted syzkaller #0 PREEMPT(full) [ 208.390558][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.390571][ T7541] Call Trace: [ 208.390579][ T7541] [ 208.390588][ T7541] dump_stack_lvl+0xe8/0x150 [ 208.390624][ T7541] should_fail_ex+0x410/0x560 [ 208.390662][ T7541] should_failslab+0xa8/0x100 [ 208.390698][ T7541] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 208.390726][ T7541] ? skb_clone+0x212/0x3a0 [ 208.390749][ T7541] ? skb_clone+0x212/0x3a0 [ 208.390770][ T7541] skb_clone+0x212/0x3a0 [ 208.390789][ T7541] __netlink_deliver_tap+0x413/0x860 [ 208.390817][ T7541] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.390834][ T7541] netlink_deliver_tap+0x19c/0x1b0 [ 208.390851][ T7541] netlink_unicast+0x781/0x940 [ 208.390885][ T7541] netlink_sendmsg+0x813/0xb40 [ 208.390911][ T7541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.390931][ T7541] ? aa_sock_msg_perm+0xf6/0x1c0 [ 208.390964][ T7541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.390979][ T7541] sock_sendmsg_nosec+0x13a/0x180 [ 208.391001][ T7541] ____sys_sendmsg+0x54e/0x850 [ 208.391030][ T7541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.391063][ T7541] ? import_iovec+0x73/0xa0 [ 208.391083][ T7541] ___sys_sendmsg+0x2a5/0x360 [ 208.391106][ T7541] ? __lock_acquire+0x683/0x2cf0 [ 208.391133][ T7541] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.391178][ T7541] ? __fget_files+0x2a/0x420 [ 208.391210][ T7541] ? __fget_files+0x2a/0x420 [ 208.391229][ T7541] ? __fget_files+0x3a2/0x420 [ 208.391260][ T7541] __x64_sys_sendmsg+0x1b1/0x290 [ 208.391287][ T7541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.391331][ T7541] do_syscall_64+0x166/0x520 [ 208.391349][ T7541] ? trace_irq_disable+0x3b/0x140 [ 208.391369][ T7541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.391385][ T7541] ? clear_bhb_loop+0x70/0xc0 [ 208.391404][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.391419][ T7541] RIP: 0033:0x7fbddb79e159 [ 208.391435][ T7541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.391453][ T7541] RSP: 002b:00007fbddc6f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.391470][ T7541] RAX: ffffffffffffffda RBX: 00007fbddba25fa0 RCX: 00007fbddb79e159 [ 208.391481][ T7541] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 208.391490][ T7541] RBP: 00007fbddc6f0090 R08: 0000000000000000 R09: 0000000000000000 [ 208.391500][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.391508][ T7541] R13: 00007fbddba26038 R14: 00007fbddba25fa0 R15: 00007ffd9a001298 [ 208.391537][ T7541] [ 208.928974][ T7549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.518'. [ 209.011676][ T7554] FAULT_INJECTION: forcing a failure. [ 209.011676][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 209.025346][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.1.521 Not tainted syzkaller #0 PREEMPT(full) [ 209.025376][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.025388][ T7554] Call Trace: [ 209.025397][ T7554] [ 209.025406][ T7554] dump_stack_lvl+0xe8/0x150 [ 209.025444][ T7554] should_fail_ex+0x410/0x560 [ 209.025483][ T7554] should_failslab+0xa8/0x100 [ 209.025516][ T7554] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 209.025541][ T7554] ? local_lock_release+0x9c/0x160 [ 209.025572][ T7554] ? __alloc_skb+0x1db/0x7a0 [ 209.025599][ T7554] ? __alloc_skb+0x1db/0x7a0 [ 209.025633][ T7554] __alloc_skb+0x1db/0x7a0 [ 209.025668][ T7554] netlink_dump+0x1e7/0xee0 [ 209.025708][ T7554] ? rcu_is_watching+0x16/0xb0 [ 209.025736][ T7554] ? __pfx_netlink_dump+0x10/0x10 [ 209.025785][ T7554] ? genl_start+0x497/0x6d0 [ 209.025822][ T7554] __netlink_dump_start+0x589/0x7b0 [ 209.025865][ T7554] genl_family_rcv_msg_dumpit+0x213/0x310 [ 209.025899][ T7554] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 209.025927][ T7554] ? genl_get_cmd+0x4d6/0x960 [ 209.025961][ T7554] ? __pfx_genl_start+0x10/0x10 [ 209.025986][ T7554] ? __pfx_genl_dumpit+0x10/0x10 [ 209.026012][ T7554] ? __pfx_genl_done+0x10/0x10 [ 209.026042][ T7554] ? __dev_queue_xmit+0x29b/0x3820 [ 209.026077][ T7554] genl_rcv_msg+0x5e1/0x7a0 [ 209.026117][ T7554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 209.026144][ T7554] ? __pfx_devlink_nl_sb_port_pool_get_dumpit+0x10/0x10 [ 209.026176][ T7554] ? __pfx_ref_tracker_free+0x10/0x10 [ 209.026217][ T7554] netlink_rcv_skb+0x226/0x4a0 [ 209.026240][ T7554] ? __pfx_genl_rcv_msg+0x10/0x10 [ 209.026270][ T7554] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.026310][ T7554] ? down_read+0x2be/0x330 [ 209.026343][ T7554] genl_rcv+0x28/0x40 [ 209.026368][ T7554] netlink_unicast+0x7bd/0x940 [ 209.026414][ T7554] netlink_sendmsg+0x813/0xb40 [ 209.026448][ T7554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.026475][ T7554] ? aa_sock_msg_perm+0xf6/0x1c0 [ 209.026517][ T7554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.026539][ T7554] sock_sendmsg_nosec+0x13a/0x180 [ 209.026568][ T7554] ____sys_sendmsg+0x54e/0x850 [ 209.026608][ T7554] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.026653][ T7554] ? import_iovec+0x73/0xa0 [ 209.026680][ T7554] ___sys_sendmsg+0x2a5/0x360 [ 209.026712][ T7554] ? __lock_acquire+0x683/0x2cf0 [ 209.026749][ T7554] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.026823][ T7554] ? __fget_files+0x2a/0x420 [ 209.026852][ T7554] ? __fget_files+0x3a2/0x420 [ 209.026893][ T7554] __x64_sys_sendmsg+0x1b1/0x290 [ 209.026931][ T7554] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.026989][ T7554] do_syscall_64+0x166/0x520 [ 209.027014][ T7554] ? trace_irq_disable+0x3b/0x140 [ 209.027043][ T7554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.027065][ T7554] ? clear_bhb_loop+0x70/0xc0 [ 209.027092][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.027114][ T7554] RIP: 0033:0x7f086059e159 [ 209.027135][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.027152][ T7554] RSP: 002b:00007f086141a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.027175][ T7554] RAX: ffffffffffffffda RBX: 00007f0860825fa0 RCX: 00007f086059e159 [ 209.027190][ T7554] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 209.027210][ T7554] RBP: 00007f086141a090 R08: 0000000000000000 R09: 0000000000000000 [ 209.027223][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.027235][ T7554] R13: 00007f0860826038 R14: 00007f0860825fa0 R15: 00007ffd25cb4ef8 [ 209.027271][ T7554] [ 209.528930][ T7551] netlink: 'syz.2.519': attribute type 10 has an invalid length. [ 209.573096][ T7551] netlink: 232 bytes leftover after parsing attributes in process `syz.2.519'. [ 210.153887][ T7551] wg0 speed is unknown, defaulting to 1000 [ 210.831083][ T7591] siw: device registration error -23 [ 210.848678][ T7586] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.528'. [ 210.874766][ T7587] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.528'. [ 211.342317][ T7605] FAULT_INJECTION: forcing a failure. [ 211.342317][ T7605] name failslab, interval 1, probability 0, space 0, times 0 [ 211.355756][ T7591] wg0 speed is unknown, defaulting to 1000 [ 211.364203][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 211.375356][ T7605] CPU: 0 UID: 0 PID: 7605 Comm: syz.0.534 Not tainted syzkaller #0 PREEMPT(full) [ 211.375385][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 211.375398][ T7605] Call Trace: [ 211.375407][ T7605] [ 211.375416][ T7605] dump_stack_lvl+0xe8/0x150 [ 211.375454][ T7605] should_fail_ex+0x410/0x560 [ 211.375504][ T7605] should_failslab+0xa8/0x100 [ 211.375538][ T7605] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 211.375563][ T7605] ? local_lock_release+0x9c/0x160 [ 211.375595][ T7605] ? __alloc_skb+0x1db/0x7a0 [ 211.375622][ T7605] ? __alloc_skb+0x1db/0x7a0 [ 211.375659][ T7605] __alloc_skb+0x1db/0x7a0 [ 211.375694][ T7605] netlink_ack+0x136/0xb30 [ 211.375713][ T7605] ? __pfx___mutex_trylock_common+0x10/0x10 [ 211.375742][ T7605] ? rcu_is_watching+0x16/0xb0 [ 211.375765][ T7605] ? trace_contention_end+0x3d/0x140 [ 211.375799][ T7605] netlink_rcv_skb+0x2a4/0x4a0 [ 211.375823][ T7605] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 211.375851][ T7605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.375892][ T7605] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.375914][ T7605] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.375940][ T7605] xfrm_netlink_rcv+0x79/0x90 [ 211.375966][ T7605] netlink_unicast+0x7bd/0x940 [ 211.376013][ T7605] netlink_sendmsg+0x813/0xb40 [ 211.376047][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.376074][ T7605] ? aa_sock_msg_perm+0xf6/0x1c0 [ 211.376117][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.376139][ T7605] sock_sendmsg_nosec+0x13a/0x180 [ 211.376167][ T7605] ____sys_sendmsg+0x54e/0x850 [ 211.376207][ T7605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.376257][ T7605] ? import_iovec+0x73/0xa0 [ 211.376285][ T7605] ___sys_sendmsg+0x2a5/0x360 [ 211.376318][ T7605] ? __lock_acquire+0x683/0x2cf0 [ 211.376355][ T7605] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.376430][ T7605] ? __fget_files+0x2a/0x420 [ 211.376460][ T7605] ? __fget_files+0x3a2/0x420 [ 211.376510][ T7605] __x64_sys_sendmsg+0x1b1/0x290 [ 211.376548][ T7605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.376607][ T7605] do_syscall_64+0x166/0x520 [ 211.376632][ T7605] ? trace_irq_disable+0x3b/0x140 [ 211.376661][ T7605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.376684][ T7605] ? clear_bhb_loop+0x70/0xc0 [ 211.376716][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.376739][ T7605] RIP: 0033:0x7fbddb79e159 [ 211.376760][ T7605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 211.376778][ T7605] RSP: 002b:00007fbddc6f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.376801][ T7605] RAX: ffffffffffffffda RBX: 00007fbddba25fa0 RCX: 00007fbddb79e159 [ 211.376817][ T7605] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 211.376830][ T7605] RBP: 00007fbddc6f0090 R08: 