last executing test programs: 25.81547012s ago: executing program 1 (id=1282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@deltfilter={0xcfc, 0x2d, 0x400, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xe, 0x10}, {0xffe0, 0x2}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x1771}, @filter_kind_options=@f_fw={{0x7}, {0xcb8, 0x2, [@TCA_FW_POLICE={0xc70, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xb000}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0xfffffff7, 0x2, 0x5, 0x9, 0x7, 0x400, 0x7, 0x2, 0x4, 0x6, 0x7f, 0x2, 0xe0000000, 0x3, 0x0, 0xffffffff, 0x6, 0x6, 0x7, 0x5f, 0x2, 0x4, 0xfffffffb, 0xe07, 0x200, 0x10001, 0x1, 0xffff, 0x0, 0x400, 0x4, 0x8, 0x7, 0x9, 0xffffffff, 0x0, 0x36a, 0xd539, 0xfffffff8, 0xb0, 0x7, 0x7ff, 0x6, 0xc, 0x8, 0x65cc, 0xb, 0x10001, 0x5, 0x7, 0x40, 0x80000001, 0x0, 0xe, 0xffffff81, 0x782, 0x1000, 0x7a, 0x800, 0x2, 0xa1, 0xffffffff, 0x8, 0x7fff, 0xd7d, 0xfffffe00, 0x0, 0x5, 0x0, 0xe, 0x4, 0x7ff, 0x1, 0x8, 0x6, 0x6, 0x2, 0xee, 0xfffffffa, 0x0, 0x8, 0xfffff6ef, 0x4, 0x5, 0xe79, 0x1, 0x1, 0x0, 0x7, 0x3afa, 0x3, 0x3, 0x8, 0x9bf, 0x3, 0x2, 0xff, 0x3, 0x8, 0xffffffff, 0xde74, 0x7ff, 0x59, 0x1, 0x25, 0x400, 0x7, 0x7f, 0x3, 0x8, 0x9, 0x6, 0x6, 0x8000, 0x9, 0x6, 0xb8f, 0xff, 0x9, 0x7, 0x1, 0xa7, 0xfff, 0x5, 0x400, 0x1ff, 0x51, 0xfffffe01, 0x10001, 0x5, 0x40, 0x9, 0xc, 0x8, 0x4, 0x6, 0x5, 0x8, 0x21, 0x5, 0x1, 0x0, 0x4, 0xe52, 0x0, 0x0, 0x7fffffff, 0x9, 0x3, 0xe4, 0x800, 0x0, 0x9e35, 0x200, 0x9, 0x3, 0x0, 0x20, 0x0, 0x6, 0x4, 0xee, 0x4, 0x2, 0x5, 0x66a, 0x2, 0x1, 0x0, 0x1, 0x82, 0x2, 0x9, 0x1ff, 0x5, 0xf65, 0x84, 0x9, 0x7, 0xce, 0x5, 0x4, 0x5, 0xb, 0x10, 0x40, 0x6, 0x0, 0x3, 0x8001, 0x0, 0x9, 0x3, 0x50, 0x1, 0x0, 0x8, 0x4, 0x8, 0x7, 0x800, 0x7fff, 0x57c2f2d7, 0x9, 0xf, 0x9, 0xe, 0xfffffffc, 0x8000, 0x1, 0x4, 0x6, 0x3, 0x8, 0xaf3, 0xffff, 0x2, 0x200, 0x5c25, 0x1, 0x64d9, 0x26, 0x3, 0x93, 0x80000001, 0x2, 0x9, 0xffff, 0x6, 0x6, 0x10, 0x4, 0x5, 0x1, 0x4, 0x4, 0x9, 0x7, 0x5, 0x101, 0x80, 0x6, 0x7fff, 0x200, 0xc032, 0x4, 0x1, 0xfffffffc, 0x6, 0x6, 0x0, 0xa, 0x9, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x9, 0x7, 0x9, {0x3, 0x2, 0x7fff, 0x8, 0x1, 0x101}, {0x9, 0x1, 0x2b, 0x100, 0x1, 0x4}, 0x6, 0x8001, 0x10}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x61, 0x9, 0x8, 0x81, 0x49, 0x9, 0x4, 0x6, 0xfffffffc, 0x1, 0x0, 0x1ff, 0x4, 0xa70, 0x5f8, 0x0, 0x6, 0x2, 0x405, 0x7, 0xfa, 0x4f2, 0x7fffffff, 0x7fff, 0xfffffff7, 0x80000001, 0x9bc8, 0x80000001, 0xe, 0x0, 0x8, 0x79, 0xa, 0x6, 0x9, 0x5, 0x0, 0x5, 0xfffffffa, 0x0, 0x2, 0x6, 0x6, 0x80000000, 0x7, 0x2, 0x1ff, 0x6, 0x3, 0x1, 0x2, 0x6, 0x7fffffff, 0x9, 0x896, 0x0, 0x9, 0x3, 0x8639, 0x6, 0x5, 0x8, 0x9, 0xb8f, 0xf, 0x6, 0xffffffff, 0x7, 0x30000, 0x3, 0xffffff6b, 0x5, 0x7, 0x1, 0x94, 0x7, 0x2, 0x4c1da37b, 0x1e97, 0x8, 0x6, 0xfffffffc, 0x1, 0x1, 0x1, 0x1, 0x4e, 0x2, 0xff, 0x3, 0x5, 0x3, 0x78f, 0x0, 0xc, 0x3, 0x9, 0x9, 0x0, 0x9, 0x9, 0x6, 0x3, 0x10000, 0x3ff, 0xbd, 0x2de, 0x6, 0x9, 0x0, 0x4, 0x3, 0x3, 0xfffffff9, 0x101, 0xcd9, 0x80, 0x628, 0x1, 0x80000001, 0x1, 0xa4, 0x1, 0x0, 0x8, 0xb, 0x2, 0x10001, 0x80, 0x1, 0x9, 0x1, 0xffffffff, 0x7, 0x9, 0x3ded, 0x0, 0x5, 0x7, 0x8, 0x2, 0x4, 0x80000000, 0x10000, 0x200, 0x3ff, 0x10001, 0x8, 0x81, 0x2f53, 0x8, 0x1, 0x7e, 0x3d8, 0x1000, 0x71, 0x200, 0x1, 0x46e8, 0x1, 0xffffff00, 0x80000000, 0x6cfab0, 0x1, 0x9, 0x10, 0x1, 0x81, 0x100, 0x4, 0x400, 0x8, 0x80000001, 0x93, 0x2, 0x1, 0x0, 0x9, 0x7, 0x7f, 0x9, 0x4, 0x8, 0x6, 0x7, 0x1, 0x1, 0x17, 0xfffffffa, 0x6, 0x54, 0x4459, 0x7fffffff, 0x5, 0x10000, 0x4, 0x36, 0x1, 0xc, 0x3ff, 0x7, 0x0, 0x2, 0x8, 0x0, 0x6, 0x9, 0xfff, 0x3, 0x2, 0xe, 0x249, 0x7, 0x24499cf8, 0x101, 0xfffffff7, 0x800000, 0x2, 0x8, 0x4, 0x75fa, 0x4, 0x4, 0x9, 0x6, 0x472c8971, 0x7, 0x5, 0x8, 0x6, 0x7e24, 0x4, 0x0, 0xe, 0x1f7e, 0x0, 0xfffffbff, 0x0, 0xffffffff, 0xeb24, 0x5, 0x8, 0x2, 0x7, 0x6, 0xa85, 0x8, 0x0, 0x0, 0x8001, 0xf, 0xffffff7f, 0x401, 0x3c8, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf7}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0xc2, 0x4, 0x10, 0x4, 0x5, 0x2, 0x8a6, 0x6, 0x7fffffff, 0x0, 0x2, 0xffffffff, 0x6, 0x7, 0x3, 0x1, 0x8, 0x3, 0x9, 0xfffffffb, 0x3, 0xfffffffc, 0x499, 0x2cae16c6, 0x6c47, 0x6, 0x9, 0x662, 0x4, 0x5, 0x2, 0x5, 0xd6, 0xed, 0x0, 0x31, 0x5, 0x402, 0x6, 0x28, 0xf0d, 0x1, 0x1e7, 0x2, 0x6, 0x7, 0x1, 0x0, 0xa38c, 0x9, 0x4, 0x4, 0x0, 0x6, 0x200, 0x8000, 0x9, 0x2, 0x2115, 0x1, 0x1000, 0x10, 0x176, 0xffff, 0x6, 0xb09, 0x3, 0xd, 0x7, 0x3ff, 0x0, 0x3, 0x401, 0xfffffe12, 0x0, 0x6, 0x8, 0xfffff001, 0x7fff, 0xa4, 0xffffff81, 0x5, 0x2, 0x85217c6, 0xfffffffd, 0x361, 0x9, 0x5, 0x8, 0x2, 0x7a22, 0x0, 0x7ff, 0xcb8, 0x0, 0xcdb0, 0xfffffff7, 0x2, 0x7, 0x2, 0x5, 0x1, 0x101, 0x5, 0x7, 0x4, 0x0, 0x7, 0x40, 0x3, 0x4, 0xfff, 0x2, 0xfffff800, 0x1, 0x6, 0x60000, 0xc, 0x0, 0x9, 0x9, 0x0, 0x3, 0xe, 0x7da, 0x2, 0x6, 0xb, 0xba, 0x2, 0x7, 0x4, 0xffff2cbe, 0xffffffff, 0x1, 0x5, 0x1, 0x704b1dad, 0x5, 0xaf51, 0xd4, 0x400, 0x10, 0xec, 0x400, 0x6807, 0x3, 0xb, 0x0, 0x5, 0xe00, 0x7fff, 0x5ce7d974, 0x1, 0x5, 0x1a0, 0xfffffffa, 0x6102, 0xfffffff2, 0x3, 0x4, 0xf, 0x2, 0x7fff, 0x4, 0xbac6, 0x0, 0x7, 0x85c4, 0xfff, 0x499, 0x9, 0x9, 0x90f4, 0x4, 0x3, 0x0, 0xffff, 0xb, 0x3, 0x9, 0x3, 0xffff, 0x401, 0x7c9, 0xfffffffd, 0xfd3, 0x200, 0x9, 0x2, 0x10001, 0x6, 0x7ff, 0x162, 0x8, 0x3, 0x800, 0x401, 0x2, 0x3, 0x7, 0x3fe, 0x110c, 0x7fff, 0x6, 0x0, 0x1ff, 0x4, 0xfffffffe, 0x12b, 0x5a, 0xee, 0x401, 0x6, 0x2, 0x0, 0x8, 0x3, 0x0, 0x200, 0x6, 0x8, 0x6, 0x2, 0x9, 0x33be, 0x1, 0xcdd, 0x1c, 0x0, 0xffff, 0xcd, 0x1, 0xa, 0x3, 0x9, 0x4, 0x12000, 0x9, 0x2, 0x2, 0x4, 0xd8, 0x1000, 0x7, 0x1, 0x2, 0x3ff, 0x1, 0x7, 0x4, 0x0, 0x1, 0x100]}]}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'netdevsim0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'team_slave_1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xb}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x9}}]}, 0xcfc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) socket$kcm(0xa, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x42) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000080)={'tunl0\x00', @multicast}) 25.660554147s ago: executing program 1 (id=1287): socket$kcm(0xa, 0x5, 0x0) (async) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="60010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0xfffffcab) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x9, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) 25.479866238s ago: executing program 1 (id=1291): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100000000000000000000009700010010008c115f53a91400009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xb981}, 0x0, 0x2, 0x0, 0x0, 0x6, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000250d010324bd0000c30575168aa5eb6f506a2012473e390eaab3f6d16fb56a283430ca10349fb7592f68500dbe94dc865cf08e35e08818c01ede4994c8b1ce74a83049167294cfcf0a83e8030dad059c81706393464fd5c11dcea79feb87d93be20b29bdb11d785b74e1bcb691a086f61ecd01446727e218cc86b0c841680b"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0xf, &(0x7f00000002c0), 0x161) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x35}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x48000) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x5c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fffffff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0xd, 0x2, 0x1, 0x1, 0x6, 0x9}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r9, 0x110, 0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=@newtaction={0x68, 0x30, 0x3f, 0x70bd2d, 0x25dfdbfd, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x1, 0x2000400, 0xffffffffffffffff, 0x2, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7fffffff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x68}}, 0x10) 25.038851677s ago: executing program 1 (id=1298): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r0, 0xb701, 0x0) 24.908607405s ago: executing program 1 (id=1299): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xa}, 0x11cc2a, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 24.819927283s ago: executing program 1 (id=1301): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000380025082bbd7000fbdbdf251400000014000780100002"], 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x40010) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xcdbe3ea5e06002db}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xcdbe3ea5e06002db}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000001850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x20, r3}, 0x18) 18.192240598s ago: executing program 3 (id=1346): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10fda7, 0x4, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180800000000000000f1ff00e00000001800000000000000000000000000000073a5421eda1a38c6006998512d184b30121e9ceab1f6e60c6715b1161209c677effe2dbfb5dc5103c6506b4efe925b559dbdba2db24b18ad8c8c6ed9a458cbed0544bb66a2eaf6b4924009329f565e62267e3c3693793724126a76f6d4716e2459637107f1a8e3c786ac1ea14737648471dd3a12ff2d3d82c684e38f3da6abb3b35fcfe97024ded8f64e76c4f1c22dfd53c423266215dd001bd4589111fe61c5696286182a022bba5cfc81bd7c7478656413819c722eed1788e70de6fd38484fc30731107d7d6ee45ccca59f47b1e81b19972275dccd32e37dd9c76d18860433e83bb6055330fbc7ea8bb3adaa63f3c98442d29efce517c56daad36a9f0a9065657e331b8de2734e910470fd88cdfefc33c3d2d649bec3a34aad93e9e449b4a0de4d2a18356629e1b891b1d41ebd75251bcae74e00c3b5bce715412a6f5f1fb7a3dcabb7b43db2f049b452d6bbe15cecb5c62500"/382], &(0x7f0000000280)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/382], &(0x7f0000000280)='GPL\x00', 0x8000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) socket$kcm(0xa, 0x2, 0x0) (async) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x19, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b00), 0x18) 18.119457008s ago: executing program 3 (id=1348): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x40, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex=r0, 0x1f, 0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000300)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@fallback=r4, r2, 0x37, 0x2008, r4, @value=r3, @void, @void, @void, r5}, 0x20) r6 = socket$kcm(0x2d, 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="8011000042000701feffffff00000020017c000004"], 0x1180}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000100000000000000000000018000000040000100000000007000008851000e1faffffff1864000003000000000000d6b9a10f9082aead4dc7e7000200000095000000"], 0x0, 0x3}, 0x94) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000340)={0x6c, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@fallback=r6, r4, 0x12, 0x34, r8, @void, @void, @void, @value=r9}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000006c0)={0x6, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000700)=r11, 0x4) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@map=r8, 0xffffffffffffffff, 0x2c, 0x8, 0x0, @void, @value=r2}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0x6}, 0x0, 0xe6, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.845076148s ago: executing program 3 (id=1351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000018000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x38000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000380), 0x6}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x840000000002, 0x3, 0xff) socket$kcm(0x1e, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f00000000000008f800009500000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r3, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000b80)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000bc0), &(0x7f0000000c40), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=@base={0xe, 0x2, 0x7, 0xd, 0x40040, 0x1, 0x3, '\x00', r5, 0xffffffffffffffff, 0x2, 0x3, 0x3}, 0x50) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x8}, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f00000009c0)={0x0, r4}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x8, [@typedef={0x7, 0x0, 0x0, 0x8, 0x5}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x1}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x1}, @decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x7}]}, {0x0, [0x5f, 0x61, 0x2e, 0x61, 0x61, 0x61]}}, &(0x7f00000002c0)=""/78, 0x68, 0x4e, 0x0, 0xf0}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x2, '\x00', 0x0, r7, 0x2, 0x1, 0x4}, 0x50) r8 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="2e00000011008188040f80ec59acbc0413a181003f00000001010000000200000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r9, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0x6c, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) 16.780623449s ago: executing program 3 (id=1357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000620000000000000000008007110760000000900950000000000000086d950cd291e28895ef370469e1c9f6646be0a2b752eb8cbe4bb252c16b9af3eb9ddc0dd61def9ef0e320b72c46914c74f233fef51644149c847ea1621733db03a27ae450f40fa8630135182b792ba20f6fadc6c1da9"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) 16.657229721s ago: executing program 3 (id=1358): r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xc0, 0xc, 0xbf, 0xd3, 0x0, 0x661, 0x421, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8d4, 0x1, @perf_config_ext={0x7, 0x372}, 0x0, 0x9, 0xd47, 0x7, 0x100000001, 0x6, 0x2, 0x0, 0x4, 0x0, 0x80}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110ba000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040000}, [@jmp={0x6, 0x0, 0x6, 0x0, 0xb, 0x1, 0x25}, @jmp={0x5, 0x0, 0x0, 0xb, 0x6, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x600}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\xa0/{@\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce81020329"], 0xfdef) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r4, &(0x7f0000000140)="de0d7f1bc9", &(0x7f0000000180)=""/254, 0x4}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 15.35295402s ago: executing program 3 (id=1364): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x100000, 0x0, 0x4, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffcdd9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0189436, &(0x7f00000005c0)=0x400000001) 9.728461952s ago: executing program 32 (id=1301): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) (async) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xe, 0x522}, 0x104141, 0x4, 0x0, 0x7, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="28000000380025082bbd7000fbdbdf251400000014000780100002"], 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x40010) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xcdbe3ea5e06002db}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xcdbe3ea5e06002db}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000001850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x20, r3}, 0x18) 5.705705541s ago: executing program 4 (id=1424): bpf$BPF_LINK_CREATE(0x8, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0], 0xe0}], 0x1}, 0x40040) socket$kcm(0xa, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpid() bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ada}, 0x40, 0x8, 0x0, 0x0, 0x1, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000200), 0x0}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x556}, 0x94) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f0000000800)={0x5, 0x80, 0xa7, 0x4, 0x9, 0x1, 0x0, 0x1, 0x82028, 0xb, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={&(0x7f0000000640), 0xf}, 0x804, 0x4c, 0xb8, 0x7, 0x10000, 0xd, 0x5, 0x0, 0x9, 0x0, 0x8}, r7, 0x1, r8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0xf2, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb8, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000a00)=@newqdisc={0x364, 0x24, 0x320, 0x4, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xffff, 0x4}, {0x3}, {0xffff, 0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0xcc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc3, 0x1, 0x7, 0xfffff4f0, 0x2, 0x401, 0x8, 0x4}}, {0xc, 0x2, [0x43eb, 0x4, 0x0, 0x100]}}, {{0x1c, 0x1, {0x4, 0xe, 0x2, 0xa, 0x2, 0x7, 0x80000001, 0x4}}, {0xc, 0x2, [0x200, 0x4, 0x6, 0xcf1]}}, {{0x1c, 0x1, {0x95, 0x2, 0xffff, 0x8000, 0x0, 0x40, 0x7, 0x1}}, {0x6, 0x2, [0x7ff]}}, {{0x1c, 0x1, {0x2, 0x9, 0x6, 0x3, 0x2, 0x71f, 0xffff0001, 0x3}}, {0xa, 0x2, [0x8000, 0x1, 0x401]}}, {{0x1c, 0x1, {0xc, 0x9, 0x8, 0xda, 0x2, 0x5, 0x1, 0x6}}, {0x10, 0x2, [0x5, 0x8, 0x5, 0x2, 0x4, 0xa]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x40}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1}}}, @qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x8, 0x3ff, 0xcd, 0x1, 0x9, 0x3, 0xa}}, {0x18, 0x2, [0xfffa, 0xfffd, 0x5, 0x8001, 0x4, 0x2, 0xffff, 0x7fff, 0x7ff, 0x0]}}, {{0x1c, 0x1, {0x1, 0x8b, 0x401, 0x0, 0x0, 0xc782, 0x3, 0x4}}, {0xc, 0x2, [0x893, 0x60b5, 0x8, 0x5]}}, {{0x1c, 0x1, {0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x4, 0x8}}, {0x14, 0x2, [0x8, 0x8, 0x80, 0xfffa, 0xeef3, 0x7, 0x100, 0xff45]}}, {{0x1c, 0x1, {0x1b, 0x5, 0x6, 0x9, 0x0, 0x8, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xf7, 0x1e, 0x3, 0x800000, 0x1, 0x69, 0x7, 0x3}}, {0xa, 0x2, [0xfff7, 0x8001, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}, @TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x3, 0x80, 0x7, 0x0, 0x9265, 0x40, 0x2}}, {0x8, 0x2, [0xa5, 0xf1d]}}, {{0x1c, 0x1, {0x3, 0x0, 0x200, 0x8, 0x0, 0x472, 0xa8a4, 0x4}}, {0xc, 0x2, [0x3ff, 0x5, 0x5, 0x7]}}, {{0x1c, 0x1, {0xfe, 0x1, 0xb, 0x8, 0x1, 0x6, 0x7f, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x7, 0xfffe, 0x8, 0x2, 0x1ff, 0x6, 0x5}}, {0xe, 0x2, [0x1, 0x1, 0x8, 0x2, 0x5]}}, {{0x1c, 0x1, {0x4, 0x15, 0x1, 0xf6a, 0x2, 0xfffffff7, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x6a, 0xff, 0x8, 0x1, 0x2, 0x5, 0x0, 0x6}}, {0x10, 0x2, [0x8, 0x4, 0xfffc, 0x9, 0xa, 0x0]}}, {{0x1c, 0x1, {0xca, 0x9, 0x3ff, 0x1, 0x0, 0x80000, 0x0, 0x6}}, {0x10, 0x2, [0x2, 0x7, 0x4, 0x1, 0xabea, 0xf9]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x7f, 0x0, 0x0, 0x2, 0x7, 0x4, 0x3}}, {0xa, 0x2, [0xffff, 0x3, 0x8]}}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) 5.015171188s ago: executing program 2 (id=1425): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x9, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x36, &(0x7f0000000100)=r2, 0x120) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, 0x0, 