last executing test programs: 7m15.719500762s ago: executing program 1 (id=699): openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x6, @perf_config_ext, 0x10c002, 0x89, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x20000000}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x8}, 0x28) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x39, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x9, 0xec, 0x0, 0x0, @str='\x02A+/\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 7m15.555098961s ago: executing program 1 (id=703): socket$kcm(0x2c, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000010101020000000000050800084000000401"], 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000003040000002b0110"], 0x28}, 0x4004004) 7m15.380700773s ago: executing program 1 (id=705): r0 = syz_clone(0x420000, 0x0, 0xfffffffffffffc52, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x76, 0x81ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x607, 0x70bd2b, 0x2, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (fail_nth: 6) 7m14.555438251s ago: executing program 1 (id=707): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010400000500feff0000050000000900010073797a300000000064000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001400000000014000300776c616e300000000000000000000000080005400000000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x20044841}, 0x802) 7m14.151766883s ago: executing program 1 (id=710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100810, 0x20000000, 0x100, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000004, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0xfffffffffffffe79, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200)}, 0x0, 0x0, 0x0, 0x8, 0x3fb, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400c4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x80008, 0x830b}, 0x8400, 0x2, 0xfffffffe, 0x9, 0x2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x68}, 0x1, 0x0, 0x0, 0xc800}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92y.c_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}^\x00\x00'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}, {}, 0x5}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x0) 7m13.131042298s ago: executing program 1 (id=718): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x32c, 0x14, 0x10, 0x70bd2b, 0x25dfdbfc, {0x2b, 0x33}, [@INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "fb0c7760c3f913dd5220ea24da3298252b686585284e9f8818769a17a88395deb3e10d162e8df4404efc2c4ae898f1218c40da1b06fce9ecd3bb37185e4f673d0da990ca3a2b83691aabadda7d1444c693cc1cfbcd7573ad98ab72bd6a1536a20bc03a68c543d444725bc57ad435c3d548d63bd168c084d5f2a8af8d8fabc8d0f5d472396fc9b315e648d6eced653711aa7128b7537de2af620da161e1d5"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "71a6bfda14a1f9b9364706ce1d6b7612d3d2dfc4745682fc7ff6d83fdac5cb2663bd7678ef7b3996b4d1af1e84975fa0bfeb6da1bde715f2e907889cd8cd05bd5e030e49c33f5641513ef6a7e49d2e71deae801bda691b8f3fe7028422697ae16fbbafc5b001f098774d1cba2c8cea6c43a2f37a41697c18c5e863c401e82ff5aad05c2173438f02a3214add416bcdb57b8739dcfa0a305c5bb9b3dead517d65381b53ea08aaa274dd58b553836eadd525de82440dce600776928a0b7e494cb5be45400500792a2e8702420cf1b8c45e8706e012db55"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "8c52258f6091dad9e33bc1de6096b50685fa887851a927c4738bc23b6f233d93c90a5445c6dbf77de23387f267612f1dc5689b3aec72315149135a2cf9b5c83569e20f863310046b445f2507e987472ebd92fc410ecb57773ca789333dddfa158645ca57c48e2e5020c123e493a84e7498b735d6aeff1616c86b22baab3db918d8cd76ee02ef00a31c3e814a5b736dfc7c8fee3ab3778725319cc279113d03155fa2523849ad9d0ede460204c9689d71b72070e7b4c691"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "8cd04709f87b8c4ae3d56d3bd59b287c3b2611b767714e1623bd31272b5503f51bf6b060face70cf39bbd564f8f23b390fb7b573e3cf74045dce587c9b90d2b11de1f5eefecff3eb7b462e0f08a0524122a3acf7676e2c8c4a7ead951a541f2ec8d3c2af15c4c2a4d412416f20663f50b3e9d060e60622ba3989902855f1f2079d033addffd0617dc1b6a4ac0f8e2e62bc8a100ca4b37847b7e6f613f3edb4b2b1573c0330cc6b0ac2e13ebf1293769974efa586affd1ed4a73e915ec12204b9ae8bea16ab8da77c6eda2bb8c1245801b10cd6834e"}]}, 0x32c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x4000) 6m58.00467238s ago: executing program 32 (id=718): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000009c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000980)={&(0x7f0000000640)={0x32c, 0x14, 0x10, 0x70bd2b, 0x25dfdbfc, {0x2b, 0x33}, [@INET_DIAG_REQ_BYTECODE={0xa2, 0x1, "fb0c7760c3f913dd5220ea24da3298252b686585284e9f8818769a17a88395deb3e10d162e8df4404efc2c4ae898f1218c40da1b06fce9ecd3bb37185e4f673d0da990ca3a2b83691aabadda7d1444c693cc1cfbcd7573ad98ab72bd6a1536a20bc03a68c543d444725bc57ad435c3d548d63bd168c084d5f2a8af8d8fabc8d0f5d472396fc9b315e648d6eced653711aa7128b7537de2af620da161e1d5"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "71a6bfda14a1f9b9364706ce1d6b7612d3d2dfc4745682fc7ff6d83fdac5cb2663bd7678ef7b3996b4d1af1e84975fa0bfeb6da1bde715f2e907889cd8cd05bd5e030e49c33f5641513ef6a7e49d2e71deae801bda691b8f3fe7028422697ae16fbbafc5b001f098774d1cba2c8cea6c43a2f37a41697c18c5e863c401e82ff5aad05c2173438f02a3214add416bcdb57b8739dcfa0a305c5bb9b3dead517d65381b53ea08aaa274dd58b553836eadd525de82440dce600776928a0b7e494cb5be45400500792a2e8702420cf1b8c45e8706e012db55"}, @INET_DIAG_REQ_BYTECODE={0xbb, 0x1, "8c52258f6091dad9e33bc1de6096b50685fa887851a927c4738bc23b6f233d93c90a5445c6dbf77de23387f267612f1dc5689b3aec72315149135a2cf9b5c83569e20f863310046b445f2507e987472ebd92fc410ecb57773ca789333dddfa158645ca57c48e2e5020c123e493a84e7498b735d6aeff1616c86b22baab3db918d8cd76ee02ef00a31c3e814a5b736dfc7c8fee3ab3778725319cc279113d03155fa2523849ad9d0ede460204c9689d71b72070e7b4c691"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "8cd04709f87b8c4ae3d56d3bd59b287c3b2611b767714e1623bd31272b5503f51bf6b060face70cf39bbd564f8f23b390fb7b573e3cf74045dce587c9b90d2b11de1f5eefecff3eb7b462e0f08a0524122a3acf7676e2c8c4a7ead951a541f2ec8d3c2af15c4c2a4d412416f20663f50b3e9d060e60622ba3989902855f1f2079d033addffd0617dc1b6a4ac0f8e2e62bc8a100ca4b37847b7e6f613f3edb4b2b1573c0330cc6b0ac2e13ebf1293769974efa586affd1ed4a73e915ec12204b9ae8bea16ab8da77c6eda2bb8c1245801b10cd6834e"}]}, 0x32c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x22, &(0x7f00000000c0), 0x4) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x4000) 3m20.137540169s ago: executing program 5 (id=2600): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefffffff, @mcast1, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4f5", 0x28}], 0x1}, 0x400800c) 3m19.933555947s ago: executing program 5 (id=2601): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0xc1, 0x1, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x102212, 0x0, 0x0, 0x7, 0x2, 0xe000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xc0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x8, 0x2, 0x7fffffff, 0x5, 0x0, 0x0, 0x0, 0x7ffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_clone(0x88046000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e0000001e000000000000005c000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb=0xffffff7f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) 3m19.037328153s ago: executing program 5 (id=2602): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x6, 0x1, 0x3, 0xfffffffe, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0xb, 0x200c}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2, 0xf, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x100000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}}, @sadb_x_sec_ctx={0x1, 0x18, 0x1, 0x8}]}, 0x88}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000003060101"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x7, 0x7, 0x4, 0x2, 0x0, 0x3, 0xa, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10120, 0x6, 0x4, 0x1, 0x80000001, 0x1, 0x7, 0x0, 0xe9, 0x0, 0x9}, 0xffffffffffffffff, 0x1, r0, 0xa) close(r4) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000b0000000b0000000070000000e00000000000012040000000300000000007478000000004b007b010d00000000000007000000000d000000000000010000000063003a000b0000000000000700000000000000000000000300000000030000000200000038a95307a70000000000000905000000030000000000000c050000000afa000006000006040000000700000005000000040000003399b574d60a7f2e28020000000700000008000000010000000f000000060000000b0000b2bd0000000000"], &(0x7f0000000600)=""/136, 0xcf, 0x88, 0x1, 0x3, 0x10000}, 0x28) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0xff05, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 3m17.872842184s ago: executing program 5 (id=2608): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 3m17.077241613s ago: executing program 5 (id=2611): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) socket$kcm(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x40000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xffffffa1, 0xfffc, 0x0, 0x0, 0x0, 0x6}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) perf_event_open(&(0x7f0000000640)={0x0, 0x80, 0xec, 0x0, 0x0, 0x2, 0x0, 0x480000000000000b, 0x1000c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000140), 0xc}, 0x11efa, 0x24, 0x9c, 0x4, 0x49e, 0xfffff275, 0xfffc, 0x0, 0x9, 0x0, 0x5}, 0x0, 0x10, 0xffffffffffffffff, 0x2) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000c085) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1943}, 0x5000, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x25, &(0x7f00000002c0), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) 3m16.535821434s ago: executing program 5 (id=2615): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x6, 0x1, 0x3, 0xfffffffe, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x100000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}}]}, 0x80}}, 0x0) 3m1.384650933s ago: executing program 33 (id=2615): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x6, 0x1, 0x3, 0xfffffffe, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x3, 0x1, 0x0, 0x100000, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @in6=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0xff}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @multicast2}}]}, 0x80}}, 0x0) 1m10.215858539s ago: executing program 4 (id=3588): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000039000000000a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 1m10.035522109s ago: executing program 4 (id=3590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000000600)=[{&(0x7f0000002440)="a72d11a15c048c0a7d78aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e02721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}, {&(0x7f0000000580)="24a10f2a16837717b9ac706f53cbc1865aa4e9cedccce6e0f6cdd54704bfe2f26db6fd0918ff7915774192e5003559a7667bf77c485c4952a3d5647790cab7fef3989d2359387ade1a6b3c1d57dae491b8e93df2beee9bddd174f6bd022cd4f8f38b1e40f63e0eab48ddf3775067a0c5b648690d65f30a6c084c813c06e4e167"}], 0x2, &(0x7f0000001940)=[@ip_tos_int={{0x50, 0x29, 0x32}}, @ip_ttl={{0x0, 0xf00}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x6d}, 0x20004044) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a31000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a3000000000480004802000018007000100727400001400028008000140000000150800024000000000240001800900010068617368000000001400028008000240000000170800074000000001140000001100010000000000000000000000000a04c0e71e94132a8a5868c6cf888ac749f556b4fb629047a2e8d6635f2346b8901a176518fb"], 0xe4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x7, 0x0, 0x2000007}, {0x7, 0x9, 0x9}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x2e, 0x61, 0x2e, 0x2e]}}, 0x0, 0x45, 0x0, 0x1, 0x8}, 0x28) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, 0x8, 0x6, 0x801, 0x0, 0x0, {0xf}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x3, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000004aab00000000008000000071122c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0, 0x4a, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) sendmsg$can_raw(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x1d, r8}, 0x10, &(0x7f0000000780)={&(0x7f0000000740)=@can={{0x3, 0x0, 0x1, 0x1}, 0x3, 0x1, 0x0, 0x0, "ebdafc1dd749b4a3"}, 0x10}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x6, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x240008c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x2000000, 0xffffffffffffff49, 0x0, &(0x7f00000007c0)="2cbfc2d4985d2941e5db2c439f09000733b183db7703dfc4aa5eabd81f7f90218f0000399346713d66c7d601b6eb4546b20dc37adba6c69796ec85825a99", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x66) 1m9.63923588s ago: executing program 4 (id=3597): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x1a}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x9, 0x7, 0x1, 0x2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffffb}]}}}]}, 0x58}}, 0x4000010) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_clone(0x120000, &(0x7f0000000340)="df87e535943b0802a410c0662f541616", 0x10, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000540)="d4343cb66b088ae233180df8f2f06e38309bee1b41093e909482ec0488adcfe04b109faaf776f13b61478e7374d075f041f2a1258a97174861e331430c41974f0ce81ea332650dfb93d5932dc2") r7 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0xfc628fe8762ab32, 0x3fe, 0x82, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x8) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0xff}, @in=@loopback, {0x300, 0xb400, 0x0, 0xfeffff7f00000000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x200000, 0x20007, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0xfffffffe, 0x0, 0x2, 0x0, 0x8, 0xc7}}, 0xf0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) fstat(r7, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000057c0)={0xcc, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0x4}, [@nested={0xb1, 0x149, 0x0, 0x1, [@nested={0x56, 0x27, 0x0, 0x1, [@typed={0x8, 0x13f, 0x0, 0x0, @uid=r10}, @generic, @generic="214be463698d94d40298bc6c1c382c5d46ef8968b7b24e0515dcac7f3fdaa7a5de3861790731a718410749acb49845a47dd96aa7bb64eccc1bc7994fdcf29eca95d6f55c60d03afbe7f4"]}, @generic="510517bd75771788fe9bdf217b47ee471cb97371f55f9da3b4e9069807fa7f52fe9621db65b91b88481022dff9838eb16fb5740e145dea8f66179853138fdee9ff9b0d75c3", @typed={0x8, 0x115, 0x0, 0x0, @uid}, @typed={0x8, 0xe4, 0x0, 0x0, @uid}, @generic]}, @nested={0x4, 0xd6}]}, 0xcc}}, 0x4008800) r11 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r11, 0x84, 0x64, &(0x7f0000000000)=r13, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r13, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000400)={0x18, 0x1410, 0x4, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4) r14 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000005c0), 0xc2141, 0x0) r15 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=r4, 0x4) r16 = socket$phonet(0x23, 0x2, 0x1) sendmsg$unix(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="ec604fdaaaaec05d20e049c13716d8c30195ccc29eaa40738e2637db429a44024e7d0f647523b822e6c3a013daaaad9bd0afa4a10c33b51860958d316843fc1dc079214a323d86dfe2c958288e083fc4b49500601ea94949fbcf67b0c69ed537aec03c9be25ceaf44d133ca68388092648b8a11afcc9bceb0f99c872c9320251", 0x80}, {&(0x7f00000001c0)="5f8c0de038d0ac9e567ed6a0f7d5e17f1ab7de4946577189b382be83891d0462c7bec527b43bc1877ac3bcca5cca8ea7d3cfa6b4b1b8f42c5fadec09caf97ed686a6fa87c8fe9daf02f9acd917446d69659a57fcd8b900d241ea70f341e025c6c29746e80edc7d03c9b197db169e59560289309be88bcf8f6352d1a628c75c6193dc3c444a4967964440095196726cf02f0d35ae1782e76ecb1b3670e3f6ab9b6e50ae8ba074632c7ed2aa9cd8a3cd5dd954ccb6bf24806a1813fd0f22a343528325c12474a69a499f6f47bccb256ff08eb6f8ee3ad4b9a338095e66757d9c62fb6c8add63af8a4ff80b9524504bb5f303f76d2f", 0xf4}, {&(0x7f00000002c0)}], 0x3, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {r6, r10, 0xffffffffffffffff}}}, @rights={{0x34, 0x1, 0x1, [r14, r1, r0, r2, r0, r2, r15, r0, r16]}}], 0x58, 0x20004004}, 0x10) 1m8.538464258s ago: executing program 4 (id=3611): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x87, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x10000009}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpid() perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x8}, 0x10000, 0xc8, 0xfff, 0x0, 0x0, 0x0, 0x400}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xae}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x53}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x15}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x9c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r4, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1832d53769d0abade7f1be5fda8ca86ff5000000000000000000000000000000afa00000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) 1m7.567078467s ago: executing program 4 (id=3616): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x2210b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x7, 0x3913eb7}, 0x182a, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="64000000020603000000000000000000000000070900020073797a3200000000050001000700000014000780050015000500000008001200000000000500050002000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1f, 0x14, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3, @ANYRES8, @ANYRESDEC=r0, @ANYRES64=r0, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES8=r3, @ANYRES8=r0, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000756cff7c00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f0000000640)=""/137, 0x89}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/1, 0x1}, {&(0x7f0000001740)=""/49, 0x31}, {&(0x7f0000001780)=""/122, 0x7a}, {&(0x7f0000001800)=""/60, 0xfffffffffffffe82}], 0x7, &(0x7f00000018c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x20, 0x1407, 0x8, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) 1m7.027738944s ago: executing program 4 (id=3625): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="d800000000010505000000000000c5000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400200100000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe800000000000000000000000000029080007400000000044000e8006000340000400002c00018014000300"/178], 0xd8}, 0x1, 0x0, 0x0, 0x40801}, 0x20000000) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX=r0, @ANYRES32, @ANYRES64=r2], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5"], 0xfe33) r7 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c", @ANYRES64=r7], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x4c800) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 51.89284646s ago: executing program 34 (id=3625): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="d800000000010505000000000000c5000a0000003c0002802c00018014000300fe8000000000000000000000000000bb14000400200100000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe800000000000000000000000000029080007400000000044000e8006000340000400002c00018014000300"/178], 