last executing test programs: 11m36.663877822s ago: executing program 32 (id=9015): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000003800250825bd7000f9dbdf250f000000100007800c0002"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x804c050) 11m29.982995407s ago: executing program 33 (id=9109): perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000003c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 11m18.800290955s ago: executing program 34 (id=9274): write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)={'some', 0x20, 0x2000000005, 0x20, 0x10000000fffff}, 0x2f) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 10m53.632034325s ago: executing program 35 (id=9341): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x5, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e5c777b95ca109ff3", 0x1c}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @remote}}}], 0x20}, 0x400c804) 9m4.257933033s ago: executing program 36 (id=10546): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) close(r3) 8m39.264789292s ago: executing program 37 (id=10761): r0 = socket$kcm(0x2a, 0x2, 0x0) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) recvmsg$kcm(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x2) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 8m33.625963975s ago: executing program 38 (id=10894): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r3}, &(0x7f0000000740), &(0x7f0000000780)=r2}, 0x20) 8m10.318276957s ago: executing program 39 (id=11073): socket$kcm(0x23, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xbf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2086, 0x8, 0x0, 0x8, 0x9c03, 0x7fffffff, 0x80, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x42, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x2000, 0xfffffffd, 0x8, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) 8m6.077044314s ago: executing program 40 (id=11110): syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x840000000002, 0x3, 0xff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) sendmsg$inet(r0, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000640)="97452a307eb495fe5dc48cc5595c4a9b8f52ac8e5c777b95ca109ff3", 0x1c}], 0x1, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x43}, @remote}}}], 0x20}, 0x400c804) 7m8.725257011s ago: executing program 41 (id=11584): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000580)="9b60bf", 0x3}], 0x1}, 0x8804) 6m54.51679526s ago: executing program 42 (id=11686): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 6m54.313944796s ago: executing program 43 (id=11688): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x300440f1) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000500)=r0, 0x4) 6m44.878461701s ago: executing program 44 (id=11735): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r2}, 0xc) 6m34.061594107s ago: executing program 45 (id=11715): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001200014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f661", 0x6e}, {&(0x7f0000000140)="aa581ff83dac4a519b67538bfa897e210c31e1446808358248cf2d795634b12c4ce81c3876aff89235b78ea0e5c5badfa122797d62c09ada7441b4f31cd5e6fc4b2a325fb5e811fead55530751e6f4bc4b40d94743ed5bd8ec1fff7b0abcc6eaabeb7a2f5f985467a8db", 0x6a}], 0x2}, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x99, 0x4, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x2000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000004) 6m22.573082188s ago: executing program 46 (id=11789): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe8}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) 6m21.380432446s ago: executing program 47 (id=11750): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x52f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000402000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="28010000171302002abd7000ffdbdf25ac1414bb0000deffffff"], 0x128}, 0x1, 0x0, 0x0, 0x20000010}, 0x10004000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="b60a0000010000006111480000000000180000000000000000000000000000009500000000000000fdd020b86a3852717921b4791012eb6a5b9ca17b293c478eae09730c451a8bf7fde3a00033ded5b24112b54c080c2ce5232a6f23c3e16a1c0e14815580f32fc6083dedf9162d42125a36c47c3e7df86b1e3788c8099ea633af56bf5f02a48530c41affd560f69b9ba08ba8dcb8a67d5dc0b145e5d55a5367df203f95503ab7187df9757be7e594064390d46e114bbedaa9b86cc6c7839d45a47d99941ec4a7cf5fa6a3cf3fa950f9be8dc662503d18ba599eb1ae9be0a2a05c9fc91dba2932a8dd2891f3d5825e"], 0x0}, 0x94) 5m56.344711326s ago: executing program 48 (id=11852): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x6, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0xa260, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x1002, &(0x7f00000014c0)=""/4098}, 0x94) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000000)={[{0x0, 'io'}]}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 5m45.36841053s ago: executing program 49 (id=11962): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) close(r3) close(r2) 5m36.634542027s ago: executing program 50 (id=11938): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000002, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xff07}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000640)="c1188e199f5d02ff4280860186dd8bfb4c97068c4de01185049d177e1c1b432e79409750ca2396c946cd39bd3bec6813eee395352260", 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5m12.770113559s ago: executing program 4 (id=12084): socket$kcm(0x11, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xd}, 0x111efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0x1, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$unix(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}], 0x18, 0x8800}, 0x8000) 5m12.318586326s ago: executing program 4 (id=12087): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000008e00001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211057300fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) 5m11.996629878s ago: executing program 7 (id=12090): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xd000, 0x0, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xa100, 0xc8, 0x1000003, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63f580fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100, 0x7}, 0x481a, 0x0, 0x0, 0x7, 0x0, 0x0, 0xf792, 0x0, 0xffffffff, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc02082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[], 0xfdef) 5m11.928562176s ago: executing program 7 (id=12091): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x4007fff, 0x7fffffff, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe69, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) 5m11.65904046s ago: executing program 4 (id=12093): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x200, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x18004, 0x0, 0x0, 0x8, 0xffff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100)=0x5, 0x12) 5m11.650929357s ago: executing program 7 (id=12094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m11.464127222s ago: executing program 7 (id=12095): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 5m10.623073378s ago: executing program 7 (id=12098): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5m10.619886441s ago: executing program 4 (id=12100): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x8b3848, 0x0) 5m10.404251439s ago: executing program 4 (id=12104): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x100000000002, 0x4) close(0xffffffffffffffff) close(0x3) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0x800ff, 0x6}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x4, 0xffffff00, 0x7}, 0x1}}]}, {0xfffffe25}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) 5m10.111159539s ago: executing program 7 (id=12107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000ee850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd89, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) 5m9.517379598s ago: executing program 51 (id=12107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000ee850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd89, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24048045}, 0x20000000) 5m9.498355186s ago: executing program 4 (id=12111): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1d}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x26, 0x0, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffc, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x99e, 0x5, 0x1, 0x5, 0x2}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="e566f2b8a537"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 5m9.320689907s ago: executing program 52 (id=12111): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x1d}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0x26, 0x0, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0xfffffffc, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x99e, 0x5, 0x1, 0x5, 0x2}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="e566f2b8a537"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 4m29.095967211s ago: executing program 0 (id=12247): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0)=r5, 0x8) 4m28.989899608s ago: executing program 0 (id=12248): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8, 0xb6, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4m28.765651883s ago: executing program 0 (id=12249): socket(0x2, 0x80805, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) socket$netlink(0x10, 0x3, 0x8000000004) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4m28.579228799s ago: executing program 0 (id=12252): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 4m28.334033859s ago: executing program 0 (id=12253): perf_event_open(0x0, 0x0, 0xbfeffffffeffffff, 0xffffffffffffffff, 0x3) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x180, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0x7f, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x1369a, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x8800, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x37}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xc, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 4m27.80691743s ago: executing program 0 (id=12261): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0xcfa4) 4m26.603717672s ago: executing program 53 (id=12261): socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[], 0xcfa4) 3m34.459110315s ago: executing program 8 (id=12523): bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9602, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7, 0xfffffffffffffffe}, 0x12280, 0x2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0x3, 0x300) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd29, 0x0}, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xd5, 0x9, 0x0, 0x0, 0x0, 0x1, 0x40, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8dc, 0x0, @perf_config_ext={0x5, 0x200000000005}, 0x11a0a2, 0x9, 0x5, 0x1, 0x7, 0x0, 0x8002}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x4}, 0x80, 0x0}, 0xe07e872420dfef8a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000000c0)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 3m33.305327384s ago: executing program 8 (id=12530): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000005000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r1, 0x1, 0x24, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3m32.799642956s ago: executing program 8 (id=12536): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000, 0x0, 0x8, 0x4, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000853}, 0x44040) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=ANY=[@ANYBLOB="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"], 0x1128}}, 0x20048000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) 3m30.804111253s ago: executing program 8 (id=12543): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82340, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 3m29.824644437s ago: executing program 8 (id=12549): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) close(r0) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) r3 = socket$kcm(0x11, 0x2, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x8) r5 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) 3m29.012087627s ago: executing program 8 (id=12555): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[], 0xfdef) 3m28.387526991s ago: executing program 54 (id=12555): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000300), 0x4) write$cgroup_subtree(r4, &(0x7f0000000500)=ANY=[], 0xfdef) 2m58.472335019s ago: executing program 3 (id=12692): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xfeffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x3}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x5}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r2, 0x10e, 0x2, &(0x7f00000001c0)=r1, 0x4) 2m57.831099899s ago: executing program 3 (id=12693): perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x29, 0x7f38c042043c86f9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89ed, 0x0) 2m57.540480046s ago: executing program 3 (id=12697): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x18020, 0x2, 0x0, 0x3, 0x8001, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x2}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$kcm(0x28, 0x5, 0x0) sendmsg$sock(r4, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x4000800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={0x0, &(0x7f0000001980)=""/157, 0x0, 0x9d, 0x1, 0x4}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7a2f75b9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xae}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x4, 0x9, 0x4}, 0x10, 0x1b5b3, r2, 0x3, &(0x7f0000000440)=[r3, r2, r3, r3, r3, r3, r3, r3, r3], &(0x7f0000000480)=[{0x1, 0x5, 0xc, 0x4}, {0x3, 0x5, 0x9, 0x2}, {0x1, 0x5, 0x4, 0x1}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[], 0x50) 2m56.906329964s ago: executing program 3 (id=12700): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 2m56.684959036s ago: executing program 3 (id=12702): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40}, 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r2, 0xffffffffffffffff, 0x14, 0x0, 0x4000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0x81006e80, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001000)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000000), &(0x7f0000001a80)='%pB \x00'}, 0x20) 2m52.923048528s ago: executing program 3 (id=12710): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x28, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xc, 0x16, 0x0, 0x1, [@nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0xd0, 0x0, 0x0, @binary}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2m52.297648385s ago: executing program 55 (id=12710): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)={0x28, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @uid}, @nested={0xc, 0x16, 0x0, 0x1, [@nested={0x8, 0x4f, 0x0, 0x1, [@typed={0x4, 0xd0, 0x0, 0x0, @binary}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 31.349377769s ago: executing program 6 (id=13349): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.365445362s ago: executing program 6 (id=13352): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, 0x0, 0x40010040) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x8010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000480)="484ee0", 0x3}], 0x1}, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xffffffffffffffff, 0xe}, 0x0, 0x0, 0x68b, 0x8, 0x1800000, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x5}, 0x0, 0x2, 0xfffffffe, 0xa, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000006000000000000000300000093100000"], 0x0, 0x5}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x17, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 30.101594193s ago: executing program 6 (id=13355): mkdir(0x0, 0x18b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000040)="36f3a64bac6c91b9b51b6a40c6e2f1df657ed8759c43bfdaebb005c3b27436e68da78f2b8ea7b5fa689105535972bee62ccde80e251921bbc4b5852003ddf99f7548b0ca37394f709f43eff4b3915fbdfdc542865d7de95fec1cfd8b9bb4a0f8ba347e613fab089ba6a93827765a2ff00184b3b30d", &(0x7f0000000740)=""/219, 0x4}, 0x20) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x16, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3fe}, 0x94) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x989c46, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x14, 0x23, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x240080d1}, 0x8010) recvmsg(r2, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf250100000004"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)=""/4077, 0xfed}, {&(0x7f0000000240)=""/77, 0x4d}, {&(0x7f0000003700)=""/4088, 0xff8}, {0x0}, {&(0x7f0000004700)=""/4066, 0xfe2}, {&(0x7f00000016c0)=""/198, 0xc6}, {&(0x7f0000000500)=""/172, 0xac}, {0x0}], 0x8}, 0x32120) 29.616819234s ago: executing program 6 (id=13363): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x6f5688745b13dc9f) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x2c, 0x0, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x8, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x5}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0xfff30000, 0x0, 0x8004043}, 0x20040000) 27.90499678s ago: executing program 6 (id=13369): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x5}, 0x8080, 0x4, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x68, 0x0) 26.008093223s ago: executing program 6 (id=13373): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x1, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f00000000c0)={'veth0_vlan\x00', @random="2b0100004ec6"}) 10.552951923s ago: executing program 56 (id=13373): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x1, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f00000000c0)={'veth0_vlan\x00', @random="2b0100004ec6"}) 4.930064219s ago: executing program 9 (id=13429): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x101, 0xfffffffc, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x34024, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39a0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) fstat(r1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x46, 0x107, 0x70bd25, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x4, 0x0, 0x1, [@nested={0xc, 0xd0, 0x0, 0x1, [@typed={0x8, 0xbe, 0x0, 0x0, @ipv4=@loopback}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc040) r4 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4156, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffbfffc, 0x1}, 0x8, 0x0, 0xfffffbfe, 0x5, 0x5, 0x2, 0x101, 0x0, 