0000000000000000 R09: 0000000000000000 [ 211.376844][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.376856][ T7605] R13: 00007fbddba26038 R14: 00007fbddba25fa0 R15: 00007ffd9a001298 [ 211.376892][ T7605] [ 211.788057][ T7608] netlink: 60 bytes leftover after parsing attributes in process `syz.1.536'. [ 211.871585][ T7608] netlink: 'syz.1.536': attribute type 10 has an invalid length. [ 211.879674][ T7608] netlink: 40 bytes leftover after parsing attributes in process `syz.1.536'. [ 211.904698][ T7608] geneve1: entered allmulticast mode [ 211.916658][ T7608] team0: Port device geneve1 added [ 212.031158][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 212.037413][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 212.043616][ T5631] Bluetooth: hci2: command 0x0406 tx timeout [ 212.043987][ T5632] Bluetooth: hci4: command 0x0406 tx timeout [ 212.049925][ T5631] Bluetooth: hci0: command 0x0406 tx timeout [ 212.493278][ T7627] tap0: tun_chr_ioctl cmd 1074025678 [ 212.517310][ T7627] tap0: group set to 0 [ 212.545810][ T7622] tap0: tun_chr_ioctl cmd 1074025677 [ 212.561819][ T7622] tap0: linktype set to 58 [ 213.127804][ T7643] netlink: 16 bytes leftover after parsing attributes in process `syz.4.546'. [ 213.701738][ T7637] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.546'. [ 214.847902][ T50] Bluetooth: hci4: unexpected event 0x09 length: 15 > 3 [ 214.973489][ T7687] netlink: 392 bytes leftover after parsing attributes in process `syz.0.563'. [ 215.270801][ T7691] netlink: 60 bytes leftover after parsing attributes in process `syz.2.565'. [ 215.523691][ T7695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.565'. [ 215.633039][ T7697] netlink: 60 bytes leftover after parsing attributes in process `syz.2.565'. [ 215.736725][ T7688] netlink: 'syz.2.565': attribute type 11 has an invalid length. [ 215.902398][ T7692] netlink: 184 bytes leftover after parsing attributes in process `syz.4.564'. [ 218.720578][ T7748] netlink: 'syz.4.576': attribute type 61 has an invalid length. [ 218.861047][ T7748] netlink: 56 bytes leftover after parsing attributes in process `syz.4.576'. [ 220.370963][ T7763] No such timeout policy "s" [ 220.391721][ T7763] netlink: Failed to associated timeout policy 's' [ 221.400581][ T7778] tap0: tun_chr_ioctl cmd 1074025678 [ 221.457589][ T7778] tap0: group set to 0 [ 221.501371][ T7787] tap0: tun_chr_ioctl cmd 1074025677 [ 221.527793][ T7787] tap0: linktype set to 58 [ 222.363328][ T7798] netlink: 220 bytes leftover after parsing attributes in process `syz.4.588'. [ 224.221532][ T7819] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 224.279789][ T7819] netlink: 232 bytes leftover after parsing attributes in process `syz.0.593'. [ 224.407694][ T7815] netlink: 68 bytes leftover after parsing attributes in process `syz.3.591'. [ 225.723612][ T7819] wg0 speed is unknown, defaulting to 1000 [ 227.183087][ T7857] netlink: 'syz.4.607': attribute type 10 has an invalid length. [ 227.605845][ T7865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.611'. [ 227.946106][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.613'. [ 228.069272][ T7871] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 228.085386][ T7871] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 228.105894][ T7871] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 228.139040][ T7871] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 228.306516][ T7882] tap0: tun_chr_ioctl cmd 1074025678 [ 228.323735][ T7882] tap0: group set to 0 [ 228.335822][ T7882] tap0: tun_chr_ioctl cmd 1074025677 [ 228.357118][ T7882] tap0: linktype set to 58 [ 228.479352][ T7117] smbdirect: ib_dev[syz2] removed [ 229.112136][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'. [ 229.329936][ T7900] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 229.393658][ T7900] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 229.454094][ T7900] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 229.495736][ T7906] netlink: 20 bytes leftover after parsing attributes in process `syz.2.625'. [ 229.506798][ T7900] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 229.861373][ T7117] smbdirect: ib_dev[syz2] removed [ 229.904394][ T7914] netlink: 60 bytes leftover after parsing attributes in process `syz.2.629'. [ 229.931003][ T7915] netlink: 44 bytes leftover after parsing attributes in process `syz.3.627'. [ 229.982395][ T7914] netlink: 'syz.2.629': attribute type 10 has an invalid length. [ 230.068165][ T7914] netlink: 40 bytes leftover after parsing attributes in process `syz.2.629'. [ 230.313064][ T7914] team0: Port device geneve1 added [ 231.086017][ T7940] tap0: tun_chr_ioctl cmd 1074025678 [ 231.114170][ T7940] tap0: group set to 0 [ 231.169949][ T7941] tap0: tun_chr_ioctl cmd 1074025677 [ 231.206718][ T7941] tap0: linktype set to 58 [ 231.782411][ T7952] netlink: 20 bytes leftover after parsing attributes in process `syz.1.639'. [ 232.193440][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.3.642'. [ 232.395525][ T7966] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 232.465096][ T7966] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 232.603792][ T7966] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 232.830828][ T7970] netlink: 45 bytes leftover after parsing attributes in process `syz.2.645'. [ 232.902799][ T7966] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 233.213572][ T12] smbdirect: ib_dev[syz2] removed [ 233.960687][ T7988] Cannot find set identified by id 0 to match [ 234.723510][ T8005] netlink: 20 bytes leftover after parsing attributes in process `syz.0.654'. [ 235.333096][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 238.763302][ T8028] netlink: 'syz.1.663': attribute type 10 has an invalid length. [ 238.819836][ T8031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 238.903890][ T8035] netlink: 'syz.1.663': attribute type 12 has an invalid length. [ 239.075687][ T8037] netlink: 528 bytes leftover after parsing attributes in process `syz.1.663'. [ 239.184402][ T8028] vxcan0: entered allmulticast mode [ 239.203275][ T8028] team0: Device vxcan0 is of different type [ 239.753552][ T8047] netlink: 64 bytes leftover after parsing attributes in process `syz.2.669'. [ 240.007889][ T8047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.669'. [ 240.644875][ T8057] bridge_slave_1: left allmulticast mode [ 240.659278][ T8057] bridge_slave_1: left promiscuous mode [ 240.740130][ T8057] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.181778][ T8059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.673'. [ 241.322200][ T8057] bridge_slave_0: left allmulticast mode [ 241.459208][ T8057] bridge_slave_0: left promiscuous mode [ 241.535321][ T8057] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.552348][ T8077] netlink: 76 bytes leftover after parsing attributes in process `syz.4.677'. [ 242.790433][ T8077] unsupported nla_type 4096 [ 243.259732][ T8086] FAULT_INJECTION: forcing a failure. [ 243.259732][ T8086] name failslab, interval 1, probability 0, space 0, times 0 [ 243.346505][ T8086] CPU: 1 UID: 0 PID: 8086 Comm: syz.3.680 Not tainted syzkaller #0 PREEMPT(full) [ 243.346541][ T8086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.346555][ T8086] Call Trace: [ 243.346563][ T8086] [ 243.346573][ T8086] dump_stack_lvl+0xe8/0x150 [ 243.346613][ T8086] should_fail_ex+0x410/0x560 [ 243.346656][ T8086] should_failslab+0xa8/0x100 [ 243.346692][ T8086] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 243.346723][ T8086] ? __alloc_skb+0x1db/0x7a0 [ 243.346751][ T8086] ? __alloc_skb+0x1db/0x7a0 [ 243.346778][ T8086] ? tipc_own_addr+0x45/0x2a0 [ 243.346810][ T8086] __alloc_skb+0x1db/0x7a0 [ 243.346843][ T8086] tipc_msg_create+0x4c/0x4c0 [ 243.346867][ T8086] ? tipc_own_addr+0x45/0x2a0 [ 243.346891][ T8086] ? tipc_own_addr+0x45/0x2a0 [ 243.346921][ T8086] tipc_group_proto_xmit+0xce/0x790 [ 243.346958][ T8086] tipc_group_delete+0x15e/0x4c0 [ 243.346997][ T8086] ? __pfx_tipc_group_delete+0x10/0x10 [ 243.347034][ T8086] ? tipc_release+0xc4/0x24d0 [ 243.347059][ T8086] ? tipc_group_self+0x26/0x1c0 [ 243.347098][ T8086] tipc_release+0x400/0x24d0 [ 243.347119][ T8086] ? __sock_release+0x7a/0x1f0 [ 243.347154][ T8086] ? __pfx_tipc_release+0x10/0x10 [ 243.347176][ T8086] ? down_write+0x16b/0x200 [ 243.347204][ T8086] ? __pfx_down_write+0x10/0x10 [ 243.347245][ T8086] __sock_release+0xa0/0x1f0 [ 243.347269][ T8086] ? __pfx_sock_close+0x10/0x10 [ 243.347290][ T8086] sock_close+0x1c/0x30 [ 243.347310][ T8086] __fput+0x418/0xa50 [ 243.347344][ T8086] fput_close_sync+0x11f/0x240 [ 243.347371][ T8086] ? __pfx_fput_close_sync+0x10/0x10 [ 243.347407][ T8086] __x64_sys_close+0x7e/0x110 [ 243.347439][ T8086] do_syscall_64+0x166/0x520 [ 243.347463][ T8086] ? trace_irq_disable+0x3b/0x140 [ 243.347492][ T8086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.347514][ T8086] ? clear_bhb_loop+0x70/0xc0 [ 243.347541][ T8086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.347563][ T8086] RIP: 0033:0x7fd4f939e159 [ 243.347584][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.347602][ T8086] RSP: 002b:00007fd4fa307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 243.347625][ T8086] RAX: ffffffffffffffda RBX: 00007fd4f9625fa0 RCX: 00007fd4f939e159 [ 243.347641][ T8086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 243.347653][ T8086] RBP: 00007fd4fa307090 R08: 0000000000000000 R09: 0000000000000000 [ 243.347666][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.347678][ T8086] R13: 00007fd4f9626038 R14: 00007fd4f9625fa0 R15: 00007fff2d3b9248 [ 243.347713][ T8086] [ 243.907880][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.682'. [ 244.157863][ T8103] raw_sendmsg: syz.0.685 forgot to set AF_INET. Fix it! [ 244.299923][ T8104] netlink: 'syz.0.685': attribute type 2 has an invalid length. [ 244.462251][ T8104] netlink: 