0x0) sendmsg(r3, &(0x7f0000000200)={&(0x7f0000000080)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null]}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000540)="be9782bc4805bdc0a771cae002f34e42a5b57bd18d41e417f21816516ba063e1b8c5e28487fcc045e62850f0ca42debe07f927970df86339326c8208f206259d21e8ecb40f8ddb5a457928a3dd3962dab278140c7ba1eaaef37b450bfa6d53f884d672e78be36ca91dd24f0599b755c8950ad5b14c2fed83001a94f90f762b154a7818ebbb2fa06b038d4a90cfcfcffd21b0f9bbe76a556a2d3d7b1270b36e043cc7e40ce2d420cfd1f741a60480881036484195167af12bc50c8464cb551ef19049ab81122e187114a151a06a5be9899c43a0fd4ac2ac9cc165e55fd23cc1f591cb764303ae73bb2158df6e3d3c1cd32f24a61af7047afbc98294151a", 0xfd}], 0x1}, 0x20018800) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x3) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000900020073797a310000000005000400000000000d0003006c6973743a736574000000000c000780080006400000000005000500020000000500010006"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r8, r7, 0x7}, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000800)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_int(r10, &(0x7f0000000ac0)=0x5, 0x12) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xa) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000002440)={&(0x7f00000021c0), 0xc, &(0x7f0000002380)={&(0x7f0000002200)={0x170, 0x3, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_NAT_DST={0xb0, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}]}, @CTA_LABELS_MASK={0x10, 0x17, [0xc, 0xffffff8e, 0x10]}, @CTA_ID={0x8}, @CTA_LABELS_MASK={0x1c, 0x17, [0x5, 0x3, 0xfffffff8, 0xed, 0x10001, 0x2]}, @CTA_MARK_MASK={0x8}, @CTA_NAT_SRC={0x58, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xb}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x8, 0x17, [0x4]}]}, 0x170}, 0x1, 0x0, 0x0, 0x800}, 0x40000c1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup, 0x2f, 0x0, 0x80000000, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r7, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x20, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000640), &(0x7f0000000740), 0x8, 0x22, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@ifindex=r12, r7, 0x36, 0x15, r7, @void, @value=r7, @void, @void, r11}, 0x20) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, {@in=@local, 0x4d5, 0x33}, @in6=@empty, {0x3}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x158}}, 0x0) 5.014284181s ago: executing program 4 (id=1426): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x34}}, 0x4000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01090050000900"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, 0x0, 0x40) r2 = perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x80, 0x7, 0xb, 0x2, 0x3, 0x0, 0x9, 0x40, 0xf, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_bp={&(0x7f0000000040), 0x9}, 0x14ae2, 0x10000, 0x8001, 0x3, 0x2, 0x5, 0x7, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0xb, r1, 0x3) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@deltaction={0x14, 0x31, 0x101, 0x0, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x0) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180700000000000000000000f9ffffffffffffff", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000030000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x840000000002, 0x3, 0xff) close(r4) socket$kcm(0xa, 0x2, 0x3a) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'team0\x00', @random="2b0100004ec6"}) 4.699243479s ago: executing program 0 (id=1428): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="040a00000400000061110c00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xff, 0x0, 0x0, 0x8, 0x0, 0x67e, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffc}, 0x0, 0xffffffffffffffff, r2, 0x4) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x11, &(0x7f0000000000)=r6, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/264], 0x140}}, 0x844) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4004850}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.453096387s ago: executing program 4 (id=1429): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa011, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r2, 0x0, 0x8000) socket$inet_smc(0x2b, 0x1, 0x0) 4.167101521s ago: executing program 2 (id=1430): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x40, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000002c0)={0x0, 0x1f, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x4000000) 4.041171957s ago: executing program 2 (id=1431): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x30}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) 3.836074743s ago: executing program 2 (id=1432): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe327, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000009800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000000000000000850000007d00000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r8, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000840)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f5", 0x1eb}, {&(0x7f0000002b40)="da752f575198baaac222d34e85893d37a6bd281687872ed9151c56f415698f3fecf56eebf5edb42ed5d54e0419b2a13128d3ad19b6eed6b450aad46baaa57203e0d4f567d8d79fe07e7b3142de43e55cf69c65db2469175cf60c82f49d0f9dc4c4dde733a14d57f4117ed2f46aea5950ff0176d73349c2808eee62ce1c7d846ffdf65211f3192dabe5b3ac1516ad90e618d0ca9e4ac2778acabeac244f2f90af2616647e5cf8ab5e2ac404ebf2a866c8a73f68ae2cc4523e63e3a1aa5ab60a23e4c47534bda546042120c5333d91fefc68226bc9149d282937797a2fe036a58c9ecd19e54bcfb85d3f75ec7c74", 0xed}], 0x2}, 0x8400) perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10150, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x900a}, 0x2000, 0x0, 0x1, 0x8, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x29, 0x23, &(0x7f0000000040), 0xcf) socket$kcm(0xf, 0x3, 0x2) 3.522913805s ago: executing program 2 (id=1433): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd29, 0x25dfdbff, {0x3}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000821fdc85b8423075c6000000000000000000000095000000000000004d80e1191665cb64a000ca6fcfac11f14c33f7ef06ec2802c9cc33b2e3d11805b7b4c7039c24c6f9932e52be025ec66fb2fa4b3113bbf340defb9ec8b692919a83b8824cba77344694baffff71af4f0a17470658f3130150e52499c8b6070a"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000380)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xb, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000480), &(0x7f00000004c0)=[{0x0, 0x5, 0x3, 0x3}], 0x10, 0x6}, 0x94) sendmsg$inet(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="8de8092b", 0x4}], 0x1}, 0x800) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001940)="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", 0x3cb}], 0x1, 0x0, 0x0, 0x10000000}, 0x2000528c) socket$nl_rdma(0x10, 0x3, 0x14) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socket$kcm(0x10, 0x100000000002, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYRES8=r9], 0x10) close(r8) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r10}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) 3.439110242s ago: executing program 0 (id=1434): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x1f}}, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x894c, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11c03a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.368389139s ago: executing program 4 (id=1435): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x2, 0x1949}, 0x10, 0xf, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0xfffe, 0x0, 0x4, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000100)="fa91ebafbf062564e960f31a2f76ba28c2afd0a66ee5734af63da22fbcba73461b2c5e0a0220e93ecc98"}, 0x20) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x0, 0x2000000}, 0x70bd2d, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db90100000000c54222cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x7, 0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b70200001fffffff7b9af8ff00000000d6090000010000807baaf0ff00000000bf2720000000000007080000fffdffffbf9400000000000007040000f0ffffff640200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000017a36abd2749e2e1004604f0ff760a0000009800000000000056080000000000008500000005000000b7000000000000009505000000000000a71ea599d6d98d25aaae552457016fee3a1a0e308bd8906f99433eb8b1ee147a4049ab9a676931658f7882068dc50155dba61ffac9c8e5220a07ec7631b8ed45e13396dfbdd24915"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400500142603600e120800060000001001a8001600a400014003000001000000000000005c0461c1d67f6f94007134cf6ee08008a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="f8040000210000022cbd7000fedbdf25000000004c03eb800400b7800800a300", @ANYRES32=r5, @ANYBLOB="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"], 0x4f8}, 0x1, 0x0, 0x0, 0x80}, 0x20008045) 3.075161227s ago: executing program 4 (id=1436): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x90}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x1, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x400c080) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 3.016086185s ago: executing program 0 (id=1437): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.911935466s ago: executing program 0 (id=1438): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fc, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_clone(0xc2080, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r1, 0x0) r2 = getpid() r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(0x0, 0x0, 0x400000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x8000100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r5, 0x2401, 0x6) r6 = socket$kcm(0x15, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000040)="5852cb892d4bdda4a5f1941ee13aa5d28d7c7df7", &(0x7f0000000080)=""/11, &(0x7f00000000c0)="2444e91fc448868a39c7d417303e46d42e70e938df995d723d847487287a455ddf6dff3bd5f805469afbd250e56fa148a72fdc427eb4abeca993a3d089edbfdd18ce921475666d7f062160787ab70fabefff894efb398f29da76576015f08d6f129ec73b3f9fe1a5b00508ca2a4b73dfb6d3b5db495980c6351cf23345ab68b0e8362b66a9c322f283b327dfaa43bf479ba55fc3aad2a69aaed2c97796c6086970a35dbcebc5e18b1da2fe5cf8cd2675", &(0x7f0000000200)="1ee0e52964eb7337a0c6de03d62e5f0bd4a0f949dcc1afbabe60ff5d313976dab8a3388f4f964c384ea20dce66ee1ceffd66662c3eba953b6ff708fc", 0x776, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}, 0x8000) close(r6) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 2.789095682s ago: executing program 4 (id=1439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 2.552567574s ago: executing program 2 (id=1440): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000600000000000000000000d31800000001000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001080)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0x800000d, 0x6489}, 0x104901, 0x4, 0x0, 0x7, 0x77fe, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0xa}, 0x8224, 0x2, 0x0, 0x0, 0x26}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x480, 0x0, 0xc2be, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef436000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x39, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003b00010324bd7002fadbdf2501000000ec4835224aecb989d3c8f7378ceb9473495ee08234ee499de1f0467b9810bac5b5931366c4a2672c74be8b54d3070d7a7e09701db9eaa89eb683d7adca50b46189a9af65d06bca417a11598e96b78b4957a545cde087bea2efd6a9849e657bcf27a5a103a8dd3256f69ade1781e3cac8f2bdddb4c1087501fb5c8bc9e1add39c7c4384ac35c4991d760fc09e74007cd5de"], 0x14}}, 0x0) 2.548690605s ago: executing program 0 (id=1441): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000011000000850000001500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000001000", 0x0, 0x2e02, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@cgroup=0xffffffffffffffff, 0x34, 0x0, 0xffffffff, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000980)={r2, r3, 0x9, 0x0, @val=@perf_event={0xd}}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@fallback=r0, r2, 0xb, 0x20, 0x0, @void, @void, @void, @value, r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.056901759s ago: executing program 0 (id=1442): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a381, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={0x0, 0x3}, 0x8, 0x0, 0x0, 0x4, 0x6, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x400200000000003e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x1405, 0x4, 0x70bd2b, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8}, {0x8, 0x3, 0x4}}]}, 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r1, @ANYRES8=r1], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x18, 0x3e, 0x107, 0x70bd30, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20040000}, 0x44000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="240000000100000091"], 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) close(r0) 0s ago: executing program 33 (id=1364): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x100000, 0x0, 0x4, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffcdd9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0xc0189436, &(0x7f00000005c0)=0x400000001) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 67.111564][ T5809] cgroup: Unknown subsys name 'net' [ 67.226887][ T5809] cgroup: Unknown subsys name 'cpuset' [ 67.237078][ T5809] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.600831][ T5809] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.664277][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.670699][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.678355][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.680791][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.688516][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.698650][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.706184][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.713060][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.721054][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.730343][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.734509][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.749601][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.749997][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.758593][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.766945][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.783752][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.791420][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.791468][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.826252][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.834269][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.842166][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.843313][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.862308][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.877608][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.886279][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.410695][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.417499][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.439292][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 71.489728][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 71.520933][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 71.578817][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 71.672193][ T5821] chnl_net:caif_netlink_parms(): no params data found [ 71.802163][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.809309][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.816607][ T5825] bridge_slave_0: entered allmulticast mode [ 71.824135][ T5825] bridge_slave_0: entered promiscuous mode [ 71.865700][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.873904][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.881177][ T5825] bridge_slave_1: entered allmulticast mode [ 71.889018][ T5825] bridge_slave_1: entered promiscuous mode [ 71.904165][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.911499][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.919892][ T5837] bridge_slave_0: entered allmulticast mode [ 71.927308][ T5837] bridge_slave_0: entered promiscuous mode [ 71.935327][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.946843][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.955020][ T5823] bridge_slave_0: entered allmulticast mode [ 71.965287][ T5823] bridge_slave_0: entered promiscuous mode [ 71.976291][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.984735][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.993453][ T5822] bridge_slave_0: entered allmulticast mode [ 72.000783][ T5822] bridge_slave_0: entered promiscuous mode [ 72.009740][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.017853][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.026621][ T5822] bridge_slave_1: entered allmulticast mode [ 72.034368][ T5822] bridge_slave_1: entered promiscuous mode [ 72.056107][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.064092][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.072362][ T5837] bridge_slave_1: entered allmulticast mode [ 72.080268][ T5837] bridge_slave_1: entered promiscuous mode [ 72.087814][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.095205][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.103164][ T5823] bridge_slave_1: entered allmulticast mode [ 72.110967][ T5823] bridge_slave_1: entered promiscuous mode [ 72.183750][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.215196][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.227938][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.240990][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.251416][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.258878][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.267601][ T5821] bridge_slave_0: entered allmulticast mode [ 72.275609][ T5821] bridge_slave_0: entered promiscuous mode [ 72.285714][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.297773][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.309374][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.330701][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.338122][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.347058][ T5821] bridge_slave_1: entered allmulticast mode [ 72.354949][ T5821] bridge_slave_1: entered promiscuous mode [ 72.364280][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.436705][ T5825] team0: Port device team_slave_0 added [ 72.462671][ T5823] team0: Port device team_slave_0 added [ 72.470650][ T5822] team0: Port device team_slave_0 added [ 72.478626][ T5825] team0: Port device team_slave_1 added [ 72.487127][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.500246][ T5837] team0: Port device team_slave_0 added [ 72.508981][ T5823] team0: Port device team_slave_1 added [ 72.517111][ T5822] team0: Port device team_slave_1 added [ 72.543518][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.554744][ T5837] team0: Port device team_slave_1 added [ 72.622132][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.629384][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.657787][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.671612][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.680309][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.708683][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.725349][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.732454][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.760493][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.780884][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.789024][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.816685][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.833687][ T5821] team0: Port device team_slave_0 added [ 72.840906][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.849031][ T5830] Bluetooth: hci3: command tx timeout [ 72.849531][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.855175][ T5834] Bluetooth: hci0: command tx timeout [ 72.886733][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.910977][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.918757][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.922315][ T5834] Bluetooth: hci4: command tx timeout [ 72.945957][ T5830] Bluetooth: hci1: command tx timeout [ 72.946272][ T5830] Bluetooth: hci2: command tx timeout [ 72.964030][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.976092][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.983498][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.014396][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.028451][ T5821] team0: Port device team_slave_1 added [ 73.055801][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.062886][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.089764][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.154692][ T5825] hsr_slave_0: entered promiscuous mode [ 73.161059][ T5825] hsr_slave_1: entered promiscuous mode [ 73.184134][ T5822] hsr_slave_0: entered promiscuous mode [ 73.190638][ T5822] hsr_slave_1: entered promiscuous mode [ 73.197521][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 73.205151][ T5822] Cannot create hsr debugfs directory [ 73.234995][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.242615][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.269992][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.305972][ T5823] hsr_slave_0: entered promiscuous mode [ 73.312898][ T5823] hsr_slave_1: entered promiscuous mode [ 73.319152][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 73.326000][ T5823] Cannot create hsr debugfs directory [ 73.334136][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.342054][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.369700][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.409893][ T5837] hsr_slave_0: entered promiscuous mode [ 73.416800][ T5837] hsr_slave_1: entered promiscuous mode [ 73.423534][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 73.429286][ T5837] Cannot create hsr debugfs directory [ 73.639782][ T5821] hsr_slave_0: entered promiscuous mode [ 73.646981][ T5821] hsr_slave_1: entered promiscuous mode [ 73.653904][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 73.659846][ T5821] Cannot create hsr debugfs directory [ 73.968910][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.986473][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.010438][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.025860][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.098738][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.110394][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.123070][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.135332][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.230418][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.243769][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.256763][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.271023][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.360460][ T5822] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.376663][ T5822] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.388134][ T5822] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.399286][ T5822] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.517268][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.530601][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.545238][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.563414][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.574911][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.609884][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.639495][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.647279][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.679526][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.687301][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.709975][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.765612][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.778379][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.797381][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.805907][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.825374][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.837912][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.863546][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.890858][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.898649][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.922896][ T5830] Bluetooth: hci0: command tx timeout [ 74.923820][ T5834] Bluetooth: hci3: command tx timeout [ 74.945027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.953296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.979969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.988181][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.001936][ T5834] Bluetooth: hci4: command tx timeout [ 75.003549][ T5830] Bluetooth: hci1: command tx timeout [ 75.008885][ T5144] Bluetooth: hci2: command tx timeout [ 75.044139][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.157580][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.184024][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.206694][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.214060][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.286443][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.301475][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.309583][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.410383][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.526440][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.561081][ T5825] veth0_vlan: entered promiscuous mode [ 75.588575][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.596406][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.624083][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.648009][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.669413][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.677041][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.688046][ T5825] veth1_vlan: entered promiscuous mode [ 75.797368][ T5825] veth0_macvtap: entered promiscuous mode [ 75.833419][ T5825] veth1_macvtap: entered promiscuous mode [ 75.864254][ T5837] veth0_vlan: entered promiscuous mode [ 75.872946][ T5823] veth0_vlan: entered promiscuous mode [ 75.891641][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.938870][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.966140][ T5837] veth1_vlan: entered promiscuous mode [ 75.975323][ T5823] veth1_vlan: entered promiscuous mode [ 76.020860][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.058379][ T3570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.083946][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.094223][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.115602][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.128422][ T5823] veth0_macvtap: entered promiscuous mode [ 76.145021][ T5822] veth0_vlan: entered promiscuous mode [ 76.154312][ T5823] veth1_macvtap: entered promiscuous mode [ 76.179567][ T5822] veth1_vlan: entered promiscuous mode [ 76.203141][ T5837] veth0_macvtap: entered promiscuous mode [ 76.240407][ T5837] veth1_macvtap: entered promiscuous mode [ 76.253727][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.272960][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.317599][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.336012][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.351317][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.363275][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.397763][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.418390][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.434159][ T5822] veth0_macvtap: entered promiscuous mode [ 76.460952][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.470618][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.479751][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.491240][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.501055][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.510885][ T5822] veth1_macvtap: entered promiscuous mode [ 76.576885][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.597246][ T3478] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.620922][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.638642][ T3478] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.656204][ T3478] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.760801][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.776023][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.776754][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.859654][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.875261][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.895002][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.904885][ T3478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.918579][ T3478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.969273][ T3478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.983612][ T3478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.002360][ T5144] Bluetooth: hci0: command tx timeout [ 77.012339][ T5144] Bluetooth: hci3: command tx timeout [ 77.037629][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.080666][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.089639][ T5144] Bluetooth: hci1: command tx timeout [ 77.092020][ T5834] Bluetooth: hci2: command tx timeout [ 77.095388][ T5144] Bluetooth: hci4: command tx timeout [ 77.118298][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.131603][ T5821] veth0_vlan: entered promiscuous mode [ 77.150205][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.206475][ T5821] veth1_vlan: entered promiscuous mode [ 77.278096][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.327165][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.340510][ T5821] veth0_macvtap: entered promiscuous mode [ 77.380095][ T5821] veth1_macvtap: entered promiscuous mode [ 77.472912][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.503503][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.517478][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.694998][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.895270][ T3478] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.934391][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'. [ 77.965682][ T3478] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.016044][ T3478] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.037954][ T3478] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.117942][ T5965] Illegal XDP return value 4294967282 on prog (id 5) dev N/A, expect packet loss! [ 78.149528][ T5968] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.185505][ T5957] wg2: entered promiscuous mode [ 78.191052][ T5957] wg2: entered allmulticast mode [ 78.588130][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.611027][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.628442][ T5975] netlink: 'syz.0.17': attribute type 4 has an invalid length. [ 78.662484][ T5975] netlink: 156 bytes leftover after parsing attributes in process `syz.0.17'. [ 78.759288][ T5979] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.16'. [ 78.773414][ T5975] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 78.822190][ T3570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.830404][ T3570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.969724][ T5989] Zero length message leads to an empty skb [ 79.090477][ T5144] Bluetooth: hci3: command tx timeout [ 79.090487][ T5830] Bluetooth: hci0: command tx timeout [ 79.162628][ T5830] Bluetooth: hci4: command tx timeout [ 79.163695][ T5144] Bluetooth: hci2: command tx timeout [ 79.168582][ T5830] Bluetooth: hci1: command tx timeout [ 79.228213][ C0] hrtimer: interrupt took 43641 ns [ 80.240043][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 80.515580][ T6037] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.32'. [ 80.545218][ T6037] netlink: 'syz.4.32': attribute type 1 has an invalid length. [ 80.580974][ T6032] netlink: 763 bytes leftover after parsing attributes in process `syz.1.30'. [ 80.590633][ T6037] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.32'. [ 80.619713][ T6042] ======================================================= [ 80.619713][ T6042] WARNING: The mand mount option has been deprecated and [ 80.619713][ T6042] and is ignored by this kernel. Remove the mand [ 80.619713][ T6042] option from the mount to silence this warning. [ 80.619713][ T6042] ======================================================= [ 80.678213][ T6042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.34'. [ 82.738586][ T5830] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 83.507211][ T6081] netlink: 10 bytes leftover after parsing attributes in process `syz.0.41'. [ 83.580708][ T6089] netlink: 14 bytes leftover after parsing attributes in process `syz.3.44'. [ 83.703755][ T6089] hsr_slave_0: left promiscuous mode [ 83.724331][ T6089] hsr_slave_1: left promiscuous mode [ 83.758506][ T6104] netlink: 'syz.2.48': attribute type 46 has an invalid length. [ 83.766496][ T6104] netlink: 'syz.2.48': attribute type 28 has an invalid length. [ 83.775802][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.48'. [ 84.040757][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 84.057867][ T6111] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 84.992242][ T6121] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 85.042877][ T6121] dvmrp1: linktype set to 768 [ 85.059099][ T6122] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 85.079417][ T6122] dvmrp1: ignored: set checksum enabled [ 86.023310][ T6174] netlink: 596 bytes leftover after parsing attributes in process `syz.3.64'. [ 86.211649][ T6169] netlink: 'syz.3.64': attribute type 29 has an invalid length. [ 86.288864][ T6173] netlink: 'syz.3.64': attribute type 29 has an invalid length. [ 86.765484][ T5830] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 86.788150][ T5830] Bluetooth: hci3: Injecting HCI hardware error event [ 86.796182][ T5144] Bluetooth: hci3: hardware error 0x00 [ 86.808517][ T10] cfg80211: failed to load regulatory.db [ 87.536425][ T6246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.76'. [ 87.629188][ T6255] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 87.835205][ T6266] netlink: 60 bytes leftover after parsing attributes in process `syz.2.83'. [ 87.852769][ T6266] netlink: 60 bytes leftover after parsing attributes in process `syz.2.83'. [ 87.954727][ T6274] netlink: 14 bytes leftover after parsing attributes in process `syz.1.85'. [ 87.984207][ T6280] netlink: 'syz.2.86': attribute type 9 has an invalid length. [ 88.922305][ T5144] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 89.391131][ T6316] __nla_validate_parse: 5 callbacks suppressed [ 89.391151][ T6316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.101'. [ 89.528856][ T6312] netlink: 'syz.4.100': attribute type 12 has an invalid length. [ 89.538260][ T6312] netlink: 132 bytes leftover after parsing attributes in process `syz.4.100'. [ 92.623536][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.104'. [ 92.659434][ T6336] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 93.372286][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.451939][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.548820][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.564145][ T6379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.874724][ T6389] netlink: 60 bytes leftover after parsing attributes in process `syz.4.122'. [ 93.914059][ T6389] netlink: 60 bytes leftover after parsing attributes in process `syz.4.122'. [ 93.932885][ T6389] netlink: 60 bytes leftover after parsing attributes in process `syz.4.122'. [ 93.990580][ T6389] netlink: 763 bytes leftover after parsing attributes in process `syz.4.122'. [ 94.172379][ T6403] netlink: 80 bytes leftover after parsing attributes in process `syz.0.125'. [ 94.220338][ T6407] syz.4.128 uses obsolete (PF_INET,SOCK_PACKET) [ 94.375189][ T6414] warning: `syz.0.