last executing test programs: 9m33.038871099s ago: executing program 32 (id=9728): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x8, 0x4, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0) 8m58.538655942s ago: executing program 33 (id=10244): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, r0, 0x0) syz_clone(0x8510c000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffffffff) 8m52.340049802s ago: executing program 34 (id=10321): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 8m36.709062768s ago: executing program 35 (id=10326): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x9, 0x2, 0x56d, 0x3, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r0}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r0}, 0x38) 7m24.371482294s ago: executing program 36 (id=11101): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0)="64a124c36d6796dde849c8966b05a31fae3ce9bb27e9b04bccfe307fc63300a96d5e065d44a00ceda4e1155746c101e5547ce39094e272", 0xca, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m34.658020539s ago: executing program 37 (id=11752): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x4, 0x0, 0x9f, 0xd4, 0x0, 0x0, 0x2010e, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0}, 0x806, 0xc8, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0x6, 0x2d}]}]}}, &(0x7f00000001c0)=""/20, 0x2e, 0x14, 0x1, 0x1fb}, 0x28) close(r1) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40002100) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63fc80fc020c2f00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa3a2008"], 0xfdef) 6m30.608576698s ago: executing program 38 (id=11785): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r2) setsockopt$sock_attach_bpf(r0, 0x6, 0x1e, &(0x7f0000000500)=r3, 0x4) 6m5.909899795s ago: executing program 39 (id=11973): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796efea77aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece72f2090000f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505000001000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bf463261135e24d154114df1381b02a0dcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f884cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9a33c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac00000b0000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293d5c833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f257aac5af18d8c6b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x4, 0x3, 0x0, 0xf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x4008240b, &(0x7f00000013c0)) 5m46.226388291s ago: executing program 40 (id=12007): mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x104000, 0x0) 5m34.479251301s ago: executing program 41 (id=12190): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r3, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 5m21.313441129s ago: executing program 42 (id=12271): socket$kcm(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 4m45.178532935s ago: executing program 43 (id=12529): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="a2", 0x1}], 0x1}, 0x4006041) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0f000000040000000400000016"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000017c0)="104d", 0xfdef}], 0x1}, 0x3) 4m31.29240645s ago: executing program 44 (id=12623): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x9, 0x4, 0x2, 0x0, 0x0, 0x800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x6, 0x6a}, 0x100020, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x4, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 4m24.307830066s ago: executing program 45 (id=12672): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c000140000000000000000814000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) 4m20.31537465s ago: executing program 46 (id=12696): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000080)={'full', 0x20, 0x2000000007, 0x20, 0x10000000fffff}, 0x2f) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) 4m17.754406742s ago: executing program 47 (id=12707): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@getqdisc={0x3c, 0x26, 0x4, 0x7, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0xffe0, 0x1}, {0x4, 0xffe0}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}}, 0x0) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 4m15.147552927s ago: executing program 48 (id=12629): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) close(r1) 3m25.137975235s ago: executing program 49 (id=12961): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0xfffffe51) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 2m54.19141094s ago: executing program 50 (id=13157): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x4e24, 0x0, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}, 0x1, 0x0, 0x0, 0x40000000}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 2m43.670196888s ago: executing program 51 (id=13228): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) 2m29.741812818s ago: executing program 9 (id=13284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x1, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$kcm(0xa, 0x922000000003, 0x11) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7af", 0x5c4}], 0x1}, 0x0) 2m29.536969963s ago: executing program 9 (id=13286): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000004, 0x200000008}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xfd, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m29.192056464s ago: executing program 9 (id=13288): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) r2 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r2, 0xc, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xffffffffffffffff) 2m27.117556427s ago: executing program 3 (id=13298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2220302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 2m26.52154893s ago: executing program 52 (id=13298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2220302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 2m23.122394405s ago: executing program 9 (id=13317): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0xae90e0acb7424bcc, 0x0, 0x0, 0xfdff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0xb33328a401cad7d9) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 2m21.09039456s ago: executing program 9 (id=13325): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x9, 0x7fff, 0x7fffffff, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 2m20.692123334s ago: executing program 9 (id=13329): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x0) 2m20.448122719s ago: executing program 53 (id=13329): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x0) 2m1.872311671s ago: executing program 4 (id=13355): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x2, 0x73) r3 = socket$kcm(0x2c, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x11b, 0x3, &(0x7f0000000040)=r4, 0x4) 2m0.89445889s ago: executing program 4 (id=13425): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2m0.675228297s ago: executing program 4 (id=13427): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000c, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x78, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x0, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7af", 0x5c4}], 0x1}, 0x0) 2m0.01645008s ago: executing program 4 (id=13433): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x20000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x106d4c8, 0x0) 1m58.006431837s ago: executing program 4 (id=13435): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x612}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m57.437098603s ago: executing program 4 (id=13442): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0x6}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 1m56.808337147s ago: executing program 54 (id=13442): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0x6}, {0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x80) 1m21.06463167s ago: executing program 7 (id=13633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1m20.873199049s ago: executing program 7 (id=13636): openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r0 = getpid() bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x17) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)="1400000016000b56d072c00a000000f90c000000", 0x14}], 0x1}, 0x0) 1m20.467913713s ago: executing program 7 (id=13640): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0xed6, 0x437f}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m19.069907189s ago: executing program 7 (id=13652): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}}, 0x24000840) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 1m17.942455205s ago: executing program 7 (id=13659): perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0xa418be, 0x0) 1m17.787929s ago: executing program 7 (id=13661): recvmsg(0xffffffffffffffff, 0x0, 0x40000020) socket$kcm(0xa, 0x3, 0x87) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xa00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m2.529803804s ago: executing program 55 (id=13661): recvmsg(0xffffffffffffffff, 0x0, 0x40000020) socket$kcm(0xa, 0x3, 0x87) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xa00, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 55.42023863s ago: executing program 6 (id=13779): r0 = syz_clone(0x8000600, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffd, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) r3 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES64=r3], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x4c800) 54.866283762s ago: executing program 6 (id=13782): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x5}, 0x108400, 0x2, 0x0, 0x0, 0xffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 54.480548905s ago: executing program 6 (id=13785): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x82, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018111800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 41.359077724s ago: executing program 6 (id=13785): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x82, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018111800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300001a000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 40.867225309s ago: executing program 6 (id=13829): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x999047, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) 40.771807908s ago: executing program 6 (id=13830): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x800076, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x7, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 32.715053693s ago: executing program 2 (id=13867): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x80400, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000000000000290000003e0000000100000000000000400000000000000029000000040000001605000000000000071800000003040707"], 0x88}, 0x200080c4) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0xeea2}, 0x0, 0xc8, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 32.557026757s ago: executing program 2 (id=13860): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getpid() 29.797940796s ago: executing program 2 (id=13863): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) 29.526089235s ago: executing program 2 (id=13865): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x9, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffff7f, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 29.300797616s ago: executing program 2 (id=13868): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000000)=""/138, 0x4a, 0x8a, 0x1}, 0x28) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfdef) 29.004677852s ago: executing program 2 (id=13870): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) write$cgroup_subtree(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xe, &(0x7f0000000600), 0xd8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008d26200b70400"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ad2b012}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 28.423240496s ago: executing program 56 (id=13870): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$pppl2tp(0x18, 0x1, 0x1) write$cgroup_subtree(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0xe, &(0x7f0000000600), 0xd8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008d26200b70400"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ad2b012}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000012, 0x0, 0x0, &(0x7f0000000c40), 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 25.346479775s ago: executing program 57 (id=13830): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x800076, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x7, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) 7.404946553s ago: executing program 0 (id=13948): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xb}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xb}, 0x2, 0x0, 0x0, 0x8, 0x43fd, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9", 0x5b}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x1fffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.351232343s ago: executing program 0 (id=13951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002fffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x3ff}, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 5.105420726s ago: executing program 0 (id=13954): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x2f14, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x6200, 0x3ffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x94, 0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x84, 0x4}, 0x14128, 0x8, 0x0, 0x6, 0x80103fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) 4.764396981s ago: executing program 0 (id=13965): recvmsg(0xffffffffffffffff, 0x0, 0x40010002) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x3, 0x0, 0x1, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x8, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xc, 0x9, 0x0, 0x1, 0x2000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x80ffffff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x5}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.469422566s ago: executing program 1 (id=13957): socket$kcm(0x1e, 0x4, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdir(0x0, 0x18b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 4.122169407s ago: executing program 1 (id=13960): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc2608000000001fbf67000000000000070300000fff0700670200001f00000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.972891392s ago: executing program 3 (id=13879): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x2, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x8}, 0xc02, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0xdc}}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000400)=0x9) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)={0xec, 0x7, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "bd111c11e42a118419eedab28895fc66a9d66a4f46cd02a8c03226f450a7796afe4c450797017349944eba5df7b236720a051ca6976e9a40fe"}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x4008000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 3.897410869s ago: executing program 5 (id=13962): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x4, 0x5, 0x7, 0x0, 0x0, 0x10000, 0x80081, 0x6, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x7}, 0x4, 0x1, 0x0, 0x0, 0x7, 0xb57, 0x9944, 0x0, 0xffff84d9}, r0, 0xf, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r0, 0xffffffffffffffff, r1, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)='devices.allow\x00', 0x2, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0xc, 0x18}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3.726357961s ago: executing program 0 (id=13964): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x29, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.608852761s ago: executing program 1 (id=13966): bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_config_ext={0x6, 0x830d}, 0x2000, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51012049f4e34e860200eb08000240000000000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.082039747s ago: executing program 5 (id=13968): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x2}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x2000000830d}, 0x100, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x41) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f086dd47e0ffff00122b00631177fbac141416e000030a44079f034d2f87e589ca6aab845013f2325f1a3987050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 3.067132154s ago: executing program 0 (id=13969): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x160, &(0x7f00000000c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) socket$kcm(0x10, 0x2, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 3.006335735s ago: executing program 1 (id=13970): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64000000020605e2187a9700000000000000000005000400000000000900020073797a30000000001400078008000840000000b10800064000000f180500050002000000050001000600000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 2.976562454s ago: executing program 3 (id=13971): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xca, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x2, 0x1946}, 0x0, 0x7, 0x0, 0x2, 0x1e2, 0xfcc9, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.437346008s ago: executing program 1 (id=13975): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x291, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0xb8}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) socketpair(0xa, 0x5, 0x3, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) close(r0) 2.338267597s ago: executing program 3 (id=13976): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000100c00098008000140137829"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.260446788s ago: executing program 5 (id=13977): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000bf000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 2.018976814s ago: executing program 3 (id=13978): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x194a}, 0xc6fc13e1772f37da, 0x2204, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x13bb711e) 1.935232532s ago: executing program 5 (id=13979): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x4, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) close(r3) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 1.89629252s ago: executing program 1 (id=13980): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x3f2, 0x8, 0x1ff, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x5}, 0x8000) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r3, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x10) 1.816537598s ago: executing program 8 (id=13981): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7f5, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) getpid() write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000940)=""/4116, 0x1014}], 0x1}, 0x100) 1.638567186s ago: executing program 5 (id=13982): syz_clone(0x10001180, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0xa3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x104000, 0x2, 0xfffffffe, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.613113523s ago: executing program 8 (id=13983): socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) 1.330870709s ago: executing program 8 (id=13984): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x80000002}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x103600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) 571.349382ms ago: executing program 3 (id=13985): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0xfffffffc, 0x8, 0x7ffd, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) 569.933586ms ago: executing program 5 (id=13986): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x208}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) 512.752186ms ago: executing program 8 (id=13987): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$nl_rdma(0x10, 0x3, 0x14) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r3], 0x12) 283.383968ms ago: executing program 8 (id=13988): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) socketpair(0x8, 0x1, 0x9, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8983, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x240000c0) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) syz_clone(0xab009500, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8400) 0s ago: executing program 8 (id=13989): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x2f, 0x0, @void}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x146, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) kernel console output (not intermixed with test programs): : Not using interface batadv_slave_1 (retrying later): interface not active [ 827.922071][ T2459] hsr_slave_0: entered promiscuous mode [ 827.959862][ T2459] hsr_slave_1: entered promiscuous mode [ 827.966495][ T2459] debugfs: 'hsr0' already exists in 'hsr' [ 827.981021][ T2459] Cannot create hsr debugfs directory [ 829.056663][T30918] Bluetooth: hci0: command tx timeout [ 829.466565][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 829.478775][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 829.493666][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 829.511737][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 829.528550][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 829.678367][ T35] bridge_slave_1: left allmulticast mode [ 829.699468][ T35] bridge_slave_1: left promiscuous mode [ 829.705320][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.720565][ T35] bridge_slave_0: left allmulticast mode [ 829.747042][ T35] bridge_slave_0: left promiscuous mode [ 829.758212][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.235103][ T2610] netlink: 'syz.7.12680': attribute type 21 has an invalid length. [ 830.555787][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 830.585400][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.614596][ T35] bond0 (unregistering): Released all slaves [ 830.913896][ T2610] netlink: 132 bytes leftover after parsing attributes in process `syz.7.12680'. [ 831.137748][ T5829] Bluetooth: hci0: command tx timeout [ 831.260173][ T2593] tunl0 speed is unknown, defaulting to 1000 [ 831.611552][ T2459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.618424][ T5829] Bluetooth: hci4: command tx timeout [ 831.655455][ T2459] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.691916][T32095] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.699128][T32095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.725239][T32095] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.732474][T32095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 831.815145][ T2647] netlink: 176 bytes leftover after parsing attributes in process `syz.7.12690'. [ 831.835667][ T2649] netlink: 'syz.4.12691': attribute type 2 has an invalid length. [ 831.863879][ T2459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 831.910383][ T2649] : entered promiscuous mode [ 831.928119][ T2649] netlink: 'syz.4.12691': attribute type 2 has an invalid length. [ 831.953860][ T2649] : left promiscuous mode [ 832.244401][ T2665] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.12693'. [ 832.255464][ T2665] netlink: Unknown conntrack attr (0) [ 832.554992][ T2459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 832.729938][ T35] hsr_slave_0: left promiscuous mode [ 832.750714][ T35] hsr_slave_1: left promiscuous mode [ 832.784279][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 832.814902][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 832.919089][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.987356][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 833.026888][ T35] veth1_macvtap: left promiscuous mode [ 833.032435][ T35] veth0_macvtap: left promiscuous mode [ 833.058434][ T35] veth1_vlan: left promiscuous mode [ 833.255598][T30918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 833.267394][T30918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 833.275267][T30918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 833.284833][T30918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 833.294994][T30918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 833.560766][ T35] team0 (unregistering): Port device team_slave_1 removed [ 833.594511][ T35] team0 (unregistering): Port device team_slave_0 removed [ 833.709915][ T5829] Bluetooth: hci4: command tx timeout [ 833.908462][ T2692] netlink: 14593 bytes leftover after parsing attributes in process `syz.7.12698'. [ 834.067335][ T2693] tunl0 speed is unknown, defaulting to 1000 [ 834.341890][ T2593] chnl_net:caif_netlink_parms(): no params data found [ 834.781652][ T2593] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.790954][ T2593] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.800493][ T2593] bridge_slave_0: entered allmulticast mode [ 834.810931][ T2593] bridge_slave_0: entered promiscuous mode [ 834.820530][ T2593] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.827946][ T2593] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.835303][ T2593] bridge_slave_1: entered allmulticast mode [ 834.849900][ T2593] bridge_slave_1: entered promiscuous mode [ 834.871997][ T2459] veth0_vlan: entered promiscuous mode [ 834.969804][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.134376][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.224847][ T2593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.285808][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.313249][ T2593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.362442][ T2459] veth1_vlan: entered promiscuous mode [ 835.376741][ T5829] Bluetooth: hci2: command tx timeout [ 835.478303][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.538834][ T2593] team0: Port device team_slave_0 added [ 835.567565][ T2593] team0: Port device team_slave_1 added [ 835.681955][ T2593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.697029][ T2593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.746033][ T2593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.776340][ T5829] Bluetooth: hci4: command tx timeout [ 835.800889][ T2593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.811695][T30918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 835.820239][ T2593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 835.823546][T30918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 835.858417][T30918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 835.878906][ T2593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.889829][T30918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 835.898606][T30918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 835.950898][ T2459] veth0_macvtap: entered promiscuous mode [ 836.050045][ T2459] veth1_macvtap: entered promiscuous mode [ 836.057306][ T2729] tunl0 speed is unknown, defaulting to 1000 [ 836.135432][ T2593] hsr_slave_0: entered promiscuous mode [ 836.145538][ T2593] hsr_slave_1: entered promiscuous mode [ 836.152013][ T2593] debugfs: 'hsr0' already exists in 'hsr' [ 836.157817][ T2593] Cannot create hsr debugfs directory [ 836.269266][ T2459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 836.299668][ T2693] chnl_net:caif_netlink_parms(): no params data found [ 836.410947][ T2459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 836.548719][ T35] bridge_slave_1: left allmulticast mode [ 836.554418][ T35] bridge_slave_1: left promiscuous mode [ 836.578432][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.599078][ T35] bridge_slave_0: left allmulticast mode [ 836.604776][ T35] bridge_slave_0: left promiscuous mode [ 836.619846][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.642037][ T35] bridge_slave_1: left allmulticast mode [ 836.647921][ T35] bridge_slave_1: left promiscuous mode [ 836.653701][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.677321][ T35] bridge_slave_0: left allmulticast mode [ 836.683022][ T35] bridge_slave_0: left promiscuous mode [ 836.696253][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.126563][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.148858][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.169778][ T35] bond0 (unregistering): Released all slaves [ 837.370520][ T85] smc: removing ib device syz2 [ 837.457638][T30918] Bluetooth: hci2: command tx timeout [ 837.470865][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.486626][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.502181][ T35] bond0 (unregistering): Released all slaves [ 837.717845][T12111] tunl0 speed is unknown, defaulting to 1000 [ 837.723920][T12111] syz2: Port: 1 Link DOWN [ 837.856489][T30918] Bluetooth: hci4: command tx timeout [ 837.936232][T30918] Bluetooth: hci1: command tx timeout [ 837.966174][ T2693] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.975165][ T2693] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.983075][ T2693] bridge_slave_0: entered allmulticast mode [ 837.992700][ T2693] bridge_slave_0: entered promiscuous mode [ 838.253359][ T2693] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.296160][ T2693] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.303446][ T2693] bridge_slave_1: entered allmulticast mode [ 838.327973][ T2693] bridge_slave_1: entered promiscuous mode [ 838.587242][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 838.596763][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 838.604742][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 838.620060][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 838.632543][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 838.747354][ T2693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 838.781446][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.794071][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.883924][ T2693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.145614][T32097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.163763][T32097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.189108][ T2693] team0: Port device team_slave_0 added [ 839.211027][ T2693] team0: Port device team_slave_1 added [ 839.537873][T30918] Bluetooth: hci2: command tx timeout [ 839.665554][ T2693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.672927][ T2693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.700337][ T2693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.752591][ T2693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.773850][ T2693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.804275][ T2693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.888944][ T2729] chnl_net:caif_netlink_parms(): no params data found [ 840.016068][T30918] Bluetooth: hci1: command tx timeout [ 840.161415][ T2693] hsr_slave_0: entered promiscuous mode [ 840.168066][ T2693] hsr_slave_1: entered promiscuous mode [ 840.174508][ T2693] debugfs: 'hsr0' already exists in 'hsr' [ 840.181987][ T2693] Cannot create hsr debugfs directory [ 840.493372][ T2729] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.505693][ T2729] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.513982][ T2729] bridge_slave_0: entered allmulticast mode [ 840.522145][ T2729] bridge_slave_0: entered promiscuous mode [ 840.531083][ T2729] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.538297][ T2729] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.545578][ T2729] bridge_slave_1: entered allmulticast mode [ 840.553402][ T2729] bridge_slave_1: entered promiscuous mode [ 840.746112][T30918] Bluetooth: hci5: command tx timeout [ 840.778568][ T2729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.874980][ T2729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.929520][ T2757] chnl_net:caif_netlink_parms(): no params data found [ 841.002833][ T2729] team0: Port device team_slave_0 added [ 841.055584][ T35] hsr_slave_0: left promiscuous mode [ 841.078975][ T35] hsr_slave_1: left promiscuous mode [ 841.085164][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.093427][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.101897][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.122042][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.156613][ T35] hsr_slave_0: left promiscuous mode [ 841.176407][ T35] hsr_slave_1: left promiscuous mode [ 841.182503][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.194668][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.202781][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.211034][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.254778][ T35] veth1_macvtap: left promiscuous mode [ 841.260423][ T35] veth0_macvtap: left promiscuous mode [ 841.267302][ T35] veth1_vlan: left promiscuous mode [ 841.272594][ T35] veth0_vlan: left promiscuous mode [ 841.297937][ T35] veth1_macvtap: left promiscuous mode [ 841.303482][ T35] veth0_macvtap: left promiscuous mode [ 841.326767][ T35] veth1_vlan: left promiscuous mode [ 841.616348][T30918] Bluetooth: hci2: command tx timeout [ 841.758572][ T35] team0 (unregistering): Port device team_slave_1 removed [ 841.775701][ T35] team0 (unregistering): Port device team_slave_0 removed [ 842.096183][T30918] Bluetooth: hci1: command tx timeout [ 842.133569][ T35] team0 (unregistering): Port device team_slave_1 removed [ 842.160476][ T35] team0 (unregistering): Port device team_slave_0 removed [ 842.329444][ T2729] team0: Port device team_slave_1 added [ 842.409653][ T2593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 842.485724][ T2729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.493805][ T2729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.520527][ T2729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.537688][ T2729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.544966][ T2729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 842.572395][ T2729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.645920][ T2729] hsr_slave_0: entered promiscuous mode [ 842.658625][ T2729] hsr_slave_1: entered promiscuous mode [ 842.665671][ T2729] debugfs: 'hsr0' already exists in 'hsr' [ 842.672872][ T2729] Cannot create hsr debugfs directory [ 842.703988][ T2757] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.712157][ T2757] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.721146][ T2757] bridge_slave_0: entered allmulticast mode [ 842.729151][ T2757] bridge_slave_0: entered promiscuous mode [ 842.737715][ T2757] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.744855][ T2757] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.752236][ T2757] bridge_slave_1: entered allmulticast mode [ 842.759960][ T2757] bridge_slave_1: entered promiscuous mode [ 842.792993][ T2593] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.821785][T30918] Bluetooth: hci5: command tx timeout [ 842.898094][T32095] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.905287][T32095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.943171][T32095] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.950421][T32095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.024224][ T2757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.060919][ T2757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.199810][ T2757] team0: Port device team_slave_0 added [ 843.209672][ T2593] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 843.269390][ T2757] team0: Port device team_slave_1 added [ 843.355926][ T2693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.386942][ T2757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.393939][ T2757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.420961][ T2757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.458512][ T2757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.465509][ T2757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.496382][ T2757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.553904][ T2693] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.636777][T32097] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.643967][T32097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.681816][ T1093] bridge_slave_1: left allmulticast mode [ 843.688310][ T1093] bridge_slave_1: left promiscuous mode [ 843.695367][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.711702][ T1093] bridge_slave_0: left allmulticast mode [ 843.717682][ T1093] bridge_slave_0: left promiscuous mode [ 843.723814][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.735429][ T1093] bridge_slave_1: left allmulticast mode [ 843.741244][ T1093] bridge_slave_1: left promiscuous mode [ 843.747353][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.757047][ T1093] bridge_slave_0: left allmulticast mode [ 843.762733][ T1093] bridge_slave_0: left promiscuous mode [ 843.768653][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.985631][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 843.999478][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.010196][ T1093] bond0 (unregistering): Released all slaves [ 844.162223][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.172806][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.177141][T30918] Bluetooth: hci1: command tx timeout [ 844.188198][ T1093] bond0 (unregistering): Released all slaves [ 844.214273][ T2757] hsr_slave_0: entered promiscuous mode [ 844.221997][ T2757] hsr_slave_1: entered promiscuous mode [ 844.228937][ T2757] debugfs: 'hsr0' already exists in 'hsr' [ 844.234710][ T2757] Cannot create hsr debugfs directory [ 844.332583][T32094] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.339829][T32094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.430942][ T2593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.897076][T30918] Bluetooth: hci5: command tx timeout [ 844.905748][ T2729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.960584][ T2729] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.009065][T32093] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.016282][T32093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.029204][T32093] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.036465][T32093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.083814][ T1093] hsr_slave_0: left promiscuous mode [ 845.090647][ T1093] hsr_slave_1: left promiscuous mode [ 845.098455][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.105842][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.113847][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.121682][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.133240][ T1093] hsr_slave_0: left promiscuous mode [ 845.139453][ T1093] hsr_slave_1: left promiscuous mode [ 845.145297][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.152757][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.161028][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.168583][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.184252][ T1093] veth1_macvtap: left promiscuous mode [ 845.189947][ T1093] veth0_macvtap: left promiscuous mode [ 845.195477][ T1093] veth1_vlan: left promiscuous mode [ 845.200976][ T1093] veth0_vlan: left promiscuous mode [ 845.207666][ T1093] veth1_macvtap: left promiscuous mode [ 845.213145][ T1093] veth0_macvtap: left promiscuous mode [ 845.220793][ T1093] veth1_vlan: left promiscuous mode [ 845.227712][ T1093] veth0_vlan: left promiscuous mode [ 845.484243][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 845.504745][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 845.764758][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 845.781394][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 845.916567][ T2593] veth0_vlan: entered promiscuous mode [ 845.979360][ T2693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.000119][ T2593] veth1_vlan: entered promiscuous mode [ 846.059997][ T2757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.131642][ T2757] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.170348][T32097] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.177548][T32097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.220649][ T2593] veth0_macvtap: entered promiscuous mode [ 846.235525][T32097] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.242739][T32097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.263074][ T2593] veth1_macvtap: entered promiscuous mode [ 846.324628][ T2729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.364988][ T2593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.431032][ T2593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.643359][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.669672][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.742205][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 846.755242][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.830738][ T2693] veth0_vlan: entered promiscuous mode [ 846.864341][ T2693] veth1_vlan: entered promiscuous mode [ 846.944944][ T2938] openvswitch: netlink: Flow key attr not present in new flow. [ 846.977400][ T2757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.982018][T30918] Bluetooth: hci5: command tx timeout [ 847.161678][ T2936] syzkaller0: entered promiscuous mode [ 847.176149][ T2936] syzkaller0: entered allmulticast mode [ 847.189966][ T2693] veth0_macvtap: entered promiscuous mode [ 848.862348][ T2693] veth1_macvtap: entered promiscuous mode [ 848.971776][ T2693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.998280][ T2729] veth0_vlan: entered promiscuous mode [ 849.028255][ T2693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.037833][ T2729] veth1_vlan: entered promiscuous mode [ 849.183815][ T2729] veth0_macvtap: entered promiscuous mode [ 849.224651][ T2729] veth1_macvtap: entered promiscuous mode [ 849.258839][ T2988] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.12732'. [ 849.300579][ T2757] veth0_vlan: entered promiscuous mode [ 849.339254][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.369568][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.408467][ T2757] veth1_vlan: entered promiscuous mode [ 849.514780][ T2729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.530963][ T2729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.588316][T32095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.609156][T32095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.693122][ T2757] veth0_macvtap: entered promiscuous mode [ 849.742409][ T2757] veth1_macvtap: entered promiscuous mode [ 849.852227][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.865198][ T2757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.885774][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.932608][ T2757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.998028][ T3002] netlink: zone id is out of range [ 850.013968][ T3002] netlink: zone id is out of range [ 850.026112][ T3002] netlink: zone id is out of range [ 850.031609][ T3002] netlink: zone id is out of range [ 850.055735][T32093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.063685][ T3002] netlink: zone id is out of range [ 850.063719][ T3002] netlink: zone id is out of range [ 850.077449][ T3002] netlink: zone id is out of range [ 850.084819][ T3002] netlink: zone id is out of range [ 850.086512][T32093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.094309][ T3002] netlink: zone id is out of range [ 850.280664][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.291139][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.404687][T32093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 850.424328][T32093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.712462][ T3049] syzkaller0: entered promiscuous mode [ 851.741210][ T3049] syzkaller0: entered allmulticast mode [ 852.590511][ T3059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12757'. [ 852.619320][ T3059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12757'. [ 856.781315][ T3126] option changes via remount are deprecated (pid=3125 comm=syz.2.12783) [ 857.793057][ T3152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12791'. [ 860.209358][ T3167] sch_tbf: peakrate 188 is lower than or equals to rate 7012629537550284465 ! [ 864.805095][ T3316] netlink: 'syz.1.12837': attribute type 4 has an invalid length. [ 866.610667][ T3354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12847'. [ 867.182532][ T3371] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12853'. [ 867.192436][ T3371] ksmbd: Unknown IPC event: 3, ignore. [ 867.320793][T30918] Bluetooth: hci0: unexpected event 0x03 length: 151 > 11 [ 868.692308][ T3430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12870'. [ 868.711321][ T3430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12870'. [ 870.182466][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.188910][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 874.285629][ T3525] netlink: 'syz.6.12905': attribute type 8 has an invalid length. [ 874.299122][ T3525] netlink: 48 bytes leftover after parsing attributes in process `syz.6.12905'. [ 875.334508][ T3536] syz.0.12909: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 875.353402][ T3536] CPU: 1 UID: 0 PID: 3536 Comm: syz.0.12909 Not tainted syzkaller #0 PREEMPT(full) [ 875.353430][ T3536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 875.353443][ T3536] Call Trace: [ 875.353460][ T3536] [ 875.353476][ T3536] dump_stack_lvl+0xe8/0x150 [ 875.353627][ T3536] warn_alloc+0x249/0x340 [ 875.353711][ T3536] ? stack_trace_save+0xa9/0x100 [ 875.353808][ T3536] ? __pfx_warn_alloc+0x10/0x10 [ 875.353943][ T3536] ? kasan_save_track+0x4f/0x80 [ 875.353981][ T3536] ? kasan_save_track+0x3e/0x80 [ 875.354009][ T3536] ? __kasan_kmalloc+0x93/0xb0 [ 875.354038][ T3536] ? __kmalloc_cache_noprof+0x31c/0x660 [ 875.354074][ T3536] ? xskq_create+0x56/0x170 [ 875.354226][ T3536] ? xsk_setsockopt+0x603/0x990 [ 875.354258][ T3536] ? do_sock_setsockopt+0x17c/0x1b0 [ 875.354362][ T3536] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 875.354400][ T3536] ? do_syscall_64+0x14d/0xf80 [ 875.354490][ T3536] __vmalloc_node_range_noprof+0x132/0x1730 [ 875.354839][ T3536] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 875.354965][ T3536] ? __kasan_kmalloc+0x93/0xb0 [ 875.355072][ T3536] vmalloc_user_noprof+0xad/0xe0 [ 875.355120][ T3536] ? xskq_create+0xbf/0x170 [ 875.355187][ T3536] xskq_create+0xbf/0x170 [ 875.355270][ T3536] xsk_init_queue+0x8a/0xe0 [ 875.355352][ T3536] xsk_setsockopt+0x603/0x990 [ 875.355436][ T3536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 875.355494][ T3536] ? __pfx_aa_sk_perm+0x10/0x10 [ 875.355664][ T3536] ? __fget_files+0x2a/0x420 [ 875.355717][ T3536] ? aa_sock_opt_perm+0xff/0x1a0 [ 875.355829][ T3536] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 875.355881][ T3536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 875.355966][ T3536] do_sock_setsockopt+0x17c/0x1b0 [ 875.356069][ T3536] __x64_sys_setsockopt+0x13d/0x1b0 [ 875.356182][ T3536] do_syscall_64+0x14d/0xf80 [ 875.356212][ T3536] ? trace_irq_disable+0x3b/0x150 [ 875.356263][ T3536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.356322][ T3536] ? clear_bhb_loop+0x40/0x90 [ 875.356398][ T3536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.356435][ T3536] RIP: 0033:0x7f0e6039c799 [ 875.356478][ T3536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.356497][ T3536] RSP: 002b:00007f0e6131e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 875.356519][ T3536] RAX: ffffffffffffffda RBX: 00007f0e60615fa0 RCX: 00007f0e6039c799 [ 875.356534][ T3536] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 875.356546][ T3536] RBP: 00007f0e60432bd9 R08: 0000000000000004 R09: 0000000000000000 [ 875.356558][ T3536] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 875.356571][ T3536] R13: 00007f0e60616038 R14: 00007f0e60615fa0 R15: 00007ffe78f837e8 [ 875.356764][ T3536] [ 875.425673][ T3541] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12912'. [ 875.483228][ T3539] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12911'. [ 875.700375][ T3536] Mem-Info: [ 875.703595][ T3536] active_anon:10888 inactive_anon:0 isolated_anon:0 [ 875.703595][ T3536] active_file:21612 inactive_file:40648 isolated_file:0 [ 875.703595][ T3536] unevictable:768 dirty:327 writeback:0 [ 875.703595][ T3536] slab_reclaimable:14337 slab_unreclaimable:105778 [ 875.703595][ T3536] mapped:29258 shmem:1385 pagetables:4201 [ 875.703595][ T3536] sec_pagetables:0 bounce:0 [ 875.703595][ T3536] kernel_misc_reclaimable:0 [ 875.703595][ T3536] free:1265882 free_pcp:28791 free_cma:0 [ 875.774481][ T3536] Node 0 active_anon:43552kB inactive_anon:0kB active_file:86448kB inactive_file:162392kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:47400kB dirty:1304kB writeback:0kB shmem:4004kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13808kB pagetables:16644kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 875.808589][ T3536] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:69632kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 875.862913][ T3536] Node 0 DMA free:11068kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:196kB local_pcp:88kB free_cma:0kB [ 876.002240][ T3536] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 876.009306][ T3536] Node 0 DMA32 free:1349724kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43544kB inactive_anon:0kB active_file:86448kB inactive_file:162392kB unevictable:1536kB writepending:1312kB zspages:0kB present:3129332kB managed:2552812kB mlocked:0kB bounce:0kB free_pcp:55840kB local_pcp:20084kB free_cma:0kB [ 876.052428][ T3536] lowmem_reserve[]: 0 0 0 0 0 [ 876.057872][ T3536] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 876.090608][ T3536] lowmem_reserve[]: 0 0 0 0 0 [ 876.098003][ T3536] Node 1 Normal free:3711404kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:53420kB local_pcp:28356kB free_cma:0kB [ 876.220680][ T3536] lowmem_reserve[]: 0 0 0 0 0 [ 876.225495][ T3536] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11068kB [ 876.273160][ T3552] vcan0: entered allmulticast mode [ 876.278718][ T3536] Node 0 DMA32: 2713*4kB (UME) 5953*8kB (UME) 2135*16kB (UME) 1134*32kB (UME) 1303*64kB (UME) 1156*128kB (UME) 816*256kB (UM) 556*512kB (UM) 288*1024kB (UM) 91*2048kB (UM) 4*4096kB (U) = 1351516kB [ 876.329524][ T3536] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 876.411469][ T3536] Node 1 Normal: 4*4kB (UM) 12*8kB (UM) 13*16kB (UME) 7*32kB (UME) 11*64kB (UME) 10*128kB (UME) 10*256kB (UME) 9*512kB (UME) 7*1024kB (UM) 6*2048kB (UE) 899*4096kB (UM) = 3711456kB [ 876.433286][ T3536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.465758][ T3536] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 876.482494][ T3536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 876.495615][ T3536] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 876.507292][ T3536] 63642 total pagecache pages [ 876.512053][ T3536] 1 pages in swap cache [ 876.516711][ T3536] Free swap = 124992kB [ 876.520922][ T3536] Total swap = 124996kB [ 876.525097][ T3536] 2097051 pages RAM [ 876.549472][ T3536] 0 pages HighMem/MovableOnly [ 876.569739][ T3536] 427012 pages reserved [ 876.583881][ T3536] 0 pages cma reserved [ 879.621262][ T3579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12926'. [ 879.727132][ T3588] netlink: 'syz.2.12931': attribute type 1 has an invalid length. [ 879.765407][ T3588] netlink: 'syz.2.12931': attribute type 4 has an invalid length. [ 879.801853][ T3592] netlink: 'syz.2.12931': attribute type 1 has an invalid length. [ 879.803672][ T3588] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.12931'. [ 879.852609][ T3592] netlink: 'syz.2.12931': attribute type 4 has an invalid length. [ 879.892127][ T3592] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.12931'. [ 888.094578][ T3669] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 888.349378][ T29] audit: type=1107 audit(1772853798.806:10): pid=3674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='O' [ 888.618206][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 888.633420][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 888.646297][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 888.664089][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 888.671972][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 889.467874][ T3706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 889.532646][ T3711] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12981'. [ 890.736162][ T5829] Bluetooth: hci2: command tx timeout [ 892.818362][ T5829] Bluetooth: hci2: command tx timeout [ 893.431348][ T3741] sctp: [Deprecated]: syz.6.12992 (pid 3741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 893.431348][ T3741] Use struct sctp_sack_info instead [ 894.896847][ T5829] Bluetooth: hci2: command tx timeout [ 895.478745][ T3684] chnl_net:caif_netlink_parms(): no params data found [ 895.684394][ T3798] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13006'. [ 895.744974][ T3802] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.13007'. [ 895.786064][ T3805] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13006'. [ 896.133971][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.152821][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.170486][ T3684] bridge_slave_0: entered allmulticast mode [ 896.191313][ T3684] bridge_slave_0: entered promiscuous mode [ 896.338740][ T3827] netlink: 40 bytes leftover after parsing attributes in process `syz.6.13012'. [ 896.355631][ T3818] syzkaller0: entered promiscuous mode [ 896.355661][ T3818] syzkaller0: entered allmulticast mode [ 896.369595][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.382852][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.394462][ T3684] bridge_slave_1: entered allmulticast mode [ 896.404784][ T3684] bridge_slave_1: entered promiscuous mode [ 896.976436][ T5829] Bluetooth: hci2: command tx timeout [ 899.808463][ T3684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 899.838116][ T3684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.022196][ T3896] netlink: 204 bytes leftover after parsing attributes in process `syz.0.13037'. [ 902.193851][ T3919] sctp: [Deprecated]: syz.6.13046 (pid 3919) Use of struct sctp_assoc_value in delayed_ack socket option. [ 902.193851][ T3919] Use struct sctp_sack_info instead [ 903.046480][ T3930] netlink: 'syz.6.13050': attribute type 9 has an invalid length. [ 903.054418][ T3930] netlink: 'syz.6.13050': attribute type 11 has an invalid length. [ 903.062690][ T3930] netlink: 'syz.6.13050': attribute type 12 has an invalid length. [ 903.070808][ T3930] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.13050'. [ 903.084048][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13050'. [ 903.885356][ T3684] team0: Port device team_slave_0 added [ 903.899188][ T3684] team0: Port device team_slave_1 added [ 903.971479][ T3684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 903.996237][ T3684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.095414][ T3684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.128639][ T3684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.157968][ T3684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.187942][ T3684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.297538][ T3684] hsr_slave_0: entered promiscuous mode [ 904.307710][ T3684] hsr_slave_1: entered promiscuous mode [ 904.689203][ T3684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 904.814834][ T3962] net_ratelimit: 78 callbacks suppressed [ 904.815052][ T3962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 905.324632][ T3684] 8021q: adding VLAN 0 to HW filter on device team0 [ 905.382587][T32094] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.389806][T32094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 905.450968][T32094] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.458154][T32094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.653570][ T3969] netlink: 'syz.0.13064': attribute type 21 has an invalid length. [ 905.972719][ T3684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.402637][ T3684] veth0_vlan: entered promiscuous mode [ 906.421165][ T3684] veth1_vlan: entered promiscuous mode [ 906.466865][ T3684] veth0_macvtap: entered promiscuous mode [ 906.492049][ T3684] veth1_macvtap: entered promiscuous mode [ 906.535416][ T3684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 906.548798][ T3684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.485387][ T3991] syzkaller0: entered promiscuous mode [ 907.502469][ T3991] syzkaller0: entered allmulticast mode [ 907.546146][T32095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.567035][T32095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.295613][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.315051][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.467945][ T4056] netlink: 165240 bytes leftover after parsing attributes in process `syz.1.13089'. [ 913.098654][ T4102] syzkaller0: entered promiscuous mode [ 913.104205][ T4102] syzkaller0: entered allmulticast mode [ 914.748609][ T5829] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 914.806812][ T5829] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 914.993355][ T4160] netlink: 17780 bytes leftover after parsing attributes in process `syz.3.13120'. [ 916.835727][ T4173] netlink: 10 bytes leftover after parsing attributes in process `syz.3.13125'. [ 918.652305][ T4239] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.13153'. [ 919.293232][ T4259] netlink: 165240 bytes leftover after parsing attributes in process `syz.0.13161'. [ 919.328527][ T4260] netlink: 'syz.5.13163': attribute type 6 has an invalid length. [ 919.420844][T30918] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 919.430421][T30918] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 919.438467][T30918] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 919.447666][T30918] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 919.466624][T30918] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 920.006218][ T4261] chnl_net:caif_netlink_parms(): no params data found [ 920.042835][ T4286] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13172'. [ 920.431780][ T4296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13175'. [ 921.546361][ T5829] Bluetooth: hci3: command tx timeout [ 921.843972][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.851303][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.859642][ T4261] bridge_slave_0: entered allmulticast mode [ 921.868697][ T4261] bridge_slave_0: entered promiscuous mode [ 921.877877][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.885153][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.892582][ T4261] bridge_slave_1: entered allmulticast mode [ 921.901248][ T4261] bridge_slave_1: entered promiscuous mode [ 921.948873][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 921.962248][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.000797][ T4310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13179'. [ 922.299766][ T4261] team0: Port device team_slave_0 added [ 922.325254][ T4261] team0: Port device team_slave_1 added [ 922.664589][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.679598][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.733837][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.916508][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 922.923551][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 922.997634][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 923.221147][ T4261] hsr_slave_0: entered promiscuous mode [ 923.228641][ T4261] hsr_slave_1: entered promiscuous mode [ 923.235118][ T4261] debugfs: 'hsr0' already exists in 'hsr' [ 923.247510][ T4261] Cannot create hsr debugfs directory [ 923.275462][ T4331] netlink: 'syz.3.13183': attribute type 1 has an invalid length. [ 923.338457][ T4331] netlink: 'syz.3.13183': attribute type 1 has an invalid length. [ 923.391259][ T4334] netlink: 7 bytes leftover after parsing attributes in process `syz.6.13184'. [ 923.430837][ T4334] netlink: 7 bytes leftover after parsing attributes in process `syz.6.13184'. [ 923.616491][ T5829] Bluetooth: hci3: command tx timeout [ 924.442292][ T4355] netlink: 'syz.6.13193': attribute type 9 has an invalid length. [ 924.451749][ T4355] netlink: 'syz.6.13193': attribute type 11 has an invalid length. [ 924.459879][ T4355] netlink: 'syz.6.13193': attribute type 12 has an invalid length. [ 924.469563][ T4355] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.13193'. [ 924.497428][ T4355] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13193'. [ 924.871506][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.902874][ T4365] netlink: 'syz.3.13195': attribute type 21 has an invalid length. [ 924.938642][ T4365] IPv6: NLM_F_CREATE should be specified when creating new route [ 925.068817][ T4261] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.154942][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.162241][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.257798][ T5829] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 925.293198][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.300502][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.696142][ T5829] Bluetooth: hci3: command tx timeout [ 926.766351][ T1093] bridge_slave_1: left allmulticast mode [ 926.772081][ T1093] bridge_slave_1: left promiscuous mode [ 926.797016][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.872204][ T1093] bridge_slave_0: left allmulticast mode [ 926.892484][ T1093] bridge_slave_0: left promiscuous mode [ 926.916785][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.327636][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 927.396734][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 927.464513][ T1093] bond0 (unregistering): Released all slaves [ 927.540103][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.683421][T30918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 927.693283][T30918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 927.702674][T30918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 927.718760][T30918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 927.726482][T30918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 927.776156][ T5829] Bluetooth: hci3: command tx timeout [ 928.122726][ T1093] hsr_slave_0: left promiscuous mode [ 928.140946][ T1093] hsr_slave_1: left promiscuous mode [ 928.160345][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 928.212781][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.295192][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.315501][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.372394][ T1093] veth1_macvtap: left promiscuous mode [ 928.379178][ T1093] veth0_macvtap: left promiscuous mode [ 928.384799][ T1093] veth1_vlan: left promiscuous mode [ 928.393570][ T1093] veth0_vlan: left promiscuous mode [ 928.833551][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 928.853797][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 929.111096][ T4457] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 929.117714][ T4457] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 929.363233][ T4460] syzkaller0: entered promiscuous mode [ 929.403590][ T4460] syzkaller0: entered allmulticast mode [ 929.788322][ T5829] Bluetooth: hci4: command tx timeout [ 929.939800][T30918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 929.950276][T30918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 929.958268][T30918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 929.967041][T30918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 929.980744][T30918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 931.632457][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.639849][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.863276][ T5829] Bluetooth: hci4: command tx timeout [ 932.098324][ T5829] Bluetooth: hci0: command tx timeout [ 932.403086][ T4261] veth0_vlan: entered promiscuous mode [ 932.470068][ T4261] veth1_vlan: entered promiscuous mode [ 932.513176][ T4416] chnl_net:caif_netlink_parms(): no params data found [ 933.017499][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.024936][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.032587][ T4416] bridge_slave_0: entered allmulticast mode [ 933.040722][ T4416] bridge_slave_0: entered promiscuous mode [ 933.073048][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.094245][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.102547][ T4416] bridge_slave_1: entered allmulticast mode [ 933.110682][ T4416] bridge_slave_1: entered promiscuous mode [ 933.128916][ T4505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13239'. [ 933.174158][ T1093] bridge_slave_1: left allmulticast mode [ 933.182567][ T1093] bridge_slave_1: left promiscuous mode [ 933.190339][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.209561][ T1093] bridge_slave_0: left allmulticast mode [ 933.215431][ T1093] bridge_slave_0: left promiscuous mode [ 933.221858][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.489372][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.505075][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.520350][ T1093] bond0 (unregistering): Released all slaves [ 933.567280][ T4416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.580596][ T4416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 933.604035][ T4261] veth0_macvtap: entered promiscuous mode [ 933.615092][ T4261] veth1_macvtap: entered promiscuous mode [ 933.643991][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 933.656847][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 933.754262][ T4470] chnl_net:caif_netlink_parms(): no params data found [ 933.937090][ T5829] Bluetooth: hci4: command tx timeout [ 934.003080][ T4416] team0: Port device team_slave_0 added [ 934.023977][ T4416] team0: Port device team_slave_1 added [ 934.176617][ T5829] Bluetooth: hci0: command tx timeout [ 934.295548][ T4416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.316041][ T4416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.376539][ T4416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.400895][ T4470] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.411652][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.424599][ T4470] bridge_slave_0: entered allmulticast mode [ 934.434179][ T4470] bridge_slave_0: entered promiscuous mode [ 934.448530][ T4470] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.466242][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.473525][ T4470] bridge_slave_1: entered allmulticast mode [ 934.493338][ T4470] bridge_slave_1: entered promiscuous mode [ 934.542900][ T4416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.550395][ T4416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.586883][ T4416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.669831][ T4416] hsr_slave_0: entered promiscuous mode [ 934.676798][ T4416] hsr_slave_1: entered promiscuous mode [ 934.683209][ T4416] debugfs: 'hsr0' already exists in 'hsr' [ 934.689487][ T4416] Cannot create hsr debugfs directory [ 934.709207][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.726016][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.764323][ T4470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.850999][ T1093] hsr_slave_0: left promiscuous mode [ 934.858234][ T1093] hsr_slave_1: left promiscuous mode [ 934.865034][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.874642][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.882897][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.890890][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 934.903987][ T1093] veth1_macvtap: left promiscuous mode [ 934.910972][ T1093] veth0_macvtap: left promiscuous mode [ 934.916680][ T1093] veth1_vlan: left promiscuous mode [ 934.923375][ T1093] veth0_vlan: left promiscuous mode [ 935.207629][ T5829] Bluetooth: hci1: unexpected event 0x30 length: 151 > 3 [ 935.275513][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 935.309286][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 935.496689][ T4470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.555574][ T4531] netlink: 'syz.0.13247': attribute type 10 has an invalid length. [ 935.564980][ T4531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13247'. [ 935.577075][ T4518] syzkaller0: entered promiscuous mode [ 935.582554][ T4518] syzkaller0: entered allmulticast mode [ 935.617641][ T4531] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 935.627766][ T4531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 935.843106][ T4535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13249'. [ 936.019953][ T5829] Bluetooth: hci4: command tx timeout [ 936.266455][ T5829] Bluetooth: hci0: command tx timeout [ 937.029310][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 937.045081][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 937.099695][ T4470] team0: Port device team_slave_0 added [ 937.201620][ T4470] team0: Port device team_slave_1 added [ 937.348649][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.355793][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.386175][ T4470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.421137][ T4470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.428513][ T4470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.476335][ T4470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.525283][ T4545] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13252'. [ 937.748210][ T4470] hsr_slave_0: entered promiscuous mode [ 937.761182][ T4470] hsr_slave_1: entered promiscuous mode [ 937.768078][ T4470] debugfs: 'hsr0' already exists in 'hsr' [ 937.774001][ T4470] Cannot create hsr debugfs directory [ 938.135757][ T4416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.194142][ T4416] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.227319][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.234543][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.270709][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.277930][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.337424][ T5829] Bluetooth: hci0: command tx timeout [ 938.412526][ T4470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.447298][ T4470] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.473233][T32093] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.480476][T32093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.491553][T32093] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.498735][T32093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.829991][ T4416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 938.955178][ T4470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.364305][ T4416] veth0_vlan: entered promiscuous mode [ 939.395461][ T4416] veth1_vlan: entered promiscuous mode [ 939.406059][ T4470] veth0_vlan: entered promiscuous mode [ 939.440636][ T4470] veth1_vlan: entered promiscuous mode [ 939.511872][ T4416] veth0_macvtap: entered promiscuous mode [ 939.541658][ T4470] veth0_macvtap: entered promiscuous mode [ 939.553113][ T4416] veth1_macvtap: entered promiscuous mode [ 939.580700][ T4470] veth1_macvtap: entered promiscuous mode [ 939.651836][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.675351][ T4416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.692586][ T4416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.715843][ T4470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 940.080570][T32094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.106369][T32094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.133533][T32095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.152878][T32095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.240633][ T4617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13271'. [ 942.318337][T32095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.327412][T32095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.659760][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 942.667755][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 942.965367][ T4636] netlink: 'syz.0.13278': attribute type 8 has an invalid length. [ 942.974483][ T4636] netem: change failed [ 943.709733][ T4644] syzkaller0: entered promiscuous mode [ 943.715266][ T4644] syzkaller0: entered allmulticast mode [ 946.086747][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13295'. [ 947.099690][T32093] bridge_slave_1: left allmulticast mode [ 947.105395][T32093] bridge_slave_1: left promiscuous mode [ 947.148148][T32093] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.184307][T30918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 947.194385][T30918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 947.204073][T30918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 947.214371][T30918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 947.223511][T30918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 947.273979][T32093] bridge_slave_0: left allmulticast mode [ 947.279951][T32093] bridge_slave_0: left promiscuous mode [ 947.289622][T32093] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.096428][T32093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.110269][T32093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.122135][T32093] bond0 (unregistering): Released all slaves [ 948.734484][T32093] hsr_slave_0: left promiscuous mode [ 948.741899][T32093] hsr_slave_1: left promiscuous mode [ 948.769036][T32093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 948.786494][T32093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.803621][T32093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 948.823902][T32093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 948.931913][T32093] veth1_macvtap: left promiscuous mode [ 948.938672][T32093] veth0_macvtap: left promiscuous mode [ 948.944282][T32093] veth1_vlan: left promiscuous mode [ 948.952520][T32093] veth0_vlan: left promiscuous mode [ 949.299408][T30918] Bluetooth: hci2: command tx timeout [ 949.714781][T32093] team0 (unregistering): Port device team_slave_1 removed [ 949.742074][T32093] team0 (unregistering): Port device team_slave_0 removed [ 949.768854][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13315'. [ 950.061290][ T4719] netlink: 'syz.6.13314': attribute type 29 has an invalid length. [ 950.090656][ T4725] netlink: 'syz.6.13314': attribute type 29 has an invalid length. [ 950.494145][ T4685] chnl_net:caif_netlink_parms(): no params data found [ 951.014743][ T4685] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.037498][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.052603][ T4685] bridge_slave_0: entered allmulticast mode [ 951.116120][ T4685] bridge_slave_0: entered promiscuous mode [ 951.133585][ T4685] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.166589][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.173851][ T4685] bridge_slave_1: entered allmulticast mode [ 951.223815][ T4685] bridge_slave_1: entered promiscuous mode [ 951.377370][T30918] Bluetooth: hci2: command tx timeout [ 951.410142][ T4685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.469621][ T4685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.679517][ T4685] team0: Port device team_slave_0 added [ 951.689494][ T4685] team0: Port device team_slave_1 added [ 951.798792][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.805811][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.833575][ T4685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.928790][ T4685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.935831][ T4685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 951.963112][ T4685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.136848][ T4685] hsr_slave_0: entered promiscuous mode [ 952.143632][ T4685] hsr_slave_1: entered promiscuous mode [ 952.476249][T30918] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 952.673334][ T4777] netlink: 'syz.4.13328': attribute type 39 has an invalid length. [ 952.685251][T32093] bridge_slave_1: left allmulticast mode [ 952.696284][T32093] bridge_slave_1: left promiscuous mode [ 952.702090][T32093] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.717177][T32093] bridge_slave_0: left allmulticast mode [ 952.722883][T32093] bridge_slave_0: left promiscuous mode [ 952.729127][T32093] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.963790][T32093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.975278][T32093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.987373][T32093] bond0 (unregistering): Released all slaves [ 953.017311][ T4777] veth0_macvtap: left promiscuous mode [ 953.108367][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 953.124062][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 953.141399][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 953.151522][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 953.160980][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 953.456707][T30918] Bluetooth: hci2: command tx timeout [ 953.585507][T32093] hsr_slave_0: left promiscuous mode [ 953.592797][T32093] hsr_slave_1: left promiscuous mode [ 953.601728][T32093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 953.637366][T32093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 953.660411][T32093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 953.673469][T32093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 953.694178][T32093] veth1_macvtap: left promiscuous mode [ 953.706304][T32093] veth0_macvtap: left promiscuous mode [ 953.711956][T32093] veth1_vlan: left promiscuous mode [ 953.723970][T32093] veth0_vlan: left promiscuous mode [ 954.171636][T32093] team0 (unregistering): Port device team_slave_1 removed [ 954.240429][T32093] team0 (unregistering): Port device team_slave_0 removed [ 954.498647][ T4685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.589943][ T4685] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.652367][ T4785] chnl_net:caif_netlink_parms(): no params data found [ 954.740377][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.747588][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.843481][T32095] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.850729][T32095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.024628][ T4785] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.048190][ T4785] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.066228][ T4785] bridge_slave_0: entered allmulticast mode [ 955.099788][ T4785] bridge_slave_0: entered promiscuous mode [ 955.115027][ T4785] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.127067][ T4785] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.135075][ T4785] bridge_slave_1: entered allmulticast mode [ 955.143438][ T4785] bridge_slave_1: entered promiscuous mode [ 955.217784][T30918] Bluetooth: hci3: command tx timeout [ 955.537794][T30918] Bluetooth: hci2: command tx timeout [ 955.545106][ T4685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 955.579011][ T4785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.600652][ T4785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.020323][ T4785] team0: Port device team_slave_0 added [ 956.038420][ T4785] team0: Port device team_slave_1 added [ 956.170952][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.194189][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.223362][ T4785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.261060][ T4785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.268258][ T4785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 956.333101][ T4785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.491094][ T35] bridge_slave_1: left allmulticast mode [ 956.497216][ T35] bridge_slave_1: left promiscuous mode [ 956.503436][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.549279][ T35] bridge_slave_0: left allmulticast mode [ 956.570763][ T35] bridge_slave_0: left promiscuous mode [ 956.608956][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.296531][T30918] Bluetooth: hci3: command tx timeout [ 957.312984][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 957.331393][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.342459][ T35] bond0 (unregistering): Released all slaves [ 957.368902][ T4856] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13357'. [ 957.409744][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 957.420244][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 957.436232][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 957.448259][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 957.457303][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 957.562722][ T4785] hsr_slave_0: entered promiscuous mode [ 957.569958][ T4785] hsr_slave_1: entered promiscuous mode [ 957.577538][ T4785] debugfs: 'hsr0' already exists in 'hsr' [ 957.583380][ T4785] Cannot create hsr debugfs directory [ 957.597959][ T4685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.145612][ T35] hsr_slave_0: left promiscuous mode [ 958.153411][ T35] hsr_slave_1: left promiscuous mode [ 958.161598][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 958.172415][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 958.184912][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 958.192738][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.215323][ T35] veth1_macvtap: left promiscuous mode [ 958.229185][ T35] veth1_vlan: left promiscuous mode [ 958.246746][ T35] veth0_vlan: left promiscuous mode [ 958.592314][ T35] team0 (unregistering): Port device team_slave_1 removed [ 958.626544][ T35] team0 (unregistering): Port device team_slave_0 removed [ 958.942378][ T4884] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.13365'. [ 959.231386][ T4685] veth0_vlan: entered promiscuous mode [ 959.245361][ T4685] veth1_vlan: entered promiscuous mode [ 959.310909][T30918] Bluetooth: hci1: command 0x0406 tx timeout [ 959.387187][ T5829] Bluetooth: hci3: command tx timeout [ 959.410836][ T4863] chnl_net:caif_netlink_parms(): no params data found [ 959.474903][ T4785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.541257][ T5829] Bluetooth: hci0: command tx timeout [ 959.541744][ T4785] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.599870][ T4685] veth0_macvtap: entered promiscuous mode [ 959.625006][T32097] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.632209][T32097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.645745][T32097] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.652954][T32097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.684644][ T35] bridge_slave_1: left allmulticast mode [ 959.690656][ T35] bridge_slave_1: left promiscuous mode [ 959.700740][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.714577][ T35] bridge_slave_0: left allmulticast mode [ 959.720592][ T35] bridge_slave_0: left promiscuous mode [ 959.729502][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.928785][T30918] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 959.958196][T30918] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 959.968894][T30918] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 959.989229][T30918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 959.998538][T30918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 960.025795][ T4920] netlink: 'syz.0.13375': attribute type 10 has an invalid length. [ 960.093324][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.104999][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.117107][ T35] bond0 (unregistering): Released all slaves [ 960.131596][ T4685] veth1_macvtap: entered promiscuous mode [ 960.158355][ T4920] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 960.235522][ T4863] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.242764][ T4863] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.250205][ T4863] bridge_slave_0: entered allmulticast mode [ 960.259346][ T4863] bridge_slave_0: entered promiscuous mode [ 960.271438][ T4863] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.279428][ T4863] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.286722][ T4863] bridge_slave_1: entered allmulticast mode [ 960.294543][ T4863] bridge_slave_1: entered promiscuous mode [ 960.399570][ T4863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.465354][ T4863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.502722][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.581694][ T4863] team0: Port device team_slave_0 added [ 960.592468][ T4863] team0: Port device team_slave_1 added [ 960.618899][ T4685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.643785][ T35] hsr_slave_0: left promiscuous mode [ 960.650509][ T35] hsr_slave_1: left promiscuous mode [ 960.658988][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.668657][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.676822][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.684564][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.701246][ T35] veth1_macvtap: left promiscuous mode [ 960.716122][ T35] veth0_macvtap: left promiscuous mode [ 960.727215][ T35] veth1_vlan: left promiscuous mode [ 960.732833][ T35] veth0_vlan: left promiscuous mode [ 961.085705][ T35] team0 (unregistering): Port device team_slave_1 