last executing test programs: 7m19.195301114s ago: executing program 32 (id=596): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0xd, 0x7, 0x7, 0x6, 0x0, 0x2, 0x80, 0xc, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0xe323, 0x7}, 0x10c0a1, 0xfffffffffffffc00, 0x8, 0x2, 0x0, 0xf, 0xc426, 0x0, 0x5, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000dc0)={@ifindex, 0xf, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x26, 0x5, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0500000005000000003800000700000011000000", @ANYRES32, @ANYBLOB="0400000000000010000000000000000000000000a2f298838f98f70d04f8d98a4f25b60390e1c9bcc1870ef6deade3a167841170683305a91248e740946cd551a9509aa706e81e04fcb013a4b89505f0f087433c3f42f5d83cb31078b46e32c0beb787fddce0956e43be25882d6a134e5123c51c8c2f25726413653cf555e2cdbbb86e6efeb13defc3d32ad75c7dc36c308c6c68f6cd80bea29e74aef030b9ba5c57d007cde5a31930ac831ecace0850ed95a4865451606973e5910000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)="7cf7a05a0fd2b106e11704698acf68d4d8d36680751b07037930f5d6d1fc7e8f11af59536457e1260f82", 0x0, 0xfffffffb, r1}, 0x38) openat$tun(0xffffffffffffff9c, 0x0, 0x410400, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720a00fef8ffffff71a400fe0000000071101000000000001d300200000000004704000001ed030407000000c04100001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 7m18.711850339s ago: executing program 33 (id=597): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a02000000461eb886a5e54f8f", 0x48}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) 7m18.366124275s ago: executing program 34 (id=599): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x6}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000001040)="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", 0xffc}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5}, 0x44000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c000280a838000000000000080003400000001408000240000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, r0, 0x0) 4m0.091922237s ago: executing program 7 (id=984): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x45, 0x4, 0x2}, 0x50) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f00000003c0), 0x0, 0x2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 3m59.48348061s ago: executing program 7 (id=988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf, 0x401}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000180), 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000640)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x4, r0, 0x4}, 0x38) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0xffffffff, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x25, 0x1, 0x0) sendmsg$kcm(r4, 0x0, 0x4c040) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0021080}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x1411, 0x20, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x541b, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r6, 0xee01}}}], 0x20, 0x2000c000}, 0x1) 3m59.090737616s ago: executing program 35 (id=905): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x4838, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x3, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x3c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0x20, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x14, 0x19, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}}]}, @nested={0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r1) write$cgroup_type(r1, &(0x7f0000000080), 0x11ffffce1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x6, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r2, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xd, 0x6, 0x202, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1204}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x1}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4041001}, 0x4010) 3m58.180901286s ago: executing program 7 (id=992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x0) 3m58.07527588s ago: executing program 7 (id=993): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x25dfdc01, {0x0, 0x0, 0x12, 0x0, {}, {0x1, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0x7, 0x2, 0x5, 0x10, 0xff, 0xa, 0x7, 0x8, 0xc, 0x5, 0xc, 0xd, 0x9, 0xa, 0x3, 0xc], 0x1, [0x1ff, 0xc, 0x102, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x927, 0x2e, 0x4, 0x3, 0xfffc, 0x46, 0x6, 0xb], [0x3, 0x9, 0x3, 0x0, 0x3, 0x0, 0x617, 0x3, 0x3, 0xe3, 0x9, 0x7, 0x5, 0x1, 0x7e, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc004811}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f4474ef8384dbba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfa5}, 0x183, 0x2, 0xfffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500fe808178a8001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0) close(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x3518, 0x2, 0xffdffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$kcm(0xa, 0x3, 0x73) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x20}, 0x2102) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500211d", 0x2c}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100}, 0x95) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x81, 0x0, 0xfd, 0x0, 0xb0, 0x25108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xa}, 0x2a10, 0x3, 0x3, 0x0, 0x400da4f, 0x82000a, 0x0, 0x0, 0xfffffff8}, 0x0, 0x3, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) 3m56.916496905s ago: executing program 7 (id=996): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/time_for_children\x00') ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x40000) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0\x00', 0x0, 0x6d458, 0x0) 3m56.489682936s ago: executing program 7 (id=999): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x6}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000001040)="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", 0xff5}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5}, 0x44000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x4040080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, r0, 0x0) 3m41.029236726s ago: executing program 36 (id=999): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x6}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000001040)="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", 0xff5}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5}, 0x44000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd2c, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x4040080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, @perf_config_ext, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, r0, 0x0) 2m31.808026773s ago: executing program 9 (id=1806): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r0}, 0xc) 2m31.739465306s ago: executing program 9 (id=1807): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x60}}, 0x0) 2m31.63664598s ago: executing program 8 (id=1809): socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x7}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000000000004000000000000000000000000000000000000000000000ca862d2e1b5b30ff8029f"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18472200fac30000000000000000e197eb2eaef7493d0000ec5e7eec2b25d5a597204bc9e91ec9c90758c8c6cb24350cabbed3ed25b92afce8c7b17326bdfc2826e888793384625a43868277e4c05cacf06a4d1b722ed9ddc6d52165020f1bd58dbcba35530ebfed409318e64891f3d20c1a0aa5167a4570133a41be"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x100000}, 0x10}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x2d, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x7, 0x4}, 0x80, 0x0}, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffa, 0x830d}, 0x0, 0x2, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xb, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c5}, 0x820) socket$kcm(0xa, 0x3, 0x73) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) 2m31.540147739s ago: executing program 9 (id=1810): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4048000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8401000010"], 0x184}}, 0x0) 2m31.401414072s ago: executing program 9 (id=1813): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m31.236143418s ago: executing program 9 (id=1815): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 2m31.064133844s ago: executing program 8 (id=1819): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) socket$kcm(0xa, 0x3, 0x73) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x4, 0x80, 0x4, 0xc, 0x1, 0x8, 0x0, 0x0, 0x49cd0, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84b, 0x1, @perf_config_ext={0x3, 0x3}, 0x4111, 0x5, 0x0, 0x2, 0x202, 0xfffffffd, 0x83, 0x0, 0x3, 0x0, 0x7}) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={0x0}, 0x8850, 0x2, 0xfffffffe, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x18, 0x7, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x12000) 2m30.971023916s ago: executing program 9 (id=1823): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4048000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8401000010"], 0x184}}, 0x0) 2m30.715983107s ago: executing program 8 (id=1828): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}, 0x804) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getpid() perf_event_open$cgroup(&(0x7f0000000180)={0x3, 0x80, 0xd6, 0x86, 0x1, 0xf0, 0x0, 0x26, 0x20, 0xe, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x5, 0x6}, 0x40, 0x1000, 0x0, 0x4, 0xffff, 0xa5b0, 0x7, 0x0, 0xfffffff7, 0x0, 0x3}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880100001800c0010800400088004000b800c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 2m30.434330079s ago: executing program 8 (id=1832): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="1400000018000103fefffffff9dbdf250b"], 0x14}, 0x1, 0x0, 0x0, 0x20000084}, 0xc000) 2m30.206867837s ago: executing program 8 (id=1834): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 2m29.926166s ago: executing program 8 (id=1836): close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)) close(0xffffffffffffffff) 2m15.857318078s ago: executing program 37 (id=1823): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4048000) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd1}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8401000010"], 0x184}}, 0x0) 2m14.835561029s ago: executing program 38 (id=1836): close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7}]}) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40107446, &(0x7f0000000180)) close(0xffffffffffffffff) 2m9.968072046s ago: executing program 6 (id=2020): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x0, 0xa}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2m9.936696794s ago: executing program 6 (id=2021): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m9.872399397s ago: executing program 6 (id=2022): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0xc4, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private2, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, {{@in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x4}]}]}, 0x17c}}, 0x0) 2m9.731971171s ago: executing program 6 (id=2024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m9.692931s ago: executing program 6 (id=2025): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 2m9.5738023s ago: executing program 6 (id=2027): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) 2m9.358949574s ago: executing program 5 (id=2028): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x48000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x20a22000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, 0x0, 0x3000c085) sendmsg$inet(r2, 0x0, 0x52cc) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x14}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2m8.844933956s ago: executing program 5 (id=2029): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x13, 0x0, 0xa}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 2m8.712236491s ago: executing program 5 (id=2030): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 2m8.536168496s ago: executing program 5 (id=2032): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2m8.264122207s ago: executing program 5 (id=2035): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 2m8.099992983s ago: executing program 5 (id=2036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m54.477907116s ago: executing program 39 (id=2027): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}}, 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) 1m52.969469472s ago: executing program 40 (id=2036): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 8.188922416s ago: executing program 1 (id=2959): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 7.830546086s ago: executing program 4 (id=2963): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x6, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x24008000) 7.653950703s ago: executing program 4 (id=2966): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x10, 0x3ed, 0x200, 0x70bd28, 0x25dfd9fe}, 0x10}}, 0x800) 6.889216594s ago: executing program 1 (id=2967): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}], 0x20, 0x1000000}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)}, 0x40000002) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 6.774069292s ago: executing program 4 (id=2970): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)}], 0x1}, 0x14) 6.772685509s ago: executing program 1 (id=2971): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x34, 0x0, 0xb, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_COMPAT_NAME={0xe, 0x1, 'syzkaller\x00'}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 6.693585868s ago: executing program 4 (id=2972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0x4, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x5, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000300)=r3) 1.256494579s ago: executing program 1 (id=2977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x7, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 1.138403003s ago: executing program 4 (id=2978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={0x0}, 0x8850, 0x2, 0xfffffffe, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x12000) 1.137661508s ago: executing program 0 (id=2979): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000085000000a000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b", 0x0, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.035693318s ago: executing program 0 (id=2980): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x0) 1.035364124s ago: executing program 2 (id=2981): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)='e', 0x1}], 0x1}, 0x40040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r1}) sendmsg$kcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="c0", 0x1}], 0x1}, 0x0) 978.340633ms ago: executing program 0 (id=2983): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x894c, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_procfs$namespace(0x0, &(0x7f0000000800)='ns/uts\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x78}, 0x62) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 957.917015ms ago: executing program 2 (id=2984): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e502000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"}) 922.356825ms ago: executing program 1 (id=2985): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x1, 0x6, 0x43, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 840.751864ms ago: executing program 3 (id=2986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000040000000000000a20000000000a0300"], 0x122}}, 0x0) 801.170137ms ago: executing program 3 (id=2987): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="130000002e00bd"], 0x14}, 0x1, 0x0, 