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.396219][ T6410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.130'. [ 95.559804][ T6455] netlink: 'syz.1.143': attribute type 10 has an invalid length. [ 95.568185][ T6455] netlink: 3531 bytes leftover after parsing attributes in process `syz.1.143'. [ 97.360240][ T6476] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 97.388894][ T6476] netlink: 'syz.2.148': attribute type 4 has an invalid length. [ 97.459239][ T6476] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.148'. [ 97.503866][ T6478] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 97.511578][ T6478] netlink: 'syz.2.148': attribute type 4 has an invalid length. [ 97.625057][ T6478] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.148'. [ 98.944648][ T6487] netlink: 60 bytes leftover after parsing attributes in process `syz.3.152'. [ 99.322255][ T6503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.157'. [ 100.282158][ T6541] netlink: 300 bytes leftover after parsing attributes in process `syz.3.168'. [ 100.517845][ T6554] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 100.670589][ T6563] netlink: 56 bytes leftover after parsing attributes in process `syz.4.174'. [ 101.615875][ T6572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.019868][ T6582] delete_channel: no stack [ 102.354971][ T6593] bond0: entered promiscuous mode [ 102.378228][ T6593] bond_slave_0: entered promiscuous mode [ 102.407242][ T6593] bond_slave_1: entered promiscuous mode [ 102.422733][ T6595] netlink: 'syz.0.181': attribute type 107 has an invalid length. [ 102.503624][ T6593] netlink: 'syz.4.182': attribute type 10 has an invalid length. [ 105.177544][ T6595] wg2: left promiscuous mode [ 105.200347][ T6595] wg2: left allmulticast mode [ 105.206690][ T6593] dummy0: entered promiscuous mode [ 105.217025][ T6593] team0: Device dummy0 is up. Set it down before adding it as a team port [ 105.732471][ T6625] netlink: 'syz.4.191': attribute type 21 has an invalid length. [ 105.794141][ T6625] netlink: 152 bytes leftover after parsing attributes in process `syz.4.191'. [ 106.021566][ T6628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 106.036010][ T6628] openvswitch: netlink: Message has 12 unknown bytes. [ 108.099270][ T6649] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.198'. [ 108.961044][ T6656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.032460][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.201'. [ 109.336421][ T6679] netlink: 'syz.3.206': attribute type 29 has an invalid length. [ 109.373434][ T6679] netlink: 'syz.3.206': attribute type 29 has an invalid length. [ 109.581352][ T6696] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.213'. [ 109.634490][ T6703] : port 1(veth0_to_bridge) entered blocking state [ 109.646294][ T6703] : port 1(veth0_to_bridge) entered disabled state [ 109.692198][ T6703] veth0_to_bridge: entered allmulticast mode [ 109.704330][ T6703] veth0_to_bridge: entered promiscuous mode [ 110.017232][ T6719] netlink: 268 bytes leftover after parsing attributes in process `syz.4.220'. [ 110.418441][ T6728] netlink: 172 bytes leftover after parsing attributes in process `syz.2.219'. [ 112.553292][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 112.594235][ T6723] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'. [ 114.264477][ T6787] netlink: 'syz.1.237': attribute type 13 has an invalid length. [ 115.037196][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 115.235176][ T6787] gretap0: refused to change device tx_queue_len [ 115.265207][ T6787] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 115.333879][ T6798] netlink: 'syz.1.237': attribute type 4 has an invalid length. [ 115.551305][ T6807] netlink: 36 bytes leftover after parsing attributes in process `syz.2.240'. [ 115.617227][ T6807] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.240'. [ 115.847889][ T6821] netlink: 84 bytes leftover after parsing attributes in process `syz.0.245'. [ 118.198595][ T6855] netlink: 156 bytes leftover after parsing attributes in process `syz.4.252'. [ 118.750595][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.257'. [ 118.815415][ T6870] openvswitch: netlink: Invalid VLAN frame [ 118.893713][ T6878] netlink: 96 bytes leftover after parsing attributes in process `syz.3.262'. [ 119.245967][ T6899] netlink: 'syz.4.267': attribute type 1 has an invalid length. [ 119.963240][ T6926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.272'. [ 120.081520][ T6928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.194517][ T6933] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 120.200437][ T6933] dvmrp1: linktype set to 768 [ 120.244784][ T6935] FAULT_INJECTION: forcing a failure. [ 120.244784][ T6935] name failslab, interval 1, probability 0, space 0, times 1 [ 120.285974][ T6935] CPU: 1 UID: 0 PID: 6935 Comm: syz.4.277 Not tainted syzkaller #0 PREEMPT(full) [ 120.286017][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 120.286033][ T6935] Call Trace: [ 120.286039][ T6935] [ 120.286046][ T6935] dump_stack_lvl+0xe8/0x150 [ 120.286079][ T6935] should_fail_ex+0x412/0x560 [ 120.286102][ T6935] should_failslab+0xa8/0x100 [ 120.286121][ T6935] __kmalloc_noprof+0xe8/0x760 [ 120.286143][ T6935] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 120.286167][ T6935] tomoyo_realpath_from_path+0xe3/0x5d0 [ 120.286185][ T6935] ? tomoyo_domain+0xd7/0x130 [ 120.286207][ T6935] ? tomoyo_path_number_perm+0x219/0x630 [ 120.286222][ T6935] tomoyo_path_number_perm+0x246/0x630 [ 120.286240][ T6935] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.286255][ T6935] ? __lock_acquire+0x6b5/0x2cf0 [ 120.286283][ T6935] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 120.286320][ T6935] ? __fget_files+0x2a/0x420 [ 120.286339][ T6935] ? __fget_files+0x2a/0x420 [ 120.286352][ T6935] ? __fget_files+0x3a0/0x420 [ 120.286367][ T6935] ? __fget_files+0x2a/0x420 [ 120.286386][ T6935] security_file_ioctl+0xc3/0x2a0 [ 120.286400][ T6935] __se_sys_ioctl+0x47/0x170 [ 120.286415][ T6935] do_syscall_64+0x14d/0xf80 [ 120.286430][ T6935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.286450][ T6935] ? trace_irq_disable+0x37/0x100 [ 120.286465][ T6935] ? clear_bhb_loop+0x40/0x90 [ 120.286480][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.286492][ T6935] RIP: 0033:0x7fc3ebb9bf79 [ 120.286510][ T6935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.286519][ T6935] RSP: 002b:00007fc3ecaa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.286537][ T6935] RAX: ffffffffffffffda RBX: 00007fc3ebe15fa0 RCX: 00007fc3ebb9bf79 [ 120.286546][ T6935] RDX: 0000000000000300 RSI: 00000000400454cd RDI: 0000000000000003 [ 120.286554][ T6935] RBP: 00007fc3ecaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 120.286561][ T6935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.286568][ T6935] R13: 00007fc3ebe16038 R14: 00007fc3ebe15fa0 R15: 00007ffc54f69a08 [ 120.286591][ T6935] [ 120.286598][ T6935] ERROR: Out of memory at tomoyo_realpath_from_path. [ 120.450123][ T6942] netlink: 68 bytes leftover after parsing attributes in process `syz.1.279'. [ 120.499577][ T6935] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 120.553055][ T6935] dvmrp1: linktype set to 768 [ 120.776567][ T6937] infiniband : set down [ 120.791779][ T6937] infiniband : added ipvlan0 [ 120.924834][ T6960] delete_channel: no stack [ 120.981447][ T6937] RDS/IB: : added [ 120.992323][ T6937] smc: adding ib device  with port count 1 [ 120.998604][ T6937] smc: ib device  port 1 has no pnetid [ 123.037023][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.289'. [ 123.214398][ T7024] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 123.231497][ T7024] dvmrp1: linktype set to 768 [ 123.814740][ T7037] netlink: 104 bytes leftover after parsing attributes in process `syz.1.297'. [ 124.466865][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.0.296'. [ 124.648374][ T7063] netlink: 60 bytes leftover after parsing attributes in process `syz.1.301'. [ 124.802479][ T7068] netlink: 'syz.0.303': attribute type 19 has an invalid length. [ 124.810772][ T7068] netlink: 40 bytes leftover after parsing attributes in process `syz.0.303'. [ 124.825767][ T7058] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.858201][ T7072] netlink: 'syz.3.302': attribute type 21 has an invalid length. [ 124.890404][ T7072] netlink: 128 bytes leftover after parsing attributes in process `syz.3.302'. [ 124.932045][ T7072] netlink: 3 bytes leftover after parsing attributes in process `syz.3.302'. [ 125.155796][ T7083] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 125.161565][ T7083] dvmrp1: linktype set to 768 [ 126.060055][ T30] audit: type=1107 audit(1771296179.692:2): pid=7084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 126.700420][ T7113] netlink: 60 bytes leftover after parsing attributes in process `syz.3.316'. [ 126.731931][ T7114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.316'. [ 126.759454][ T7112] netlink: 20 bytes leftover after parsing attributes in process `syz.0.315'. [ 126.886999][ T7121] netlink: 'syz.1.317': attribute type 2 has an invalid length. [ 126.895002][ T7121] netlink: 'syz.1.317': attribute type 2 has an invalid length. [ 127.073292][ T7119] can: request_module (can-proto-0) failed. [ 127.104392][ T7126] netlink: 14 bytes leftover after parsing attributes in process `syz.0.318'. [ 127.504949][ T7131] xt_l2tp: missing protocol rule (udp|l2tpip) [ 127.519601][ T7126] hsr_slave_0: left promiscuous mode [ 127.687673][ T7126] hsr_slave_1: left promiscuous mode [ 128.108472][ T7143] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 128.118057][ T7143] dvmrp1: linktype set to 768 [ 128.177889][ T7157] netlink: 'syz.3.326': attribute type 1 has an invalid length. [ 128.852631][ T7170] netlink: set zone limit has 4 unknown bytes [ 131.085407][ T7181] C: renamed from team_slave_0 (while UP) [ 131.351470][ T7181] netlink: 'syz.2.334': attribute type 1 has an invalid length. [ 131.372804][ T7181] __nla_validate_parse: 33 callbacks suppressed [ 131.372819][ T7181] netlink: 152 bytes leftover after parsing attributes in process `syz.2.334'. [ 131.412040][ T7181] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 131.733553][ T7199] netlink: 88 bytes leftover after parsing attributes in process `syz.3.341'. [ 132.167463][ T7211] lo speed is unknown, defaulting to 1000 [ 132.186476][ T7211] lo speed is unknown, defaulting to 1000 [ 132.228454][ T7211] lo speed is unknown, defaulting to 1000 [ 132.273870][ T7211] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 132.310135][ T7211] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.418506][ T7211] lo speed is unknown, defaulting to 1000 [ 132.457064][ T7219] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 132.472447][ T7219] dvmrp1: linktype set to 768 [ 132.480852][ T7211] lo speed is unknown, defaulting to 1000 [ 132.566907][ T7211] lo speed is unknown, defaulting to 1000 [ 132.600766][ T7211] lo speed is unknown, defaulting to 1000 [ 132.661444][ T7211] lo speed is unknown, defaulting to 1000 [ 132.799107][ T7242] netlink: 'syz.4.353': attribute type 7 has an invalid length. [ 133.022239][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.028594][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.476756][ T7265] netlink: 144 bytes leftover after parsing attributes in process `syz.4.359'. [ 134.593685][ T7269] bridge0: port 3(veth1_virt_wifi) entered blocking state [ 134.600926][ T7269] bridge0: port 3(veth1_virt_wifi) entered disabled state [ 134.626820][ T7269] veth1_virt_wifi: entered allmulticast mode [ 134.639098][ T7269] veth1_virt_wifi: left allmulticast mode [ 135.798343][ T5144] Bluetooth: hci1: unexpected subevent 0x18 length: 150 > 19 [ 135.806031][ T5144] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 137.127434][ T7326] openvswitch: netlink: IP tunnel TTL not specified. [ 137.177049][ T7326] netlink: 'syz.1.375': attribute type 21 has an invalid length. [ 137.238360][ T7330] netlink: 60 bytes leftover after parsing attributes in process `syz.4.377'. [ 137.275152][ T7330] netlink: 60 bytes leftover after parsing attributes in process `syz.4.377'. [ 137.293842][ T7330] netlink: 60 bytes leftover after parsing attributes in process `syz.4.377'. [ 138.591463][ T7340] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 138.651970][ T7340] netlink: 48 bytes leftover after parsing attributes in process `syz.4.379'. [ 138.737912][ T7343] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.381'. [ 138.913332][ T7347] netlink: 'syz.3.383': attribute type 2 has an invalid length. [ 138.951023][ T7347] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 138.969074][ T7347] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 139.007184][ T7354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.029489][ T7351] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.383'. [ 139.186771][ T7365] netlink: 'syz.1.387': attribute type 21 has an invalid length. [ 139.198169][ T7365] IPv6: NLM_F_CREATE should be specified when creating new route [ 139.220402][ T7365] netlink: 'syz.1.387': attribute type 1 has an invalid length. [ 139.287745][ T7370] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.389'. [ 139.621531][ T7381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.780750][ T7394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.394'. [ 139.893380][ T7391] netlink: 172 bytes leftover after parsing attributes in process `syz.0.395'. [ 139.905838][ T7391] delete_channel: no stack [ 139.910921][ T7391] delete_channel: no stack [ 140.063758][ T7406] netlink: 24 bytes leftover after parsing attributes in process `syz.2.397'. [ 140.093603][ T7408] netlink: 'syz.4.398': attribute type 12 has an invalid length. [ 140.674181][ T7431] netlink: 'syz.1.405': attribute type 10 has an invalid length. [ 141.206449][ T7462] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 141.567238][ T7480] netlink: 'syz.0.420': attribute type 12 has an invalid length. [ 142.402027][ T7544] __nla_validate_parse: 14 callbacks suppressed [ 142.402043][ T7544] netlink: 763 bytes leftover after parsing attributes in process `syz.1.439'. [ 142.651800][ T7555] netlink: zone id is out of range [ 142.663994][ T7555] netlink: zone id is out of range [ 142.674998][ T7555] netlink: get zone limit has 4 unknown bytes [ 143.955271][ T7575] netlink: 2 bytes leftover after parsing attributes in process `syz.4.448'. [ 144.308262][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 144.725084][ T7600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.456'. [ 145.106312][ T7604] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 145.132163][ T7604] syzkaller1: linktype set to 776 [ 145.148178][ T7606] IPv6: Can't replace route, no match found [ 145.638930][ T7624] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 145.683790][ T7624] dvmrp1: linktype set to 768 [ 145.980980][ T7635] netlink: 44 bytes leftover after parsing attributes in process `syz.2.466'. [ 146.030006][ T7642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 146.246490][ T7649] siw: device registration error -23 [ 146.318854][ T7649] netlink: 4432 bytes leftover after parsing attributes in process `syz.0.471'. [ 146.405446][ T7655] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 146.426324][ T7655] syzkaller1: linktype set to 776 [ 146.435253][ T7655] syzkaller1: tun_chr_ioctl cmd 35108 [ 146.641018][ T7667] nbd: must specify a size in bytes for the device [ 146.841567][ T7687] netlink: 60 bytes leftover after parsing attributes in process `syz.0.483'. [ 146.854925][ T7687] netlink: 60 bytes leftover after parsing attributes in process `syz.0.483'. [ 146.897360][ T7689] netlink: 60 bytes leftover after parsing attributes in process `syz.2.484'. [ 147.026411][ T30] audit: type=1107 audit(1771296201.342:3): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 147.420276][ T7699] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 147.434993][ T7699] syzkaller1: linktype set to 776 [ 150.266197][ T7743] validate_nla: 2 callbacks suppressed [ 150.266228][ T7743] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 150.514205][ T7748] __nla_validate_parse: 1 callbacks suppressed [ 150.514225][ T7748] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.503'. [ 150.650875][ T7751] netlink: 'syz.1.505': attribute type 13 has an invalid length. [ 150.673289][ T7755] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.506'. [ 150.748364][ T7760] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.506'. [ 150.760348][ T7761] FAULT_INJECTION: forcing a failure. [ 150.760348][ T7761] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 150.811846][ T7761] CPU: 1 UID: 0 PID: 7761 Comm: syz.2.508 Not tainted syzkaller #0 PREEMPT(full) [ 150.811867][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 150.811875][ T7761] Call Trace: [ 150.811881][ T7761] [ 150.811888][ T7761] dump_stack_lvl+0xe8/0x150 [ 150.811913][ T7761] should_fail_ex+0x412/0x560 [ 150.811936][ T7761] _copy_from_user+0x2d/0xb0 [ 150.811957][ T7761] __sys_bpf+0x229/0x950 [ 150.811978][ T7761] ? __pfx___sys_bpf+0x10/0x10 [ 150.812008][ T7761] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 150.812028][ T7761] ? ksys_write+0x242/0x270 [ 150.812050][ T7761] ? __pfx_ksys_write+0x10/0x10 [ 150.812087][ T7761] __x64_sys_bpf+0x7c/0x90 [ 150.812104][ T7761] do_syscall_64+0x14d/0xf80 [ 150.812123][ T7761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.812137][ T7761] ? trace_irq_disable+0x37/0x100 [ 150.812153][ T7761] ? clear_bhb_loop+0x40/0x90 [ 150.812172][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.812186][ T7761] RIP: 0033:0x7f379b39bf79 [ 150.812203][ T7761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.812215][ T7761] RSP: 002b:00007f379c279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.812232][ T7761] RAX: ffffffffffffffda RBX: 00007f379b615fa0 RCX: 00007f379b39bf79 [ 150.812242][ T7761] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 150.812251][ T7761] RBP: 00007f379c279090 R08: 0000000000000000 R09: 0000000000000000 [ 150.812260][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.812269][ T7761] R13: 00007f379b616038 R14: 00007f379b615fa0 R15: 00007fff0fd0dd78 [ 150.812292][ T7761] [ 150.815699][ T7767] netlink: 'syz.4.510': attribute type 6 has an invalid length. [ 150.853746][ T7766] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.884387][ T7767] netlink: 140 bytes leftover after parsing attributes in process `syz.4.510'. [ 151.022187][ T7751] gretap0: refused to change device tx_queue_len [ 151.052148][ T7751] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 151.110663][ T5829] lo speed is unknown, defaulting to 1000 [ 151.117979][ T5829] syz1: Port: 1 Link ACTIVE [ 