removed [ 961.113482][ T35] team0 (unregistering): Port device team_slave_0 removed [ 961.401292][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 961.421601][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.451296][ T4863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 961.466146][ T5829] Bluetooth: hci3: command tx timeout [ 961.484241][ T4863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 961.492688][ T4863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.520536][ T4863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.592355][ T4863] hsr_slave_0: entered promiscuous mode [ 961.611604][ T4863] hsr_slave_1: entered promiscuous mode [ 961.617804][ T5829] Bluetooth: hci0: command tx timeout [ 961.646176][ T4863] debugfs: 'hsr0' already exists in 'hsr' [ 961.663243][ T4863] Cannot create hsr debugfs directory [ 962.040856][ T4917] chnl_net:caif_netlink_parms(): no params data found [ 962.106916][ T5829] Bluetooth: hci4: command tx timeout [ 962.167083][T32093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.173381][ T4785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 962.174955][T32093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.356105][ T4917] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.367971][ T4917] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.375347][ T4917] bridge_slave_0: entered allmulticast mode [ 962.384581][ T4917] bridge_slave_0: entered promiscuous mode [ 962.409416][T32095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.433799][ T4917] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.442989][T32095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.452080][ T4917] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.461032][ T4917] bridge_slave_1: entered allmulticast mode [ 962.476180][ T4917] bridge_slave_1: entered promiscuous mode [ 962.581500][ T4917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.618339][ T4917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.683786][ T4960] netlink: 112 bytes leftover after parsing attributes in process `syz.7.13299'. [ 962.710162][ T4917] team0: Port device team_slave_0 added [ 962.722178][ T4917] team0: Port device team_slave_1 added [ 962.765502][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.773143][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.805375][ T4917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.829012][ T4917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.843544][ T4917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.872777][ T4917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.942605][ T4863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.003641][ T4785] veth0_vlan: entered promiscuous mode [ 963.052243][ T4917] hsr_slave_0: entered promiscuous mode [ 963.062271][ T4917] hsr_slave_1: entered promiscuous mode [ 963.070716][ T4917] debugfs: 'hsr0' already exists in 'hsr' [ 963.076799][ T4917] Cannot create hsr debugfs directory [ 963.156664][ T4785] veth1_vlan: entered promiscuous mode [ 963.172905][ T4863] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.336626][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.343839][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.353350][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.360532][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.500339][ T4785] veth0_macvtap: entered promiscuous mode [ 963.555123][ T4785] veth1_macvtap: entered promiscuous mode [ 963.602432][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 963.644167][ T4785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 963.696848][ T5829] Bluetooth: hci0: command tx timeout [ 963.925700][ T4917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.040400][ T4991] syzkaller0: entered promiscuous mode [ 964.046011][ T4991] syzkaller0: entered allmulticast mode [ 964.069110][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.085522][ T4917] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.104251][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.138679][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.146151][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.176646][ T5829] Bluetooth: hci4: command tx timeout [ 964.182932][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.190146][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.216675][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.227894][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.400958][ T5829] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 965.791432][ T5829] Bluetooth: hci0: command tx timeout [ 966.050992][ T5014] netlink: 6068 bytes leftover after parsing attributes in process `syz.7.13398'. [ 966.244872][ T4863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.266390][ T5829] Bluetooth: hci4: command tx timeout [ 966.622320][ T5030] netlink: 212912 bytes leftover after parsing attributes in process `syz.7.13401'. [ 966.721606][ T4917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.999638][ T4863] veth0_vlan: entered promiscuous mode [ 967.031968][ T5045] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.13405'. [ 967.050784][ T4863] veth1_vlan: entered promiscuous mode [ 967.148032][ T4863] veth0_macvtap: entered promiscuous mode [ 967.182889][ T5050] netlink: 'syz.8.13407': attribute type 10 has an invalid length. [ 967.198930][ T4863] veth1_macvtap: entered promiscuous mode [ 968.336346][ T5829] Bluetooth: hci4: command tx timeout [ 970.731319][ T4863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.807214][ T4863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.168419][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.203026][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.223907][ T4917] veth0_vlan: entered promiscuous mode [ 971.303596][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 971.313842][ T4917] veth1_vlan: entered promiscuous mode [ 971.343682][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.389205][ T5829] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 971.455195][ T4917] veth0_macvtap: entered promiscuous mode [ 971.520339][ T4917] veth1_macvtap: entered promiscuous mode [ 971.561266][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.624888][ T4917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.830227][ T5829] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 971.938485][ T5094] netlink: 9 bytes leftover after parsing attributes in process `syz.8.13422'. [ 972.352684][ T5094] netlink: 9 bytes leftover after parsing attributes in process `syz.8.13422'. [ 972.520736][T32095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.538872][T32095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.635241][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.656349][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.954790][ T13] bridge_slave_1: left allmulticast mode [ 975.977588][ T13] bridge_slave_1: left promiscuous mode [ 975.992957][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.067829][ T13] bridge_slave_0: left allmulticast mode [ 976.073536][ T13] bridge_slave_0: left promiscuous mode [ 976.133094][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.746084][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 976.808502][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 977.038073][ T13] bond0 (unregistering): Released all slaves [ 977.117515][T30918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 977.129381][T30918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 977.141012][ T5145] netlink: 830 bytes leftover after parsing attributes in process `syz.6.13440'. [ 977.153889][T30918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 977.167378][T30918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 977.182599][T30918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 977.452070][ T5165] netlink: set zone limit has 4 unknown bytes [ 977.818049][ T5178] netlink: 'syz.0.13451': attribute type 1 has an invalid length. [ 977.865197][ T5178] netlink: 'syz.0.13451': attribute type 4 has an invalid length. [ 977.941673][ T5178] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.13451'. [ 979.242853][ T5199] netlink: 'syz.7.13456': attribute type 21 has an invalid length. [ 979.300349][T30918] Bluetooth: hci0: command tx timeout [ 979.422303][ T5200] block nbd0: not configured, cannot reconfigure [ 981.379719][T30918] Bluetooth: hci0: command tx timeout [ 981.445895][ T5186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13453'. [ 981.462765][ T5186] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13453'. [ 981.500243][ T5199] netlink: 'syz.7.13456': attribute type 1 has an invalid length. [ 982.018006][ T13] hsr_slave_0: left promiscuous mode [ 982.029801][ T13] hsr_slave_1: left promiscuous mode [ 982.049089][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.059322][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.081621][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.099044][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.202780][ T13] veth1_macvtap: left promiscuous mode [ 982.223028][ T13] veth0_macvtap: left promiscuous mode [ 982.244240][ T13] veth1_vlan: left promiscuous mode [ 982.254844][ T13] veth0_vlan: left promiscuous mode [ 982.644144][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13466'. [ 982.653736][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13466'. [ 982.668475][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13466'. [ 982.688674][ T5227] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13466'. [ 983.064462][ T13] team0 (unregistering): Port device team_slave_1 removed [ 983.111279][ T13] team0 (unregistering): Port device team_slave_0 removed [ 983.457365][T30918] Bluetooth: hci0: command tx timeout [ 983.618682][ T5166] chnl_net:caif_netlink_parms(): no params data found [ 983.914539][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.943996][ T5166] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.961373][ T5166] bridge_slave_0: entered allmulticast mode [ 983.985318][ T5166] bridge_slave_0: entered promiscuous mode [ 983.997517][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.004930][ T5166] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.014519][ T5166] bridge_slave_1: entered allmulticast mode [ 984.025421][ T5166] bridge_slave_1: entered promiscuous mode [ 984.244240][ T5166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.308530][ T5166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 985.129764][ T5166] team0: Port device team_slave_0 added [ 985.175870][ T5166] team0: Port device team_slave_1 added [ 985.393287][ T13] bridge_slave_1: left allmulticast mode [ 985.408132][ T13] bridge_slave_1: left promiscuous mode [ 985.419901][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.509556][ T13] bridge_slave_0: left allmulticast mode [ 985.515282][ T13] bridge_slave_0: left promiscuous mode [ 985.528394][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.536562][T30918] Bluetooth: hci0: command tx timeout [ 985.751562][T30918] Bluetooth: hci4: ISO packet too small [ 985.929058][ T13] bridge_slave_1: left allmulticast mode [ 985.947198][ T13] bridge_slave_1: left promiscuous mode [ 985.953051][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.972840][ T13] bridge_slave_0: left allmulticast mode [ 985.986195][ T13] bridge_slave_0: left promiscuous mode [ 985.993106][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.504257][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.516756][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.528286][ T13] bond0 (unregistering): Released all slaves [ 986.722702][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.733426][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.747309][ T13] bond0 (unregistering): Released all slaves [ 986.814448][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.836600][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 986.872280][ T5166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.005090][ T5317] syzkaller0: entered promiscuous mode [ 987.010787][ T5317] syzkaller0: entered allmulticast mode [ 987.032164][ T5166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.039544][ T5166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.068957][ T5166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.401282][ T5334] netlink: 100 bytes leftover after parsing attributes in process `syz.8.13502'. [ 987.997934][ T5345] netlink: 'syz.8.13506': attribute type 10 has an invalid length. [ 988.007064][ T5345] netlink: 55 bytes leftover after parsing attributes in process `syz.8.13506'. [ 988.180604][ T5349] netlink: 'syz.7.13508': attribute type 5 has an invalid length. [ 988.197783][ T5349] netlink: 176 bytes leftover after parsing attributes in process `syz.7.13508'. [ 989.583678][ T5166] hsr_slave_0: entered promiscuous mode [ 989.617415][ T5166] hsr_slave_1: entered promiscuous mode [ 989.623909][ T5166] debugfs: 'hsr0' already exists in 'hsr' [ 989.668726][ T5166] Cannot create hsr debugfs directory [ 990.486836][ T5382] netlink: 388 bytes leftover after parsing attributes in process `syz.6.13520'. [ 990.571870][ T13] hsr_slave_0: left promiscuous mode [ 990.586184][ T13] hsr_slave_1: left promiscuous mode [ 990.594621][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.602329][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.621615][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.638045][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.683629][ T5390] netlink: 168 bytes leftover after parsing attributes in process `syz.8.13522'. [ 990.713312][ T13] hsr_slave_0: left promiscuous mode [ 990.738878][ T13] hsr_slave_1: left promiscuous mode [ 990.755280][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 990.777095][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 990.793860][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 990.811330][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.377780][ T13] veth1_macvtap: left promiscuous mode [ 991.383458][ T13] veth0_macvtap: left promiscuous mode [ 991.470457][ T13] veth1_vlan: left promiscuous mode [ 991.506072][ T13] veth0_vlan: left promiscuous mode [ 991.521116][ T13] veth1_macvtap: left promiscuous mode [ 991.544917][ T13] veth0_macvtap: left promiscuous mode [ 991.561151][ T13] veth1_vlan: left promiscuous mode [ 991.576757][ T13] veth0_vlan: left promiscuous mode [ 991.630881][ T5400] delete_channel: no stack [ 991.666487][ T5403] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13529'. [ 992.103279][ T13] team0 (unregistering): Port device team_slave_1 removed [ 992.122473][ T13] team0 (unregistering): Port device team_slave_0 removed [ 992.398924][ T13] team0 (unregistering): Port device team_slave_1 removed [ 992.433975][ T13] team0 (unregistering): Port device team_slave_0 removed [ 992.830200][ T5166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 992.856078][ T5166] 8021q: adding VLAN 0 to HW filter on device team0 [ 992.887293][T32094] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.894545][T32094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 992.932243][T32094] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.939491][T32094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 993.063553][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.072796][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.283158][ T5166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 993.667036][ T5166] veth0_vlan: entered promiscuous mode [ 993.680399][ T5166] veth1_vlan: entered promiscuous mode [ 994.047472][ T5166] veth0_macvtap: entered promiscuous mode [ 994.083568][ T5166] veth1_macvtap: entered promiscuous mode [ 994.137776][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 994.208394][ T5166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 994.705310][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.719414][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.823216][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.835050][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.135272][ T5527] netlink: 'syz.6.13569': attribute type 3 has an invalid length. [ 999.144240][ T5527] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13569'. [ 999.422436][ T5538] netlink: 'syz.8.13573': attribute type 9 has an invalid length. [ 999.597382][ T5541] netlink: 100 bytes leftover after parsing attributes in process `syz.2.13575'. [ 1000.000979][ T5554] delete_channel: no stack [ 1001.870237][ T5589] delete_channel: no stack [ 1001.951685][ T5585] syzkaller0: entered promiscuous mode [ 1001.970389][ T5585] syzkaller0: entered allmulticast mode [ 1005.287543][T30918] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1006.117305][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13617'. [ 1006.168964][ T5662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13617'. [ 1006.547715][ T5668] netlink: 'syz.0.13620': attribute type 1 has an invalid length. [ 1006.577459][ T5668] netlink: 'syz.0.13620': attribute type 4 has an invalid length. [ 1006.608769][ T5668] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.13620'. [ 