0xd8}, 0x1, 0x0, 0x0, 0x40801}, 0x20000000) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @local}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000004100)={0x5, 0x80, 0x0, 0x3, 0x87, 0x0, 0x0, 0x1, 0x100, 0x5, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7ffd, 0x2, @perf_config_ext={0xffff8880b8627a20, 0x1}, 0x11098, 0xfffffffffffffffe, 0x465, 0x5, 0x0, 0x3, 0xc, 0x0, 0xb, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX=r0, @ANYRES32, @ANYRES64=r2], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5"], 0xfe33) r7 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c", @ANYRES64=r7], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x4c800) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 37.879728919s ago: executing program 2 (id=3832): perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x7, 0x4, 0x7, 0x6, 0x0, 0x400, 0xa0006, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9a82, 0x2, @perf_config_ext={0x37a, 0x1000}, 0x80, 0x1, 0x3, 0x8, 0xad8, 0x4, 0x7, 0x0, 0x2, 0x0, 0x58}, 0x0, 0x6, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r3, 0x6, 0x6, &(0x7f0000000740), 0x4) 37.609113174s ago: executing program 2 (id=3836): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11afb, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000964010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) 37.119866441s ago: executing program 2 (id=3840): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x220}, 0x1, 0x0, 0x0, 0x1}, 0x4000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380), 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x1, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xd}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(0x0, 0x0) unlink(&(0x7f0000000200)='./cgroup\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$rds(0x15, 0x5, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x12120) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000000)=0x818) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f00000002c0)=""/168, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000)=r5, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)}, 0x0) perf_event_open$cgroup(&(0x7f0000000440)={0x0, 0x80, 0xe, 0xfe, 0x9, 0x1, 0x0, 0x80000000, 0x32043, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x280, 0x4, @perf_config_ext={0x9, 0x9}, 0x802, 0x3864, 0xd5e6, 0x4, 0xffffffffffffefff, 0x10001, 0x1, 0x0, 0x0, 0x0, 0xf316}, 0xffffffffffffffff, 0x2, r3, 0xd) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb988"], 0xfdef) 36.803109858s ago: executing program 2 (id=3841): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) recvmsg(r2, 0x0, 0x32) sendmsg$nl_generic(r1, 0x0, 0xc000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 36.618512273s ago: executing program 2 (id=3843): r0 = socket$kcm(0x11, 0x2, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x8907, 0x0) recvmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x78) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x1, 0x2, &(0x7f00000009c0)=ANY=[@ANYBLOB="611079000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="4eaa00000000711019000000000095000000000000000000"], 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140), 0x1000012, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',context=system_u,rootcontext=system_u,defconte', @ANYBLOB]) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) mkdir(&(0x7f0000001a80)='./file0\x00', 0x111) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1a1e8ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x2050061, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xfffffd26) sendmsg$SOCK_DESTROY(r3, &(0x7f00000009c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x488}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f00000001c0)=0x8) 33.110185047s ago: executing program 2 (id=3881): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x6, 0x5, 0xe, 0x0, 0xf, 0x4022, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x8d6b, 0xe}, 0x800, 0x0, 0x4, 0x5, 0x10000, 0x6, 0x3, 0x0, 0x1, 0x0, 0xcce}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='}\x00') socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xa30d}, 0x100700, 0x3, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1500000000010000000000000000000000000a40000000060a0b04000000000000000002000000142cce5fc86809e09ae83005b9820500048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110000"], 0x68}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x6, 0x5, 0xe, 0x0, 0xf, 0x4022, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x8d6b, 0xe}, 0x800, 0x0, 0x4, 0x5, 0x10000, 0x6, 0x3, 0x0, 0x1, 0x0, 0xcce}, 0x0, 0xe, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='}\x00') (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xa30d}, 0x100700, 0x3, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1500000000010000000000000000000000000a40000000060a0b04000000000000000002000000142cce5fc86809e09ae83005b9820500048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110000"], 0x68}}, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) close(r3) (async) socket$kcm(0x2b, 0x1, 0x0) (async) close(r4) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x30004040) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) (async) close(r4) (async) 17.655675553s ago: executing program 35 (id=3881): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x6, 0x5, 0xe, 0x0, 0xf, 0x4022, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x8d6b, 0xe}, 0x800, 0x0, 0x4, 0x5, 0x10000, 0x6, 0x3, 0x0, 0x1, 0x0, 0xcce}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='}\x00') socket$nl_rdma(0x10, 0x3, 0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xa30d}, 0x100700, 0x3, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1500000000010000000000000000000000000a40000000060a0b04000000000000000002000000142cce5fc86809e09ae83005b9820500048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110000"], 0x68}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x80, 0x6, 0x5, 0xe, 0x0, 0xf, 0x4022, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x4, @perf_config_ext={0x8d6b, 0xe}, 0x800, 0x0, 0x4, 0x5, 0x10000, 0x6, 0x3, 0x0, 0x1, 0x0, 0xcce}, 0x0, 0xe, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='}\x00') (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xa30d}, 0x100700, 0x3, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xe}, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1500000000010000000000000000000000000a40000000060a0b04000000000000000002000000142cce5fc86809e09ae83005b9820500048010000180090001006d617371000000000900010073797a30000000000900020073797a320000000014000000110000"], 0x68}}, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) close(r3) (async) socket$kcm(0x2b, 0x1, 0x0) (async) close(r4) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, 0x0}, 0x30004040) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) (async) close(r4) (async) 2.622989114s ago: executing program 3 (id=4109): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000", 0x4a}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) recvmsg(r2, 0x0, 0x32) sendmsg$nl_generic(r1, 0x0, 0xc000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.403517224s ago: executing program 3 (id=4112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000ffffff9c0a0004000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000003080002400000000014000000020a69eff1640000000000000000000114000000110001"], 0xa4}}, 0x0) 2.294576775s ago: executing program 8 (id=4114): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x4800, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff0200000000000000000000f5000001"], 0xfdef) 2.163981687s ago: executing program 8 (id=4115): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefffffff, @mcast1, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1, 0x0, 0xff00}, 0x400800c) 2.083008823s ago: executing program 3 (id=4116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x10000000}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x2c}, 0x94) 2.062364635s ago: executing program 0 (id=4117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000020000000010000000900010073797a30000000006c000000160a05"], 0xfc}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) 1.95590526s ago: executing program 8 (id=4118): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r1 = socket$kcm(0x29, 0x0, 0x0) r2 = syz_clone(0x68012380, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x11e, 0x1ef3}, 0x11efa, 0x8004, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r2, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000200)=@hci={0x1f, 0x2, 0x1}, 0x80, 0x0}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff09004500000000a100000000000008001c00c900"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) 1.955173058s ago: executing program 6 (id=4119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x58400, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000180)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.954809617s ago: executing program 3 (id=4120): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa8b0, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) syz_clone(0x20000000, &(0x7f0000000100)="44d5af7d086bf759aa70f54e4aa4f3f2378f39f81274317d24cebb188aa0ca26f2f0ced131006ed7bd74cad4d2f05a9cd8cf420cb08c326edb5892a6897077529165099b26c5b48e1b9911681c369626b8c212ae49d687cf9c30cf30a4a1411b264a9941b81f283e6b5c78fcbfd79964664cfdbd8b33b2288a1a0a5c6a88fe8919c392b420df47491802118b86d4fb8b02052770aee398bba3c33145c55006648bba173caf3ef3a4716d6c37f4b3e03f093e2d7bf9d9ada4b2bb53a5a783e31961e9c0039acf11a122ac5912c30e88d3", 0xd0, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="b20987ef5a3f70f571255a8cca4e9159a0d985be4eececb0c84baa4f184a1ed59000c15745df79ed92bbc6") openat$pidfd(0xffffffffffffff9c, &(0x7f0000000400), 0x282, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x57a, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000640)=r5, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newsa={0x1b0, 0x1a, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x60}, [@algo_auth={0xc0, 0x1, {{'sha1\x00'}, 0x3c0, "c1fc1176d858b905a1db4ff6cb8fc1f08589966e6ef789ed99a74a5f55ad735a1fe0dac791824a72fb9792a0f47d88e0dea44b765bb9c761ab943014be9e1e175df8adf35ac57e0121ada0c1320d3ef5a6b590b9ec8fe225a6745191fe376e10b191eeb65be657050dddd68d5e0ea4c83ac887a61b5606d1"}}]}, 0x1b0}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.854814417s ago: executing program 0 (id=4121): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc9) perf_event_open(&(0x7f0000001b00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 1.784539504s ago: executing program 7 (id=4122): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000", 0x4a}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) recvmsg(r2, 0x0, 0x32) sendmsg$nl_generic(r1, 0x0, 0xc000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.761098896s ago: executing program 8 (id=4123): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getpid() (async) r1 = getpid() perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r2 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r4, 0x25, 0x2c, @val=@perf_event={0xff}}, 0x18) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r4, 0x25, 0x2c, @val=@perf_event={0xff}}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x800000000000}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r6, &(0x7f0000000200), 0x0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r5, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) socket$kcm(0xa, 0x1, 0x106) (async) r8 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0x80, 0x0}, 0x24000059) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)) close(0xffffffffffffffff) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.760629116s ago: executing program 6 (id=4124): perf_event_open(&(0x7f0000000300)={0x3, 0x80, 0x7, 0x4, 0x7, 0x6, 0x0, 0x400, 0xa0006, 0x8, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9a82, 0x2, @perf_config_ext={0x37a, 0x1000}, 0x80, 0x1, 0x3, 0x8, 0xad8, 0x4, 0x7, 0x0, 0x2, 0x0, 0x58}, 0x0, 0x6, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0x7fff, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', r4, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r5, 0x6, 0x6, &(0x7f0000000740), 0x4) 1.75952363s ago: executing program 0 (id=4125): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x83240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x8}, 0xc02, 0x1, 0x0, 0x9, 0x4, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x60000011, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0xa, 0x2, 0x0) recvmsg$kcm(r2, 0x0, 0x10000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.614957982s ago: executing program 7 (id=4126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000040900010073797a30000000000900020073797a320000000028000480240001800b00010065787468647200001400028008000640000000030800054000000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 1.416116598s ago: executing program 7 (id=4127): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11afb, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000640900030073797a3100000000080007006e617400140004800800014000000004080002"], 0x190}}, 0x0) 1.271575551s ago: executing program 6 (id=4128): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x5, 0x0, 0x18, 0x0, 0x0, 0x8456, 0x10030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x200, 0x2, 0xd73, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x0, 0x1, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000580)='|', 0x1}], 0x1}, 0x8c0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000072742c691f31fe9e44b95f71d2e97b892a66d22c2bce9dca2e024bee4caf566a63aade8b8fe1eab71c1046fd8130e6f21112", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6801000000010104000000000000000002000000080003400000100e080007400000000024000280140001800800010000000000080002007f0000010c00028005000100000000001400108008000140000000000800024000000000240001801400018008000100e000000108000200e00000010c000280050001000000000034000f800800014000000f7508000140fffffffd08000340000009c7080003400000008108000240000000e5080002400000000308000c4000000002ac0006802c000380"], 0x168}}, 0x0) recvmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 1.270889048s ago: executing program 8 (id=4129): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000203000000000e2200000100ffff00000000000000000000000000000200"/56, @ANYRES32=0x0, @ANYBLOB="0500000003000000080000000700000008000300"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) 952.257104ms ago: executing program 3 (id=4130): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffea}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x9, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x10, 0x0, 0x1300) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1f, 0x9, 0x2, 0x4, 0x204e}, 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000060000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 932.084289ms ago: executing program 0 (id=4131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00ffffff80000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r1, @ANYBLOB="04"], 0xc4}}, 0x20004804) 931.817147ms ago: executing program 7 (id=4132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000200000000020900010073797a31000000002c000000030a010100000000000000000a0000030900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x17e8}}, 0x40) 851.30709ms ago: executing program 6 (id=4133): socket$kcm(0x2, 0x200000000000001, 0x0) r0 = perf_event_open(&(0x7f0000000b00)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0xefffffff, @mcast1, 0x5}, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1, 0x0, 0xfff5}, 0x400800c) 818.192282ms ago: executing program 8 (id=4134): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xc}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000007000000000000000000000004000000bb7f1a004d00feff000000009500ffd000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) 583.46618ms ago: executing program 7 (id=4135): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x21}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8001, 0x8}, 0x1000, 0x2, 0xffffff81, 0x5, 0x0, 0x0, 0x203, 0x0, 0xfffffffe, 0x0, 0x1000000000000001}, r0, 0xfffffffffffeffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x22, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(0x3) fstat(r1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2600c055) 470.980263ms ago: executing program 0 (id=4136): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000", 0x4a}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2d, 0x2, 0x0) recvmsg(r2, 0x0, 0x32) sendmsg$nl_generic(r1, 0x0, 0xc000) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb6cb}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff1f}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 342.208358ms ago: executing program 6 (id=4137): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x20, 0x2, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x2405, 0x0) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r3, 0x26, 0x0, @void}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x474}, 0x1, 0x0, 0x0, 0x4c090}, 0x4c000) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r4, 0x0, 0x0}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000380)={r4}, 0x8) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x11, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xe80, 0x48, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(r7, 0x0, 0x4008094) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000030900010073797a310000000054000000030a010400000000000000000100ffff0900030073797a310000000028000480080002400000000008000140000000070000000076657468315f6f6163767461700000000900010073797a310000000064000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000040004800b000700"], 0x330}}, 0x4008800) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8b06, &(0x7f0000000080)={'hsr0\x00', @local}) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) 213.592647ms ago: executing program 0 (id=4138): r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7fffffff}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c0002800c000240000000008000000108000440000000010c000140000000000000000808000540"], 0xf0}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r0, r1, 0x0, 0x4, &(0x7f0000000100)=')%])'}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xe, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sock_ops}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000880)=""/4125, 0x101d}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000002a80)=""/139, 0x8b}, {0x0}, {0x0}, {&(0x7f00000007c0)=""/172, 