0x4, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000015c0)="2d544357ed4dfc32a9827a7c49ea9fb18e68be4131dd89821b2f0732a1ee74bb9f20c9fefe2105f4fa9b415212d4d179f13c522d61724d3aae414f27353a0c0f05ead2bcb8d77393edd05b854e95b3e67c472e054e55f5192b7b1dc09f73713a605bbf7f94b392f7d89ad250b9f9f93ff0ff6f837881cbabab18fb6f0a9626d03a8142839bb017b634029982fa31a6633bac5d26af28006ec8c317c20e7a1a1e0af1cf88a0a8a47b3b911bfd0cb280b6bed2c7c6e0a0159255ea25130d1f54d67369b7bbabd1e86acc8a74dbb56b66750ee5bea872b111d2c173dfe97caf5c572586cb9293f8ad83c2a167fc3f96a7f8bc2ff0daad91bd395616818650d24d9e4c17451b31cddd859b9f6a8dba0466cab7f6f7d797af7067920283efd585b38bcac4bad0077faaf0dcbb53ba7d5e339e2b05acb86dd7c056b816e0a307e61b0a92d41694da807ef729007cbe987a605e7e28c72b929a408339a9f296142aa472444f9aebe545a4961e3df6b7c12a305846f36f05a963bca674edbcb62592201e93846cf88d656ecb546a2627e4a0536c0aa3815546533427810453c441b2ae1cfa56c0816b834dbee7235e2b8ce81b67551045736b5b6f15af6c18a3df2aa31207fb27875d3bebca34406d2612e4647fec228c856478abdd9ccae237e0a6199d14fc3b5088df36e0a6219ccc6a5a396c6d6fc91ad7c0d2deaad2fdaaf40d1ab6d08054cdc0c7c3c732b59ecd2ceb3ab3c09104b00542aa61d0ef5dcaf7d63095bbebc874b5bc01305871d0b012b25c19245ae0bdf40fda548df61eacf8877eb9df8e4c0f96eafd9483179edc41999c92c8dc535b2b21190d0023ea416ae8598eb2c280b4798ecce906b3253c80b4dc33db0391cbc96fc8c0c6266f97a535e6cf780ff26d26af57b742b53fcf8bf70c115ae6b1ce6bda9f1d0ca4925c61f0af5857dd5f392cb9e621f8dc89a259f5992a64295c0fd6609d793905e4fe9efd227bc3158fda26fd5248af82bcd19dd86a9311767f9f0929e697e230b078bc39b59f002ea627367b2fdfe0354ddc688609554a7222eb78894dffa4bee3ab468578435d3cf86ac37b3b0e6fc6d00a5c74c3d9889847346dd65918b158c9acec81c1ae1c784cb082eeac76eb45cb13365d4b3e7a7a933a25c68ec3a4375b4c5f6e09819fefec73b5a2939cf5f5f25e429f7f3be8d069f9a0532353aa049defaf8f37e8aa0df8852909a7b4ac6ab0a446d1b31185aa991764eaf55feb89a2fac2333fa7f795d3994b7360a57c19e0ecf6d9d411d524c86045e70610cd225846b5a7019ee6717a8c4ee9d2c81d89622ad6c24f2e801e09f1d46c3d20cbeb729eccfe67de7afe1441557bf6bbb72fbca528ce55696f321a393de3a4c6356b39e164bdf7fe187e6e0c0478f53b02095795180fa6bf428184ec7b6aa3b0e434f98e8f16a304ac0bf48d6ec647352303e96f9361edcd54a2b063c53290eb7a8869b0350086cad5b020a47059a08e591f7edc905100add1a9feb0292ecc4841ce7cacba50fb603ab6ca1b195ca735e44003c6a698da76f1690ac43388813d6ff39fe76b5d5550bb3d9d2ac1641b550949d2cadae942f879afbefdc7d36a77a40a35a87a76676efc4d1f4fd4661b4ed0bc3ab5ad1e4d6301d853c8a825c8ed9b9bc6d8747492b3a021345e4a437b89276bfe9ae05239ca7b39cda6ad67f7d2ec07cbcd132f5002f001d28280a05643d3f127f352a93143e10ccadeb11e3cbce226c761da0f9ece7862a041e8959ae67c743bc4d870cf52e4ca4cdae7a39501df9465b985c768fe9ca2bab1a6618c9b8d6dd653832941072d081acbee0c40813b0701886db6ddb0e3e37dd761177a3f6d365a0788a0949840544f29cd57f183be09973a1545f101dc78d0342b580eac7d8eabe532c3a645d25da143a5675c4cf3c7eb4a4b1fdc38b3e9d3cd3f6f96", 0x567}], 0x1}, 0x0) 4.262370162s ago: executing program 2 (id=13435): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0xff06, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x22) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) close(r1) sendmsg$nl_generic(r0, 0x0, 0xc004) 4.245320688s ago: executing program 9 (id=13436): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.938972455s ago: executing program 2 (id=13437): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x80d1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x58, 0x1, 0x0, 0x0, 0x0, 0x0, 0x88904, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0xc288, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x9, 0x1}, 0x0, 0x2, 0x7e, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.556684639s ago: executing program 5 (id=13438): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1224, 0x0, 0xfffffffe, 0x1, 0x8, 0xffeffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x7, 0x80000000, 0xfe47, 0x7fff, 0xffffff39, 0x9}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x3}}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x81, 0x278a, 0xe}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8044000}, 0x4000) 3.472666914s ago: executing program 1 (id=13439): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x36, 0x107, 0x70bd26, 0x1000, {0x1, 0x7c}, [@nested={0x4, 0x12c}, @generic="bb2b24"]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040811}, 0xc000) close(0x3) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 3.306929159s ago: executing program 9 (id=13440): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0142, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2e, 0x4}, 0x10840a, 0x0, 0xfffffffd, 0x4, 0x3fe, 0x1, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket(0x15, 0x800, 0xfffffff8) sendmsg$nl_xfrm(r1, 0x0, 0x4000000) sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000001040)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x3c, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10008004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e000108000740000000011800068014000400"/170], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0x10}, 0x94) 3.173568143s ago: executing program 5 (id=13441): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90, 0x1000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101880, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) 3.149379034s ago: executing program 1 (id=13442): sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000f40)={r0, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x3, {{@in=@rand_addr=0x64010102, @in=@local, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x0, 0xefffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x4, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) 2.813373147s ago: executing program 1 (id=13443): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r3 = socket$kcm(0x2a, 0x2, 0x0) recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x40002182) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000000f14010027bd7000000004020a00450069706f69620000080001000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, 0x0) 2.670458208s ago: executing program 2 (id=13444): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0xc0189436, 0x0) r1 = getpid() r2 = perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$ITER_CREATE(0x21, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd25, 0x25dfdbf8, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10000840}, 0x4000000) socket$isdn_base(0x22, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r5) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138aafa000000000000005ae583de0dd7d8319f98af84fda55b175c0a9b2ce90000000000000000", 0x55}], 0x1}, 0x4000000) 2.096644039s ago: executing program 9 (id=13445): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x82240, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x80002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_bp={0x0, 0x8}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x40) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x9, 0x0, 0x0, 0x1000000000000, 0x1000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x8010, 0x3, 0x3d, 0x8, 0x8, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x10002000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x3, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x18000000000002a0, 0x5ee, 0xfd60, &(0x7f0000000580)="b9ff03076804d773000000000800", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1.898694374s ago: executing program 5 (id=13446): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d38, 0x82058, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa, 0x3}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x1000, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="48000000020605000000000000000000000000000500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574000000006ebc63fb895077c87a724d692b34a7d82a9bfc377a46edb3618ace4355fc48fb06eb94701e544bfda781f2a8a585e376cf64f6358fb203d7fb1adedf6dba35adef3b6916195a9443f9586283511dca08"], 0x48}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.738215494s ago: executing program 1 (id=13447): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$kcm(0x11, 0x7, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r1 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0), 0x8) 1.649035359s ago: executing program 2 (id=13448): r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, @ldst={0x2, 0x3, 0x3, 0xa, 0x0, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b13ea400000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20008040) sendmsg$inet(r2, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)={0x18, 0x43, 0x107, 0x2, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 1.555961987s ago: executing program 9 (id=13449): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x541b, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map, 0xffffffffffffffff, 0x19}, 0x20) 1.443733535s ago: executing program 5 (id=13450): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1224, 0x0, 0xfffffffe, 0x1, 0x8, 0xffeffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x6c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x7, 0x80000000, 0xfe47, 0x7fff, 0xffffff39, 0x9}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x3}}, @TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x81, 0x278a, 0xe}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8044000}, 0x4000) 1.351688361s ago: executing program 1 (id=13451): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x80, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xe73}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r0, 0x0, 0xe) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)}, 0x10100) 1.017189084s ago: executing program 5 (id=13452): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x8, 0x4, 0x8, &(0x7f0000000080)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x29, 0x3, 0x1, &(0x7f0000000100)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r4, &(0x7f0000000080)=0x8, 0x12) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40305829, &(0x7f0000000040)) 1.015433011s ago: executing program 9 (id=13453): socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x194a}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0018000000e0000009000000000000000002000100000000000000000200000000030005000800000002000000e0000001000000000000000010fa15b25b598ec8f3f1f94040ae1ccbbc0d7c85e598712cb1cb8d995d418dafde924102105868a8"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 680.247812ms ago: executing program 2 (id=13454): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x2}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000095000000000000"], 0x0, 0xfffff1d8}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 677.178326ms ago: executing program 1 (id=13455): openat$tun(0xffffffffffffff9c, 0x0, 0x280a01, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1a003}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x103) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28a080, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef18e43b, 0x0, @perf_config_ext={0x2, 0x5}, 0x200, 0x0, 0x0, 0x4, 0x2, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x4}, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xa0, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd831, 0x4, @perf_bp={0x0, 0x2}, 0x4210, 0x0, 0x0, 0x3, 0x3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 448.989875ms ago: executing program 5 (id=13456): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0xa3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b9", 0xf}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4d) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a000000040000001400010000000000000000000000000000000001"], 0x2c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) sendmsg$nl_xfrm(r1, 0x0, 0x40000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000280)}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x20000000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000f10d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x29) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r4, 0x2000012, 0xff0, 0x0, &(0x7f0000000c40), 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=13457): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0xfffffffe, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa44f, 0x6}, 0x2, 0x0, 0x0, 0x19ee8a9192a1fb60, 0x43fe, 0x7fffffff, 0xf, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) kernel console output (not intermixed with test programs): omiscuous mode [ 883.404822][ T1274] debugfs: 'hsr0' already exists in 'hsr' [ 883.426643][ T1274] Cannot create hsr debugfs directory [ 883.450806][ T9661] bridge_slave_1: left allmulticast mode [ 883.465741][ T9661] bridge_slave_1: left promiscuous mode [ 883.481594][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.581664][ T9661] bridge_slave_0: left allmulticast mode [ 883.587391][ T9661] bridge_slave_0: left promiscuous mode [ 883.608386][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.642355][ T1416] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.11992'. [ 883.673235][ T1416] netlink: Unknown conntrack attr (type=16376, max=9) [ 883.964719][ T1423] netlink: 64691 bytes leftover after parsing attributes in process `syz.0.11994'. [ 884.411295][ T9661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.554129][ T9661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.583509][ T9661] bond0 (unregistering): Released all slaves [ 884.634077][T29756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 884.647483][T29756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 884.656066][T29756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 884.672283][T29756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 884.680315][T29756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 884.950696][ T1026] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.950918][ T5827] Bluetooth: hci2: command tx timeout [ 885.169134][T29753] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.176290][T29753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.352182][T29753] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.359523][T29753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.647357][ T9661] hsr_slave_0: left promiscuous mode [ 885.664737][ T9661] hsr_slave_1: left promiscuous mode [ 885.675805][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.683944][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.692762][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 885.700744][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 885.717771][ T9661] veth1_macvtap: left promiscuous mode [ 885.723728][ T9661] veth0_macvtap: left promiscuous mode [ 885.729680][ T9661] veth1_vlan: left promiscuous mode [ 885.734952][ T9661] veth0_vlan: left promiscuous mode [ 886.343729][ T9661] team0 (unregistering): Port device team_slave_1 removed [ 886.368669][ T9661] team0 (unregistering): Port device team_slave_0 removed [ 886.546619][ T1473] netlink: 'syz.4.12008': attribute type 10 has an invalid length. [ 886.614764][ T1473] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.625064][ T1473] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.637997][ T1473] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 886.707777][ T5827] Bluetooth: hci3: command tx timeout [ 887.599745][ T1497] netlink: 104 bytes leftover after parsing attributes in process `syz.4.12012'. [ 887.742900][T29756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 887.757362][T29756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 887.772284][T29756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 887.782104][T29756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 887.790353][T29756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 887.909853][ T1438] chnl_net:caif_netlink_parms(): no params data found [ 888.084430][ T1026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.279687][ T9661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.439674][ T9661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.573488][ T1274] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 888.616111][ T9661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.673069][ T1274] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 888.759666][ T1530] syzkaller0: entered promiscuous mode [ 888.765337][ T1530] syzkaller0: entered allmulticast mode [ 888.788546][ T5827] Bluetooth: hci3: command tx timeout [ 888.824897][ T1274] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 889.832387][ T5827] Bluetooth: hci1: command tx timeout [ 890.643605][ T1438] bridge0: port 1(bridge_slave_0) entered blocking state [ 890.650902][ T1438] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.658365][ T1438] bridge_slave_0: entered allmulticast mode [ 890.665471][ T1438] bridge_slave_0: entered promiscuous mode [ 890.698400][ T9661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.717255][ T1274] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 890.742531][ T1438] bridge0: port 2(bridge_slave_1) entered blocking state [ 890.769047][ T1438] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.776755][ T1438] bridge_slave_1: entered allmulticast mode [ 890.785536][ T1438] bridge_slave_1: entered promiscuous mode [ 890.869964][ T5827] Bluetooth: hci3: command tx timeout [ 891.001894][ T1438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 891.030934][ T1438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.176515][ T1438] team0: Port device team_slave_0 added [ 891.195058][ T1438] team0: Port device team_slave_1 added [ 891.348198][ T1274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.461257][ T1438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 891.478455][ T1438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.538208][ T1438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.576389][ T1274] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.646503][ T9661] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.691130][ T1026] veth0_vlan: entered promiscuous mode [ 891.707170][ T1501] chnl_net:caif_netlink_parms(): no params data found [ 891.753038][ T1438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.767712][ T1438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.827697][ T1438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 891.910715][ T5827] Bluetooth: hci1: command tx timeout [ 891.958722][ T1589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12023'. [ 892.018568][ T9661] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.040035][ T1026] veth1_vlan: entered promiscuous mode [ 892.055908][T29753] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.063155][T29753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.380492][ T1589] : entered promiscuous mode [ 892.455530][ T9661] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.521994][T29753] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.529244][T29753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.568530][ T1438] hsr_slave_0: entered promiscuous mode [ 892.576820][ T1438] hsr_slave_1: entered promiscuous mode [ 892.585478][ T1438] debugfs: 'hsr0' already exists in 'hsr' [ 892.591797][ T1438] Cannot create hsr debugfs directory [ 892.670844][ T9661] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.957882][ T5827] Bluetooth: hci3: command tx timeout [ 893.201948][ T1501] bridge0: port 1(bridge_slave_0) entered blocking state [ 893.213027][ T1501] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.220981][ T1501] bridge_slave_0: entered allmulticast mode [ 893.230220][ T1501] bridge_slave_0: entered promiscuous mode [ 893.290272][ T1501] bridge0: port 2(bridge_slave_1) entered blocking state [ 893.315056][ T1501] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.328816][ T1501] bridge_slave_1: entered allmulticast mode [ 893.344075][ T1501] bridge_slave_1: entered promiscuous mode [ 893.495829][ T1501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.582446][ T1026] veth0_macvtap: entered promiscuous mode [ 893.596971][ T1501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.730487][ T1026] veth1_macvtap: entered promiscuous mode [ 893.800244][ T1501] team0: Port device team_slave_0 added [ 893.840851][ T1501] team0: Port device team_slave_1 added [ 893.853941][ T9661] bridge_slave_1: left allmulticast mode [ 893.862142][ T9661] bridge_slave_1: left promiscuous mode [ 893.868666][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.880669][ T9661] bridge_slave_0: left allmulticast mode [ 893.886377][ T9661] bridge_slave_0: left promiscuous mode [ 893.892894][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.910513][ T9661] bridge_slave_1: left allmulticast mode [ 893.916571][ T9661] bridge_slave_1: left promiscuous mode [ 893.922992][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.933163][ T9661] bridge_slave_0: left allmulticast mode [ 893.943265][ T9661] bridge_slave_0: left promiscuous mode [ 893.950753][ T9661] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.989762][ T5827] Bluetooth: hci1: command tx timeout [ 894.281430][ T9661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.301125][ T9661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.314241][ T9661] bond0 (unregistering): Released all slaves [ 894.464257][ T9661] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.481760][ T9661] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.500592][ T9661] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 894.511613][ T9661] .