1008.248121][ T5673] netlink: 'syz.2.13621': attribute type 10 has an invalid length. [ 1009.090533][ T5688] netlink: 104 bytes leftover after parsing attributes in process `syz.8.13628'. [ 1012.821015][ T5715] netlink: 388 bytes leftover after parsing attributes in process `syz.2.13638'. [ 1013.122182][ T5722] sit0: entered allmulticast mode [ 1014.235530][T30918] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 1014.325589][ T5744] netlink: 'syz.0.13649': attribute type 10 has an invalid length. [ 1014.389754][ T5746] netlink: 'syz.2.13650': attribute type 6 has an invalid length. [ 1014.410233][ T5746] netlink: 3936 bytes leftover after parsing attributes in process `syz.2.13650'. [ 1014.444366][ T5746] netlink: 'syz.2.13650': attribute type 1 has an invalid length. [ 1014.462602][ T5746] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1014.859290][ T5761] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.212216][ T5750] netlink: 132 bytes leftover after parsing attributes in process `syz.7.13652'. [ 1016.269365][T30918] Bluetooth: hci3: command 0x2016 tx timeout [ 1017.360294][ T5799] syzkaller0: entered promiscuous mode [ 1017.365858][ T5799] syzkaller0: entered allmulticast mode [ 1017.497952][ T5809] netlink: 36 bytes leftover after parsing attributes in process `syz.6.13674'. [ 1018.341846][ T5829] Bluetooth: hci3: command 0x2016 tx timeout [ 1018.828735][T30918] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1020.515758][ T5845] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13688'. [ 1020.561074][ T5845] netlink: 'syz.2.13688': attribute type 6 has an invalid length. [ 1020.585335][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13688'. [ 1021.509861][ T5860] netlink: 'syz.8.13694': attribute type 21 has an invalid length. [ 1021.538223][ T5860] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13694'. [ 1021.551631][ T5860] netlink: 'syz.8.13694': attribute type 1 has an invalid length. [ 1021.793001][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13696'. [ 1021.819214][ T5866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13696'. [ 1022.354964][ T5882] openvswitch: netlink: IP tunnel dst address not specified [ 1023.326644][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13716'. [ 1023.615541][T30918] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1024.850967][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13731'. [ 1025.422358][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13725'. [ 1025.526332][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.8.13725'. [ 1025.617005][ T5951] netlink: 'syz.8.13725': attribute type 4 has an invalid length. [ 1025.711430][ T5829] Bluetooth: hci3: command 0x2016 tx timeout [ 1027.266393][ T5971] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13733'. [ 1027.497748][ T5982] netlink: 'syz.8.13736': attribute type 6 has an invalid length. [ 1027.556009][ T5982] netlink: 3936 bytes leftover after parsing attributes in process `syz.8.13736'. [ 1027.582942][ T5982] netlink: 'syz.8.13736': attribute type 1 has an invalid length. [ 1027.601108][ T5982] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1027.789353][T30918] Bluetooth: hci3: command 0x2016 tx timeout [ 1027.959111][ T5990] netlink: 'syz.8.13739': attribute type 6 has an invalid length. [ 1027.967702][ T5990] netlink: 140 bytes leftover after parsing attributes in process `syz.8.13739'. [ 1029.905794][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13742'. [ 1029.936704][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13742'. [ 1031.789368][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1031.809998][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1031.825006][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1031.846980][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1031.854930][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1032.208924][ T6029] chnl_net:caif_netlink_parms(): no params data found [ 1032.405373][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz.8.13748'. [ 1032.537850][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.545106][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.554079][ T6029] bridge_slave_0: entered allmulticast mode [ 1032.562155][ T6029] bridge_slave_0: entered promiscuous mode [ 1032.571768][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.579267][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.586728][ T6029] bridge_slave_1: entered allmulticast mode [ 1032.594580][ T6029] bridge_slave_1: entered promiscuous mode [ 1032.623460][ T85] bridge_slave_1: left allmulticast mode [ 1032.629441][ T85] bridge_slave_1: left promiscuous mode [ 1032.673363][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.887511][ T5829] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 1033.390474][ T85] bridge_slave_0: left allmulticast mode [ 1033.443888][ T85] bridge_slave_0: left promiscuous mode [ 1033.483896][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.937138][ T5829] Bluetooth: hci5: command tx timeout [ 1034.014427][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.037952][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.066798][ T85] bond0 (unregistering): Released all slaves [ 1034.126912][ T6029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.160465][ T6029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.365605][ T6070] netlink: 'syz.6.13769': attribute type 10 has an invalid length. [ 1034.591689][ T6081] netlink: 104 bytes leftover after parsing attributes in process `syz.8.13762'. [ 1035.499619][ T6029] team0: Port device team_slave_0 added [ 1035.655314][ T6029] team0: Port device team_slave_1 added [ 1035.782503][ T6109] netlink: 132 bytes leftover after parsing attributes in process `syz.6.13767'. [ 1036.016659][ T5829] Bluetooth: hci5: command tx timeout [ 1036.040841][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.055424][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.085833][ T6029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.225243][ T85] hsr_slave_0: left promiscuous mode [ 1036.630406][ T85] hsr_slave_1: left promiscuous mode [ 1036.644994][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.653517][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.664109][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.673734][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.691600][ T85] veth1_macvtap: left promiscuous mode [ 1036.697337][ T85] veth0_macvtap: left promiscuous mode [ 1036.702924][ T85] veth1_vlan: left promiscuous mode [ 1036.709892][ T85] veth0_vlan: left promiscuous mode [ 1038.096965][ T5829] Bluetooth: hci5: command tx timeout [ 1038.175776][ T85] team0 (unregistering): Port device team_slave_1 removed [ 1038.392957][ T85] team0 (unregistering): Port device team_slave_0 removed [ 1038.647523][ T6029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.654949][ T6029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.681494][ T6029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1038.706002][ T6132] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.13777'. [ 1039.122955][ T6029] hsr_slave_0: entered promiscuous mode [ 1039.171046][ T6029] hsr_slave_1: entered promiscuous mode [ 1039.507246][ T6171] pim6reg1: entered allmulticast mode [ 1040.183159][ T5829] Bluetooth: hci5: command tx timeout [ 1040.361526][ T85] bridge_slave_1: left allmulticast mode [ 1040.380446][ T85] bridge_slave_1: left promiscuous mode [ 1040.403749][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.574763][T30918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1040.585944][T30918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1040.594260][T30918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1040.603136][T30918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1040.610902][T30918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1041.568948][ T85] bridge_slave_0: left allmulticast mode [ 1041.574676][ T85] bridge_slave_0: left promiscuous mode [ 1041.620185][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.736115][ T5829] Bluetooth: hci2: command tx timeout [ 1044.816073][ T5829] Bluetooth: hci2: command tx timeout [ 1045.010219][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.021966][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.037797][ T85] bond0 (unregistering): Released all slaves [ 1045.742921][ T6218] mac80211_hwsim hwsim101 .3ãc¤±: renamed from wlan1 (while UP) [ 1046.424633][ T85] hsr_slave_0: left promiscuous mode [ 1046.442242][ T85] hsr_slave_1: left promiscuous mode [ 1046.449848][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.458198][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.474599][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.483947][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.543460][ T85] veth1_vlan: left promiscuous mode [ 1046.558672][ T85] veth0_vlan: left promiscuous mode [ 1046.897054][ T5829] Bluetooth: hci2: command tx timeout [ 1047.425151][ T85] team0 (unregistering): Port device team_slave_1 removed [ 1047.497234][ T85] team0 (unregistering): Port device team_slave_0 removed [ 1047.812396][ T6235] syzkaller0: entered allmulticast mode [ 1048.231188][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1048.254181][ T6029] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.279547][T32093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.286798][T32093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1048.315246][ T6186] chnl_net:caif_netlink_parms(): no params data found [ 1048.334999][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.342191][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1048.444470][ T6186] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.451806][ T6186] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.460251][ T6186] bridge_slave_0: entered allmulticast mode [ 1048.469178][ T6186] bridge_slave_0: entered promiscuous mode [ 1048.478895][ T6186] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.489510][ T6186] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.497265][ T6186] bridge_slave_1: entered allmulticast mode [ 1048.504483][ T6186] bridge_slave_1: entered promiscuous mode [ 1048.537817][ T6186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1048.551845][ T6186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.592364][ T6186] team0: Port device team_slave_0 added [ 1048.603217][ T6186] team0: Port device team_slave_1 added [ 1048.633374][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.640822][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.667225][ T6186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.679840][ T6186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.687378][ T6186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.713894][ T6186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.775455][ T6186] hsr_slave_0: entered promiscuous mode [ 1048.783460][ T6186] hsr_slave_1: entered promiscuous mode [ 1048.790353][ T6186] debugfs: 'hsr0' already exists in 'hsr' [ 1048.799610][ T6186] Cannot create hsr debugfs directory [ 1048.977849][ T5829] Bluetooth: hci2: command tx timeout [ 1048.983414][ T6029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.047577][ T6186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1049.068875][ T6186] 8021q: adding VLAN 0 to HW filter on device team0 [ 1049.098218][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.105388][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1049.124992][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.132201][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1049.325604][ T6029] veth0_vlan: entered promiscuous mode [ 1049.344047][ T6029] veth1_vlan: entered promiscuous mode [ 1049.381023][ T6029] veth0_macvtap: entered promiscuous mode [ 1049.399012][ T6029] veth1_macvtap: entered promiscuous mode [ 1049.423641][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1049.440419][ T6029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1049.496460][ T6186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1049.542415][T32094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.561340][T32094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.592250][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.601264][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1050.219071][ T6186] veth0_vlan: entered promiscuous mode [ 1050.274257][ T6186] veth1_vlan: entered promiscuous mode [ 1050.380702][ T6186] veth0_macvtap: entered promiscuous mode [ 1050.418361][ T6186] veth1_macvtap: entered promiscuous mode [ 1050.576397][ T6186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1050.613963][ T6186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1051.684249][ T6342] netlink: 24 bytes leftover after parsing attributes in process `syz.8.13817'. [ 1051.693518][ T6342] openvswitch: netlink: Flow key attr not present in new flow. [ 1051.795447][T32093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.815183][T32093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.876958][ T6347] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1051.890844][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.921544][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1052.144305][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13826'. [ 1053.284925][ T6377] netlink: 'syz.0.13837': attribute type 10 has an invalid length. [ 1053.339725][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13837'. [ 1053.498205][ T6377] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1053.549660][ T6377] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.588162][ T6377] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1054.393129][ T6381] syzkaller0: entered promiscuous mode [ 1054.400279][ T6381] syzkaller0: entered allmulticast mode [ 1054.528350][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.541154][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.668802][ T6388] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13841'. [ 1054.744458][ T6395] netlink: 'syz.0.13843': attribute type 3 has an invalid length. [ 1054.762870][ T6395] netlink: 'syz.0.13843': attribute type 1 has an invalid length. [ 1054.783516][ T6395] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.13843'. [ 1056.451194][ T5829] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 1063.684616][ T6448] sit0: entered allmulticast mode [ 1064.431045][T32097] bridge_slave_1: left allmulticast mode [ 1064.486177][T32097] bridge_slave_1: left promiscuous mode [ 1064.498062][T32097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.592024][T32097] bridge_slave_0: left allmulticast mode [ 1064.598168][T32097] bridge_slave_0: left promiscuous mode [ 1064.612182][T32097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.188009][ T6465] netlink: 'syz.0.13872': attribute type 1 has an invalid length. [ 1065.218868][ T6465] netlink: 'syz.0.13872': attribute type 4 has an invalid length. [ 1065.260050][ T6465] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.13872'. [ 1065.510723][T30918] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1065.521610][T30918] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1065.543129][T30918] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1065.556147][T30918] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1065.566325][T30918] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1065.575832][T32097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.625311][T32097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.652312][T32097] bond0 (unregistering): Released all slaves [ 1066.708142][ T6470] chnl_net:caif_netlink_parms(): no params data found [ 1067.105670][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.121570][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.129406][ T6470] bridge_slave_0: entered allmulticast mode [ 1067.216232][ T6470] bridge_slave_0: entered promiscuous mode [ 1067.245340][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.256075][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.274320][ T6470] bridge_slave_1: entered allmulticast mode [ 1067.298807][ T6470] bridge_slave_1: entered promiscuous mode [ 1067.391058][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.424291][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.532066][ T6470] team0: Port device team_slave_0 added [ 1067.565672][ T6470] team0: Port device team_slave_1 added [ 1067.616659][T30918] Bluetooth: hci0: command tx timeout [ 1067.659596][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.670680][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.699873][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.713906][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.722128][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.757046][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1068.196751][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1068.208409][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1068.222778][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1068.231109][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1068.239190][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1068.960373][ T6470] hsr_slave_0: entered promiscuous mode [ 1069.018644][ T6470] hsr_slave_1: entered promiscuous mode [ 1069.025051][ T6470] debugfs: 'hsr0' already exists in 'hsr' [ 1069.044146][ T6470] Cannot create hsr debugfs directory [ 1069.704749][ T5829] Bluetooth: hci0: command tx timeout [ 1070.336061][ T5829] Bluetooth: hci4: command tx timeout [ 1070.789710][ T6529] netlink: 'syz.0.13888': attribute type 6 has an invalid length. [ 1070.797794][ T6529] netlink: 3936 bytes leftover after parsing attributes in process `syz.0.13888'. [ 1070.809785][ T6529] netlink: 'syz.0.13888': attribute type 1 has an invalid length. [ 1070.818454][ T6529] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1071.183863][T32097] hsr_slave_0: left promiscuous mode [ 1071.210886][T32097] hsr_slave_1: left promiscuous mode [ 1071.247002][T32097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1071.273064][T32097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.281805][T32097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1071.292708][T32097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.313296][T32097] veth1_vlan: left promiscuous mode [ 1071.343518][T32097] veth0_vlan: left promiscuous mode [ 1071.776381][ T5829] Bluetooth: hci0: command tx timeout [ 1072.417832][ T5829] Bluetooth: hci4: command tx timeout [ 1072.840434][T32097] team0 (unregistering): Port device team_slave_1 removed [ 1073.100554][T32097] team0 (unregistering): Port device team_slave_0 removed [ 1073.524409][ T6559] netlink: 830 bytes leftover after parsing attributes in process `syz.1.13900'. [ 1073.583819][ T6560] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13900'. [ 1073.610986][ T6560] bridge_slave_1: default FDB implementation only supports local addresses [ 1073.866524][ T5829] Bluetooth: hci0: command tx timeout [ 1074.499713][ T5829] Bluetooth: hci4: command tx timeout [ 1075.004553][ T6507] chnl_net:caif_netlink_parms(): no params data found [ 1075.599960][ T6507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.615131][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.628059][ T6507] bridge_slave_0: entered allmulticast mode [ 1075.636686][ T6507] bridge_slave_0: entered promiscuous mode [ 1075.695616][ T6507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.713359][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.723566][ T6507] bridge_slave_1: entered allmulticast mode [ 1075.763595][ T6507] bridge_slave_1: entered promiscuous mode [ 1075.841344][T32097] bridge_slave_1: left allmulticast mode [ 1075.867836][T32097] bridge_slave_1: left promiscuous mode [ 1075.881233][T32097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.228444][T32097] bridge_slave_0: left allmulticast mode [ 1076.236012][T32097] bridge_slave_0: left promiscuous mode [ 1076.241970][T32097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.592394][T30918] Bluetooth: hci4: command tx timeout [ 1077.056265][T30918] Bluetooth: hci3: command 0x2016 tx timeout [ 1077.166928][T32097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.645474][T32097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.681927][T32097] bond0 (unregistering): Released all slaves [ 1078.030771][ T6603] syzkaller0: entered promiscuous mode [ 1078.038142][ T6603] syzkaller0: entered allmulticast mode [ 1081.124523][ T6507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.142450][ T6507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.262373][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1081.403988][ T6507] team0: Port device team_slave_0 added [ 1081.460516][ T6507] team0: Port device team_slave_1 added [ 1081.647905][ T6653] netlink: 'syz.8.13930': attribute type 10 has an invalid length. [ 1081.707457][T32097] hsr_slave_0: left promiscuous mode [ 1081.727043][T32097] hsr_slave_1: left promiscuous mode [ 1081.739336][T32097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.747717][T32097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.759354][T32097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.773824][T32097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.809305][T32097] veth1_macvtap: left promiscuous mode [ 1081.823030][T32097] veth0_macvtap: left promiscuous mode [ 1081.835650][T32097] veth1_vlan: left promiscuous mode [ 1081.852393][T32097] veth0_vlan: left promiscuous mode [ 1082.484156][T32097] team0 (unregistering): Port device team_slave_1 removed [ 1082.508165][T32097] team0 (unregistering): Port device team_slave_0 removed [ 1082.625655][ T6653] dummy0: entered promiscuous mode [ 1082.632381][ T6653] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1082.675828][ T6470] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.747917][ T6661] syzkaller0: entered promiscuous mode [ 1082.753541][ T6661] syzkaller0: entered allmulticast mode [ 1082.761959][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1082.779311][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.813220][ T6507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.828387][ T6507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.835460][ T6507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.863869][ T6507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.083236][ T6679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.071154][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.078371][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.190251][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.197479][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.295252][ T6507] hsr_slave_0: entered promiscuous mode [ 1085.308675][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13941'. [ 1085.322977][ T6507] hsr_slave_1: entered promiscuous mode [ 1085.334213][ T6507] debugfs: 'hsr0' already exists in 'hsr' [ 1085.354920][ T6507] Cannot create hsr debugfs directory [ 1086.022083][ T6703] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13947'. [ 1086.158556][ T6470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.361610][ T6507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1086.435548][ T6507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.475072][T32095] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.482337][T32095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.528980][T32095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.536260][T32095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.051164][ T6470] veth0_vlan: entered promiscuous mode [ 1087.080870][ T6470] veth1_vlan: entered promiscuous mode [ 1087.140581][ T6470] veth0_macvtap: entered promiscuous mode [ 1087.154006][ T6470] veth1_macvtap: entered promiscuous mode [ 1087.188035][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.219278][ T6470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.275148][ T6507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.117775][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.153116][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.214877][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13952'. [ 1088.234890][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1088.244813][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1088.371235][ T6507] veth0_vlan: entered promiscuous mode [ 1088.388277][ T6507] veth1_vlan: entered promiscuous mode [ 1088.460188][ T6507] veth0_macvtap: entered promiscuous mode [ 1088.533668][ T6507] veth1_macvtap: entered promiscuous mode [ 1088.569943][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.648898][ T6507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.971035][ T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.004967][ T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.164355][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.180591][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.815738][ T6780] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1091.290340][ T5829] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1091.563938][T30918] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 1092.913067][T30918] Bluetooth: hci3: unexpected event 0x06 length: 15 > 3 [ 1093.377384][ T5829] ================================================================== [ 1093.386706][T30918] Bluetooth: hci0: command 0x2016 tx timeout [ 1093.392443][ T5829] BUG: KASAN: slab-use-after-free in hci_conn_drop+0x34/0x2a0 [ 1093.405917][ T5829] Write of size 4 at addr ffff88808b994010 by task kworker/u9:2/5829 [ 1093.414014][ T5829] [ 1093.416377][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1093.416403][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1093.416418][ T5829] Workqueue: hci0 hci_cmd_sync_work [ 1093.416546][ T5829] Call Trace: [ 1093.416554][ T5829] [ 1093.416563][ T5829] dump_stack_lvl+0xe8/0x150 [ 1093.416595][ T5829] print_report+0xba/0x230 [ 1093.416629][ T5829] ? hci_conn_drop+0x34/0x2a0 [ 1093.416650][ T5829] kasan_report+0x117/0x150 [ 1093.416677][ T5829] ? hci_conn_drop+0x34/0x2a0 [ 1093.416704][ T5829] kasan_check_range+0x264/0x2c0 [ 1093.416730][ T5829] hci_conn_drop+0x34/0x2a0 [ 1093.416752][ T5829] ? __pfx_le_read_features_complete+0x10/0x10 [ 1093.416783][ T5829] hci_cmd_sync_work+0x262/0x400 [ 1093.416816][ T5829] ? process_scheduled_works+0xa25/0x1830 [ 1093.416856][ T5829] process_scheduled_works+0xb02/0x1830 [ 1093.416897][ T5829] ? __pfx_process_scheduled_works+0x10/0x10 [ 1093.416927][ T5829] ? assign_work+0x3d5/0x5e0 [ 1093.416955][ T5829] worker_thread+0xa50/0xfc0 [ 1093.417004][ T5829] kthread+0x388/0x470 [ 1093.417036][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 1093.417061][ T5829] ? __pfx_kthread+0x10/0x10 [ 1093.417080][ T5829] ret_from_fork+0x51e/0xb90 [ 1093.417119][ T5829] ? __pfx_ret_from_fork+0x10/0x10 [ 1093.417144][ T5829] ? __switch_to+0xc7d/0x1450 [ 1093.417179][ T5829] ? __pfx_kthread+0x10/0x10 [ 1093.417199][ T5829] ret_from_fork_asm+0x1a/0x30 [ 1093.417237][ T5829] [ 1093.417246][ T5829] [ 1093.561067][ T5829] Allocated by task 5829: [ 1093.565417][ T5829] kasan_save_track+0x3e/0x80 [ 1093.570124][ T5829] __kasan_kmalloc+0x93/0xb0 [ 1093.574747][ T5829] __kmalloc_cache_noprof+0x31c/0x660 [ 1093.580148][ T5829] __hci_conn_add+0x3c4/0x1e00 [ 1093.585045][ T5829] le_conn_complete_evt+0x706/0x1430 [ 1093.590420][ T5829] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1093.596356][ T5829] hci_event_packet+0x7af/0x12c0 [ 1093.601382][ T5829] hci_rx_work+0x3ee/0x1030 [ 1093.605929][ T5829] process_scheduled_works+0xb02/0x1830 [ 1093.611526][ T5829] worker_thread+0xa50/0xfc0 [ 1093.616155][ T5829] kthread+0x388/0x470 [ 1093.620251][ T5829] ret_from_fork+0x51e/0xb90 [ 1093.624884][ T5829] ret_from_fork_asm+0x1a/0x30 [ 1093.629713][ T5829] [ 1093.632064][ T5829] Freed by task 30918: [ 1093.636155][ T5829] kasan_save_track+0x3e/0x80 [ 1093.640867][ T5829] kasan_save_free_info+0x46/0x50 [ 1093.645931][ T5829] __kasan_slab_free+0x5c/0x80 [ 1093.650732][ T5829] kfree+0x1c1/0x630 [ 1093.654662][ T5829] device_release+0x9e/0x1d0 [ 1093.659389][ T5829] kobject_put+0x228/0x560 [ 1093.663883][ T5829] hci_conn_del+0xc36/0x1230 [ 1093.668510][ T5829] hci_disconn_complete_evt+0x64e/0x950 [ 1093.674086][ T5829] hci_event_packet+0x805/0x12c0 [ 1093.679068][ T5829] hci_rx_work+0x3ee/0x1030 [ 1093.683617][ T5829] process_scheduled_works+0xb02/0x1830 [ 1093.689207][ T5829] worker_thread+0xa50/0xfc0 [ 1093.693851][ T5829] kthread+0x388/0x470 [ 1093.697962][ T5829] ret_from_fork+0x51e/0xb90 [ 1093.702590][ T5829] ret_from_fork_asm+0x1a/0x30 [ 1093.707405][ T5829] [ 1093.709774][ T5829] The buggy address belongs to the object at ffff88808b994000 [ 1093.709774][ T5829] which belongs to the cache kmalloc-8k of size 8192 [ 1093.723863][ T5829] The buggy address is located 16 bytes inside of [ 1093.723863][ T5829] freed 8192-byte region [ffff88808b994000, ffff88808b996000) [ 1093.737704][ T5829] [ 1093.740059][ T5829] The buggy address belongs to the physical page: [ 1093.746503][ T5829] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8b990 [ 1093.755318][ T5829] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1093.763844][ T5829] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1093.771430][ T5829] page_type: f5(slab) [ 1093.775439][ T5829] raw: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 1093.784053][ T5829] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1093.792674][ T5829] head: 00fff00000000040 ffff88813fea9280 dead000000000100 dead000000000122 [ 1093.801394][ T5829] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 1093.810108][ T5829] head: 00fff00000000003 ffffea00022e6401 00000000ffffffff 00000000ffffffff [ 1093.818818][ T5829] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1093.827517][ T5829] page dumped because: kasan: bad access detected [ 1093.833973][ T5829] page_owner tracks the page as allocated [ 1093.839724][ T5829] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 4279, tgid 4277 (syz.0.13169), ts 919867412612, free_ts 915078364707 [ 1093.859594][ T5829] post_alloc_hook+0x231/0x280 [ 1093.864405][ T5829] get_page_from_freelist+0x24dc/0x2580 [ 1093.870005][ T5829] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1093.875873][ T5829] alloc_pages_mpol+0x232/0x4a0 [ 1093.880767][ T5829] allocate_slab+0x83/0x660 [ 1093.885328][ T5829] ___slab_alloc+0x150/0x6b0 [ 1093.889960][ T5829] __kvmalloc_node_noprof+0x34d/0x8a0 [ 1093.895378][ T5829] pfifo_fast_init+0x112/0x6c0 [ 1093.900293][ T5829] qdisc_create_dflt+0x13b/0x510 [ 1093.905282][ T5829] mq_init_common+0x25c/0x440 [ 1093.909998][ T5829] mq_init+0x84/0x270 [ 1093.914038][ T5829] qdisc_create_dflt+0x13b/0x510 [ 1093.919012][ T5829] dev_activate+0x1ce/0x1150 [ 1093.923643][ T5829] __dev_open+0x67a/0x830 [ 1093.928092][ T5829] __dev_change_flags+0x1f7/0x690 [ 1093.933213][ T5829] netif_change_flags+0x88/0x1a0 [ 1093.938231][ T5829] page last free pid 4152 tgid 4151 stack trace: [ 1093.944604][ T5829] __free_frozen_pages+0xc2b/0xdb0 [ 1093.949749][ T5829] __folio_put+0x414/0x4f0 [ 1093.954208][ T5829] skb_release_data+0x4cb/0x940 [ 1093.959207][ T5829] kfree_skb_list_reason+0x28b/0x4a0 [ 1093.964541][ T5829] skb_release_data+0x61a/0x940 [ 1093.969451][ T5829] __kfree_skb+0x5d/0x210 [ 1093.973828][ T5829] kcm_sendmsg+0x2345/0x2b60 [ 1093.978526][ T5829] sock_write_iter+0x503/0x550 [ 1093.983304][ T5829] vfs_write+0x61d/0xb90 [ 1093.987588][ T5829] ksys_write+0x150/0x270 [ 1093.991943][ T5829] do_syscall_64+0x14d/0xf80 [ 1093.996558][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.002478][ T5829] [ 1094.004824][ T5829] Memory state around the buggy address: [ 1094.010474][ T5829] ffff88808b993f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1094.018548][ T5829] ffff88808b993f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1094.026620][ T5829] >ffff88808b994000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1094.034690][ T5829] ^ [ 1094.039289][ T5829] ffff88808b994080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1094.047362][ T5829] ffff88808b994100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1094.055530][ T5829] ================================================================== [ 1094.070205][ T5829] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1094.077460][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1094.086953][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1094.097045][ T5829] Workqueue: hci0 hci_cmd_sync_work [ 1094.102304][ T5829] Call Trace: [ 1094.105604][ T5829] [ 1094.108564][ T5829] vpanic+0x56c/0xa60 [ 1094.112618][ T5829] ? __pfx_vpanic+0x10/0x10 [ 1094.117148][ T5829] panic+0xc5/0xd0 [ 1094.120895][ T5829] ? __pfx_panic+0x10/0x10 [ 1094.125335][ T5829] ? preempt_schedule_thunk+0x16/0x30 [ 1094.130730][ T5829] ? preempt_schedule_thunk+0x16/0x30 [ 1094.136125][ T5829] ? hci_conn_drop+0x34/0x2a0 [ 1094.140823][ T5829] check_panic_on_warn+0x89/0xb0 [ 1094.145810][ T5829] ? hci_conn_drop+0x34/0x2a0 [ 1094.150504][ T5829] end_report+0x73/0x180 [ 1094.154774][ T5829] ? hci_conn_drop+0x34/0x2a0 [ 1094.159481][ T5829] kasan_report+0x128/0x150 [ 1094.164006][ T5829] ? hci_conn_drop+0x34/0x2a0 [ 1094.168726][ T5829] kasan_check_range+0x264/0x2c0 [ 1094.173711][ T5829] hci_conn_drop+0x34/0x2a0 [ 1094.178232][ T5829] ? __pfx_le_read_features_complete+0x10/0x10 [ 1094.184515][ T5829] hci_cmd_sync_work+0x262/0x400 [ 1094.189494][ T5829] ? process_scheduled_works+0xa25/0x1830 [ 1094.195257][ T5829] process_scheduled_works+0xb02/0x1830 [ 1094.200845][ T5829] ? __pfx_process_scheduled_works+0x10/0x10 [ 1094.206867][ T5829] ? assign_work+0x3d5/0x5e0 [ 1094.211492][ T5829] worker_thread+0xa50/0xfc0 [ 1094.216165][ T5829] kthread+0x388/0x470 [ 1094.220262][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 1094.225398][ T5829] ? __pfx_kthread+0x10/0x10 [ 1094.230009][ T5829] ret_from_fork+0x51e/0xb90 [ 1094.234631][ T5829] ? __pfx_ret_from_fork+0x10/0x10 [ 1094.239761][ T5829] ? __switch_to+0xc7d/0x1450 [ 1094.244459][ T5829] ? __pfx_kthread+0x10/0x10 [ 1094.249075][ T5829] ret_from_fork_asm+0x1a/0x30 [ 1094.253872][ T5829] [ 1094.257521][ T5829] Kernel Offset: disabled [ 1094.261859][ T5829] Rebooting in 86400 seconds..