0x0, 0x2004809c}, 0x20000000) 797.139327ms ago: executing program 0 (id=2988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095", @ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 691.769732ms ago: executing program 0 (id=2989): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10) 626.451868ms ago: executing program 3 (id=2990): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000}, 0x0, 0xc8, 0xffff, 0x7, 0xf9, 0x0, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe8000000000000227bfa7b09303960e2f80ae"], 0xfdef) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfdef) 578.282481ms ago: executing program 2 (id=2991): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) close(r0) 447.486978ms ago: executing program 3 (id=2992): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x4, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000002b703000000000001850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000180)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x24) 442.740682ms ago: executing program 2 (id=2993): r0 = socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{0x0}], 0x1}, 0x0) 385.061335ms ago: executing program 3 (id=2994): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x90000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfc, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 266.444085ms ago: executing program 2 (id=2995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x7, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 195.884159ms ago: executing program 4 (id=2996): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000100)={0x4, 0x80, 0x4, 0xc, 0x1, 0x8, 0x0, 0x0, 0x49cd0, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x84b, 0x1, @perf_config_ext={0x3, 0x3}, 0x4111, 0x5, 0x0, 0x2, 0x202, 0xfffffffd, 0x83, 0x0, 0x3, 0x0, 0x7}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x4000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={0x0}, 0x8850, 0x2, 0xfffffffe, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x18, 0x7, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, 0x0, 0x20040040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x12000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001880), 0x1}, 0x2102) 152.130656ms ago: executing program 0 (id=2997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x6, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xd36f659b1d831d3f}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000440)="8e36154f8822595e1a377524ad5f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 119.464251ms ago: executing program 3 (id=2998): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000110000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 106.104752ms ago: executing program 1 (id=2999): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 2 (id=3000): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x9, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x6f, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000000740)={&(0x7f0000000200)=@nfc_llcp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f0000000280)=""/61, 0x3d}, {&(0x7f0000000440)=""/60, 0x3c}, {&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000000580)=""/80, 0x50}, {&(0x7f0000000600)=""/131, 0x83}], 0x6, &(0x7f00000008c0)=""/204, 0xcc}, 0x40012001) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20044081) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) kernel console output (not intermixed with test programs): 5131][ T9214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.764'. [ 469.070659][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.765'. [ 469.439869][ T7367] Bluetooth: hci5: command tx timeout [ 469.504897][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.767'. [ 469.679221][ T7367] Bluetooth: hci6: command tx timeout [ 469.838678][ T7367] Bluetooth: hci7: command tx timeout [ 469.931152][ T7478] hsr_slave_0: left promiscuous mode [ 469.946363][ T7478] hsr_slave_1: left promiscuous mode [ 469.953908][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.965990][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.996201][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.018470][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.104918][ T7478] hsr_slave_0: left promiscuous mode [ 470.116790][ T7478] hsr_slave_1: left promiscuous mode [ 470.131980][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.141162][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.302754][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.311211][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.459232][ T7478] hsr_slave_0: left promiscuous mode [ 470.486731][ T7478] hsr_slave_1: left promiscuous mode [ 470.502783][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.532653][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.717128][ T7478] veth1_macvtap: left promiscuous mode [ 470.745618][ T7478] veth0_macvtap: left promiscuous mode [ 470.758558][ T7478] veth1_vlan: left promiscuous mode [ 470.783091][ T7478] veth0_vlan: left promiscuous mode [ 470.887524][ T7478] veth1_macvtap: left promiscuous mode [ 470.893975][ T7478] veth0_macvtap: left promiscuous mode [ 470.901379][ T7478] veth1_vlan: left promiscuous mode [ 470.906986][ T7478] veth0_vlan: left promiscuous mode [ 470.923037][ T7478] veth1_macvtap: left promiscuous mode [ 470.928875][ T7478] veth0_macvtap: left promiscuous mode [ 470.934686][ T7478] veth1_vlan: left promiscuous mode [ 470.943997][ T7478] veth0_vlan: left promiscuous mode [ 471.519018][ T7367] Bluetooth: hci5: command tx timeout [ 471.760648][ T7367] Bluetooth: hci6: command tx timeout [ 471.921148][ T7367] Bluetooth: hci7: command tx timeout [ 472.377499][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 472.448993][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 472.818635][ C0] net_ratelimit: 10815 callbacks suppressed [ 472.818657][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.836993][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.849170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.861326][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.873629][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.885955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.898223][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.910810][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.923480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 472.935943][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 473.599950][ T7367] Bluetooth: hci5: command tx timeout [ 473.842409][ T7367] Bluetooth: hci6: command tx timeout [ 473.998598][ T7367] Bluetooth: hci7: command tx timeout [ 474.166254][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 474.251861][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 475.638209][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 475.685183][ T7367] Bluetooth: hci5: command tx timeout [ 475.719845][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 475.925584][ T7367] Bluetooth: hci6: command tx timeout [ 476.081136][ T7367] Bluetooth: hci7: command tx timeout [ 477.237568][ T9207] chnl_net:caif_netlink_parms(): no params data found [ 477.828464][ C0] net_ratelimit: 12003 callbacks suppressed [ 477.828490][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.847240][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.859987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.872733][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.885332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.897906][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.910535][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.923128][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.935811][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 477.948593][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 478.593672][ T9202] chnl_net:caif_netlink_parms(): no params data found [ 478.683983][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.709800][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.717110][ T9207] bridge_slave_0: entered allmulticast mode [ 478.786621][ T9207] bridge_slave_0: entered promiscuous mode [ 478.813121][ T9205] chnl_net:caif_netlink_parms(): no params data found [ 478.887967][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.918543][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.946207][ T9207] bridge_slave_1: entered allmulticast mode [ 478.963415][ T9207] bridge_slave_1: entered promiscuous mode [ 479.185303][ T9263] netlink: 'syz.3.775': attribute type 10 has an invalid length. [ 479.193567][ T9263] netlink: 40 bytes leftover after parsing attributes in process `syz.3.775'. [ 480.282049][ T9270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.777'. [ 480.342937][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.506967][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.320376][ T9205] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.335937][ T9205] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.361352][ T9205] bridge_slave_0: entered allmulticast mode [ 481.382529][ T9205] bridge_slave_0: entered promiscuous mode [ 481.412927][ T9207] team0: Port device team_slave_0 added [ 481.431805][ T9202] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.450139][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.465573][ T9202] bridge_slave_0: entered allmulticast mode [ 481.502385][ T9202] bridge_slave_0: entered promiscuous mode [ 481.537997][ T9205] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.558483][ T9205] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.565884][ T9205] bridge_slave_1: entered allmulticast mode [ 481.581489][ T9205] bridge_slave_1: entered promiscuous mode [ 481.592568][ T9207] team0: Port device team_slave_1 added [ 481.603029][ T9202] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.611659][ T9202] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.619035][ T9202] bridge_slave_1: entered allmulticast mode [ 481.637715][ T9202] bridge_slave_1: entered promiscuous mode [ 481.956272][ T9205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.018252][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.033826][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.070496][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.200375][ T9202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.237287][ T9205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.534706][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.579468][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.656299][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.724802][ T9202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.838647][ C0] net_ratelimit: 8018 callbacks suppressed [ 482.838671][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.856807][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.869101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.881416][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.893967][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.906329][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.919086][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.931427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.943716][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 482.956139][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 483.289593][ T9205] team0: Port device team_slave_0 added [ 483.314514][ T9205] team0: Port device team_slave_1 added [ 483.327434][ T9202] team0: Port device team_slave_0 added [ 483.377616][ T9202] team0: Port device team_slave_1 added [ 483.440468][ T9207] hsr_slave_0: entered promiscuous mode [ 483.447519][ T9207] hsr_slave_1: entered promiscuous mode [ 483.454219][ T9207] debugfs: 'hsr0' already exists in 'hsr' [ 483.460173][ T9207] Cannot create hsr debugfs directory [ 483.466585][ T9205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.474842][ T9205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.501039][ T9205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.543732][ T9205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.552095][ T9205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.579311][ T9205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.592207][ T9202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.600434][ T9202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.634771][ T9202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.678990][ T9202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.686712][ T9202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.713214][ T9202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.115388][ T9302] netlink: 'syz.3.786': attribute type 11 has an invalid length. [ 484.469909][ T9205] hsr_slave_0: entered promiscuous mode [ 484.485731][ T9205] hsr_slave_1: entered promiscuous mode [ 484.499929][ T9205] debugfs: 'hsr0' already exists in 'hsr' [ 484.515817][ T9205] Cannot create hsr debugfs directory [ 484.600318][ T9202] hsr_slave_0: entered promiscuous mode [ 484.624030][ T9202] hsr_slave_1: entered promiscuous mode [ 484.656424][ T9202] debugfs: 'hsr0' already exists in 'hsr' [ 484.662421][ T9202] Cannot create hsr debugfs directory [ 484.669641][ T9308] netlink: 20 bytes leftover after parsing attributes in process `syz.0.788'. [ 485.140263][ T9316] netlink: 'syz.0.789': attribute type 10 has an invalid length. [ 485.156867][ T9316] netlink: 40 bytes leftover after parsing attributes in process `syz.0.789'. [ 486.147391][ T9324] netlink: 'syz.0.791': attribute type 10 has an invalid length. [ 486.198826][ T9324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.791'. [ 486.941269][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz.0.795'. [ 487.742870][ T9338] netlink: 'syz.0.796': attribute type 10 has an invalid length. [ 487.785400][ T9338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.796'. [ 487.848787][ C0] net_ratelimit: 7436 callbacks suppressed [ 487.848805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.867100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.879496][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.891973][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.904508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.916851][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.929213][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.942041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.954543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 487.967039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.636889][ T9372] nbd: must specify at least one socket [ 492.858406][ C0] net_ratelimit: 6680 callbacks suppressed [ 492.858432][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.876795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.889362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.901932][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.914546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.927206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.939855][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.952575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.965280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 492.977853][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 493.717456][ T9207] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 494.291956][ T9207] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 494.299425][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.803'. [ 497.322120][ T9207] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 497.379294][ T9383] macsec0: left allmulticast mode [ 497.384395][ T9383] veth1_macvtap: left allmulticast mode [ 497.403068][ T9383] macsec0: left promiscuous mode [ 497.408765][ T9383] bridge0: port 3(macsec0) entered disabled state [ 497.435617][ T9383] bridge_slave_1: left allmulticast mode [ 497.452228][ T9383] bridge_slave_1: left promiscuous mode [ 497.458085][ T9383] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.560418][ T9383] bridge_slave_0: left allmulticast mode [ 497.585973][ T9383] bridge_slave_0: left promiscuous mode [ 497.607700][ T9383] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.840825][ T9207] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 497.868850][ C0] net_ratelimit: 6911 callbacks suppressed [ 497.868871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.887237][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.899783][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.912439][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.925188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.937995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.950381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.962673][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.974831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 497.986994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 498.662295][ T9404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.812'. [ 499.300938][ T7478] bridge_slave_1: left allmulticast mode [ 499.312050][ T7478] bridge_slave_1: left promiscuous mode [ 499.332947][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.435097][ T7478] bridge_slave_0: left allmulticast mode [ 499.456125][ T7478] bridge_slave_0: left promiscuous mode [ 499.466439][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.511442][ T7478] bridge_slave_1: left allmulticast mode [ 499.525902][ T7478] bridge_slave_1: left promiscuous mode [ 499.537574][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.564424][ T7478] bridge_slave_0: left allmulticast mode [ 499.570373][ T7478] bridge_slave_0: left promiscuous mode [ 499.576341][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.611372][ T7478] bridge_slave_1: left allmulticast mode [ 499.620142][ T7478] bridge_slave_1: left promiscuous mode [ 499.626285][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.662469][ T7478] bridge_slave_0: left allmulticast mode [ 499.678624][ T7478] bridge_slave_0: left promiscuous mode [ 499.685627][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.271055][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.301350][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.324191][ T7478] bond0 (unregistering): Released all slaves [ 501.536063][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.542585][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.713819][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.743441][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.764393][ T7478] bond0 (unregistering): Released all slaves [ 502.039487][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.070970][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.090166][ T7478] bond0 (unregistering): Released all slaves [ 502.662757][ T9202] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 502.839347][ T7478] hsr_slave_0: left promiscuous mode [ 502.878658][ C0] net_ratelimit: 10036 callbacks suppressed [ 502.878681][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.897086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.909535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.922114][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.934717][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.936151][ T9423] netlink: 24 bytes leftover after parsing attributes in process `syz.0.817'. [ 502.947478][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.948052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.981222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 502.993894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 503.006535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 503.095205][ T7478] hsr_slave_1: left promiscuous mode [ 503.115384][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.295785][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.397014][ T7478] hsr_slave_0: left promiscuous mode [ 503.425167][ T7478] hsr_slave_1: left promiscuous mode [ 503.438624][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.490298][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.566096][ T7478] hsr_slave_0: left promiscuous mode [ 503.577310][ T7478] hsr_slave_1: left promiscuous mode [ 503.583828][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.622732][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.691753][ T9433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'. [ 504.131798][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 504.191691][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 504.975796][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 505.026536][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 505.642631][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 505.754731][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 506.096115][ T9202] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 506.258428][ T9202] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 506.315405][ T9202] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 507.190592][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.351072][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.443543][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.450777][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.570327][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.577614][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.888571][ C0] net_ratelimit: 11176 callbacks suppressed [ 507.888594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.907093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.919765][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.927997][ T9202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.932451][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.933080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.963936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.976620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 507.989293][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 508.001824][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 508.014386][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 508.236640][ T9205] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 508.311693][ T9205] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 508.393102][ T9205] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 508.572826][ T9205] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 508.685038][ T9463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.826'. [ 508.726211][ T9202] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.847538][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.854840][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.895639][ T9468] macsec0: left allmulticast mode [ 508.901068][ T9468] veth1_macvtap: left allmulticast mode [ 508.914536][ T9468] macsec0: left promiscuous mode [ 508.925125][ T9468] bridge0: port 4(macsec0) entered disabled state [ 508.969890][ T9468] veth0_to_bridge: left allmulticast mode [ 508.977407][ T9468] veth0_to_bridge: left promiscuous mode [ 508.996861][ T9468] bridge0: port 3(veth0_to_bridge) entered disabled state [ 509.015634][ T9468] bridge_slave_1: left allmulticast mode [ 509.021514][ T9468] bridge_slave_1: left promiscuous mode [ 509.027527][ T9468] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.041679][ T9468] bridge_slave_0: left allmulticast mode [ 509.047388][ T9468] bridge_slave_0: left promiscuous mode [ 509.066748][ T9468] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.100376][ T9468] bond0: (slave bridge0): Releasing backup interface [ 509.165959][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.173208][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.522090][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.555321][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.828'. [ 509.767217][ T9205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.870002][ T9205] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.894957][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.902245][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.975927][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.983170][ T7478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.062980][ T9492] IPv6: NLM_F_CREATE should be specified when creating new route [ 510.096361][ T9202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.473655][ T9207] veth0_vlan: entered promiscuous mode [ 510.505299][ T9207] veth1_vlan: entered promiscuous mode [ 510.675093][ T9207] veth0_macvtap: entered promiscuous mode [ 510.834226][ T9207] veth1_macvtap: entered promiscuous mode [ 513.317156][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.398893][ T9205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.450315][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.550609][ T6358] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.582608][ T6358] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.610966][ T9202] veth0_vlan: entered promiscuous mode [ 513.631693][ T6358] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.662693][ T6358] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.803783][ T9202] veth1_vlan: entered promiscuous mode [ 513.988096][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.010013][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.044058][ T9202] veth0_macvtap: entered promiscuous mode [ 514.077459][ T9202] veth1_macvtap: entered promiscuous mode [ 514.201035][ T9202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.231610][ T9202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.250421][ T3660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.258299][ T3660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.265862][ T6358] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.387523][ T6358] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.435211][ T6358] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.452827][ T6358] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.592557][ T9205] veth0_vlan: entered promiscuous mode [ 514.682498][ T9205] veth1_vlan: entered promiscuous mode [ 515.079269][ T6358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.121908][ T6358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.342111][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.7.604'. [ 515.468092][ T9205] veth0_macvtap: entered promiscuous mode [ 515.647142][ T9205] veth1_macvtap: entered promiscuous mode [ 515.700852][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.723737][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.781664][ T9205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.812333][ T9205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.832856][ T7478] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.851280][ T7478] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.906493][ T1155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.007549][ T1155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.049496][ T9562] netlink: 'syz.0.847': attribute type 10 has an invalid length. [ 516.088797][ T9561] netlink: 64 bytes leftover after parsing attributes in process `syz.0.847'. [ 516.097951][ T9562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.847'. [ 516.144981][ T9562] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 516.183534][ T9562] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.230375][ T9566] netlink: 'syz.7.846': attribute type 10 has an invalid length. [ 516.248088][ T9562] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 516.273277][ T9566] netlink: 40 bytes leftover after parsing attributes in process `syz.7.846'. [ 516.299569][ T9566] batman_adv: batadv0: Adding interface: virt_wifi0 [ 516.331498][ T9566] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 516.399244][ T9566] batman_adv: batadv0: Interface activated: virt_wifi0 [ 516.576527][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.591602][ T9572] netlink: 'syz.0.849': attribute type 10 has an invalid length. [ 516.608611][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.610952][ T9572] netlink: 40 bytes leftover after parsing attributes in process `syz.0.849'. [ 516.784696][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 516.796820][ T9581] FAULT_INJECTION: forcing a failure. [ 516.796820][ T9581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.812441][ T6678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.832814][ T6678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.843013][ T9585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.852'. [ 516.869707][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.6.851 Not tainted syzkaller #0 PREEMPT(full) [ 516.869737][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 516.869748][ T9581] Call Trace: [ 516.869756][ T9581] [ 516.869764][ T9581] dump_stack_lvl+0xe8/0x150 [ 516.869797][ T9581] should_fail_ex+0x412/0x560 [ 516.869830][ T9581] _copy_from_user+0x2d/0xb0 [ 516.869862][ T9581] ___sys_sendmsg+0x1c6/0x360 [ 516.869883][ T9581] ? __lock_acquire+0x6b5/0x2cf0 [ 516.869908][ T9581] ? __pfx____sys_sendmsg+0x10/0x10 [ 516.869966][ T9581] ? __fget_files+0x2a/0x420 [ 516.869992][ T9581] ? __fget_files+0x3a0/0x420 [ 516.870030][ T9581] __x64_sys_sendmsg+0x1bd/0x2a0 [ 516.870055][ T9581] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 516.870075][ T9581] ? perf_trace_preemptirq_template+0xab/0x340 [ 516.870113][ T9581] ? __pfx_ksys_write+0x10/0x10 [ 516.870146][ T9581] do_syscall_64+0xe2/0xf80 [ 516.870176][ T9581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.870195][ T9581] ? trace_irq_disable+0x37/0x100 [ 516.870219][ T9581] ? clear_bhb_loop+0x60/0xb0 [ 516.870242][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.870260][ T9581] RIP: 0033:0x7f4cc9f9acb9 [ 516.870278][ T9581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.870295][ T9581] RSP: 002b:00007f4ccae58028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 516.870318][ T9581] RAX: ffffffffffffffda RBX: 00007f4cca216090 RCX: 00007f4cc9f9acb9 [ 516.870332][ T9581] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 516.870344][ T9581] RBP: 00007f4ccae58090 R08: 0000000000000000 R09: 0000000000000000 [ 516.870357][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.870369][ T9581] R13: 00007f4cca216128 R14: 00007f4cca216090 R15: 00007ffff249a4b8 [ 516.870402][ T9581] [ 517.168834][ T9592] FAULT_INJECTION: forcing a failure. [ 517.168834][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 517.185955][ T9592] CPU: 0 UID: 0 PID: 9592 Comm: syz.3.855 Not tainted syzkaller #0 PREEMPT(full) [ 517.185985][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 517.185997][ T9592] Call Trace: [ 517.186008][ T9592] [ 517.186018][ T9592] dump_stack_lvl+0xe8/0x150 [ 517.186060][ T9592] should_fail_ex+0x412/0x560 [ 517.186110][ T9592] should_failslab+0xa8/0x100 [ 517.186146][ T9592] kmem_cache_alloc_lru_noprof+0x8c/0x6c0 [ 517.186174][ T9592] ? alloc_inode+0xb8/0x1b0 [ 517.186222][ T9592] alloc_inode+0xb8/0x1b0 [ 517.186258][ T9592] path_from_stashed+0x200/0x5c0 [ 517.186293][ T9592] ? _raw_spin_unlock+0x28/0x50 [ 517.186320][ T9592] ? ipcns_get+0x8b/0xb0 [ 517.186361][ T9592] proc_ns_get_link+0xf4/0x220 [ 517.186390][ T9592] ? __pfx_proc_ns_get_link+0x10/0x10 [ 517.186429][ T9592] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 517.186454][ T9592] ? __pfx_proc_ns_get_link+0x10/0x10 [ 517.186483][ T9592] pick_link+0x731/0xfa0 [ 517.186545][ T9592] step_into_slowpath+0x547/0x7e0 [ 517.186573][ T9592] ? path_openat+0x1c0b/0x3e20 [ 517.186613][ T9592] ? __pfx_step_into_slowpath+0x10/0x10 [ 517.186681][ T9592] path_openat+0x2824/0x3e20 [ 517.186824][ T9592] ? __pfx_path_openat+0x10/0x10 [ 517.186927][ T9592] do_filp_open+0x22d/0x490 [ 517.186964][ T9592] ? __pfx_do_filp_open+0x10/0x10 [ 517.187065][ T9592] ? _raw_spin_unlock+0x28/0x50 [ 517.187092][ T9592] ? alloc_fd+0x64b/0x6c0 [ 517.187160][ T9592] do_sys_openat2+0x12f/0x220 [ 517.187191][ T9592] ? atomic_notifier_call_chain+0x16e/0x180 [ 517.187227][ T9592] ? __pfx_do_sys_openat2+0x10/0x10 [ 517.187252][ T9592] ? notify_die+0x144/0x1a0 [ 517.187291][ T9592] ? __pfx_notify_die+0x10/0x10 [ 517.187346][ T9592] __x64_sys_openat+0x138/0x170 [ 517.187397][ T9592] do_syscall_64+0xe2/0xf80 [ 517.187429][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.187451][ T9592] ? clear_bhb_loop+0x60/0xb0 [ 517.187486][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.187506][ T9592] RIP: 0033:0x7fb5f175b58e [ 517.187529][ T9592] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 517.187546][ T9592] RSP: 002b:00007fb5ef9f5ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 517.187569][ T9592] RAX: ffffffffffffffda RBX: 00007fb5ef9f66c0 RCX: 00007fb5f175b58e [ 517.187584][ T9592] RDX: 0000000000000002 RSI: 00007fb5ef9f5f90 RDI: ffffffffffffff9c [ 517.187598][ T9592] RBP: 00007fb5ef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 517.187611][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 517.187623][ T9592] R13: 00007fb5f1a16038 R14: 00007fb5f1a15fa0 R15: 00007fffa22b18c8 [ 517.187700][ T9592] [ 517.662704][ T9590] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 517.673046][ T9590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.854'. [ 518.002220][ T9608] warning: `syz.0.859' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 518.025858][ T9596] netlink: 'syz.5.602': attribute type 11 has an invalid length. [ 518.625261][ T9623] nbd: couldn't find a device at index 2147483646 [ 518.721653][ T9621] netlink: 16 bytes leftover after parsing attributes in process `syz.7.863'. [ 518.847535][ T9629] netlink: 'syz.3.866': attribute type 21 has an invalid length. [ 518.877513][ T9629] netlink: 'syz.3.866': attribute type 15 has an invalid length. [ 518.960053][ T9634] netlink: 'syz.5.867': attribute type 6 has an invalid length. [ 518.980222][ T9634] netlink: 164 bytes leftover after parsing attributes in process `syz.5.867'. [ 520.006325][ T9656] netlink: 'syz.6.864': attribute type 16 has an invalid length. [ 520.068410][ T9656] netlink: 'syz.6.864': attribute type 17 has an invalid length. [ 520.978882][ T9625] net_ratelimit: 1989 callbacks suppressed [ 520.978958][ T9625] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 520.992251][ T9625] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 521.032331][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.040367][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.209803][ T9673] netlink: 'syz.0.878': attribute type 13 has an invalid length. [ 521.217648][ T9673] __nla_validate_parse: 1 callbacks suppressed [ 521.217686][ T9673] netlink: 168 bytes leftover after parsing attributes in process `syz.0.878'. [ 521.245560][ T9675] FAULT_INJECTION: forcing a failure. [ 521.245560][ T9675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 521.269109][ T9675] CPU: 0 UID: 0 PID: 9675 Comm: syz.3.880 Not tainted syzkaller #0 PREEMPT(full) [ 521.269141][ T9675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 521.269153][ T9675] Call Trace: [ 521.269162][ T9675] [ 521.269171][ T9675] dump_stack_lvl+0xe8/0x150 [ 521.269204][ T9675] should_fail_ex+0x412/0x560 [ 521.269240][ T9675] _copy_from_user+0x2d/0xb0 [ 521.269265][ T9675] __sys_bpf+0x229/0x950 [ 521.269297][ T9675] ? __pfx___sys_bpf+0x10/0x10 [ 521.269338][ T9675] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 521.269375][ T9675] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 521.269403][ T9675] ? __pfx_ksys_write+0x10/0x10 [ 521.269434][ T9675] __x64_sys_bpf+0x7c/0x90 [ 521.269459][ T9675] do_syscall_64+0xe2/0xf80 [ 521.269484][ T9675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.269501][ T9675] ? trace_irq_disable+0x37/0x100 [ 521.269523][ T9675] ? clear_bhb_loop+0x60/0xb0 [ 521.269545][ T9675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.269562][ T9675] RIP: 0033:0x7fb5f179acb9 [ 521.269580][ T9675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.269597][ T9675] RSP: 002b:00007fb5ef9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.269618][ T9675] RAX: ffffffffffffffda RBX: 00007fb5f1a15fa0 RCX: 00007fb5f179acb9 [ 521.269632][ T9675] RDX: 0000000000000090 RSI: 00002000000003c0 RDI: 000000000000001c [ 521.269644][ T9675] RBP: 00007fb5ef9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 521.269656][ T9675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.269667][ T9675] R13: 00007fb5f1a16038 R14: 00007fb5f1a15fa0 R15: 00007fffa22b18c8 [ 521.269700][ T9675] [ 521.291655][ T9656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.465176][ T9676] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 521.494112][ T9679] delete_channel: no stack [ 521.500254][ T9679] delete_channel: no stack [ 521.507508][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 521.508998][ T9656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.542660][ T9679] netlink: 'syz.3.881': attribute type 39 has an invalid length. [ 521.731571][ T9672] netlink: 1 bytes leftover after parsing attributes in process `syz.5.879'. [ 521.890259][ T50] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.983565][ T50] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.028720][ T8411] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.040332][ T8411] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.088651][ T9686] bridge_slave_1: left allmulticast mode [ 522.094444][ T9686] bridge_slave_1: left promiscuous mode [ 522.149610][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.226871][ T9686] bridge_slave_0: left allmulticast mode [ 522.267682][ T9686] bridge_slave_0: left promiscuous mode [ 522.287949][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.383244][ T9700] netlink: 'syz.3.887': attribute type 39 has an invalid length. [ 522.539993][ T9693] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 522.619816][ T9706] IPv6: Can't replace route, no match found [ 522.983307][ T9709] netlink: 'syz.6.891': attribute type 10 has an invalid length. [ 523.022052][ T9709] veth0_vlan: left promiscuous mode [ 523.106896][ T9709] veth0_vlan: entered promiscuous mode [ 523.148839][ T9709] team0: Device veth0_vlan failed to register rx_handler [ 523.183841][ T9712] ======================================================= [ 523.183841][ T9712] WARNING: The mand mount option has been deprecated and [ 523.183841][ T9712] and is ignored by this kernel. Remove the mand [ 523.183841][ T9712] option from the mount to silence this warning. [ 523.183841][ T9712] ======================================================= [ 523.320700][ T9709] syz.6.891 (9709) used greatest stack depth: 18728 bytes left [ 523.913279][ T9692] infiniband !yz!: set active [ 523.921906][ T9692] infiniband !yz!: added team_slave_0 [ 524.031398][ T9692] RDS/IB: !yz!: added [ 524.044133][ T9692] smc: adding ib device !yz! with port count 1 [ 524.050978][ T9692] smc: ib device !yz! port 1 has no pnetid [ 526.730812][ T9741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.903'. [ 526.856643][ T9744] bridge_slave_1: left allmulticast mode [ 526.867597][ T9744] bridge_slave_1: left promiscuous mode [ 526.874101][ T9744] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.004407][ T9740] netlink: 16 bytes leftover after parsing attributes in process `syz.6.902'. [ 527.043020][ T9744] bridge_slave_0: left allmulticast mode [ 527.069287][ T9744] bridge_slave_0: left promiscuous mode [ 527.099472][ T9744] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.261955][ T9750] netlink: 'syz.5.906': attribute type 10 has an invalid length. [ 527.348514][ T9750] netlink: 40 bytes leftover after parsing attributes in process `syz.5.906'. [ 527.562316][ T9750] batman_adv: batadv0: Adding interface: virt_wifi0 [ 527.635530][ T9750] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.685110][ T9750] batman_adv: batadv0: Interface activated: virt_wifi0 [ 530.540752][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.6.919'. [ 530.725094][ T9798] netlink: 'syz.7.921': attribute type 10 has an invalid length. [ 530.778739][ T9798] netlink: 40 bytes leftover after parsing attributes in process `syz.7.921'. [ 530.882752][ T9804] netlink: 'syz.5.923': attribute type 1 has an invalid length. [ 530.898500][ T9804] netlink: 280 bytes leftover after parsing attributes in process `syz.5.923'. [ 533.533736][ T9844] netlink: 'syz.5.938': attribute type 10 has an invalid length. [ 533.588584][ T9844] netlink: 40 bytes leftover after parsing attributes in process `syz.5.938'. [ 534.541379][ T9860] netlink: 'syz.5.943': attribute type 10 has an invalid length. [ 534.553678][ T9862] C: renamed from team_slave_0 (while UP) [ 534.869853][ T9862] netlink: 'syz.5.943': attribute type 2 has an invalid length. [ 534.910733][ T9862] netlink: 116 bytes leftover after parsing attributes in process `syz.5.943'. [ 534.939186][ T9862] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 535.046021][ T9860] team0: Port device syz_tun added [ 535.300845][ T9876] netlink: 'syz.0.946': attribute type 10 has an invalid length. [ 535.388642][ T9876] netlink: 40 bytes leftover after parsing attributes in process `syz.0.946'. [ 536.045632][ T9888] netlink: 28 bytes leftover after parsing attributes in process `syz.7.952'. [ 536.491599][ T9893] netlink: 'syz.0.953': attribute type 10 has an invalid length. [ 536.527179][ T9893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.953'. [ 536.823289][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz.5.955'. [ 538.022659][ T9929] netlink: 830 bytes leftover after parsing attributes in process `syz.6.965'. [ 538.253461][ T9932] netlink: 'syz.5.966': attribute type 1 has an invalid length. [ 538.724216][ T9944] netlink: 'syz.6.968': attribute type 10 has an invalid length. [ 538.732522][ T9944] netlink: 40 bytes leftover after parsing attributes in process `syz.6.968'. [ 538.798688][ T9944] batman_adv: batadv0: Adding interface: virt_wifi0 [ 538.819434][ T9944] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.030239][ T9944] batman_adv: batadv0: Interface activated: virt_wifi0 [ 539.077387][ T9946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.971'. [ 539.696547][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz.7.976'. [ 540.793066][ T9970] netlink: 'syz.5.979': attribute type 10 has an invalid length. [ 540.802633][ T9970] netlink: 56823 bytes leftover after parsing attributes in process `syz.5.979'. [ 543.027905][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 543.039157][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 543.064536][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 543.076868][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 543.099135][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 544.000058][ T9988] netlink: 'syz.5.985': attribute type 9 has an invalid length. [ 544.024503][ T9987] netlink: 'syz.5.985': attribute type 9 has an invalid length. [ 544.038244][ T9988] netlink: 'syz.5.985': attribute type 11 has an invalid length. [ 544.082156][ T9987] netlink: 'syz.5.985': attribute type 11 has an invalid length. [ 544.132902][ T9988] netlink: 'syz.5.985': attribute type 12 has an invalid length. [ 544.154755][ T9988] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.985'. [ 544.159196][ T9987] netlink: 'syz.5.985': attribute type 12 has an invalid length. [ 544.223368][ T9987] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.985'. [ 544.281149][ T9987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.985'. [ 544.328593][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.985'. [ 544.702772][ T6358] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.891901][ T6358] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.171836][T10039] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1001'. [ 545.199722][ T5151] Bluetooth: hci1: command tx timeout [ 545.207360][ T6358] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.312185][ T6358] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.559041][T10051] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1005'. [ 545.604937][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 545.930254][T10010] chnl_net:caif_netlink_parms(): no params data found [ 546.473260][T10010] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.493076][T10010] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.513655][T10010] bridge_slave_0: entered allmulticast mode [ 546.533812][T10010] bridge_slave_0: entered promiscuous mode [ 547.288826][ T5151] Bluetooth: hci1: command tx timeout [ 547.400907][ T6358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.429590][ T6358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.460174][ T6358] bond0 (unregistering): (slave team0): Releasing backup interface [ 547.486948][ T6358] bond0 (unregistering): Released all slaves [ 547.516764][T10010] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.528899][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.536217][T10010] bridge_slave_1: entered allmulticast mode [ 547.560504][T10010] bridge_slave_1: entered promiscuous mode [ 547.727432][T10010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.799695][T10010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.926496][T10010] team0: Port device team_slave_0 added [ 547.971581][T10010] team0: Port device team_slave_1 added [ 548.089800][T10010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.117597][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.180336][T10010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.260710][T10010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.267684][T10010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 548.348999][T10010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.533968][T10010] hsr_slave_0: entered promiscuous mode [ 548.551255][T10010] hsr_slave_1: entered promiscuous mode [ 548.568477][T10010] debugfs: 'hsr0' already exists in 'hsr' [ 548.574257][T10010] Cannot create hsr debugfs directory [ 549.349590][T10010] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 549.359083][ T5151] Bluetooth: hci1: command tx timeout [ 549.411124][T10010] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 549.450540][T10010] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 549.512173][T10010] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 549.641484][T10010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.663723][T10010] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.691726][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.698973][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.737983][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.745227][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.767948][ T6358] hsr_slave_0: left promiscuous mode [ 549.774381][ T6358] hsr_slave_1: left promiscuous mode [ 549.781181][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.807278][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.816945][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.826186][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.835254][ T6358] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 549.843657][ T6358] batman_adv: batadv0: Removing interface: virt_wifi0 [ 549.870597][ T6358] veth1_macvtap: left promiscuous mode [ 549.876331][ T6358] veth1_vlan: left promiscuous mode [ 549.882202][ T6358] veth0_vlan: left promiscuous mode [ 550.504298][ T6358] team0 (unregistering): Port device team_slave_1 