0xac}, {0x0}, {&(0x7f0000000080)=""/56, 0x38}], 0x8}, 0x10100) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@call={0x85, 0x0, 0x0, 0x9d}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r6, 0x400454cd, 0x336) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)}, 0x0) close(r6) 153.090716ms ago: executing program 3 (id=4139): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000640000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x2e, &(0x7f0000002080)=""/4102}, 0x94) 96.450469ms ago: executing program 6 (id=4140): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x8000) 0s ago: executing program 7 (id=4141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010020000000000000000000000a68000000060a0b0400000000000000000200fffe3c0004803800018007000100637400002c000280080001400000000205000300000000000500030000000000080002400000000108000140000000150900010073797a30000000000900020073797a32"], 0x90}, 0x1, 0x0, 0x2400, 0x840}, 0x0) kernel console output (not intermixed with test programs): 330.830437][ T9206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.911715][T11824] FAULT_INJECTION: forcing a failure. [ 330.911715][T11824] name failslab, interval 1, probability 0, space 0, times 0 [ 330.935351][T11824] CPU: 1 UID: 0 PID: 11824 Comm: syz.4.1979 Not tainted syzkaller #0 PREEMPT(full) [ 330.935376][T11824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.935395][T11824] Call Trace: [ 330.935403][T11824] [ 330.935411][T11824] dump_stack_lvl+0xe8/0x150 [ 330.935437][T11824] should_fail_ex+0x412/0x560 [ 330.935466][T11824] should_failslab+0xa8/0x100 [ 330.935490][T11824] __kmalloc_noprof+0xe8/0x760 [ 330.935510][T11824] ? sock_kmalloc+0xd6/0x160 [ 330.935575][T11824] sock_kmalloc+0xd6/0x160 [ 330.935599][T11824] ____sys_sendmsg+0x1c2/0x9f0 [ 330.935629][T11824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.935658][T11824] ? import_iovec+0x73/0xa0 [ 330.935683][T11824] ___sys_sendmsg+0x2a5/0x360 [ 330.935700][T11824] ? __lock_acquire+0x6b5/0x2cf0 [ 330.935722][T11824] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.935768][T11824] ? __fget_files+0x2a/0x420 [ 330.935781][T11824] ? __fget_files+0x3a0/0x420 [ 330.935802][T11824] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.935821][T11824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.935845][T11824] ? __pfx_ksys_write+0x10/0x10 [ 330.935868][T11824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.935883][T11824] do_syscall_64+0x174/0x580 [ 330.935901][T11824] ? trace_irq_disable+0x3b/0x140 [ 330.935921][T11824] ? clear_bhb_loop+0x40/0x90 [ 330.935939][T11824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.935952][T11824] RIP: 0033:0x7f86aaf9ce59 [ 330.935967][T11824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.935980][T11824] RSP: 002b:00007f86abf05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.935996][T11824] RAX: ffffffffffffffda RBX: 00007f86ab216090 RCX: 00007f86aaf9ce59 [ 330.936006][T11824] RDX: 0000000004004004 RSI: 0000200000000140 RDI: 0000000000000008 [ 330.936015][T11824] RBP: 00007f86abf05090 R08: 0000000000000000 R09: 0000000000000000 [ 330.936024][T11824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.936032][T11824] R13: 00007f86ab216128 R14: 00007f86ab216090 R15: 00007ffe7ade0ff8 [ 330.936056][T11824] [ 331.213548][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.231354][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.240312][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.251093][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.260222][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.324256][ T9206] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.331515][ T9206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.907851][T11442] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 331.938682][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.956108][T11442] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 331.988135][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.028147][T11442] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 332.056980][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.086819][T11442] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 332.129950][T11442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.204494][T11862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1988'. [ 332.237298][T11828] gretap0 speed is unknown, defaulting to 1000 [ 332.454523][ T25] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 180 seconds [ 332.623124][T11884] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1992'. [ 332.750853][ T50] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 333.023249][ T9195] bridge_slave_1: left allmulticast mode [ 333.055498][ T9195] bridge_slave_1: left promiscuous mode [ 333.069019][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.113333][ T9195] bridge_slave_0: left allmulticast mode [ 333.138122][ T9195] bridge_slave_0: left promiscuous mode [ 333.158855][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.326397][ T50] Bluetooth: hci2: command tx timeout [ 333.383893][T11912] netlink: 'syz.3.1995': attribute type 1 has an invalid length. [ 333.392064][T11912] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.280342][ T9195] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.303204][ T9195] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.312714][ T9195] .` (unregistering): Released all slaves [ 334.364362][T11912] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1995'. [ 335.036665][T11442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.119776][T11413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.169508][ T50] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 335.406362][ T50] Bluetooth: hci2: command tx timeout [ 335.590501][T11828] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.599638][T11828] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.627646][T11828] bridge_slave_0: entered allmulticast mode [ 335.640735][T11828] bridge_slave_0: entered promiscuous mode [ 335.650575][T11828] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.660120][T11828] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.668768][T11828] bridge_slave_1: entered allmulticast mode [ 335.692731][T11828] bridge_slave_1: entered promiscuous mode [ 335.724310][T11442] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.810960][ T9195] hsr_slave_0: left promiscuous mode [ 335.833667][ T9195] hsr_slave_1: left promiscuous mode [ 335.855085][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.874131][ T9195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.209001][ T9195] team0 (unregistering): Port device team_slave_1 removed [ 336.223217][ T9195] team0 (unregistering): Port device team_slave_0 removed [ 336.444762][ T50] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 336.543087][T11828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.562636][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 336.574311][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.581505][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.595112][T11828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.700525][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.707831][ T9210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.768832][T11828] team0: Port device team_slave_0 added [ 336.788543][T11828] team0: Port device team_slave_1 added [ 336.919595][T11828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.934435][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.998889][T11828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.025451][T11828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.042528][T11828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.109561][T11828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.183886][T11413] veth0_vlan: entered promiscuous mode [ 337.218152][T12016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2023'. [ 337.343785][T11828] hsr_slave_0: entered promiscuous mode [ 337.361583][T11828] hsr_slave_1: entered promiscuous mode [ 337.386108][T11828] debugfs: 'hsr0' already exists in 'hsr' [ 337.398574][T11828] Cannot create hsr debugfs directory [ 337.404678][T11413] veth1_vlan: entered promiscuous mode [ 337.485602][ T50] Bluetooth: hci2: command tx timeout [ 337.969182][T11413] veth0_macvtap: entered promiscuous mode [ 338.012658][T11413] veth1_macvtap: entered promiscuous mode [ 338.079099][ T50] Bluetooth: hci4: unexpected event 0x12 length: 15 > 8 [ 338.293876][T11413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.438162][T11413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.487186][ T9210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.518410][ T9210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.551042][ T9210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.572166][ T9210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.948264][T11442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.062982][ T9193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.096628][ T9193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.243794][ T9199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.275979][ T9199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.551505][T11828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 339.567273][ T50] Bluetooth: hci2: command tx timeout [ 339.587036][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1879'. [ 339.609839][T12098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1879'. [ 339.649592][T11828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 339.691044][T11828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 339.712827][T11828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 339.802528][T12098] mac80211_hwsim hwsim27 wlan1: entered allmulticast mode [ 339.890170][T12113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1879'. [ 339.921844][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2039'. [ 339.951015][T11828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 340.008943][T11828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.027117][T11828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 340.083289][T11828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.148782][T12122] netlink: 'syz.3.2041': attribute type 1 has an invalid length. [ 341.000374][T11442] veth0_vlan: entered promiscuous mode [ 341.065019][T11442] veth1_vlan: entered promiscuous mode [ 341.237218][T11828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.258252][T11442] veth0_macvtap: entered promiscuous mode [ 341.292685][T11442] veth1_macvtap: entered promiscuous mode [ 341.369889][T11828] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.440603][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.447846][ T9199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.494676][T11442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.528139][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.535457][ T9199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.582772][T11442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.663396][ T64] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.702019][ T64] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.760391][ T64] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.797751][ T64] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.866958][T12176] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 342.000186][T12171] syzkaller0: entered promiscuous mode [ 342.014058][T12171] syzkaller0: entered allmulticast mode [ 342.501381][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 342.558412][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2060'. [ 343.100139][T12205] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 343.122939][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2066'. [ 343.139553][T12207] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2066'. [ 344.729118][T12218] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2069'. [ 345.706450][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2066'. [ 345.779760][ T9206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.800346][T12222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2071'. [ 345.801360][ T9206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.920029][ T9193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.981298][ T9193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.420663][T12245] netlink: 'syz.3.2077': attribute type 1 has an invalid length. [ 346.584202][T12249] FAULT_INJECTION: forcing a failure. [ 346.584202][T12249] name failslab, interval 1, probability 0, space 0, times 0 [ 346.599120][T12249] CPU: 0 UID: 0 PID: 12249 Comm: syz.0.2079 Not tainted syzkaller #0 PREEMPT(full) [ 346.599142][T12249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.599154][T12249] Call Trace: [ 346.599162][T12249] [ 346.599169][T12249] dump_stack_lvl+0xe8/0x150 [ 346.599196][T12249] should_fail_ex+0x412/0x560 [ 346.599229][T12249] should_failslab+0xa8/0x100 [ 346.599254][T12249] __kmalloc_node_noprof+0xf0/0x7c0 [ 346.599277][T12249] ? alloc_slab_obj_exts+0xbf/0x250 [ 346.599303][T12249] alloc_slab_obj_exts+0xbf/0x250 [ 346.599326][T12249] __memcg_slab_post_alloc_hook+0x5c4/0xe80 [ 346.599371][T12249] ? dst_alloc+0x105/0x170 [ 346.599397][T12249] kmem_cache_alloc_noprof+0x347/0x650 [ 346.599414][T12249] ? dst_alloc+0x105/0x170 [ 346.599435][T12249] ? ip6_pol_route+0x160/0x13d0 [ 346.599453][T12249] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 346.599475][T12249] ? __pfx_ip6_dst_gc+0x10/0x10 [ 346.599501][T12249] dst_alloc+0x105/0x170 [ 346.599532][T12249] ip6_pol_route+0xafb/0x13d0 [ 346.599550][T12249] ? ip6_pol_route+0x160/0x13d0 [ 346.599580][T12249] ? __pfx_ip6_pol_route+0x10/0x10 [ 346.599606][T12249] ? irqentry_exit+0x218/0x8b0 [ 346.599626][T12249] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.599653][T12249] fib6_rule_lookup+0x222/0x730 [ 346.599673][T12249] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 346.599693][T12249] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 346.599724][T12249] ? dev_get_by_index_rcu+0x48/0x110 [ 346.599748][T12249] ? dev_get_by_index_rcu+0xf4/0x110 [ 346.599781][T12249] ip6_route_output_flags+0x364/0x5d0 [ 346.599799][T12249] ? ip6_route_output_flags+0x2e/0x5d0 [ 346.599823][T12249] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 346.599850][T12249] ? __pfx_perf_trace_lock+0x10/0x10 [ 346.599882][T12249] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 346.599900][T12249] ? sk_dst_check+0x25/0x480 [ 346.599926][T12249] ? sk_dst_check+0x25/0x480 [ 346.599949][T12249] ? sk_dst_check+0x25/0x480 [ 346.599964][T12249] ? sk_dst_check+0x30e/0x480 [ 346.599987][T12249] ip6_sk_dst_lookup_flow+0x765/0xa20 [ 346.600012][T12249] ? udpv6_sendmsg+0x1864/0x25c0 [ 346.600039][T12249] udpv6_sendmsg+0x1a69/0x25c0 [ 346.600081][T12249] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 346.600097][T12249] ? udp_lib_get_port+0x177a/0x1c60 [ 346.600136][T12249] ? ip6_datagram_release_cb+0x7c/0x550 [ 346.600181][T12249] ? inet_send_prepare+0x1b9/0x270 [ 346.600206][T12249] ? inet_send_prepare+0x1b9/0x270 [ 346.600235][T12249] ? inet_send_prepare+0x1b9/0x270 [ 346.600256][T12249] ? __local_bh_enable_ip+0xd0/0x130 [ 346.600276][T12249] ? inet_send_prepare+0x1b9/0x270 [ 346.600304][T12249] ? inet6_sendmsg+0xe4/0x120 [ 346.600333][T12249] ____sys_sendmsg+0x5c7/0x9f0 [ 346.600370][T12249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.600406][T12249] ? import_iovec+0x73/0xa0 [ 346.600437][T12249] ___sys_sendmsg+0x2a5/0x360 [ 346.600468][T12249] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.600497][T12249] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.600519][T12249] ? irqentry_exit+0x218/0x8b0 [ 346.600585][T12249] ? __fget_files+0x2a/0x420 [ 346.600602][T12249] ? __fget_files+0x3a0/0x420 [ 346.600632][T12249] __x64_sys_sendmsg+0x1bd/0x2a0 [ 346.600658][T12249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.600690][T12249] ? __pfx_ksys_write+0x10/0x10 [ 346.600722][T12249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.600742][T12249] do_syscall_64+0x174/0x580 [ 346.600766][T12249] ? clear_bhb_loop+0x40/0x90 [ 346.600790][T12249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.600807][T12249] RIP: 0033:0x7f7cbd59ce59 [ 346.600826][T12249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.600840][T12249] RSP: 002b:00007f7cbe3ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.600858][T12249] RAX: ffffffffffffffda RBX: 00007f7cbd815fa0 RCX: 00007f7cbd59ce59 [ 346.600871][T12249] RDX: 0000000004004004 RSI: 0000200000000140 RDI: 0000000000000008 [ 346.600882][T12249] RBP: 00007f7cbe3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 346.600893][T12249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.600903][T12249] R13: 00007f7cbd816038 R14: 00007f7cbd815fa0 R15: 00007ffe95c82518 [ 346.600941][T12249] [ 347.420635][T12262] netlink: 'syz.0.2081': attribute type 10 has an invalid length. [ 347.435747][T11828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.459096][T12262] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2081'. [ 347.706318][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2084'. [ 347.914082][T11828] veth0_vlan: entered promiscuous mode [ 347.956532][T11828] veth1_vlan: entered promiscuous mode [ 348.099163][T11828] veth0_macvtap: entered promiscuous mode [ 348.101988][T12282] netlink: 'syz.5.2090': attribute type 1 has an invalid length. [ 348.141561][T11828] veth1_macvtap: entered promiscuous mode [ 348.201388][T11828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.257998][T11828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.309850][ T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.344658][ T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.353993][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2093'. [ 348.379981][T12288] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2093'. [ 348.402054][ T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.416184][ T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.579059][T12288] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 348.586588][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2097'. [ 348.589355][T12301] netlink: 'syz.3.2097': attribute type 33 has an invalid length. [ 348.685140][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2093'. [ 348.707050][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.735069][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.833780][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.868253][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.962550][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 349.141642][T12316] netlink: 