last executing test programs: 10m11.085810045s ago: executing program 32 (id=585): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 9m47.720786166s ago: executing program 33 (id=642): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x5, 0x7, 0x8, 0x0, 0x80000001, 0x100, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8000000000000000, 0x5}, 0x4, 0x1, 0x9, 0x2, 0x10000, 0xc, 0x9, 0x0, 0x7f, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a0013", 0x33}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2000000000000007, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x40, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) 9m41.63848012s ago: executing program 34 (id=683): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r2, &(0x7f0000000080)={&(0x7f0000000140)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000"], 0x18}, 0x922bac8552bdad9e) 8m47.499853729s ago: executing program 35 (id=1087): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x75, 0x1ef7}, 0x20, 0x4, 0x98, 0x0, 0x2, 0x9, 0xff17, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x85, 0xd, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x104, 0x2, @perf_bp={0x0, 0x12}, 0x2, 0x576b, 0xa, 0x8, 0xc6, 0x4, 0x1003, 0x0, 0xffdffff9, 0x0, 0x8}, 0x0, 0x100000000000000b, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 8m11.355670516s ago: executing program 36 (id=1206): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90024, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x3}, 0x8224, 0x2, 0x400, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 8m3.513872673s ago: executing program 37 (id=1326): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x9, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r3, r1, 0x4, r0}, 0x10) 7m24.695622692s ago: executing program 38 (id=1513): socket$kcm(0x10, 0x400000002, 0x0) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x2, 0x1946}, 0x10, 0x6, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x1}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000020c0)={&(0x7f0000002000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x1, [{0xffffffff, 0x2, 0xfffffffd}]}]}}, &(0x7f0000002080)=""/49, 0x32, 0x31, 0x1, 0x10000001}, 0x28) 7m23.780217222s ago: executing program 39 (id=1522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x80) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffed, 0x0, @perf_config_ext={0x74, 0x1ef7}, 0x11efa, 0x4, 0x1, 0x3, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000440)=@phonet={0x23, 0x0, 0x0, 0x14}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="270502001c0014000600002fb96db4f7babe05000700810005008100", 0x1c}, {&(0x7f0000000280)="991b0d9e9def56e4bbdf", 0xa}], 0x2}, 0x30040805) 7m10.133472524s ago: executing program 40 (id=1572): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x10, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x102256, 0x0, 0x0, 0x8, 0x5, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 6m7.828777266s ago: executing program 4 (id=1840): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0xc8, 0x4000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x7, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10ff"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xffc0) 6m7.596698932s ago: executing program 4 (id=1841): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x1e, 0x4, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x7, 0x3}}]}}]}, 0x44}}, 0x4000010) 6m7.198818782s ago: executing program 4 (id=1844): r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x1000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) 6m4.857209045s ago: executing program 4 (id=1846): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f0000000200)) 6m1.893384838s ago: executing program 41 (id=1815): socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x85, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec1006"], 0x10b8}, 0x200008c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) 6m1.841501412s ago: executing program 4 (id=1848): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x255012, 0x0) 6m1.340236447s ago: executing program 4 (id=1849): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1}, 0x2) 5m46.140721326s ago: executing program 42 (id=1849): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/143, 0x8f}], 0x1}, 0x2) 5m18.706430135s ago: executing program 9 (id=2014): r0 = syz_clone(0x108000, 0x0, 0xffffffffffffffd2, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xb}, 0xbafa, 0xff, 0x7fffffff, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x10f) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x3a85821, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1032025, 0x0) 5m17.807436898s ago: executing program 9 (id=2020): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) close(r2) 5m16.970661199s ago: executing program 9 (id=2022): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {0xfff1}, {0xffff, 0xe}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0xc004841}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$kcm(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000440)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000480)='cpuset.effective_mems\x00', 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8905, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x11b, 0x4, &(0x7f0000000000), 0x18) 5m16.626097046s ago: executing program 9 (id=2024): r0 = socket$kcm(0x10, 0x2, 0x0) close(0x3) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0x1a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 5m16.288789444s ago: executing program 9 (id=2025): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 5m15.579790245s ago: executing program 9 (id=2029): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) close(r4) 5m0.432086919s ago: executing program 43 (id=2029): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) close(r4) 3m49.670859684s ago: executing program 1 (id=2374): socket$kcm(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3m46.254956768s ago: executing program 0 (id=2377): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x48000) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x3a) 3m46.232943044s ago: executing program 1 (id=2378): socket$kcm(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x11170, 0x7, 0x7ffffffe, 0x9, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000000206010300000000000000000000000005000500000000000900020073797a3200000000050004000000000005000100070000000d0003006c6973743a73657400000200"], 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0601010000000d0000000000000000050001000700000014000880100007800900130073797a32000000000900020073797a320000000008000940000000003015ade11f4c9c981bee2c89698b47d48a0de50495300c0185fab9d18aa913b2579854c09b30099de0565ad5b673ee428d0e850f9a59139eaedb636f60ce292889c46a89013b074b8b2648407849b00d0fdbb4652a27515328d8d627c564221ad1a2997b6dcd6da7714a031616a14afb0ec22cd15974e602514d7889694439e5795c3a147993da7af1ce74e7151f"], 0x44}}, 0x0) 3m45.972301304s ago: executing program 0 (id=2381): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls}, 0x94) fstat(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) socket$caif_seqpacket(0x25, 0x5, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000003c00010325bd7000fd0014ff080000000800030014"], 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x4048800) 3m45.700775716s ago: executing program 1 (id=2383): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x3, 0x16, 0x3, 0x0, 0xffffffff, 0x4494, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x7, 0x9}, 0x10, 0x8, 0x4, 0x5, 0xffffffffffffff47, 0x3, 0x1, 0x0, 0xfffffbff, 0x0, 0x7}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0xa0040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x8040, 0x8, 0x0, 0x0, 0x7ffe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x16, 0x107, 0xfffffffe, 0x25dfdbff, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc404) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3m45.540290846s ago: executing program 0 (id=2384): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x19, &(0x7f0000000100)=r0, 0xfebf) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000001) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x8880, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0x4, 0x2, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[], 0xfffffeff) 3m45.292631668s ago: executing program 0 (id=2388): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x225451, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 3m45.273653243s ago: executing program 1 (id=2389): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000), 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 3m45.042246093s ago: executing program 0 (id=2390): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0}, 0x12000) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0x17, &(0x7f0000000000), 0x4) 3m44.904093288s ago: executing program 1 (id=2392): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x7}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) close(r1) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1], 0x9a) 3m40.892526462s ago: executing program 0 (id=2404): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x7, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 3m40.892117501s ago: executing program 1 (id=2405): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) 3m40.454059635s ago: executing program 44 (id=2405): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000004c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x0, 0x1}}, 0x80, 0x0}, 0x0) 3m40.225783594s ago: executing program 45 (id=2404): bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x7, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x6018, 0x0, 0x2, 0x6, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70200001400009e219999dcade5b2c9f000b703000000000d008500000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000200000000000000000000030000000000000000000000000000000000000000000000010502"], 0x0, 0x42}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 2m2.607485831s ago: executing program 6 (id=2726): socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x8000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x15, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002500010125bd7000fbfffffe8c0000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) 2m1.307365204s ago: executing program 6 (id=2730): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x6, 0x804, 0x0, 0x7}, {0x10400002, 0x2, 0x0, 0x5}], 0x10, 0xfffffffd}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) close(r0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10, 0x0}, 0x40) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000280)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000001d00)='z', 0x1}], 0x1}, 0x4004) 2m0.213628015s ago: executing program 6 (id=2731): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000001c00)=""/4061, 0xfdd}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f0000004980)=""/4117, 0x1015}], 0x3}, 0x0) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) getpid() gettid() r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) fstat(0xffffffffffffffff, 0x0) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xc850) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m59.214105268s ago: executing program 6 (id=2732): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x2, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x200, 0x5, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m58.154007723s ago: executing program 6 (id=2741): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe3a) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x24000000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)={0x2, 0x9, 0x4, 0x3, 0x2, 0x0, 0x70bd26, 0x25dfdbfb}, 0x10}}, 0x4000000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x20000010) 1m57.426481901s ago: executing program 6 (id=2744): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f0000000640)) 1m42.20874927s ago: executing program 46 (id=2744): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x0, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x541b, &(0x7f0000000640)) 9.974897501s ago: executing program 7 (id=3150): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x2, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x1, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="24000000240001002cbd7000fcdbdf250400000006000300000000000600040000000000167dabcd036fe832d85efb69a79dd1571673a2b7e4c593b09fed59f1d4600d1dca924219a48047eae4c49e44fcc61eac63b1e608fb03eb97a08f1af28dc61715d02b396b5ffce147ff1caf8deeea157cb713c8926b724bcf623397766ae371bea14aa200630174dc572877b21c5af952b48bb777117458fa21195f8376a0"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x240400d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x90}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7d}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 8.709323397s ago: executing program 7 (id=3153): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_config_ext={0xd, 0x9}, 0x104101, 0x4, 0x0, 0x1, 0x6, 0x4, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x3c, 0x301, 0x70bd25, 0xfffffffc, {0x9}, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200448d3}, 0x24040000) 8.374662374s ago: executing program 7 (id=3158): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x20) r0 = socket$kcm(0x15, 0x5, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10100, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x5, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000002c0)='syzkaller\x00') sendmsg$kcm(r0, 0x0, 0x4000000) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r6, r5}) sendmsg$kcm(r4, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0) 3.882166226s ago: executing program 2 (id=3160): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20080e4) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0x1, 0x58, &(0x7f0000000800)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008bc0)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4060124}, 0x0) 3.835828884s ago: executing program 5 (id=3161): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000057dfd0000000000f12b00008500000027000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007300000095"], &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x4, [@fwd={0xd}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x7f}}, @fwd={0x4}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @type_tag={0xa, 0x0, 0x0, 0x12, 0x2}, @func={0xf, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x61, 0x0]}}, &(0x7f00000005c0)=""/137, 0x70, 0x89, 0x0, 0x5}, 0x28) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xc}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$ENABLE_STATS(0x20, &(0x7f00000006c0), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x70bd26, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0xc44b, '\x00', r3, r4, 0x4, 0x5, 0x3}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547eb5c08695b2c89b6f5bec", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r8 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) 3.767701852s ago: executing program 8 (id=3162): socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random='\v\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) socket$kcm(0x2, 0xa, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x40}, 0x40000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x11040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000100000000000200000a140000001100010009"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000001600730027b570f8ffffffff1a7c00000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x94) 3.677122837s ago: executing program 7 (id=3163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000d0}, 0x20040085) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002200)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040011}, 0x24040808) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 3.604448443s ago: executing program 3 (id=3164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef18e43b, 0x2, @perf_config_ext={0x2, 0x5}, 0x200, 0x0, 0x0, 0x4, 0x2, 0x80000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001c000380180000800c0001800600ae60d52600000800034000000001"], 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4040080) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) 3.566375426s ago: executing program 2 (id=3165): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0xa6240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x43fa, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x50, 0x71, 0x10, 0x1a}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) setsockopt$sock_attach_bpf(r0, 0x6, 0x24, 0x0, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={0x14, 0x2e, 0x107, 0xfffffffc, 0x4, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0x2400c080) close(r2) 3.109122222s ago: executing program 2 (id=3166): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8, 0x1, 0x0, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xead3086ce9776e26}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xb, 0xffffffffffffffff, 0x0) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x10, &(0x7f0000000000)=r6, 0xc) 3.039149397s ago: executing program 8 (id=3167): perf_event_open(&(0x7f0000000040)={0x5, 0x6c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x428, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.461421434s ago: executing program 3 (id=3168): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0x3fe, 0x7ffffffc, 0x4400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r1 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000680)={&(0x7f00000004c0)={0x54, 0x5, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040880}, 0x40040) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x28, 0x0, 0x2, 0x0, 0x10000, @value=r0}, 0x28) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x4b, &(0x7f0000000480), 0x63) 2.373604946s ago: executing program 8 (id=3169): socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40010040) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) socket$nl_rdma(0x10, 0x3, 0x14) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x4f21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x40}, 0x20000000) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 2.37180883s ago: executing program 5 (id=3170): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x80010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0xfffc, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x10, 0x2, 0x0) r4 = getpid() r5 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113e00000000008510000002000000b7000000000080009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x22) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r8], 0x12) 2.169746545s ago: executing program 2 (id=3171): socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0xf}, 0x400, 0x5, 0xfffffffe, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x4, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) 2.167935958s ago: executing program 7 (id=3172): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x4, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b"], 0xe0}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x7) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}]}, 0x34}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{0x0}, {&(0x7f0000001980)="7d586d16062b1e1b9685b8", 0xb}], 0x2}, 0x24000008) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5", 0xffffff6e}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.137693838s ago: executing program 8 (id=3173): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000011) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xc040ff0b, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x4005) 2.013006361s ago: executing program 3 (id=3174): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000071000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) socket$kcm(0x10, 0x2, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x26e1, 0x3f) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) 2.010816424s ago: executing program 5 (id=3175): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x441, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100200000000000000000008500000017000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0xad, 0x1, 0x0, 0x0, 0x0, 0x1b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000001, 0xfffffffffffffffd}, 0x0, 0x0, 0xcd, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40001ff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x3, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000100000000000200000a14000000110001"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000160073f50000000000feffdf037c00000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x40051}, 0x20048010) 1.575632078s ago: executing program 3 (id=3176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200"/45], 0x0, 0x37}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x9, &(0x7f0000000800), 0x4) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000100000001"], 0x20}, 0x40004) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a0b0400000000000000000200000248000480440001800b00010074617267657400003400028008000240000000010d000100434f4e4e4d41524b000000ea14000300e4624777db9d97adbf2cd16d6fb1131fe40000000900020073797a32000000000900010073797a30"], 0x9c}}, 0x0) 1.569744162s ago: executing program 8 (id=3177): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000003009500000000000000bfa000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x29, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500), &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf1, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000240), 0x8, 0xc3, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd090000840000"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000001100)={0x0, &(0x7f0000001180)=""/127, 0x0, 0x0, 0x6e, r1}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2000001946}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xfffc, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000002840)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2", 0x7f}, {0x0}, {&(0x7f00000015c0)}, {&(0x7f0000001680)="34e2266a7c2dcc7a931abd74a3f47e80848e0c67236e88b5f294201a0220a72d204188b30ab2db3cefb82b8ef0222959abe5c265cb201a22a4e25286", 0x3c}, {&(0x7f0000001740)}], 0x5}, 0x9cdc2384056b48b8) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@deltaction={0x24, 0x31, 0x111, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x44014}, 0x4024004) 1.504466472s ago: executing program 2 (id=3178): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000021c0)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x0, 0x6}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000f0ffffff91113b00000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/194, 0xc2}], 0x1}, 0x40000101) sendmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000280)='C', 0x1}], 0x1}, 0x8801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="f7ffcc201000"}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r5, 0xe, 0x1, 0xfffffff7, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 1.385117843s ago: executing program 5 (id=3179): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x8, 0x10000}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x20000000) 1.033337331s ago: executing program 7 (id=3180): socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, 0x0, 0x8000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x194a}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0018000000e0000009000000000000000002000100000000000000000200000000030005000800000002000000e0000001000000000000000010fa15b25b598ec8f3f1f94040ae1ccbbc0d7c85e598712cb1cb8d995d418dafde924102105868a8"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a31000000000500010007000000080009400000000588"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a81400002a00070127bd700000000000017c00000c00028005007c8028000000040007000c"], 0x14a8}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 952.432074ms ago: executing program 8 (id=3181): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffffffff, 0x4, 0x3fe, 0x2, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002800)='A', 0x1}], 0x1}, 0x4040) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x1c48}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 900.879585ms ago: executing program 3 (id=3182): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000c00)=""/4046, 0xfce}, {&(0x7f0000003940)=""/4104, 0x1008}], 0x2}, 0x0) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000280)={0x5, 0x80, 0x80, 0x7, 0x0, 0x6, 0x0, 0x1, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000040), 0xf}, 0x1, 0x6f0e, 0x9, 0x6, 0x1, 0x9, 0xc, 0x0, 0x3, 0x0, 0x100000001}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x9) mount$bpf(0x0, 0x0, &(0x7f0000000100), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB]) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200448d3}, 0x40000) 595.388012ms ago: executing program 5 (id=3183): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0xfcc9}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x7d17847d47cd307b}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x200048c4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000080), 0x0}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000ae0000009510000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 9.265068ms ago: executing program 3 (id=3184): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18, 0x2, {{0xa0d8, 0xa, 0x0, 0x0, 0xd99}, 0x8, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1d, 0x11, 0x3, 0x6, {0x6, 0x81, 0x6, 0x80006, 0x6, 0x1}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83654, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x5, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0xe346, 0x10}, 0xc) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000009c0)=@o_path={&(0x7f0000000940)='./file0\x00', r4, 0x4000, r1}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x0, 0x3, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x14, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x200}, [@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x4d}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}]}, &(0x7f0000000040)='syzkaller\x00', 0x9, 0x89, &(0x7f00000005c0)=""/137, 0x0, 0x4a, '\x00', 0x0, @fallback=0x16, r2, 0x8, &(0x7f00000000c0)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000200), &(0x7f0000000700)=[{0x1, 0x80000001, 0xd, 0x6}, {0x4, 0x5, 0x9}, {0x4, 0x2, 0xb, 0x1}, {0x4, 0x1, 0xa, 0x3}, {0x0, 0x5, 0x0, 0xb}], 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) 1.398771ms ago: executing program 2 (id=3194): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24048840) ioctl$TUNSETOFFLOAD(r0, 0x40049409, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r3, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000004180)={0x0, 0x0, &(0x7f0000004140)={&(0x7f0000000240)={0x20, 0x38, 0x1, 0x70bd2b, 0x25dfdbff, {0xc}, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4) 0s ago: executing program 5 (id=3185): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010"], 0x7c}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x0, 0x5c}, 0x6e, 0x0}, 0x20000) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) kernel console output (not intermixed with test programs): T6883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.907793][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.915194][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.122580][T11344] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 340.141707][T11344] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 340.171392][T11344] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 340.212433][T11083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.221273][T11344] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 340.391739][T11083] veth0_vlan: entered promiscuous mode [ 340.424228][T11103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.435051][T11083] veth1_vlan: entered promiscuous mode [ 340.538731][T11344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.548787][T11083] veth0_macvtap: entered promiscuous mode [ 340.578603][T11083] veth1_macvtap: entered promiscuous mode [ 340.603993][T11344] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.651569][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.658766][ T6880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.679593][T11083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.695591][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.702943][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.734934][T11083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.762698][ T3570] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.778088][ T3570] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.811619][ T3570] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.823973][ T3570] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.048468][T11103] veth0_vlan: entered promiscuous mode [ 341.098512][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.116272][T11103] veth1_vlan: entered promiscuous mode [ 341.130017][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.215319][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.222512][T11344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.235247][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.240454][T11103] veth0_macvtap: entered promiscuous mode [ 341.284936][T11103] veth1_macvtap: entered promiscuous mode [ 341.347688][ T5838] Bluetooth: hci1: command tx timeout [ 341.411260][T11103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.455480][T11103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.680613][ T6880] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.701593][ T6880] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.728752][ T6880] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.775147][ T6880] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.523693][ T790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.540616][ T790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.749809][T11344] veth0_vlan: entered promiscuous mode [ 342.765622][ T790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.823553][ T790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.879367][T11344] veth1_vlan: entered promiscuous mode [ 343.423856][ T5838] Bluetooth: hci1: command tx timeout [ 343.645071][T11344] veth0_macvtap: entered promiscuous mode [ 343.796243][T11344] veth1_macvtap: entered promiscuous mode [ 344.842971][T11344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.908861][T11344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.950880][ T6980] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.997213][ T6980] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.006185][ T6980] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.079767][ T6980] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.102506][T11472] netlink: 'syz.4.1593': attribute type 46 has an invalid length. [ 345.332719][T11473] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1594'. [ 345.496971][ T5838] Bluetooth: hci1: command tx timeout [ 345.566956][ T790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.607439][ T790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.960266][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.974563][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.007048][T11491] netlink: 17780 bytes leftover after parsing attributes in process `syz.8.1598'. [ 346.058393][T11494] netlink: 'syz.4.1599': attribute type 10 has an invalid length. [ 346.075488][T11494] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1599'. [ 346.111480][T11494] batadv_slave_1: entered promiscuous mode [ 346.131863][T11494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.168120][T11497] netlink: 'syz.9.1600': attribute type 1 has an invalid length. [ 346.175925][T11497] netlink: 'syz.9.1600': attribute type 1 has an invalid length. [ 346.205259][T11494] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.226212][T11494] bridge0: port 3(batadv_slave_1) entered blocking state [ 346.269391][T11494] bridge0: port 3(batadv_slave_1) entered disabled state [ 346.390552][T11494] batadv_slave_1: entered allmulticast mode [ 346.426062][T11494] bridge0: port 3(batadv_slave_1) entered blocking state [ 346.433574][T11494] bridge0: port 3(batadv_slave_1) entered forwarding state [ 346.689907][T11511] netlink: 'syz.9.1603': attribute type 9 has an invalid length. [ 346.764234][T11511] netlink: 'syz.9.1603': attribute type 11 has an invalid length. [ 346.812323][T11511] netlink: 'syz.9.1603': attribute type 12 has an invalid length. [ 346.855026][T11511] netlink: 210020 bytes leftover after parsing attributes in process `syz.9.1603'. [ 346.919437][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1603'. [ 348.690415][T11550] netlink: 64691 bytes leftover after parsing attributes in process `syz.4.1609'. [ 349.328285][ T6883] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.385803][T11566] netlink: 212360 bytes leftover after parsing attributes in process `syz.9.1614'. [ 349.550024][ T6883] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.625460][ T6883] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.856297][ T6883] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.540389][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 350.553554][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 350.594177][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 350.602903][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 350.610810][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 351.744957][T11628] syz.5.1628 uses obsolete (PF_INET,SOCK_PACKET) [ 352.697948][ T5833] Bluetooth: hci0: command tx timeout [ 353.320646][ T6883] bridge_slave_1: left allmulticast mode [ 353.358172][ T6883] bridge_slave_1: left promiscuous mode [ 353.364348][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.424126][ T6883] bridge_slave_0: left allmulticast mode [ 353.430123][ T6883] bridge_slave_0: left promiscuous mode [ 353.437946][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.478510][ T5833] Bluetooth: hci2: unexpected event 0x07 length: 151 < 255 [ 353.547727][T11640] openvswitch: netlink: IP tunnel dst address not specified [ 354.453201][ T6883] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.585383][ T6883] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.668735][ T6883] bond0 (unregistering): (slave team0): Releasing backup interface [ 354.730432][ T6883] bond0 (unregistering): Released all slaves [ 354.780894][ T5833] Bluetooth: hci0: command tx timeout [ 355.135085][T11654] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.1634'. [ 355.622569][T11677] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1640'. [ 356.114120][ T6883] hsr_slave_0: left promiscuous mode [ 356.140320][ T6883] hsr_slave_1: left promiscuous mode [ 356.178294][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.234299][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.267706][ T6883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.275274][ T6883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.858062][ T5833] Bluetooth: hci0: command tx timeout [ 357.167072][ T6883] veth1_macvtap: left promiscuous mode [ 357.181261][ T6883] veth0_macvtap: left promiscuous mode [ 357.208979][ T6883] veth1_vlan: left promiscuous mode [ 357.215578][ T6883] veth0_vlan: left promiscuous mode [ 357.954353][ T6883] team0 (unregistering): Port device team_slave_1 removed [ 358.031135][ T6883] team0 (unregistering): Port device team_slave_0 removed [ 358.509696][T11600] chnl_net:caif_netlink_parms(): no params data found [ 358.884795][T11746] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 358.937537][ T5833] Bluetooth: hci0: command tx timeout [ 359.231998][T11600] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.315126][T11600] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.334583][T11600] bridge_slave_0: entered allmulticast mode [ 359.356483][T11600] bridge_slave_0: entered promiscuous mode [ 359.385844][T11600] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.421743][T11600] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.440983][T11600] bridge_slave_1: entered allmulticast mode [ 359.490911][T11600] bridge_slave_1: entered promiscuous mode [ 359.619415][T11746] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 359.884025][T11600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.930484][T11600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.070606][T11600] team0: Port device