removed [ 550.561924][ T6358] team0 (unregistering): Port device team_slave_0 removed [ 551.440415][ T5151] Bluetooth: hci1: command tx timeout [ 551.456770][T10010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.831216][T10010] veth0_vlan: entered promiscuous mode [ 551.852632][T10010] veth1_vlan: entered promiscuous mode [ 551.905672][T10010] veth0_macvtap: entered promiscuous mode [ 551.918191][T10010] veth1_macvtap: entered promiscuous mode [ 551.947254][T10010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.967789][T10010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.987555][ T3660] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.998135][ T3660] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.019234][ T3660] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.027998][ T3660] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.116526][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.139711][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.187454][ T8401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.196442][ T8401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.447530][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1015'. [ 557.621738][T10105] netlink: 'syz.8.1014': attribute type 10 has an invalid length. [ 557.734246][T10105] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1014'. [ 557.747123][T10105] batman_adv: batadv0: Adding interface: virt_wifi0 [ 557.754502][T10105] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.782223][T10105] batman_adv: batadv0: Interface activated: virt_wifi0 [ 558.218194][T10116] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1018'. [ 558.710686][T10132] delete_channel: no stack [ 558.722315][T10132] delete_channel: no stack [ 558.743820][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1024'. [ 558.814630][T10134] netlink: 'syz.6.1024': attribute type 39 has an invalid length. [ 559.701522][T10140] FAULT_INJECTION: forcing a failure. [ 559.701522][T10140] name failslab, interval 1, probability 0, space 0, times 0 [ 559.738313][T10140] CPU: 1 UID: 0 PID: 10140 Comm: syz.8.1025 Not tainted syzkaller #0 PREEMPT(full) [ 559.738349][T10140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 559.738361][T10140] Call Trace: [ 559.738371][T10140] [ 559.738381][T10140] dump_stack_lvl+0xe8/0x150 [ 559.738422][T10140] should_fail_ex+0x412/0x560 [ 559.738476][T10140] should_failslab+0xa8/0x100 [ 559.738513][T10140] kmem_cache_alloc_noprof+0x87/0x6e0 [ 559.738551][T10140] ? security_inode_alloc+0x39/0x310 [ 559.738601][T10140] security_inode_alloc+0x39/0x310 [ 559.738643][T10140] inode_init_always_gfp+0x9ed/0xdc0 [ 559.738701][T10140] alloc_inode+0x82/0x1b0 [ 559.738738][T10140] path_from_stashed+0x200/0x5c0 [ 559.738774][T10140] ? _raw_spin_unlock+0x28/0x50 [ 559.738801][T10140] ? ipcns_get+0x8b/0xb0 [ 559.738842][T10140] proc_ns_get_link+0xf4/0x220 [ 559.738871][T10140] ? __pfx_proc_ns_get_link+0x10/0x10 [ 559.738911][T10140] ? bpf_lsm_inode_follow_link+0x9/0x20 [ 559.738936][T10140] ? __pfx_proc_ns_get_link+0x10/0x10 [ 559.738966][T10140] pick_link+0x731/0xfa0 [ 559.739035][T10140] step_into_slowpath+0x547/0x7e0 [ 559.739065][T10140] ? path_openat+0x1c0b/0x3e20 [ 559.739106][T10140] ? __pfx_step_into_slowpath+0x10/0x10 [ 559.739185][T10140] path_openat+0x2824/0x3e20 [ 559.739330][T10140] ? __pfx_path_openat+0x10/0x10 [ 559.739425][T10140] do_filp_open+0x22d/0x490 [ 559.739461][T10140] ? __pfx_do_filp_open+0x10/0x10 [ 559.739563][T10140] ? _raw_spin_unlock+0x28/0x50 [ 559.739588][T10140] ? alloc_fd+0x64b/0x6c0 [ 559.739660][T10140] do_sys_openat2+0x12f/0x220 [ 559.739690][T10140] ? atomic_notifier_call_chain+0x16e/0x180 [ 559.739725][T10140] ? __pfx_do_sys_openat2+0x10/0x10 [ 559.739751][T10140] ? notify_die+0x144/0x1a0 [ 559.739791][T10140] ? __pfx_notify_die+0x10/0x10 [ 559.739846][T10140] __x64_sys_openat+0x138/0x170 [ 559.739896][T10140] do_syscall_64+0xe2/0xf80 [ 559.739926][T10140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.739949][T10140] ? clear_bhb_loop+0x60/0xb0 [ 559.739985][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.740006][T10140] RIP: 0033:0x7f23cdb5b58e [ 559.740029][T10140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 559.740045][T10140] RSP: 002b:00007f23ceb2fec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 559.740067][T10140] RAX: ffffffffffffffda RBX: 00007f23ceb306c0 RCX: 00007f23cdb5b58e [ 559.740082][T10140] RDX: 0000000000000002 RSI: 00007f23ceb2ff90 RDI: ffffffffffffff9c [ 559.740094][T10140] RBP: 00007f23ceb30090 R08: 0000000000000000 R09: 0000000000000000 [ 559.740106][T10140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 559.740117][T10140] R13: 00007f23cde16038 R14: 00007f23cde15fa0 R15: 00007ffe92eb8dc8 [ 559.740200][T10140] [ 560.398236][T10148] proc: Unknown parameter '0x00000000ffffffff' [ 560.589065][ T7367] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 560.597977][ T7367] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 560.606149][ T7367] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 560.615634][ T7367] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 560.631868][ T7367] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 560.860567][ T1112] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.929011][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1034'. [ 561.113598][ T1112] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.370235][T10179] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'. [ 561.441828][ T1112] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.471148][T10182] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1038'. [ 561.711332][ T1112] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.721997][ T5151] Bluetooth: hci2: command tx timeout [ 562.825178][T10209] FAULT_INJECTION: forcing a failure. [ 562.825178][T10209] name failslab, interval 1, probability 0, space 0, times 0 [ 562.930263][T10209] CPU: 0 UID: 0 PID: 10209 Comm: syz.6.1049 Not tainted syzkaller #0 PREEMPT(full) [ 562.930295][T10209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 562.930308][T10209] Call Trace: [ 562.930317][T10209] [ 562.930326][T10209] dump_stack_lvl+0xe8/0x150 [ 562.930358][T10209] should_fail_ex+0x412/0x560 [ 562.930392][T10209] should_failslab+0xa8/0x100 [ 562.930419][T10209] __kvmalloc_node_noprof+0x166/0x8d0 [ 562.930441][T10209] ? __fget_files+0x2a/0x420 [ 562.930468][T10209] ? map_get_next_key+0x234/0x620 [ 562.930503][T10209] map_get_next_key+0x234/0x620 [ 562.930532][T10209] ? bpf_lsm_bpf+0x9/0x20 [ 562.930562][T10209] __sys_bpf+0x768/0x950 [ 562.930591][T10209] ? __pfx___sys_bpf+0x10/0x10 [ 562.930615][T10209] ? ktime_get+0x1d2/0x200 [ 562.930661][T10209] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 562.930692][T10209] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 562.930721][T10209] ? __pfx_sched_clock_cpu+0x10/0x10 [ 562.930752][T10209] __x64_sys_bpf+0x7c/0x90 [ 562.930778][T10209] do_syscall_64+0xe2/0xf80 [ 562.930808][T10209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.930827][T10209] ? clear_bhb_loop+0x60/0xb0 [ 562.930852][T10209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.930871][T10209] RIP: 0033:0x7f4cc9f9acb9 [ 562.930900][T10209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.930918][T10209] RSP: 002b:00007f4ccae79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 562.930942][T10209] RAX: ffffffffffffffda RBX: 00007f4cca215fa0 RCX: 00007f4cc9f9acb9 [ 562.930958][T10209] RDX: 0000000000000020 RSI: 0000200000000f40 RDI: 0000000000000004 [ 562.930971][T10209] RBP: 00007f4ccae79090 R08: 0000000000000000 R09: 0000000000000000 [ 562.930985][T10209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.930998][T10209] R13: 00007f4cca216038 R14: 00007f4cca215fa0 R15: 00007ffff249a4b8 [ 562.931033][T10209] [ 562.964288][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.964378][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.296231][T10219] FAULT_INJECTION: forcing a failure. [ 563.296231][T10219] name failslab, interval 1, probability 0, space 0, times 0 [ 563.309522][T10219] CPU: 1 UID: 0 PID: 10219 Comm: syz.6.1051 Not tainted syzkaller #0 PREEMPT(full) [ 563.309553][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 563.309565][T10219] Call Trace: [ 563.309573][T10219] [ 563.309581][T10219] dump_stack_lvl+0xe8/0x150 [ 563.309614][T10219] should_fail_ex+0x412/0x560 [ 563.309648][T10219] should_failslab+0xa8/0x100 [ 563.309674][T10219] kmem_cache_alloc_noprof+0x87/0x6e0 [ 563.309705][T10219] ? security_inode_alloc+0x39/0x310 [ 563.309739][T10219] security_inode_alloc+0x39/0x310 [ 563.309769][T10219] inode_init_always_gfp+0x9ed/0xdc0 [ 563.309800][T10219] ? __pfx_sock_alloc_inode+0x10/0x10 [ 563.309823][T10219] alloc_inode+0x82/0x1b0 [ 563.309848][T10219] __sock_create+0x12d/0x9d0 [ 563.309888][T10219] ? __might_fault+0xaf/0x130 [ 563.309910][T10219] __sys_socketpair+0x1c4/0x560 [ 563.309944][T10219] __x64_sys_socketpair+0x9b/0xb0 [ 563.309972][T10219] do_syscall_64+0xe2/0xf80 [ 563.309998][T10219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.310015][T10219] ? trace_irq_disable+0x37/0x100 [ 563.310039][T10219] ? clear_bhb_loop+0x60/0xb0 [ 563.310063][T10219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.310081][T10219] RIP: 0033:0x7f4cc9f9acb9 [ 563.310099][T10219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.310116][T10219] RSP: 002b:00007f4ccae79028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 563.310137][T10219] RAX: ffffffffffffffda RBX: 00007f4cca215fa0 RCX: 00007f4cc9f9acb9 [ 563.310151][T10219] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000023 [ 563.310162][T10219] RBP: 00007f4ccae79090 R08: 0000000000000000 R09: 0000000000000000 [ 563.310173][T10219] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 563.310185][T10219] R13: 00007f4cca216038 R14: 00007f4cca215fa0 R15: 00007ffff249a4b8 [ 563.310224][T10219] [ 563.310338][T10219] socket: no more sockets [ 563.755768][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 563.757344][T10224] netlink: 'syz.6.1052': attribute type 10 has an invalid length. [ 563.772637][T10224] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1052'. [ 563.785358][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.797579][ T1112] bond0 (unregistering): Released all slaves [ 563.846939][T10153] chnl_net:caif_netlink_parms(): no params data found [ 564.229924][T10237] netlink: 'syz.6.1056': attribute type 6 has an invalid length. [ 564.237718][T10237] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1056'. [ 564.455653][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.463686][T10153] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.472328][T10153] bridge_slave_0: entered allmulticast mode [ 564.481654][T10153] bridge_slave_0: entered promiscuous mode [ 564.592334][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.635108][T10153] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.648695][T10153] bridge_slave_1: entered allmulticast mode [ 564.658035][T10153] bridge_slave_1: entered promiscuous mode [ 564.798848][ T5151] Bluetooth: hci2: command tx timeout [ 564.851470][T10153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.864704][T10153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.604676][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1060'. [ 565.981411][T10264] netlink: 'syz.6.1062': attribute type 10 has an invalid length. [ 566.102882][T10153] team0: Port device team_slave_0 added [ 566.685258][T10264] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 566.712968][T10153] team0: Port device team_slave_1 added [ 566.771501][ T1112] hsr_slave_0: left promiscuous mode [ 566.810947][ T1112] hsr_slave_1: left promiscuous mode [ 566.817192][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.845754][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.879065][ T5151] Bluetooth: hci2: command tx timeout [ 566.886471][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.908210][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.949490][ T1112] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 566.956674][ T1112] batman_adv: batadv0: Removing interface: virt_wifi0 [ 567.059472][ T1112] veth1_macvtap: left promiscuous mode [ 567.065079][ T1112] veth0_macvtap: left promiscuous mode [ 567.111692][ T1112] veth1_vlan: left promiscuous mode [ 567.127302][ T1112] veth0_vlan: left promiscuous mode [ 567.393733][T10278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1069'. [ 568.294081][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 568.329581][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 568.339963][ T60] smc: removing ib device !yz! [ 568.774905][T10153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.798458][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.878078][T10153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.907940][T10153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.918459][T10153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.954056][T10153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.970026][ T5151] Bluetooth: hci2: command tx timeout [ 569.226888][T10153] hsr_slave_0: entered promiscuous mode [ 569.350064][T10153] hsr_slave_1: entered promiscuous mode [ 569.356650][T10153] debugfs: 'hsr0' already exists in 'hsr' [ 569.418930][T10153] Cannot create hsr debugfs directory [ 569.723013][T10321] netlink: 'syz.0.1081': attribute type 46 has an invalid length. [ 569.723915][T10318] delete_channel: no stack [ 569.749812][T10318] delete_channel: no stack [ 569.762194][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1080'. [ 569.777705][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1081'. [ 569.817624][T10318] netlink: 'syz.8.1080': attribute type 39 has an invalid length. [ 570.106955][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1083'. [ 570.448866][T10332] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.1084'. [ 570.949401][T10339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1086'. [ 571.395579][T10153] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 571.712012][T10153] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 571.729111][T10153] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 571.772948][T10153] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 572.119575][T10153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.153614][T10153] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.171939][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.179217][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.235402][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.242765][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.447360][T10153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.533115][T10406] pim6reg1: entered promiscuous mode [ 573.555763][T10406] pim6reg1: entered allmulticast mode [ 573.852380][T10418] tap0: tun_chr_ioctl cmd 1074025677 [ 573.860250][T10418] tap0: linktype set to 774 [ 574.319426][T10153] veth0_vlan: entered promiscuous mode [ 574.345742][T10153] veth1_vlan: entered promiscuous mode [ 574.430620][T10153] veth0_macvtap: entered promiscuous mode [ 574.464012][T10153] veth1_macvtap: entered promiscuous mode [ 574.570693][T10153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.602390][T10153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.661192][ T3660] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.707498][ T3660] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.735957][ T3660] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.790865][ T3660] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.866711][ T3660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.884782][ T3660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.027144][ T3660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.052416][ T3660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.177179][ T5151] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 577.367863][T10509] ref_ctr_offset mismatch. inode: 0x2b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 577.389394][T10515] veth1_to_team: entered promiscuous mode [ 577.398568][T10515] veth1_to_team: entered allmulticast mode [ 578.209891][T10535] sock: sock_timestamping_bind_phc: sock not bind to device [ 578.352356][T10546] sit0: entered allmulticast mode [ 578.432696][T10546] sit0: entered promiscuous mode [ 583.218041][T10619] sit0: entered allmulticast mode [ 583.287361][T10619] sit0: entered promiscuous mode [ 584.577067][T10651] bond_slave_1: mtu less than device minimum [ 584.673791][T10653] sit0: entered allmulticast mode [ 584.834926][T10653] sit0: entered promiscuous mode [ 585.828671][T10691] tun0: tun_chr_ioctl cmd 1074025672 [ 585.869070][T10691] tun0: ignored: set checksum enabled [ 590.641193][ T5151] Bluetooth: hci6: command 0x0406 tx timeout [ 590.647265][ T5151] Bluetooth: hci5: command 0x0406 tx timeout [ 591.791178][T10815] sit0: entered allmulticast mode [ 591.807036][T10815] sit0: entered promiscuous mode [ 592.712561][T10828] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.720366][T10828] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.755793][T10828] bridge0: entered allmulticast mode [ 594.526167][T10882] pim6reg1: entered allmulticast mode [ 595.915454][T10928] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1315'. [ 596.588600][T10950] netlink: 'syz.9.1323': attribute type 6 has an invalid length. [ 598.323119][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1356'. [ 599.658620][T11067] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1375'. [ 600.169618][T11085] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1382'. [ 601.374505][T11109] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 603.414223][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1424'. [ 603.464594][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1424'. [ 604.584794][T11242] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1452'. [ 605.416466][T11272] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1464'. [ 605.820417][T11289] netlink: 'syz.5.1473': attribute type 29 has an invalid length. [ 605.852192][T11289] netlink: 'syz.5.1473': attribute type 29 has an invalid length. [ 606.400449][T11306] syzkaller0: entered promiscuous mode [ 606.406073][T11306] syzkaller0: entered allmulticast mode [ 608.530093][T11380] netlink: 10420 bytes leftover after parsing attributes in process `syz.9.1508'. [ 609.331557][T11393] netlink: 142 bytes leftover after parsing attributes in process `syz.0.1514'. [ 610.370764][T11429] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1529'. [ 611.048260][T11467] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1545'. [ 611.444894][T11481] netlink: 'syz.5.1552': attribute type 39 has an invalid length. [ 611.838895][T11489] netlink: 'syz.6.1556': attribute type 39 has an invalid length. [ 612.602875][ T7367] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 612.603049][ T7367] Bluetooth: hci0: connection err: -111 [ 613.431881][ T7367] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 613.431965][ T7367] Bluetooth: hci1: connection err: -111 [ 617.864154][T11667] raw_sendmsg: syz.8.1628 forgot to set AF_INET. Fix it! [ 620.804773][T11750] netlink: 'syz.8.1665': attribute type 39 has an invalid length. [ 621.423837][T11776] netlink: 'syz.5.1677': attribute type 39 has an invalid length. [ 621.524182][T11776] team0: Port device syz_tun removed [ 621.797751][T11788] netlink: 364 bytes leftover after parsing attributes in process `syz.8.1685'. [ 621.839811][T11790] netlink: 996 bytes leftover after parsing attributes in process `syz.0.1683'. [ 622.471222][T11820] netlink: 'syz.8.1696': attribute type 39 has an invalid length. [ 622.741107][T11833] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1700'. [ 622.753001][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1700'. [ 623.190634][T11855] netlink: 'syz.9.1710': attribute type 39 has an invalid length. [ 623.828677][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1717'. [ 623.860759][T11881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1717'. [ 624.407383][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.413862][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.723286][T11921] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.1738'. [ 625.494482][T11936] netlink: 'syz.8.1744': attribute type 39 has an invalid length. [ 625.646996][T11934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1742'. [ 625.668590][T11934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1742'. [ 626.665452][ T7367] Bluetooth: hci5: unexpected event 0x12 length: 15 > 8 [ 626.721872][T11969] netlink: 'syz.0.1757': attribute type 39 has an invalid length. [ 627.007503][T11981] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.1761'. [ 627.105024][T11987] netlink: 'syz.8.1765': attribute type 29 has an invalid length. [ 627.148756][T11987] netlink: 'syz.8.1765': attribute type 29 has an invalid length. [ 627.177353][T11987] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1765'. [ 627.239926][ T7367] Bluetooth: hci6: unexpected event 0x12 length: 15 > 8 [ 627.812860][T12026] netlink: 'syz.8.1782': attribute type 29 has an invalid length. [ 627.851055][T12026] netlink: 'syz.8.1782': attribute type 29 has an invalid length. [ 627.872770][T12026] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1782'. [ 628.376031][T12043] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1791'. [ 628.746286][T12056] netlink: 'syz.8.1795': attribute type 29 has an invalid length. [ 628.798540][T12056] netlink: 'syz.8.1795': attribute type 29 has an invalid length. [ 628.841400][T12056] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1795'. [ 629.243582][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1804'. [ 629.595977][T12087] netlink: 'syz.9.1810': attribute type 29 has an invalid length. [ 629.605625][T12087] netlink: 'syz.9.1810': attribute type 29 has an invalid length. [ 629.614344][T12087] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1810'. [ 631.023779][T12138] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1833'. [ 633.247427][T12196] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1860'. [ 635.994234][T12265] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1889'. [ 636.003606][T12265] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1889'. [ 636.066517][T12264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1888'. [ 637.291758][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1901'. [ 637.301126][T12296] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1901'. [ 637.732094][ T914] page_pool_release_retry() stalled pool shutdown: id 81, 1 inflight 61 sec [ 638.528549][T12329] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1916'. [ 638.540323][T12329] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1916'. [ 638.570976][T12329] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1916'. [ 638.731223][ T7367] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 639.926071][ T7367] Bluetooth: hci5: unexpected event 0x20 length: 15 > 7 [ 641.819699][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1944'. [ 641.911062][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1944'. [ 645.551045][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 645.562990][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 645.573923][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 645.601130][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 645.612138][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 646.328090][T12461] chnl_net:caif_netlink_parms(): no params data found [ 646.589979][T12490] netlink: 'syz.5.1977': attribute type 16 has an invalid length. [ 646.618179][T12490] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1977'. [ 646.651408][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 646.671355][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 646.680171][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 646.692861][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 646.701449][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 646.712339][T12490] bridge_slave_0: entered allmulticast mode [ 646.962677][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.155072][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.302170][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.343112][T12461] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.350820][T12461] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.358198][T12461] bridge_slave_0: entered allmulticast mode [ 647.367269][T12461] bridge_slave_0: entered promiscuous mode [ 647.436926][T12461] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.453615][T12461] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.477361][T12461] bridge_slave_1: entered allmulticast mode [ 647.494505][T12461] bridge_slave_1: entered promiscuous mode [ 647.535513][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.676561][T12461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 647.686155][ T7367] Bluetooth: hci3: command tx timeout [ 647.738258][T12461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.107971][T12461] team0: Port device team_slave_0 added [ 648.196245][T12461] team0: Port device team_slave_1 added [ 648.351060][T12461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.358070][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.387295][T12461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.399513][T12491] chnl_net:caif_netlink_parms(): no params data found [ 648.450634][T12461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.457994][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 648.486481][T12461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.612475][ T13] bridge_slave_1: left allmulticast mode [ 648.618191][ T13] bridge_slave_1: left promiscuous mode [ 648.625943][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.652404][ T13] bridge_slave_0: left allmulticast mode [ 648.658126][ T13] bridge_slave_0: left promiscuous mode [ 648.664560][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.798561][ T7367] Bluetooth: hci2: command tx timeout [ 649.070807][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.084722][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.096505][ T13] bond0 (unregistering): Released all slaves [ 649.197562][T12461] hsr_slave_0: entered promiscuous mode [ 649.224765][T12461] hsr_slave_1: entered promiscuous mode [ 649.231665][T12461] debugfs: 'hsr0' already exists in 'hsr' [ 649.237903][T12461] Cannot create hsr debugfs directory [ 649.246132][T12491] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.260444][T12491] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.267862][T12491] bridge_slave_0: entered allmulticast mode [ 649.277345][T12491] bridge_slave_0: entered promiscuous mode [ 649.346002][T12491] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.370618][T12491] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.382538][T12491] bridge_slave_1: entered allmulticast mode [ 649.391399][T12491] bridge_slave_1: entered promiscuous mode [ 649.491229][T12491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.596497][T12491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.724491][ T13] hsr_slave_0: left promiscuous mode [ 649.730888][ T13] hsr_slave_1: left promiscuous mode [ 649.737115][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.744872][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.758960][ T7367] Bluetooth: hci3: command tx timeout [ 649.759183][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.786916][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.853997][ T13] veth1_macvtap: left promiscuous mode [ 649.860803][ T13] veth0_macvtap: left promiscuous mode [ 649.866493][ T13] veth1_vlan: left promiscuous mode [ 649.876829][ T13] veth0_vlan: left promiscuous mode [ 650.882132][ T7367] Bluetooth: hci2: command tx timeout [ 651.331480][ T13] team0 (unregistering): Port device team_slave_1 removed [ 651.386925][ T13] team0 (unregistering): Port device team_slave_0 removed [ 651.839181][ T7367] Bluetooth: hci3: command tx timeout [ 652.105349][T12491] team0: Port device team_slave_0 added [ 652.145810][T12491] team0: Port device team_slave_1 added [ 652.326242][T12491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 652.339259][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.398421][T12491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.445045][T12491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.452415][T12491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.494465][T12491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 652.832979][T12491] hsr_slave_0: entered promiscuous mode [ 652.860672][T12491] hsr_slave_1: entered promiscuous mode [ 652.867309][T12491] debugfs: 'hsr0' already exists in 'hsr' [ 652.878577][T12491] Cannot create hsr debugfs directory [ 652.961647][ T7367] Bluetooth: hci2: command tx timeout [ 653.345373][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.522263][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.702294][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.865900][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.920255][ T7367] Bluetooth: hci3: command tx timeout [ 654.049333][T12461] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 654.074400][T12461] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 654.192842][T12461] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 654.223136][T12461] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 654.660582][ T13] bridge_slave_1: left allmulticast mode [ 654.680013][ T13] bridge_slave_1: left promiscuous mode [ 654.687157][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.740271][ T13] bridge_slave_0: left allmulticast mode [ 654.745997][ T13] bridge_slave_0: left promiscuous mode [ 654.778887][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.039327][ T7367] Bluetooth: hci2: command tx timeout [ 655.513287][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.538072][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.561591][ T13] bond0 (unregistering): Released all slaves [ 655.817618][T12461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.108016][T12491] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 656.142466][T12461] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.173813][T12491] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 656.209387][T12491] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 656.255923][T12491] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 656.335592][ T13] hsr_slave_0: left promiscuous mode [ 656.349956][ T13] hsr_slave_1: left promiscuous mode [ 656.359875][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.367391][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.379830][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.387264][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.424657][ T13] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 656.439435][ T13] batman_adv: batadv0: Removing interface: virt_wifi0 [ 656.486185][ T13] veth1_macvtap: left promiscuous mode [ 656.499342][ T13] veth0_macvtap: left promiscuous mode [ 656.505032][ T13] veth1_vlan: left promiscuous mode [ 656.511287][ T13] veth0_vlan: left promiscuous mode [ 657.740534][ T13] team0 (unregistering): Port device team_slave_1 removed [ 657.821909][ T13] team0 (unregistering): Port device team_slave_0 removed [ 658.576673][ T1112] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.583923][ T1112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.688002][ T8059] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.695239][ T8059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.987253][T12491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.060674][T12491] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.123569][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.130983][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.148130][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.155447][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.398170][T12461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.903127][T12491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 660.052313][T12461] veth0_vlan: entered promiscuous mode [ 660.113558][T12461] veth1_vlan: entered promiscuous mode [ 660.132537][T12491] veth0_vlan: entered promiscuous mode [ 660.182039][T12491] veth1_vlan: entered promiscuous mode [ 660.243010][T12461] veth0_macvtap: entered promiscuous mode [ 660.284227][T12491] veth0_macvtap: entered promiscuous mode [ 660.305959][T12461] veth1_macvtap: entered promiscuous mode [ 660.350072][T12491] veth1_macvtap: entered promiscuous mode [ 660.401299][T12461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.424192][T12491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 660.442849][T12461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.462947][T12491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.481621][ T4487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.493647][ T4487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.510931][ T4487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.539724][ T4487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.582286][ T4487] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.622497][ T4487] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.651857][ T4487] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.693209][ T4487] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.827873][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.836191][ T4487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.864357][ T4487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.871920][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.953866][ T4394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.973006][ T4394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.005820][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.017891][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.410992][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 661.569629][T12729] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2057'. [ 661.623816][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2057'. [ 664.022112][T12753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2065'. [ 664.099056][T12753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2065'. [ 665.242705][T12771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2072'. [ 665.251866][T12771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2072'. [ 667.074610][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 667.094049][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 667.102395][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 667.112943][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 667.121696][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.971401][T12790] chnl_net:caif_netlink_parms(): no params data found [ 668.343742][T12813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2088'. [ 668.428609][T12813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2088'. [ 668.759582][T12790] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.789312][ T7367] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 668.798124][ T7367] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 668.806262][T12790] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.840652][T12790] bridge_slave_0: entered allmulticast mode [ 668.843844][ T7367] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 668.849243][T12790] bridge_slave_0: entered promiscuous mode [ 668.864606][ T7367] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 668.866799][T12790] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.880042][ T7367] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 668.881263][T12790] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.894534][T12790] bridge_slave_1: entered allmulticast mode [ 668.919216][T12790] bridge_slave_1: entered promiscuous mode [ 668.943741][ T7478] bridge_slave_1: left allmulticast mode [ 668.962655][ T7478] bridge_slave_1: left promiscuous mode [ 668.971312][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.015739][ T7478] bridge_slave_0: left allmulticast mode [ 669.026165][ T7478] bridge_slave_0: left promiscuous mode [ 669.056762][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.205210][ T5844] Bluetooth: hci1: command tx timeout [ 669.469729][ T7478] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 669.539941][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.551124][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.561103][ T7478] bond0 (unregistering): Released all slaves [ 669.586377][T12790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.608543][T12790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.677621][T12790] team0: Port device team_slave_0 added [ 669.720580][T12790] team0: Port device team_slave_1 added [ 669.778385][T12790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.786867][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.816755][T12790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.890667][T12790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.897783][T12790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.928101][T12790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.145101][ T7478] hsr_slave_0: left promiscuous mode [ 670.151357][ T7478] hsr_slave_1: left promiscuous mode [ 670.157165][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.170802][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.186330][ T7478] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 670.199787][ T7478] batman_adv: batadv0: Removing interface: virt_wifi0 [ 670.392492][T12854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'. [ 670.405538][T12854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2103'. [ 670.523955][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 670.543082][T12858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'. [ 670.745481][T12859] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2105'. [ 670.960040][ T5844] Bluetooth: hci4: command tx timeout [ 671.281775][ T5844] Bluetooth: hci1: command tx timeout [ 671.386940][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 671.431440][ T7478] team0 (unregistering): Port device team_slave_0 removed [ 671.627220][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2115'. [ 671.969953][T12790] hsr_slave_0: entered promiscuous mode [ 671.978050][T12790] hsr_slave_1: entered promiscuous mode [ 671.989406][T12886] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2118'. [ 671.998500][T12886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2118'. [ 672.010086][T12790] debugfs: 'hsr0' already exists in 'hsr' [ 672.015886][T12790] Cannot create hsr debugfs directory [ 672.674992][T12821] chnl_net:caif_netlink_parms(): no params data found [ 672.977791][T12821] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.003901][T12821] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.014837][T12821] bridge_slave_0: entered allmulticast mode [ 673.023090][T12821] bridge_slave_0: entered promiscuous mode [ 673.032719][T12821] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.043142][ T5844] Bluetooth: hci4: command tx timeout [ 673.044370][T12821] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.061937][T12821] bridge_slave_1: entered allmulticast mode [ 673.071521][T12821] bridge_slave_1: entered promiscuous mode [ 673.351573][T12821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.360919][ T5844] Bluetooth: hci1: command tx timeout [ 673.409480][T12821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.634790][T12821] team0: Port device team_slave_0 added [ 673.645579][T12821] team0: Port device team_slave_1 added [ 673.722231][T12821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.734384][T12821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.760769][T12821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.807201][T12821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.817767][T12821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.853036][T12821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.033917][ T7478] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.290162][T12821] hsr_slave_0: entered promiscuous mode [ 674.297257][T12821] hsr_slave_1: entered promiscuous mode [ 674.304310][T12821] debugfs: 'hsr0' already exists in 'hsr' [ 674.310241][T12821] Cannot create hsr debugfs directory [ 674.375418][ T7478] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.520215][ T7478] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.655777][T12790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 674.713163][ T7478] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.729306][T12790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 674.760536][T12790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 674.808350][T12790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 675.130490][ T5844] Bluetooth: hci4: command tx timeout [ 675.166397][T12941] __nla_validate_parse: 1 callbacks suppressed [ 675.166421][T12941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2136'. [ 675.198097][T12941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2136'. [ 675.440337][ T5844] Bluetooth: hci1: command tx timeout [ 675.825044][ T7478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 675.838487][ T7478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 675.851386][ T7478] bond0 (unregistering): Released all slaves [ 676.193622][T12821] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 676.213463][T12790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.221230][T12821] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 676.250091][T12821] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 676.369777][T12821] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 676.397326][T12790] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.454822][ T7478] hsr_slave_0: left promiscuous mode [ 676.476524][ T7478] hsr_slave_1: left promiscuous mode [ 676.489961][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.505533][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.522160][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 676.529751][ T7478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.539907][ T7478] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 676.546983][ T7478] batman_adv: batadv0: Removing interface: virt_wifi0 [ 676.572132][ T7478] veth1_macvtap: left promiscuous mode [ 676.577733][ T7478] veth0_macvtap: left promiscuous mode [ 676.583670][ T7478] veth1_vlan: left promiscuous mode [ 676.589368][ T7478] veth0_vlan: left promiscuous mode [ 677.211869][ T5844] Bluetooth: hci4: command tx timeout [ 677.435694][ T7478] team0 (unregistering): Port device team_slave_1 removed [ 677.496522][ T7478] team0 (unregistering): Port device C removed [ 677.873729][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.880959][ T8401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.979944][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.987092][ T8401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.313212][T12821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.379153][T12821] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.426198][T12996] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.2155'. [ 678.446335][ T6678] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.453624][ T6678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.515698][ T6678] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.522975][ T6678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.783866][T12790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.995947][T12790] veth0_vlan: entered promiscuous mode [ 679.032162][T12790] veth1_vlan: entered promiscuous mode [ 679.180772][T12790] veth0_macvtap: entered promiscuous mode [ 679.235804][T12790] veth1_macvtap: entered promiscuous mode [ 679.319535][T12790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.350461][T12790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.403047][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.419886][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.453144][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.412605][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.457084][T12821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.669034][ T8411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.717584][ T8411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.809594][T12821] veth0_vlan: entered promiscuous mode [ 681.868885][ T8059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.878448][ T8059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.896492][T12821] veth1_vlan: entered promiscuous mode [ 682.044990][T12821] veth0_macvtap: entered promiscuous mode [ 682.084038][T12821] veth1_macvtap: entered promiscuous mode [ 682.142120][T12821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.192138][T12821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.230164][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.256955][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.273250][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.290894][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.477626][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.487181][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.537134][ T7478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.555966][ T7478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.077043][T13041] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.2170'. [ 686.421646][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.429943][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.377313][T13123] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2200'. [ 695.245304][T13182] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2224'. [ 695.586654][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2220'. [ 695.629999][T13172] openvswitch: netlink: IP tunnel dst address not specified [ 695.912179][T13204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2232'. [ 696.269438][T13216] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2237'. [ 696.591526][T13229] netlink: 'syz.4.2241': attribute type 39 has an invalid length. [ 696.713579][ T5844] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 697.213549][T13253] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2250'. [ 697.637126][T13269] netlink: 'syz.0.2257': attribute type 39 has an invalid length. [ 698.029608][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 698.097966][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2260'. [ 698.375234][T13287] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2264'. [ 698.562502][T13291] ÿÿÿÿÿÿ: renamed from dummy0 (while UP) [ 698.585060][T13294] netlink: 'syz.4.2268': attribute type 39 has an invalid length. [ 698.741461][ T5844] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 699.149895][T13313] mac80211_hwsim hwsim82 wlan0: entered promiscuous mode [ 699.170154][T13313] mac80211_hwsim hwsim82 wlan0: entered allmulticast mode [ 699.362376][T13325] netlink: 'syz.2.2280': attribute type 39 has an invalid length. [ 699.392181][T13327] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2281'. [ 