'syz.3.2103': attribute type 1 has an invalid length. [ 349.164307][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2102'. [ 349.595842][T12334] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2109'. [ 349.999401][T12350] netlink: 'syz.5.2113': attribute type 1 has an invalid length. [ 350.050088][T12350] netlink: 'syz.5.2113': attribute type 2 has an invalid length. [ 350.079677][T12355] netlink: 'syz.3.2117': attribute type 10 has an invalid length. [ 350.109341][T12355] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2117'. [ 350.116533][T12350] netlink: 'syz.5.2113': attribute type 1 has an invalid length. [ 350.125000][T12358] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 350.340934][T12367] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2118'. [ 352.559219][T12430] validate_nla: 3 callbacks suppressed [ 352.559255][T12430] netlink: 'syz.3.2141': attribute type 1 has an invalid length. [ 352.746274][T12440] __nla_validate_parse: 9 callbacks suppressed [ 352.746292][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'. [ 353.017296][T12448] netlink: 'syz.3.2147': attribute type 2 has an invalid length. [ 353.378584][T12454] netlink: 'syz.5.2149': attribute type 10 has an invalid length. [ 353.605695][T12468] netlink: 'syz.2.2156': attribute type 1 has an invalid length. [ 354.028717][T12454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 354.078919][T12454] team0: Port device netdevsim0 added [ 354.107414][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2162'. [ 354.532294][T12485] netlink: 'syz.3.2164': attribute type 10 has an invalid length. [ 354.762725][T12497] netlink: 'syz.2.2169': attribute type 1 has an invalid length. [ 355.100683][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2174'. [ 355.861759][T12540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.883120][T12544] netlink: 'syz.4.2183': attribute type 1 has an invalid length. [ 356.137618][T12552] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2185'. [ 356.454479][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2193'. [ 356.467728][T12567] netlink: 'syz.4.2194': attribute type 10 has an invalid length. [ 356.488385][T12561] netlink: 'syz.0.2191': attribute type 21 has an invalid length. [ 356.501447][T12567] netlink: 55 bytes leftover after parsing attributes in process `syz.4.2194'. [ 356.616789][T12569] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2192'. [ 356.660850][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2192'. [ 356.707173][T12573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2195'. [ 356.710708][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2196'. [ 356.792968][T12573] IPv6: NLM_F_CREATE should be specified when creating new route [ 356.868614][T12573] netlink: 'syz.2.2195': attribute type 1 has an invalid length. [ 357.759637][T12608] gretap0 speed is unknown, defaulting to 1000 [ 358.095358][T12620] __nla_validate_parse: 1 callbacks suppressed [ 358.095378][T12620] netlink: 4892 bytes leftover after parsing attributes in process `syz.3.2211'. [ 358.672318][T12630] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2213'. [ 359.162434][T12616] netlink: 'syz.0.2210': attribute type 29 has an invalid length. [ 359.181627][T12621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2210'. [ 359.192396][T12622] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2208'. [ 359.426057][T12641] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2218'. [ 359.456580][T12639] bond0: entered promiscuous mode [ 359.476422][T12639] bond_slave_0: entered promiscuous mode [ 359.488462][T12639] bond_slave_1: entered promiscuous mode [ 359.510399][T12639] bond0: entered allmulticast mode [ 359.519450][ T50] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 359.525326][T12639] bond_slave_0: entered allmulticast mode [ 359.532939][T12641] netlink: 'syz.2.2218': attribute type 18 has an invalid length. [ 359.543470][T12639] bond_slave_1: entered allmulticast mode [ 359.650294][T12652] netlink: 'syz.5.2221': attribute type 10 has an invalid length. [ 359.658397][T12652] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2221'. [ 359.978732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.994914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.502884][T12683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2233'. [ 360.887825][T12703] FAULT_INJECTION: forcing a failure. [ 360.887825][T12703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.928800][T12703] CPU: 0 UID: 0 PID: 12703 Comm: syz.3.2239 Not tainted syzkaller #0 PREEMPT(full) [ 360.928824][T12703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.928834][T12703] Call Trace: [ 360.928840][T12703] [ 360.928847][T12703] dump_stack_lvl+0xe8/0x150 [ 360.928872][T12703] should_fail_ex+0x412/0x560 [ 360.928898][T12703] _copy_from_iter+0x1d3/0x1670 [ 360.928923][T12703] ? rcu_is_watching+0x15/0xb0 [ 360.928948][T12703] ? __pfx__copy_from_iter+0x10/0x10 [ 360.928977][T12703] ? netlink_sendmsg+0x650/0xb40 [ 360.928997][T12703] ? skb_put+0x11b/0x210 [ 360.929020][T12703] netlink_sendmsg+0x6c0/0xb40 [ 360.929048][T12703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.929071][T12703] ? aa_sock_msg_perm+0xf1/0x1b0 [ 360.929093][T12703] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.929116][T12703] ____sys_sendmsg+0x972/0x9f0 [ 360.929137][T12703] ? __might_fault+0xaf/0x130 [ 360.929161][T12703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.929190][T12703] ? import_iovec+0x73/0xa0 [ 360.929218][T12703] ___sys_sendmsg+0x2a5/0x360 [ 360.929237][T12703] ? __lock_acquire+0x6b5/0x2cf0 [ 360.929259][T12703] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.929311][T12703] ? __fget_files+0x2a/0x420 [ 360.929327][T12703] ? __fget_files+0x3a0/0x420 [ 360.929352][T12703] __x64_sys_sendmsg+0x1bd/0x2a0 [ 360.929376][T12703] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.929406][T12703] ? __pfx_ksys_write+0x10/0x10 [ 360.929433][T12703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.929453][T12703] do_syscall_64+0x174/0x580 [ 360.929472][T12703] ? trace_irq_disable+0x3b/0x140 [ 360.929495][T12703] ? clear_bhb_loop+0x40/0x90 [ 360.929515][T12703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.929531][T12703] RIP: 0033:0x7fbb3159ce59 [ 360.929546][T12703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.929560][T12703] RSP: 002b:00007fbb323d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.929578][T12703] RAX: ffffffffffffffda RBX: 00007fbb31815fa0 RCX: 00007fbb3159ce59 [ 360.929591][T12703] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 360.929600][T12703] RBP: 00007fbb323d0090 R08: 0000000000000000 R09: 0000000000000000 [ 360.929610][T12703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.929620][T12703] R13: 00007fbb31816038 R14: 00007fbb31815fa0 R15: 00007ffc35386068 [ 360.929646][T12703] [ 361.260571][T12712] netlink: 'syz.4.2244': attribute type 21 has an invalid length. [ 361.271856][T12708] netlink: 'syz.0.2240': attribute type 21 has an invalid length. [ 361.310170][T12708] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.2240'. [ 361.749011][T12733] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2249'. [ 361.917204][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2254'. [ 362.309040][T12767] netlink: 'syz.5.2262': attribute type 10 has an invalid length. [ 362.335400][T12767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.361666][T12767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.412902][T12767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.437374][T12767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.535417][ T25] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 210 seconds [ 362.972619][T12787] tun0: tun_chr_ioctl cmd 1074025672 [ 362.997753][T12787] tun0: ignored: set checksum enabled [ 363.030321][T12788] tun0: tun_chr_ioctl cmd 1074025675 [ 363.060905][T12788] tun0: persist disabled [ 363.427264][T12810] __nla_validate_parse: 3 callbacks suppressed [ 363.427284][T12810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2278'. [ 363.432070][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2273'. [ 363.612297][T12815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2279'. [ 364.785881][T12844] veth1_to_batadv: entered allmulticast mode [ 364.854203][T12849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2291'. [ 364.859128][T12847] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2290'. [ 364.874659][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 364.907397][T12844] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2289'. [ 364.917602][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2289'. [ 364.919290][T12850] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2290'. [ 364.979899][T12852] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2292'. [ 365.122735][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.277750][T12932] netlink: 'syz.2.2316': attribute type 10 has an invalid length. [ 367.377912][T12932] team0 (unregistering): Port device team_slave_0 removed [ 367.458875][T12932] team0 (unregistering): Port device team_slave_1 removed [ 368.749970][T12983] __nla_validate_parse: 4 callbacks suppressed [ 368.749989][T12983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2333'. [ 368.991932][T12992] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2337'. [ 369.180691][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2338'. [ 369.889516][T13016] netlink: 'syz.4.2345': attribute type 26 has an invalid length. [ 370.073195][T13026] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2347'. [ 370.092166][T13022] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2348'. [ 370.506818][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2352'. [ 370.545705][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.669544][T13050] netlink: 4892 bytes leftover after parsing attributes in process `syz.4.2354'. [ 370.699345][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.876640][T13055] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2357'. [ 370.960208][T13056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2355'. [ 371.912035][T13103] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2372'. [ 372.097169][T13109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.473219][T13156] netlink: 'syz.5.2394': attribute type 10 has an invalid length. [ 374.705397][T13184] netlink: 'syz.5.2403': attribute type 1 has an invalid length. [ 375.093130][T13192] netlink: 'syz.3.2406': attribute type 1 has an invalid length. [ 375.093792][T13191] __nla_validate_parse: 5 callbacks suppressed [ 375.093823][T13191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2405'. [ 375.126764][T13191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2405'. [ 375.381349][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2405'. [ 375.934484][T13222] netlink: 'syz.2.2418': attribute type 1 has an invalid length. [ 376.168027][T13232] netlink: 'syz.2.2422': attribute type 1 has an invalid length. [ 376.235536][T13238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2422'. [ 376.264409][T13238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2422'. [ 376.846622][T13249] netlink: 'syz.3.2425': attribute type 3 has an invalid length. [ 377.289882][T13265] netlink: 'syz.5.2432': attribute type 1 has an invalid length. [ 377.442302][T13269] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2433'. [ 377.501856][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2435'. [ 377.594197][ T50] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 378.301569][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2441'. [ 378.531233][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.537818][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.599581][T13302] netlink: 'syz.2.2445': attribute type 1 has an invalid length. [ 379.159628][T13316] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2448'. [ 379.463018][T13329] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2456'. [ 379.679170][T13337] netlink: 'syz.4.2457': attribute type 1 has an invalid length. [ 380.128942][T13349] __nla_validate_parse: 1 callbacks suppressed [ 380.128972][T13349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2462'. [ 380.510572][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2466'. [ 380.550426][T13355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2466'. [ 380.859072][T13368] netlink: 'syz.3.2472': attribute type 1 has an invalid length. [ 381.023235][T13376] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2475'. [ 381.655370][T13401] netlink: 'syz.3.2485': attribute type 1 has an invalid length. [ 381.793546][T13406] tc_dump_action: action bad kind [ 381.943803][T13406] netlink: 'syz.0.2486': attribute type 41 has an invalid length. [ 381.972956][T13410] netdevsim netdevsim4 ЄЄЄЄЄЄ: renamed from netdevsim0 [ 382.174031][T13417] netlink: 'syz.5.2489': attribute type 46 has an invalid length. [ 382.224759][T13414] netlink: 'syz.3.2491': attribute type 1 has an invalid length. [ 382.435161][T13414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.117632][T13440] netlink: 'syz.2.2498': attribute type 1 has an invalid length. [ 385.207343][T13472] netlink: 'syz.5.2511': attribute type 1 has an invalid length. [ 385.770084][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2517'. [ 386.415406][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2527'. [ 386.858310][T13526] IPv6: NLM_F_CREATE should be specified when creating new route [ 386.887437][T13526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.894869][T13526] IPv6: NLM_F_CREATE should be set when creating new route [ 386.937890][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2535'. [ 387.814094][T13559] netlink: 'syz.2.2545': attribute type 10 has an invalid length. [ 387.844020][T13559] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2545'. [ 388.025018][T13564] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2547'. [ 388.086065][T13566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2548'. [ 389.082034][T13607] netlink: 'syz.3.2558': attribute type 7 has an invalid length. [ 389.232568][T13612] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2561'. [ 389.278419][T13618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2563'. [ 389.292786][T13617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2561'. [ 389.318565][T13618] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2563'. [ 390.250952][ T9193] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.718156][ T9193] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.965184][ T9193] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.336298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.378510][ T9193] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.587921][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 391.601066][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 391.611427][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 391.623407][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 391.637459][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 391.775615][T13654] __nla_validate_parse: 2 callbacks suppressed [ 391.775633][T13654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2575'. [ 391.811165][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2575'. [ 391.832804][T13654] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2575'. [ 391.862636][T13654] veth1_to_bridge: entered allmulticast mode [ 391.894669][T13654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2575'. [ 391.931809][T13654] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2575'. [ 392.202353][ T50] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 392.421388][T13665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2579'. [ 392.607421][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.624655][ T25] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 240 seconds [ 392.662894][ T9193] bridge_slave_1: left allmulticast mode [ 392.675606][ T9193] bridge_slave_1: left promiscuous mode [ 392.681671][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.702508][ T9193] bridge_slave_0: left allmulticast mode [ 392.715067][ T9193] bridge_slave_0: left promiscuous mode [ 392.727913][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.901670][T13681] netlink: 4892 bytes leftover after parsing attributes in process `syz.5.2583'. [ 393.726621][ T50] Bluetooth: hci2: command tx timeout [ 393.870131][ T9193] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.894774][ T9193] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.909498][ T9193] bond0 (unregistering): Released all slaves [ 393.954782][T13669] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2579'. [ 394.187320][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 394.349824][T13723] netlink: 'syz.5.2591': attribute type 39 has an invalid length. [ 394.650569][T13730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2593'. [ 394.737439][T13646] gretap0 speed is unknown, defaulting to 1000 [ 394.938974][ T9193] hsr_slave_0: left promiscuous mode [ 394.977820][ T9193] hsr_slave_1: left promiscuous mode [ 394.991897][ T9193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.028804][ T9193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.054907][ T9193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.080236][ T9193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.161634][ T9193] veth1_macvtap: left promiscuous mode [ 395.184525][ T9193] veth0_macvtap: left promiscuous mode [ 395.810985][ T50] Bluetooth: hci2: command tx timeout [ 396.553569][T13766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2602'. [ 396.809161][T13738] sch_fq: defrate 181 ignored. [ 396.864624][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6 [ 397.211430][T13774] netlink: 4892 bytes leftover after parsing attributes in process `syz.3.2605'. [ 397.500151][T13782] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2607'. [ 397.888789][ T50] Bluetooth: hci2: command tx timeout [ 398.130805][T13804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2609'. [ 398.165039][T13804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2609'. [ 398.580522][T13823] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2612'. [ 398.833577][ T5294] 8021q: adding VLAN 0 to HW filter on device eth7 [ 398.870007][T13804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2609'. [ 398.887558][T13646] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.920221][T13646] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.933197][T13831] netlink: 'syz.4.2614': attribute type 33 has an invalid length. [ 398.945561][T13646] bridge_slave_0: entered allmulticast mode [ 398.967657][T13831] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2614'. [ 