151.157260][ T7772] netlink: 56 bytes leftover after parsing attributes in process `syz.2.511'. [ 151.167460][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 151.203514][ T7772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.511'. [ 151.227512][ T7772] openvswitch: netlink: IP tunnel dst address not specified [ 151.498282][ T7799] netlink: 830 bytes leftover after parsing attributes in process `syz.3.517'. [ 151.637330][ T7805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.520'. [ 151.658637][ T7807] FAULT_INJECTION: forcing a failure. [ 151.658637][ T7807] name failslab, interval 1, probability 0, space 0, times 0 [ 151.660222][ T7805] netlink: 40 bytes leftover after parsing attributes in process `syz.0.520'. [ 151.672732][ T7807] CPU: 0 UID: 0 PID: 7807 Comm: syz.3.521 Not tainted syzkaller #0 PREEMPT(full) [ 151.672757][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 151.672766][ T7807] Call Trace: [ 151.672772][ T7807] [ 151.672779][ T7807] dump_stack_lvl+0xe8/0x150 [ 151.672805][ T7807] should_fail_ex+0x412/0x560 [ 151.672829][ T7807] should_failslab+0xa8/0x100 [ 151.672848][ T7807] __kmalloc_noprof+0xe8/0x760 [ 151.672870][ T7807] ? bpf_test_init+0x9f/0x150 [ 151.672890][ T7807] bpf_test_init+0x9f/0x150 [ 151.672909][ T7807] bpf_prog_test_run_xdp+0x529/0x1160 [ 151.672946][ T7807] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 151.672967][ T7807] ? __fget_files+0x2a/0x420 [ 151.672991][ T7807] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 151.673008][ T7807] bpf_prog_test_run+0x2c7/0x340 [ 151.673032][ T7807] __sys_bpf+0x643/0x950 [ 151.673053][ T7807] ? __pfx___sys_bpf+0x10/0x10 [ 151.673085][ T7807] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 151.673107][ T7807] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 151.673127][ T7807] ? __pfx_ksys_write+0x10/0x10 [ 151.673155][ T7807] __x64_sys_bpf+0x7c/0x90 [ 151.673174][ T7807] do_syscall_64+0x14d/0xf80 [ 151.673192][ T7807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.673207][ T7807] ? trace_irq_disable+0x37/0x100 [ 151.673224][ T7807] ? clear_bhb_loop+0x40/0x90 [ 151.673243][ T7807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.673258][ T7807] RIP: 0033:0x7f79baf9bf79 [ 151.673273][ T7807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.673285][ T7807] RSP: 002b:00007f79bbd88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.673302][ T7807] RAX: ffffffffffffffda RBX: 00007f79bb215fa0 RCX: 00007f79baf9bf79 [ 151.673313][ T7807] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 151.673323][ T7807] RBP: 00007f79bbd88090 R08: 0000000000000000 R09: 0000000000000000 [ 151.673332][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.673340][ T7807] R13: 00007f79bb216038 R14: 00007f79bb215fa0 R15: 00007ffe63768f88 [ 151.673367][ T7807] [ 151.989571][ T7809] : renamed from team_slave_1 (while UP) [ 152.265505][ T7826] nbd: couldn't find a device at index 49663 [ 152.547270][ T7847] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 152.611499][ T7851] netlink: 'syz.3.537': attribute type 2 has an invalid length. [ 154.316187][ T7893] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 154.331904][ T7895] IPv6: NLM_F_CREATE should be specified when creating new route [ 154.333261][ T7893] syzkaller1: linktype set to 776 [ 154.498477][ T7898] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 157.803555][ T7953] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 157.853136][ T7953] syzkaller1: linktype set to 776 [ 157.929590][ T7951] syzkaller1: tun_chr_ioctl cmd 2147767517 [ 159.291116][ T7982] __nla_validate_parse: 10 callbacks suppressed [ 159.291134][ T7982] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'. [ 159.461122][ T7988] netlink: 'syz.2.578': attribute type 6 has an invalid length. [ 159.492339][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 159.513467][ T7995] netlink: 'syz.4.579': attribute type 6 has an invalid length. [ 159.521335][ T7995] netlink: 140 bytes leftover after parsing attributes in process `syz.4.579'. [ 162.302194][ T8033] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.589'. [ 162.649369][ T8036] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.590'. [ 162.919870][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 162.944605][ T8045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.593'. [ 163.003448][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 163.031998][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.593'. [ 166.642563][ T8102] tap0: tun_chr_ioctl cmd 1074025675 [ 166.678176][ T8102] tap0: persist enabled [ 166.719117][ T8092] tap0: tun_chr_ioctl cmd 1074025675 [ 166.762532][ T8092] tap0: persist enabled [ 166.832537][ T8092] openvswitch: netlink: EtherType 50a is less than min 600 [ 169.718799][ T8128] netlink: 104 bytes leftover after parsing attributes in process `syz.3.612'. [ 170.232832][ T8131] FAULT_INJECTION: forcing a failure. [ 170.232832][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 170.264918][ T8131] CPU: 1 UID: 0 PID: 8131 Comm: syz.4.614 Not tainted syzkaller #0 PREEMPT(full) [ 170.264960][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.264969][ T8131] Call Trace: [ 170.264975][ T8131] [ 170.264982][ T8131] dump_stack_lvl+0xe8/0x150 [ 170.265008][ T8131] should_fail_ex+0x412/0x560 [ 170.265033][ T8131] should_failslab+0xa8/0x100 [ 170.265051][ T8131] __kmalloc_noprof+0xe8/0x760 [ 170.265082][ T8131] ? bpf_test_init+0x9f/0x150 [ 170.265103][ T8131] bpf_test_init+0x9f/0x150 [ 170.265122][ T8131] bpf_prog_test_run_xdp+0x529/0x1160 [ 170.265151][ T8131] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 170.265172][ T8131] ? __fget_files+0x2a/0x420 [ 170.265195][ T8131] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 170.265212][ T8131] bpf_prog_test_run+0x2c7/0x340 [ 170.265236][ T8131] __sys_bpf+0x643/0x950 [ 170.265257][ T8131] ? __pfx___sys_bpf+0x10/0x10 [ 170.265289][ T8131] ? ksys_write+0x242/0x270 [ 170.265313][ T8131] ? __pfx_ksys_write+0x10/0x10 [ 170.265339][ T8131] __x64_sys_bpf+0x7c/0x90 [ 170.265357][ T8131] do_syscall_64+0x14d/0xf80 [ 170.265377][ T8131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.265392][ T8131] ? trace_irq_disable+0x37/0x100 [ 170.265410][ T8131] ? clear_bhb_loop+0x40/0x90 [ 170.265428][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.265443][ T8131] RIP: 0033:0x7fc3ebb9bf79 [ 170.265458][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.265470][ T8131] RSP: 002b:00007fc3ecaa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.265487][ T8131] RAX: ffffffffffffffda RBX: 00007fc3ebe15fa0 RCX: 00007fc3ebb9bf79 [ 170.265498][ T8131] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 170.265508][ T8131] RBP: 00007fc3ecaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 170.265517][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.265526][ T8131] R13: 00007fc3ebe16038 R14: 00007fc3ebe15fa0 R15: 00007ffc54f69a08 [ 170.265551][ T8131] [ 170.537478][ T8141] netlink: 'syz.0.618': attribute type 10 has an invalid length. [ 170.907418][ T8152] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 171.173547][ T8162] sit0: entered promiscuous mode [ 171.280123][ T8159] netlink: 60 bytes leftover after parsing attributes in process `syz.4.626'. [ 171.299329][ T8168] FAULT_INJECTION: forcing a failure. [ 171.299329][ T8168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.331838][ T8168] CPU: 0 UID: 0 PID: 8168 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT(full) [ 171.331861][ T8168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.331870][ T8168] Call Trace: [ 171.331877][ T8168] [ 171.331884][ T8168] dump_stack_lvl+0xe8/0x150 [ 171.331909][ T8168] should_fail_ex+0x412/0x560 [ 171.331933][ T8168] _copy_from_user+0x2d/0xb0 [ 171.331954][ T8168] bpf_test_init+0xd8/0x150 [ 171.331974][ T8168] bpf_prog_test_run_xdp+0x529/0x1160 [ 171.332002][ T8168] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 171.332022][ T8168] ? __fget_files+0x2a/0x420 [ 171.332044][ T8168] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 171.332060][ T8168] bpf_prog_test_run+0x2c7/0x340 [ 171.332085][ T8168] __sys_bpf+0x643/0x950 [ 171.332105][ T8168] ? __pfx___sys_bpf+0x10/0x10 [ 171.332137][ T8168] ? ksys_write+0x242/0x270 [ 171.332159][ T8168] ? __pfx_ksys_write+0x10/0x10 [ 171.332186][ T8168] __x64_sys_bpf+0x7c/0x90 [ 171.332204][ T8168] do_syscall_64+0x14d/0xf80 [ 171.332224][ T8168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.332247][ T8168] ? trace_irq_disable+0x37/0x100 [ 171.332266][ T8168] ? clear_bhb_loop+0x40/0x90 [ 171.332285][ T8168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.332300][ T8168] RIP: 0033:0x7f379b39bf79 [ 171.332316][ T8168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.332328][ T8168] RSP: 002b:00007f379c279028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 171.332345][ T8168] RAX: ffffffffffffffda RBX: 00007f379b615fa0 RCX: 00007f379b39bf79 [ 171.332356][ T8168] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 171.332365][ T8168] RBP: 00007f379c279090 R08: 0000000000000000 R09: 0000000000000000 [ 171.332374][ T8168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.332382][ T8168] R13: 00007f379b616038 R14: 00007f379b615fa0 R15: 00007fff0fd0dd78 [ 171.332405][ T8168] [ 171.831430][ T8187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'. [ 171.845868][ T8187] netlink: 'syz.3.636': attribute type 7 has an invalid length. [ 171.856877][ T8187] netlink: 'syz.3.636': attribute type 8 has an invalid length. [ 171.869633][ T8188] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'. [ 171.887084][ T8187] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'. [ 171.960702][ T8192] netlink: 'syz.3.638': attribute type 21 has an invalid length. [ 171.972477][ T8192] netlink: 156 bytes leftover after parsing attributes in process `syz.3.638'. [ 172.046980][ T8192] raw_sendmsg: syz.3.638 forgot to set AF_INET. Fix it! [ 172.161591][ T36] tipc: Subscription rejected, illegal request [ 172.181140][ T8192] syzkaller0: entered promiscuous mode [ 172.201393][ T8192] syzkaller0: entered allmulticast mode [ 172.436241][ T8210] FAULT_INJECTION: forcing a failure. [ 172.436241][ T8210] name failslab, interval 1, probability 0, space 0, times 0 [ 172.464789][ T8210] CPU: 1 UID: 0 PID: 8210 Comm: syz.3.643 Not tainted syzkaller #0 PREEMPT(full) [ 172.464811][ T8210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 172.464820][ T8210] Call Trace: [ 172.464827][ T8210] [ 172.464834][ T8210] dump_stack_lvl+0xe8/0x150 [ 172.464861][ T8210] should_fail_ex+0x412/0x560 [ 172.464885][ T8210] should_failslab+0xa8/0x100 [ 172.464904][ T8210] __kvmalloc_node_noprof+0x178/0x8a0 [ 172.464921][ T8210] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 172.464945][ T8210] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 172.464968][ T8210] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 172.464995][ T8210] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 172.465020][ T8210] ? __pfx_autoremove_wake_function+0x10/0x10 [ 172.465045][ T8210] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 172.465091][ T8210] ? 0xffffffffa0203708 [ 172.465129][ T8210] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 172.465152][ T8210] ? _copy_from_user+0x94/0xb0 [ 172.465174][ T8210] ? bpf_test_init+0x113/0x150 [ 172.465188][ T8210] ? xdp_convert_md_to_buff+0x5b/0x330 [ 172.465205][ T8210] bpf_prog_test_run_xdp+0x81c/0x1160 [ 172.465240][ T8210] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 172.465261][ T8210] ? __fget_files+0x2a/0x420 [ 172.465283][ T8210] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 172.465299][ T8210] bpf_prog_test_run+0x2c7/0x340 [ 172.465322][ T8210] __sys_bpf+0x643/0x950 [ 172.465343][ T8210] ? __pfx___sys_bpf+0x10/0x10 [ 172.465374][ T8210] ? do_syscall_64+0x9c/0xf80 [ 172.465393][ T8210] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 172.465414][ T8210] ? __pfx_ksys_write+0x10/0x10 [ 172.465451][ T8210] __x64_sys_bpf+0x7c/0x90 [ 172.465469][ T8210] do_syscall_64+0x14d/0xf80 [ 172.465487][ T8210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.465500][ T8210] ? trace_irq_disable+0x37/0x100 [ 172.465516][ T8210] ? clear_bhb_loop+0x40/0x90 [ 172.465534][ T8210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.465553][ T8210] RIP: 0033:0x7f79baf9bf79 [ 172.465568][ T8210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.465580][ T8210] RSP: 002b:00007f79bbd88028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 172.465596][ T8210] RAX: ffffffffffffffda RBX: 00007f79bb215fa0 RCX: 00007f79baf9bf79 [ 172.465606][ T8210] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 172.465615][ T8210] RBP: 00007f79bbd88090 R08: 0000000000000000 R09: 0000000000000000 [ 172.465623][ T8210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.465631][ T8210] R13: 00007f79bb216038 R14: 00007f79bb215fa0 R15: 00007ffe63768f88 [ 172.465656][ T8210] [ 172.485190][ T8211] veth0_vlan: entered allmulticast mode [ 172.943751][ T8220] netlink: 'syz.2.646': attribute type 9 has an invalid length. [ 172.966820][ T8220] netlink: 'syz.2.646': attribute type 11 has an invalid length. [ 172.989203][ T8220] netlink: 'syz.2.646': attribute type 12 has an invalid length. [ 172.999148][ T8228] tc_dump_action: action bad kind [ 173.016873][ T8220] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.646'. [ 173.149395][ T8236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.650'. [ 174.133672][ T8258] FAULT_INJECTION: forcing a failure. [ 174.133672][ T8258] name failslab, interval 1, probability 0, space 0, times 0 [ 174.192568][ T8258] CPU: 1 UID: 0 PID: 8258 Comm: syz.4.655 Not tainted syzkaller #0 PREEMPT(full) [ 174.192593][ T8258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.192602][ T8258] Call Trace: [ 174.192609][ T8258] [ 174.192616][ T8258] dump_stack_lvl+0xe8/0x150 [ 174.192641][ T8258] should_fail_ex+0x412/0x560 [ 174.192665][ T8258] should_failslab+0xa8/0x100 [ 174.192697][ T8258] __kvmalloc_node_noprof+0x178/0x8a0 [ 174.192713][ T8258] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 174.192731][ T8258] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 174.192750][ T8258] bpf_test_run_xdp_live+0x223/0x1cf0 [ 174.192772][ T8258] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 174.192810][ T8258] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 174.192947][ T8258] ? 0xffffffffa0203764 [ 174.192988][ T8258] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 174.193015][ T8258] ? _copy_from_user+0x94/0xb0 [ 174.193036][ T8258] ? bpf_test_init+0x113/0x150 [ 174.193049][ T8258] ? xdp_convert_md_to_buff+0x5b/0x330 [ 174.193067][ T8258] bpf_prog_test_run_xdp+0x81c/0x1160 [ 174.193097][ T8258] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 174.193117][ T8258] ? __fget_files+0x2a/0x420 [ 174.193138][ T8258] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 174.193153][ T8258] bpf_prog_test_run+0x2c7/0x340 [ 174.193175][ T8258] __sys_bpf+0x643/0x950 [ 174.193197][ T8258] ? __pfx___sys_bpf+0x10/0x10 [ 174.193226][ T8258] ? do_syscall_64+0x9c/0xf80 [ 174.193244][ T8258] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 174.193263][ T8258] ? __pfx_ksys_write+0x10/0x10 [ 174.193287][ T8258] __x64_sys_bpf+0x7c/0x90 [ 174.193305][ T8258] do_syscall_64+0x14d/0xf80 [ 174.193321][ T8258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.193334][ T8258] ? trace_irq_disable+0x37/0x100 [ 174.193350][ T8258] ? clear_bhb_loop+0x40/0x90 [ 174.193367][ T8258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.193380][ T8258] RIP: 0033:0x7fc3ebb9bf79 [ 174.193394][ T8258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.193406][ T8258] RSP: 002b:00007fc3ecaa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 174.193422][ T8258] RAX: ffffffffffffffda RBX: 00007fc3ebe15fa0 RCX: 00007fc3ebb9bf79 [ 174.193431][ T8258] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 174.193440][ T8258] RBP: 00007fc3ecaa2090 R08: 0000000000000000 R09: 0000000000000000 [ 174.193448][ T8258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.193455][ T8258] R13: 00007fc3ebe16038 R14: 00007fc3ebe15fa0 R15: 00007ffc54f69a08 [ 174.193480][ T8258] [ 174.615943][ T8266] netlink: 232 bytes leftover after parsing attributes in process `syz.4.658'. [ 174.759360][ T8273] nft_compat: unsupported protocol 1 [ 174.909878][ T8280] netlink: 'syz.3.664': attribute type 3 has an invalid length. [ 174.941799][ T8280] netlink: 'syz.3.664': attribute type 16 has an invalid length. [ 174.950840][ T8280] netlink: 132 bytes leftover after parsing attributes in process `syz.3.664'. [ 175.139013][ T8299] netlink: 80 bytes leftover after parsing attributes in process `syz.0.668'. [ 175.215247][ T30] audit: type=1107 audit(1771296229.532:4): pid=8295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='7jCO­mA;i)EI _X]F&,Lsx]#Fqs r2^' [ 175.245013][ T8304] netlink: 55 bytes leftover after parsing attributes in process `syz.4.669'. [ 176.017241][ T8316] validate_nla: 3 callbacks suppressed [ 176.017260][ T8316] netlink: 'syz.3.674': attribute type 39 has an invalid length. [ 176.462407][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.677'. [ 176.531431][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.677'. [ 177.010429][ T8294] lo speed is unknown, defaulting to 1000 [ 177.176767][ T8341] tc_dump_action: action bad kind [ 178.042989][ T8353] C: renamed from team_slave_0 (while UP) [ 178.107152][ T8356] FAULT_INJECTION: forcing a failure. [ 178.107152][ T8356] name failslab, interval 1, probability 0, space 0, times 0 [ 178.119813][ T8353] netlink: 'syz.4.686': attribute type 3 has an invalid length. [ 178.143480][ T8353] netlink: 152 bytes leftover after parsing attributes in process `syz.4.686'. [ 178.259805][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: syz.1.685 Not tainted syzkaller #0 PREEMPT(full) [ 178.259828][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 178.259837][ T8356] Call Trace: [ 178.259843][ T8356] [ 178.259849][ T8356] dump_stack_lvl+0xe8/0x150 [ 178.259872][ T8356] should_fail_ex+0x412/0x560 [ 178.259894][ T8356] should_failslab+0xa8/0x100 [ 178.259911][ T8356] __kmalloc_noprof+0xe8/0x760 [ 178.259932][ T8356] ? bpf_test_init+0x9f/0x150 [ 178.259952][ T8356] bpf_test_init+0x9f/0x150 [ 178.259969][ T8356] bpf_prog_test_run_skb+0x36f/0x1c90 [ 178.259993][ T8356] ? __fget_files+0x2a/0x420 [ 178.260010][ T8356] ? __fget_files+0x3a0/0x420 [ 178.260025][ T8356] ? __fget_files+0x2a/0x420 [ 178.260045][ T8356] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 178.260061][ T8356] bpf_prog_test_run+0x2c7/0x340 [ 178.260085][ T8356] __sys_bpf+0x643/0x950 [ 178.260106][ T8356] ? __pfx___sys_bpf+0x10/0x10 [ 178.260136][ T8356] ? do_syscall_64+0x9c/0xf80 [ 178.260154][ T8356] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 178.260173][ T8356] ? __pfx_ksys_write+0x10/0x10 [ 178.260199][ T8356] __x64_sys_bpf+0x7c/0x90 [ 178.260218][ T8356] do_syscall_64+0x14d/0xf80 [ 178.260236][ T8356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.260263][ T8356] ? trace_irq_disable+0x37/0x100 [ 178.260281][ T8356] ? clear_bhb_loop+0x40/0x90 [ 178.260299][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.260314][ T8356] RIP: 0033:0x7f2d0799bf79 [ 178.260328][ T8356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.260340][ T8356] RSP: 002b:00007f2d0892d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 178.260357][ T8356] RAX: ffffffffffffffda RBX: 00007f2d07c15fa0 RCX: 00007f2d0799bf79 [ 178.260368][ T8356] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 178.260378][ T8356] RBP: 00007f2d0892d090 R08: 0000000000000000 R09: 0000000000000000 [ 178.260386][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.260393][ T8356] R13: 00007f2d07c16038 R14: 00007f2d07c15fa0 R15: 00007fffebc3ca88 [ 178.260416][ T8356] [ 179.241509][ T8383] netlink: 'syz.3.694': attribute type 3 has an invalid length. [ 179.314365][ T8383] netlink: 'syz.3.694': attribute type 1 has an invalid length. [ 179.359079][ T8383] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.694'. [ 179.715580][ T8397] FAULT_INJECTION: forcing a failure. [ 179.715580][ T8397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.749904][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.0.699 Not tainted syzkaller #0 PREEMPT(full) [ 179.749928][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.749938][ T8397] Call Trace: [ 179.749945][ T8397] [ 179.749952][ T8397] dump_stack_lvl+0xe8/0x150 [ 179.749980][ T8397] should_fail_ex+0x412/0x560 [ 179.750006][ T8397] _copy_from_user+0x2d/0xb0 [ 179.750030][ T8397] bpf_test_init+0xd8/0x150 [ 179.750052][ T8397] bpf_prog_test_run_skb+0x36f/0x1c90 [ 179.750082][ T8397] ? __fget_files+0x2a/0x420 [ 179.750109][ T8397] ? __fget_files+0x3a0/0x420 [ 179.750126][ T8397] ? __fget_files+0x2a/0x420 [ 179.750149][ T8397] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 179.750167][ T8397] bpf_prog_test_run+0x2c7/0x340 [ 179.750194][ T8397] __sys_bpf+0x643/0x950 [ 179.750216][ T8397] ? __pfx___sys_bpf+0x10/0x10 [ 179.750253][ T8397] ? do_syscall_64+0x9c/0xf80 [ 179.750274][ T8397] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 179.750296][ T8397] ? __pfx_ksys_write+0x10/0x10 [ 179.750327][ T8397] __x64_sys_bpf+0x7c/0x90 [ 179.750347][ T8397] do_syscall_64+0x14d/0xf80 [ 179.750366][ T8397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.750381][ T8397] ? trace_irq_disable+0x37/0x100 [ 179.750399][ T8397] ? clear_bhb_loop+0x40/0x90 [ 179.750419][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.750434][ T8397] RIP: 0033:0x7f4cae39bf79 [ 179.750451][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.750463][ T8397] RSP: 002b:00007f4caf175028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 179.750480][ T8397] RAX: ffffffffffffffda RBX: 00007f4cae615fa0 RCX: 00007f4cae39bf79 [ 179.750492][ T8397] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 179.750501][ T8397] RBP: 00007f4caf175090 R08: 0000000000000000 R09: 0000000000000000 [ 179.750510][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.750519][ T8397] R13: 00007f4cae616038 R14: 00007f4cae615fa0 R15: 00007ffc8166d8e8 [ 179.750549][ T8397] [ 180.468005][ T5144] Bluetooth: hci0: unexpected event 0x2c length: 151 > 17 [ 180.509679][ T8437] netlink: 132 bytes leftover after parsing attributes in process `syz.3.710'. [ 180.685689][ T8439] netlink: 'syz.4.708': attribute type 10 has an invalid length. [ 180.931035][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 180.941867][ T8452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 181.018020][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.713'. [ 181.030021][ T8454] netlink: 'syz.2.715': attribute type 10 has an invalid length. [ 181.051062][ T8449] netlink: 'syz.4.713': attribute type 2 has an invalid length. [ 181.060952][ T8449] netlink: 132 bytes leftover after parsing attributes in process `syz.4.713'. [ 181.134624][ T8454] team0 (unregistering): Port device C removed [ 181.249600][ T8454] team0 (unregistering): Port device team_slave_1 removed [ 181.415647][ T8471] netlink: 28 bytes leftover after parsing attributes in process `syz.0.718'. [ 181.673342][ T5144] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 182.043201][ T8483] netlink: 'syz.4.724': attribute type 27 has an invalid length. [ 182.081941][ T8483] netlink: 'syz.4.724': attribute type 4 has an invalid length. [ 182.112149][ T8483] netlink: 152 bytes leftover after parsing attributes in process `syz.4.724'. [ 182.297133][ T8501] netlink: 830 bytes leftover after parsing attributes in process `syz.1.729'. [ 183.038170][ T8522] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.735'. [ 183.539216][ T8541] netlink: 188 bytes leftover after parsing attributes in process `syz.4.741'. [ 183.552851][ T8540] netlink: 'syz.3.740': attribute type 9 has an invalid length. [ 183.560716][ T8540] netlink: 'syz.3.740': attribute type 11 has an invalid length. [ 183.633174][ T8540] netlink: 'syz.3.740': attribute type 12 has an invalid length. [ 185.184717][ T8560] netlink: 'syz.2.748': attribute type 9 has an invalid length. [ 186.684314][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.784443][ T8574] bridge_slave_0 (unregistering): left allmulticast mode [ 186.806990][ T8574] bridge_slave_0 (unregistering): left promiscuous mode [ 186.834320][ T8584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.847227][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.872401][ T8584] __nla_validate_parse: 2 callbacks suppressed [ 186.872434][ T8584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.753'. [ 186.926439][ T8585] netlink: 40 bytes leftover after parsing attributes in process `syz.3.753'. [ 186.966245][ T8584] netlink: 'syz.3.753': attribute type 1 has an invalid length. [ 186.999370][ T8584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.024283][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.1.756'. [ 187.107051][ T8589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'. [ 187.243183][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.757'. [ 191.732055][ T8636] netlink: 'syz.1.769': attribute type 39 has an invalid length. [ 191.965356][ T8640] netlink: 'syz.4.771': attribute type 4 has an invalid length. [ 191.986445][ T8640] netlink: 17 bytes leftover after parsing attributes in process `syz.4.771'. [ 192.089275][ T8648] netlink: 168 bytes leftover after parsing attributes in process `syz.2.773'. [ 192.117775][ T8645] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 192.150794][ T8645] netlink: 'syz.3.772': attribute type 2 has an invalid length. [ 192.166524][ T8645] netlink: 268 bytes leftover after parsing attributes in process `syz.3.772'. [ 192.368892][ T8650] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.774'. [ 192.446947][ T8655] netlink: 'syz.2.776': attribute type 11 has an invalid length. [ 192.522115][ T8652] netlink: 76 bytes leftover after parsing attributes in process `syz.3.775'. [ 192.622629][ T8652] netlink: 80 bytes leftover after parsing attributes in process `syz.3.775'. [ 192.712665][ T8659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.778'. [ 192.804347][ T8666] netlink: 284 bytes leftover after parsing attributes in process `syz.1.781'. [ 192.972515][ T8674] netlink: 'syz.3.784': attribute type 10 has an invalid length. [ 192.992371][ T8674] netlink: 40 bytes leftover after parsing attributes in process `syz.3.784'. [ 193.017301][ T8674] dummy0: entered promiscuous mode [ 193.027494][ T8674] dummy0: entered allmulticast mode [ 193.049782][ T8674] bridge0: port 3(dummy0) entered blocking state [ 193.056777][ T8674] bridge0: port 3(dummy0) entered disabled state [ 193.066889][ T8674] bridge0: port 3(dummy0) entered blocking state [ 193.073977][ T8674] bridge0: port 3(dummy0) entered forwarding state [ 193.813807][ T8716] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 193.832758][ T8719] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 193.838352][ T8719] dvmrp1: ignored: set checksum disabled [ 194.172787][ T8730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.802'. [ 194.294533][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.301556][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.366160][ T5832] Bluetooth: hci0: command 0x0406 tx timeout [ 196.373284][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 196.380183][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 196.386616][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 197.857566][ T8802] __nla_validate_parse: 5 callbacks suppressed [ 197.857586][ T8802] netlink: 36 bytes leftover after parsing attributes in process `syz.4.829'. [ 197.924995][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.827'. [ 198.232469][ T8830] netlink: 132 bytes leftover after parsing attributes in process `syz.0.834'. [ 198.432888][ T8826] syzkaller0: entered promiscuous mode [ 198.448946][ T8826] syzkaller0: entered allmulticast mode [ 198.988251][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 199.116935][ T8856] netlink: set zone limit has 4 unknown bytes [ 199.600074][ T8869] netlink: 'syz.3.843': attribute type 1 has an invalid length. [ 199.856929][ T8868] netlink: 'syz.4.842': attribute type 10 has an invalid length. [ 200.902207][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.910125][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.969734][ T8868] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.977646][ T8868] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.985679][ T8868] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.993081][ T8868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.036164][ T8868] team0: Port device bridge0 added [ 201.126104][ T8884] netlink: 132 bytes leftover after parsing attributes in process `syz.3.845'. [ 201.397185][ T8901] netlink: 48 bytes leftover after parsing attributes in process `syz.0.854'. [ 201.809430][ T8918] netlink: 68 bytes leftover after parsing attributes in process `syz.0.858'. [ 202.033326][ T8922] netlink: 36 bytes leftover after parsing attributes in process `syz.3.859'. [ 202.826271][ T8921] delete_channel: no stack [ 202.978045][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.857'. [ 203.008566][ T8922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.162225][ T8935] netlink: 44 bytes leftover after parsing attributes in process `syz.2.861'. [ 203.205257][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.864'. [ 203.275862][ T8948] netlink: 28 bytes leftover after parsing attributes in process `syz.4.864'. [ 203.478557][ T8959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.870'. [ 203.497011][ T8953] hsr0: entered promiscuous mode [ 203.503034][ T8953] hsr0: entered allmulticast mode [ 203.508191][ T8953] hsr_slave_0: entered allmulticast mode [ 203.526586][ T8961] netlink: 'syz.4.871': attribute type 10 has an invalid length. [ 203.547779][ T8953] hsr_slave_1: entered allmulticast mode [ 203.558172][ T8961] veth0_vlan: left allmulticast mode [ 203.568001][ T8961] veth0_vlan: left promiscuous mode [ 203.580459][ T8961] veth0_vlan: entered promiscuous mode [ 203.596505][ T8961] team0: Device veth0_vlan failed to register rx_handler [ 203.645022][ T8961] syz.4.871 (8961) used greatest stack depth: 18040 bytes left [ 203.996982][ T8976] bpf: Bad value for 'mode' [ 206.440754][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.876'. [ 206.453956][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.1.876'. [ 206.622099][ T5144] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 206.622804][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.879'. [ 206.664047][ T8990] openvswitch: netlink: Missing key (keys=40, expected=80) [ 206.700056][ T9002] netlink: 'syz.0.882': attribute type 1 has an invalid length. [ 206.911179][ T9009] netlink: 60 bytes leftover after parsing attributes in process `syz.0.886'. [ 207.744813][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.891'. [ 207.754252][ T9030] nbd: must specify at least one socket [ 208.999266][ T9021] netlink: 60 bytes leftover after parsing attributes in process `syz.0.886'. [ 209.020461][ T9032] netlink: 'syz.3.892': attribute type 29 has an invalid length. [ 209.287105][ T9044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.897'. [ 209.405558][ T9044] netlink: 180 bytes leftover after parsing attributes in process `syz.1.897'. [ 209.473630][ T9009] lo speed is unknown, defaulting to 1000 [ 209.480472][ T9046] netlink: 422 bytes leftover after parsing attributes in process `syz.2.898'. [ 209.507632][ T9047] netlink: 'syz.2.898': attribute type 7 has an invalid length. [ 209.520846][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 209.530676][ T9047] netlink: 140 bytes leftover after parsing attributes in process `syz.2.898'. [ 209.547451][ T9054] netlink: 288 bytes leftover after parsing attributes in process `syz.1.900'. [ 210.249346][ T9075] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 210.258116][ T9072] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 210.279046][ T9072] dvmrp1: ignored: set checksum disabled [ 210.285305][ T9073] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 210.294665][ T9073] dvmrp1: ignored: set checksum disabled [ 210.542216][ T9090] netlink: 6496 bytes leftover after parsing attributes in process `syz.3.910'. [ 210.544484][ T9088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.640136][ T9101] netlink: 'syz.1.911': attribute type 39 has an invalid length. [ 211.085251][ T9113] netlink: 164 bytes leftover after parsing attributes in process `syz.2.916'. [ 211.101736][ T9113] netlink: 164 bytes leftover after parsing attributes in process `syz.2.916'. [ 211.855304][ T9101] hsr_slave_1 (unregistering): left promiscuous mode [ 212.054421][ T9124] netlink: 'syz.2.920': attribute type 10 has an invalid length. [ 212.246665][ T9132] syzkaller0: entered promiscuous mode [ 212.253161][ T9132] syzkaller0: entered allmulticast mode [ 216.194139][ T9141] __nla_validate_parse: 3 callbacks suppressed [ 216.194157][ T9141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.927'. [ 216.216446][ T9154] netlink: 400 bytes leftover after parsing attributes in process `syz.2.930'. [ 217.827276][ T9212] netlink: 'syz.0.942': attribute type 2 has an invalid length. [ 217.836872][ T9212] netlink: 'syz.0.942': attribute type 1 has an invalid length. [ 218.956652][ T9219] netlink: 'syz.3.943': attribute type 1 has an invalid length. [ 218.972619][ T9217] netlink: 'syz.4.944': attribute type 10 has an invalid length. [ 218.979776][ T9219] netlink: 2704 bytes leftover after parsing attributes in process `syz.3.943'. [ 218.987610][ T9217] netlink: 168 bytes leftover after parsing attributes in process `syz.4.944'. [ 219.215086][ T9231] netlink: 'syz.4.949': attribute type 10 has an invalid length. [ 219.237720][ T9231] bond0: left promiscuous mode [ 219.246449][ T9233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'. [ 219.262502][ T9231] bond_slave_0: left promiscuous mode [ 219.282583][ T9231] bond_slave_1: left promiscuous mode [ 219.292045][ T9231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.302571][ T9231] team0: Port device bond0 added [ 219.302814][ T9233] openvswitch: netlink: Flow key attr not present in new flow. [ 219.743709][ T9254] netlink: 'syz.2.957': attribute type 21 has an invalid length. [ 219.775253][ T9254] netlink: 'syz.2.957': attribute type 1 has an invalid length. [ 221.106854][ T9256] netlink: 'syz.3.958': attribute type 3 has an invalid length. [ 221.162150][ T9266] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 221.171427][ T9266] dvmrp1: linktype set to 768 [ 221.417739][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.964'. [ 221.925061][ T9306] netlink: 'syz.0.972': attribute type 22 has an invalid length. [ 221.946880][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 222.005907][ T9313] netlink: 'syz.2.975': attribute type 16 has an invalid length. [ 222.017433][ T9313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.975'. [ 222.104426][ T9313] veth1_macvtap: entered allmulticast mode [ 222.405258][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.983'. [ 222.415428][ T9336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.983'. [ 222.807947][ T9345] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.986'. [ 222.831058][ T9345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 223.185977][ T9350] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 223.912044][ T9337] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 223.918181][ T9337] dvmrp1: ignored: set checksum disabled [ 224.150609][ T9359] netlink: 488 bytes leftover after parsing attributes in process `syz.1.991'. [ 224.338692][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.995'. [ 224.450769][ T9377] nft_compat: unsupported protocol 0 [ 224.534135][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.999'. [ 224.546840][ T9381] validate_nla: 3 callbacks suppressed [ 224.546859][ T9381] netlink: 'syz.4.1000': attribute type 2 has an invalid length. [ 224.689314][ T9381] netlink: 'syz.4.1000': attribute type 27 has an invalid length. [ 224.716378][ T9381] netlink: 'syz.4.1000': attribute type 4 has an invalid length. [ 226.590278][ T9405] openvswitch: netlink: Message has 4 unknown bytes. [ 230.223954][ T9418] netlink: zone id is out of range [ 230.230938][ T9419] netlink: 'syz.3.1012': attribute type 40 has an invalid length. [ 230.241773][ T9418] netlink: zone id is out of range [ 230.254145][ T9418] netlink: zone id is out of range [ 230.260205][ T9418] netlink: zone id is out of range [ 230.270043][ T9419] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.287195][ T9420] __nla_validate_parse: 