team_slave_0 added [ 360.111486][T11600] team0: Port device team_slave_1 added [ 360.279703][T11600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.295581][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.330902][T11600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.344886][T11600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.352808][T11600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 360.405058][T11600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.572806][T11600] hsr_slave_0: entered promiscuous mode [ 360.582677][T11600] hsr_slave_1: entered promiscuous mode [ 362.150865][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1667'. [ 363.788309][T11600] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 363.806426][T11600] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 363.851457][T11600] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 363.894740][T11600] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 364.331786][T11600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.429213][T11600] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.490570][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.497895][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.521332][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.528645][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.363870][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1684'. [ 365.539433][T11600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.363865][T11600] veth0_vlan: entered promiscuous mode [ 366.439296][T11600] veth1_vlan: entered promiscuous mode [ 366.640138][T11600] veth0_macvtap: entered promiscuous mode [ 366.685235][T11600] veth1_macvtap: entered promiscuous mode [ 366.692535][T11944] netlink: 'syz.5.1695': attribute type 1 has an invalid length. [ 366.717244][T11944] netlink: 'syz.5.1695': attribute type 4 has an invalid length. [ 366.804178][T11944] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1695'. [ 366.868582][T11600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.046129][T11600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.139623][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.163073][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.183320][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.218257][ T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.429285][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.469480][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.582194][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.619655][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.015747][T11975] netlink: 65035 bytes leftover after parsing attributes in process `syz.8.1615'. [ 368.568932][T11994] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1708'. [ 369.841228][T12021] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1714'. [ 370.888646][ T5833] Bluetooth: hci2: Dropping invalid advertising data [ 370.896678][ T5833] Bluetooth: hci2: unknown advertising packet type: 0xdc [ 370.896712][ T5833] Bluetooth: hci2: Malformed LE Event: 0x02 [ 374.335044][ T5833] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 377.875273][T12194] netlink: 'syz.2.1759': attribute type 39 has an invalid length. [ 378.708757][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.715300][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.898547][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1771'. [ 379.926483][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1771'. [ 379.948605][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1771'. [ 379.976740][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1771'. [ 381.976900][T12288] netlink: 'syz.9.1784': attribute type 10 has an invalid length. [ 381.999373][T12288] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1784'. [ 382.805277][T12288] ipvlan1: entered promiscuous mode [ 382.814694][T12288] ipvlan1: entered allmulticast mode [ 382.820781][T12288] veth0_vlan: entered allmulticast mode [ 382.832875][T12288] bridge0: port 3(ipvlan1) entered blocking state [ 382.839675][T12288] bridge0: port 3(ipvlan1) entered disabled state [ 382.851810][T12288] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 383.264472][T12298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1787'. [ 383.999782][T12304] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1790'. [ 385.564496][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 385.914925][T12346] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 389.771116][T12409] netlink: 'syz.9.1814': attribute type 9 has an invalid length. [ 389.780471][T12409] netlink: 'syz.9.1814': attribute type 11 has an invalid length. [ 389.789221][T12409] netlink: 'syz.9.1814': attribute type 12 has an invalid length. [ 389.798086][T12409] netlink: 210020 bytes leftover after parsing attributes in process `syz.9.1814'. [ 389.808411][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1814'. [ 389.986362][T12411] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1816'. [ 392.025581][ T5833] Bluetooth: hci2: unexpected event 0x30 length: 151 > 3 [ 394.460515][T12458] syzkaller0: entered allmulticast mode [ 395.212897][T12476] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 395.881313][T12495] netlink: 'syz.9.1833': attribute type 10 has an invalid length. [ 398.889144][T12495] team0: Device xfrm0 is of different type [ 398.899096][T12513] netlink: 'syz.2.1837': attribute type 15 has an invalid length. [ 398.922883][T12513] netlink: 11930 bytes leftover after parsing attributes in process `syz.2.1837'. [ 398.977324][T12514] netlink: 'syz.2.1837': attribute type 7 has an invalid length. [ 399.016080][T12514] netlink: 'syz.2.1837': attribute type 11 has an invalid length. [ 399.048455][T12514] netlink: 'syz.2.1837': attribute type 15 has an invalid length. [ 399.056524][T12514] netlink: 'syz.2.1837': attribute type 16 has an invalid length. [ 399.086331][T12514] netlink: 'syz.2.1837': attribute type 21 has an invalid length. [ 399.101542][T12514] netlink: 'syz.2.1837': attribute type 25 has an invalid length. [ 399.141433][T12514] netlink: 'syz.2.1837': attribute type 27 has an invalid length. [ 399.156651][T12514] netlink: 'syz.2.1837': attribute type 28 has an invalid length. [ 401.265016][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 403.017903][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.066069][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.075815][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.085427][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.103467][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.136943][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.080188][T12609] validate_nla: 2 callbacks suppressed [ 408.080228][T12609] netlink: 'syz.8.1854': attribute type 10 has an invalid length. [ 408.246763][ T5833] Bluetooth: hci5: command tx timeout [ 408.324457][T12609] team0: Device ipvlan1 failed to register rx_handler [ 408.953595][ T3570] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.765395][T12581] chnl_net:caif_netlink_parms(): no params data found [ 409.971002][ T3570] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.181161][T12643] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1862'. [ 410.270078][ T3570] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.296815][ T5833] Bluetooth: hci5: command tx timeout [ 410.639464][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1866'. [ 410.655891][ T3570] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.666457][T12661] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1866'. [ 410.676040][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1866'. [ 410.706730][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1866'. [ 411.044025][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.099625][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.116873][T12581] bridge_slave_0: entered allmulticast mode [ 411.131335][T12581] bridge_slave_0: entered promiscuous mode [ 411.161993][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.179615][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.385124][T12581] bridge_slave_1: entered allmulticast mode [ 411.450193][T12581] bridge_slave_1: entered promiscuous mode [ 411.792619][T12581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.857774][T12671] delete_channel: no stack [ 411.867229][T12581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.342801][T12581] team0: Port device team_slave_0 added [ 412.379218][T12581] team0: Port device team_slave_1 added [ 412.385111][ T5833] Bluetooth: hci5: command tx timeout [ 412.642672][T12702] netlink: 'syz.8.1875': attribute type 2 has an invalid length. [ 412.665958][T12581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.712933][T12702] netlink: 'syz.8.1875': attribute type 2 has an invalid length. [ 412.721146][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.783416][T12581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.880578][T12581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.900072][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.983127][T12581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.140317][ T3570] bridge_slave_1: left allmulticast mode [ 413.192431][ T3570] bridge_slave_1: left promiscuous mode [ 413.201002][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.298403][ T3570] bridge_slave_0: left allmulticast mode [ 413.304331][ T3570] bridge_slave_0: left promiscuous mode [ 413.345129][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.008397][T12734] netlink: 'syz.8.1881': attribute type 21 has an invalid length. [ 414.410864][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.446478][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.457173][ T5833] Bluetooth: hci5: command tx timeout [ 414.458518][ T3570] bond0 (unregistering): Released all slaves [ 414.661700][T12581] hsr_slave_0: entered promiscuous mode [ 414.669608][T12581] hsr_slave_1: entered promiscuous mode [ 414.676533][T12581] debugfs: 'hsr0' already exists in 'hsr' [ 414.683112][T12581] Cannot create hsr debugfs directory [ 414.800193][T12734] netlink: 'syz.8.1881': attribute type 2 has an invalid length. [ 414.818782][T12737] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1882'. [ 415.275179][T12753] netlink: 'syz.2.1888': attribute type 39 has an invalid length. [ 418.527174][T12753] veth0_macvtap: left promiscuous mode [ 418.923277][T12800] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1891'. [ 419.000343][ T3570] hsr_slave_0: left promiscuous mode [ 419.008886][ T3570] hsr_slave_1: left promiscuous mode [ 419.015493][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.023899][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.035123][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.045328][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.086094][ T3570] veth1_macvtap: left promiscuous mode [ 419.110841][ T3570] veth0_macvtap: left promiscuous mode [ 419.122453][ T3570] veth1_vlan: left promiscuous mode [ 419.128446][ T3570] veth0_vlan: left promiscuous mode [ 419.895063][T12809] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1894'. [ 420.201567][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 420.233649][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 420.492848][T12806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.531408][T12806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.570115][T12806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.588702][T12806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.377533][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.389311][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.409017][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.420031][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.431782][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.767961][T12837] syzkaller0: entered promiscuous mode [ 421.776411][T12837] syzkaller0: entered allmulticast mode [ 422.227717][T12846] syzkaller0: entered promiscuous mode [ 422.233509][T12846] syzkaller0: entered allmulticast mode [ 423.498929][ T5838] Bluetooth: hci1: command tx timeout [ 425.543679][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1913'. [ 425.590265][ T5838] Bluetooth: hci1: command tx timeout [ 426.647731][T12908] : renamed from ip6tnl0 (while UP) [ 427.716982][ T5838] Bluetooth: hci1: command tx timeout [ 428.155305][ T3570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.414274][ T3570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.495090][T12581] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 428.514943][T12581] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 428.561433][ T3570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.649034][T12581] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 428.703350][ T3570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.766338][T12581] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 429.198146][T12843] chnl_net:caif_netlink_parms(): no params data found [ 429.736664][ T5838] Bluetooth: hci1: command tx timeout [ 429.772785][ T3570] batadv_slave_1: left allmulticast mode [ 429.813577][ T3570] bridge0: port 3(batadv_slave_1) entered disabled state [ 429.919939][ T3570] bridge_slave_1: left allmulticast mode [ 429.930247][ T3570] bridge_slave_1: left promiscuous mode [ 429.949737][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.072636][ T3570] bridge_slave_0: left allmulticast mode [ 430.088869][ T3570] bridge_slave_0: left promiscuous mode [ 430.102006][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.865640][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.923369][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.948399][ T3570] bond0 (unregistering): Released all slaves [ 431.595631][T12843] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.605982][T12843] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.635551][T12843] bridge_slave_0: entered allmulticast mode [ 431.673614][T12843] bridge_slave_0: entered promiscuous mode [ 431.840399][T12843] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.853825][T12843] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.862469][T12843] bridge_slave_1: entered allmulticast mode [ 431.872636][T12843] bridge_slave_1: entered promiscuous mode [ 431.929571][T12843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.955947][T13001] netlink: 'syz.8.1936': attribute type 9 has an invalid length. [ 431.971515][T12843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.982474][T13001] netlink: 'syz.8.1936': attribute type 11 has an invalid length. [ 431.995755][T13001] netlink: 'syz.8.1936': attribute type 12 has an invalid length. [ 432.014833][T13001] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.1936'. [ 432.038433][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1936'. [ 432.069939][T12843] team0: Port device team_slave_0 added [ 432.089893][T12843] team0: Port device team_slave_1 added [ 433.718401][T12843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.766680][T12843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.845970][T12843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.860214][T12843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.868024][T12843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.014256][T12843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.070230][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.260552][T13021] netlink: 'syz.9.1944': attribute type 21 has an invalid length. [ 434.355608][T13021] netlink: 156 bytes leftover after parsing attributes in process `syz.9.1944'. [ 434.393651][T12843] hsr_slave_0: entered promiscuous mode [ 434.411641][T12843] hsr_slave_1: entered promiscuous mode [ 434.430931][T12843] debugfs: 'hsr0' already exists in 'hsr' [ 434.443076][T12843] Cannot create hsr debugfs directory [ 434.480705][ T3570] hsr_slave_0: left promiscuous mode [ 434.506936][ T3570] hsr_slave_1: left promiscuous mode [ 434.516155][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.532494][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.604564][ T3570] veth1_macvtap: left promiscuous mode [ 434.616732][ T3570] veth0_macvtap: left promiscuous mode [ 434.622564][ T3570] veth1_vlan: left promiscuous mode [ 434.646882][ T3570] veth0_vlan: left promiscuous mode [ 434.733794][ T5838] Bluetooth: hci0: ISO packet for unknown connection handle 1380 [ 435.344445][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 435.415819][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 435.964082][T13034] syzkaller0: entered promiscuous mode [ 435.969903][T13034] syzkaller0: entered allmulticast mode [ 437.678273][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.755666][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.763044][ T6880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.955334][T13067] netlink: 14556 bytes leftover after parsing attributes in process `syz.9.1958'. [ 438.038761][T13068] netlink: 'syz.8.1957': attribute type 4 has an invalid length. [ 438.054478][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.061810][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.500263][T12581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.527862][T12581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.990785][T13092] netlink: 'syz.9.1965': attribute type 1 has an invalid length. [ 440.145687][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.152685][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.499852][ T3570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.049583][T12581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.304640][ T3570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.579149][T13142] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1976'. [ 442.641949][ T3570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.925916][ T3570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.273039][T12843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 443.333206][T12843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 443.391351][T12843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 443.446775][T12843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 443.772874][ T3570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.885774][ T5838] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 443.896282][T12581] veth0_vlan: entered promiscuous mode [ 443.999625][ T3570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.159366][ T5838] Bluetooth: hci2: Dropping invalid advertising data [ 444.166290][ T5838] Bluetooth: hci2: unknown advertising packet type: 0xdc [ 444.166320][ T5838] Bluetooth: hci2: Malformed LE Event: 0x02 [ 444.512848][ T3570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.630827][T12581] veth1_vlan: entered promiscuous mode [ 444.771794][ T3570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.925801][T12581] veth0_macvtap: entered promiscuous mode [ 444.946645][ T5838] Bluetooth: hci2: unexpected event 0x06 length: 15 > 3 [ 444.991468][T12581] veth1_macvtap: entered promiscuous mode [ 445.062987][T12843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.173711][T12581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.239345][T12581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.299302][T12843] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.385281][ T3570] bridge_slave_1: left allmulticast mode [ 445.399116][ T3570] bridge_slave_1: left promiscuous mode [ 445.413564][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.471375][ T3570] bridge_slave_0: left promiscuous mode [ 445.482838][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.500881][ T3570] bridge_slave_1: left allmulticast mode [ 445.517438][ T3570] bridge_slave_1: left promiscuous mode [ 445.524408][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.557763][ T3570] bridge_slave_0: left allmulticast mode [ 445.563473][ T3570] bridge_slave_0: left promiscuous mode [ 445.582427][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.431037][ T3570] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 446.549572][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.566427][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.585383][ T3570] bond0 (unregistering): Released all slaves [ 447.010881][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.022547][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.033124][ T3570] bond0 (unregistering): Released all slaves [ 447.045297][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.055310][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.068317][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.075496][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.114419][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.192021][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.240718][ T6980] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.247970][ T6980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.291645][T12843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.303045][T12843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.341577][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 447.663782][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2005'. [ 447.773105][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.807200][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.075641][ T6880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.092215][ T6880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.503396][T12843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.898445][ T3570] hsr_slave_0: left promiscuous mode [ 448.916944][ T3570] hsr_slave_1: left promiscuous mode [ 448.933685][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.968673][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.011025][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.030384][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.124651][ T3570] hsr_slave_0: left promiscuous mode [ 449.159618][ T3570] hsr_slave_1: left promiscuous mode [ 449.188061][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.205923][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.303540][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.325986][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.509641][ T3570] veth1_macvtap: left promiscuous mode [ 449.529004][ T3570] veth0_macvtap: left promiscuous mode [ 449.534864][ T3570] veth1_vlan: left promiscuous mode [ 449.556359][ T3570] veth0_vlan: left promiscuous mode [ 449.605036][T13281] netlink: 'syz.8.2021': attribute type 3 has an invalid length. [ 449.627454][ T3570] veth1_macvtap: left promiscuous mode [ 449.633284][ T3570] veth0_macvtap: left promiscuous mode [ 449.647730][T13281] netlink: 'syz.8.2021': attribute type 1 has an invalid length. [ 449.650502][ T3570] veth1_vlan: left promiscuous mode [ 449.664631][T13281] netlink: 60387 bytes leftover after parsing attributes in process `syz.8.2021'. [ 449.697259][ T3570] veth0_vlan: left promiscuous mode [ 450.592052][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 450.691550][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 451.098629][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 452.298474][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 452.357795][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 459.364375][T12843] veth0_vlan: entered promiscuous mode [ 459.440543][T12843] veth1_vlan: entered promiscuous mode [ 459.631510][T12843] veth0_macvtap: entered promiscuous mode [ 459.663832][T12843] veth1_macvtap: entered promiscuous mode [ 459.752933][T12843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.766981][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2046'. [ 459.794682][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2046'. [ 459.814914][T12843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.849553][ T6880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.876700][ T6880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.892837][ T6880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.138127][ T6880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.885390][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.922778][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.009064][ T6880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.017763][ T6880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.267242][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 463.137262][ T5838] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 463.668641][T13397] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2064'. [ 463.940060][T13401] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2065'. [ 464.315226][T13401] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2065'. [ 464.819667][T13420] netlink: 'syz.7.2072': attribute type 10 has an invalid length. [ 465.058559][T13420] team0: Port device geneve1 added [ 466.472161][ T5838] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 466.478586][T13448] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 466.492515][T13448] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 467.250002][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 467.265595][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 467.274489][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 467.299256][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 467.309916][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.462208][T13462] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2083'. [ 467.570458][T13465] geneve0 speed is unknown, defaulting to 1000 [ 467.643352][T13465] geneve0 speed is unknown, defaulting to 1000 [ 467.810728][T13471] netlink: 277 bytes leftover after parsing attributes in process `syz.7.2084'. [ 468.063360][T13465] geneve0 speed is unknown, defaulting to 1000 [ 468.309173][T13465] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 468.542752][T13465] geneve0 speed is unknown, defaulting to 1000 [ 468.579300][T13465] geneve0 speed is unknown, defaulting to 1000 [ 468.609061][T13465] geneve0 speed is unknown, defaulting to 1000 [ 468.650830][T13465] geneve0 speed is unknown, defaulting to 1000 [ 468.695785][T13465] geneve0 speed is unknown, defaulting to 1000 [ 468.722488][T13465] geneve0 speed is unknown, defaulting to 1000 [ 468.853212][T13457] chnl_net:caif_netlink_parms(): no params data found [ 469.168985][T13484] netlink: 7 bytes leftover after parsing attributes in process `syz.7.2089'. [ 469.183768][T13484] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2089'. [ 469.357939][T13457] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.365201][T13457] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.372940][T13457] bridge_slave_0: entered allmulticast mode [ 469.381155][T13457] bridge_slave_0: entered promiscuous mode [ 469.392174][T13457] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.399758][T13457] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.407657][T13457] bridge_slave_1: entered allmulticast mode [ 469.418157][T13457] bridge_slave_1: entered promiscuous mode [ 469.437246][ T5833] Bluetooth: hci4: command tx timeout [ 469.552423][T13457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.599387][T13457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.701524][T13457] team0: Port device team_slave_0 added [ 469.743631][T13457] team0: Port device team_slave_1 added [ 469.880861][T13457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.893786][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.953702][T13457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.967609][T13457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.974759][T13457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.002674][T13457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.042492][T13526] tmpfs: Unknown parameter 'mKG<KZWߩrIl5Jz/iN31-_ 0 pj-NbdYզBQ ?6(VnkDmihmYr' [ 470.238239][T13457] hsr_slave_0: entered promiscuous mode [ 470.268755][T13457] hsr_slave_1: entered promiscuous mode [ 470.302321][T13457] debugfs: 'hsr0' already exists in 'hsr' [ 470.317721][T13457] Cannot create hsr debugfs directory [ 471.152373][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2109'. [ 471.454982][T13559] netlink: 'syz.7.2110': attribute type 1 has an invalid length. [ 471.459729][T13563] siw: device registration error -23 [ 471.463295][T13559] netlink: 'syz.7.2110': attribute type 1 has an invalid length. [ 471.512760][ T5838] Bluetooth: hci4: command tx timeout [ 472.223896][ T5838] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 472.775835][T13457] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.857932][T13457] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.044335][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 473.578873][ T5838] Bluetooth: hci4: command tx timeout [ 473.865962][T13457] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 473.916203][T13457] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.296171][T13621] syzkaller0: entered promiscuous mode [ 474.314816][T13621] syzkaller0: entered allmulticast mode [ 474.419970][T13628] netlink: 'syz.2.2121': attribute type 2 has an invalid length. [ 474.436871][T13628] tipc: Started in network mode [ 474.441878][T13628] tipc: Node identity 7000f, cluster identity 4711 [ 474.496836][T13628] tipc: Node number set to 458767 [ 475.565486][T13659] netlink: 'syz.2.2127': attribute type 6 has an invalid length. [ 475.589959][T13659] netlink: 3936 bytes leftover after parsing attributes in process `syz.2.2127'. [ 475.600207][T13659] netlink: 'syz.2.2127': attribute type 1 has an invalid length. [ 475.609684][T13659] block nbd0: Unsupported socket: should be TCP or UNIX. [ 475.657065][ T5833] Bluetooth: hci4: command tx timeout [ 477.278459][T13457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.376747][T13457] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.414584][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.421830][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.522873][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.530291][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.660855][T13457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.352203][T13715] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2139'. [ 478.363180][T13457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.812870][T13715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.831164][T13715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.843525][T13715] bond0 (unregistering): Released all slaves [ 480.874574][T13722] : entered promiscuous mode [ 480.882945][T13726] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.121823][T13457] veth0_vlan: entered promiscuous mode [ 481.178967][T13457] veth1_vlan: entered promiscuous mode [ 481.677071][T13457] veth0_macvtap: entered promiscuous mode [ 482.292358][T13743] @0: renamed from bond_slave_1 (while UP) [ 484.366405][T13457] veth1_macvtap: entered promiscuous mode [ 484.453386][T13457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.507302][T13457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.549936][ T6880] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.592381][ T6880] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.628145][ T6880] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.768596][ T6880] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.103867][T13776] delete_channel: no stack [ 485.602787][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.636895][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.745619][ T6977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.777049][ T6977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.468229][T13838] netlink: 'syz.8.2167': attribute type 1 has an invalid length. [ 493.572386][T13879] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2177'. [ 493.589678][T13882] netlink: 'syz.0.2178': attribute type 4 has an invalid length. [ 493.661198][T13882] netlink: 'syz.0.2178': attribute type 17 has an invalid length. [ 493.871015][ T3570] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.522692][ T3570] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.930732][ T3570] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.237842][ T3570] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.887432][ T5833] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 501.609178][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.616000][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.067720][ T3570] bridge_slave_1: left allmulticast mode [ 502.086729][ T3570] bridge_slave_1: left promiscuous mode [ 502.121563][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.219460][ T3570] bridge_slave_0: left allmulticast mode [ 502.225192][ T3570] bridge_slave_0: left promiscuous mode [ 502.304676][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.809065][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.828941][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.844661][ T3570] bond0 (unregistering): Released all slaves [ 504.375737][ T5833] Bluetooth: hci5: unexpected subevent 0x01 length: 150 > 18 [ 504.794505][T14070] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2225'. [ 505.521520][T14086] netlink: 'syz.2.2239': attribute type 21 has an invalid length. [ 505.646163][T14086] IPv6: NLM_F_CREATE should be specified when creating new route [ 505.658164][T14086] IPv6: Can't replace route, no match found [ 505.750249][ T3570] hsr_slave_0: left promiscuous mode [ 505.796606][ T3570] hsr_slave_1: left promiscuous mode [ 505.807023][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.839855][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.902902][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.927922][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.223531][ T3570] veth1_macvtap: left promiscuous mode [ 507.229369][ T3570] veth0_macvtap: left promiscuous mode [ 507.235514][ T3570] veth1_vlan: left promiscuous mode [ 507.241067][ T3570] veth0_vlan: left promiscuous mode [ 507.454231][T14110] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2238'. [ 507.503857][T14107] netlink: 'syz.7.2236': attribute type 5 has an invalid length. [ 507.767918][T14114] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2240'. [ 509.538023][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 509.562454][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 511.941648][T14163] netlink: 'syz.8.2255': attribute type 29 has an invalid length. [ 517.548822][T14277] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2283'. [ 517.573195][T14277] hsr_slave_0: left promiscuous mode [ 517.641651][T14277] hsr_slave_1: left promiscuous mode [ 519.418783][T14314] netlink: 'syz.7.2291': attribute type 6 has an invalid length. [ 519.479395][T14314] netlink: 3936 bytes leftover after parsing attributes in process `syz.7.2291'. [ 519.530034][T14314] netlink: 'syz.7.2291': attribute type 1 has an invalid length. [ 520.335765][ T5833] block nbd0: Receive control failed (result -107) [ 520.341469][T14320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 520.378804][T14314] nbd0: detected capacity change from 0 to 339754496 [ 520.418123][T14012] block nbd0: Dead connection, failed to find a fallback [ 520.438833][T14012] block nbd0: shutting down sockets [ 520.444535][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.465639][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 520.473639][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.498588][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 520.516174][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.540811][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 520.568444][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.594695][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 520.627218][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.709606][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 520.750835][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.770835][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 520.790730][T14334] netlink: 'syz.7.2295': attribute type 2 has an invalid length. [ 520.792247][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.816721][T14334] netlink: 'syz.7.2295': attribute type 8 has an invalid length. [ 520.841003][T14341] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2295'. [ 520.866943][T14334] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2295'. [ 520.877983][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 520.926851][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 520.992075][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 521.061947][T14012] ldm_validate_partition_table(): Disk read failed. [ 521.090809][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 