398.982329][T13646] bridge_slave_0: entered promiscuous mode [ 399.028974][T13831] `: renamed from ip6tnl0 [ 399.079408][T13831] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 399.125559][T13646] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.141803][T13646] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.161388][T13646] bridge_slave_1: entered allmulticast mode [ 399.179376][T13646] bridge_slave_1: entered promiscuous mode [ 399.352315][T13646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.370723][T13646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.465061][T13847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 399.599412][T13646] team0: Port device team_slave_0 added [ 399.630464][T13646] team0: Port device team_slave_1 added [ 399.853039][T13646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.880398][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.974831][ T50] Bluetooth: hci2: command tx timeout [ 399.982293][T13646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.001164][T13646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.008884][T13646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.035459][T13646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.129374][T13864] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2622'. [ 400.218625][T13646] hsr_slave_0: entered promiscuous mode [ 400.242270][T13646] hsr_slave_1: entered promiscuous mode [ 400.256171][T13646] debugfs: 'hsr0' already exists in 'hsr' [ 400.275225][T13646] Cannot create hsr debugfs directory [ 400.374718][T13864] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2622'. [ 400.692725][T13866] netlink: zone id is out of range [ 400.725574][T13866] netlink: zone id is out of range [ 400.750840][T13866] netlink: zone id is out of range [ 400.765880][T13866] netlink: zone id is out of range [ 400.779799][T13866] netlink: zone id is out of range [ 400.791677][T13866] netlink: zone id is out of range [ 400.806974][T13866] netlink: zone id is out of range [ 400.814003][ T5294] 8021q: adding VLAN 0 to HW filter on device eth8 [ 400.828427][T13866] netlink: zone id is out of range [ 400.862400][T13866] netlink: zone id is out of range [ 402.007596][T13914] netlink: 'syz.4.2635': attribute type 1 has an invalid length. [ 402.562761][T13646] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 402.628379][T13646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.648840][T13646] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 402.657328][T13930] xt_l2tp: invalid flags combination: 0 [ 402.697346][T13646] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.725042][T13646] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 402.771753][T13646] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.802636][T13646] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 402.841955][T13646] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.081229][T13646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.161539][T13646] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.204694][ T9210] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.211983][ T9210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.278356][ T9210] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.285600][ T9210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.370026][T13957] __nla_validate_parse: 1 callbacks suppressed [ 403.370044][T13957] netlink: 4892 bytes leftover after parsing attributes in process `syz.0.2644'. [ 404.023303][T13972] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2648'. [ 404.446002][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'. [ 404.770669][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2652'. [ 405.125889][T13646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.291489][T13646] veth0_vlan: entered promiscuous mode [ 405.330643][T13646] veth1_vlan: entered promiscuous mode [ 405.473819][T13646] veth0_macvtap: entered promiscuous mode [ 405.529177][T13646] veth1_macvtap: entered promiscuous mode [ 405.648481][T13646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.728028][T13646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.782478][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.827099][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.861017][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.889446][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.133912][ T9195] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.173132][ T9195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.306965][ T9210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.342480][ T9210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.361547][T14036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 406.432999][T14036] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2662'. [ 406.810456][T14036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2662'. [ 407.008968][T14054] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2666'. [ 407.048246][T14060] netlink: 'syz.0.2668': attribute type 3 has an invalid length. [ 407.052854][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2667'. [ 407.088824][T14060] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2668'. [ 407.694915][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 407.709427][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 407.719259][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 407.829716][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 407.843421][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 408.434577][T14047] syz_tun (unregistering): left allmulticast mode [ 408.461526][T14047] syz_tun (unregistering): left promiscuous mode [ 408.480855][T14047] : port 1(syz_tun) entered disabled state [ 408.490587][T14092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2675'. [ 409.007101][T14112] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2680'. [ 409.781520][T14073] gretap0 speed is unknown, defaulting to 1000 [ 409.965497][ T50] Bluetooth: hci5: command tx timeout [ 410.027874][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2682'. [ 410.830428][T14169] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2688'. [ 410.999116][T14073] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.038259][T14073] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.069260][T14073] bridge_slave_0: entered allmulticast mode [ 411.103241][T14073] bridge_slave_0: entered promiscuous mode [ 411.140307][T14178] netlink: 'syz.0.2689': attribute type 29 has an invalid length. [ 411.158292][T14073] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.183460][T14073] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.190870][T14171] netlink: 'syz.3.2691': attribute type 10 has an invalid length. [ 411.190895][T14171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2691'. [ 411.223719][T14073] bridge_slave_1: entered allmulticast mode [ 411.237618][T14073] bridge_slave_1: entered promiscuous mode [ 411.275511][T14185] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2690'. [ 411.468415][T14173] netlink: 'syz.0.2689': attribute type 29 has an invalid length. [ 411.540850][T14073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.602107][T14073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.762146][T14073] team0: Port device team_slave_0 added [ 411.788791][T14073] team0: Port device team_slave_1 added [ 411.950668][T14073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.987152][T14073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.046332][ T50] Bluetooth: hci5: command tx timeout [ 412.070797][T14073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.083447][T14073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.090519][T14073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 412.117363][T14073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.266214][T14073] hsr_slave_0: entered promiscuous mode [ 412.272887][T14073] hsr_slave_1: entered promiscuous mode [ 412.287796][T14214] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2699'. [ 412.297160][T14215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'. [ 412.298244][T14073] debugfs: 'hsr0' already exists in 'hsr' [ 412.328783][T14073] Cannot create hsr debugfs directory [ 413.501714][T14073] team0: Port device netdevsim1 removed [ 414.126858][ T50] Bluetooth: hci5: command tx timeout [ 414.278562][T14268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2716'. [ 414.521473][T14275] netlink: 'syz.0.2717': attribute type 10 has an invalid length. [ 414.572037][T14275] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2717'. [ 414.591153][ T5634] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.603482][ T5634] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.613854][ T5634] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.626067][ T5634] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.635870][ T5634] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.727023][T14275] dummy0: entered promiscuous mode [ 414.745494][T14275] dummy0: entered allmulticast mode [ 414.758994][T14275] bridge0: port 3(dummy0) entered blocking state [ 414.785498][T14275] bridge0: port 3(dummy0) entered disabled state [ 414.810155][T14275] bridge0: port 3(dummy0) entered blocking state [ 414.816728][T14275] bridge0: port 3(dummy0) entered forwarding state [ 414.829020][T14073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 414.843097][T14073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.562380][T14303] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2724'. [ 416.207382][ T50] Bluetooth: hci5: command tx timeout [ 416.563006][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2727'. [ 416.687196][ T50] Bluetooth: hci1: command tx timeout [ 416.770266][T14325] FAULT_INJECTION: forcing a failure. [ 416.770266][T14325] name failslab, interval 1, probability 0, space 0, times 0 [ 416.785963][T14325] CPU: 0 UID: 0 PID: 14325 Comm: syz.0.2730 Not tainted syzkaller #0 PREEMPT(full) [ 416.785987][T14325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.786002][T14325] Call Trace: [ 416.786010][T14325] [ 416.786020][T14325] dump_stack_lvl+0xe8/0x150 [ 416.786045][T14325] should_fail_ex+0x412/0x560 [ 416.786072][T14325] should_failslab+0xa8/0x100 [ 416.786096][T14325] __kmalloc_noprof+0xe8/0x760 [ 416.786115][T14325] ? __kasan_kmalloc+0x93/0xb0 [ 416.786132][T14325] ? nla_strdup+0x9d/0x140 [ 416.786147][T14325] ? __kmalloc_cache_noprof+0x31c/0x660 [ 416.786170][T14325] nla_strdup+0x9d/0x140 [ 416.786187][T14325] nf_tables_newtable+0x491/0x1910 [ 416.786233][T14325] nfnetlink_rcv+0x123e/0x27b0 [ 416.786286][T14325] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 416.786320][T14325] ? ref_tracker_free+0x693/0x840 [ 416.786372][T14325] ? __netlink_deliver_tap+0x807/0x850 [ 416.786401][T14325] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.786420][T14325] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.786445][T14325] netlink_unicast+0x75c/0x8e0 [ 416.786474][T14325] netlink_sendmsg+0x813/0xb40 [ 416.786504][T14325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.786527][T14325] ? aa_sock_msg_perm+0xf1/0x1b0 [ 416.786549][T14325] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.786570][T14325] ____sys_sendmsg+0x972/0x9f0 [ 416.786594][T14325] ? __might_fault+0xaf/0x130 [ 416.786623][T14325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.786653][T14325] ? import_iovec+0x73/0xa0 [ 416.786681][T14325] ___sys_sendmsg+0x2a5/0x360 [ 416.786701][T14325] ? __lock_acquire+0x6b5/0x2cf0 [ 416.786723][T14325] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.786778][T14325] ? __fget_files+0x2a/0x420 [ 416.786794][T14325] ? __fget_files+0x3a0/0x420 [ 416.786820][T14325] __x64_sys_sendmsg+0x1bd/0x2a0 [ 416.786843][T14325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.786874][T14325] ? __pfx_ksys_write+0x10/0x10 [ 416.786902][T14325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.786921][T14325] do_syscall_64+0x174/0x580 [ 416.786941][T14325] ? trace_irq_disable+0x3b/0x140 [ 416.786965][T14325] ? clear_bhb_loop+0x40/0x90 [ 416.786987][T14325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.787008][T14325] RIP: 0033:0x7f7cbd59ce59 [ 416.787025][T14325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.787040][T14325] RSP: 002b:00007f7cbe3ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.787058][T14325] RAX: ffffffffffffffda RBX: 00007f7cbd815fa0 RCX: 00007f7cbd59ce59 [ 416.787071][T14325] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 416.787081][T14325] RBP: 00007f7cbe3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 416.787091][T14325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.787102][T14325] R13: 00007f7cbd816038 R14: 00007f7cbd815fa0 R15: 00007ffe95c82518 [ 416.787130][T14325] [ 418.613489][T14073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.623603][T14073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.765823][ T50] Bluetooth: hci1: command tx timeout [ 418.810519][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2744'. [ 419.394437][T14374] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2749'. [ 420.847120][ T50] Bluetooth: hci1: command tx timeout [ 421.585306][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 421.689631][T14073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.708300][T14073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 421.717698][T14073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.752683][T14073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.074986][T14073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.100647][T14280] gretap0 speed is unknown, defaulting to 1000 [ 422.243357][T14073] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.268819][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.276032][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.350360][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.357593][ T9193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.689631][ T25] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 270 seconds [ 422.805575][T14436] netlink: 'syz.2.2770': attribute type 10 has an invalid length. [ 422.837294][T14436] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2770'. [ 422.929165][ T5634] Bluetooth: hci1: command tx timeout [ 423.239651][T14280] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.247783][T14280] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.255603][T14280] bridge_slave_0: entered allmulticast mode [ 423.264191][T14280] bridge_slave_0: entered promiscuous mode [ 423.281812][T14280] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.295493][T14280] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.317432][T14280] bridge_slave_1: entered allmulticast mode [ 423.333619][T14280] bridge_slave_1: entered promiscuous mode [ 423.396949][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 423.426162][T14280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.426439][T14464] netlink: 'syz.0.2779': attribute type 6 has an invalid length. [ 423.459619][T14280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.485303][T14464] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2779'. [ 423.610617][T14280] team0: Port device team_slave_0 added [ 423.640561][T14280] team0: Port device team_slave_1 added [ 423.760924][T14280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.773861][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.821775][T14280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.921306][T14487] net_ratelimit: 398 callbacks suppressed [ 423.921323][T14487] openvswitch: netlink: Duplicate key (type 21). [ 423.934472][T14486] openvswitch: netlink: Duplicate key (type 21). [ 424.007916][T14480] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.096213][T14280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.112956][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 424.147127][T14280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.242936][T14073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.346834][T14497] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2789'. [ 424.439678][T14280] hsr_slave_0: entered promiscuous mode [ 424.469237][T14280] hsr_slave_1: entered promiscuous mode [ 424.496429][T14280] debugfs: 'hsr0' already exists in 'hsr' [ 424.516809][T14280] Cannot create hsr debugfs directory [ 424.812618][T14514] tc_dump_action: action bad kind [ 424.880415][T14514] netlink: 'syz.2.2794': attribute type 41 has an invalid length. [ 424.961768][T14522] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2795'. [ 425.167692][T14527] netlink: 'syz.2.2796': attribute type 2 has an invalid length. [ 425.176480][T14527] netlink: 'syz.2.2796': attribute type 1 has an invalid length. [ 425.184456][T14527] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2796'. [ 425.411328][T14073] veth0_vlan: entered promiscuous mode [ 425.473426][T14533] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2797'. [ 425.491253][T14280] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 425.513759][T14533] netlink: 'syz.2.2797': attribute type 1 has an invalid length. [ 425.516895][T14280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.534255][T14073] veth1_vlan: entered promiscuous mode [ 425.543710][T14280] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 425.558084][T14280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.568981][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.612249][T14280] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 425.623594][T14280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.631500][T14537] : port 1(syz_tun) entered blocking state [ 425.639542][T14537] : port 1(syz_tun) entered disabled state [ 425.645897][T14537] syz_tun: entered allmulticast mode [ 425.654102][T14537] syz_tun: entered promiscuous mode [ 425.667394][T14280] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 425.701748][T14280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.890624][T14548] netlink: 'syz.3.2800': attribute type 32 has an invalid length. [ 426.202070][T14073] veth0_macvtap: entered promiscuous mode [ 426.343195][T14073] veth1_macvtap: entered promiscuous mode [ 426.643055][T14073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.696530][T14073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.711546][ T9199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.722322][T14557] tc_dump_action: action bad kind [ 426.750817][ T9199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.772530][ T9199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.799828][T14561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2806'. [ 426.800708][T14557] netlink: 'syz.3.2804': attribute