` (unregistering): Released all slaves [ 894.658493][ T9661] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 894.706092][ T9661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.723095][ T9661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.743201][ T9661] bond0 (unregistering): Released all slaves [ 896.077845][ T5827] Bluetooth: hci1: command tx timeout [ 896.811210][ T1026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.890210][ T1501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.897236][ T1501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.966879][ T1501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.059929][ T1026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.069662][ T1501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.076667][ T1501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 897.105558][ T1501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.206628][T29506] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.216058][T29506] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.258610][T29506] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.276149][T29506] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.352266][ T1501] hsr_slave_0: entered promiscuous mode [ 897.361834][ T1501] hsr_slave_1: entered promiscuous mode [ 897.369064][ T1501] debugfs: 'hsr0' already exists in 'hsr' [ 897.375587][ T1501] Cannot create hsr debugfs directory [ 897.503226][ T1274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.933194][ T1438] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 897.985246][ T1438] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 898.056193][T29753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.071825][T29753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.094369][ T1438] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 898.189138][ T1438] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 898.274137][ T9661] hsr_slave_0: left promiscuous mode [ 898.287212][ T9661] hsr_slave_1: left promiscuous mode [ 898.296418][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.304295][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.318810][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.333613][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.356953][ T9661] hsr_slave_0: left promiscuous mode [ 898.363879][ T9661] hsr_slave_1: left promiscuous mode [ 898.378601][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.394263][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.430604][ T9661] hsr_slave_0: left promiscuous mode [ 898.447325][ T9661] hsr_slave_1: left promiscuous mode [ 898.456536][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.464681][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.478821][ T9661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 898.486367][ T9661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.515759][ T9661] veth1_macvtap: left promiscuous mode [ 898.521607][ T9661] veth0_macvtap: left promiscuous mode [ 898.527244][ T9661] veth1_vlan: left promiscuous mode [ 898.534487][ T9661] veth0_vlan: left promiscuous mode [ 898.544353][ T9661] veth1_macvtap: left promiscuous mode [ 898.554287][ T9661] veth0_macvtap: left promiscuous mode [ 898.559979][ T9661] veth1_vlan: left promiscuous mode [ 898.565557][ T9661] veth0_vlan: left promiscuous mode [ 898.572841][ T9661] veth1_macvtap: left promiscuous mode [ 898.579251][ T9661] veth0_macvtap: left promiscuous mode [ 898.584919][ T9661] veth1_vlan: left promiscuous mode [ 898.591842][ T9661] veth0_vlan: left promiscuous mode [ 899.134614][ T9661] team0 (unregistering): Port device team_slave_1 removed [ 899.165686][ T9661] team0 (unregistering): Port device team_slave_0 removed [ 899.643466][ T9661] team0 (unregistering): Port device team_slave_1 removed [ 899.657479][ T9661] team0 (unregistering): Port device team_slave_0 removed [ 899.780457][ T1723] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12039'. [ 900.281341][ T9661] team0 (unregistering): Port device team_slave_1 removed [ 900.323730][ T9661] team0 (unregistering): Port device team_slave_0 removed [ 900.797744][T29753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.806760][T29753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.838911][ T1274] veth0_vlan: entered promiscuous mode [ 900.956495][ T1274] veth1_vlan: entered promiscuous mode [ 901.565851][ T1274] veth0_macvtap: entered promiscuous mode [ 901.651144][ T1274] veth1_macvtap: entered promiscuous mode [ 901.796737][ T1274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.872413][ T1274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 902.063782][ T135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.081375][ T135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.109393][ T1438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.139767][ T135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.172696][ T1742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12044'. [ 902.243707][T29754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.278671][ T1501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 902.319415][ T1501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 902.358801][ T1501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 902.395187][ T1501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 902.473484][ T1438] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.536375][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.543632][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.574864][ T1755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12048'. [ 902.661108][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.668474][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.692567][T29749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.702399][T29749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.749114][ T1759] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12049'. [ 902.847225][ T1761] netlink: 'syz.7.12050': attribute type 6 has an invalid length. [ 902.857474][ T1761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12050'. [ 902.866517][T29753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.866543][T29753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.120607][ T1501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.201039][ T1501] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.254095][T29506] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.261453][T29506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.351231][T29506] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.358485][T29506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.368607][ T1775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12054'. [ 903.378159][ T1775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12054'. [ 903.764868][ T1438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.996747][ T1438] veth0_vlan: entered promiscuous mode [ 904.063569][ T1438] veth1_vlan: entered promiscuous mode [ 904.227411][ T1501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.279144][ T1438] veth0_macvtap: entered promiscuous mode [ 904.299247][ T1801] netlink: 'syz.4.12064': attribute type 10 has an invalid length. [ 904.301813][ T1438] veth1_macvtap: entered promiscuous mode [ 904.307526][ T1801] netlink: 55 bytes leftover after parsing attributes in process `syz.4.12064'. [ 904.533256][ T1805] IPv6: Can't replace route, no match found [ 904.833904][ T1438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.903607][ T1438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.964936][ T1812] netlink: 'syz.4.12068': attribute type 9 has an invalid length. [ 904.971085][ T9661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.975902][ T1812] netlink: 'syz.4.12068': attribute type 11 has an invalid length. [ 905.008072][ T9661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.011967][ T1812] netlink: 'syz.4.12068': attribute type 12 has an invalid length. [ 905.025644][ T1812] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.12068'. [ 905.029074][ T9661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.046827][ T1812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12068'. [ 905.089772][T29753] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.206406][ T1501] veth0_vlan: entered promiscuous mode [ 905.255903][ T1501] veth1_vlan: entered promiscuous mode [ 905.410812][ T1818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.425527][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.460450][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.519840][ T1820] syzkaller0: entered promiscuous mode [ 905.525500][ T1820] syzkaller0: entered allmulticast mode [ 906.568496][ T5827] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 907.753021][ T1501] veth0_macvtap: entered promiscuous mode [ 907.785748][T29749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.803129][T29749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.826286][ T1501] veth1_macvtap: entered promiscuous mode [ 907.956644][ T1501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 908.035232][ T1501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 908.099322][ T135] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.122327][ T135] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.144838][ T135] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.262403][ T135] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.639047][ T9661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.659422][ T9661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.775108][ T1859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12088'. [ 908.955072][ T9670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 909.000837][ T9670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 909.342158][ T1872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12010'. [ 910.966231][T29753] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.143216][T29753] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.290652][T29753] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.485374][T29753] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.693623][T29756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 911.707227][T29756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 911.716222][T29756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 911.731122][T29756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 911.742082][T29756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 912.072295][T29756] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 912.081764][T29756] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 912.090879][T29756] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 912.099445][T29756] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 912.108740][T29756] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 912.293400][T29753] bridge_slave_1: left allmulticast mode [ 912.317700][T29753] bridge_slave_1: left promiscuous mode [ 912.342167][T29753] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.557904][ T1954] netlink: 'syz.0.12116': attribute type 1 has an invalid length. [ 912.586571][ T1954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.210504][T29753] bridge_slave_0: left allmulticast mode [ 913.239604][T29753] bridge_slave_0: left promiscuous mode [ 913.245745][T29753] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.857844][T29756] Bluetooth: hci0: command tx timeout [ 914.155798][T29756] Bluetooth: hci4: command tx timeout [ 914.829914][T29753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 914.851372][T29753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 914.862032][T29753] bond0 (unregistering): Released all slaves [ 915.935352][T29756] Bluetooth: hci0: command tx timeout [ 915.942233][T29753] hsr_slave_0: left promiscuous mode [ 916.003193][T29753] hsr_slave_1: left promiscuous mode [ 916.049628][T29753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 916.089386][T29753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.117604][T29753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 916.178263][T29753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.228692][T29756] Bluetooth: hci4: command tx timeout [ 916.301667][T29753] veth1_macvtap: left promiscuous mode [ 916.327436][T29753] veth0_macvtap: left promiscuous mode [ 916.366129][T29753] veth1_vlan: left promiscuous mode [ 916.407925][T29753] veth0_vlan: left promiscuous mode [ 916.759379][ T2032] netlink: 'syz.0.12136': attribute type 10 has an invalid length. [ 917.201248][T29753] team0 (unregistering): Port device team_slave_1 removed [ 917.275458][T29753] team0 (unregistering): Port device team_slave_0 removed [ 917.694597][ T2032] team0 (unregistering): Port device team_slave_0 removed [ 917.786916][ T2032] team0 (unregistering): Port device team_slave_1 removed [ 917.988406][T29756] Bluetooth: hci0: command tx timeout [ 918.293614][ T1938] chnl_net:caif_netlink_parms(): no params data found [ 918.308134][T29756] Bluetooth: hci4: command tx timeout [ 918.450531][ T1945] chnl_net:caif_netlink_parms(): no params data found [ 919.153684][ T1938] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.165050][ T1938] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.173007][ T1938] bridge_slave_0: entered allmulticast mode [ 919.212330][ T1938] bridge_slave_0: entered promiscuous mode [ 919.363756][T29753] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.491001][ T1945] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.522939][ T1945] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.561261][ T1945] bridge_slave_0: entered allmulticast mode [ 919.720977][ T1945] bridge_slave_0: entered promiscuous mode [ 919.802273][ T1938] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.868808][ T1938] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.890922][ T1938] bridge_slave_1: entered allmulticast mode [ 919.956051][ T1938] bridge_slave_1: entered promiscuous mode [ 920.069579][T29756] Bluetooth: hci0: command tx timeout [ 920.242309][ T2089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 920.276470][ T2090] mac80211_hwsim hwsim99 wlan1: entered allmulticast mode [ 920.354911][T29753] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.397971][T29756] Bluetooth: hci4: command tx timeout [ 920.462658][ T1945] bridge0: port 2(bridge_slave_1) entered blocking state [ 920.508433][ T1945] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.515877][ T1945] bridge_slave_1: entered allmulticast mode [ 920.574361][ T1945] bridge_slave_1: entered promiscuous mode [ 920.631387][ T1938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.711676][T29753] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.799425][ T1938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 920.825005][ T1945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 920.851447][ T1945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 921.062816][T29753] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.260905][ T1938] team0: Port device team_slave_0 added [ 921.281561][ T1945] team0: Port device team_slave_0 added [ 921.296097][ T1938] team0: Port device team_slave_1 added [ 921.336420][ T1945] team0: Port device team_slave_1 added [ 921.385716][ T1938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.397594][ T1938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.426249][ T1938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.464741][ T1938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.472972][ T1938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.501893][ T1938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.705200][ T1945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.724019][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 921.727076][ T1945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.758880][ T1945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.761818][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 921.783085][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 921.789480][ T1945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.813131][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 921.818067][ T1945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.855020][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 921.855366][ T1945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.264141][ T1938] hsr_slave_0: entered promiscuous mode [ 922.298972][ T1938] hsr_slave_1: entered promiscuous mode [ 922.432458][ T1945] hsr_slave_0: entered promiscuous mode [ 922.454178][ T1945] hsr_slave_1: entered promiscuous mode [ 922.472154][ T1945] debugfs: 'hsr0' already exists in 'hsr' [ 922.487356][ T1945] Cannot create hsr debugfs directory [ 922.964653][T29753] bridge_slave_1: left allmulticast mode [ 922.980169][T29753] bridge_slave_1: left promiscuous mode [ 922.986006][T29753] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.031006][T29753] bridge_slave_0: left allmulticast mode [ 923.036720][T29753] bridge_slave_0: left promiscuous mode [ 923.057452][T29753] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.585307][T29753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.604984][T29753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.629119][T29753] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 923.642657][T29753] bond0 (unregistering): Released all slaves [ 923.786216][T29753] : left promiscuous mode [ 923.991181][ T5827] Bluetooth: hci2: command tx timeout [ 924.143958][ T2187] netlink: 10 bytes leftover after parsing attributes in process `syz.0.12167'. [ 924.868694][ T2131] chnl_net:caif_netlink_parms(): no params data found [ 924.978048][T29753] hsr_slave_0: left promiscuous mode [ 925.000650][T29753] hsr_slave_1: left promiscuous mode [ 925.013653][T29753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 925.022175][T29753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 925.054080][T29753] veth1_macvtap: left promiscuous mode [ 925.068744][T29753] veth0_macvtap: left promiscuous mode [ 925.347092][T29753] team0 (unregistering): Port device team_slave_1 removed [ 925.379538][T29753] team0 (unregistering): Port device team_slave_0 removed [ 925.695561][ T2210] syzkaller0: entered promiscuous mode [ 925.702324][ T2210] syzkaller0: entered allmulticast mode [ 926.072453][ T5827] Bluetooth: hci2: command tx timeout [ 927.486602][ T2231] syzkaller0: entered promiscuous mode [ 927.492240][ T2231] syzkaller0: entered allmulticast mode [ 928.150411][ T5827] Bluetooth: hci2: command tx timeout [ 929.877066][ T2131] bridge0: port 1(bridge_slave_0) entered blocking state [ 930.102110][ T2131] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.269124][ T2131] bridge_slave_0: entered allmulticast mode [ 930.320275][ T2131] bridge_slave_0: entered promiscuous mode [ 930.360506][ T5827] Bluetooth: hci2: command tx timeout [ 930.380972][ T1938] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 933.158356][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.164754][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.209031][ T1938] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 933.326357][ T2131] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.704041][ T2131] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.732055][ T2131] bridge_slave_1: entered allmulticast mode [ 934.011953][ T2131] bridge_slave_1: entered promiscuous mode [ 934.367955][ T1938] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 935.577017][ T1938] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 936.226463][ T2131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.269047][ T2131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.600603][T29753] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.434046][ T2131] team0: Port device team_slave_0 added [ 937.491236][ T2131] team0: Port device team_slave_1 added [ 937.518933][ T1945] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 937.560777][ T1945] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 937.643787][T29753] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.667986][ T1945] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 937.731329][ T1945] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 937.784514][ T2131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.802846][ T2131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.852913][ T2131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.982803][T29753] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.107178][ T2131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.128013][ T2131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.201149][ T2131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.264322][ T2353] : renamed from vlan0 (while UP) [ 938.338989][T29753] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.798289][ T2131] hsr_slave_0: entered promiscuous mode [ 938.805481][ T2131] hsr_slave_1: entered promiscuous mode [ 938.824887][ T2131] debugfs: 'hsr0' already exists in 'hsr' [ 938.833169][ T2131] Cannot create hsr debugfs directory [ 939.319150][ T5827] Bluetooth: hci3: unexpected event 0x30 length: 15 > 3 [ 939.389712][T29753] bridge_slave_1: left allmulticast mode [ 939.406194][T29753] bridge_slave_1: left promiscuous mode [ 939.414462][T29753] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.440860][T29753] bridge_slave_0: left allmulticast mode [ 939.446658][T29753] bridge_slave_0: left promiscuous mode [ 939.459790][T29753] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.070416][T29753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.104175][T29753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 940.123348][T29753] bond0 (unregistering): Released all slaves [ 940.599120][ T1938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.414818][T29753] hsr_slave_0: left promiscuous mode [ 941.525930][T29753] hsr_slave_1: left promiscuous mode [ 941.568166][T29753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.575750][T29753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.758651][T29753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.769873][T29753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.812499][T29753] veth1_macvtap: left promiscuous mode [ 941.822498][T29753] veth0_macvtap: left promiscuous mode [ 941.831484][T29753] veth1_vlan: left promiscuous mode [ 941.837176][T29753] veth0_vlan: left promiscuous mode [ 942.418326][T29753] team0 (unregistering): Port device team_slave_1 removed [ 942.458368][T29753] team0 (unregistering): Port device team_slave_0 removed [ 942.840391][ T1945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.880915][ T2486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12217'. [ 942.890029][ T2486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12217'. [ 942.924371][ T1938] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.953513][ T1945] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.991568][T29754] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.998843][T29754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.042527][T29506] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.049868][T29506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.079731][T29506] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.086966][T29506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.298210][T29754] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.305457][T29754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.864969][ T2131] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 944.929553][ T2131] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 945.031614][ T2131] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 945.062578][ T2131] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 945.242667][ T1945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.397104][ T1938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.599292][ T2131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.707538][ T2131] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.829758][T29749] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.837117][T29749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.920717][T29749] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.927977][T29749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.621096][ T1945] veth0_vlan: entered promiscuous mode [ 946.669162][ T1945] veth1_vlan: entered promiscuous mode [ 946.836288][ T1945] veth0_macvtap: entered promiscuous mode [ 946.874626][ T1945] veth1_macvtap: entered promiscuous mode [ 946.925279][ T1945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.029834][ T1945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.118652][T29754] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.137528][ T1938] veth0_vlan: entered promiscuous mode [ 947.175891][T29754] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.200033][T29754] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.223105][T29754] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.486125][ T2131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 947.554980][ T1938] veth1_vlan: entered promiscuous mode [ 947.777452][ T9670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.777823][ T2131] veth0_vlan: entered promiscuous mode [ 947.812923][ T9670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.814789][ T1938] veth0_macvtap: entered promiscuous mode [ 947.860457][ T1938] veth1_macvtap: entered promiscuous mode [ 947.888950][T29506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.906925][T29506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.912451][ T1938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.937294][ T2131] veth1_vlan: entered promiscuous mode [ 947.959285][ T1938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.995693][T29506] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.014966][T29506] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.115658][T29506] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.140194][T29506] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.155122][ T2645] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12114'. [ 948.243545][ T2131] veth0_macvtap: entered promiscuous mode [ 948.399524][ T2642] syzkaller0: entered promiscuous mode [ 948.405194][ T2642] syzkaller0: entered allmulticast mode [ 948.473206][ T2131] veth1_macvtap: entered promiscuous mode [ 952.037490][T29754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.053523][T29754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.206083][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.225079][ T2131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.240658][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 952.353314][ T2131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.469607][T29749] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.489321][T29749] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.563021][T29749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.597781][T29749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.673629][ T2729] netlink: 'syz.3.12255': attribute type 21 has an invalid length. [ 952.723543][ T2729] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12255'. [ 952.829856][ T2729] netlink: 'syz.3.12255': attribute type 5 has an invalid length. [ 952.842414][ T2729] netlink: 3 bytes leftover after parsing attributes in process `syz.3.12255'. [ 953.266220][ T9670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.305059][ T9670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.846727][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.865496][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.387415][T29756] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 954.399975][T29756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 954.408958][T29756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 954.418414][T29756] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 954.428674][T29756] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 955.266844][ T2768] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12266'. [ 955.709406][ T2777] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12269'. [ 955.727561][ T2777] netlink: 16 bytes leftover after parsing attributes in process `syz.8.12269'. [ 956.014994][ T2758] chnl_net:caif_netlink_parms(): no params data found [ 956.488180][T29756] Bluetooth: hci1: command tx timeout [ 956.669577][ T2758] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.715219][ T2758] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.766374][ T2758] bridge_slave_0: entered allmulticast mode [ 956.815325][ T2758] bridge_slave_0: entered promiscuous mode [ 956.858511][ T2758] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.881037][ T2758] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.897156][ T2758] bridge_slave_1: entered allmulticast mode [ 956.906499][ T2758] bridge_slave_1: entered promiscuous mode [ 957.013142][ T2758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.042149][ T2758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.151858][ T2758] team0: Port device team_slave_0 added [ 957.456228][ T2758] team0: Port device team_slave_1 added [ 957.737185][ T2845] syzkaller0: entered promiscuous mode [ 957.754314][ T2845] syzkaller0: entered allmulticast mode [ 957.763714][ T2758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.772291][ T2758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.841347][ T2758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.913017][ T2758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.921331][ T2758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.949538][ T2758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.547701][T29756] Bluetooth: hci1: command tx timeout [ 958.695543][ T2890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12287'. [ 960.632367][T29756] Bluetooth: hci1: command tx timeout [ 961.108091][T12981] syzkaller0: tun_net_xmit 76 [ 961.138075][T26401] syzkaller0: tun_net_xmit 76 [ 962.727234][T29756] Bluetooth: hci1: command tx timeout [ 967.103290][ T2758] hsr_slave_0: entered promiscuous mode [ 967.139476][ T2758] hsr_slave_1: entered promiscuous mode [ 967.164006][ T2758] debugfs: 'hsr0' already exists in 'hsr' [ 967.181460][ T2758] Cannot create hsr debugfs directory [ 967.629580][ T2983] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 969.963638][ T3009] tc_dump_action: action bad kind [ 970.060646][ T3018] netlink: 40 bytes leftover after parsing attributes in process `syz.9.12325'. [ 970.387094][ T3024] netdevsim netdevsim8 : renamed from netdevsim0 (while UP) [ 970.458492][ T3024] netlink: 'syz.8.12327': attribute type 21 has an invalid length. [ 970.497446][ T3024] netlink: 156 bytes leftover after parsing attributes in process `syz.8.12327'. [ 971.060935][ T2758] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 971.100172][ T2758] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 971.184502][ T2758] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 971.243483][ T2758] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 971.859321][ T2758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.930475][ T2758] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.001265][T29754] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.008532][T29754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.198725][T29754] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.206075][T29754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.116577][ T3109] sock: sock_timestamping_bind_phc: sock not bind to device [ 974.227244][ T3129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12355'. [ 977.911532][ T2758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.092588][ T3206] bridge_slave_1: left allmulticast mode [ 978.118390][ T3206] bridge_slave_1: left promiscuous mode [ 978.152574][ T3206] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.340392][ T3206] bridge_slave_0: left allmulticast mode [ 978.359331][ T3206] bridge_slave_0: left promiscuous mode [ 978.371680][ T3206] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.922260][ T3218] delete_channel: no stack [ 980.288865][ T2758] veth0_vlan: entered promiscuous mode [ 980.352516][ T2758] veth1_vlan: entered promiscuous mode [ 980.510777][ T3258] netlink: 'syz.9.12381': attribute type 1 has an invalid length. [ 980.520946][ T3254] syzkaller0: entered promiscuous mode [ 980.526471][ T3254] syzkaller0: entered allmulticast mode [ 985.364868][ T3277] netlink: 'syz.9.12388': attribute type 29 has an invalid length. [ 985.378878][ T3287] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 985.420261][ T3287] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 985.469304][ T2758] veth0_macvtap: entered promiscuous mode [ 985.488139][ T3287] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 985.526876][ T2758] veth1_macvtap: entered promiscuous mode [ 985.602235][T29756] Bluetooth: hci4: unexpected event 0x06 length: 15 > 3 [ 985.663627][ T2758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.728336][ T2758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.752939][T29749] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.776974][ T9661] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.853593][ T9661] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.039402][ T3322] netlink: 'syz.9.12403': attribute type 23 has an invalid length. [ 986.135322][ T9661] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.311986][ T9673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.358682][ T9673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.453437][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.498460][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.773702][ T3359] netlink: 'syz.9.12412': attribute type 61 has an invalid length. [ 987.803900][ T3359] netlink: 36 bytes leftover after parsing attributes in process `syz.9.12412'. [ 989.038765][ T3400] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12421'. [ 991.457702][ T30] audit: type=1107 audit(1775013655.596:8): pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='kX' [ 991.757828][ T3427] Bluetooth: hci4: command 0x0406 tx timeout [ 993.518147][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.525681][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.123195][ T3533] netlink: 180 bytes leftover after parsing attributes in process `syz.2.12455'. [ 994.165624][ T3533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12455'. [ 994.345756][ T3542] netlink: 148 bytes leftover after parsing attributes in process `syz.6.12458'. [ 996.275531][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12469'. [ 998.123130][ T3618] syzkaller0: entered promiscuous mode [ 998.139963][ T3618] syzkaller0: entered allmulticast mode [ 998.436877][ T3634] netlink: 32 bytes leftover after parsing attributes in process `syz.8.12486'. [ 1001.199133][ T3664] netlink: 'syz.8.12492': attribute type 10 has an invalid length. [ 1001.581731][ T3668] delete_channel: no stack [ 1001.591857][ T3664] team0 (unregistering): Port device team_slave_0 removed [ 1001.702166][ T3664] team0 (unregistering): Port device team_slave_1 removed [ 1002.477921][ T3691] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.12499'. [ 