5 callbacks suppressed [ 230.287222][ T9420] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1011'. [ 230.305344][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1011'. [ 230.321596][ T9418] netlink: zone id is out of range [ 230.336990][ T9418] netlink: zone id is out of range [ 230.349044][ T9418] netlink: zone id is out of range [ 230.356306][ T9418] netlink: zone id is out of range [ 230.363847][ T9420] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1011'. [ 230.375505][ T9418] netlink: zone id is out of range [ 231.240147][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1021'. [ 231.275692][ T9458] FAULT_INJECTION: forcing a failure. [ 231.275692][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 231.289345][ T9458] CPU: 0 UID: 0 PID: 9458 Comm: syz.1.1023 Not tainted syzkaller #0 PREEMPT(full) [ 231.289367][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 231.289377][ T9458] Call Trace: [ 231.289383][ T9458] [ 231.289389][ T9458] dump_stack_lvl+0xe8/0x150 [ 231.289416][ T9458] should_fail_ex+0x412/0x560 [ 231.289438][ T9458] should_failslab+0xa8/0x100 [ 231.289456][ T9458] __kmalloc_noprof+0xe8/0x760 [ 231.289478][ T9458] ? bpf_test_init+0x9f/0x150 [ 231.289496][ T9458] bpf_test_init+0x9f/0x150 [ 231.289515][ T9458] bpf_prog_test_run_xdp+0x529/0x1160 [ 231.289544][ T9458] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 231.289564][ T9458] ? __fget_files+0x2a/0x420 [ 231.289587][ T9458] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 231.289604][ T9458] bpf_prog_test_run+0x2c7/0x340 [ 231.289628][ T9458] __sys_bpf+0x643/0x950 [ 231.289650][ T9458] ? __pfx___sys_bpf+0x10/0x10 [ 231.289681][ T9458] ? do_syscall_64+0x9c/0xf80 [ 231.289698][ T9458] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 231.289718][ T9458] ? __pfx_ksys_write+0x10/0x10 [ 231.289745][ T9458] __x64_sys_bpf+0x7c/0x90 [ 231.289764][ T9458] do_syscall_64+0x14d/0xf80 [ 231.289782][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.289797][ T9458] ? trace_irq_disable+0x37/0x100 [ 231.289814][ T9458] ? clear_bhb_loop+0x40/0x90 [ 231.289833][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.289848][ T9458] RIP: 0033:0x7f2d0799bf79 [ 231.289864][ T9458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.289876][ T9458] RSP: 002b:00007f2d0892d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.289893][ T9458] RAX: ffffffffffffffda RBX: 00007f2d07c15fa0 RCX: 00007f2d0799bf79 [ 231.289904][ T9458] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 231.289913][ T9458] RBP: 00007f2d0892d090 R08: 0000000000000000 R09: 0000000000000000 [ 231.289923][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.289939][ T9458] R13: 00007f2d07c16038 R14: 00007f2d07c15fa0 R15: 00007fffebc3ca88 [ 231.289966][ T9458] [ 233.138730][ T9467] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1025'. [ 233.212971][ T9483] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 233.220930][ T9483] netlink: 'syz.2.1029': attribute type 16 has an invalid length. [ 233.230267][ T9485] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1030'. [ 233.246247][ T9485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 233.248364][ T9483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1029'. [ 233.307417][ T9486] mac80211_hwsim hwsim3 ..c: renamed from wlan1 (while UP) [ 233.363124][ T9483] netlink: 'syz.2.1029': attribute type 4 has an invalid length. [ 233.371368][ T9483] netlink: 'syz.2.1029': attribute type 16 has an invalid length. [ 233.411751][ T9483] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1029'. [ 233.706446][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1033'. [ 234.172180][ T9515] netlink: 'syz.0.1039': attribute type 10 has an invalid length. [ 234.820165][ T9520] delete_channel: no stack [ 234.876960][ T9518] delete_channel: no stack [ 234.889171][ T9520] delete_channel: no stack [ 235.573873][ T9557] nft_compat: unsupported protocol 1 [ 235.717851][ T9565] net_ratelimit: 20 callbacks suppressed [ 235.717928][ T9565] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.734711][ T9564] __nla_validate_parse: 4 callbacks suppressed [ 235.734731][ T9564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1056'. [ 237.489579][ T9602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1065'. [ 238.093947][ T9625] netlink: 'syz.3.1074': attribute type 21 has an invalid length. [ 238.154624][ T9626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.588751][ T9653] netlink: 'syz.2.1081': attribute type 46 has an invalid length. [ 241.750746][ T9684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1088'. [ 241.772228][ T9683] netlink: 'syz.3.1087': attribute type 10 has an invalid length. [ 241.974917][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1090'. [ 242.476972][ T9707] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1092'. [ 242.684414][ T9720] netlink: 'syz.1.1096': attribute type 11 has an invalid length. [ 242.696447][ T9720] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1096'. [ 243.301875][ T9735] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1102'. [ 243.327230][ T9735] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1102'. [ 244.008873][ T9745] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1106'. [ 247.881410][ T9764] : entered promiscuous mode [ 247.897035][ T9768] syz.2.1112 (9768) used obsolete PPPIOCDETACH ioctl [ 247.993335][ T9789] rdma_rxe: rxe_newlink: failed to add lo [ 248.026026][ T9791] netlink: 'syz.4.1120': attribute type 41 has an invalid length. [ 248.067169][ T9791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1120'. [ 248.237303][ T9801] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1124'. [ 248.332392][ T9809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 248.402422][ T9812] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1123'. [ 248.408514][ T9811] netlink: 'syz.0.1129': attribute type 10 has an invalid length. [ 248.430701][ T9811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1129'. [ 248.450289][ T9811] ipvlan1: entered promiscuous mode [ 248.456131][ T9811] ipvlan1: entered allmulticast mode [ 248.466821][ T9811] veth0_vlan: entered allmulticast mode [ 248.506560][ T9811] bridge0: port 3(ipvlan1) entered blocking state [ 248.526516][ T9811] bridge0: port 3(ipvlan1) entered disabled state [ 248.572682][ T9811] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 248.644262][ T9820] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1130'. [ 248.755779][ T9823] netlink: 'syz.1.1130': attribute type 2 has an invalid length. [ 248.816329][ T9820] netlink: 'syz.1.1130': attribute type 10 has an invalid length. [ 248.848191][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.873273][ T9820] bridge_slave_1: left allmulticast mode [ 248.879082][ T9820] bridge_slave_1: left promiscuous mode [ 248.893054][ T9820] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.977727][ T9820] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 249.302144][ T9836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.431257][ T9839] netlink: 872 bytes leftover after parsing attributes in process `syz.4.1136'. [ 249.443955][ T9839] netlink: 872 bytes leftover after parsing attributes in process `syz.4.1136'. [ 249.569935][ T9853] FAULT_INJECTION: forcing a failure. [ 249.569935][ T9853] name failslab, interval 1, probability 0, space 0, times 0 [ 249.583446][ T9853] CPU: 0 UID: 0 PID: 9853 Comm: syz.0.1139 Not tainted syzkaller #0 PREEMPT(full) [ 249.583481][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 249.583496][ T9853] Call Trace: [ 249.583503][ T9853] [ 249.583511][ T9853] dump_stack_lvl+0xe8/0x150 [ 249.583540][ T9853] should_fail_ex+0x412/0x560 [ 249.583567][ T9853] should_failslab+0xa8/0x100 [ 249.583585][ T9853] ? skb_clone+0x212/0x3a0 [ 249.583607][ T9853] kmem_cache_alloc_noprof+0x87/0x650 [ 249.583639][ T9853] skb_clone+0x212/0x3a0 [ 249.583664][ T9853] __netlink_deliver_tap+0x404/0x850 [ 249.583696][ T9853] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.583716][ T9853] netlink_deliver_tap+0x19c/0x1b0 [ 249.583735][ T9853] __netlink_sendskb+0x47/0x90 [ 249.583759][ T9853] netlink_dump+0xa6f/0xe80 [ 249.583789][ T9853] ? __pfx_netlink_dump+0x10/0x10 [ 249.583803][ T9853] ? __kasan_kmalloc+0x93/0xb0 [ 249.583847][ T9853] ? netlink_lookup+0x30/0x200 [ 249.583861][ T9853] ? netlink_lookup+0x30/0x200 [ 249.583884][ T9853] __netlink_dump_start+0x5cb/0x7e0 [ 249.583911][ T9853] inet_diag_handler_cmd+0x1e0/0x2c0 [ 249.583937][ T9853] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 249.583956][ T9853] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 249.583975][ T9853] ? __pfx_inet_diag_dump+0x10/0x10 [ 249.583993][ T9853] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 249.584016][ T9853] ? sock_diag_lock_handler+0x19/0x290 [ 249.584034][ T9853] ? sock_diag_lock_handler+0x19/0x290 [ 249.584058][ T9853] sock_diag_rcv_msg+0x4cc/0x600 [ 249.584080][ T9853] netlink_rcv_skb+0x232/0x4b0 [ 249.584099][ T9853] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 249.584119][ T9853] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.584150][ T9853] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.584177][ T9853] netlink_unicast+0x80f/0x9b0 [ 249.584210][ T9853] ? __pfx_netlink_unicast+0x10/0x10 [ 249.584235][ T9853] ? netlink_sendmsg+0x650/0xb40 [ 249.584250][ T9853] ? skb_put+0x11b/0x210 [ 249.584273][ T9853] netlink_sendmsg+0x813/0xb40 [ 249.584302][ T9853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.584323][ T9853] ? aa_sock_msg_perm+0xf1/0x1b0 [ 249.584349][ T9853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.584374][ T9853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.584389][ T9853] ____sys_sendmsg+0xa68/0xad0 [ 249.584409][ T9853] ? __pfx_perf_trace_lock+0x10/0x10 [ 249.584438][ T9853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.584469][ T9853] ? import_iovec+0x73/0xa0 [ 249.584495][ T9853] ___sys_sendmsg+0x2a5/0x360 [ 249.584514][ T9853] ? __lock_acquire+0x6b5/0x2cf0 [ 249.584538][ T9853] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.584582][ T9853] ? __fget_files+0x2a/0x420 [ 249.584616][ T9853] ? __fget_files+0x2a/0x420 [ 249.584633][ T9853] ? __fget_files+0x3a0/0x420 [ 249.584664][ T9853] __x64_sys_sendmsg+0x1bd/0x2a0 [ 249.584682][ T9853] ? perf_trace_run_bpf_submit+0x100/0x170 [ 249.584707][ T9853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.584738][ T9853] ? __pfx_ksys_write+0x10/0x10 [ 249.584775][ T9853] do_syscall_64+0x14d/0xf80 [ 249.584795][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.584810][ T9853] ? trace_irq_disable+0x37/0x100 [ 249.584836][ T9853] ? clear_bhb_loop+0x40/0x90 [ 249.584856][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.584873][ T9853] RIP: 0033:0x7f4cae39bf79 [ 249.584895][ T9853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.584907][ T9853] RSP: 002b:00007f4caf175028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.584927][ T9853] RAX: ffffffffffffffda RBX: 00007f4cae615fa0 RCX: 00007f4cae39bf79 [ 249.584938][ T9853] RDX: 0000000000008000 RSI: 0000200000000140 RDI: 0000000000000003 [ 249.584948][ T9853] RBP: 00007f4caf175090 R08: 0000000000000000 R09: 0000000000000000 [ 249.584956][ T9853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.584965][ T9853] R13: 00007f4cae616038 R14: 00007f4cae615fa0 R15: 00007ffc8166d8e8 [ 249.584997][ T9853] [ 250.076795][ T9838] tap0: tun_chr_ioctl cmd 1074025677 [ 250.251104][ T9838] tap0: linktype set to 825 [ 252.155660][ T9870] netlink: 'syz.0.1146': attribute type 10 has an invalid length. [ 252.165244][ T9870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1146'. [ 252.188751][ T9870] bridge0: port 3(ipvlan1) entered blocking state [ 252.210099][ T9870] bridge0: port 3(ipvlan1) entered disabled state [ 252.254704][ T9870] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 252.385000][ T9887] netlink: 'syz.3.1152': attribute type 32 has an invalid length. [ 252.446818][ T9891] netlink: 'syz.2.1154': attribute type 10 has an invalid length. [ 252.482051][ T9896] netlink: 'syz.1.1156': attribute type 27 has an invalid length. [ 252.491027][ T9897] netlink: 'syz.1.1156': attribute type 27 has an invalid length. [ 252.501799][ T9896] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1156'. [ 253.054980][ T9905] syzkaller0: entered promiscuous mode [ 253.060582][ T9905] syzkaller0: entered allmulticast mode [ 253.092685][ T9925] : port 1(veth0_to_bridge) entered blocking state [ 253.099645][ T9925] : port 1(veth0_to_bridge) entered disabled state [ 253.113177][ T9925] veth0_to_bridge: entered allmulticast mode [ 253.165145][ T9925] veth0_to_bridge: entered promiscuous mode [ 254.578505][ T9927] : port 2(veth0_to_team) entered blocking state [ 254.585299][ T9927] : port 2(veth0_to_team) entered disabled state [ 254.592258][ T9927] veth0_to_team: entered allmulticast mode [ 254.599125][ T9927] veth0_to_team: entered promiscuous mode [ 254.797624][ T9959] __nla_validate_parse: 1 callbacks suppressed [ 254.797643][ T9959] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1170'. [ 254.948693][ T9964] openvswitch: netlink: Flow key attribute not present in set flow. [ 255.067157][ T9966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1173'. [ 255.230370][ T9936] lo speed is unknown, defaulting to 1000 [ 255.232095][ T9981] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1178'. [ 255.746365][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.758573][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.763795][T10016] netlink: 'syz.3.1188': attribute type 16 has an invalid length. [ 256.784281][T10016] netlink: 'syz.3.1188': attribute type 17 has an invalid length. [ 256.849978][T10016] sit0: left promiscuous mode [ 256.907570][T10041] netlink: 'syz.4.1191': attribute type 7 has an invalid length. [ 256.933426][T10041] netlink: 'syz.4.1191': attribute type 8 has an invalid length. [ 256.951967][T10041] netlink: 209816 bytes leftover after parsing attributes in process `syz.4.1191'. [ 257.221504][T10016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.290071][T10032] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1188'. [ 257.487228][T10061] netlink: 'syz.4.1195': attribute type 10 has an invalid length. [ 257.545856][T10061] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.553228][T10061] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.633347][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1199'. [ 258.020621][T10084] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1202'. [ 258.029964][T10084] netlink: 'syz.3.1202': attribute type 1 has an invalid length. [ 258.460050][T10092] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1203'. [ 258.923671][T10102] netlink: 14581 bytes leftover after parsing attributes in process `syz.4.1207'. [ 259.091024][T10114] nr0: tun_chr_ioctl cmd 1074025676 [ 259.097573][T10114] nr0: owner set to 0 [ 259.149770][T10114] nr0: tun_chr_ioctl cmd 2147767520 [ 259.168628][T10114] wg2: entered promiscuous mode [ 259.188961][T10114] wg2: entered allmulticast mode [ 259.259753][T10117] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1211'. [ 259.304821][T10117] 2: renamed from team_slave_1 (while UP) [ 260.277273][T10136] __nla_validate_parse: 3 callbacks suppressed [ 260.277295][T10136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1215'. [ 260.950948][T10151] netlink: 'syz.0.1218': attribute type 5 has an invalid length. [ 260.964525][T10151] netlink: 'syz.0.1218': attribute type 5 has an invalid length. [ 261.749955][T10175] netlink: 'syz.1.1224': attribute type 6 has an invalid length. [ 261.759571][T10175] netlink: 'syz.1.1224': attribute type 7 has an invalid length. [ 261.772260][T10175] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1224'. [ 262.579357][T10194] delete_channel: no stack [ 263.405830][T10218] C: renamed from team_slave_0 (while UP) [ 263.498471][T10218] netlink: 'syz.0.1236': attribute type 3 has an invalid length. [ 263.519879][T10218] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1236'. [ 263.532907][T10218] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 263.630406][T10226] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1239'. [ 263.716513][T10228] netlink: 'syz.1.1240': attribute type 2 has an invalid length. [ 263.736632][T10228] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1240'. [ 263.749058][T10228] netlink: 'syz.1.1240': attribute type 2 has an invalid length. [ 263.758583][T10228] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1240'. [ 264.057203][T10246] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1247'. [ 264.269708][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1250'. [ 264.610188][T10271] netlink: 'syz.0.1255': attribute type 21 has an invalid length. [ 264.682990][T10271] netlink: 'syz.0.1255': attribute type 1 has an invalid length. [ 264.962239][T10289] tc_dump_action: action bad kind [ 265.081122][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1260'. [ 265.424709][T10304] netlink: 'syz.1.1264': attribute type 7 has an invalid length. [ 265.449371][T10304] IPv6: Can't replace route, no match found [ 265.484304][T10309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1266'. [ 265.595913][T10318] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 265.675195][T10318] netlink: 'syz.1.1269': attribute type 10 has an invalid length. [ 265.960308][T10328] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1271'. [ 266.653735][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 267.591933][T10400] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1289'. [ 267.645172][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1291'. [ 267.655686][T10409] netlink: 'syz.3.1292': attribute type 10 has an invalid length. [ 267.666294][T10409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1292'. [ 267.675780][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1291'. [ 267.701736][T10409] team0: entered promiscuous mode [ 267.712133][T10409] team_slave_0: entered promiscuous mode [ 267.729659][T10409] team_slave_1: entered promiscuous mode [ 267.759994][T10409] team0: entered allmulticast mode [ 267.796171][T10409] team_slave_0: entered allmulticast mode [ 267.818829][T10409] team_slave_1: entered allmulticast mode [ 267.841219][T10409] bridge0: port 4(team0) entered blocking