'syz.0.685': attribute type 2 has an invalid length. [ 246.042591][ T8123] tap0: tun_chr_ioctl cmd 1074025678 [ 246.079564][ T8123] tap0: group set to 0 [ 246.132228][ T8128] tap0: tun_chr_ioctl cmd 1074025677 [ 246.143747][ T8128] tap0: linktype set to 58 [ 247.053274][ T8147] netlink: 88 bytes leftover after parsing attributes in process `syz.1.694'. [ 247.086647][ T8149] hsr0: entered allmulticast mode [ 247.116013][ T8149] hsr_slave_0: entered allmulticast mode [ 247.142499][ T8149] hsr_slave_1: entered allmulticast mode [ 247.485181][ T8157] netlink: 71 bytes leftover after parsing attributes in process `syz.2.696'. [ 248.585065][ T8176] netlink: 164 bytes leftover after parsing attributes in process `syz.4.703'. [ 248.751620][ T8176] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 249.349669][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.707'. [ 249.380374][ T8193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.707'. [ 249.780980][ T8207] netlink: 14 bytes leftover after parsing attributes in process `syz.3.711'. [ 250.560489][ T8231] netlink: 'syz.4.718': attribute type 10 has an invalid length. [ 250.691574][ T8231] team0: Device vlan0 is up. Set it down before adding it as a team port [ 251.133373][ T8233] netlink: 36 bytes leftover after parsing attributes in process `syz.3.719'. [ 254.649039][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.3.729'. [ 256.028353][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.046370][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.268124][ T8334] netlink: 'syz.0.737': attribute type 1 has an invalid length. [ 256.326672][ T8334] netlink: 64543 bytes leftover after parsing attributes in process `syz.0.737'. [ 258.201646][ T8331] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.736'. [ 258.236168][ T8370] netlink: 24 bytes leftover after parsing attributes in process `syz.3.747'. [ 258.566191][ T8373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.748'. [ 259.663045][ T8385] netlink: 'syz.4.750': attribute type 1 has an invalid length. [ 259.952101][ T8386] netlink: 763 bytes leftover after parsing attributes in process `syz.4.750'. [ 261.504166][ T8434] xt_nfacct: accounting object `' does not exist [ 262.845213][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'. [ 263.482041][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.770'. [ 263.559583][ T8474] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 263.613136][ T8474] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 263.687138][ T8474] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 263.802811][ T8474] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 265.708441][ T35] smbdirect: ib_dev[syz2] removed [ 267.144883][ T8521] netlink: 60 bytes leftover after parsing attributes in process `syz.2.779'. [ 267.276245][ T8525] netlink: 'syz.2.779': attribute type 10 has an invalid length. [ 267.391336][ T8525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.779'. [ 267.575309][ T8529] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.780'. [ 267.701213][ T8532] netlink: 132 bytes leftover after parsing attributes in process `syz.0.781'. [ 268.313254][ T8545] netlink: 'syz.1.784': attribute type 21 has an invalid length. [ 272.177784][ T8558] netlink: 184 bytes leftover after parsing attributes in process `syz.3.790'. [ 272.245303][ T8558] team0: entered allmulticast mode [ 272.292348][ T8558] team_slave_0: entered allmulticast mode [ 272.336354][ T8558] team_slave_1: entered allmulticast mode [ 272.820755][ T8571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'. [ 273.395111][ T8577] netlink: 96 bytes leftover after parsing attributes in process `syz.2.789'. [ 273.444653][ T8579] netlink: 128 bytes leftover after parsing attributes in process `syz.2.789'. [ 273.522462][ T8579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 277.193651][ T8636] netlink: 'syz.1.809': attribute type 29 has an invalid length. [ 279.079172][ T8668] netlink: 'syz.4.819': attribute type 1 has an invalid length. [ 279.288063][ T8665] netlink: 14 bytes leftover after parsing attributes in process `syz.0.817'. [ 279.710846][ T8680] TCP: TCP_TX_DELAY enabled [ 280.202016][ T8693] netlink: 84 bytes leftover after parsing attributes in process `syz.3.826'. [ 281.359883][ T8708] netlink: 60 bytes leftover after parsing attributes in process `syz.2.832'. [ 281.419655][ T8708] netlink: 'syz.2.832': attribute type 10 has an invalid length. [ 281.450319][ T8708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.832'. [ 281.833895][ T8708] syzkaller0: entered promiscuous mode [ 281.852498][ T8708] syzkaller0: entered allmulticast mode [ 283.220162][ T8715] netlink: 48 bytes leftover after parsing attributes in process `syz.1.834'. [ 285.045144][ T8754] netlink: 'syz.2.848': attribute type 10 has an invalid length. [ 285.835453][ T8758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.850'. [ 286.311736][ T8758] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 286.401731][ T8758] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 286.475586][ T8758] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 286.635187][ T8758] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 287.659076][ T152] smbdirect: ib_dev[syz2] removed [ 290.703540][ T8815] netlink: 'syz.4.865': attribute type 10 has an invalid length. [ 290.739870][ T8815] netlink: 'syz.4.865': attribute type 8 has an invalid length. [ 291.608298][ T8816] wg0 speed is unknown, defaulting to 1000 [ 292.104343][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 298.360844][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.887'. [ 298.779753][ T8904] netlink: 'syz.4.889': attribute type 10 has an invalid length. [ 298.809304][ T8904] netlink: 'syz.4.889': attribute type 8 has an invalid length. [ 298.992157][ T8914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.892'. [ 299.104744][ T8911] wg0 speed is unknown, defaulting to 1000 [ 301.704477][ T8919] netlink: 80 bytes leftover after parsing attributes in process `syz.0.892'. [ 302.628026][ T8940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.898'. [ 302.686959][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.897'. [ 302.970714][ T8940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.898'. [ 303.807927][ T8962] netlink: 'syz.0.905': attribute type 10 has an invalid length. [ 303.886267][ T8962] netlink: 'syz.0.905': attribute type 8 has an invalid length. [ 305.109334][ T8970] wg0 speed is unknown, defaulting to 1000 [ 305.584034][ T8982] netlink: 20 bytes leftover after parsing attributes in process `syz.3.908'. [ 305.829225][ T8991] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 305.841856][ T8991] netlink: 'syz.0.911': attribute type 8 has an invalid length. [ 306.126966][ T8995] netlink: 80 bytes leftover after parsing attributes in process `syz.3.908'. [ 306.431262][ T8992] wg0 speed is unknown, defaulting to 1000 [ 308.032927][ T9021] netlink: 10 bytes leftover after parsing attributes in process `syz.1.917'. [ 310.969860][ T9052] netlink: 'syz.2.925': attribute type 21 has an invalid length. [ 311.072101][ T9052] netlink: 'syz.2.925': attribute type 13 has an invalid length. [ 311.096616][ T9056] FAULT_INJECTION: forcing a failure. [ 311.096616][ T9056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.130727][ T9052] netlink: 6188 bytes leftover after parsing attributes in process `syz.2.925'. [ 311.209613][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.0.926 Not tainted syzkaller #0 PREEMPT(full) [ 311.209648][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.209662][ T9056] Call Trace: [ 311.209672][ T9056] [ 311.209682][ T9056] dump_stack_lvl+0xe8/0x150 [ 311.209722][ T9056] should_fail_ex+0x410/0x560 [ 311.209764][ T9056] _copy_from_user+0x2d/0xb0 [ 311.209789][ T9056] __sys_bpf+0x2e7/0xd90 [ 311.209832][ T9056] ? __pfx___sys_bpf+0x10/0x10 [ 311.209868][ T9056] ? __pfx_trace_call_bpf+0x10/0x10 [ 311.209927][ T9056] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 311.209958][ T9056] ? ksys_write+0x242/0x270 [ 311.209998][ T9056] ? __pfx_ksys_write+0x10/0x10 [ 311.210039][ T9056] __x64_sys_bpf+0xba/0xd0 [ 311.210073][ T9056] do_syscall_64+0x166/0x520 [ 311.210102][ T9056] ? trace_irq_disable+0x3b/0x140 [ 311.210131][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.210154][ T9056] ? clear_bhb_loop+0x70/0xc0 [ 311.210181][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.210203][ T9056] RIP: 0033:0x7fbddb79e159 [ 311.210224][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.210243][ T9056] RSP: 002b:00007fbddc6f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.210266][ T9056] RAX: ffffffffffffffda RBX: 00007fbddba25fa0 RCX: 00007fbddb79e159 [ 311.210282][ T9056] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 311.210295][ T9056] RBP: 00007fbddc6f0090 R08: 0000000000000000 R09: 0000000000000000 [ 311.210308][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.210321][ T9056] R13: 00007fbddba26038 R14: 00007fbddba25fa0 R15: 00007ffd9a001298 [ 311.210357][ T9056] [ 311.469990][ T9063] FAULT_INJECTION: forcing a failure. [ 311.469990][ T9063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.502714][ T9063] CPU: 1 UID: 0 PID: 9063 Comm: syz.4.928 Not tainted syzkaller #0 PREEMPT(full) [ 311.502748][ T9063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.502761][ T9063] Call Trace: [ 311.502769][ T9063] [ 311.502779][ T9063] dump_stack_lvl+0xe8/0x150 [ 311.502816][ T9063] should_fail_ex+0x410/0x560 [ 311.502854][ T9063] _copy_from_user+0x2d/0xb0 [ 311.502879][ T9063] ip_tunnel_parm_from_user+0xbd/0x3a0 [ 311.502904][ T9063] ? kasan_save_track+0x4f/0x80 [ 311.502929][ T9063] ? kasan_save_track+0x3e/0x80 [ 311.502953][ T9063] ? kasan_save_free_info+0x40/0x50 [ 311.502974][ T9063] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 311.502994][ T9063] ? security_file_ioctl+0xc3/0x2a0 [ 311.503041][ T9063] ip_tunnel_siocdevprivate+0xb0/0x1d0 [ 311.503068][ T9063] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 311.503089][ T9063] ? perf_trace_preemptirq_template+0xb3/0x350 [ 311.503164][ T9063] ipip6_tunnel_siocdevprivate+0x27d/0x1690 [ 311.503198][ T9063] ? __pfx___mutex_trylock_common+0x10/0x10 [ 311.503222][ T9063] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 311.503248][ T9063] ? rcu_is_watching+0x16/0xb0 [ 311.503270][ T9063] ? trace_contention_end+0x3d/0x140 [ 311.503294][ T9063] ? __mutex_lock+0x30b/0x1550 [ 311.503324][ T9063] ? do_vfs_ioctl+0x116f/0x1530 [ 311.503353][ T9063] ? dev_ioctl+0x83c/0x1150 [ 311.503386][ T9063] ? __pfx___mutex_lock+0x10/0x10 [ 311.503409][ T9063] ? full_name_hash+0x92/0xe0 [ 311.503447][ T9063] dev_ifsioc+0xb56/0x1360 [ 311.503483][ T9063] dev_ioctl+0x84c/0x1150 [ 311.503515][ T9063] sock_ioctl+0x753/0x7e0 [ 311.503552][ T9063] ? __pfx_sock_ioctl+0x10/0x10 [ 311.503578][ T9063] ? __fget_files+0x3a2/0x420 [ 311.503606][ T9063] ? __fget_files+0x2a/0x420 [ 311.503639][ T9063] ? bpf_lsm_file_ioctl+0x9/0x20 [ 311.503665][ T9063] ? __pfx_sock_ioctl+0x10/0x10 [ 311.503686][ T9063] __se_sys_ioctl+0xfc/0x170 [ 311.503712][ T9063] do_syscall_64+0x166/0x520 [ 311.503735][ T9063] ? trace_irq_disable+0x3b/0x140 [ 311.503762][ T9063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.503782][ T9063] ? clear_bhb_loop+0x70/0xc0 [ 311.503809][ T9063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.503830][ T9063] RIP: 0033:0x7fef1399e159 [ 311.503850][ T9063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.503869][ T9063] RSP: 002b:00007fef1480a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.503893][ T9063] RAX: ffffffffffffffda RBX: 00007fef13c25fa0 RCX: 00007fef1399e159 [ 311.503909][ T9063] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 311.503924][ T9063] RBP: 00007fef1480a090 R08: 0000000000000000 R09: 0000000000000000 [ 311.503937][ T9063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.503950][ T9063] R13: 00007fef13c26038 R14: 00007fef13c25fa0 R15: 00007ffdfff48e18 [ 311.503986][ T9063] [ 312.104652][ T9072] FAULT_INJECTION: forcing a failure. [ 312.104652][ T9072] name failslab, interval 1, probability 0, space 0, times 0 [ 312.117727][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.0.933 Not tainted syzkaller #0 PREEMPT(full) [ 312.117761][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.117776][ T9072] Call Trace: [ 312.117787][ T9072] [ 312.117798][ T9072] dump_stack_lvl+0xe8/0x150 [ 312.117843][ T9072] should_fail_ex+0x410/0x560 [ 312.117889][ T9072] should_failslab+0xa8/0x100 [ 312.117930][ T9072] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 312.117962][ T9072] ? skb_clone+0x212/0x3a0 [ 312.117985][ T9072] ? skb_clone+0x212/0x3a0 [ 312.118017][ T9072] skb_clone+0x212/0x3a0 [ 312.118046][ T9072] __netlink_deliver_tap+0x413/0x860 [ 312.118088][ T9072] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.118115][ T9072] netlink_deliver_tap+0x19c/0x1b0 [ 312.118141][ T9072] __netlink_sendskb+0x47/0x90 [ 312.118180][ T9072] netlink_dump+0xa8c/0xee0 [ 312.118244][ T9072] ? __pfx_netlink_dump+0x10/0x10 [ 312.118302][ T9072] ? genl_start+0x497/0x6d0 [ 312.118343][ T9072] __netlink_dump_start+0x589/0x7b0 [ 312.118401][ T9072] genl_family_rcv_msg_dumpit+0x213/0x310 [ 312.118441][ T9072] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 312.118474][ T9072] ? genl_get_cmd+0x4d6/0x960 [ 312.118512][ T9072] ? __pfx_genl_start+0x10/0x10 [ 312.118541][ T9072] ? __pfx_genl_dumpit+0x10/0x10 [ 312.118570][ T9072] ? __pfx_genl_done+0x10/0x10 [ 312.118612][ T9072] ? __dev_queue_xmit+0x29b/0x3820 [ 312.118652][ T9072] genl_rcv_msg+0x5e1/0x7a0 [ 312.118694][ T9072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.118726][ T9072] ? __pfx_devlink_nl_sb_port_pool_get_dumpit+0x10/0x10 [ 312.118762][ T9072] ? __pfx_ref_tracker_free+0x10/0x10 [ 312.118802][ T9072] netlink_rcv_skb+0x226/0x4a0 [ 312.118829][ T9072] ? __pfx_genl_rcv_msg+0x10/0x10 [ 312.118863][ T9072] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 312.118910][ T9072] ? down_read+0x2be/0x330 [ 312.118950][ T9072] genl_rcv+0x28/0x40 [ 312.118979][ T9072] netlink_unicast+0x7bd/0x940 [ 312.119031][ T9072] netlink_sendmsg+0x813/0xb40 [ 312.119071][ T9072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.119107][ T9072] ? aa_sock_msg_perm+0xf6/0x1c0 [ 312.119155][ T9072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.119181][ T9072] sock_sendmsg_nosec+0x13a/0x180 [ 312.119217][ T9072] ____sys_sendmsg+0x54e/0x850 [ 312.119265][ T9072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.119316][ T9072] ? import_iovec+0x73/0xa0 [ 312.119347][ T9072] ___sys_sendmsg+0x2a5/0x360 [ 312.119384][ T9072] ? __lock_acquire+0x683/0x2cf0 [ 312.119427][ T9072] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.119515][ T9072] ? __fget_files+0x2a/0x420 [ 312.119548][ T9072] ? __fget_files+0x3a2/0x420 [ 312.119603][ T9072] __x64_sys_sendmsg+0x1b1/0x290 [ 312.119645][ T9072] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.119715][ T9072] do_syscall_64+0x166/0x520 [ 312.119744][ T9072] ? trace_irq_disable+0x3b/0x140 [ 312.119778][ T9072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.119803][ T9072] ? clear_bhb_loop+0x70/0xc0 [ 312.119834][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.119860][ T9072] RIP: 0033:0x7fbddb79e159 [ 312.119884][ T9072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.119905][ T9072] RSP: 002b:00007fbddc6f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.119931][ T9072] RAX: ffffffffffffffda RBX: 00007fbddba25fa0 RCX: 00007fbddb79e159 [ 312.119949][ T9072] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 312.119964][ T9072] RBP: 00007fbddc6f0090 R08: 0000000000000000 R09: 0000000000000000 [ 312.119980][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.119994][ T9072] R13: 00007fbddba26038 R14: 00007fbddba25fa0 R15: 00007ffd9a001298 [ 312.120036][ T9072] [ 312.678475][ T9073] netlink: 56 bytes leftover after parsing attributes in process `syz.2.929'. [ 312.718811][ T9073] netlink: 56 bytes leftover after parsing attributes in process `syz.2.929'. [ 312.900409][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'. [ 312.919762][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.2.929'. [ 312.965892][ T9082] netlink: 'syz.0.934': attribute type 10 has an invalid length. [ 313.078133][ T9082] netlink: 'syz.0.934': attribute type 8 has an invalid length. [ 313.287983][ T9087] wg0 speed is unknown, defaulting to 1000 [ 313.513266][ T9099] siw: device registration error -23 [ 314.156102][ T9103] netlink: 'syz.2.941': attribute type 29 has an invalid length. [ 314.899654][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.943'. [ 315.352025][ T9095] wg0 speed is unknown, defaulting to 1000 [ 317.481963][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.493905][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.316463][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.959'. [ 318.460991][ T9164] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.961'. [ 318.555929][ T9164] siw: device registration error -23 [ 319.213620][ T9180] netlink: 'syz.2.965': attribute type 16 has an invalid length. [ 319.244427][ T9180] netlink: 'syz.2.965': attribute type 17 has an invalid length. [ 319.592021][ T9177] netlink: 6208 bytes leftover after parsing attributes in process `syz.0.964'. [ 321.049562][ T9180] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.057757][ T9180] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.206735][ T9180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.222460][ T9180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.495367][ T7116] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.545373][ T7116] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.618067][ T7116] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.713204][ T7118] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.725727][ T9194] netlink: 'syz.3.969': attribute type 33 has an invalid length. [ 321.755379][ T9194] netlink: 152 bytes leftover after parsing attributes in process `syz.3.969'. [ 325.027977][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 325.227963][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 325.624111][ T9286] netlink: 144 bytes leftover after parsing attributes in process `syz.4.989'. [ 325.688016][ T9286] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 326.340930][ T9302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 329.773802][ T9336] netlink: 'syz.0.998': attribute type 10 has an invalid length. [ 329.814018][ T9331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.997'. [ 330.090327][ T9342] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1001'. [ 330.230208][ T9348] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1001'. [ 330.331650][ T9342] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1001'. [ 330.437651][ T9348] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1001'. [ 330.544879][ T9351] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 6 [ 331.007459][ T9331] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.997'. [ 331.747355][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1008'. [ 335.401767][ T9395] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1017'. [ 335.927783][ T9401] netlink: 'syz.3.1020': attribute type 10 has an invalid length. [ 336.013655][ T9401] netlink: 'syz.3.1020': attribute type 8 has an invalid length. [ 336.473897][ T9395] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.1017'. [ 337.070272][ T9404] wg0 speed is unknown, defaulting to 1000 [ 338.998578][ T9423] netlink: 'syz.2.1026': attribute type 11 has an invalid length. [ 340.304795][ T9438] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1032'. [ 342.207042][ T9463] netlink: 