1002.804424][ T3705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12501'. [ 1002.896409][ T30] audit: type=1107 audit(1775013667.046:9): pid=3704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=')N=!) .h*QO07' [ 1002.935113][ T3709] netlink: 294 bytes leftover after parsing attributes in process `syz.3.12504'. [ 1002.960338][ T3709] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1003.233728][ T3720] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12507'. [ 1004.668947][ T3713] xt_socket: unknown flags 0x20 [ 1004.876652][ T3736] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12511'. [ 1008.008173][ T3805] netlink: 11930 bytes leftover after parsing attributes in process `syz.3.12533'. [ 1008.035103][ T3805] netlink: 'syz.3.12533': attribute type 7 has an invalid length. [ 1008.060186][ T3805] netlink: 11930 bytes leftover after parsing attributes in process `syz.3.12533'. [ 1008.145364][ T3807] netlink: 'syz.9.12534': attribute type 4 has an invalid length. [ 1008.241594][ T3809] netlink: 'syz.6.12535': attribute type 10 has an invalid length. [ 1009.250552][ T3815] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 1009.258385][ T3822] netlink: 56 bytes leftover after parsing attributes in process `syz.9.12539'. [ 1009.616342][ T3829] sctp: [Deprecated]: syz.3.12540 (pid 3829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1009.616342][ T3829] Use struct sctp_sack_info instead [ 1010.787690][ T3427] Bluetooth: hci3: command 0x0406 tx timeout [ 1011.612775][ T3874] netlink: 68 bytes leftover after parsing attributes in process `syz.6.12552'. [ 1011.928883][ T3885] netlink: 'syz.3.12556': attribute type 6 has an invalid length. [ 1011.936781][ T3885] netlink: 3936 bytes leftover after parsing attributes in process `syz.3.12556'. [ 1012.080259][ T3885] netlink: 'syz.3.12556': attribute type 1 has an invalid length. [ 1012.100603][ T3885] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1014.402716][ T3427] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1014.420166][ T3427] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1014.430777][ T3427] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1014.440629][ T3427] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1014.449186][ T3427] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1015.665652][ T3940] netlink: 14 bytes leftover after parsing attributes in process `syz.6.12569'. [ 1015.780663][ T3903] chnl_net:caif_netlink_parms(): no params data found [ 1015.937366][ T3940] hsr_slave_0: left promiscuous mode [ 1016.051747][ T3940] hsr_slave_1: left promiscuous mode [ 1016.559088][T29756] Bluetooth: hci0: command tx timeout [ 1017.633415][ T3903] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.653234][ T3903] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.674634][ T3903] bridge_slave_0: entered allmulticast mode [ 1017.720541][ T3903] bridge_slave_0: entered promiscuous mode [ 1017.777353][ T3903] bridge0: port 2(bridge_slave_1) entered blocking state [ 1017.805318][ T3903] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.857905][ T3903] bridge_slave_1: entered allmulticast mode [ 1017.866117][ T3903] bridge_slave_1: entered promiscuous mode [ 1018.113635][ T3903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.128454][ T3903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.299523][ T3903] team0: Port device team_slave_0 added [ 1018.317274][ T3903] team0: Port device team_slave_1 added [ 1018.589213][ T3903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.614508][ T3903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1018.627963][T29756] Bluetooth: hci0: command tx timeout [ 1018.793600][ T3903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.857384][ T3903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.921467][ T3903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.027362][ T3903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.178973][ T4008] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12586'. [ 1019.452874][ T3903] hsr_slave_0: entered promiscuous mode [ 1019.468984][ T3903] hsr_slave_1: entered promiscuous mode [ 1019.476268][ T3903] debugfs: 'hsr0' already exists in 'hsr' [ 1019.543581][ T3903] Cannot create hsr debugfs directory [ 1019.628226][ T4022] netlink: 'syz.2.12590': attribute type 1 has an invalid length. [ 1019.681807][ T4025] netlink: 'syz.2.12590': attribute type 1 has an invalid length. [ 1019.703372][ T4022] netlink: 'syz.2.12590': attribute type 4 has an invalid length. [ 1019.743247][ T4025] netlink: 'syz.2.12590': attribute type 4 has an invalid length. [ 1019.777713][ T4022] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.12590'. [ 1019.829519][ T4025] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.12590'. [ 1020.426600][ T4018] syzkaller0: entered promiscuous mode [ 1020.470482][ T4018] syzkaller0: entered allmulticast mode [ 1020.709431][T29756] Bluetooth: hci0: command tx timeout [ 1022.787653][T29756] Bluetooth: hci0: command tx timeout [ 1023.948381][ T4069] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12599'. [ 1024.696708][ T4051] netlink: 763 bytes leftover after parsing attributes in process `syz.9.12595'. [ 1025.328852][T29756] Bluetooth: hci4: SCO packet for unknown connection handle 255 [ 1027.996020][T29756] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1028.580702][ T3903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1028.644554][ T3903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1028.712254][ T3903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1028.773027][ T4145] syzkaller0: entered promiscuous mode [ 1028.791412][ T4145] syzkaller0: entered allmulticast mode [ 1028.810520][ T3903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1029.523073][ T3903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.700897][ T3903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.745645][T29753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.753106][T29753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.880762][T29753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.888051][T29753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.067887][ T3427] Bluetooth: hci2: command 0x2016 tx timeout [ 1030.754127][T29756] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1031.412603][ T4217] openvswitch: netlink: Missing key (keys=1040, expected=10000000) [ 1031.448680][ T3903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.454546][ T4219] netlink: 'syz.3.12637': attribute type 21 has an invalid length. [ 1031.474259][ T4219] IPv6: NLM_F_CREATE should be specified when creating new route [ 1031.951473][ T3903] veth0_vlan: entered promiscuous mode [ 1032.002423][ T3903] veth1_vlan: entered promiscuous mode [ 1032.128680][ T3903] veth0_macvtap: entered promiscuous mode [ 1032.167035][T29756] Bluetooth: hci2: command 0x2016 tx timeout [ 1032.191246][ T3903] veth1_macvtap: entered promiscuous mode [ 1032.291979][ T3903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.326676][ T3903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.370782][T29754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.401001][T29754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.425103][T29754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.443366][T29754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.850894][T29754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.882304][T29754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.992430][ T4250] bridge_slave_1: left allmulticast mode [ 1033.016048][ T4250] bridge_slave_1: left promiscuous mode [ 1033.115329][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.560979][ T4250] bridge_slave_0: left allmulticast mode [ 1033.567678][ T4250] bridge_slave_0: left promiscuous mode [ 1033.573783][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.747917][T29506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.800225][T29506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.171750][T29754] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.319932][ T3427] Bluetooth: hci4: command 0x0406 tx timeout [ 1037.692694][ T4358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12665'. [ 1037.761923][ T4364] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12665'. [ 1037.824679][ T4358] IPv6: NLM_F_CREATE should be specified when creating new route [ 1041.694087][ T4446] netlink: 144 bytes leftover after parsing attributes in process `syz.9.12682'. [ 1043.680379][ T4484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12694'. [ 1044.293451][ T4523] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12703'. [ 1044.377409][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12703'. [ 1044.420662][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12703'. [ 1044.437215][ T4523] netlink: 108 bytes leftover after parsing attributes in process `syz.9.12703'. [ 1044.480213][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12703'. [ 1044.560887][ T4527] IPv6: NLM_F_CREATE should be specified when creating new route [ 1044.573517][ T4527] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1044.581105][ T4527] IPv6: NLM_F_CREATE should be set when creating new route [ 1044.621760][ T4529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1044.629228][ T4529] IPv6: NLM_F_CREATE should be set when creating new route [ 1046.657766][ T3427] Bluetooth: hci2: command 0x2016 tx timeout [ 1048.034446][T29756] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 1048.034959][T29756] Bluetooth: hci2: connection err: -111 [ 1048.235542][T29506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.290799][ T4596] : port 1(macsec0) entered blocking state [ 1048.315503][ T4596] : port 1(macsec0) entered disabled state [ 1048.349419][ T4596] macsec0: entered allmulticast mode [ 1048.360845][ T4596] veth1_macvtap: entered allmulticast mode [ 1048.380573][ T4596] macsec0: entered promiscuous mode [ 1048.449534][T29506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.770630][T29506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.075770][T29756] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1049.150710][T29506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.223198][ T4618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1049.242859][ T4618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1049.259197][ T4618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1049.276197][ T4618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1049.309402][ T4618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1049.391182][ T4614] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 1049.888504][ T4635] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.12722'. [ 1050.407020][T29506] bridge_slave_1: left allmulticast mode [ 1050.475635][T29506] bridge_slave_1: left promiscuous mode [ 1050.486702][T29506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.537477][T29506] bridge_slave_0: left allmulticast mode [ 1050.582355][T29506] bridge_slave_0: left promiscuous mode [ 1050.600630][T29506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.165714][T29756] Bluetooth: hci1: command 0x2016 tx timeout [ 1051.359659][ T3427] Bluetooth: hci3: command tx timeout [ 1051.432936][ T4667] netlink: 288 bytes leftover after parsing attributes in process `syz.2.12732'. [ 1051.630514][T29506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.644009][T29506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.673525][T29506] bond0 (unregistering): Released all slaves [ 1051.735947][ T4673] netlink: 'syz.2.12735': attribute type 10 has an invalid length. [ 1051.964917][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1052.230956][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1052.506337][ T4673] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1053.187769][ T3427] Bluetooth: hci1: command 0x2016 tx timeout [ 1053.342974][ T4615] chnl_net:caif_netlink_parms(): no params data found [ 1053.427965][ T3427] Bluetooth: hci3: command tx timeout [ 1053.954466][ T4615] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.000709][ T4615] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.075606][ T4615] bridge_slave_0: entered allmulticast mode [ 1054.139537][ T4615] bridge_slave_0: entered promiscuous mode [ 1054.227338][ T4615] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.296644][ T4615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.343446][ T4615] bridge_slave_1: entered allmulticast mode [ 1054.394167][ T4615] bridge_slave_1: entered promiscuous mode [ 1054.480125][T29506] hsr_slave_0: left promiscuous mode [ 1054.512911][T29506] hsr_slave_1: left promiscuous mode [ 1054.519381][T29506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.526966][T29506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.540301][T29506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.548787][T29506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1054.564208][T29506] veth1_macvtap: left promiscuous mode [ 1054.570185][T29506] veth0_macvtap: left promiscuous mode [ 1054.577315][T29506] veth1_vlan: left promiscuous mode [ 1054.583261][T29506] veth0_vlan: left promiscuous mode [ 1054.732155][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.740997][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.239146][ T4713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12749'. [ 1055.507782][T29756] Bluetooth: hci3: command tx timeout [ 1055.521632][T29506] team0 (unregistering): Port device team_slave_1 removed [ 1055.552723][T29506] team0 (unregistering): Port device team_slave_0 removed [ 1055.850802][ T4615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.946907][ T4615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.939534][ T4615] team0: Port device team_slave_0 added [ 1056.974274][ T4615] team0: Port device team_slave_1 added [ 1057.130280][ T4747] netlink: 28 bytes leftover after parsing attributes in process `syz.9.12762'. [ 1057.156021][ T4615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.223492][ T4615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.343493][ T4615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.357672][ T4615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.364657][ T4615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.429185][ T4615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.588038][T29756] Bluetooth: hci3: command tx timeout [ 1057.639578][ T4615] hsr_slave_0: entered promiscuous mode [ 1057.673433][ T4615] hsr_slave_1: entered promiscuous mode [ 1057.789575][ T4615] debugfs: 'hsr0' already exists in 'hsr' [ 1057.809236][ T4615] Cannot create hsr debugfs directory [ 1058.193769][ T135] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.509211][T29506] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.685801][ T4787] netlink: 'syz.6.12778': attribute type 9 has an invalid length. [ 1059.704790][ T4787] netlink: 'syz.6.12778': attribute type 11 has an invalid length. [ 1059.741439][ T4787] netlink: 'syz.6.12778': attribute type 12 has an invalid length. [ 1059.764183][ T4787] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.12778'. [ 1059.765643][T29506] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.799152][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12778'. [ 1060.145294][T29506] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.256434][ T4796] syzkaller0: entered promiscuous mode [ 1060.262525][ T4796] syzkaller0: entered allmulticast mode [ 1060.429677][T29506] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.282164][T29756] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 1062.550838][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12799'. [ 1062.579716][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12799'. [ 1064.454645][ T4867] netlink: 'syz.9.12803': attribute type 21 has an invalid length. [ 1064.481637][ T4867] IPv6: NLM_F_CREATE should be specified when creating new route [ 1064.878948][ T4876] netlink: 316 bytes leftover after parsing attributes in process `syz.1.12809'. [ 1064.941777][ T4877] netlink: 'syz.6.12808': attribute type 10 has an invalid length. [ 1065.109936][ T4877] team0: Port device netdevsim0 added [ 1065.579087][T29506] bridge_slave_1: left allmulticast mode [ 1065.617849][T29506] bridge_slave_1: left promiscuous mode [ 1065.657865][T29506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.819439][T29506] bridge_slave_0: left allmulticast mode [ 1065.825223][T29506] bridge_slave_0: left promiscuous mode [ 1065.900384][T29506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.913706][ T4887] netlink: 'syz.1.12813': attribute type 6 has an invalid length. [ 1065.923347][ T4887] netlink: 3936 bytes leftover after parsing attributes in process `syz.1.12813'. [ 1065.958386][ T4887] netlink: 'syz.1.12813': attribute type 1 has an invalid length. [ 1066.088350][T29756] block nbd2: Receive control failed (result -107) [ 1066.154183][ T4888] delete_channel: no stack [ 1066.154643][ T4887] nbd2: detected capacity change from 0 to 339754496 [ 1066.174089][ T4646] block nbd2: Dead connection, failed to find a fallback [ 1066.238812][ T4646] block nbd2: shutting down sockets [ 1066.244561][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.264582][ T4892] netlink: 'syz.2.12815': attribute type 10 has an invalid length. [ 1066.293045][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.325199][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.347669][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.382047][T29756] Bluetooth: hci4: unexpected subevent 0x0c length: 150 > 5 [ 1066.397534][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.411085][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.447845][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.469409][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.479534][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.489923][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.502228][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.513300][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.526613][ T4899] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12817'. [ 1066.536301][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.562159][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.571096][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.581551][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.590969][ T4646] ldm_validate_partition_table(): Disk read failed. [ 1066.598342][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.610288][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.619649][ T4646] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1066.630628][ T4646] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1066.639040][ T4646] Dev nbd2: unable to read RDB block 0 [ 1066.645020][ T4646] nbd2: unable to read partition