state [ 267.871260][T10409] bridge0: port 4(team0) entered disabled state [ 268.468185][T10443] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1304'. [ 268.729835][T10454] netlink: 'syz.0.1308': attribute type 46 has an invalid length. [ 269.201049][T10477] netlink: 'syz.4.1316': attribute type 9 has an invalid length. [ 269.232289][T10477] netlink: 'syz.4.1316': attribute type 11 has an invalid length. [ 269.240908][T10477] netlink: 'syz.4.1316': attribute type 12 has an invalid length. [ 269.267466][T10477] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.1316'. [ 269.339200][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1316'. [ 272.330143][T10512] netlink: 'syz.3.1325': attribute type 10 has an invalid length. [ 272.358204][T10513] netlink: 'syz.3.1325': attribute type 10 has an invalid length. [ 274.626926][T10570] __nla_validate_parse: 2 callbacks suppressed [ 274.626957][T10570] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1341'. [ 274.852372][T10588] netlink: 'syz.2.1345': attribute type 11 has an invalid length. [ 274.962524][T10594] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1347'. [ 275.049041][T10596] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.1348'. [ 275.169765][T10601] tmpfs: Bad value for 'gid' [ 275.174637][T10601] tmpfs: Bad value for 'gid' [ 275.407504][T10606] netlink: 'syz.3.1351': attribute type 10 has an invalid length. [ 275.708846][T10612] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1353'. [ 275.948109][T10612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.040887][T10613] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 276.068530][T10612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.185750][T10612] bond0 (unregistering): Released all slaves [ 276.294929][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'. [ 277.908055][T10654] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 277.962013][T10654] netlink: 'syz.4.1365': attribute type 1 has an invalid length. [ 278.036833][T10655] netlink: 'syz.0.1367': attribute type 10 has an invalid length. [ 278.312514][T10655] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.713209][T10667] netlink: 'syz.0.1370': attribute type 21 has an invalid length. [ 278.724243][T10667] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1370'. [ 280.000671][T10701] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1381'. [ 280.059826][T10704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1381'. [ 280.846276][T10719] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1385'. [ 281.063581][T10727] sch_fq: defrate 6 ignored. [ 281.262780][T10735] netlink: 'syz.0.1389': attribute type 9 has an invalid length. [ 281.719161][T10742] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1390'. [ 281.778091][T10748] sctp: [Deprecated]: syz.0.1391 (pid 10748) Use of int in max_burst socket option deprecated. [ 281.778091][T10748] Use struct sctp_assoc_value instead [ 281.817645][T10748] netlink: 'syz.0.1391': attribute type 16 has an invalid length. [ 281.826414][T10748] netlink: 'syz.0.1391': attribute type 17 has an invalid length. [ 281.835747][T10748] netlink: 'syz.0.1391': attribute type 27 has an invalid length. [ 281.846754][T10748] netlink: 'syz.0.1391': attribute type 4 has an invalid length. [ 281.861226][T10748] sctp: [Deprecated]: syz.0.1391 (pid 10748) Use of int in max_burst socket option deprecated. [ 281.861226][T10748] Use struct sctp_assoc_value instead [ 282.069232][T10756] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1393'. [ 282.105203][T10756] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1393'. [ 282.252745][T10764] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 282.365936][T10764] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.428183][T10764] veth0_to_bridge (unregistering): left allmulticast mode [ 282.458388][T10764] veth0_to_bridge (unregistering): left promiscuous mode [ 282.492335][T10764] : port 1(veth0_to_bridge) entered disabled state [ 282.571460][T10774] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1398'. [ 282.577632][T10764] bridge_slave_0 (unregistering): left allmulticast mode [ 282.587854][T10764] bridge_slave_0 (unregistering): left promiscuous mode [ 282.595039][T10764] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.834719][ T5830] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.854192][ T5830] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.872681][ T5830] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.888449][ T5830] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.896750][ T5830] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.610776][T10811] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 284.757677][T10801] lo speed is unknown, defaulting to 1000 [ 284.977097][ T6216] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.475518][ T6216] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.604569][ T6216] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.722383][ T6216] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.806592][T10837] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.1418'. [ 285.816228][T10837] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 285.962262][ T5144] Bluetooth: hci5: command tx timeout [ 286.097606][T10801] chnl_net:caif_netlink_parms(): no params data found [ 286.503220][T10858] netlink: 'syz.0.1422': attribute type 10 has an invalid length. [ 286.977181][T10867] netlink: 'syz.2.1423': attribute type 10 has an invalid length. [ 287.850953][ T6216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.863479][ T6216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.876553][ T6216] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 287.888718][ T6216] bond0 (unregistering): Released all slaves [ 288.042394][ T5144] Bluetooth: hci5: command tx timeout [ 288.142641][T10882] netlink: 'syz.4.1426': attribute type 9 has an invalid length. [ 288.194614][ T30] audit: type=1107 audit(1771296342.512:5): pid=10886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='*mL.ݮ~m6@d<C [ 288.194614][ T30] gyqOj 򂭮3 vmMd4|r: 2oj [ 288.194614][ T30] @{#0`;^%c=iY,3L2{P줪h)Ӗt1h [ 288.194614][ T30] ӬcX]<3D5@1^8jmR' [ 288.354238][T10801] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.392515][T10801] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.399881][T10801] bridge_slave_0: entered allmulticast mode [ 288.437731][T10801] bridge_slave_0: entered promiscuous mode [ 288.518286][T10801] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.551850][T10801] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.559147][T10801] bridge_slave_1: entered allmulticast mode [ 288.599506][T10801] bridge_slave_1: entered promiscuous mode [ 288.637364][T10893] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1428'. [ 288.743382][T10901] netlink: 'syz.4.1429': attribute type 10 has an invalid length. [ 289.424622][T10901] syz_tun: entered promiscuous mode [ 289.495650][T10901] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 289.646302][T10801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.754973][T10925] netlink: 'syz.4.1435': attribute type 21 has an invalid length. [ 289.924083][T10801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.065991][T10801] team0: Port device team_slave_0 added [ 290.084595][T10801] team0: Port device team_slave_1 added [ 290.123600][ T5144] Bluetooth: hci5: command tx timeout [ 290.237731][T10801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.254138][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.322172][T10801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.391147][T10801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.413575][T10801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.536613][T10801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.705669][T10941] syzkaller0: entered promiscuous mode [ 290.711237][T10941] syzkaller0: entered allmulticast mode [ 290.732464][T10951] netlink: 'syz.2.1440': attribute type 10 has an invalid length. [ 290.750794][T10951] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1440'. [ 290.832738][ T6216] hsr_slave_0: left promiscuous mode [ 290.858216][ T6216] veth1_vlan: left promiscuous mode [ 290.875624][ T6216] veth0_vlan: left promiscuous mode [ 291.441294][ T6216] team0 (unregistering): Port device 26 removed [ 291.503287][ T6216] team0 (unregistering): Port device team_slave_0 removed [ 292.029806][ T6211] smc: removing ib device syz2 [ 292.180435][ T29] lo speed is unknown, defaulting to 1000 [ 292.186316][ T29] infiniband syz1: ib_query_port failed (-19) [ 292.205306][ T5144] Bluetooth: hci5: command tx timeout [ 293.171212][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.180809][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.188978][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.206140][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.222012][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.229671][ T10] ================================================================== [ 294.237882][ T10] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 294.246825][ T10] Read of size 8 at addr ffff8880598962f0 by task kworker/0:1/10 [ 294.254535][ T10] [ 294.256961][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 294.256973][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 294.256980][ T10] Workqueue: events smc_ib_port_event_work [ 294.256996][ T10] Call Trace: [ 294.257001][ T10] [ 294.257006][ T10] dump_stack_lvl+0xe8/0x150 [ 294.257020][ T10] print_report+0xba/0x230 [ 294.257031][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 294.257043][ T10] kasan_report+0x117/0x150 [ 294.257054][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 294.257066][ T10] __ethtool_get_link_ksettings+0x5e/0x170 [ 294.257078][ T10] ib_get_eth_speed+0x180/0x7f0 [ 294.257088][ T10] ? rxe_query_port+0x7e/0x3d0 [ 294.257112][ T10] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 294.257123][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 294.257134][ T10] rxe_query_port+0x93/0x3d0 [ 294.257148][ T10] ib_query_port+0x170/0x830 [ 294.257159][ T10] smc_ib_port_event_work+0x15a/0x940 [ 294.257171][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 294.257182][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 294.257193][ T10] process_scheduled_works+0xaec/0x17a0 [ 294.257209][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 294.257220][ T10] ? assign_work+0x3d5/0x5e0 [ 294.257231][ T10] worker_thread+0xa50/0xfc0 [ 294.257247][ T10] kthread+0x388/0x470 [ 294.257255][ T10] ? __pfx_worker_thread+0x10/0x10 [ 294.257265][ T10] ? __pfx_kthread+0x10/0x10 [ 294.257272][ T10] ret_from_fork+0x51e/0xb90 [ 294.257284][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 294.257299][ T10] ? __switch_to+0xc7d/0x1400 [ 294.257309][ T10] ? __pfx_kthread+0x10/0x10 [ 294.257316][ T10] ret_from_fork_asm+0x1a/0x30 [ 294.257332][ T10] [ 294.257335][ T10] [ 294.429609][ T10] Allocated by task 5825: [ 294.434280][ T10] kasan_save_track+0x3e/0x80 [ 294.438981][ T10] __kasan_kmalloc+0x93/0xb0 [ 294.443654][ T10] __kvmalloc_node_noprof+0x528/0x8a0 [ 294.449045][ T10] alloc_netdev_mqs+0xa6/0x11b0 [ 294.453894][ T10] rtnl_create_link+0x31f/0xd70 [ 294.458732][ T10] rtnl_newlink_create+0x277/0xb70 [ 294.463827][ T10] rtnl_newlink+0x1666/0x1be0 [ 294.468492][ T10] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 294.473496][ T10] netlink_rcv_skb+0x232/0x4b0 [ 294.478237][ T10] netlink_unicast+0x80f/0x9b0 [ 294.482989][ T10] netlink_sendmsg+0x813/0xb40 [ 294.487840][ T10] __sys_sendto+0x709/0x7a0 [ 294.492325][ T10] __x64_sys_sendto+0xde/0x100 [ 294.497072][ T10] do_syscall_64+0x14d/0xf80 [ 294.501641][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.507519][ T10] [ 294.509820][ T10] Freed by task 10951: [ 294.513862][ T10] kasan_save_track+0x3e/0x80 [ 294.518523][ T10] kasan_save_free_info+0x46/0x50 [ 294.523527][ T10] __kasan_slab_free+0x5c/0x80 [ 294.528269][ T10] kfree+0x1c1/0x610 [ 294.532153][ T10] device_release+0x9e/0x1d0 [ 294.536724][ T10] kobject_put+0x228/0x560 [ 294.541123][ T10] netdev_run_todo+0xc75/0xde0 [ 294.545887][ T10] rtnl_dellink+0x6a7/0x820 [ 294.550374][ T10] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 294.555383][ T10] netlink_rcv_skb+0x232/0x4b0 [ 294.560125][ T10] netlink_unicast+0x80f/0x9b0 [ 294.564872][ T10] netlink_sendmsg+0x813/0xb40 [ 294.569617][ T10] ____sys_sendmsg+0xa68/0xad0 [ 294.574370][ T10] ___sys_sendmsg+0x2a5/0x360 [ 294.579028][ T10] __x64_sys_sendmsg+0x1bd/0x2a0 [ 294.583954][ T10] do_syscall_64+0x14d/0xf80 [ 294.588529][ T10] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.594408][ T10] [ 294.596711][ T10] The buggy address belongs to the object at ffff888059896000 [ 294.596711][ T10] which belongs to the cache kmalloc-cg-4k of size 4096 [ 294.611002][ T10] The buggy address is located 752 bytes inside of [ 294.611002][ T10] freed 4096-byte region [ffff888059896000, ffff888059897000) [ 294.625299][ T10] [ 294.627613][ T10] The buggy address belongs to the physical page: [ 294.634193][ T10] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x59890 [ 294.642933][ T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 294.651590][ T10] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 294.659238][ T10] page_type: f5(slab) [ 294.663216][ T10] raw: 00fff00000000040 ffff88813feba500 dead000000000100 dead000000000122 [ 294.671782][ T10] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 294.680347][ T10] head: 00fff00000000040 ffff88813feba500 dead000000000100 dead000000000122 [ 294.688998][ T10] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 294.697734][ T10] head: 00fff00000000003 ffffea0001662401 00000000ffffffff 00000000ffffffff [ 294.706384][ T10] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 294.715032][ T10] page dumped because: kasan: bad access detected [ 294.721438][ T10] page_owner tracks the page as allocated [ 294.727132][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5823, tgid 5823 (syz-executor), ts 73458491288, free_ts 20751879097 [ 294.748473][ T10] post_alloc_hook+0x231/0x280 [ 294.753262][ T10] get_page_from_freelist+0x24dc/0x2580 [ 294.758952][ T10] __alloc_frozen_pages_noprof+0x18d/0x380 [ 294.764770][ T10] allocate_slab+0x77/0x660 [ 294.769262][ T10] refill_objects+0x331/0x3c0 [ 294.773925][ T10] __pcs_replace_empty_main+0x2b9/0x620 [ 294.779455][ T10] __kmalloc_cache_noprof+0x392/0x660 [ 294.784808][ T10] ipv6_add_dev+0x6aa/0x13a0 [ 294.789380][ T10] addrconf_notify+0x771/0x1050 [ 294.794216][ T10] notifier_call_chain+0x19d/0x3a0 [ 294.799311][ T10] register_netdevice+0x173a/0x1cf0 [ 294.804527][ T10] virt_wifi_newlink+0x428/0x860 [ 294.809472][ T10] rtnl_newlink_create+0x329/0xb70 [ 294.814783][ T10] rtnl_newlink+0x1666/0x1be0 [ 294.819619][ T10] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 294.824547][ T10] netlink_rcv_skb+0x232/0x4b0 [ 294.829309][ T10] page last free pid 1 tgid 1 stack trace: [ 294.835183][ T10] __free_frozen_pages+0xc00/0xd90 [ 294.840291][ T10] free_contig_range+0xbb/0x170 [ 294.845138][ T10] destroy_args+0x4e5/0x570 [ 294.849710][ T10] debug_vm_pgtable+0x3f8/0x410 [ 294.854538][ T10] do_one_initcall+0x250/0x840 [ 294.859296][ T10] do_initcall_level+0x104/0x190 [ 294.864312][ T10] do_initcalls+0x59/0xa0 [ 294.868710][ T10] kernel_init_freeable+0x2a6/0x3e0 [ 294.873890][ T10] kernel_init+0x1d/0x1d0 [ 294.878250][ T10] ret_from_fork+0x51e/0xb90 [ 294.882912][ T10] ret_from_fork_asm+0x1a/0x30 [ 294.887664][ T10] [ 294.889973][ T10] Memory state around the buggy address: [ 294.895589][ T10] ffff888059896180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.903631][ T10] ffff888059896200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.911893][ T10] >ffff888059896280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.920110][ T10] ^ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 294.927809][ T10] ffff888059896300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.935944][ T10] ffff888059896380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 294.943983][ T10] ================================================================== [ 294.984761][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 294.992534][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 295.001822][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 295.012498][ T10] Workqueue: events smc_ib_port_event_work [ 295.018592][ T10] Call Trace: [ 295.021881][ T10] [ 295.024807][ T10] vpanic+0x56c/0xa60 [ 295.028794][ T10] ? __pfx_vpanic+0x10/0x10 [ 295.033482][ T10] panic+0xc5/0xd0 [ 295.037221][ T10] ? __pfx_panic+0x10/0x10 [ 295.041648][ T10] ? preempt_schedule_thunk+0x16/0x30 [ 295.047016][ T10] ? preempt_schedule_thunk+0x16/0x30 [ 295.052372][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 295.058512][ T10] check_panic_on_warn+0x89/0xb0 [ 295.063432][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 295.069484][ T10] end_report+0x6f/0x140 [ 295.073718][ T10] kasan_report+0x128/0x150 [ 295.078213][ T10] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 295.084267][ T10] __ethtool_get_link_ksettings+0x5e/0x170 [ 295.090060][ T10] ib_get_eth_speed+0x180/0x7f0 [ 295.094894][ T10] ? rxe_query_port+0x7e/0x3d0 [ 295.099654][ T10] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 295.105011][ T10] ? do_raw_spin_unlock+0xf5/0x210 [ 295.110178][ T10] rxe_query_port+0x93/0x3d0 [ 295.114761][ T10] ib_query_port+0x170/0x830 [ 295.119342][ T10] smc_ib_port_event_work+0x15a/0x940 [ 295.124714][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 295.130416][ T10] ? process_scheduled_works+0xa0f/0x17a0 [ 295.136119][ T10] process_scheduled_works+0xaec/0x17a0 [ 295.141751][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 295.148324][ T10] ? assign_work+0x3d5/0x5e0 [ 295.153158][ T10] worker_thread+0xa50/0xfc0 [ 295.157744][ T10] kthread+0x388/0x470 [ 295.161829][ T10] ? __pfx_worker_thread+0x10/0x10 [ 295.166937][ T10] ? __pfx_kthread+0x10/0x10 [ 295.171680][ T10] ret_from_fork+0x51e/0xb90 [ 295.176451][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 295.181701][ T10] ? __switch_to+0xc7d/0x1400 [ 295.186364][ T10] ? __pfx_kthread+0x10/0x10 [ 295.191115][ T10] ret_from_fork_asm+0x1a/0x30 [ 295.195879][ T10] [ 295.199377][ T10] Kernel Offset: disabled [ 295.203699][ T10] Rebooting in 86400 seconds..