type 41 has an invalid length. [ 426.819372][ T9199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.883850][T14563] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2807'. [ 426.942629][T14280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.014790][ T9206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.043730][ T9206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.069396][T14280] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.104139][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.111438][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.141957][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.149209][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.179177][ T9193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.197174][ T9193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.994246][T14602] tc_dump_action: action bad kind [ 428.075855][T14602] netlink: 'syz.2.2818': attribute type 41 has an invalid length. [ 428.634532][T14629] netlink: 'syz.0.2824': attribute type 1 has an invalid length. [ 428.643794][T14280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.657615][T14629] netlink: 7060 bytes leftover after parsing attributes in process `syz.0.2824'. [ 428.725117][T14610] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2820'. [ 428.944385][T14642] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2827'. [ 429.448578][T14280] veth0_vlan: entered promiscuous mode [ 429.483225][T14280] veth1_vlan: entered promiscuous mode [ 429.570015][T14280] veth0_macvtap: entered promiscuous mode [ 429.582816][T14280] veth1_macvtap: entered promiscuous mode [ 429.648833][T14280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.669840][T14280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.721971][ T9206] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.762234][ T9206] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.810832][ T9206] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.831083][ T9206] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.861597][T14673] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2837'. [ 430.002379][T14677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2839'. [ 430.063765][ T9199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.102451][ T9199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.111483][T14682] openvswitch: netlink: Actions may not be safe on all matching packets [ 430.136823][T14680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2841'. [ 430.193280][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.210366][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.481080][T14697] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2849'. [ 430.531972][T14702] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2714'. [ 430.616105][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2850'. [ 431.149584][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2857'. [ 431.528846][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2862'. [ 431.613691][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 431.627703][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 431.648155][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 431.661664][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 431.673906][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 431.910315][T14752] netlink: 2 bytes leftover after parsing attributes in process `syz.6.2865'. [ 432.097382][T14752] gretap0 speed is unknown, defaulting to 1000 [ 432.621093][T14744] gretap0 speed is unknown, defaulting to 1000 [ 432.653500][T14780] netlink: 'syz.2.2876': attribute type 10 has an invalid length. [ 432.668878][T14780] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2876'. [ 432.730170][T14781] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2875'. [ 433.478704][T14744] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.490618][T14744] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.502522][T14744] bridge_slave_0: entered allmulticast mode [ 433.513015][T14744] bridge_slave_0: entered promiscuous mode [ 433.522241][T14744] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.529705][T14744] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.539472][T14744] bridge_slave_1: entered allmulticast mode [ 433.551952][T14744] bridge_slave_1: entered promiscuous mode [ 433.603898][T14744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.617234][T14744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.706148][T14744] team0: Port device team_slave_0 added [ 433.725380][ T50] Bluetooth: hci3: command tx timeout [ 433.739530][T14744] team0: Port device team_slave_1 added [ 433.848581][T14744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.880127][T14744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.964493][T14744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.981779][T14744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.989010][T14744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.016548][T14744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.057515][T14829] IPv6: NLM_F_CREATE should be specified when creating new route [ 434.264254][T14744] hsr_slave_0: entered promiscuous mode [ 434.281296][T14744] hsr_slave_1: entered promiscuous mode [ 434.317729][T14744] debugfs: 'hsr0' already exists in 'hsr' [ 434.348074][T14744] Cannot create hsr debugfs directory [ 434.752026][T14852] netlink: 'syz.0.2900': attribute type 5 has an invalid length. [ 435.267727][T14869] __nla_validate_parse: 4 callbacks suppressed [ 435.267746][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2906'. [ 435.623239][T14744] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.710927][T14894] netlink: 'syz.2.2910': attribute type 10 has an invalid length. [ 435.816321][ T50] Bluetooth: hci3: command tx timeout [ 435.820818][T14894] team0: Port device veth0 added [ 435.992105][T14890] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2913'. [ 436.231965][T14744] team0: Port device netdevsim1 removed [ 436.290080][T14744] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.617499][T14744] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.097631][ T64] bridge_slave_1: left allmulticast mode [ 437.123261][ T64] bridge_slave_1: left promiscuous mode [ 437.146719][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.176878][ T64] bridge_slave_0: left allmulticast mode [ 437.184943][ T64] bridge_slave_0: left promiscuous mode [ 437.194451][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.813589][ T9199] smbdirect: ib_dev[syz1] removed [ 437.895993][ T50] Bluetooth: hci3: command tx timeout [ 437.930804][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.949784][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.972959][ T64] bond0 (unregistering): Released all slaves [ 438.001730][T13377] gretap0 speed is unknown, defaulting to 1000 [ 438.008061][T13377] infiniband syz1: ib_query_port failed (-19) [ 438.080400][T14932] netlink: 'syz.2.2925': attribute type 2 has an invalid length. [ 438.542016][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2932'. [ 438.593885][T14744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.641610][T14744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.659279][T14744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.671897][T14744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 438.764369][T14744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 438.801504][T14744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 438.900875][T14744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 438.920587][T14958] netlink: 'syz.4.2936': attribute type 16 has an invalid length. [ 438.946859][T14744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.347711][T14958] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.355476][T14958] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.966135][ T50] Bluetooth: hci3: command tx timeout [ 439.973973][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.980700][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.102714][T14958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.142998][T14958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.660539][ T9206] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.684842][ T9206] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.693468][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2948'. [ 440.730022][ T9206] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.759153][ T9206] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.832894][ T64] hsr_slave_0: left promiscuous mode [ 440.853611][ T64] hsr_slave_1: left promiscuous mode [ 440.868262][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.884165][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.899319][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.915335][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.929497][ T64] veth1_macvtap: left promiscuous mode [ 440.935327][ T64] veth0_macvtap: left promiscuous mode [ 441.394280][ T64] team0 (unregistering): Port device team_slave_1 removed [ 441.431491][ T64] team0 (unregistering): Port device team_slave_0 removed [ 442.674831][T14744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.772246][T14744] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.824703][ T9206] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.831934][ T9206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.929369][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.936577][ T9193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.997868][T15043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2967'. [ 443.023463][T15043] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2967'. [ 443.135567][T15043] mac80211_hwsim hwsim38 wlan1: entered allmulticast mode [ 443.208324][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2967'. [ 444.181048][T15082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2977'. [ 444.411323][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2978'. [ 444.653173][T14744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.998212][T14744] veth0_vlan: entered promiscuous mode [ 445.018954][T15097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2980'. [ 445.070766][T14744] veth1_vlan: entered promiscuous mode [ 445.173464][T14744] veth0_macvtap: entered promiscuous mode [ 445.206767][T14744] veth1_macvtap: entered promiscuous mode [ 445.268940][T14744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.314674][T14744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.371294][ T64] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.403156][ T64] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.569844][ T64] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.648361][ T64] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.847555][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.874167][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.887268][T15103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2982'. [ 445.993394][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.024976][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.212326][T15113] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2988'. [ 446.296196][T15117] netlink: 'syz.4.2986': attribute type 29 has an invalid length. [ 446.306146][T15118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2989'. [ 446.348369][T15118] veth1_macvtap: left promiscuous mode [ 446.370516][T15122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2990'. [ 446.562348][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2993'. [ 446.575429][T15128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2993'. [ 446.703790][T15128] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 446.962864][T15128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 447.605353][T15168] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3004'. [ 447.654684][T15166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 447.699630][T15166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3002'. [ 451.250984][ T4999] udevd[4999]: worker [5652] /devices/virtual/block/nbd0 timeout; kill it [ 451.268130][ T4999] udevd[4999]: seq 11416 '/devices/virtual/block/nbd0' killed [ 452.780411][ T25] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 300 seconds [ 453.228147][ T5294] veth1_macvtap: entered promiscuous mode [ 453.314851][T15188] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.834215][T15227] __nla_validate_parse: 2 callbacks suppressed [ 453.834233][T15227] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3021'. [ 454.201412][T15242] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3026'. [ 454.409961][T15257] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3031'. [ 455.007820][T15296] netlink: 'syz.2.3040': attribute type 21 has an invalid length. [ 455.023133][T15296] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3040'. [ 455.350677][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'. [ 455.520224][T15310] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3044'. [ 455.608873][T15321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3049'. [ 455.698467][T15327] netlink: 'syz.3.3049': attribute type 10 has an invalid length. [ 456.062808][T15330] netlink: 'syz.4.3051': attribute type 10 has an invalid length. [ 456.116987][T15330] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3051'. [ 456.447232][T15327] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.492317][T15327] team0: Port device netdevsim1 added [ 457.746712][ T5294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 458.078589][T15373] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3063'. [ 458.405009][T15384] netlink: 11774 bytes leftover after parsing attributes in process `syz.2.3068'. [ 458.833375][T15405] mac80211_hwsim hwsim27 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 458.864780][T15410] netlink: 'syz.2.3076': attribute type 6 has an invalid length. [ 458.885607][T15410] __nla_validate_parse: 2 callbacks suppressed [ 458.885627][T15410] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3076'. [ 458.977431][T15415] netlink: 1012 bytes leftover after parsing attributes in process `syz.6.3080'. [ 459.078095][T15415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.295589][T15428] nbd: must specify a device to reconfigure [ 459.324666][T15429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3085'. [ 459.631406][T15444] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3091'. [ 460.150072][T15458] netlink: 'syz.4.3097': attribute type 39 has an invalid length. [ 460.498234][T15458] hsr_slave_0 (unregistering): left promiscuous mode [ 460.982222][T15487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 461.347473][T15502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3112'. [ 462.023723][T15522] netlink: 'syz.6.3121': attribute type 29 has an invalid length. [ 462.057431][T15522] netlink: 'syz.6.3121': attribute type 29 has an invalid length. [ 462.140993][T15527] netlink: 4892 bytes leftover after parsing attributes in process `syz.3.3123'. [ 462.459391][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3129'. [ 463.108986][T15556] netlink: 'syz.2.3135': attribute type 21 has an invalid length. [ 463.155725][T15556] IPv6: NLM_F_CREATE should be specified when creating new route [ 463.243374][T15556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3135'. [ 463.283560][T15559] netlink: 'syz.2.3135': attribute type 10 has an invalid length. [ 463.312981][T15559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.346437][T15559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.424451][T15559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 463.484011][T15559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.633091][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3143'. [ 464.110005][T15589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3149'. [ 464.369751][T15605] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048) [ 464.396763][T15592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.824480][T15615] netlink: 'syz.0.3156': attribute type 4 has an invalid length. [ 464.848074][T15615] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3156'. [ 465.429180][T15635] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3162'. [ 465.704234][T15643] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3164'. [ 466.119659][T15661] netlink: 4892 bytes leftover after parsing attributes in process `syz.6.3171'. [ 466.253118][T15666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3170'. [ 466.586037][T15680] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3177'. [ 466.934247][T15676] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3176'. [ 467.038260][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'. [ 467.072639][T15692] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3179'. [ 467.290115][T15700] netlink: 'syz.6.3182': attribute type 10 has an invalid length. [ 467.694232][T15699] netlink: 'syz.4.3181': attribute type 29 has an invalid length. [ 467.747953][T15701] netlink: 'syz.4.3181': attribute type 29 has an invalid length. [ 467.931694][T15717] tmpfs: Bad value for 'mode' [ 468.614802][T15738] netlink: 'syz.2.3188': attribute type 16 has an invalid length. [ 472.052501][T15770] __nla_validate_parse: 4 callbacks suppressed [ 472.052528][T15770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3204'. [ 472.296913][T15780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3207'. [ 472.324484][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3206'. [ 472.342092][T15780] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 472.500826][T15784] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 472.702335][T15791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3209'. [ 472.753713][T15791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3209'. [ 472.827401][T15797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3210'. [ 473.377884][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3209'. [ 473.404585][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3213'. [ 474.053689][T15844] netlink: 'syz.6.3219': attribute type 21 has an invalid length. [ 474.175451][T15845] netlink: 'syz.3.3221': attribute type 1 has an invalid length. [ 474.467441][T15858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3226'. [ 474.589328][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3224'. [ 476.145863][T15931] tc_dump_action: action bad kind [ 476.184782][T15931] netlink: 'syz.0.3250': attribute type 41 has an invalid length. [ 476.681040][T15949] netlink: 'syz.0.3256': attribute type 10 has an invalid length. [ 476.888579][T15949] team0: Device wg2 is of different type [ 