table [ 1066.665814][ T4646] ldm_validate_partition_table(): Disk read failed. [ 1066.674687][ T4646] Dev nbd2: unable to read RDB block 0 [ 1066.681065][ T4646] nbd2: unable to read partition table [ 1066.795289][T29506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1066.809648][T29506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.820300][T29506] bond0 (unregistering): Released all slaves [ 1066.894467][ T4615] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1066.992027][ T4615] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1067.040705][ T4615] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1067.172956][ T4906] netlink: 'syz.6.12820': attribute type 10 has an invalid length. [ 1067.198826][ T4903] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12819'. [ 1067.230968][ T4615] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1068.737981][T29506] hsr_slave_0: left promiscuous mode [ 1068.758626][T29506] hsr_slave_1: left promiscuous mode [ 1068.774503][T29506] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1068.796560][T29506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.294050][T29506] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.329534][T29506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.376178][T29506] veth1_macvtap: left promiscuous mode [ 1069.399902][T29506] veth0_macvtap: left promiscuous mode [ 1069.409647][T29506] veth1_vlan: left promiscuous mode [ 1069.422125][T29506] veth0_vlan: left promiscuous mode [ 1069.522379][T29756] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 1069.794194][ T4956] netlink: 'syz.9.12838': attribute type 33 has an invalid length. [ 1069.802728][ T4956] netlink: 152 bytes leftover after parsing attributes in process `syz.9.12838'. [ 1069.957397][ T4961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1069.965116][ T4961] IPv6: NLM_F_CREATE should be set when creating new route [ 1071.801542][ T4973] netlink: 16 bytes leftover after parsing attributes in process `syz.6.12842'. [ 1071.815991][ T4973] netem: incorrect gi model size [ 1071.836656][ T4973] netem: change failed [ 1071.964280][ T4615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.131534][ T4615] 8021q: adding VLAN 0 to HW filter on device team0 [ 1072.208632][T29754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.216014][T29754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1072.354225][ T9661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.361513][ T9661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1072.619508][ T4615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1073.973484][ T4615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.118992][ T5019] netlink: 5240 bytes leftover after parsing attributes in process `syz.1.12854'. [ 1075.909702][ T5058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.952677][ T5058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.140315][ T5058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.163209][ T5058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.766938][ T4615] veth0_vlan: entered promiscuous mode [ 1076.787598][ T4615] veth1_vlan: entered promiscuous mode [ 1076.872764][ T4615] veth0_macvtap: entered promiscuous mode [ 1076.915225][ T4615] veth1_macvtap: entered promiscuous mode [ 1077.055800][ T4615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1077.120331][ T4615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1077.420768][ T9661] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.485515][ T9661] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.511670][T29756] Bluetooth: hci1: command 0x2016 tx timeout [ 1077.605187][ T9661] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1077.658395][ T9661] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.088085][T29506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.159490][T29506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.437024][T29754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1078.462891][T29754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1078.796665][ T3427] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 1078.805370][ T3427] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0xff [ 1080.114961][T29756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1080.134641][T29756] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1080.143124][T29756] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1080.154253][T29756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1080.164546][T29756] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1080.777799][ T5175] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12890'. [ 1081.670408][ T5175] team0: Port device team_slave_0 removed [ 1081.684737][ T5175] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1082.247882][ T3427] Bluetooth: hci0: command tx timeout [ 1082.445546][ T5157] chnl_net:caif_netlink_parms(): no params data found [ 1082.787113][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.826715][ T5157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.888529][ T5157] bridge_slave_0: entered allmulticast mode [ 1082.913116][ T5157] bridge_slave_0: entered promiscuous mode [ 1082.984478][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.005146][ T5157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.061824][ T5157] bridge_slave_1: entered allmulticast mode [ 1083.099026][ T5157] bridge_slave_1: entered promiscuous mode [ 1083.233984][ T5242] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12901'. [ 1083.380830][ T5157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.474042][ T5157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.751774][ T5258] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12905'. [ 1083.848573][ T5258] hsr_slave_0: left promiscuous mode [ 1083.923670][ T5258] hsr_slave_1: left promiscuous mode [ 1084.300392][ T5157] team0: Port device team_slave_0 added [ 1084.317677][ T3427] Bluetooth: hci0: command tx timeout [ 1084.327136][ T5157] team0: Port device team_slave_1 added [ 1084.385162][ T5157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.392549][ T5157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.422307][ T5157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.435461][ T5157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.442585][ T5157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.497648][ T5157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.787501][ T5157] hsr_slave_0: entered promiscuous mode [ 1084.823355][ T5157] hsr_slave_1: entered promiscuous mode [ 1084.852344][ T5157] debugfs: 'hsr0' already exists in 'hsr' [ 1084.867079][ T5157] Cannot create hsr debugfs directory [ 1085.786378][ T5157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.115841][ T5157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.397959][ T3427] Bluetooth: hci0: command tx timeout [ 1086.444590][ T5157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.557386][ T3427] Bluetooth: hci0: command tx timeout [ 1089.208360][ T3427] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 1090.641081][ T5157] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1090.698045][ T5157] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1090.809849][ T5157] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1090.845513][ T5157] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1090.958318][ T5375] @: port 1(vlan0) entered blocking state [ 1090.979187][ T5375] @: port 1(vlan0) entered disabled state [ 1090.996110][ T5375] vlan0: entered allmulticast mode [ 1091.007919][ T5375] veth0_vlan: entered allmulticast mode [ 1091.028471][ T5375] vlan0: entered promiscuous mode [ 1091.057522][ T5381] @: port 1(vlan0) entered blocking state [ 1091.063476][ T5381] @: port 1(vlan0) entered forwarding state [ 1091.169854][ T3427] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 1091.343630][ T3427] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 1091.688880][ T5157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.736673][ T5157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.771682][T29754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.778954][T29754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.817365][T29754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.824685][T29754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.841003][ T5413] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1093.904583][ T5157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.146396][ T5157] veth0_vlan: entered promiscuous mode [ 1094.186593][ T5157] veth1_vlan: entered promiscuous mode [ 1094.371893][ T5157] veth0_macvtap: entered promiscuous mode [ 1094.401512][ T5157] veth1_macvtap: entered promiscuous mode [ 1094.484492][ T5157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.534771][ T5157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.562234][ T1096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.580357][ T1096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.678239][ T1096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.724386][ T5468] xt_socket: unknown flags 0x50 [ 1094.736944][ T1096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.149402][T29754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.214957][T29754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.234665][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.265904][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.631377][ T5485] netlink: 20 bytes leftover after parsing attributes in process `syz.9.12958'. [ 1097.384454][ T5520] netlink: 'syz.6.12962': attribute type 21 has an invalid length. [ 1097.426460][ T5520] netlink: 128 bytes leftover after parsing attributes in process `syz.6.12962'. [ 1097.477027][ T5520] netlink: 'syz.6.12962': attribute type 4 has an invalid length. [ 1097.521890][ T5520] netlink: 3 bytes leftover after parsing attributes in process `syz.6.12962'. [ 1097.663297][ T5525] netlink: 'syz.5.12963': attribute type 4 has an invalid length. [ 1097.713400][ T5525] netlink: 152 bytes leftover after parsing attributes in process `syz.5.12963'. [ 1098.104614][ T5537] netlink: 'syz.6.12967': attribute type 1 has an invalid length. [ 1100.260093][ T5525] .`: renamed from bond0 (while UP) [ 1100.341084][ T5554] 2: renamed from team_slave_1 (while UP) [ 1105.193086][ T5655] syzkaller0: entered promiscuous mode [ 1105.230656][ T5655] syzkaller0: entered allmulticast mode [ 1106.651610][ T5680] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.12991'. [ 1109.364720][ T3427] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 1109.405974][ T5720] netlink: 'syz.9.13002': attribute type 10 has an invalid length. [ 1109.421587][ T5720] netlink: 55 bytes leftover after parsing attributes in process `syz.9.13002'. [ 1111.438839][ T5772] netlink: 'syz.2.13010': attribute type 1 has an invalid length. [ 1111.476701][ T5774] syz.1.13014: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1111.597126][ T5774] CPU: 1 UID: 0 PID: 5774 Comm: syz.1.13014 Not tainted syzkaller #0 PREEMPT(full) [ 1111.597169][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1111.597183][ T5774] Call Trace: [ 1111.597196][ T5774] [ 1111.597209][ T5774] dump_stack_lvl+0xe8/0x150 [ 1111.597266][ T5774] warn_alloc+0x249/0x340 [ 1111.597312][ T5774] ? stack_trace_save+0xa9/0x100 [ 1111.597365][ T5774] ? __pfx_warn_alloc+0x10/0x10 [ 1111.597455][ T5774] ? kasan_save_track+0x4f/0x80 [ 1111.597482][ T5774] ? kasan_save_track+0x3e/0x80 [ 1111.597507][ T5774] ? __kasan_kmalloc+0x93/0xb0 [ 1111.597539][ T5774] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1111.597565][ T5774] ? xskq_create+0x56/0x170 [ 1111.597602][ T5774] ? xsk_setsockopt+0x603/0x990 [ 1111.597624][ T5774] ? do_sock_setsockopt+0x17c/0x1b0 [ 1111.597652][ T5774] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1111.597679][ T5774] ? do_syscall_64+0x14d/0xf80 [ 1111.597735][ T5774] __vmalloc_node_range_noprof+0x132/0x1730 [ 1111.597959][ T5774] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1111.598049][ T5774] ? __kasan_kmalloc+0x93/0xb0 [ 1111.598116][ T5774] vmalloc_user_noprof+0xad/0xe0 [ 1111.598152][ T5774] ? xskq_create+0xbf/0x170 [ 1111.598213][ T5774] xskq_create+0xbf/0x170 [ 1111.598267][ T5774] xsk_init_queue+0x8a/0xe0 [ 1111.598321][ T5774] xsk_setsockopt+0x603/0x990 [ 1111.598371][ T5774] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1111.598406][ T5774] ? __pfx_aa_sk_perm+0x10/0x10 [ 1111.598478][ T5774] ? __fget_files+0x2a/0x420 [ 1111.598501][ T5774] ? aa_sock_opt_perm+0xff/0x1a0 [ 1111.598567][ T5774] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1111.598597][ T5774] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1111.598644][ T5774] do_sock_setsockopt+0x17c/0x1b0 [ 1111.598707][ T5774] __x64_sys_setsockopt+0x13d/0x1b0 [ 1111.598827][ T5774] do_syscall_64+0x14d/0xf80 [ 1111.598864][ T5774] ? trace_irq_disable+0x3b/0x150 [ 1111.598901][ T5774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.598930][ T5774] ? clear_bhb_loop+0x40/0x90 [ 1111.598980][ T5774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.599006][ T5774] RIP: 0033:0x7f917ed9c819 [ 1111.599039][ T5774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1111.599057][ T5774] RSP: 002b:00007f917fc2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1111.599081][ T5774] RAX: ffffffffffffffda RBX: 00007f917f015fa0 RCX: 00007f917ed9c819 [ 1111.599097][ T5774] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 1111.599111][ T5774] RBP: 00007f917ee32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1111.599124][ T5774] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1111.599137][ T5774] R13: 00007f917f016038 R14: 00007f917f015fa0 R15: 00007ffd510aacf8 [ 1111.599254][ T5774] [ 1112.004610][ T5774] Mem-Info: [ 1112.018022][ T5774] active_anon:10415 inactive_anon:0 isolated_anon:0 [ 1112.018022][ T5774] active_file:20519 inactive_file:41476 isolated_file:0 [ 1112.018022][ T5774] unevictable:768 dirty:337 writeback:0 [ 1112.018022][ T5774] slab_reclaimable:7110 slab_unreclaimable:106704 [ 1112.018022][ T5774] mapped:29330 shmem:1372 pagetables:1542 [ 1112.018022][ T5774] sec_pagetables:0 bounce:0 [ 1112.018022][ T5774] kernel_misc_reclaimable:0 [ 1112.018022][ T5774] free:1278221 free_pcp:26860 free_cma:0 [ 1112.210140][ T5774] Node 0 active_anon:41200kB inactive_anon:0kB active_file:82076kB inactive_file:165696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:18896kB dirty:1376kB writeback:0kB shmem:3952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13120kB pagetables:5892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1112.278895][T29753] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.290363][ T5774] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1112.404773][ T5774] Node 0 DMA free:11064kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:124kB free_cma:0kB [ 1112.545484][ T5774] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1112.579912][ T5774] Node 0 DMA32 free:1430872kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41000kB inactive_anon:0kB active_file:82076kB inactive_file:165696kB unevictable:1536kB writepending:1376kB zspages:0kB present:3129332kB managed:2552680kB mlocked:0kB bounce:0kB free_pcp:40892kB local_pcp:21252kB free_cma:0kB [ 1112.686412][T29753] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.763836][ T5774] lowmem_reserve[]: 0 0 0 0 0 [ 1112.823322][ T5774] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1112.909820][ T5774] lowmem_reserve[]: 0 0 0 0 0 [ 1112.915415][ T5774] Node 1 Normal free:3671804kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:66752kB local_pcp:32052kB free_cma:0kB [ 1112.978702][T29753] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1112.997849][ T5796] netlink: 'syz.9.13018': attribute type 10 has an invalid length. [ 1113.036034][ T5774] lowmem_reserve[]: 0 0 0 0 0 [ 1113.055759][ T5774] Node 0 DMA: 2*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11064kB [ 1113.097017][ T5774] Node 0 DMA32: 4231*4kB (UME) 5427*8kB (UME) 3507*16kB (UME) 904*32kB (UME) 345*64kB (UME) 823*128kB (UME) 699*256kB (UME) 513*512kB (UME) 358*1024kB (UM) 171*2048kB (UME) 0*4096kB = 1431204kB [ 1113.157709][ T5774] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1113.170569][ T5774] Node 1 Normal: 9*4kB (U) 15*8kB (UM) 10*16kB (UM) 4*32kB (UM) 11*64kB (UM) 7*128kB (UM) 9*256kB (UM) 9*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 892*4096kB (UM) = 3671804kB [ 1113.198378][ T5774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1113.208951][ T5774] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1113.219268][ T5774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1113.230218][ T5774] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1113.245560][ T5774] 63363 total pagecache pages [ 1113.278887][ T5774] 0 pages in swap cache [ 1113.287269][ T5774] Free swap = 124996kB [ 1113.296373][ T5774] Total swap = 124996kB [ 1113.302269][ T5774] 2097051 pages RAM [ 1113.306534][ T5774] 0 pages HighMem/MovableOnly [ 1113.313232][ T5774] 427046 pages reserved [ 1113.318165][ T5774] 0 pages cma reserved [ 1113.327199][T29753] netdevsim netdevsim8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.432982][ T3427] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1113.442151][ T3427] Bluetooth: hci1: Injecting HCI hardware error event [ 1113.451628][ T3427] Bluetooth: hci1: hardware error 0x00 [ 1114.674662][T29756] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 1115.475797][T29756] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1115.512318][ T3427] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1116.156336][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.167887][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.592905][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13021'. [ 1118.099126][T29753] bridge_slave_1: left allmulticast mode [ 1118.104938][T29753] bridge_slave_1: left promiscuous mode [ 1118.137008][T29753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.180631][ T5864] netlink: 'syz.1.13038': attribute type 4 has an invalid length. [ 1118.283251][T29753] bridge_slave_0: left allmulticast mode [ 1118.306999][T29753] bridge_slave_0: left promiscuous mode [ 1118.387985][T29753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.682549][ T3427] Bluetooth: hci4: unexpected subevent 0x0a length: 15 < 30 [ 1119.335715][ T5892] netlink: 'syz.6.13045': attribute type 10 has an invalid length. [ 1119.345457][ T5892] netlink: 2 bytes leftover after parsing attributes in process `syz.6.13045'. [ 1119.385648][T29753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.401771][T29753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.412612][T29753] bond0 (unregistering): Released all slaves [ 1120.603412][ T30] audit: type=1107 audit(1775013784.756:10): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='m@AnrL' [ 1120.755740][ T3427] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1121.059551][ T3427] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 1122.053252][T29753] hsr_slave_0: left promiscuous mode [ 1122.107842][T29753] hsr_slave_1: left promiscuous mode [ 1122.145295][T29753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1122.197605][T29753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1122.242307][T29753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1122.297740][T29753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1122.397175][T29753] veth1_macvtap: left promiscuous mode [ 1122.456265][T29753] veth0_macvtap: left promiscuous mode [ 1122.502111][T29753] veth1_vlan: left promiscuous mode [ 1122.534689][ T3427] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 1122.542073][T29753] veth0_vlan: left promiscuous mode [ 1123.226635][ T3427] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 1125.549762][ T3427] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 1126.302098][ T6021] netlink: 'syz.6.13072': attribute type 11 has an invalid length. [ 1127.517943][ T6055] openvswitch: netlink: Tunnel attr 92 out of range max 16 [ 1129.986570][ T6088] netlink: 'syz.6.13090': attribute type 10 has an invalid length. [ 1130.242474][ T6088] team0: Port device netdevsim0 removed [ 1130.339153][ T6088] batman_adv: batadv0: Adding interface: netdevsim0 [ 1130.346422][ T6088] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1130.483306][ T6100] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13094'. [ 1130.721237][ T6107] netlink: 14 bytes leftover after parsing attributes in process `syz.5.13097'. [ 1130.897275][ T6107] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.503111][ T6107] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.602228][ T6107] .