'syz.3.1040': attribute type 10 has an invalid length. [ 342.255795][ T9463] netlink: 'syz.3.1040': attribute type 8 has an invalid length. [ 342.751946][ T9482] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 342.805213][ T9482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.279822][ T9501] netlink: 'syz.4.1051': attribute type 12 has an invalid length. [ 344.373711][ T9501] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1051'. [ 344.902668][ T9512] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1054'. [ 345.608440][ T9530] netlink: 'syz.0.1059': attribute type 10 has an invalid length. [ 345.708890][ T9530] netlink: 'syz.0.1059': attribute type 8 has an invalid length. [ 346.035372][ T9537] netlink: 'syz.2.1062': attribute type 10 has an invalid length. [ 346.083424][ T9537] netlink: 'syz.2.1062': attribute type 8 has an invalid length. [ 346.768294][ T9532] wg0 speed is unknown, defaulting to 1000 [ 346.980023][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1066'. [ 347.095812][ T9551] FAULT_INJECTION: forcing a failure. [ 347.095812][ T9551] name failslab, interval 1, probability 0, space 0, times 0 [ 347.227570][ T9537] wg0 speed is unknown, defaulting to 1000 [ 347.276228][ T9551] CPU: 1 UID: 0 PID: 9551 Comm: syz.1.1067 Not tainted syzkaller #0 PREEMPT(full) [ 347.276258][ T9551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 347.276271][ T9551] Call Trace: [ 347.276280][ T9551] [ 347.276289][ T9551] dump_stack_lvl+0xe8/0x150 [ 347.276326][ T9551] should_fail_ex+0x410/0x560 [ 347.276366][ T9551] should_failslab+0xa8/0x100 [ 347.276399][ T9551] __kmalloc_noprof+0xfe/0x720 [ 347.276428][ T9551] ? bpf_test_init+0x9f/0x150 [ 347.276448][ T9551] ? bpf_test_init+0x9f/0x150 [ 347.276476][ T9551] bpf_test_init+0x9f/0x150 [ 347.276502][ T9551] bpf_prog_test_run_nf+0x295/0x790 [ 347.276525][ T9551] ? __fget_files+0x2a/0x420 [ 347.276564][ T9551] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 347.276595][ T9551] ? __fget_files+0x2a/0x420 [ 347.276625][ T9551] ? __fget_files+0x2a/0x420 [ 347.276660][ T9551] ? __pfx_bpf_prog_test_run_nf+0x10/0x10 [ 347.276686][ T9551] bpf_prog_test_run+0x2c5/0x340 [ 347.276726][ T9551] __sys_bpf+0xa22/0xd90 [ 347.276767][ T9551] ? __pfx___sys_bpf+0x10/0x10 [ 347.276802][ T9551] ? __pfx_trace_call_bpf+0x10/0x10 [ 347.276853][ T9551] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 347.276883][ T9551] ? ksys_write+0x242/0x270 [ 347.276920][ T9551] ? __pfx_ksys_write+0x10/0x10 [ 347.276959][ T9551] __x64_sys_bpf+0xba/0xd0 [ 347.276991][ T9551] do_syscall_64+0x166/0x520 [ 347.277016][ T9551] ? trace_irq_disable+0x3b/0x140 [ 347.277044][ T9551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.277067][ T9551] ? clear_bhb_loop+0x70/0xc0 [ 347.277094][ T9551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.277116][ T9551] RIP: 0033:0x7f086059e159 [ 347.277143][ T9551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.277161][ T9551] RSP: 002b:00007f086141a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 347.277185][ T9551] RAX: ffffffffffffffda RBX: 00007f0860825fa0 RCX: 00007f086059e159 [ 347.277201][ T9551] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 347.277214][ T9551] RBP: 00007f086141a090 R08: 0000000000000000 R09: 0000000000000000 [ 347.277228][ T9551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.277240][ T9551] R13: 00007f0860826038 R14: 00007f0860825fa0 R15: 00007ffd25cb4ef8 [ 347.277275][ T9551] [ 348.443243][ T9568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 348.450586][ T9568] IPv6: NLM_F_CREATE should be set when creating new route [ 348.457969][ T9568] IPv6: NLM_F_CREATE should be set when creating new route [ 348.465292][ T9568] IPv6: NLM_F_CREATE should be set when creating new route [ 348.787241][ T9575] FAULT_INJECTION: forcing a failure. [ 348.787241][ T9575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.866646][ T9575] CPU: 1 UID: 0 PID: 9575 Comm: syz.0.1075 Not tainted syzkaller #0 PREEMPT(full) [ 348.866682][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.866697][ T9575] Call Trace: [ 348.866706][ T9575] [ 348.866716][ T9575] dump_stack_lvl+0xe8/0x150 [ 348.866758][ T9575] should_fail_ex+0x410/0x560 [ 348.866801][ T9575] _copy_to_user+0x31/0xb0 [ 348.866831][ T9575] simple_read_from_buffer+0xe1/0x170 [ 348.866870][ T9575] proc_fail_nth_read+0x1bb/0x230 [ 348.866912][ T9575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.866952][ T9575] ? rw_verify_area+0x24a/0x4c0 [ 348.866988][ T9575] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.867024][ T9575] vfs_read+0x213/0xa80 [ 348.867062][ T9575] ? __pfx___mutex_lock+0x10/0x10 [ 348.867092][ T9575] ? __pfx_vfs_read+0x10/0x10 [ 348.867127][ T9575] ? __fget_files+0x2a/0x420 [ 348.867163][ T9575] ? __fget_files+0x3a2/0x420 [ 348.867203][ T9575] ? __fget_files+0x2a/0x420 [ 348.867244][ T9575] ksys_read+0x150/0x270 [ 348.867280][ T9575] ? __pfx_ksys_read+0x10/0x10 [ 348.867326][ T9575] do_syscall_64+0x166/0x520 [ 348.867352][ T9575] ? trace_irq_disable+0x3b/0x140 [ 348.867382][ T9575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.867405][ T9575] ? clear_bhb_loop+0x70/0xc0 [ 348.867433][ T9575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.867455][ T9575] RIP: 0033:0x7fbddb75e98e [ 348.867477][ T9575] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.867495][ T9575] RSP: 002b:00007fbddc6effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.867519][ T9575] RAX: ffffffffffffffda RBX: 00007fbddc6f06c0 RCX: 00007fbddb75e98e [ 348.867535][ T9575] RDX: 000000000000000f RSI: 00007fbddc6f00a0 RDI: 0000000000000005 [ 348.867548][ T9575] RBP: 00007fbddc6f0090 R08: 0000000000000000 R09: 0000000000000000 [ 348.867562][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 348.867575][ T9575] R13: 00007fbddba26038 R14: 00007fbddba25fa0 R15: 00007ffd9a001298 [ 348.867611][ T9575] [ 349.203788][ T9582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1077'. [ 349.710880][ T9597] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1080'. [ 350.209324][ T9606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 350.497028][ T9610] wg0 speed is unknown, defaulting to 1000 [ 350.525137][ T9620] netlink: 'syz.4.1084': attribute type 10 has an invalid length. [ 350.548994][ T9620] netlink: 'syz.4.1084': attribute type 8 has an invalid length. [ 351.289433][ T9625] wg0 speed is unknown, defaulting to 1000 [ 354.133384][ T9679] sch_tbf: burst 1 is lower than device batadv_slave_1 mtu (1514) ! [ 354.341504][ T9675] tap0: tun_chr_ioctl cmd 1074025677 [ 354.383711][ T9675] tap0: linktype set to 58 [ 354.572263][ T9689] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'. [ 354.977963][ T9693] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1109'. [ 355.543049][ T9708] netlink: 'syz.4.1109': attribute type 4 has an invalid length. [ 355.600598][ T9708] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1109'. [ 355.822302][ T9708] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 357.515050][ T9743] netlink: 'syz.1.1126': attribute type 6 has an invalid length. [ 357.523248][ T9742] netlink: 'syz.1.1126': attribute type 6 has an invalid length. [ 357.523280][ T9742] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1126'. [ 357.722555][ T9743] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1126'. [ 358.751667][ T9767] netlink: 'syz.0.1134': attribute type 10 has an invalid length. [ 358.804241][ T9767] netlink: 'syz.0.1134': attribute type 8 has an invalid length. [ 358.872711][ T9771] netlink: 'syz.3.1135': attribute type 10 has an invalid length. [ 358.887041][ T9771] netlink: 'syz.3.1135': attribute type 8 has an invalid length. [ 359.020949][ T9772] wg0 speed is unknown, defaulting to 1000 [ 359.038094][ T9775] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1136'. [ 359.085687][ T9775] netlink: 'syz.2.1136': attribute type 10 has an invalid length. [ 359.114942][ T9775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1136'. [ 359.266617][ T9770] wg0 speed is unknown, defaulting to 1000 [ 359.641125][ T9780] netlink: 'syz.2.1136': attribute type 55 has an invalid length. [ 362.517060][ T9814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1148'. [ 363.620340][ T9834] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 6 [ 365.054131][ T9858] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1159'. [ 368.661348][ T5274] veth0_vlan: left promiscuous mode [ 368.740955][ T5616] veth0_vlan: entered promiscuous mode [ 370.455709][ T9927] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1175'. [ 370.554668][ T9930] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1175'. [ 370.592175][ T9937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1176'. [ 371.751023][ T9956] netlink: 'syz.4.1182': attribute type 2 has an invalid length. [ 371.969911][ T9956] ´: entered promiscuous mode [ 372.359127][ T9970] xt_nfacct: accounting object `' does not exist [ 373.232949][ T9984] netlink: 'syz.1.1190': attribute type 10 has an invalid length. [ 373.348624][ T9984] netlink: 'syz.1.1190': attribute type 8 has an invalid length. [ 373.565138][ T9990] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1189'. [ 374.213520][ T9984] wg0 speed is unknown, defaulting to 1000 [ 374.393556][ T9991] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 374.459563][ T9991] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 374.494346][ T9991] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 374.599052][ T9991] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 375.262343][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1196'. [ 376.146610][T10033] netlink: 'syz.4.1199': attribute type 10 has an invalid length. [ 376.243007][T10033] syz_tun: entered promiscuous mode [ 376.386521][T10031] netlink: 'syz.1.1198': attribute type 4 has an invalid length. [ 376.426644][T10034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1199'. [ 