477.572450][T15969] __nla_validate_parse: 4 callbacks suppressed [ 477.572474][T15969] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3263'. [ 477.820484][T15979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3267'. [ 479.180441][T16022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3279'. [ 479.368646][T16026] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.3282'. [ 479.969291][T16053] netlink: 'syz.0.3291': attribute type 21 has an invalid length. [ 480.538515][T16067] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3296'. [ 480.612101][T16075] netlink: 'syz.6.3296': attribute type 6 has an invalid length. [ 480.679643][T16075] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3296'. [ 481.053375][T16088] netlink: 'syz.3.3299': attribute type 1 has an invalid length. [ 481.091055][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3299'. [ 481.868512][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3306'. [ 482.849277][ T25] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 330 seconds [ 483.138644][T16151] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3324'. [ 483.166917][T16152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3319'. [ 483.368824][T16161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3328'. [ 483.396026][T16161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3328'. [ 483.492722][T16164] netlink: 'syz.0.3330': attribute type 10 has an invalid length. [ 483.526844][T16164] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3330'. [ 483.569250][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 483.899628][T16187] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3337'. [ 483.942979][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'. [ 484.164273][T16195] FAULT_INJECTION: forcing a failure. [ 484.164273][T16195] name failslab, interval 1, probability 0, space 0, times 0 [ 484.196130][T16195] CPU: 0 UID: 0 PID: 16195 Comm: syz.2.3339 Not tainted syzkaller #0 PREEMPT(full) [ 484.196177][T16195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 484.196187][T16195] Call Trace: [ 484.196195][T16195] [ 484.196203][T16195] dump_stack_lvl+0xe8/0x150 [ 484.196230][T16195] should_fail_ex+0x412/0x560 [ 484.196262][T16195] should_failslab+0xa8/0x100 [ 484.196288][T16195] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 484.196309][T16195] ? __alloc_skb+0x186/0x7d0 [ 484.196328][T16195] ? __alloc_skb+0x1d0/0x7d0 [ 484.196345][T16195] ? __local_bh_enable_ip+0xd0/0x130 [ 484.196370][T16195] __alloc_skb+0x1d0/0x7d0 [ 484.196390][T16195] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 484.196415][T16195] netlink_sendmsg+0x5d4/0xb40 [ 484.196448][T16195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.196474][T16195] ? aa_sock_msg_perm+0xf1/0x1b0 [ 484.196498][T16195] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 484.196520][T16195] ____sys_sendmsg+0x972/0x9f0 [ 484.196544][T16195] ? __pfx_perf_trace_lock+0x10/0x10 [ 484.196573][T16195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.196603][T16195] ? import_iovec+0x73/0xa0 [ 484.196631][T16195] ___sys_sendmsg+0x2a5/0x360 [ 484.196652][T16195] ? __lock_acquire+0x6b5/0x2cf0 [ 484.196676][T16195] ? __pfx____sys_sendmsg+0x10/0x10 [ 484.196728][T16195] ? __fget_files+0x2a/0x420 [ 484.196760][T16195] ? __fget_files+0x2a/0x420 [ 484.196775][T16195] ? __fget_files+0x3a0/0x420 [ 484.196806][T16195] __x64_sys_sendmsg+0x1bd/0x2a0 [ 484.196833][T16195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 484.196852][T16195] ? perf_trace_preemptirq_template+0xb2/0x350 [ 484.196891][T16195] ? __pfx_ksys_write+0x10/0x10 [ 484.196924][T16195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.196951][T16195] do_syscall_64+0x174/0x580 [ 484.196971][T16195] ? trace_irq_disable+0x3b/0x140 [ 484.196995][T16195] ? clear_bhb_loop+0x40/0x90 [ 484.197017][T16195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.197034][T16195] RIP: 0033:0x7fb85559ce59 [ 484.197050][T16195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.197063][T16195] RSP: 002b:00007fb856421028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.197082][T16195] RAX: ffffffffffffffda RBX: 00007fb855815fa0 RCX: 00007fb85559ce59 [ 484.197094][T16195] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 484.197105][T16195] RBP: 00007fb856421090 R08: 0000000000000000 R09: 0000000000000000 [ 484.197114][T16195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.197124][T16195] R13: 00007fb855816038 R14: 00007fb855815fa0 R15: 00007ffd1991cc78 [ 484.197158][T16195] [ 485.683416][T16237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3350'. [ 485.718894][T16237] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3350'. [ 485.805051][T16244] netlink: 'syz.3.3353': attribute type 6 has an invalid length. [ 486.157492][T16250] FAULT_INJECTION: forcing a failure. [ 486.157492][T16250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.198583][T16250] CPU: 1 UID: 0 PID: 16250 Comm: syz.2.3358 Not tainted syzkaller #0 PREEMPT(full) [ 486.198607][T16250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.198619][T16250] Call Trace: [ 486.198626][T16250] [ 486.198633][T16250] dump_stack_lvl+0xe8/0x150 [ 486.198659][T16250] should_fail_ex+0x412/0x560 [ 486.198691][T16250] _copy_from_iter+0x1d3/0x1670 [ 486.198720][T16250] ? rcu_is_watching+0x15/0xb0 [ 486.198750][T16250] ? __pfx__copy_from_iter+0x10/0x10 [ 486.198785][T16250] ? netlink_sendmsg+0x650/0xb40 [ 486.198804][T16250] ? skb_put+0x11b/0x210 [ 486.198829][T16250] netlink_sendmsg+0x6c0/0xb40 [ 486.198861][T16250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.198886][T16250] ? aa_sock_msg_perm+0xf1/0x1b0 [ 486.198909][T16250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.198936][T16250] ____sys_sendmsg+0x972/0x9f0 [ 486.198958][T16250] ? __pfx_perf_trace_lock+0x10/0x10 [ 486.198987][T16250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.199020][T16250] ? import_iovec+0x73/0xa0 [ 486.199049][T16250] ___sys_sendmsg+0x2a5/0x360 [ 486.199069][T16250] ? __lock_acquire+0x6b5/0x2cf0 [ 486.199095][T16250] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.199143][T16250] ? __fget_files+0x2a/0x420 [ 486.199174][T16250] ? __fget_files+0x2a/0x420 [ 486.199190][T16250] ? __fget_files+0x3a0/0x420 [ 486.199220][T16250] __x64_sys_sendmsg+0x1bd/0x2a0 [ 486.199247][T16250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.199266][T16250] ? perf_trace_preemptirq_template+0xb2/0x350 [ 486.199312][T16250] ? __pfx_ksys_write+0x10/0x10 [ 486.199344][T16250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.199365][T16250] do_syscall_64+0x174/0x580 [ 486.199385][T16250] ? trace_irq_disable+0x3b/0x140 [ 486.199407][T16250] ? clear_bhb_loop+0x40/0x90 [ 486.199431][T16250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.199448][T16250] RIP: 0033:0x7fb85559ce59 [ 486.199465][T16250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.199478][T16250] RSP: 002b:00007fb856421028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.199497][T16250] RAX: ffffffffffffffda RBX: 00007fb855815fa0 RCX: 00007fb85559ce59 [ 486.199509][T16250] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 486.199520][T16250] RBP: 00007fb856421090 R08: 0000000000000000 R09: 0000000000000000 [ 486.199530][T16250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.199540][T16250] R13: 00007fb855816038 R14: 00007fb855815fa0 R15: 00007ffd1991cc78 [ 486.199573][T16250] [ 486.917950][T16267] openvswitch: netlink: Tunnel attr 154 out of range max 16 [ 486.972536][T16267] netlink: 'syz.0.3364': attribute type 21 has an invalid length. [ 487.017431][T16267] netlink: 'syz.0.3364': attribute type 6 has an invalid length. [ 487.219021][T16272] netlink: 'syz.6.3366': attribute type 4 has an invalid length. [ 488.352463][T16302] __nla_validate_parse: 7 callbacks suppressed [ 488.352482][T16302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3374'. [ 488.498132][T16311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3379'. [ 488.540179][T16312] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3378'. [ 488.681256][ T50] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 488.734411][T16319] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3383'. [ 489.421764][T16344] netlink: 4892 bytes leftover after parsing attributes in process `syz.3.3389'. [ 489.491332][T16349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3392'. [ 489.636251][T16357] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3394'. [ 490.691626][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3396'. [ 492.702074][T16357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.842172][T16357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.885028][T16357] bond0 (unregistering): Released all slaves [ 492.915571][T16361] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 492.941289][T16415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3398'. [ 493.314207][T16433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3405'. [ 493.797582][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3413'. [ 494.021750][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3418'. [ 494.057950][T16465] netlink: 'syz.3.3418': attribute type 2 has an invalid length. [ 494.090895][T16465] netlink: 'syz.3.3418': attribute type 1 has an invalid length. [ 494.122806][T16469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3419'. [ 494.129528][T16465] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3418'. [ 494.392642][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 494.479049][T16485] tc_dump_action: action bad kind [ 494.488701][T16489] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.3429'. [ 494.524206][T16485] netlink: 'syz.3.3427': attribute type 41 has an invalid length. [ 494.837050][T16505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3434'. [ 495.400235][T16511] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3437'. [ 495.748567][T16524] tc_dump_action: action bad kind [ 495.819181][T16524] netlink: 'syz.0.3443': attribute type 41 has an invalid length. [ 495.873289][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3446'. [ 496.057337][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3447'. [ 497.147863][ T9199] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.301953][T16573] бя: renamed from bond_slave_1 (while UP) [ 497.494102][ T9199] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.725513][ T9199] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.883904][T16606] netlink: 'syz.0.3473': attribute type 10 has an invalid length. [ 497.928594][ T9199] team0: Port device netdevsim0 removed [ 497.954412][ T9199] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.747939][ T9199] bridge_slave_1: left allmulticast mode [ 498.775756][ T9199] bridge_slave_1: left promiscuous mode [ 498.803136][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.826772][T16636] __nla_validate_parse: 8 callbacks suppressed [ 498.826792][T16636] netlink: 4892 bytes leftover after parsing attributes in process `syz.3.3482'. [ 498.943148][ T9199] bridge_slave_0: left allmulticast mode [ 498.960270][ T9199] bridge_slave_0: left promiscuous mode [ 498.981418][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.329498][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3489'. [ 499.491933][T16669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 499.492820][T16670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3491'. [ 499.987916][ T9199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.039146][ T9199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.094503][ T9199] bond0 (unregistering): Released all slaves [ 500.915276][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5 [ 501.474296][T16698] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3498'. [ 501.508388][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.535340][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.308395][ T9199] hsr_slave_0: left promiscuous mode [ 504.366542][ T9199] hsr_slave_1: left promiscuous mode [ 504.683227][ T9199] veth1_macvtap: left promiscuous mode [ 504.728108][ T9199] veth0_macvtap: left promiscuous mode [ 505.504817][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3509'. [ 505.869348][T16772] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3510'. [ 507.283548][ T9199] team0 (unregistering): Port device team_slave_1 removed [ 507.487303][ T9199] team0 (unregistering): Port device team_slave_0 removed [ 508.205035][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3516'. [ 508.683017][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6 [ 509.823808][T16811] netlink: 'syz.2.3518': attribute type 16 has an invalid length. [ 509.872659][T16811] netlink: 'syz.2.3518': attribute type 17 has an invalid length. [ 511.312206][T16832] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3524'. [ 511.333857][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3523'. [ 513.298601][ T25] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 360 seconds [ 513.465229][T16854] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3529'. [ 514.294799][T16859] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3531'. [ 516.131017][ T5294] 8021q: adding VLAN 0 to HW filter on device eth7 [ 517.016921][T16896] netlink: 120 bytes leftover after parsing attributes in process `syz.4.3540'. [ 517.079074][T16896] netlink: 'syz.4.3540': attribute type 6 has an invalid length. [ 517.120381][T16896] netlink: 360 bytes leftover after parsing attributes in process `syz.4.3540'. [ 517.308000][T16896] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3540'. [ 518.847358][T16893] Bluetooth: hci2: command 0x0406 tx timeout [ 519.207903][T16918] FAULT_INJECTION: forcing a failure. [ 519.207903][T16918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.259104][T16918] CPU: 1 UID: 0 PID: 16918 Comm: syz.6.3547 Not tainted syzkaller #0 PREEMPT(full) [ 519.259130][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 519.259141][T16918] Call Trace: [ 519.259152][T16918] [ 519.259162][T16918] dump_stack_lvl+0xe8/0x150 [ 519.259205][T16918] should_fail_ex+0x412/0x560 [ 519.259272][T16918] _copy_to_user+0x31/0xb0 [ 519.259320][T16918] simple_read_from_buffer+0xe1/0x170 [ 519.259379][T16918] proc_fail_nth_read+0x1bb/0x230 [ 519.259423][T16918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.259468][T16918] ? rw_verify_area+0x2a6/0x4d0 [ 519.259497][T16918] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.259534][T16918] vfs_read+0x20c/0xa70 [ 519.259593][T16918] ? __pfx___mutex_lock+0x10/0x10 [ 519.259628][T16918] ? __pfx_vfs_read+0x10/0x10 [ 519.259670][T16918] ? __fget_files+0x2a/0x420 [ 519.259718][T16918] ? __fget_files+0x3a0/0x420 [ 519.259739][T16918] ? __fget_files+0x2a/0x420 [ 519.259807][T16918] ksys_read+0x150/0x270 [ 519.259852][T16918] ? __pfx_ksys_read+0x10/0x10 [ 519.259924][T16918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.259953][T16918] do_syscall_64+0x174/0x580 [ 519.259977][T16918] ? trace_irq_disable+0x3b/0x140 [ 519.260010][T16918] ? clear_bhb_loop+0x40/0x90 [ 519.260051][T16918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.260073][T16918] RIP: 0033:0x7ffa43d5d68e [ 519.260103][T16918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 519.260116][T16918] RSP: 002b:00007ffa44c63fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.260135][T16918] RAX: ffffffffffffffda RBX: 00007ffa44c646c0 RCX: 00007ffa43d5d68e [ 519.260147][T16918] RDX: 000000000000000f RSI: 00007ffa44c640a0 RDI: 0000000000000006 [ 519.260158][T16918] RBP: 00007ffa44c64090 R08: 0000000000000000 R09: 0000000000000000 [ 519.260170][T16918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.260180][T16918] R13: 00007ffa44016038 R14: 00007ffa44015fa0 R15: 00007fff859bdd18 [ 519.260283][T16918] [ 520.178397][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'. [ 520.259795][T16933] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3545'. [ 520.329378][T16933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'. [ 520.817923][T16943] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3551'. [ 521.136830][T16947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3552'. [ 521.344245][T16952] netlink: 'syz.4.3554': attribute type 10 has an invalid length. [ 521.378182][T16952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.540985][T16952] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 522.265315][ T5294] 8021q: adding VLAN 0 to HW filter on device eth8 [ 522.931561][T16985] netlink: 4892 bytes leftover after parsing attributes in process `syz.0.3561'. [ 523.296618][T16999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3566'. [ 523.412957][T16998] mac80211_hwsim hwsim34 wlan0: entered allmulticast mode [ 523.612381][ T30] audit: type=1107 audit(1779901824.262:3): pid=17001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 523.651885][T17002] sctp: [Deprecated]: syz.0.3569 (pid 17002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 523.651885][T17002] Use struct sctp_sack_info instead [ 524.136827][T17031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3579'. [ 525.966416][T17078] netem: change failed [ 527.121818][T17121] tap0: tun_chr_ioctl cmd 1074025681 [ 528.170507][T17136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3618'. [ 528.379177][T17142] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 528.379177][T17142] Please contact the netfilter-devel mailing list or update your nftables rules. [ 528.493495][T17148] netlink: 'syz.2.3624': attribute type 39 has an invalid length. [ 528.632323][T17148] syz_tun (unregistering): left allmulticast mode [ 528.656044][T17148] syz_tun (unregistering): left promiscuous mode [ 528.684236][T17148] : port 1(syz_tun) entered disabled state [ 529.951796][T17174] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3635'. [ 531.060249][T17185] netlink: 'syz.6.3636': attribute type 8 has an invalid length. [ 531.728584][T17217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3646'. [ 532.348479][T17243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3654'. [ 532.395968][T17239] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.3651'. [ 533.283798][T17285] netlink: 212372 bytes leftover after parsing attributes in process `syz.2.3669'. [ 533.311106][T17285] openvswitch: netlink: Message has 6 unknown bytes. [ 533.339501][T17285] netlink: 63731 bytes leftover after parsing attributes in process `syz.2.3669'. [ 533.635842][T17301] netlink: 'syz.3.3674': attribute type 2 has an invalid length. [ 534.215271][T16893] Bluetooth: hci5: command 0x0406 tx timeout [ 535.035808][T17367] netlink: 'syz.2.3691': attribute type 29 has an invalid length. [ 535.078087][T17363] netlink: 'syz.3.3689': attribute type 25 has an invalid length. [ 535.129692][T17363] netlink: 'syz.3.3689': attribute type 3 