521.128103][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 521.168322][T14012] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 521.197514][T14012] Buffer I/O error on dev nbd0, logical block 0, async page read [ 521.238203][T14012] Dev nbd0: unable to read RDB block 0 [ 521.255800][T14012] nbd0: unable to read partition table [ 521.637631][T14012] ldm_validate_partition_table(): Disk read failed. [ 521.644512][T14012] Dev nbd0: unable to read RDB block 0 [ 521.676952][T14012] nbd0: unable to read partition table [ 521.970889][T14357] xt_HMARK: spi-set and port-set can't be combined [ 522.119894][T14356] netlink: 'syz.0.2302': attribute type 10 has an invalid length. [ 523.058383][T14382] syzkaller0: entered promiscuous mode [ 523.073447][T14382] syzkaller0: entered allmulticast mode [ 523.209067][T14384] netlink: 'syz.0.2310': attribute type 10 has an invalid length. [ 523.297382][T14384] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2310'. [ 523.527074][T14384] batman_adv: batadv0: Adding interface: virt_wifi0 [ 523.534859][T14384] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.594214][T14384] batman_adv: batadv0: Interface activated: virt_wifi0 [ 523.855961][T14400] netlink: 'syz.1.2313': attribute type 39 has an invalid length. [ 523.894678][T14403] xt_socket: unknown flags 0x50 [ 525.089743][T14428] netlink: 'syz.2.2320': attribute type 10 has an invalid length. [ 527.783247][T14428] geneve0: entered promiscuous mode [ 529.259809][T14454] Bluetooth: hci5: command 0x0406 tx timeout [ 535.949880][T14585] netlink: 'syz.2.2366': attribute type 21 has an invalid length. [ 536.216791][T14585] netlink: 'syz.2.2366': attribute type 3 has an invalid length. [ 536.374915][T14585] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2366'. [ 536.485585][T14595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'. [ 537.330256][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2373'. [ 540.994980][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2379'. [ 541.039829][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2379'. [ 541.716841][T14717] syzkaller0: entered promiscuous mode [ 541.722397][T14717] syzkaller0: entered allmulticast mode [ 542.464660][T14743] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2395'. [ 544.667693][T14761] syzkaller0: entered promiscuous mode [ 544.673236][T14761] syzkaller0: entered allmulticast mode [ 546.191959][ T3570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.429228][ T3570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.725747][ T3570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.824195][T14454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 546.833492][T14454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 546.841774][T14454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 546.854132][T14454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 546.866013][T14454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 546.987374][ T3570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.120366][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 547.130632][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 547.140763][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 547.154619][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 547.165631][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 547.406825][T14804] geneve0 speed is unknown, defaulting to 1000 [ 547.851450][T14811] geneve0 speed is unknown, defaulting to 1000 [ 547.861960][ T3570] bridge_slave_1: left allmulticast mode [ 547.875481][ T3570] bridge_slave_1: left promiscuous mode [ 547.881701][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.932727][ T3570] bridge_slave_0: left allmulticast mode [ 547.944615][ T3570] bridge_slave_0: left promiscuous mode [ 547.951759][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.635020][ T5838] Bluetooth: hci3: unknown advertising packet type: 0x20 [ 548.936813][ T5838] Bluetooth: hci1: command tx timeout [ 549.256891][ T5838] Bluetooth: hci2: command tx timeout [ 549.670657][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.683775][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.730054][ T3570] bond0 (unregistering): Released all slaves [ 550.024070][T14855] sit0: entered allmulticast mode [ 550.039598][T14857] sit0: entered promiscuous mode [ 550.311218][ T5838] Bluetooth: hci0: unknown advertising packet type: 0xff [ 550.353451][ T5838] Bluetooth: hci5: unexpected subevent 0x0a length: 150 > 30 [ 550.368880][ T5838] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:0' [ 550.380124][ T5838] CPU: 0 UID: 0 PID: 5838 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 550.380156][ T5838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.380170][ T5838] Workqueue: hci5 hci_rx_work [ 550.380199][ T5838] Call Trace: [ 550.380207][ T5838] [ 550.380217][ T5838] dump_stack_lvl+0xe8/0x150 [ 550.380250][ T5838] sysfs_create_dir_ns+0x271/0x2a0 [ 550.380283][ T5838] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 550.380315][ T5838] ? do_raw_spin_unlock+0xf5/0x210 [ 550.380344][ T5838] kobject_add_internal+0x62b/0xd00 [ 550.380379][ T5838] kobject_add+0x163/0x240 [ 550.380409][ T5838] ? __pfx_kobject_add+0x10/0x10 [ 550.380434][ T5838] ? _raw_spin_unlock+0x28/0x50 [ 550.380467][ T5838] ? get_device_parent+0x366/0x3a0 [ 550.380495][ T5838] device_add+0x408/0xb70 [ 550.380522][ T5838] hci_conn_add_sysfs+0xd5/0x210 [ 550.380555][ T5838] le_conn_complete_evt+0xf1d/0x1430 [ 550.380590][ T5838] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 550.380613][ T5838] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 550.380641][ T5838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 550.380661][ T5838] ? skb_pull_data+0xfb/0x200 [ 550.380689][ T5838] hci_le_enh_conn_complete_evt+0x189/0x490 [ 550.380718][ T5838] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 550.380750][ T5838] hci_event_packet+0x7af/0x12c0 [ 550.380789][ T5838] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 550.380813][ T5838] ? __pfx_hci_event_packet+0x10/0x10 [ 550.380850][ T5838] ? kcov_remote_start+0x49a/0x7a0 [ 550.380882][ T5838] ? hci_send_to_monitor+0xe2/0x590 [ 550.380913][ T5838] hci_rx_work+0x3ee/0x1030 [ 550.380943][ T5838] ? process_scheduled_works+0xa25/0x1830 [ 550.380982][ T5838] process_scheduled_works+0xb02/0x1830 [ 550.381041][ T5838] ? __pfx_process_scheduled_works+0x10/0x10 [ 550.381076][ T5838] ? assign_work+0x3d5/0x5e0 [ 550.381110][ T5838] worker_thread+0xa50/0xfc0 [ 550.381169][ T5838] kthread+0x388/0x470 [ 550.381190][ T5838] ? __pfx_worker_thread+0x10/0x10 [ 550.381215][ T5838] ? __pfx_kthread+0x10/0x10 [ 550.381236][ T5838] ret_from_fork+0x51e/0xb90 [ 550.381279][ T5838] ? __pfx_ret_from_fork+0x10/0x10 [ 550.381304][ T5838] ? __switch_to+0xc7d/0x1450 [ 550.381333][ T5838] ? __pfx_kthread+0x10/0x10 [ 550.381355][ T5838] ret_from_fork_asm+0x1a/0x30 [ 550.381404][ T5838] [ 550.381436][ T5838] kobject: kobject_add_internal failed for hci5:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 550.414297][T14454] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 550.417445][ T5838] Bluetooth: hci5: failed to register connection device [ 550.730970][T14811] chnl_net:caif_netlink_parms(): no params data found [ 551.022394][T14454] Bluetooth: hci1: command tx timeout [ 551.497161][T14454] Bluetooth: hci2: command tx timeout [ 551.764708][ T3570] hsr_slave_0: left promiscuous mode [ 551.956723][ T3570] hsr_slave_1: left promiscuous mode [ 551.965906][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.024647][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.102597][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.130394][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.780477][T14454] Bluetooth: hci5: command 0x0406 tx timeout [ 553.096818][ T5838] Bluetooth: hci1: command tx timeout [ 553.161867][ T3570] veth1_macvtap: left promiscuous mode [ 553.196610][ T3570] veth0_macvtap: left promiscuous mode [ 553.206879][ T3570] veth1_vlan: left promiscuous mode [ 553.216762][ T3570] veth0_vlan: left promiscuous mode [ 553.576611][ T5838] Bluetooth: hci2: command tx timeout [ 554.856636][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 555.187592][ T5838] Bluetooth: hci1: command tx timeout [ 555.656725][ T5838] Bluetooth: hci2: command tx timeout [ 555.888926][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 555.917210][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 556.568966][T14957] IPv6: NLM_F_CREATE should be specified when creating new route [ 556.596014][T14957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.603401][T14957] IPv6: NLM_F_CREATE should be set when creating new route [ 556.633750][T14959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.641278][T14959] IPv6: NLM_F_CREATE should be set when creating new route [ 556.784145][T14811] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.797854][T14811] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.815555][T14811] bridge_slave_0: entered allmulticast mode [ 556.827925][T14811] bridge_slave_0: entered promiscuous mode [ 556.836465][T14804] chnl_net:caif_netlink_parms(): no params data found [ 556.869869][T14811] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.887209][T14811] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.906018][T14811] bridge_slave_1: entered allmulticast mode [ 556.914586][T14811] bridge_slave_1: entered promiscuous mode [ 557.123390][ T5838] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 557.274551][T14811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.302350][T14966] netlink: 'syz.7.2441': attribute type 10 has an invalid length. [ 557.312077][T14966] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2441'. [ 557.336058][T14811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.597771][ T5838] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 557.650220][T14811] team0: Port device team_slave_0 added [ 557.707669][T14804] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.714904][T14804] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.736795][T14804] bridge_slave_0: entered allmulticast mode [ 557.744841][T14804] bridge_slave_0: entered promiscuous mode [ 557.832811][T14811] team0: Port device team_slave_1 added [ 557.871673][T14811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.878785][T14811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.915436][T14811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.932896][T14811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.940369][T14811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.968924][T14811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.026804][T14804] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.034353][T14804] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.045100][T14804] bridge_slave_1: entered allmulticast mode [ 558.054950][T14804] bridge_slave_1: entered promiscuous mode [ 558.120117][T14804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.190545][T14804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.221358][T14811] hsr_slave_0: entered promiscuous mode [ 558.228927][T14811] hsr_slave_1: entered promiscuous mode [ 558.235628][T14811] debugfs: 'hsr0' already exists in 'hsr' [ 558.246446][T14811] Cannot create hsr debugfs directory [ 558.384253][T14804] team0: Port device team_slave_0 added [ 558.402984][T14804] team0: Port device team_slave_1 added [ 558.934215][T14804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.963274][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.096579][T14804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.158357][ T3570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.387557][T14988] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2446'. [ 559.415836][T14804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.427833][T14804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.455343][T14804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.435483][T15006] delete_channel: no stack [ 563.029108][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.043056][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.055245][T15016] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2455'. [ 563.070570][T15016] netlink: 7 bytes leftover after parsing attributes in process `syz.2.2455'. [ 563.992474][ T3570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.046057][T14804] hsr_slave_0: entered promiscuous mode [ 564.065281][T14804] hsr_slave_1: entered promiscuous mode [ 564.081454][T14804] debugfs: 'hsr0' already exists in 'hsr' [ 564.109190][T14804] Cannot create hsr debugfs directory [ 564.209431][ T3570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.406090][ T3570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.716424][ T3570] bridge_slave_1: left allmulticast mode [ 565.739897][ T3570] bridge_slave_1: left promiscuous mode [ 565.745692][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.774023][ T3570] bridge_slave_0: left allmulticast mode [ 565.780493][ T3570] bridge_slave_0: left promiscuous mode [ 565.786614][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.158046][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.169996][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.181048][ T3570] bond0 (unregistering): Released all slaves [ 567.034303][T14811] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 567.290123][T14811] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 567.324182][T14811] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 567.519848][T14811] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 567.798998][T15097] netlink: 'syz.2.2471': attribute type 4 has an invalid length. [ 567.819803][T15097] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2471'. [ 568.681885][T15097] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 568.772846][ T3570] hsr_slave_0: left promiscuous mode [ 568.829693][ T3570] hsr_slave_1: left promiscuous mode [ 568.836109][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.877559][T15121] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2475'. [ 568.887176][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.896048][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.921014][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.040383][ T3570] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 569.076613][ T3570] batman_adv: batadv0: Removing interface: virt_wifi0 [ 569.148960][ T3570] veth1_macvtap: left promiscuous mode [ 569.172188][ T3570] veth0_macvtap: left promiscuous mode [ 569.185100][ T3570] veth1_vlan: left promiscuous mode [ 569.198020][ T3570] veth0_vlan: left promiscuous mode [ 569.254776][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2476'. [ 569.279005][T15129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2476'. [ 570.185167][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 570.208671][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 570.466035][T15121] hsr_slave_0: left promiscuous mode [ 570.477397][T15121] hsr_slave_1: left promiscuous mode [ 571.615993][T14811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.768726][T14811] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.869110][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.876570][ T7336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.952403][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.959637][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.029923][T14804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 572.115601][T14804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 572.209758][T14804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 572.226233][T14804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 572.336035][T15193] netlink: 'syz.2.2489': attribute type 10 has an invalid length. [ 572.355108][T15193] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2489'. [ 572.954575][T14804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.023322][T14804] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.051194][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.058407][ T6883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.107813][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.115104][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.289203][T14811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.463399][T14811] veth0_vlan: entered promiscuous mode [ 573.493263][T14811] veth1_vlan: entered promiscuous mode [ 573.685790][T14811] veth0_macvtap: entered promiscuous mode [ 573.756382][T14454] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 573.768884][T14454] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 573.799794][T14454] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 573.811806][T14454] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 573.820888][T14454] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 573.838878][T14811] veth1_macvtap: entered promiscuous mode [ 574.181897][T14811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.379975][T14811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.446238][T15223] geneve0 speed is unknown, defaulting to 1000 [ 574.464991][ T6977] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.494033][ T6977] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.607571][ T6977] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.629116][ T6977] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.874605][ T5838] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 575.896682][T14454] Bluetooth: hci4: command tx timeout [ 577.331355][T14804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.691186][ T6880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 577.733604][ T6880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.807571][T15223] chnl_net:caif_netlink_parms(): no params data found [ 577.980938][T14454] Bluetooth: hci4: command tx timeout [ 578.011622][ T6880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.035573][ T6880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.225476][T14804] veth0_vlan: entered promiscuous mode [ 578.351978][T15223] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.394823][T15223] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.417189][T15223] bridge_slave_0: entered allmulticast mode [ 578.425196][T15223] bridge_slave_0: entered promiscuous mode [ 578.480927][T14804] veth1_vlan: entered promiscuous mode [ 578.535749][T15223] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.578514][T15223] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.604842][T15223] bridge_slave_1: entered allmulticast mode [ 578.626327][T15223] bridge_slave_1: entered promiscuous mode [ 578.815841][T15223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.851358][T15223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.950556][T14804] veth0_macvtap: entered promiscuous mode [ 579.058683][T15223] team0: Port device team_slave_0 added [ 579.089543][T14804] veth1_macvtap: entered promiscuous mode [ 579.181070][T15223] team0: Port device team_slave_1 added [ 579.339346][T15223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.498636][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.781911][T15223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.147941][T14454] Bluetooth: hci4: command tx timeout [ 580.839787][T15223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.876782][T15223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.928970][T15223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.102112][T14804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 581.330132][T15223] hsr_slave_0: entered promiscuous mode [ 581.359635][T15223] hsr_slave_1: entered promiscuous mode [ 581.400117][T14804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.664150][ T6883] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.689379][ T6883] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.800968][ T6883] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.829137][ T6883] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.175553][T15342] wg2: entered promiscuous mode [ 582.207428][T15342] wg2: entered allmulticast mode [ 582.217401][T14454] Bluetooth: hci4: command tx timeout [ 583.497204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.783304][T15223] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.851113][T15375] Cannot find set identified by id 99 to match [ 583.935675][ T6880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.954130][ T6880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.302606][T15223] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.959231][T15223] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.109038][ T6883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.139245][ T6883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.229684][T15380] geneve0 speed is unknown, defaulting to 1000 [ 585.471509][T15223] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.022633][T14454] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 586.030396][T14454] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0xff [ 586.597381][T15223] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 586.705091][T15223] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 586.784256][T15223] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 586.842858][T15223] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 586.969835][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2528'. [ 587.173685][T15436] netlink: 'syz.8.2529': attribute type 10 has an invalid length. [ 587.226076][T15436] netlink: 55 bytes leftover after parsing attributes in process `syz.8.2529'. [ 589.225122][T15223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 589.272664][T15223] 8021q: adding VLAN 0 to HW filter on device team0 [ 589.324260][ T7336] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.331506][ T7336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.374437][ T7336] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.381661][ T7336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.424879][T15223] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 589.438387][T15223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 589.989825][T15223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.651742][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2540'. [ 590.680240][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2540'. [ 591.001685][T15223] veth0_vlan: entered promiscuous mode [ 591.073462][T15223] veth1_vlan: entered promiscuous mode [ 591.189195][T15223] veth0_macvtap: entered promiscuous mode [ 591.211386][T15223] veth1_macvtap: entered promiscuous mode [ 591.312064][T15223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.657667][T15508] option changes via remount are deprecated (pid=15496 comm=syz.3.2543) [ 591.693589][T15223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.751592][ T6977] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.793406][ T6977] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.854966][ T6977] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.155960][ T6977] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.389012][ T6883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.436645][ T6883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.521173][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.552853][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.723434][T15527] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 592.751038][T15523] cgroup: Unknown subsys name 'haU' [ 593.360323][T15541] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2492'. [ 593.709028][T15547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2556'. [ 594.798464][T15568] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2560'. [ 594.820781][T15568] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2560'. [ 594.853819][T15568] netlink: 160 bytes leftover after parsing attributes in process `syz.8.2560'. [ 594.954256][T15572] netlink: 'syz.6.2561': attribute type 10 has an invalid length. [ 595.131620][T15572] veth0_vlan: left promiscuous mode [ 595.158854][T15572] veth0_vlan: entered promiscuous mode [ 595.237900][T15572] team0: Device veth0_vlan failed to register rx_handler [ 595.397174][T15569] @0: renamed from bond_slave_1 [ 595.676222][T15589] netlink: 'syz.3.2565': attribute type 10 has an invalid length. [ 595.717175][T15589] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2565'. [ 595.737872][T15589] hsr0: entered promiscuous mode [ 595.762738][T15589] bridge0: port 3(hsr0) entered blocking state [ 595.782205][T15589] bridge0: port 3(hsr0) entered disabled state [ 595.845539][T15589] hsr0: entered allmulticast mode [ 595.863414][T15589] hsr_slave_0: entered allmulticast mode [ 595.962861][T15589] hsr_slave_1: entered allmulticast mode [ 596.053629][T15589] bridge0: port 3(hsr0) entered blocking state [ 596.063275][T15589] bridge0: port 3(hsr0) entered forwarding state [ 596.357077][T15610] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2571'. [ 599.024668][T15664] netlink: 'syz.6.2583': attribute type 25 has an invalid length. [ 600.230542][T14454] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 600.239228][T14454] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 600.249423][T14454] CPU: 0 UID: 0 PID: 14454 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 600.249454][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 600.249468][T14454] Workqueue: hci3 hci_rx_work [ 600.249497][T14454] Call Trace: [ 600.249506][T14454] [ 600.249516][T14454] dump_stack_lvl+0xe8/0x150 [ 600.249552][T14454] sysfs_create_dir_ns+0x271/0x2a0 [ 600.249591][T14454] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 600.249627][T14454] ? do_raw_spin_unlock+0xf5/0x210 [ 600.249659][T14454] kobject_add_internal+0x62b/0xd00 [ 600.249700][T14454] kobject_add+0x163/0x240 [ 600.249745][T14454] ? __pfx_kobject_add+0x10/0x10 [ 600.249773][T14454] ? _raw_spin_unlock+0x28/0x50 [ 600.249810][T14454] ? get_device_parent+0x366/0x3a0 [ 600.249843][T14454] device_add+0x408/0xb70 [ 600.249877][T14454] hci_conn_add_sysfs+0xd5/0x210 [ 600.249917][T14454] le_conn_complete_evt+0xf1d/0x1430 [ 600.249964][T14454] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 600.249988][T14454] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 600.250022][T14454] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 600.250043][T14454] ? skb_pull_data+0xfb/0x200 [ 600.250077][T14454] hci_le_enh_conn_complete_evt+0x189/0x490 [ 600.250108][T14454] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 600.250144][T14454] hci_event_packet+0x7af/0x12c0 [ 600.250189][T14454] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 600.250218][T14454] ? __pfx_hci_event_packet+0x10/0x10 [ 600.250262][T14454] ? kcov_remote_start+0x49a/0x7a0 [ 600.250300][T14454] ? hci_send_to_monitor+0xe2/0x590 [ 600.250336][T14454] hci_rx_work+0x3ee/0x1030 [ 600.250372][T14454] ? process_scheduled_works+0xa25/0x1830 [ 600.250406][T14454] process_scheduled_works+0xb02/0x1830 [ 600.250484][T14454] ? __pfx_process_scheduled_works+0x10/0x10 [ 600.250525][T14454] ? assign_work+0x3d5/0x5e0 [ 600.250564][T14454] worker_thread+0xa50/0xfc0 [ 600.250643][T14454] kthread+0x388/0x470 [ 600.250666][T14454] ? __pfx_worker_thread+0x10/0x10 [ 600.250692][T14454] ? __pfx_kthread+0x10/0x10 [ 600.250719][T14454] ret_from_fork+0x51e/0xb90 [ 600.250762][T14454] ? __pfx_ret_from_fork+0x10/0x10 [ 600.250789][T14454] ? __switch_to+0xc7d/0x1450 [ 600.250823][T14454] ? __pfx_kthread+0x10/0x10 [ 600.250849][T14454] ret_from_fork_asm+0x1a/0x30 [ 600.250910][T14454] [ 600.250948][T14454] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 600.492919][T14454] Bluetooth: hci3: failed to register connection device [ 602.543128][T15704] netlink: 'syz.6.2590': attribute type 21 has an invalid length. [ 602.597051][T15704] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2590'. [ 604.130715][T15741] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2597'. [ 606.969183][T15747] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2598'. [ 608.288188][T15767] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2604'. [ 608.729432][T15775] openvswitch: netlink: Tunnel attr 92 out of range max 16 [ 608.731088][T15773] netlink: 'syz.8.2606': attribute type 39 has an invalid length. [ 609.437562][T15784] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2610'. [ 610.461180][T15796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2614'. [ 610.507180][T15796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2614'. [ 611.313028][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2621'. [ 615.201421][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2629'. [ 616.086229][T15903] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.533334][T15903] bridge_slave_0 (unregistering): left allmulticast mode [ 616.542121][T15903] bridge_slave_0 (unregistering): left promiscuous mode [ 616.550667][T15903] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.483976][T15949] xt_socket: unknown flags 0x50 [ 620.682032][T16006] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode [ 620.713250][T16006] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 620.859252][T16009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2651'. [ 622.186010][T16030] netlink: 'syz.7.2656': attribute type 39 has an invalid length. [ 623.023788][T14454] Bluetooth: hci1: Malformed LE Event: 0x0d [ 623.110867][T16047] syzkaller0: entered promiscuous mode [ 623.116411][T16047] syzkaller0: entered allmulticast mode [ 624.472638][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.479326][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.478270][T16081] netlink: 'syz.7.2672': attribute type 12 has an invalid length. [ 629.769257][T16153] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2679'. [ 631.207233][T16189] pimreg1: tun_chr_ioctl cmd 1074025677 [ 631.213186][T16189] pimreg1: linktype set to 825 [ 631.393246][T16191] netlink: 'syz.3.2688': attribute type 10 has an invalid length. [ 631.413661][T16191] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2688'. [ 632.029915][T16211] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.2693'. [ 635.054318][T16274] netlink: 17279 bytes leftover after parsing attributes in process `syz.8.2695'. [ 635.306688][T16281] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2698'. [ 635.417031][T16281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2698'. [ 638.493399][T14454] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 641.271961][T16396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2708'. [ 645.460941][ T5838] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 647.541537][T16489] netlink: 'syz.6.2731': attribute type 29 has an invalid length. [ 647.558913][T16490] netlink: 'syz.6.2731': attribute type 29 has an invalid length. [ 647.568155][T16491] netlink: 'syz.6.2731': attribute type 29 has an invalid length. [ 647.578018][T16495] netlink: 'syz.6.2731': attribute type 29 has an invalid length. [ 647.951067][T16503] netlink: 'syz.6.2732': attribute type 39 has an invalid length. [ 648.199983][T16505] delete_channel: no stack [ 648.286439][T16512] netlink: 'syz.7.2736': attribute type 10 has an invalid length. [ 648.317155][T16518] syzkaller0: entered promiscuous mode [ 648.317182][T16518] syzkaller0: entered allmulticast mode [ 648.333674][T16519] netlink: 'syz.8.2735': attribute type 2 has an invalid length. [ 648.333699][T16519] netlink: 'syz.8.2735': attribute type 8 has an invalid length. [ 648.333714][T16519] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2735'. [ 648.624744][T16512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.726399][T16512] team0: Port device bond0 added [ 649.037960][T16532] netem: invalid attributes len -21 [ 649.072746][T16532] netem: change failed [ 649.732761][T16552] nbd: must specify a size in bytes for the device [ 650.095751][ T5838] Bluetooth: hci3: Malformed LE Event: 0x0d [ 652.349208][T16589] netlink: 'syz.2.2752': attribute type 39 has an invalid length. [ 652.370465][T16582] syzkaller0: entered promiscuous mode [ 652.390692][T16582] syzkaller0: entered allmulticast mode [ 659.513634][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 659.601115][T16691] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2772'. [ 663.683577][T16733] syzkaller0: entered promiscuous mode [ 663.726607][T16733] syzkaller0: entered allmulticast mode [ 664.964115][T16764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2792'. [ 665.014035][T16764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2792'. [ 665.462034][T14454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.471446][T14454] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.494812][T14454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.507172][T14454] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.526323][T14454] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 665.702405][T16772] geneve0 speed is unknown, defaulting to 1000 [ 665.761851][T16777] netlink: 'syz.2.2796': attribute type 1 has an invalid length. [ 665.800845][T16777] netlink: 2704 bytes leftover after parsing attributes in process `syz.2.2796'. [ 667.009931][T16797] netlink: 'syz.2.2800': attribute type 18 has an invalid length. [ 667.053008][T16783] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2799'. [ 667.250472][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.667425][T14454] Bluetooth: hci5: command tx timeout [ 667.779408][T16772] chnl_net:caif_netlink_parms(): no params data found [ 667.951645][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.238947][T16832] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2807'. [ 668.369743][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.671298][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.736860][T14454] Bluetooth: hci5: command tx timeout [ 671.804925][T16772] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.818781][ T5838] Bluetooth: hci5: command tx timeout [ 671.829223][T16772] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.836766][T16772] bridge_slave_0: entered allmulticast mode [ 671.846203][T16772] bridge_slave_0: entered promiscuous mode [ 671.870000][T16772] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.886644][T16772] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.909955][T16772] bridge_slave_1: entered allmulticast mode [ 671.948243][T16772] bridge_slave_1: entered promiscuous mode [ 672.122885][T16878] netlink: 504 bytes leftover after parsing attributes in process `syz.8.2814'. [ 672.310415][T16772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.327253][T16772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.384787][T16772] team0: Port device team_slave_0 added [ 672.409959][T16772] team0: Port device team_slave_1 added [ 672.475573][T16772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.495795][T16772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.557942][T16772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.572993][T16772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.583250][T16772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.624902][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 672.635156][T16772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.816210][T16772] hsr_slave_0: entered promiscuous mode [ 672.837163][T16772] hsr_slave_1: entered promiscuous mode [ 672.843991][T16772] debugfs: 'hsr0' already exists in 'hsr' [ 672.854775][T16772] Cannot create hsr debugfs directory [ 673.914332][T16898] syzkaller0: entered promiscuous mode [ 673.920015][T14454] Bluetooth: hci5: command tx timeout [ 673.926770][T16898] syzkaller0: entered allmulticast mode [ 677.475875][ T13] bridge_slave_1: left allmulticast mode [ 677.482209][ T13] bridge_slave_1: left promiscuous mode [ 677.488461][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.795491][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.853354][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.875243][ T13] bond0 (unregistering): Released all slaves [ 677.903272][T16944] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2832'. [ 677.998369][T16939] netlink: 'syz.8.2830': attribute type 12 has an invalid length. [ 678.575983][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.924065][T16963] openvswitch: netlink: Tunnel attr 92 out of range max 16 [ 679.003109][T16949] bridge_slave_0 (unregistering): left allmulticast mode [ 679.042922][T16949] bridge_slave_0 (unregistering): left promiscuous mode [ 679.062198][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.362826][ T13] hsr_slave_0: left promiscuous mode [ 679.383478][ T13] hsr_slave_1: left promiscuous mode [ 