` (unregistering): Released all slaves [ 1131.783347][ T6119] netlink: 'syz.6.13100': attribute type 29 has an invalid length. [ 1131.858301][ T6118] netlink: 'syz.6.13100': attribute type 29 has an invalid length. [ 1131.935139][ T6127] netlink: 'syz.6.13100': attribute type 29 has an invalid length. [ 1132.830538][ T6153] netlink: 'syz.6.13108': attribute type 1 has an invalid length. [ 1133.299829][ T6173] syz.1.13112: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1133.408544][ T6173] CPU: 1 UID: 0 PID: 6173 Comm: syz.1.13112 Not tainted syzkaller #0 PREEMPT(full) [ 1133.408575][ T6173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1133.408587][ T6173] Call Trace: [ 1133.408596][ T6173] [ 1133.408605][ T6173] dump_stack_lvl+0xe8/0x150 [ 1133.408639][ T6173] warn_alloc+0x249/0x340 [ 1133.408666][ T6173] ? stack_trace_save+0xa9/0x100 [ 1133.408692][ T6173] ? __pfx_warn_alloc+0x10/0x10 [ 1133.408737][ T6173] ? kasan_save_track+0x4f/0x80 [ 1133.408759][ T6173] ? kasan_save_track+0x3e/0x80 [ 1133.408778][ T6173] ? __kasan_kmalloc+0x93/0xb0 [ 1133.408801][ T6173] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1133.408824][ T6173] ? xskq_create+0x56/0x170 [ 1133.408844][ T6173] ? xsk_setsockopt+0x603/0x990 [ 1133.408862][ T6173] ? do_sock_setsockopt+0x17c/0x1b0 [ 1133.408884][ T6173] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1133.408905][ T6173] ? do_syscall_64+0x14d/0xf80 [ 1133.408933][ T6173] __vmalloc_node_range_noprof+0x132/0x1730 [ 1133.408991][ T6173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1133.409023][ T6173] ? __kasan_kmalloc+0x93/0xb0 [ 1133.409053][ T6173] vmalloc_user_noprof+0xad/0xe0 [ 1133.409077][ T6173] ? xskq_create+0xbf/0x170 [ 1133.409099][ T6173] xskq_create+0xbf/0x170 [ 1133.409124][ T6173] xsk_init_queue+0x8a/0xe0 [ 1133.409148][ T6173] xsk_setsockopt+0x603/0x990 [ 1133.409172][ T6173] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1133.409201][ T6173] ? __pfx_aa_sk_perm+0x10/0x10 [ 1133.409233][ T6173] ? __fget_files+0x2a/0x420 [ 1133.409250][ T6173] ? aa_sock_opt_perm+0xff/0x1a0 [ 1133.409285][ T6173] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1133.409315][ T6173] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1133.409336][ T6173] do_sock_setsockopt+0x17c/0x1b0 [ 1133.409365][ T6173] __x64_sys_setsockopt+0x13d/0x1b0 [ 1133.409396][ T6173] do_syscall_64+0x14d/0xf80 [ 1133.409419][ T6173] ? trace_irq_disable+0x3b/0x150 [ 1133.409446][ T6173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.409467][ T6173] ? clear_bhb_loop+0x40/0x90 [ 1133.409492][ T6173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.409513][ T6173] RIP: 0033:0x7f917ed9c819 [ 1133.409532][ T6173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.409549][ T6173] RSP: 002b:00007f917fbec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1133.409572][ T6173] RAX: ffffffffffffffda RBX: 00007f917f016180 RCX: 00007f917ed9c819 [ 1133.409586][ T6173] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1133.409599][ T6173] RBP: 00007f917ee32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1133.409612][ T6173] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1133.409624][ T6173] R13: 00007f917f016218 R14: 00007f917f016180 R15: 00007ffd510aacf8 [ 1133.409657][ T6173] [ 1133.415439][ T6173] Mem-Info: [ 1133.713485][ T6173] active_anon:23527 inactive_anon:0 isolated_anon:0 [ 1133.713485][ T6173] active_file:20519 inactive_file:41485 isolated_file:0 [ 1133.713485][ T6173] unevictable:768 dirty:257 writeback:0 [ 1133.713485][ T6173] slab_reclaimable:7112 slab_unreclaimable:104471 [ 1133.713485][ T6173] mapped:40625 shmem:13807 pagetables:1625 [ 1133.713485][ T6173] sec_pagetables:0 bounce:0 [ 1133.713485][ T6173] kernel_misc_reclaimable:0 [ 1133.713485][ T6173] free:1266706 free_pcp:25431 free_cma:0 [ 1133.761112][ T6173] Node 0 active_anon:95008kB inactive_anon:0kB active_file:82076kB inactive_file:165732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60196kB dirty:1028kB writeback:0kB shmem:54192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13012kB pagetables:6336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1133.911735][ T6173] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1134.093218][ T6173] Node 0 DMA free:11064kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:124kB free_cma:0kB [ 1134.241727][ T6173] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1134.292574][ T6173] Node 0 DMA32 free:1365336kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:101752kB inactive_anon:0kB active_file:82076kB inactive_file:165732kB unevictable:1536kB writepending:1040kB zspages:0kB present:3129332kB managed:2552680kB mlocked:0kB bounce:0kB free_pcp:47492kB local_pcp:27440kB free_cma:0kB [ 1134.473813][ T6173] lowmem_reserve[]: 0 0 0 0 0 [ 1134.492430][ T6173] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1134.598010][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1134.607684][ T6173] lowmem_reserve[]: 0 0 0 0 0 [ 1134.625992][ T6173] Node 1 Normal free:3676224kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62280kB local_pcp:27580kB free_cma:0kB [ 1134.637691][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1134.741079][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1134.763823][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1134.785810][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1134.827675][ T6173] lowmem_reserve[]: 0 0 0 0 0 [ 1134.831386][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1134.832487][ T6173] Node 0 DMA: 2*4kB (U) [ 1134.869721][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1134.879416][ T6173] 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11064kB [ 1134.918025][ T6173] Node 0 DMA32: 3262*4kB (UE) 5117*8kB (UME) 2944*16kB (UME) 373*32kB (UE) 147*64kB (UME) 760*128kB (UME) 674*256kB (UE) 508*512kB (UE) 356*1024kB (UM) 168*2048kB (UE) 0*4096kB = 1360960kB [ 1134.939733][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1134.961648][ T6173] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1134.967813][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1134.986185][ T6173] Node 1 Normal: 9*4kB (U) 14*8kB (UM) 10*16kB (UM) 4*32kB (UM) 11*64kB (UM) 8*128kB (UM) 8*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 3*2048kB (U) 893*4096kB (UM) = 3676276kB [ 1135.004634][ T6192] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 1135.046804][ T6173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.083367][ T6173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1135.104824][ T6173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1135.141403][ T6173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1135.171388][ T6173] 79492 total pagecache pages [ 1135.188993][ T6173] 0 pages in swap cache [ 1135.207070][ T6173] Free swap = 124996kB [ 1135.212185][ T6204] syzkaller0: entered promiscuous mode [ 1135.216304][ T6173] Total swap = 124996kB [ 1135.224721][ T6173] 2097051 pages RAM [ 1135.239964][ T6204] syzkaller0: entered allmulticast mode [ 1135.240805][ T6173] 0 pages HighMem/MovableOnly [ 1135.262491][ T6173] 427046 pages reserved [ 1135.282800][ T6173] 0 pages cma reserved [ 1136.217717][ T3427] Bluetooth: hci3: unexpected event 0x32 length: 15 > 9 [ 1141.978577][ T3427] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 1141.993193][ T3427] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1143.547477][ T6371] netlink: 220 bytes leftover after parsing attributes in process `syz.2.13151'. [ 1145.302828][ T6407] net_ratelimit: 978 callbacks suppressed [ 1145.302860][ T6407] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1145.316728][ T6407] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1146.660411][ T6436] netlink: 'syz.1.13172': attribute type 6 has an invalid length. [ 1146.703234][ T6436] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13172'. [ 1147.752306][ T6468] : entered promiscuous mode [ 1148.109405][ T3427] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 1149.435027][ T6510] netlink: 32 bytes leftover after parsing attributes in process `syz.9.13190'. [ 1149.794874][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13195'. [ 1149.879604][ T6527] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13195'. [ 1150.657482][ T6538] netlink: 'syz.2.13196': attribute type 29 has an invalid length. [ 1150.691696][ T6535] netlink: 'syz.2.13196': attribute type 29 has an invalid length. [ 1150.732483][ T6541] netlink: 'syz.2.13196': attribute type 29 has an invalid length. [ 1150.927317][ T6553] netlink: 'syz.5.13201': attribute type 10 has an invalid length. [ 1150.964002][ T6548] netlink: 'syz.9.13198': attribute type 10 has an invalid length. [ 1150.964022][ T6553] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13201'. [ 1151.031615][ T6548] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13198'. [ 1151.044051][ T6553] ipvlan1: entered promiscuous mode [ 1151.044083][ T6553] ipvlan1: entered allmulticast mode [ 1151.044099][ T6553] veth0_vlan: entered allmulticast mode [ 1151.055643][ T6553] bridge0: port 3(ipvlan1) entered blocking state [ 1151.055907][ T6553] bridge0: port 3(ipvlan1) entered disabled state [ 1151.061086][ T6553] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1151.270711][ T6548] batadv0: entered promiscuous mode [ 1151.300178][ T6548] batadv0: entered allmulticast mode [ 1151.439449][ T6548] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1151.637970][ T6570] netlink: 'syz.6.13206': attribute type 3 has an invalid length. [ 1153.687155][ T6589] netlink: 16098 bytes leftover after parsing attributes in process `syz.9.13210'. [ 1154.056021][ T6592] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1154.064854][ T6592] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1155.139412][ T6616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1155.146158][ T6616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1155.192771][ T6620] netlink: 176 bytes leftover after parsing attributes in process `syz.6.13218'. [ 1155.216152][ T6616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1155.231010][ T6617] netlink: 824 bytes leftover after parsing attributes in process `syz.1.13219'. [ 1155.576360][ T6616] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1156.084740][ T6616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1156.185308][ T6624] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13220'. [ 1156.185875][ T6616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1156.280477][ T6616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1156.289860][ T6616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1156.299350][ T6616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1156.308969][ T6616] virt_wifi0 speed is unknown, defaulting to 1000 [ 1156.862739][ T6635] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13223'. [ 1159.340557][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13235'. [ 1159.923219][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13235'. [ 1159.932949][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13235'. [ 1159.944342][ T6697] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13235'. [ 1160.351012][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13239'. [ 1162.000465][ T6748] netlink: 'syz.5.13247': attribute type 10 has an invalid length. [ 1162.017645][ T6748] netlink: 55 bytes leftover after parsing attributes in process `syz.5.13247'. [ 1162.727082][ T6759] netlink: 84 bytes leftover after parsing attributes in process `syz.6.13252'. [ 1163.094523][ T6775] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13257'. [ 1165.546490][ T6835] syz.9.13270: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1165.591320][ T6835] CPU: 0 UID: 0 PID: 6835 Comm: syz.9.13270 Not tainted syzkaller #0 PREEMPT(full) [ 1165.591353][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1165.591365][ T6835] Call Trace: [ 1165.591373][ T6835] [ 1165.591383][ T6835] dump_stack_lvl+0xe8/0x150 [ 1165.591420][ T6835] warn_alloc+0x249/0x340 [ 1165.591448][ T6835] ? stack_trace_save+0xa9/0x100 [ 1165.591475][ T6835] ? __pfx_warn_alloc+0x10/0x10 [ 1165.591510][ T6835] ? kasan_save_track+0x4f/0x80 [ 1165.591531][ T6835] ? kasan_save_track+0x3e/0x80 [ 1165.591553][ T6835] ? __kasan_kmalloc+0x93/0xb0 [ 1165.591575][ T6835] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1165.591599][ T6835] ? xskq_create+0x56/0x170 [ 1165.591620][ T6835] ? xsk_setsockopt+0x603/0x990 [ 1165.591638][ T6835] ? do_sock_setsockopt+0x17c/0x1b0 [ 1165.591661][ T6835] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1165.591684][ T6835] ? do_syscall_64+0x14d/0xf80 [ 1165.591713][ T6835] __vmalloc_node_range_noprof+0x132/0x1730 [ 1165.591773][ T6835] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1165.591807][ T6835] ? __kasan_kmalloc+0x93/0xb0 [ 1165.591839][ T6835] vmalloc_user_noprof+0xad/0xe0 [ 1165.591864][ T6835] ? xskq_create+0xbf/0x170 [ 1165.591887][ T6835] xskq_create+0xbf/0x170 [ 1165.591914][ T6835] xsk_init_queue+0x8a/0xe0 [ 1165.591938][ T6835] xsk_setsockopt+0x603/0x990 [ 1165.591962][ T6835] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1165.591984][ T6835] ? __pfx_aa_sk_perm+0x10/0x10 [ 1165.592017][ T6835] ? __fget_files+0x2a/0x420 [ 1165.592035][ T6835] ? aa_sock_opt_perm+0xff/0x1a0 [ 1165.592072][ T6835] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1165.592098][ T6835] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1165.592119][ T6835] do_sock_setsockopt+0x17c/0x1b0 [ 1165.592164][ T6835] __x64_sys_setsockopt+0x13d/0x1b0 [ 1165.592197][ T6835] do_syscall_64+0x14d/0xf80 [ 1165.592222][ T6835] ? trace_irq_disable+0x3b/0x150 [ 1165.592254][ T6835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.592276][ T6835] ? clear_bhb_loop+0x40/0x90 [ 1165.592304][ T6835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.592324][ T6835] RIP: 0033:0x7fb96e19c819 [ 1165.592347][ T6835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.592365][ T6835] RSP: 002b:00007fb96f10c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1165.592389][ T6835] RAX: ffffffffffffffda RBX: 00007fb96e415fa0 RCX: 00007fb96e19c819 [ 1165.592405][ T6835] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 1165.592418][ T6835] RBP: 00007fb96e232c91 R08: 0000000000000004 R09: 0000000000000000 [ 1165.592432][ T6835] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1165.592446][ T6835] R13: 00007fb96e416038 R14: 00007fb96e415fa0 R15: 00007ffd591a1dc8 [ 1165.592482][ T6835] [ 1165.597104][ T6835] Mem-Info: [ 1166.058066][ T6835] active_anon:21435 inactive_anon:0 isolated_anon:0 [ 1166.058066][ T6835] active_file:20519 inactive_file:41497 isolated_file:0 [ 1166.058066][ T6835] unevictable:768 dirty:305 writeback:0 [ 1166.058066][ T6835] slab_reclaimable:7117 slab_unreclaimable:106170 [ 1166.058066][ T6835] mapped:39593 shmem:12134 pagetables:1676 [ 1166.058066][ T6835] sec_pagetables:0 bounce:0 [ 1166.058066][ T6835] kernel_misc_reclaimable:0 [ 1166.058066][ T6835] free:1264802 free_pcp:26581 free_cma:0 [ 1166.109596][ T6835] Node 0 active_anon:85840kB inactive_anon:0kB active_file:82076kB inactive_file:165780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60068kB dirty:1220kB writeback:0kB shmem:47000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12992kB pagetables:6540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1166.141822][ T6835] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1166.247575][ T6835] Node 0 DMA free:11064kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:200kB local_pcp:76kB free_cma:0kB [ 1166.408412][ T6835] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1166.437308][ T6835] Node 0 DMA32 free:1368396kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:90168kB inactive_anon:0kB active_file:82076kB inactive_file:165780kB unevictable:1536kB writepending:1268kB zspages:0kB present:3129332kB managed:2552680kB mlocked:0kB bounce:0kB free_pcp:43500kB local_pcp:19376kB free_cma:0kB [ 1166.682063][ T6835] lowmem_reserve[]: 0 0 0 0 0 [ 1166.687071][ T6835] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1166.723269][ T6835] lowmem_reserve[]: 0 0 0 0 0 [ 1166.735368][ T6835] Node 1 Normal free:3674572kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63984kB local_pcp:30732kB free_cma:0kB [ 1166.846917][ T6835] lowmem_reserve[]: 0 0 0 0 0 [ 1166.857037][ T6835] Node 0 DMA: 2*4kB (U) 0*8kB 1*16kB (U) 1*32kB (U) 0*64kB 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11064kB [ 1166.933921][ T6835] Node 0 DMA32: 3606*4kB (UME) 5054*8kB (UE) 3014*16kB (UME) 177*32kB (ME) 82*64kB (UME) 780*128kB (UME) 700*256kB (UME) 512*512kB (UME) 357*1024kB (UM) 167*2048kB (UE) 0*4096kB = 1362760kB [ 1167.060052][ T6835] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1167.102548][ T6835] Node 1 Normal: 9*4kB (U) 15*8kB (UM) 11*16kB (UM) 4*32kB (UM) 10*64kB (UM) 7*128kB (UM) 8*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 4*2048kB (U) 892*4096kB (UM) = 3674572kB [ 1167.157145][ T6835] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1167.217571][ T6835] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1167.251292][ T6835] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1167.272507][ T6835] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1167.292062][ T6835] 77428 total pagecache pages [ 1167.323403][ T6835] 0 pages in swap cache [ 1167.426483][ T6835] Free swap = 124996kB [ 1167.448516][ T6835] Total swap = 124996kB [ 1167.468495][ T6835] 2097051 pages RAM [ 1167.472394][ T6835] 0 pages HighMem/MovableOnly [ 1167.507697][ T6835] 427046 pages reserved [ 1167.512475][ T6835] 0 pages cma reserved [ 1169.668317][ T3427] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 1169.679676][ T3427] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1169.944285][ T6900] netlink: 'syz.5.13287': attribute type 10 has an invalid length. [ 1169.997841][ T6900] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13287'. [ 1170.250268][ T6900] bridge0: port 3(ipvlan1) entered blocking state [ 1170.328426][ T6900] bridge0: port 3(ipvlan1) entered disabled state [ 1170.768755][ T6900] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1174.562179][T29756] Bluetooth: hci3: command 0x0406 tx timeout [ 1174.606427][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13295'. [ 1177.346639][ T6989] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13309'. [ 1177.487994][ T3427] Bluetooth: hci4: unexpected cc 0x1004 length: 12 > 11 [ 1177.496319][ T3427] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 1178.109624][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.116081][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.413133][ T3427] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 1179.427170][ T3427] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1179.505543][ T7032] netlink: 'syz.6.13316': attribute type 6 has an invalid length. [ 1180.241157][ T7047] syzkaller0: entered promiscuous mode [ 1180.268127][ T7047] syzkaller0: entered allmulticast mode [ 1181.518175][ T3427] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1181.526990][ T3427] Bluetooth: hci4: Injecting HCI hardware error event [ 1181.535729][ T3427] Bluetooth: hci4: hardware error 0x00 [ 1185.518191][ T3427] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1188.697483][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13344'. [ 1189.702769][ T7151] : renamed from bond_slave_1 [ 1190.458785][ T7161] netlink: 'syz.1.13351': attribute type 9 has an invalid length. [ 1190.466781][ T7161] netlink: 'syz.1.13351': attribute type 11 has an invalid length. [ 1190.474887][ T7161] netlink: 'syz.1.13351': attribute type 12 has an invalid length. [ 1190.483101][ T7161] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.13351'. [ 1190.493085][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13351'. [ 1190.525360][ T7164] netlink: 420 bytes leftover after parsing attributes in process `syz.1.13351'. [ 1191.070250][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13357'. [ 1191.113302][ T7183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13357'. [ 1193.217640][ T7216] netlink: 'syz.2.13368': attribute type 2 has an invalid length. [ 1193.226892][ T7216] tipc: Started in network mode [ 1193.277981][ T7216] tipc: Node identity 1340008, cluster identity 4711 [ 1193.284721][ T7216] tipc: Node number set to 20185096 [ 1197.681471][ T7253] syzkaller0: entered promiscuous mode [ 1197.693102][ T7253] syzkaller0: entered allmulticast mode [ 1198.520748][ T7271] netlink: 'syz.5.13377': attribute type 10 has an invalid length. [ 1202.221971][ T7281] virt_wifi0 speed is unknown, defaulting to 1000 [ 1204.536032][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13392'. [ 1205.402542][ T7345] netlink: 'syz.2.13395': attribute type 11 has an invalid length. [ 1205.510639][T29756] Bluetooth: hci0: command 0x0406 tx timeout [ 1206.602792][ T7371] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13403'. [ 1210.964754][ T7407] netlink: 'syz.1.13412': attribute type 11 has an invalid length. [ 1212.151453][T29756] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1212.161792][T29756] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1212.172348][T29756] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1212.194364][T29756] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1212.208100][T29756] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1212.486673][ T7422] netlink: 4008 bytes leftover after parsing attributes in process `syz.2.13415'. [ 1212.633729][ T7415] virt_wifi0 speed is unknown, defaulting to 1000 [ 1213.063712][ T7428] netlink: 'syz.1.13416': attribute type 10 has an invalid length. [ 1213.073129][ T7428] netlink: 55 bytes leftover after parsing attributes in process `syz.1.13416'. [ 1214.307718][T29756] Bluetooth: hci5: command tx timeout [ 1214.392708][ T7415] chnl_net:caif_netlink_parms(): no params data found [ 1215.077868][ T7415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.125120][ T7415] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.159232][ T7415] bridge_slave_0: entered allmulticast mode [ 1215.194212][ T7415] bridge_slave_0: entered promiscuous mode [ 1215.240352][ T7477] netlink: 'syz.9.13425': attribute type 2 has an invalid length. [ 1215.282139][ T7477] tipc: Started in network mode [ 1215.287087][ T7477] tipc: Node identity 7000f, cluster identity 4711 [ 1215.357765][ T7477] tipc: Node number set to 458767 [ 1215.369050][ T7415] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.419424][ T7415] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.426777][ T7415] bridge_slave_1: entered allmulticast mode [ 1215.512916][ T7415] bridge_slave_1: entered promiscuous mode [ 1215.770002][ T7415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.782864][ T7415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.952812][ T7415] team0: Port device team_slave_0 added [ 1216.010018][ T7415] team0: Port device team_slave_1 added [ 1216.193200][ T7415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1216.204847][ T7415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.236172][ T7415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1216.256239][ T7415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1216.266093][ T7415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1216.293130][ T7415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1216.387657][T29756] Bluetooth: hci5: command tx timeout [ 1216.580497][ T7415] hsr_slave_0: entered promiscuous mode [ 1216.605339][ T7415] hsr_slave_1: entered promiscuous mode [ 1217.412335][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13439'. [ 1218.267748][ T7548] netlink: 'syz.2.13444': attribute type 4 has an invalid length. [ 1218.278527][ T7548] netlink: 17 bytes leftover after parsing attributes in process `syz.2.13444'. [ 1218.311369][ T7549] netlink: 5252 bytes leftover after parsing attributes in process `syz.1.13443'. [ 1218.422877][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13443'. [ 1218.467751][T29756] Bluetooth: hci5: command tx timeout [ 1219.412281][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13449'. [ 1219.983952][ T7415] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1219.990300][ T7582] netlink: 'syz.9.13453': attribute type 1 has an invalid length. [ 1220.258852][ T7582] netlink: 2704 bytes leftover after parsing attributes in process `syz.9.13453'. [ 1220.417453][ T7415] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1220.548998][T29756] Bluetooth: hci5: command tx timeout [ 1220.604025][ T7415] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1220.729161][ T7415] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1220.750947][ T7582] "mq-deadline" elevator initialization, failed -12, falling back to "none" [ 1220.805166][ T7582] ------------[ cut here ]------------ [ 1220.810923][ T7582] !rwb [ 1220.810940][ T7582] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#0: syz.9.13453/7582 [ 1220.824945][ T7582] Modules linked in: [ 1220.829153][ T7582] CPU: 0 UID: 0 PID: 7582 Comm: syz.9.13453 Not tainted syzkaller #0 PREEMPT(full) [ 1220.838579][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1220.848833][ T7582] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1220.855228][ T7582] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 dd df 24 fd eb 18 e8 d6 df 24 fd eb 0d e8 cf df 24 fd 4c 89 ff e8 57 21 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1220.875659][ T7582] RSP: 0018:ffffc9000597ee30 EFLAGS: 00010282 [ 1220.882037][ T7582] RAX: f9fc68722c91d900 RBX: 1ffff1100641fa04 RCX: 0000000000000046 [ 1220.890326][ T7582] RDX: 0000000000000006 RSI: ffffffff8def914b RDI: ffffffff8c27ca00 [ 1220.898449][ T7582] RBP: dffffc0000000000 R08: ffffffff9011b4b7 R09: 1ffffffff2023696 [ 1220.906535][ T7582] R10: dffffc0000000000 R11: fffffbfff2023697 R12: ffff8880320fd020 [ 1220.914958][ T7582] R13: 0000000000000000 R14: ffff888094ade000 R15: ffff8880320fd000 [ 1220.923004][ T7582] FS: 00007fb96f10c6c0(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 1220.932122][ T7582] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1220.938868][ T7582] CR2: 00007f24cf3e7158 CR3: 00000000b43c2000 CR4: 00000000003526f0 [ 1220.946896][ T7582] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 1220.955040][ T7582] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1220.963438][ T7582] Call Trace: [ 1220.966917][ T7582] [ 1220.969913][ T7582] blk_register_queue+0x382/0x430 [ 1220.975513][ T7582] __add_disk+0x677/0xd50 [ 1220.980180][ T7582] ? down_read+0x272/0x2e0 [ 1220.984684][ T7582] add_disk_fwnode+0xfb/0x480 [ 1220.989488][ T7582] nbd_dev_add+0x72c/0xb50 [ 1220.993951][ T7582] ? __pfx_nbd_dev_add+0x10/0x10 [ 1220.999032][ T7582] ? bpf_lsm_capable+0x9/0x20 [ 1221.003751][ T7582] ? security_capable+0x7e/0x2c0 [ 1221.008773][ T7582] ? radix_tree_lookup+0x25c/0x290 [ 1221.013939][ T7582] nbd_genl_connect+0x962/0x1cf0 [ 1221.019134][ T7582] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1221.024553][ T7582] ? rcu_is_watching+0x15/0xb0 [ 1221.029504][ T7582] ? trace_kmalloc+0x2a/0x110 [ 1221.034232][ T7582] ? __nla_parse+0x40/0x60 [ 1221.038720][ T7582] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1221.045115][ T7582] genl_family_rcv_msg_doit+0x22a/0x330 [ 1221.050808][ T7582] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1221.057042][ T7582] genl_rcv_msg+0x61c/0x7a0 [ 1221.061728][ T7582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1221.066808][ T7582] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1221.072265][ T7582] ? __lock_acquire+0x6b5/0x2cf0 [ 1221.077835][ T7582] netlink_rcv_skb+0x232/0x4b0 [ 1221.082653][ T7582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1221.087947][ T7582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1221.093319][ T7582] ? down_read+0x272/0x2e0 [ 1221.097819][ T7582] ? genl_rcv+0xd/0x40 [ 1221.101948][ T7582] genl_rcv+0x28/0x40 [ 1221.105972][ T7582] netlink_unicast+0x80f/0x9b0 [ 1221.111172][ T7582] ? __pfx_netlink_unicast+0x10/0x10 [ 1221.116516][ T7582] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1221.122250][ T7582] ? netlink_sendmsg+0x650/0xb40 [ 1221.127227][ T7582] ? skb_put+0x11b/0x210 [ 1221.131558][ T7582] netlink_sendmsg+0x813/0xb40 [ 1221.136375][ T7582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.142368][ T7582] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1221.147379][ T7582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1221.152783][ T7582] ____sys_sendmsg+0x972/0x9f0 [ 1221.157627][ T7582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1221.163055][ T7582] ? import_iovec+0x73/0xa0 [ 1221.167814][ T7582] ___sys_sendmsg+0x2a5/0x360 [ 1221.172545][ T7582] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.178443][ T7582] ? __fget_files+0x2a/0x420 [ 1221.183061][ T7582] ? __fget_files+0x3a0/0x420 [ 1221.188341][ T7582] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1221.193331][ T7582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1221.198964][ T7582] ? rcu_is_watching+0x15/0xb0 [ 1221.203794][ T7582] do_syscall_64+0x14d/0xf80 [ 1221.208485][ T7582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.214586][ T7582] ? clear_bhb_loop+0x40/0x90 [ 1221.219439][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.225383][ T7582] RIP: 0033:0x7fb96e19c819 [ 1221.229975][ T7582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.249890][ T7582] RSP: 002b:00007fb96f10c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1221.258373][ T7582] RAX: ffffffffffffffda RBX: 00007fb96e415fa0 RCX: 00007fb96e19c819 [ 1221.266405][ T7582] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000006 [ 1221.274934][ T7582] RBP: 00007fb96e232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1221.283785][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.292041][ T7582] R13: 00007fb96e416038 R14: 00007fb96e415fa0 R15: 00007ffd591a1dc8 [ 1221.300096][ T7582] [ 1221.303147][ T7582] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1221.310450][ T7582] CPU: 0 UID: 0 PID: 7582 Comm: syz.9.13453 Not tainted syzkaller #0 PREEMPT(full) [ 1221.319856][ T7582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1221.329947][ T7582] Call Trace: [ 1221.333250][ T7582] [ 1221.336208][ T7582] vpanic+0x56c/0xa60 [ 1221.340242][ T7582] ? __pfx__printk+0x10/0x10 [ 1221.344888][ T7582] ? __pfx_vpanic+0x10/0x10 [ 1221.349428][ T7582] ? is_bpf_text_address+0x292/0x2b0 [ 1221.354835][ T7582] ? is_bpf_text_address+0x26/0x2b0 [ 1221.360081][ T7582] panic+0xc5/0xd0 [ 1221.363843][ T7582] ? __pfx_panic+0x10/0x10 [ 1221.368297][ T7582] __warn+0x315/0x4f0 [ 1221.372388][ T7582] ? wbt_init_enable_default+0x18a/0x220 [ 1221.378034][ T7582] ? wbt_init_enable_default+0x18a/0x220 [ 1221.383677][ T7582] __report_bug+0x29a/0x540 [ 1221.388208][ T7582] ? netlink_rcv_skb+0x232/0x4b0 [ 1221.393180][ T7582] ? genl_rcv+0x28/0x40 [ 1221.397467][ T7582] ? netlink_unicast+0x80f/0x9b0 [ 1221.402459][ T7582] ? wbt_init_enable_default+0x18a/0x220 [ 1221.408203][ T7582] ? __pfx___report_bug+0x10/0x10 [ 1221.413264][ T7582] ? perf_trace_preemptirq_template+0xb2/0x350 [ 1221.419527][ T7582] ? kasan_quarantine_put+0x2f/0x1f0 [ 1221.424831][ T7582] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 1221.431707][ T7582] ? wbt_init_enable_default+0x18a/0x220 [ 1221.437351][ T7582] report_bug+0x16a/0x220 [ 1221.441716][ T7582] ? wbt_init_enable_default+0x18a/0x220 [ 1221.447361][ T7582] ? wbt_init_enable_default+0x18c/0x220 [ 1221.453174][ T7582] handle_bug+0x9c/0x200 [ 1221.457520][ T7582] exc_invalid_op+0x1a/0x50 [ 1221.462078][ T7582] asm_exc_invalid_op+0x1a/0x20 [ 1221.466941][ T7582] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 1221.473193][ T7582] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 dd df 24 fd eb 18 e8 d6 df 24 fd eb 0d e8 cf df 24 fd 4c 89 ff e8 57 21 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 1221.492933][ T7582] RSP: 0018:ffffc9000597ee30 EFLAGS: 00010282 [ 1221.499024][ T7582] RAX: f9fc68722c91d900 RBX: 1ffff1100641fa04 RCX: 0000000000000046 [ 1221.507010][ T7582] RDX: 0000000000000006 RSI: ffffffff8def914b RDI: ffffffff8c27ca00 [ 1221.514991][ T7582] RBP: dffffc0000000000 R08: ffffffff9011b4b7 R09: 1ffffffff2023696 [ 1221.522970][ T7582] R10: dffffc0000000000 R11: fffffbfff2023697 R12: ffff8880320fd020 [ 1221.531051][ T7582] R13: 0000000000000000 R14: ffff888094ade000 R15: ffff8880320fd000 [ 1221.539187][ T7582] blk_register_queue+0x382/0x430 [ 1221.544254][ T7582] __add_disk+0x677/0xd50 [ 1221.548604][ T7582] ? down_read+0x272/0x2e0 [ 1221.553044][ T7582] add_disk_fwnode+0xfb/0x480 [ 1221.557745][ T7582] nbd_dev_add+0x72c/0xb50 [ 1221.562180][ T7582] ? __pfx_nbd_dev_add+0x10/0x10 [ 1221.567143][ T7582] ? bpf_lsm_capable+0x9/0x20 [ 1221.571837][ T7582] ? security_capable+0x7e/0x2c0 [ 1221.576799][ T7582] ? radix_tree_lookup+0x25c/0x290 [ 1221.581920][ T7582] nbd_genl_connect+0x962/0x1cf0 [ 1221.586890][ T7582] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1221.592390][ T7582] ? rcu_is_watching+0x15/0xb0 [ 1221.597176][ T7582] ? trace_kmalloc+0x2a/0x110 [ 1221.601960][ T7582] ? __nla_parse+0x40/0x60 [ 1221.606477][ T7582] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1221.612841][ T7582] genl_family_rcv_msg_doit+0x22a/0x330 [ 1221.618585][ T7582] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1221.625126][ T7582] genl_rcv_msg+0x61c/0x7a0 [ 1221.629691][ T7582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1221.634822][ T7582] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1221.640312][ T7582] ? __lock_acquire+0x6b5/0x2cf0 [ 1221.645366][ T7582] netlink_rcv_skb+0x232/0x4b0 [ 1221.650141][ T7582] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1221.655178][ T7582] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1221.660489][ T7582] ? down_read+0x272/0x2e0 [ 1221.664929][ T7582] ? genl_rcv+0xd/0x40 [ 1221.669013][ T7582] genl_rcv+0x28/0x40 [ 1221.673352][ T7582] netlink_unicast+0x80f/0x9b0 [ 1221.678315][ T7582] ? __pfx_netlink_unicast+0x10/0x10 [ 1221.683786][ T7582] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 1221.689357][ T7582] ? netlink_sendmsg+0x650/0xb40 [ 1221.694421][ T7582] ? skb_put+0x11b/0x210 [ 1221.698768][ T7582] netlink_sendmsg+0x813/0xb40 [ 1221.703553][ T7582] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.708866][ T7582] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1221.713836][ T7582] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1221.719149][ T7582] ____sys_sendmsg+0x972/0x9f0 [ 1221.724054][ T7582] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1221.729379][ T7582] ? import_iovec+0x73/0xa0 [ 1221.733911][ T7582] ___sys_sendmsg+0x2a5/0x360 [ 1221.738609][ T7582] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.743856][ T7582] ? __fget_files+0x2a/0x420 [ 1221.748564][ T7582] ? __fget_files+0x3a0/0x420 [ 1221.753356][ T7582] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1221.758316][ T7582] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1221.763880][ T7582] ? rcu_is_watching+0x15/0xb0 [ 1221.768676][ T7582] do_syscall_64+0x14d/0xf80 [ 1221.773300][ T7582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.779414][ T7582] ? clear_bhb_loop+0x40/0x90 [ 1221.784129][ T7582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.790129][ T7582] RIP: 0033:0x7fb96e19c819 [ 1221.794650][ T7582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.814360][ T7582] RSP: 002b:00007fb96f10c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1221.822809][ T7582] RAX: ffffffffffffffda RBX: 00007fb96e415fa0 RCX: 00007fb96e19c819 [ 1221.830813][ T7582] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000006 [ 1221.838893][ T7582] RBP: 00007fb96e232c91 R08: 0000000000000000 R09: 0000000000000000 [ 1221.846874][ T7582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.854947][ T7582] R13: 00007fb96e416038 R14: 00007fb96e415fa0 R15: 00007ffd591a1dc8 [ 1221.862951][ T7582] [ 1221.866424][ T7582] Kernel Offset: disabled [ 1221.870876][ T7582] Rebooting in 86400 seconds..