376.482165][T10031] netlink: 'syz.1.1198': attribute type 10 has an invalid length. [ 376.560870][T10031] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1198'. [ 376.595466][ T1155] smbdirect: ib_dev[syz2] removed [ 376.709606][T10033] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 376.927584][T10031] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 377.131870][T10033] netlink: 'syz.4.1199': attribute type 10 has an invalid length. [ 377.640284][T10033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.680837][T10033] bond0: entered allmulticast mode [ 377.710828][T10033] bond_slave_0: entered allmulticast mode [ 377.724603][T10033] bond_slave_1: entered allmulticast mode [ 377.733361][T10033] syz_tun: entered allmulticast mode [ 377.742617][T10033] team0: Port device bond0 added [ 377.987543][T10047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.381897][T10056] xt_hashlimit: max too large, truncated to 1048576 [ 378.450455][T10063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1207'. [ 378.912230][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.919158][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.990496][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 380.903406][T10085] wg0 speed is unknown, defaulting to 1000 [ 382.175586][T10124] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1228'. [ 384.139413][T10179] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1246'. [ 384.182539][T10179] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 384.392550][T10185] netlink: 'syz.1.1248': attribute type 21 has an invalid length. [ 387.467817][T10201] FAULT_INJECTION: forcing a failure. [ 387.467817][T10201] name failslab, interval 1, probability 0, space 0, times 0 [ 387.561934][T10200] netlink: 'syz.4.1253': attribute type 2 has an invalid length. [ 387.566051][T10201] CPU: 1 UID: 0 PID: 10201 Comm: syz.1.1255 Not tainted syzkaller #0 PREEMPT(full) [ 387.566127][T10201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.566168][T10201] Call Trace: [ 387.566201][T10201] [ 387.566254][T10201] dump_stack_lvl+0xe8/0x150 [ 387.566546][T10201] should_fail_ex+0x410/0x560 [ 387.566920][T10201] should_failslab+0xa8/0x100 [ 387.567071][T10201] __kmalloc_cache_noprof+0xa8/0x660 [ 387.567213][T10201] ? nft_trans_table_add+0x56/0x430 [ 387.567492][T10201] ? nft_trans_table_add+0x56/0x430 [ 387.567714][T10201] nft_trans_table_add+0x56/0x430 [ 387.567914][T10201] nf_tables_newtable+0xd26/0x1990 [ 387.568316][T10201] nfnetlink_rcv+0x1288/0x28c0 [ 387.568960][T10201] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 387.569046][T10201] ? trace_call_bpf+0x7d5/0xb80 [ 387.569427][T10201] ? ref_tracker_free+0x689/0x830 [ 387.569903][T10201] ? skb_clone+0x246/0x3a0 [ 387.570072][T10201] ? __netlink_deliver_tap+0x811/0x860 [ 387.570175][T10201] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.570207][T10201] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.570271][T10201] netlink_unicast+0x7bd/0x940 [ 387.570460][T10201] netlink_sendmsg+0x813/0xb40 [ 387.570577][T10201] ? __pfx_trace_call_bpf+0x10/0x10 [ 387.570763][T10201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.570900][T10201] ? aa_sock_msg_perm+0xf6/0x1c0 [ 387.571180][T10201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.571253][T10201] sock_sendmsg_nosec+0x13a/0x180 [ 387.571428][T10201] ____sys_sendmsg+0x54e/0x850 [ 387.571743][T10201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.572030][T10201] ? import_iovec+0x73/0xa0 [ 387.572216][T10201] ___sys_sendmsg+0x2a5/0x360 [ 387.572411][T10201] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.572842][T10201] ? __fget_files+0x2a/0x420 [ 387.573107][T10201] ? __fget_files+0x2a/0x420 [ 387.573201][T10201] ? __fget_files+0x3a2/0x420 [ 387.573491][T10201] __x64_sys_sendmsg+0x1b1/0x290 [ 387.573661][T10201] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.574059][T10201] do_syscall_64+0x166/0x520 [ 387.574283][T10201] ? trace_irq_disable+0x3b/0x140 [ 387.574366][T10201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.574475][T10201] ? clear_bhb_loop+0x70/0xc0 [ 387.574682][T10201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.574782][T10201] RIP: 0033:0x7f086059e159 [ 387.574879][T10201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.574925][T10201] RSP: 002b:00007f086141a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.574988][T10201] RAX: ffffffffffffffda RBX: 00007f0860825fa0 RCX: 00007f086059e159 [ 387.575037][T10201] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 387.575056][T10201] RBP: 00007f086141a090 R08: 0000000000000000 R09: 0000000000000000 [ 387.575067][T10201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 387.575105][T10201] R13: 00007f0860826038 R14: 00007f0860825fa0 R15: 00007ffd25cb4ef8 [ 387.575414][T10201] [ 388.745472][T10211] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1257'. [ 392.893290][T10288] netlink: 'syz.0.1279': attribute type 17 has an invalid length. [ 392.929535][T10288] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1279'. [ 394.474594][T10314] netlink: 'syz.3.1286': attribute type 10 has an invalid length. [ 396.455783][T10314] wg2: entered allmulticast mode [ 396.468074][T10314] team0: Device wg2 is of different type [ 396.555500][T10313] netlink: 'syz.1.1287': attribute type 4 has an invalid length. [ 396.861818][T10328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1290'. [ 396.999906][T10324] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 6 [ 397.364799][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 397.438399][T10340] FAULT_INJECTION: forcing a failure. [ 397.438399][T10340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.441230][T10340] [ 397.441241][T10340] ====================================================== [ 397.441249][T10340] WARNING: possible circular locking dependency detected [ 397.441340][T10340] syzkaller #0 Not tainted [ 397.441351][T10340] ------------------------------------------------------ [ 397.441359][T10340] syz.1.1293/10340 is trying to acquire lock: [ 397.441370][T10340] ffffffff8eb4c4c0 (console_owner){-...}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 397.441454][T10340] [ 397.441454][T10340] but task is already holding lock: [ 397.441461][T10340] ffffffff9aa099f0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_assert_init+0xb0/0x380 [ 397.441541][T10340] [ 397.441541][T10340] which lock already depends on the new lock. [ 397.441541][T10340] [ 397.441548][T10340] [ 397.441548][T10340] the existing dependency chain (in reverse order) is: [ 397.441556][T10340] [ 397.441556][T10340] -> #3 (&obj_hash[i].lock){-.-.}-{2:2}: [ 397.441583][T10340] _raw_spin_lock_irqsave+0x40/0x60 [ 397.441635][T10340] debug_object_assert_init+0xb0/0x380 [ 397.441655][T10340] hrtimer_start_range_ns+0x3d/0x3e0 [ 397.441686][T10340] rpm_suspend+0x12d9/0x17a0 [ 397.441861][T10340] __pm_runtime_idle+0x12f/0x1a0 [ 397.441890][T10340] __device_attach+0x355/0x450 [ 397.441965][T10340] device_initial_probe+0xa1/0xd0 [ 397.441994][T10340] bus_probe_device+0x12a/0x220 [ 397.442017][T10340] device_add+0x7d7/0xb80 [ 397.442069][T10340] serdev_controller_add+0x85/0x6d0 [ 397.442162][T10340] serdev_tty_port_register+0x159/0x260 [ 397.442185][T10340] tty_port_register_device_attr_serdev+0x169/0x1f0 [ 397.442251][T10340] serial_core_register_port+0xffa/0x2840 [ 397.442304][T10340] serial8250_register_8250_port+0x16b4/0x2090 [ 397.442349][T10340] serial_pnp_probe+0x56a/0x7f0 [ 397.442371][T10340] pnp_device_probe+0x30b/0x4c0 [ 397.442453][T10340] really_probe+0x254/0xae0 [ 397.442476][T10340] __driver_probe_device+0x1e8/0x360 [ 397.442507][T10340] driver_probe_device+0x4f/0x240 [ 397.442525][T10340] __driver_attach+0x339/0x600 [ 397.442542][T10340] bus_for_each_dev+0x23b/0x2c0 [ 397.442565][T10340] bus_add_driver+0x345/0x670 [ 397.442588][T10340] driver_register+0x23a/0x320 [ 397.442608][T10340] serial8250_init+0x8f/0x160 [ 397.442718][T10340] do_one_initcall+0x250/0x870 [ 397.442746][T10340] do_initcall_level+0x10a/0x1a0 [ 397.442790][T10340] do_initcalls+0x59/0xa0 [ 397.442809][T10340] kernel_init_freeable+0x29d/0x3e0 [ 397.442829][T10340] kernel_init+0x22/0x1d0 [ 397.442881][T10340] ret_from_fork+0x514/0xb70 [ 397.442919][T10340] ret_from_fork_asm+0x1a/0x30 [ 397.442948][T10340] [ 397.442948][T10340] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 397.442977][T10340] _raw_spin_lock_irqsave+0x40/0x60 [ 397.442995][T10340] __pm_runtime_resume+0x10f/0x180 [ 397.443024][T10340] __uart_start+0x171/0x460 [ 397.443046][T10340] uart_write+0x251/0x9f0 [ 397.443068][T10340] n_tty_write+0xd49/0x11e0 [ 397.443122][T10340] file_tty_write+0x50d/0x9f0 [ 397.443144][T10340] vfs_write+0x612/0xba0 [ 397.443180][T10340] ksys_write+0x150/0x270 [ 397.443208][T10340] do_syscall_64+0x166/0x520 [ 397.443231][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.443251][T10340] [ 397.443251][T10340] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 397.443285][T10340] _raw_spin_lock_irqsave+0x40/0x60 [ 397.443303][T10340] serial8250_console_write+0x153/0x1ba0 [ 397.443330][T10340] console_flush_all+0x6ea/0xaf0 [ 397.443353][T10340] console_unlock+0xd1/0x1c0 [ 397.443371][T10340] vprintk_emit+0x485/0x560 [ 397.443389][T10340] _printk+0xdd/0x130 [ 397.443419][T10340] register_console+0xbc3/0xfc0 [ 397.443441][T10340] univ8250_console_init+0x3a/0x70 [ 397.443459][T10340] console_init+0x10b/0x4a0 [ 397.443521][T10340] start_kernel+0x238/0x3e0 [ 397.443539][T10340] x86_64_start_reservations+0x24/0x30 [ 397.443587][T10340] x86_64_start_kernel+0x137/0x1b0 [ 397.443613][T10340] common_startup_64+0x13e/0x157 [ 397.443634][T10340] [ 397.443634][T10340] -> #0 (console_owner){-...