679.392251][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.406898][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.437575][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.445699][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.462671][ T13] veth1_macvtap: left promiscuous mode [ 679.468618][ T13] veth0_macvtap: left promiscuous mode [ 679.478475][ T13] veth1_vlan: left promiscuous mode [ 679.625129][T16981] netlink: 'syz.7.2844': attribute type 10 has an invalid length. [ 679.846356][ T13] team0 (unregistering): Port device team_slave_1 removed [ 679.863424][ T13] team0 (unregistering): Port device team_slave_0 removed [ 680.058185][T16986] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2846'. [ 680.085264][T16986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2846'. [ 680.301544][T16981] team0 (unregistering): Port device team_slave_0 removed [ 680.333082][T16981] team0 (unregistering): Port device team_slave_1 removed [ 680.360616][T16981] team0 (unregistering): Port device bond0 removed [ 680.909312][T17005] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2851'. [ 680.974079][T17000] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2850'. [ 680.997627][T17002] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2852'. [ 681.272720][T16772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 681.368500][T16772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 681.490157][T16772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 681.521279][T16772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 682.576959][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2857'. [ 682.605131][T16772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.833203][T16772] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.861731][T17013] infiniband !yz!: set active [ 682.890960][ T6880] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.896599][T17013] infiniband !yz!: added team_slave_0 [ 682.898799][ T6880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.906043][T17013] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 682.943881][T17013] infiniband !yz!: Couldn't open port 1 [ 682.976088][ T6880] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.983370][ T6880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.280081][T17013] RDS/IB: !yz!: added [ 683.287932][T17013] smc: adding ib device !yz! with port count 1 [ 683.294161][T17013] smc: ib device !yz! port 1 has no pnetid [ 684.202637][T17059] raw_sendmsg: syz.8.2862 forgot to set AF_INET. Fix it! [ 684.316096][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2862'. [ 684.352406][T16772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.405266][T17059] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 684.949436][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2865'. [ 685.503750][T16772] veth0_vlan: entered promiscuous mode [ 685.562767][T17092] netlink: 'syz.8.2868': attribute type 6 has an invalid length. [ 685.574622][T16772] veth1_vlan: entered promiscuous mode [ 685.696217][T16772] veth0_macvtap: entered promiscuous mode [ 685.753488][T16772] veth1_macvtap: entered promiscuous mode [ 685.821078][T16772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 685.878893][T16772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.904062][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.911185][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.923779][ T6883] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.028147][ T6880] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.091347][ T6883] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.188114][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.235350][T14454] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 686.514764][T17107] IPv6: pim6reg1: Disabled Multicast RS [ 686.793691][ T6980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.842488][ T6980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.932649][ T7336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.990689][ T7336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.087030][T17117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2874'. [ 687.885837][T17131] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2876'. [ 688.604505][T17140] netlink: 'syz.8.2877': attribute type 11 has an invalid length. [ 689.557948][T17161] netlink: 'syz.2.2881': attribute type 2 has an invalid length. [ 690.409986][T17174] syz.7.2884 (17174) used greatest stack depth: 16056 bytes left [ 690.631733][T17179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.430892][T17192] 2: renamed from team_slave_1 [ 691.813570][T17200] syzkaller0: entered promiscuous mode [ 691.824200][T17200] syzkaller0: entered allmulticast mode [ 694.745787][T17255] netlink: 'syz.7.2907': attribute type 10 has an invalid length. [ 694.755009][T17255] netlink: 55 bytes leftover after parsing attributes in process `syz.7.2907'. [ 694.853529][T17242] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2901'. [ 695.319260][T14454] Bluetooth: hci5: unexpected subevent 0x10 length: 150 > 2 [ 695.982335][T17270] sit0: entered promiscuous mode [ 697.650892][T17292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 698.297835][T14454] Bluetooth: hci4: command 0x0406 tx timeout [ 699.966685][T17348] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2927'. [ 700.284494][T17354] netlink: 'syz.3.2928': attribute type 1 has an invalid length. [ 700.316424][T17354] netlink: 2704 bytes leftover after parsing attributes in process `syz.3.2928'. [ 700.698792][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2925'. [ 700.726277][T17347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2925'. [ 700.738231][T17347] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2925'. [ 701.111426][T17367] netlink: 144 bytes leftover after parsing attributes in process `syz.7.2932'. [ 701.324177][T17367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2932'. [ 702.121119][T17386] netlink: 'syz.8.2934': attribute type 10 has an invalid length. [ 702.490002][T17395] netlink: 'syz.3.2937': attribute type 6 has an invalid length. [ 702.516170][T17395] netlink: 3936 bytes leftover after parsing attributes in process `syz.3.2937'. [ 702.570965][T17395] netlink: 'syz.3.2937': attribute type 1 has an invalid length. [ 702.634968][T17386] geneve0: entered promiscuous mode [ 702.656573][T17395] nbd1: detected capacity change from 0 to 339754496 [ 702.703939][ T5838] block nbd1: Receive control failed (result -32) [ 702.720307][T16900] block nbd1: Dead connection, failed to find a fallback [ 702.774648][T16900] block nbd1: shutting down sockets [ 702.813836][T16900] blk_print_req_error: 24 callbacks suppressed [ 702.813861][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.877537][T16900] buffer_io_error: 23 callbacks suppressed [ 702.877559][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 702.892031][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.894663][T17386] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 702.908114][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 702.950492][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 702.981174][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 702.991301][T15489] geneve0 speed is unknown, defaulting to 1000 [ 703.000155][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.022868][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 703.033934][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.044116][ T10] geneve0 speed is unknown, defaulting to 1000 [ 703.048421][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 703.050488][ T9] geneve0 speed is unknown, defaulting to 1000 [ 703.152257][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.176765][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 703.184675][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.236057][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 703.244225][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.257014][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 703.264796][T16900] ldm_validate_partition_table(): Disk read failed. [ 703.272120][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.282378][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 703.308044][T16900] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 703.330515][T16900] Buffer I/O error on dev nbd1, logical block 0, async page read [ 703.354348][T17414] netlink: 'syz.8.2942': attribute type 1 has an invalid length. [ 703.363697][T16900] Dev nbd1: unable to read RDB block 0 [ 703.363970][T16900] nbd1: unable to read partition table [ 703.367423][T16900] ldm_validate_partition_table(): Disk read failed. [ 703.367604][T16900] Dev nbd1: unable to read RDB block 0 [ 703.367835][T16900] nbd1: unable to read partition table [ 703.645797][T17414] netlink: 2704 bytes leftover after parsing attributes in process `syz.8.2942'. [ 705.511324][T17459] netlink: 'syz.7.2953': attribute type 2 has an invalid length. [ 705.842836][T17477] sctp: [Deprecated]: syz.3.2958 (pid 17477) Use of int in maxseg socket option. [ 705.842836][T17477] Use struct sctp_assoc_value instead [ 706.117664][T17479] netlink: 'syz.8.2957': attribute type 10 has an invalid length. [ 706.146611][T17479] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2957'. [ 706.676829][T17492] xt_limit: Overflow, try lower: 324382443/0 [ 706.897815][T17500] macsec0: entered promiscuous mode [ 706.936747][T17500] macsec0: entered allmulticast mode [ 706.945292][ T5838] Bluetooth: hci5: unexpected event 0x34 length: 15 > 6 [ 706.965159][T17500] veth1_macvtap: entered allmulticast mode [ 711.584943][T17599] netlink: 'syz.3.2969': attribute type 10 has an invalid length. [ 712.422907][ T5838] Bluetooth: hci3: Unknown advertising packet type: 0x7b [ 712.422943][ T5838] Bluetooth: hci3: Malformed LE Event: 0x0d [ 712.974595][T17642] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2979'. [ 713.137402][ T5838] Bluetooth: hci5: unexpected subevent 0x0e length: 150 > 15 [ 713.150759][ T5838] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 713.300204][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2981'. [ 713.993092][T17659] netlink: 4348 bytes leftover after parsing attributes in process `syz.7.2986'. [ 714.032531][T17659] netlink: 4348 bytes leftover after parsing attributes in process `syz.7.2986'. [ 714.875997][T17660] delete_channel: no stack [ 716.251621][T17691] netlink: 'syz.5.2994': attribute type 10 has an invalid length. [ 716.293480][T17691] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.308156][T17691] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.190425][T17691] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.197695][T17691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 717.205342][T17691] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.212633][T17691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 717.225172][T17691] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 718.211675][T17727] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3001'. [ 718.314165][T17741] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3005'. [ 718.431279][T17746] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3007'. [ 719.002202][ T5838] Bluetooth: hci5: unexpected subevent 0x0e length: 150 > 15 [ 719.009769][ T5838] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 720.736877][T17784] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3015'. [ 721.145711][T17796] delete_channel: no stack [ 723.306191][T17836] : entered promiscuous mode [ 723.661446][T17854] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3032'. [ 723.747381][T17859] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.3032'. [ 723.885863][T17863] netlink: 'syz.8.3035': attribute type 3 has an invalid length. [ 723.956874][T17863] netlink: 16066 bytes leftover after parsing attributes in process `syz.8.3035'. [ 727.332029][T17938] netlink: 352 bytes leftover after parsing attributes in process `syz.5.3040'. [ 728.204004][T17960] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3046'. [ 729.161734][T17974] syzkaller0: entered promiscuous mode [ 729.188618][T17974] syzkaller0: entered allmulticast mode [ 729.269006][T17983] netlink: 'syz.7.3051': attribute type 2 has an invalid length. [ 729.277244][T17983] tipc: Started in network mode [ 729.282376][T17983] tipc: Node identity 1340008, cluster identity 4711 [ 729.312824][T17983] tipc: Node number set to 20185096 [ 730.025341][T18010] syz.7.3059: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 730.082828][T18010] CPU: 0 UID: 0 PID: 18010 Comm: syz.7.3059 Not tainted syzkaller #0 PREEMPT(full) [ 730.082860][T18010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.082873][T18010] Call Trace: [ 730.082881][T18010] [ 730.082890][T18010] dump_stack_lvl+0xe8/0x150 [ 730.082926][T18010] warn_alloc+0x249/0x340 [ 730.082958][T18010] ? __pfx_warn_alloc+0x10/0x10 [ 730.082991][T18010] ? kasan_save_track+0x4f/0x80 [ 730.083020][T18010] ? __kasan_kmalloc+0x93/0xb0 [ 730.083042][T18010] ? __kmalloc_cache_noprof+0x31c/0x660 [ 730.083063][T18010] ? xskq_create+0x56/0x170 [ 730.083091][T18010] ? xsk_setsockopt+0x603/0x990 [ 730.083114][T18010] ? do_sock_setsockopt+0x17c/0x1b0 [ 730.083143][T18010] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 730.083170][T18010] ? do_syscall_64+0x14d/0xf80 [ 730.083193][T18010] __vmalloc_node_range_noprof+0x132/0x1730 [ 730.083218][T18010] ? perf_trace_run_bpf_submit+0xee/0x170 [ 730.083241][T18010] ? perf_trace_preemptirq_template+0xb2/0x350 [ 730.083272][T18010] ? irqentry_exit+0x59e/0x620 [ 730.083293][T18010] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 730.083339][T18010] ? irqentry_exit+0x59e/0x620 [ 730.083358][T18010] ? lockdep_hardirqs_on+0x7a/0x110 [ 730.083390][T18010] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 730.083430][T18010] vmalloc_user_noprof+0xad/0xe0 [ 730.083453][T18010] ? xskq_create+0xbf/0x170 [ 730.083482][T18010] xskq_create+0xbf/0x170 [ 730.083513][T18010] xsk_init_queue+0x8a/0xe0 [ 730.083544][T18010] xsk_setsockopt+0x603/0x990 [ 730.083574][T18010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 730.083607][T18010] ? security_socket_setsockopt+0x23b/0x290 [ 730.083641][T18010] ? __sanitizer_cov_trace_pc+0x36/0x70 [ 730.083670][T18010] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 730.083693][T18010] ? __pfx_xsk_setsockopt+0x10/0x10 [ 730.083721][T18010] do_sock_setsockopt+0x17c/0x1b0 [ 730.083757][T18010] __x64_sys_setsockopt+0x13d/0x1b0 [ 730.083793][T18010] do_syscall_64+0x14d/0xf80 [ 730.083811][T18010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.083832][T18010] ? clear_bhb_loop+0x40/0x90 [ 730.083857][T18010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.083877][T18010] RIP: 0033:0x7f4e7579c799 [ 730.083898][T18010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.083915][T18010] RSP: 002b:00007f4e766a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 730.083937][T18010] RAX: ffffffffffffffda RBX: 00007f4e75a15fa0 RCX: 00007f4e7579c799 [ 730.083952][T18010] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 730.083964][T18010] RBP: 00007f4e75832c99 R08: 0000000000000004 R09: 0000000000000000 [ 730.083977][T18010] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 730.083989][T18010] R13: 00007f4e75a16038 R14: 00007f4e75a15fa0 R15: 00007ffc5d4c97a8 [ 730.084032][T18010] [ 730.374048][T18010] Mem-Info: [ 730.383819][T18010] active_anon:9070 inactive_anon:0 isolated_anon:0 [ 730.383819][T18010] active_file:19785 inactive_file:40225 isolated_file:0 [ 730.383819][T18010] unevictable:768 dirty:247 writeback:0 [ 730.383819][T18010] slab_reclaimable:7330 slab_unreclaimable:109452 [ 730.383819][T18010] mapped:30425 shmem:1379 pagetables:1737 [ 730.383819][T18010] sec_pagetables:0 bounce:0 [ 730.383819][T18010] kernel_misc_reclaimable:0 [ 730.383819][T18010] free:1302827 free_pcp:6821 free_cma:0 [ 730.430050][T18010] Node 0 active_anon:36296kB inactive_anon:0kB active_file:79140kB inactive_file:160696kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121724kB dirty:1004kB writeback:0kB shmem:3980kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13112kB pagetables:6736kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 730.475250][T18010] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 730.666102][T18010] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.696614][T18010] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 730.703208][T18010] Node 0 DMA32 free:1261076kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36496kB inactive_anon:0kB active_file:79140kB inactive_file:160696kB unevictable:1536kB writepending:1004kB zspages:0kB present:3129332kB managed:2552772kB mlocked:0kB bounce:0kB free_pcp:27880kB local_pcp:19168kB free_cma:0kB [ 730.737063][T18010] lowmem_reserve[]: 0 0 0 0 0 [ 730.742611][T18010] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 730.784839][T18010] lowmem_reserve[]: 0 0 0 0 0 [ 730.790432][T18010] Node 1 Normal free:3933912kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 730.957168][T18010] lowmem_reserve[]: 0 0 0 0 0 [ 730.962494][T18010] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 730.977091][T18010] Node 0 DMA32: 1000*4kB (UME) 4022*8kB (UME) 2629*16kB (UME) 3120*32kB (UME) 1461*64kB (UME) 322*128kB (UME) 116*256kB (UME) 24*512kB (UME) 119*1024kB (UME) 63*2048kB (UME) 160*4096kB (M) = 1261024kB [ 730.997609][T18010] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 731.032893][T18010] Node 1 Normal: 0*4kB 3*8kB (UM) 10*16kB (UM) 7*32kB (UM) 9*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 959*4096kB (UM) = 3933912kB [ 731.078030][T18010] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.111284][T18010] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 731.123487][T18010] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 731.137248][T18010] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 731.147863][T18010] 61385 total pagecache pages [ 731.152602][T18010] 0 pages in swap cache [ 731.165563][T18010] Free swap = 124996kB [ 731.179186][T18010] Total swap = 124996kB [ 731.183407][T18010] 2097051 pages RAM [ 731.187841][T18010] 0 pages HighMem/MovableOnly [ 731.192671][T18010] 427022 pages reserved [ 731.197344][T18010] 0 pages cma reserved [ 733.014232][T17998] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 733.024419][T17998] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 733.034154][T17998] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 