699.909211][ T7367] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 699.917795][ T7367] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 699.929973][ T7367] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 699.938985][ T7367] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 699.949142][ T7367] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 701.998806][ T5844] Bluetooth: hci5: command tx timeout [ 702.152255][ T6358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.657984][T13354] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2291'. [ 702.712090][ T6358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.785302][T13356] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2293'. [ 702.801247][ T6358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 702.916445][T13331] chnl_net:caif_netlink_parms(): no params data found [ 703.335131][T13331] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.381489][T13331] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.400431][T13331] bridge_slave_0: entered allmulticast mode [ 703.409179][T13331] bridge_slave_0: entered promiscuous mode [ 703.419840][T13331] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.438736][T13331] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.448876][T13331] bridge_slave_1: entered allmulticast mode [ 703.480243][T13331] bridge_slave_1: entered promiscuous mode [ 703.696090][T13331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 703.735220][T13331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 703.821641][T13331] team0: Port device team_slave_0 added [ 703.836769][T13331] team0: Port device team_slave_1 added [ 704.068024][T13331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.078921][ T5844] Bluetooth: hci5: command tx timeout [ 704.088476][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.129530][T13331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.160186][ T5844] Bluetooth: hci5: command tx timeout [ 706.185603][T13331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.208854][T13331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.303426][T13331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.492274][T13404] netlink: 'syz.1.2310': attribute type 1 has an invalid length. [ 707.774696][T13416] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2314'. [ 707.871501][ T6358] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.931154][ T6358] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.103732][T13433] netlink: 'syz.3.2319': attribute type 39 has an invalid length. [ 708.124021][ T6358] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 708.137386][ T6358] bond0 (unregistering): Released all slaves [ 708.161737][T13421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 708.241451][ T5844] Bluetooth: hci5: command tx timeout [ 708.494374][T13331] hsr_slave_0: entered promiscuous mode [ 708.511431][T13331] hsr_slave_1: entered promiscuous mode [ 708.529666][T13331] debugfs: 'hsr0' already exists in 'hsr' [ 708.535629][T13331] Cannot create hsr debugfs directory [ 708.923681][T13451] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2327'. [ 709.153211][T13447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2325'. [ 709.229037][T13447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2325'. [ 711.137418][T13481] mac80211_hwsim hwsim83 wlan0: entered allmulticast mode [ 711.169905][T13493] mac80211_hwsim hwsim83 wlan0: entered promiscuous mode [ 712.181063][T13331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 712.974776][T13331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 713.099424][T13331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 713.143273][T13331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 713.265634][T13331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.295746][T13331] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.314295][ T3460] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.321620][ T3460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.345416][ T3460] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.352698][ T3460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.893352][T13331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.406888][T13331] veth0_vlan: entered promiscuous mode [ 714.466695][T13331] veth1_vlan: entered promiscuous mode [ 714.499321][T13575] netlink: 'syz.2.2373': attribute type 39 has an invalid length. [ 714.552116][T13331] veth0_macvtap: entered promiscuous mode [ 714.900439][T13331] veth1_macvtap: entered promiscuous mode [ 714.947753][T13331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 715.022033][T13331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 715.069978][ T8411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.080769][ T8411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.092442][ T8411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.162777][ T8411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.421268][T13604] netlink: 'syz.3.2385': attribute type 39 has an invalid length. [ 715.606981][T13592] mac80211_hwsim hwsim86 wlan0: entered allmulticast mode [ 715.695898][T13593] mac80211_hwsim hwsim86 wlan0: entered promiscuous mode [ 716.110739][ T8401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.148070][ T8401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 716.413972][ T6358] hsr_slave_0: left promiscuous mode [ 716.444364][ T6358] hsr_slave_1: left promiscuous mode [ 716.463270][ T6358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.477401][ T6358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.480816][T13630] netlink: 'syz.2.2398': attribute type 39 has an invalid length. [ 716.502089][ T6358] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 716.554753][ T6358] batman_adv: batadv0: Removing interface: virt_wifi0 [ 716.589407][ T6358] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 716.599595][ T6358] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 716.632195][ T6358] veth1_macvtap: left promiscuous mode [ 716.639136][ T6358] veth1_vlan: left promiscuous mode [ 716.644643][ T6358] veth0_vlan: left promiscuous mode [ 718.057156][ T6358] team0 (unregistering): Port device team_slave_1 removed [ 718.123719][ T6358] team0 (unregistering): Port device C removed [ 718.526968][ T8059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 718.539307][ T8059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.085680][T13666] infiniband syz0: set active [ 720.094380][T13666] infiniband syz0: added veth1_macvtap [ 720.326545][T13666] RDS/IB: syz0: added [ 720.345003][T13666] smc: adding ib device syz0 with port count 1 [ 720.360491][T13666] smc: ib device syz0 port 1 has no pnetid [ 721.089497][T13713] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2429'. [ 722.313485][T13750] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2445'. [ 722.395758][T13752] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2446'. [ 723.329724][T13782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2459'. [ 723.758636][T13788] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2460'. [ 724.370829][T13807] netlink: 'syz.2.2467': attribute type 39 has an invalid length. [ 726.161833][T13829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2475'. [ 727.860017][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 727.910954][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2492'. [ 728.417988][T13885] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2496'. [ 729.781847][T13940] netlink: 'syz.1.2520': attribute type 39 has an invalid length. [ 734.148583][T14072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2570'. [ 734.157736][T14072] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2570'. [ 734.717795][T14097] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2583'. [ 734.899528][ T5844] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 734.909414][ T5844] Bluetooth: hci4: Injecting HCI hardware error event [ 734.917576][ T5844] Bluetooth: hci4: hardware error 0x00 [ 735.130272][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2589'. [ 735.142324][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2589'. [ 736.236264][T14130] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2597'. [ 736.831632][T14163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2611'. [ 737.044320][ T5844] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 737.064681][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2609'. [ 737.110711][T14160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2609'. [ 741.233347][T14237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2637'. [ 741.286864][T14237] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2637'. [ 742.621599][T14272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2654'. [ 742.635951][T14272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2654'. [ 744.195072][T14311] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2672'. [ 744.461737][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2671'. [ 744.502802][T14313] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2671'. [ 744.851727][T14324] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2677'. [ 745.806506][T14349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2684'. [ 747.090816][T14371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2691'. [ 747.143487][T14371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2691'. [ 747.182286][T14373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2695'. [ 747.481519][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.489495][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.969175][T14384] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 748.495133][T14405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2710'. [ 748.870526][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2714'. [ 748.938968][T14427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2714'. [ 749.801888][T14460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2729'. [ 749.941877][T14468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2733'. [ 750.055384][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2737'. [ 750.600212][T14498] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2747'. [ 752.396798][T14550] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2765'. [ 756.023444][T14580] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2780'. [ 762.711829][T14632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2796'. [ 764.074878][T14671] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2813'. [ 764.494213][T14690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2821'. [ 765.442042][T14730] netlink: 'syz.3.2837': attribute type 39 has an invalid length. [ 765.464206][T14730] veth0_macvtap: left promiscuous mode [ 766.389046][T14768] netlink: 'syz.4.2852': attribute type 21 has an invalid length. [ 766.605723][T14779] netlink: 'syz.0.2856': attribute type 39 has an invalid length. [ 767.427414][T14817] netlink: 'syz.2.2873': attribute type 39 has an invalid length. [ 767.734554][T14831] netlink: 'syz.2.2878': attribute type 39 has an invalid length. [ 767.806771][T14831] veth0_macvtap: left promiscuous mode [ 769.443166][T14916] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2911'. [ 769.838340][T10778] Bluetooth: hci2: command 0x0406 tx timeout [ 769.838354][ T5151] Bluetooth: hci3: command 0x0406 tx timeout [ 770.092105][T14939] netlink: 'syz.1.2922': attribute type 10 has an invalid length. [ 770.105505][T14939] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.113586][T14939] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.162955][T14939] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.170233][T14939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.177876][T14939] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.185134][T14939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 770.219428][T14939] team0: Port device bridge0 added [ 770.680442][T14952] netlink: 'syz.0.2929': attribute type 10 has an invalid length. [ 771.375291][T14980] syz.0.2938 (14980) used obsolete PPPIOCDETACH ioctl [ 773.168848][T15024] netlink: 'syz.1.2959': attribute type 39 has an invalid length. [ 773.264891][T15024] veth0_macvtap: left promiscuous mode [ 779.949175][T15078] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2977'. [ 780.912140][T15116] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2995'. [ 781.097560][T15125] [ 781.100236][T15125] ============================= [ 781.105145][T15125] WARNING: suspicious RCU usage [ 781.110102][T15125] syzkaller #0 Not tainted [ 781.114593][T15125] ----------------------------- [ 781.119579][T15125] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 781.128112][T15125] [ 781.128112][T15125] other info that might help us debug this: [ 781.128112][T15125] [ 781.138594][T15125] [ 781.138594][T15125] rcu_scheduler_active = 2, debug_locks = 1 [ 781.147801][T15125] 1 lock held by syz.1.2999/15125: [ 781.153883][T15125] #0: ffffffff8e35a500 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x80 [ 781.165880][T15125] [ 781.165880][T15125] stack backtrace: [ 781.171861][T15125] CPU: 0 UID: 0 PID: 15125 Comm: syz.1.2999 Not tainted syzkaller #0 PREEMPT(full) [ 781.171892][T15125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 781.171914][T15125] Call Trace: [ 781.171923][T15125] [ 781.171932][T15125] dump_stack_lvl+0xe8/0x150 [ 781.171966][T15125] lockdep_rcu_suspicious+0x13f/0x1d0 [ 781.171998][T15125] get_callchain_entry+0x2b6/0x3c0 [ 781.172033][T15125] get_perf_callchain+0xcb/0x830 [ 781.172071][T15125] ? __pfx_get_perf_callchain+0x10/0x10 [ 781.172104][T15125] ? futex_unqueue+0x22/0x240 [ 781.172125][T15125] ? futex_unqueue+0x22/0x240 [ 781.172143][T15125] ? futex_unqueue+0x22/0x240 [ 781.172170][T15125] __bpf_get_stack+0x445/0xab0 [ 781.172212][T15125] ? __pfx___bpf_get_stack+0x10/0x10 [ 781.172247][T15125] ? __lock_acquire+0x6b5/0x2cf0 [ 781.172276][T15125] bpf_get_stack+0x33/0x50 [ 781.172303][T15125] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 781.172324][T15125] bpf_get_stack_raw_tp+0x1a9/0x220 [ 781.172359][T15125] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 781.172380][T15125] bpf_prog_run_pin_on_cpu+0x3b4/0x470 [ 781.172415][T15125] bpf_prog_test_run_syscall+0x318/0x4c0 [ 781.172444][T15125] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 781.172469][T15125] ? __fget_files+0x2a/0x420 [ 781.172504][T15125] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 781.172531][T15125] bpf_prog_test_run+0x2c7/0x340 [ 781.172565][T15125] __sys_bpf+0x643/0x950 [ 781.172595][T15125] ? __pfx___sys_bpf+0x10/0x10 [ 781.172640][T15125] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 781.172673][T15125] ? rcu_is_watching+0x15/0xb0 [ 781.172709][T15125] __x64_sys_bpf+0x7c/0x90 [ 781.172738][T15125] do_syscall_64+0xe2/0xf80 [ 781.172769][T15125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.172789][T15125] ? trace_irq_disable+0x37/0x100 [ 781.172816][T15125] ? clear_bhb_loop+0x60/0xb0 [ 781.172842][T15125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 781.172863][T15125] RIP: 0033:0x7f0d4619acb9 [ 781.172882][T15125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.172910][T15125] RSP: 002b:00007f0d46f9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 781.172935][T15125] RAX: ffffffffffffffda RBX: 00007f0d46415fa0 RCX: 00007f0d4619acb9 [ 781.172950][T15125] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 781.172965][T15125] RBP: 00007f0d46208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 781.172979][T15125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 781.172992][T15125] R13: 00007f0d46416038 R14: 00007f0d46415fa0 R15: 00007ffec6441738 [ 781.173028][T15125] [ 790.318492][ T5844] Bluetooth: hci1: command 0x0406 tx timeout