}-{0:0}: [ 397.443661][T10340] __lock_acquire+0x1520/0x2cf0 [ 397.443689][T10340] lock_acquire+0x106/0x350 [ 397.443715][T10340] console_flush_all+0x693/0xaf0 [ 397.443736][T10340] console_unlock+0xd1/0x1c0 [ 397.443754][T10340] vprintk_emit+0x485/0x560 [ 397.443773][T10340] _printk+0xdd/0x130 [ 397.443790][T10340] should_fail_ex+0x3f1/0x560 [ 397.443819][T10340] strncpy_from_user+0x36/0x2c0 [ 397.443847][T10340] strncpy_from_user_nofault+0x71/0x150 [ 397.443886][T10340] bpf_probe_read_user_str+0x2a/0x70 [ 397.443907][T10340] bpf_prog_31d7ad32f39c7d3c+0x49/0x4f [ 397.443925][T10340] trace_call_bpf+0x47c/0xb80 [ 397.443943][T10340] perf_trace_run_bpf_submit+0x78/0x170 [ 397.443980][T10340] perf_trace_lock+0x32e/0x410 [ 397.443996][T10340] lock_release+0x38e/0x3c0 [ 397.444023][T10340] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 397.444042][T10340] debug_object_assert_init+0x20d/0x380 [ 397.444062][T10340] hrtimer_start_range_ns+0x3d/0x3e0 [ 397.444082][T10340] cpu_clock_event_add+0x36/0x50 [ 397.444105][T10340] event_sched_in+0xa4d/0x13c0 [ 397.444128][T10340] merge_sched_in+0x5b7/0x15f0 [ 397.444150][T10340] visit_groups_merge+0x1071/0x1900 [ 397.444174][T10340] __pmu_ctx_sched_in+0x10d/0x140 [ 397.444197][T10340] ctx_sched_in+0x68f/0x800 [ 397.444220][T10340] __perf_event_task_sched_in+0xfa3/0x1a90 [ 397.444241][T10340] finish_task_switch+0x9b2/0xc60 [ 397.444289][T10340] __schedule+0x17dc/0x5630 [ 397.444306][T10340] preempt_schedule_common+0x7f/0xd0 [ 397.444325][T10340] preempt_schedule_thunk+0x16/0x40 [ 397.444346][T10340] vprintk_emit+0x4c8/0x560 [ 397.444365][T10340] _printk+0xdd/0x130 [ 397.444382][T10340] __nla_validate_parse+0x2574/0x2d50 [ 397.444401][T10340] nla_validate_array+0xfc/0x260 [ 397.444422][T10340] __nla_validate_parse+0x7f5/0x2d50 [ 397.444443][T10340] nla_validate_array+0xfc/0x260 [ 397.444463][T10340] __nla_validate_parse+0x7f5/0x2d50 [ 397.444483][T10340] __nla_parse+0x40/0x60 [ 397.444501][T10340] nfnetlink_rcv+0x1220/0x28c0 [ 397.444531][T10340] netlink_unicast+0x7bd/0x940 [ 397.444557][T10340] netlink_sendmsg+0x813/0xb40 [ 397.444576][T10340] sock_sendmsg_nosec+0x13a/0x180 [ 397.444598][T10340] ____sys_sendmsg+0x54e/0x850 [ 397.444621][T10340] ___sys_sendmsg+0x2a5/0x360 [ 397.444643][T10340] __x64_sys_sendmsg+0x1b1/0x290 [ 397.444665][T10340] do_syscall_64+0x166/0x520 [ 397.444682][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.444697][T10340] [ 397.444697][T10340] other info that might help us debug this: [ 397.444697][T10340] [ 397.444702][T10340] Chain exists of: [ 397.444702][T10340] console_owner --> &dev->power.lock --> &obj_hash[i].lock [ 397.444702][T10340] [ 397.444728][T10340] Possible unsafe locking scenario: [ 397.444728][T10340] [ 397.444733][T10340] CPU0 CPU1 [ 397.444738][T10340] ---- ---- [ 397.444743][T10340] lock(&obj_hash[i].lock); [ 397.444752][T10340] lock(&dev->power.lock); [ 397.444766][T10340] lock(&obj_hash[i].lock); [ 397.444777][T10340] lock(console_owner); [ 397.444787][T10340] [ 397.444787][T10340] *** DEADLOCK *** [ 397.444787][T10340] [ 397.444791][T10340] locks held by syz.1.1293/10340: 8, last CPU#1: [ 397.444804][T10340] #0: ffff88807c40e8d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 397.444849][T10340] #1: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: __perf_event_task_sched_in+0xf7/0x1a90 [ 397.444893][T10340] #2: ffff8880b87330a8 (&cpuctx_lock){-.-.}-{2:2}, at: __perf_event_task_sched_in+0x25c/0x1a90 [ 397.444932][T10340] #3: ffff888057867c18 (&ctx->lock){-.-.}-{2:2}, at: __perf_event_task_sched_in+0x2bd/0x1a90 [ 397.444970][T10340] #4: ffffffff9aa099f0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_assert_init+0xb0/0x380 [ 397.445007][T10340] #5: ffffffff8eb5a1e0 (rcu_read_lock){....}-{1:3}, at: trace_call_bpf+0xb4/0xb80 [ 397.445043][T10340] #6: ffffffff8eb4c520 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 397.445077][T10340] #7: ffffffff8ea33db8 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 397.445117][T10340] [ 397.445117][T10340] stack backtrace: [ 397.445127][T10340] CPU: 1 UID: 0 PID: 10340 Comm: syz.1.1293 Not tainted syzkaller #0 PREEMPT(full) [ 397.445146][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.445158][T10340] Call Trace: [ 397.445165][T10340] [ 397.445172][T10340] dump_stack_lvl+0xe8/0x150 [ 397.445198][T10340] print_circular_bug+0x2e1/0x300 [ 397.445221][T10340] check_noncircular+0x12e/0x150 [ 397.445244][T10340] __lock_acquire+0x1520/0x2cf0 [ 397.445295][T10340] ? console_flush_all+0x123/0xaf0 [ 397.445313][T10340] lock_acquire+0x106/0x350 [ 397.445335][T10340] ? console_flush_all+0x123/0xaf0 [ 397.445361][T10340] ? do_raw_spin_unlock+0xf5/0x200 [ 397.445382][T10340] ? console_flush_all+0x123/0xaf0 [ 397.445401][T10340] console_flush_all+0x693/0xaf0 [ 397.445418][T10340] ? console_flush_all+0x123/0xaf0 [ 397.445441][T10340] ? console_flush_all+0x123/0xaf0 [ 397.445464][T10340] ? __pfx_console_flush_all+0x10/0x10 [ 397.445487][T10340] ? is_printk_cpu_sync_owner+0x32/0x40 [ 397.445512][T10340] console_unlock+0xd1/0x1c0 [ 397.445531][T10340] ? __pfx_console_unlock+0x10/0x10 [ 397.445547][T10340] ? _raw_spin_lock_bh+0x50/0x50 [ 397.445562][T10340] ? _printk+0xdd/0x130 [ 397.445583][T10340] vprintk_emit+0x485/0x560 [ 397.445602][T10340] ? __pfx_vprintk_emit+0x10/0x10 [ 397.445628][T10340] _printk+0xdd/0x130 [ 397.445648][T10340] ? __pfx__printk+0x10/0x10 [ 397.445670][T10340] ? ___ratelimit+0x584/0x8e0 [ 397.445748][T10340] should_fail_ex+0x3f1/0x560 [ 397.445779][T10340] strncpy_from_user+0x36/0x2c0 [ 397.445806][T10340] strncpy_from_user_nofault+0x71/0x150 [ 397.445829][T10340] bpf_probe_read_user_str+0x2a/0x70 [ 397.445849][T10340] bpf_prog_31d7ad32f39c7d3c+0x49/0x4f [ 397.445866][T10340] trace_call_bpf+0x47c/0xb80 [ 397.445883][T10340] ? trace_call_bpf+0xb4/0xb80 [ 397.445900][T10340] ? __lock_acquire+0x683/0x2cf0 [ 397.445926][T10340] ? __pfx_trace_call_bpf+0x10/0x10 [ 397.445952][T10340] perf_trace_run_bpf_submit+0x78/0x170 [ 397.445981][T10340] perf_trace_lock+0x32e/0x410 [ 397.446003][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 397.446022][T10340] ? do_raw_spin_lock+0x12b/0x2f0 [ 397.446043][T10340] ? debug_object_assert_init+0x20d/0x380 [ 397.446061][T10340] ? debug_object_assert_init+0x20d/0x380 [ 397.446078][T10340] lock_release+0x38e/0x3c0 [ 397.446102][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 397.446120][T10340] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 397.446137][T10340] debug_object_assert_init+0x20d/0x380 [ 397.446164][T10340] hrtimer_start_range_ns+0x3d/0x3e0 [ 397.446186][T10340] cpu_clock_event_add+0x36/0x50 [ 397.446206][T10340] event_sched_in+0xa4d/0x13c0 [ 397.446227][T10340] ? lapic_next_event+0x11/0x20 [ 397.446277][T10340] ? __pfx_event_sched_in+0x10/0x10 [ 397.446324][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 397.446342][T10340] ? lock_acquire+0x106/0x350 [ 397.446367][T10340] ? ktime_get+0x45/0x220 [ 397.446391][T10340] ? perf_trace_lock+0x100/0x410 [ 397.446414][T10340] merge_sched_in+0x5b7/0x15f0 [ 397.446442][T10340] visit_groups_merge+0x1071/0x1900 [ 397.446471][T10340] ? __pfx_visit_groups_merge+0x10/0x10 [ 397.446490][T10340] ? hrtimer_try_to_cancel+0x4a7/0x680 [ 397.446517][T10340] __pmu_ctx_sched_in+0x10d/0x140 [ 397.446541][T10340] ctx_sched_in+0x68f/0x800 [ 397.446565][T10340] __perf_event_task_sched_in+0xfa3/0x1a90 [ 397.446586][T10340] ? __perf_event_task_sched_out+0x6f2/0xa90 [ 397.446619][T10340] ? __perf_event_task_sched_in+0xf7/0x1a90 [ 397.446643][T10340] ? __pfx___perf_event_task_sched_in+0x10/0x10 [ 397.446662][T10340] ? xfd_validate_state+0x6d/0x150 [ 397.446683][T10340] ? save_fpregs_to_fpstate+0x9e/0x200 [ 397.446708][T10340] finish_task_switch+0x9b2/0xc60 [ 397.446731][T10340] __schedule+0x17dc/0x5630 [ 397.446770][T10340] ? __pfx___schedule+0x10/0x10 [ 397.446796][T10340] ? console_unlock+0x150/0x1c0 [ 397.446812][T10340] ? preempt_schedule_thunk+0x16/0x40 [ 397.446831][T10340] preempt_schedule_common+0x7f/0xd0 [ 397.446848][T10340] preempt_schedule_thunk+0x16/0x40 [ 397.446867][T10340] ? vprintk_emit+0x4c3/0x560 [ 397.446884][T10340] vprintk_emit+0x4c8/0x560 [ 397.446903][T10340] ? __pfx_vprintk_emit+0x10/0x10 [ 397.446917][T10340] ? irqentry_exit+0x218/0x910 [ 397.446943][T10340] _printk+0xdd/0x130 [ 397.446963][T10340] ? __pfx__printk+0x10/0x10 [ 397.446981][T10340] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 397.446997][T10340] ? ___ratelimit+0x584/0x8e0 [ 397.447018][T10340] __nla_validate_parse+0x2574/0x2d50 [ 397.447048][T10340] ? ktime_get+0x45/0x220 [ 397.447067][T10340] ? lock_acquire+0x106/0x350 [ 397.447088][T10340] ? __pfx___nla_validate_parse+0x10/0x10 [ 397.447105][T10340] ? ktime_get+0x45/0x220 [ 397.447129][T10340] ? ktime_get+0x45/0x220 [ 397.447159][T10340] ? perf_trace_lock+0x100/0x410 [ 397.447171][T10340] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 397.447194][T10340] ? ktime_get+0x1f5/0x220 [ 397.447216][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 397.447228][T10340] ? clockevents_program_event+0x491/0x630 [ 397.447248][T10340] nla_validate_array+0xfc/0x260 [ 397.447278][T10340] __nla_validate_parse+0x7f5/0x2d50 [ 397.447311][T10340] ? __pfx___nla_validate_parse+0x10/0x10 [ 397.447331][T10340] ? ktime_get+0x45/0x220 [ 397.447350][T10340] ? lock_acquire+0x106/0x350 [ 397.447373][T10340] ? ktime_get+0x45/0x220 [ 397.447397][T10340] ? ktime_get+0x45/0x220 [ 397.447421][T10340] ? perf_trace_lock+0x100/0x410 [ 397.447436][T10340] nla_validate_array+0xfc/0x260 [ 397.447460][T10340] __nla_validate_parse+0x7f5/0x2d50 [ 397.447490][T10340] ? lockdep_hardirqs_on+0x7b/0x110 [ 397.447508][T10340] ? __pfx___nla_validate_parse+0x10/0x10 [ 397.447523][T10340] ? perf_trace_lock+0x100/0x410 [ 397.447542][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 397.447554][T10340] ? nfnl_pernet+0x23/0x240 [ 397.447579][T10340] ? nfnl_pernet+0x23/0x240 [ 397.447601][T10340] ? nfnl_pernet+0x23/0x240 [ 397.447624][T10340] ? nfnl_pernet+0x23/0x240 [ 