735.271929][T18121] netlink: 'syz.2.3078': attribute type 6 has an invalid length. [ 735.318803][T18121] netlink: 3936 bytes leftover after parsing attributes in process `syz.2.3078'. [ 735.522630][T18121] netlink: 'syz.2.3078': attribute type 1 has an invalid length. [ 736.630361][ T5838] block nbd2: Receive control failed (result -32) [ 736.663551][T18132] Cannot find set identified by id 99 to match [ 736.708141][T18121] nbd2: detected capacity change from 0 to 339754496 [ 736.758877][T18051] block nbd2: Dead connection, failed to find a fallback [ 736.780895][T18051] block nbd2: shutting down sockets [ 736.793460][T18051] blk_print_req_error: 24 callbacks suppressed [ 736.793483][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 736.866722][T18051] buffer_io_error: 23 callbacks suppressed [ 736.866748][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 736.925489][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 736.956799][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 736.977056][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.016569][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 737.046107][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.094640][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 737.176893][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.216819][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 737.246985][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.301274][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 737.366716][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.376280][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 737.447357][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.495221][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 737.531748][T18051] ldm_validate_partition_table(): Disk read failed. [ 737.600772][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.636963][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 737.644909][T18051] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 737.717038][T18051] Buffer I/O error on dev nbd2, logical block 0, async page read [ 737.725091][T18051] Dev nbd2: unable to read RDB block 0 [ 737.767362][T18051] nbd2: unable to read partition table [ 737.808009][T18051] ldm_validate_partition_table(): Disk read failed. [ 737.832489][T18051] Dev nbd2: unable to read RDB block 0 [ 737.856096][T18051] nbd2: unable to read partition table [ 737.912830][T18144] xfrm0 speed is unknown, defaulting to 1000 [ 737.939973][T18144] xfrm0 speed is unknown, defaulting to 1000 [ 737.990411][T18144] xfrm0 speed is unknown, defaulting to 1000 [ 738.302210][T18144] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 738.633797][T18151] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3086'. [ 738.730386][T18151] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3086'. [ 738.992201][T18144] xfrm0 speed is unknown, defaulting to 1000 [ 739.033237][T18144] xfrm0 speed is unknown, defaulting to 1000 [ 739.078656][T18144] xfrm0 speed is unknown, defaulting to 1000 [ 739.119612][T18144] xfrm0 speed is unknown, defaulting to 1000 [ 739.137919][T18144] xfrm0 speed is unknown, defaulting to 1000 [ 739.146036][T18144] xfrm0 speed is unknown, defaulting to 1000 [ 739.359837][T18163] geneve0 speed is unknown, defaulting to 1000 [ 739.710869][T18165] geneve0 speed is unknown, defaulting to 1000 [ 739.960781][T18163] xfrm0 speed is unknown, defaulting to 1000 [ 741.066180][T18198] netlink: 'syz.8.3097': attribute type 10 has an invalid length. [ 741.691463][T18198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.733469][T18198] team0: Port device bond0 added [ 742.004206][T18165] xfrm0 speed is unknown, defaulting to 1000 [ 743.722742][ T5838] Bluetooth: hci0: unexpected event 0x20 length: 15 > 7 [ 745.840003][T18251] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3106'. [ 745.928219][T18246] syzkaller0: entered promiscuous mode [ 745.946302][T18246] syzkaller0: entered allmulticast mode [ 747.295302][T18272] netlink: 'syz.7.3110': attribute type 39 has an invalid length. [ 747.357397][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.363772][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.318344][T18315] bridge_slave_1: left allmulticast mode [ 751.324311][T18315] bridge_slave_1: left promiscuous mode [ 751.368757][T18315] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.505489][T18315] bridge_slave_0: left allmulticast mode [ 751.550417][T18315] bridge_slave_0: left promiscuous mode [ 751.593535][T18315] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.124467][T18332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.638626][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3128'. [ 752.986008][T18324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 753.325834][T18344] netlink: 'syz.7.3130': attribute type 10 has an invalid length. [ 753.550150][T18344] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3130'. [ 755.982266][T18406] netlink: 'syz.7.3145': attribute type 7 has an invalid length. [ 756.041936][T18409] netdevsim netdevsim8 : renamed from netdevsim0 (while UP) [ 756.070779][ T5838] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 756.926326][T18427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3149'. [ 757.060489][T18433] netlink: 'syz.7.3150': attribute type 1 has an invalid length. [ 757.095403][T18433] netlink: 2704 bytes leftover after parsing attributes in process `syz.7.3150'. [ 757.125112][T18433] nbd: nbd0 already in use [ 757.618305][ T5838] Bluetooth: hci0: unexpected event 0x10 length: 151 > 1 [ 757.619847][T14454] Bluetooth: hci0: hardware error 0x00 [ 758.895856][T18478] netlink: 'syz.8.3156': attribute type 39 has an invalid length. [ 760.096940][T14454] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 763.120649][T18527] netlink: 830 bytes leftover after parsing attributes in process `syz.5.3161'. [ 763.454824][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3164'. [ 763.677836][T18542] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 764.685506][T14454] Bluetooth: hci5: unexpected event 0x33 length: 15 > 10 [ 765.541273][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'. [ 765.952603][T18590] mac80211_hwsim hwsim28 wlan1: entered promiscuous mode [ 766.097192][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3179'. [ 766.101303][T18590] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 766.216167][T18605] netlink: 'syz.3.3182': attribute type 29 has an invalid length. [ 766.233455][T18603] netlink: 'syz.7.3180': attribute type 1 has an invalid length. [ 766.233545][T18603] netlink: 2704 bytes leftover after parsing attributes in process `syz.7.3180'. [ 766.307206][T18610] netlink: 'syz.3.3182': attribute type 29 has an invalid length. [ 766.333909][T18610] netlink: 'syz.3.3182': attribute type 29 has an invalid length. [ 766.377375][T18605] netlink: 'syz.3.3182': attribute type 29 has an invalid length. [ 766.861881][T18603] ------------[ cut here ]------------ [ 766.868085][T18603] !rwb [ 766.868103][T18603] WARNING: block/blk-wbt.c:785 at wbt_init_enable_default+0x18a/0x220, CPU#1: syz.7.3180/18603 [ 766.881406][T18603] Modules linked in: [ 766.885602][T18603] CPU: 1 UID: 0 PID: 18603 Comm: syz.7.3180 Not tainted syzkaller #0 PREEMPT(full) [ 766.895280][T18603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 766.907129][T18603] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 766.913438][T18603] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 fd 61 25 fd eb 18 e8 f6 61 25 fd eb 0d e8 ef 61 25 fd 4c 89 ff e8 07 a0 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c0 9c 10 07 [ 766.933942][T18603] RSP: 0018:ffffc9000527ee30 EFLAGS: 00010282 [ 766.940267][T18603] RAX: 4ba1f7d76dc91d00 RBX: 1ffff1100fcc4d04 RCX: 0000000000000046 [ 766.948444][T18603] RDX: 0000000000000006 RSI: ffffffff8def4bfe RDI: ffffffff8c27b400 [ 766.956909][T18603] RBP: dffffc0000000000 R08: ffffffff90118cb7 R09: 1ffffffff2023196 [ 766.965010][T18603] R10: dffffc0000000000 R11: fffffbfff2023197 R12: ffff88807e626820 [ 766.973488][T18603] R13: 0000000000000000 R14: ffff88802e605000 R15: ffff88807e626800 [ 766.981735][T18603] FS: 00007f4e766876c0(0000) GS:ffff888125563000(0000) knlGS:0000000000000000 [ 766.991083][T18603] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 766.997783][T18603] CR2: 0000561b662954a0 CR3: 00000000423ee000 CR4: 00000000003526f0 [ 767.007001][T18603] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 767.015027][T18603] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 767.023945][T18603] Call Trace: [ 767.027353][T18603] [ 767.030421][T18603] blk_register_queue+0x382/0x430 [ 767.035672][T18603] __add_disk+0x677/0xd50 [ 767.040141][T18603] ? down_read+0x272/0x2e0 [ 767.044595][T18603] add_disk_fwnode+0xfb/0x480 [ 767.049632][T18603] nbd_dev_add+0x72c/0xb50 [ 767.054110][T18603] ? __pfx_nbd_dev_add+0x10/0x10 [ 767.059194][T18603] ? bpf_lsm_capable+0x9/0x20 [ 767.063906][T18603] ? security_capable+0x7e/0x2c0 [ 767.068981][T18603] ? radix_tree_lookup+0x240/0x290 [ 767.074242][T18603] nbd_genl_connect+0x962/0x1cf0 [ 767.079532][T18603] ? __pfx_nbd_genl_connect+0x10/0x10 [ 767.084927][T18603] ? rcu_is_watching+0x15/0xb0 [ 767.089755][T18603] ? trace_kmalloc+0x2a/0x110 [ 767.094481][T18603] ? __nla_parse+0x40/0x60 [ 767.099462][T18603] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 767.106852][T18603] genl_family_rcv_msg_doit+0x22a/0x330 [ 767.112535][T18603] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 767.116092][T18629] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3184'. [ 767.119408][T18603] ? idr_find+0x12/0x60 [ 767.132110][T18603] genl_rcv_msg+0x61c/0x7a0 [ 767.136816][T18603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.141888][T18603] ? __pfx_nbd_genl_connect+0x10/0x10 [ 767.147627][T18603] ? __lock_acquire+0x6b5/0x2cf0 [ 767.152640][T18603] netlink_rcv_skb+0x232/0x4b0 [ 767.157808][T18603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.162964][T18603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 767.168488][T18603] ? down_read+0x272/0x2e0 [ 767.172942][T18603] ? genl_rcv+0xd/0x40 [ 767.177774][T18603] genl_rcv+0x28/0x40 [ 767.181792][T18603] netlink_unicast+0x80f/0x9b0 [ 767.186698][T18603] ? __pfx_netlink_unicast+0x10/0x10 [ 767.192021][T18603] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 767.197756][T18603] ? netlink_sendmsg+0x650/0xb40 [ 767.202735][T18603] ? skb_put+0x11b/0x210 [ 767.207403][T18603] netlink_sendmsg+0x813/0xb40 [ 767.212918][T18603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.218850][T18603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 767.223958][T18603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 767.229436][T18603] ____sys_sendmsg+0x972/0x9f0 [ 767.234258][T18603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.239843][T18603] ? import_iovec+0x73/0xa0 [ 767.244372][T18603] ___sys_sendmsg+0x2a5/0x360 [ 767.249145][T18603] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 767.255779][T18603] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.261086][T18603] ? lockdep_hardirqs_on+0x7a/0x110 [ 767.267062][T18603] ? irqentry_exit+0x59e/0x620 [ 767.271903][T18603] ? __fget_files+0x2a/0x420 [ 767.276606][T18603] ? __fget_files+0x3a0/0x420 [ 767.281336][T18603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 767.286301][T18603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.291884][T18603] do_syscall_64+0x14d/0xf80 [ 767.296801][T18603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.302899][T18603] ? clear_bhb_loop+0x40/0x90 [ 767.307678][T18603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.314582][T18603] RIP: 0033:0x7f4e7579c799 [ 767.319618][T18603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.339582][T18603] RSP: 002b:00007f4e76687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.348113][T18603] RAX: ffffffffffffffda RBX: 00007f4e75a16090 RCX: 00007f4e7579c799 [ 767.356222][T18603] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000006 [ 767.364350][T18603] RBP: 00007f4e75832c99 R08: 0000000000000000 R09: 0000000000000000 [ 767.372664][T18603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.381135][T18603] R13: 00007f4e75a16128 R14: 00007f4e75a16090 R15: 00007ffc5d4c97a8 [ 767.389287][T18603] [ 767.392331][T18603] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 767.399708][T18603] CPU: 1 UID: 0 PID: 18603 Comm: syz.7.3180 Not tainted syzkaller #0 PREEMPT(full) [ 767.409215][T18603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.419303][T18603] Call Trace: [ 767.422613][T18603] [ 767.425578][T18603] vpanic+0x56c/0xa60 [ 767.429610][T18603] ? __pfx__printk+0x10/0x10 [ 767.434245][T18603] ? __pfx_vpanic+0x10/0x10 [ 767.438794][T18603] ? is_bpf_text_address+0x292/0x2b0 [ 767.444107][T18603] ? is_bpf_text_address+0x26/0x2b0 [ 767.449341][T18603] panic+0xc5/0xd0 [ 767.453112][T18603] ? __pfx_panic+0x10/0x10 [ 767.457594][T18603] __warn+0x315/0x4f0 [ 767.461606][T18603] ? wbt_init_enable_default+0x18a/0x220 [ 767.467359][T18603] ? wbt_init_enable_default+0x18a/0x220 [ 767.473028][T18603] __report_bug+0x29a/0x540 [ 767.477576][T18603] ? netlink_rcv_skb+0x232/0x4b0 [ 767.482541][T18603] ? genl_rcv+0x28/0x40 [ 767.486715][T18603] ? netlink_unicast+0x80f/0x9b0 [ 767.491772][T18603] ? wbt_init_enable_default+0x18a/0x220 [ 767.497448][T18603] ? __pfx___report_bug+0x10/0x10 [ 767.502517][T18603] ? perf_trace_preemptirq_template+0xb2/0x350 [ 767.508691][T18603] ? kasan_quarantine_put+0x2f/0x1f0 [ 767.513983][T18603] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 767.520590][T18603] ? wbt_init_enable_default+0x18a/0x220 [ 767.526239][T18603] report_bug+0x16a/0x220 [ 767.530582][T18603] ? wbt_init_enable_default+0x18a/0x220 [ 767.536226][T18603] ? wbt_init_enable_default+0x18c/0x220 [ 767.541880][T18603] handle_bug+0x9c/0x200 [ 767.546130][T18603] exc_invalid_op+0x1a/0x50 [ 767.550665][T18603] asm_exc_invalid_op+0x1a/0x20 [ 767.555524][T18603] RIP: 0010:wbt_init_enable_default+0x18a/0x220 [ 767.561777][T18603] Code: 1c 84 c0 0f 85 8d 00 00 00 41 21 2e eb 1f e8 fd 61 25 fd eb 18 e8 f6 61 25 fd eb 0d e8 ef 61 25 fd 4c 89 ff e8 07 a0 83 fd 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c0 9c 10 07 [ 767.581537][T18603] RSP: 0018:ffffc9000527ee30 EFLAGS: 00010282 [ 767.587617][T18603] RAX: 4ba1f7d76dc91d00 RBX: 1ffff1100fcc4d04 RCX: 0000000000000046 [ 767.595592][T18603] RDX: 0000000000000006 RSI: ffffffff8def4bfe RDI: ffffffff8c27b400 [ 767.603568][T18603] RBP: dffffc0000000000 R08: ffffffff90118cb7 R09: 1ffffffff2023196 [ 767.611548][T18603] R10: dffffc0000000000 R11: fffffbfff2023197 R12: ffff88807e626820 [ 767.619524][T18603] R13: 0000000000000000 R14: ffff88802e605000 R15: ffff88807e626800 [ 767.627614][T18603] blk_register_queue+0x382/0x430 [ 767.632811][T18603] __add_disk+0x677/0xd50 [ 767.637155][T18603] ? down_read+0x272/0x2e0 [ 767.641579][T18603] add_disk_fwnode+0xfb/0x480 [ 767.646268][T18603] nbd_dev_add+0x72c/0xb50 [ 767.650706][T18603] ? __pfx_nbd_dev_add+0x10/0x10 [ 767.655716][T18603] ? bpf_lsm_capable+0x9/0x20 [ 767.660412][T18603] ? security_capable+0x7e/0x2c0 [ 767.665367][T18603] ? radix_tree_lookup+0x240/0x290 [ 767.670927][T18603] nbd_genl_connect+0x962/0x1cf0 [ 767.675895][T18603] ? __pfx_nbd_genl_connect+0x10/0x10 [ 767.681284][T18603] ? rcu_is_watching+0x15/0xb0 [ 767.686080][T18603] ? trace_kmalloc+0x2a/0x110 [ 767.690771][T18603] ? __nla_parse+0x40/0x60 [ 767.695210][T18603] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 767.701551][T18603] genl_family_rcv_msg_doit+0x22a/0x330 [ 767.707284][T18603] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 767.713376][T18603] ? idr_find+0x12/0x60 [ 767.717661][T18603] genl_rcv_msg+0x61c/0x7a0 [ 767.722175][T18603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.727390][T18603] ? __pfx_nbd_genl_connect+0x10/0x10 [ 767.732841][T18603] ? __lock_acquire+0x6b5/0x2cf0 [ 767.737807][T18603] netlink_rcv_skb+0x232/0x4b0 [ 767.742580][T18603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 767.747696][T18603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 767.753011][T18603] ? down_read+0x272/0x2e0 [ 767.757430][T18603] ? genl_rcv+0xd/0x40 [ 767.761505][T18603] genl_rcv+0x28/0x40 [ 767.765489][T18603] netlink_unicast+0x80f/0x9b0 [ 767.770280][T18603] ? __pfx_netlink_unicast+0x10/0x10 [ 767.775663][T18603] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 767.781234][T18603] ? netlink_sendmsg+0x650/0xb40 [ 767.786180][T18603] ? skb_put+0x11b/0x210 [ 767.790438][T18603] netlink_sendmsg+0x813/0xb40 [ 767.795221][T18603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.800521][T18603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 767.805474][T18603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 767.810767][T18603] ____sys_sendmsg+0x972/0x9f0 [ 767.815578][T18603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.820962][T18603] ? import_iovec+0x73/0xa0 [ 767.825599][T18603] ___sys_sendmsg+0x2a5/0x360 [ 767.830282][T18603] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 767.836890][T18603] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.842566][T18603] ? lockdep_hardirqs_on+0x7a/0x110 [ 767.847778][T18603] ? irqentry_exit+0x59e/0x620 [ 767.852597][T18603] ? __fget_files+0x2a/0x420 [ 767.857226][T18603] ? __fget_files+0x3a0/0x420 [ 767.861948][T18603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 767.866992][T18603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.872488][T18603] do_syscall_64+0x14d/0xf80 [ 767.877085][T18603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.883248][T18603] ? clear_bhb_loop+0x40/0x90 [ 767.887938][T18603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.893860][T18603] RIP: 0033:0x7f4e7579c799 [ 767.898281][T18603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.917897][T18603] RSP: 002b:00007f4e76687028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.926323][T18603] RAX: ffffffffffffffda RBX: 00007f4e75a16090 RCX: 00007f4e7579c799 [ 767.934301][T18603] RDX: 0000000000004040 RSI: 0000200000000140 RDI: 0000000000000006 [ 767.942319][T18603] RBP: 00007f4e75832c99 R08: 0000000000000000 R09: 0000000000000000 [ 767.950297][T18603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 767.958275][T18603] R13: 00007f4e75a16128 R14: 00007f4e75a16090 R15: 00007ffc5d4c97a8 [ 767.966285][T18603] [ 767.969855][T18603] Kernel Offset: disabled [ 767.974178][T18603] Rebooting in 86400 seconds..