397.447653][T10340] __nla_parse+0x40/0x60 [ 397.447673][T10340] nfnetlink_rcv+0x1220/0x28c0 [ 397.447724][T10340] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 397.447767][T10340] ? ref_tracker_free+0x689/0x830 [ 397.447802][T10340] ? skb_clone+0x246/0x3a0 [ 397.447820][T10340] ? __netlink_deliver_tap+0x811/0x860 [ 397.447842][T10340] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.447857][T10340] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.447877][T10340] netlink_unicast+0x7bd/0x940 [ 397.447919][T10340] netlink_sendmsg+0x813/0xb40 [ 397.447934][T10340] ? lockdep_hardirqs_on+0x7b/0x110 [ 397.447959][T10340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.447977][T10340] ? aa_sock_msg_perm+0xf6/0x1c0 [ 397.448010][T10340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.448025][T10340] sock_sendmsg_nosec+0x13a/0x180 [ 397.448046][T10340] ____sys_sendmsg+0x54e/0x850 [ 397.448075][T10340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.448107][T10340] ? import_iovec+0x73/0xa0 [ 397.448127][T10340] ___sys_sendmsg+0x2a5/0x360 [ 397.448150][T10340] ? __lock_acquire+0x683/0x2cf0 [ 397.448176][T10340] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.448219][T10340] ? __fget_files+0x2a/0x420 [ 397.448249][T10340] ? __fget_files+0x2a/0x420 [ 397.448274][T10340] ? __fget_files+0x3a2/0x420 [ 397.448304][T10340] __x64_sys_sendmsg+0x1b1/0x290 [ 397.448331][T10340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.448372][T10340] do_syscall_64+0x166/0x520 [ 397.448390][T10340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.448406][T10340] ? clear_bhb_loop+0x70/0xc0 [ 397.448426][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.448442][T10340] RIP: 0033:0x7f086059e159 [ 397.448457][T10340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.448471][T10340] RSP: 002b:00007f086141a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.448487][T10340] RAX: ffffffffffffffda RBX: 00007f0860825fa0 RCX: 00007f086059e159 [ 397.448499][T10340] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000006 [ 397.448509][T10340] RBP: 00007f086141a090 R08: 0000000000000000 R09: 0000000000000000 [ 397.448519][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.448528][T10340] R13: 00007f0860826038 R14: 00007f0860825fa0 R15: 00007ffd25cb4ef8 [ 397.448553][T10340] [ 399.071669][T10340] CPU: 1 UID: 0 PID: 10340 Comm: syz.1.1293 Not tainted syzkaller #0 PREEMPT(full) [ 399.071691][T10340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.071701][T10340] Call Trace: [ 399.071711][T10340] [ 399.071720][T10340] dump_stack_lvl+0xe8/0x150 [ 399.071751][T10340] should_fail_ex+0x410/0x560 [ 399.071783][T10340] strncpy_from_user+0x36/0x2c0 [ 399.071811][T10340] strncpy_from_user_nofault+0x71/0x150 [ 399.071836][T10340] bpf_probe_read_user_str+0x2a/0x70 [ 399.071858][T10340] bpf_prog_31d7ad32f39c7d3c+0x49/0x4f [ 399.071874][T10340] trace_call_bpf+0x47c/0xb80 [ 399.071890][T10340] ? trace_call_bpf+0xb4/0xb80 [ 399.071907][T10340] ? __lock_acquire+0x683/0x2cf0 [ 399.071933][T10340] ? __pfx_trace_call_bpf+0x10/0x10 [ 399.071958][T10340] perf_trace_run_bpf_submit+0x78/0x170 [ 399.071989][T10340] perf_trace_lock+0x32e/0x410 [ 399.072010][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 399.072027][T10340] ? do_raw_spin_lock+0x12b/0x2f0 [ 399.072049][T10340] ? debug_object_assert_init+0x20d/0x380 [ 399.072066][T10340] ? debug_object_assert_init+0x20d/0x380 [ 399.072081][T10340] lock_release+0x38e/0x3c0 [ 399.072105][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 399.072122][T10340] _raw_spin_unlock_irqrestore+0x1b/0x80 [ 399.072141][T10340] debug_object_assert_init+0x20d/0x380 [ 399.072167][T10340] hrtimer_start_range_ns+0x3d/0x3e0 [ 399.072189][T10340] cpu_clock_event_add+0x36/0x50 [ 399.072209][T10340] event_sched_in+0xa4d/0x13c0 [ 399.072245][T10340] ? lapic_next_event+0x11/0x20 [ 399.072279][T10340] ? __pfx_event_sched_in+0x10/0x10 [ 399.072324][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 399.072341][T10340] ? lock_acquire+0x106/0x350 [ 399.072365][T10340] ? ktime_get+0x45/0x220 [ 399.072388][T10340] ? perf_trace_lock+0x100/0x410 [ 399.072410][T10340] merge_sched_in+0x5b7/0x15f0 [ 399.072437][T10340] visit_groups_merge+0x1071/0x1900 [ 399.072465][T10340] ? __pfx_visit_groups_merge+0x10/0x10 [ 399.072483][T10340] ? hrtimer_try_to_cancel+0x4a7/0x680 [ 399.072508][T10340] __pmu_ctx_sched_in+0x10d/0x140 [ 399.072532][T10340] ctx_sched_in+0x68f/0x800 [ 399.072555][T10340] __perf_event_task_sched_in+0xfa3/0x1a90 [ 399.072575][T10340] ? __perf_event_task_sched_out+0x6f2/0xa90 [ 399.072597][T10340] ? __perf_event_task_sched_in+0xf7/0x1a90 [ 399.072619][T10340] ? __pfx___perf_event_task_sched_in+0x10/0x10 [ 399.072639][T10340] ? xfd_validate_state+0x6d/0x150 [ 399.072660][T10340] ? save_fpregs_to_fpstate+0x9e/0x200 [ 399.072685][T10340] finish_task_switch+0x9b2/0xc60 [ 399.072708][T10340] __schedule+0x17dc/0x5630 [ 399.072747][T10340] ? __pfx___schedule+0x10/0x10 [ 399.072771][T10340] ? console_unlock+0x150/0x1c0 [ 399.072787][T10340] ? preempt_schedule_thunk+0x16/0x40 [ 399.072806][T10340] preempt_schedule_common+0x7f/0xd0 [ 399.072824][T10340] preempt_schedule_thunk+0x16/0x40 [ 399.072843][T10340] ? vprintk_emit+0x4c3/0x560 [ 399.072860][T10340] vprintk_emit+0x4c8/0x560 [ 399.072879][T10340] ? __pfx_vprintk_emit+0x10/0x10 [ 399.072893][T10340] ? irqentry_exit+0x218/0x910 [ 399.072920][T10340] _printk+0xdd/0x130 [ 399.072941][T10340] ? __pfx__printk+0x10/0x10 [ 399.072959][T10340] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 399.072975][T10340] ? ___ratelimit+0x584/0x8e0 [ 399.072997][T10340] __nla_validate_parse+0x2574/0x2d50 [ 399.073026][T10340] ? ktime_get+0x45/0x220 [ 399.073045][T10340] ? lock_acquire+0x106/0x350 [ 399.073067][T10340] ? __pfx___nla_validate_parse+0x10/0x10 [ 399.073084][T10340] ? ktime_get+0x45/0x220 [ 399.073108][T10340] ? ktime_get+0x45/0x220 [ 399.073131][T10340] ? perf_trace_lock+0x100/0x410 [ 399.073144][T10340] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 399.073167][T10340] ? ktime_get+0x1f5/0x220 [ 399.073189][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 399.073202][T10340] ? clockevents_program_event+0x491/0x630 [ 399.073237][T10340] nla_validate_array+0xfc/0x260 [ 399.073261][T10340] __nla_validate_parse+0x7f5/0x2d50 [ 399.073294][T10340] ? __pfx___nla_validate_parse+0x10/0x10 [ 399.073314][T10340] ? ktime_get+0x45/0x220 [ 399.073333][T10340] ? lock_acquire+0x106/0x350 [ 399.073357][T10340] ? ktime_get+0x45/0x220 [ 399.073381][T10340] ? ktime_get+0x45/0x220 [ 399.073404][T10340] ? perf_trace_lock+0x100/0x410 [ 399.073420][T10340] nla_validate_array+0xfc/0x260 [ 399.073444][T10340] __nla_validate_parse+0x7f5/0x2d50 [ 399.073474][T10340] ? lockdep_hardirqs_on+0x7b/0x110 [ 399.073492][T10340] ? __pfx___nla_validate_parse+0x10/0x10 [ 399.073508][T10340] ? perf_trace_lock+0x100/0x410 [ 399.073527][T10340] ? __pfx_perf_trace_lock+0x10/0x10 [ 399.073539][T10340] ? nfnl_pernet+0x23/0x240 [ 399.073565][T10340] ? nfnl_pernet+0x23/0x240 [ 399.073587][T10340] ? nfnl_pernet+0x23/0x240 [ 399.073610][T10340] ? nfnl_pernet+0x23/0x240 [ 399.073639][T10340] __nla_parse+0x40/0x60 [ 399.073659][T10340] nfnetlink_rcv+0x1220/0x28c0 [ 399.073711][T10340] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 399.073747][T10340] ? ref_tracker_free+0x689/0x830 [ 399.073781][T10340] ? skb_clone+0x246/0x3a0 [ 399.073800][T10340] ? __netlink_deliver_tap+0x811/0x860 [ 399.073823][T10340] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.073838][T10340] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.073858][T10340] netlink_unicast+0x7bd/0x940 [ 399.073891][T10340] netlink_sendmsg+0x813/0xb40 [ 399.073907][T10340] ? lockdep_hardirqs_on+0x7b/0x110 [ 399.073931][T10340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.073950][T10340] ? aa_sock_msg_perm+0xf6/0x1c0 [ 399.073981][T10340] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.073996][T10340] sock_sendmsg_nosec+0x13a/0x180 [ 399.074017][T10340] ____sys_sendmsg+0x54e/0x850 [ 399.074047][T10340] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.074078][T10340] ? import_iovec+0x73/0xa0 [ 399.074099][T10340] ___sys_sendmsg+0x2a5/0x360 [ 399.074123][T10340] ? __lock_acquire+0x683/0x2cf0 [ 399.074149][T10340] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.074191][T10340] ? __fget_files+0x2a/0x420 [ 399.074224][T10340] ? __fget_files+0x2a/0x420 [ 399.074250][T10340] ? __fget_files+0x3a2/0x420 [ 399.074280][T10340] __x64_sys_sendmsg+0x1b1/0x290 [ 399.074307][T10340] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.074348][T10340] do_syscall_64+0x166/0x520 [ 399.074367][T10340] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.074384][T10340] ? clear_bhb_loop+0x70/0xc0 [ 399.074404][T10340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.074420][T10340] RIP: 0033:0x7f086059e159 [ 399.074437][T10340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.074450][T10340] RSP: 002b:00007f086141a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.074467][T10340] RAX: ffffffffffffffda RBX: 00007f0860825fa0 RCX: 00007f086059e159 [ 399.074479][T10340] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000006 [ 399.074489][T10340] RBP: 00007f086141a090 R08: 0000000000000000 R09: 0000000000000000 [ 399.074498][T10340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.074508][T10340] R13: 00007f0860826038 R14: 00007f0860825fa0 R15: 00007ffd25cb4ef8 [ 399.074533][T10340] [ 401.745415][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 401.754906][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1293'. [ 401.970716][T10340] syz.1.1293 (10340) used greatest stack depth: 18088 bytes left [ 402.120665][T10349] tap0: tun_chr_ioctl cmd 1074025678 [ 402.135896][T10349] tap0: group set to 0 [ 402.142072][T10349] tap0: tun_chr_ioctl cmd 1074025677 [ 402.150091][T10349] tap0: linktype set to 58