has an invalid length. [ 535.163299][T17370] netlink: 'syz.3.3689': attribute type 10 has an invalid length. [ 535.193597][T17363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3689'. [ 539.348590][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 541.415653][T17413] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.423336][T17413] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.431810][T17413] bridge0: entered allmulticast mode [ 541.441352][T17414] bridge_slave_1: left allmulticast mode [ 541.447923][T17414] bridge_slave_1: left promiscuous mode [ 541.453830][T17414] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.502727][T17414] bridge_slave_0: left allmulticast mode [ 541.509173][T17414] bridge_slave_0: left promiscuous mode [ 541.515079][T17414] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.344693][T17482] netlink: 'syz.0.3723': attribute type 2 has an invalid length. [ 542.424441][T17482] netlink: 'syz.0.3723': attribute type 2 has an invalid length. [ 542.883245][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3728'. [ 543.645898][ T25] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 390 seconds [ 543.730619][T17529] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3737'. [ 543.787764][T17533] netlink: 'syz.0.3735': attribute type 16 has an invalid length. [ 543.803867][T17534] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3738'. [ 543.836661][T17533] netlink: 'syz.0.3735': attribute type 17 has an invalid length. [ 543.907738][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 543.922808][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 543.934983][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 543.943938][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 543.956203][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 544.086887][T17533] bridge0: port 3(dummy0) entered disabled state [ 544.276174][T17533] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.418819][T17533] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.048982][T16893] Bluetooth: hci4: command tx timeout [ 547.020858][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3760'. [ 547.528611][ T9204] bridge_slave_1: left allmulticast mode [ 547.555261][ T9204] bridge_slave_1: left promiscuous mode [ 547.576819][ T9204] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.616763][ T9204] bridge_slave_0: left allmulticast mode [ 547.635805][ T9204] bridge_slave_0: left promiscuous mode [ 547.655493][ T9204] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.113067][ T9204] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.129497][T16893] Bluetooth: hci4: command tx timeout [ 548.152413][ T9204] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.203440][ T9204] bond0 (unregistering): (slave batadv_slave_1): Releasing backup interface [ 548.232792][ T9204] bond0 (unregistering): Released all slaves [ 548.314611][ T5294] 8021q: adding VLAN 0 to HW filter on device eth9 [ 548.410362][T17536] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.427587][T17536] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.461728][T17536] bridge_slave_0: entered allmulticast mode [ 548.479972][T17536] bridge_slave_0: entered promiscuous mode [ 548.531033][T17536] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.557269][T17536] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.596994][T17536] bridge_slave_1: entered allmulticast mode [ 548.641124][T17536] bridge_slave_1: entered promiscuous mode [ 549.351608][T17536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.461613][T17536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 550.215498][T16893] Bluetooth: hci4: command tx timeout [ 550.851412][ T9204] hsr_slave_1: left promiscuous mode [ 550.871898][ T9204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.081145][T17728] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3782'. [ 551.229737][ T9204] team0 (unregistering): Port device team_slave_1 removed [ 551.289792][ T9204] team0 (unregistering): Port device team_slave_0 removed [ 551.512959][T17744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3788'. [ 551.547223][T17744] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3788'. [ 551.655076][T17747] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3789'. [ 551.775959][ T5294] 8021q: adding VLAN 0 to HW filter on device eth10 [ 551.829297][T17536] team0: Port device team_slave_0 added [ 551.860455][T17536] team0: Port device team_slave_1 added [ 551.884836][T17744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3788'. [ 551.959965][T17753] netlink: 'syz.0.3791': attribute type 6 has an invalid length. [ 551.963887][T17536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.001894][T17536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.045464][T17536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.072147][T17536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.079255][T17536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.106283][T17536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.286122][T16893] Bluetooth: hci4: command tx timeout [ 552.346666][T17766] netlink: 'syz.0.3795': attribute type 2 has an invalid length. [ 552.364387][T17766] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3795'. [ 552.418310][T17536] hsr_slave_0: entered promiscuous mode [ 552.443929][T17536] hsr_slave_1: entered promiscuous mode [ 552.574975][T17776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3797'. [ 552.890852][T17792] netlink: 'syz.3.3801': attribute type 21 has an invalid length. [ 553.590388][T17814] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3810'. [ 553.632710][T17814] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3810'. [ 554.388647][T17536] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 554.610096][T17536] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 554.660090][T17536] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 554.698416][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 555.428703][T17536] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 555.445089][ T5294] 8021q: adding VLAN 0 to HW filter on device eth11 [ 555.477256][T17536] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 555.563161][T17536] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 555.592455][T17536] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 555.613671][T17836] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3816'. [ 555.618638][T17536] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 556.049674][T16893] Bluetooth: hci1: ISO packet for unknown connection handle 3863 [ 556.303334][T17536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.400816][T17536] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.429261][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.436495][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.512418][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.520265][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.368657][T17904] __nla_validate_parse: 1 callbacks suppressed [ 557.368674][T17904] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3831'. [ 557.379042][ T5294] 8021q: adding VLAN 0 to HW filter on device eth12 [ 558.037286][T17536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.052380][T17926] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3836'. [ 558.895041][T17536] veth0_vlan: entered promiscuous mode [ 558.927487][T17536] veth1_vlan: entered promiscuous mode [ 558.996466][T17957] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3844'. [ 559.038389][T17536] veth0_macvtap: entered promiscuous mode [ 559.060057][T17536] veth1_macvtap: entered promiscuous mode [ 559.130756][T17536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.171839][T17536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.267361][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.306538][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.354175][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.374250][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.716614][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.754485][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.813910][ T9199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.831981][ T9199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.132158][T17984] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.169568][T17990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3854'. [ 561.794618][T18032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3871'. [ 562.290000][T18050] netlink: 4892 bytes leftover after parsing attributes in process `syz.0.3877'. [ 562.878891][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.885323][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.630739][T18122] netlink: 'syz.6.3904': attribute type 10 has an invalid length. [ 564.664659][T18122] netlink: 65015 bytes leftover after parsing attributes in process `syz.6.3904'. [ 565.903782][T18153] netlink: 4892 bytes leftover after parsing attributes in process `syz.0.3917'. [ 566.558687][T18171] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3923'. [ 567.297470][T18186] blkio.reset_stats is deprecated [ 567.678721][T18196] netlink: 4892 bytes leftover after parsing attributes in process `syz.3.3934'. [ 568.307019][T18195] netlink: 'syz.6.3932': attribute type 10 has an invalid length. [ 568.382872][T18195] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3932'. [ 568.444818][T18195] dummy0: entered promiscuous mode [ 568.498999][T18195] dummy0: entered allmulticast mode [ 568.539319][T18195] bridge0: port 3(dummy0) entered blocking state [ 568.587240][T18195] bridge0: port 3(dummy0) entered disabled state [ 568.709703][T18195] bridge0: port 3(dummy0) entered blocking state [ 568.716301][T18195] bridge0: port 3(dummy0) entered forwarding state [ 569.415826][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3943'. [ 569.707465][T18249] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3944'. [ 570.501220][T18263] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3946'. [ 570.514578][T18266] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3949'. [ 570.718629][T18267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3948'. [ 572.407806][T18303] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3958'. [ 573.739707][ T25] block nbd0: Possible stuck request ffff888026fc5080: control (read@0,4096B). Runtime 420 seconds [ 574.130646][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3968'. [ 574.289795][T18350] netlink: del zone limit has 4 unknown bytes [ 575.381022][T18383] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3976'. [ 575.696929][T18391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3977'. [ 576.126276][T18399] netlink: 'syz.3.3981': attribute type 62 has an invalid length. [ 576.167351][T18402] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3983'. [ 577.062256][T18421] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3988'. [ 577.629463][T18433] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3992'. [ 578.510285][T18439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.721803][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 578.734367][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 578.744391][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 578.754577][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 578.762562][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 579.894010][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4001'. [ 579.918440][T18466] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4001'. [ 580.146102][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4001'. [ 580.184803][T18466] mac80211_hwsim hwsim49 wlan1: entered allmulticast mode [ 580.845385][ T50] Bluetooth: hci5: command tx timeout [ 581.081264][T18498] openvswitch: netlink: Unexpected mask (mask=100440, allowed=110048) [ 581.344929][T18446] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.370019][T18446] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.390164][T18446] bridge_slave_0: entered allmulticast mode [ 581.412346][T18446] bridge_slave_0: entered promiscuous mode [ 581.453073][T18446] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.485493][T18446] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.496508][T18446] bridge_slave_1: entered allmulticast mode [ 581.519732][T18446] bridge_slave_1: entered promiscuous mode [ 581.619399][T18446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.657236][T18446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 582.112283][T18446] team0: Port device team_slave_0 added [ 582.144130][T18446] team0: Port device team_slave_1 added [ 582.281512][T18531] netlink: 'syz.7.4017': attribute type 10 has an invalid length. [ 582.314796][T18446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 582.337120][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 582.403517][T18446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 582.430743][T18535] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4019'. [ 582.543672][T18531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 582.724146][T18531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.866973][T18531] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 582.925361][ T50] Bluetooth: hci5: command tx timeout [ 582.994676][T18446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.024228][T18550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4021'. [ 583.035243][T18446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.092841][T18446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.338523][T18553] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4022'. [ 583.541621][T18546] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4018'. [ 583.574910][T18546] netlink: 91 bytes leftover after parsing attributes in process `syz.3.4018'. [ 583.644227][T18540] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 583.734544][T18540] syzkaller0: entered promiscuous mode [ 583.757601][T18540] syzkaller0: entered allmulticast mode [ 584.111676][T18446] hsr_slave_0: entered promiscuous mode [ 584.141996][T18446] hsr_slave_1: entered promiscuous mode [ 584.169139][T18446] debugfs: 'hsr0' already exists in 'hsr' [ 584.186129][T18446] Cannot create hsr debugfs directory [ 584.908057][T18446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.998231][T18446] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.007313][ T50] Bluetooth: hci5: command tx timeout [ 585.090520][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.097791][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.176146][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.183331][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.793398][T18598] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4034'. [ 585.962020][T18598] netlink: 'syz.7.4034': attribute type 17 has an invalid length. [ 585.987462][T18598] netlink: 'syz.7.4034': attribute type 41 has an invalid length. [ 586.553266][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4043'. [ 586.591826][T18626] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4043'. [ 586.763945][T18446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.826380][T18626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4043'. [ 587.085457][ T50] Bluetooth: hci5: command tx timeout [ 587.556673][T18446] veth0_vlan: entered promiscuous mode [ 587.591842][T18446] veth1_vlan: entered promiscuous mode [ 587.694504][T18446] veth0_macvtap: entered promiscuous mode [ 587.720292][T18446] veth1_macvtap: entered promiscuous mode [ 587.778516][T18446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.797152][T18446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.030744][T18673] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4055'. [ 588.109536][ T9204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.133535][ T9204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.234507][ T9195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.260086][ T9195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.579001][T18688] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4060'. [ 588.618021][T18688] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4060'. [ 589.773901][T18720] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4072'. [ 590.147231][T18737] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4076'. [ 590.237047][ T50] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 590.602514][T18750] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4081'. [ 591.379434][T18784] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4090'. [ 591.980825][T18792] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4092'. [ 592.132386][T18792] netlink: 124 bytes leftover after parsing attributes in process `syz.8.4092'. [ 592.165860][T18792] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4092'. [ 592.295368][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 592.989229][T18845] netlink: 'syz.0.4111': attribute type 27 has an invalid length. [ 593.238792][T18849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4113'. [ 593.491837][T18857] netlink: 88 bytes leftover after parsing attributes in process `syz.0.4117'. [ 594.298022][T18886] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4128'. [ 594.350847][T18886] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4128'. [ 594.365251][T16893] Bluetooth: hci1: command 0x0406 tx timeout [ 594.648798][T18894] netlink: 4356 bytes leftover after parsing attributes in process `syz.7.4132'. [ 594.670464][T18894] netlink: 4356 bytes leftover after parsing attributes in process `syz.7.4132'. [ 594.953947][T18902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4130'. [ 595.161369][T18910] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4137'. [ 595.212253][T18911] hsr0: entered allmulticast mode [ 595.229153][T18911] hsr_slave_0: entered allmulticast mode [ 595.247140][T18911] hsr_slave_1: entered allmulticast mode [ 595.485387][ T31] INFO: task udevd:5652 blocked in I/O wait for more than 143 seconds. [ 595.515715][ T31] Not tainted syzkaller #0 [ 595.546727][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 595.577784][ T31] task:udevd state:D stack:21816 pid:5652 tgid:5652 ppid:4999 task_flags:0x400140 flags:0x00080002 [ 595.605447][ T31] Call Trace: [ 595.608905][ T31] [ 595.613650][ T31] __schedule+0x1821/0x5740 [ 595.621924][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 595.630232][ T31] ? __pfx_perf_trace_lock_acquire+0x10/0x10 [ 595.636809][ T31] ? perf_trace_lock_acquire+0x109/0x440 [ 595.642601][ T31] ? __pfx___schedule+0x10/0x10 [ 595.656722][ T31] ? schedule+0x90/0x360 [ 595.661135][ T31] schedule+0x164/0x360 [ 595.665690][ T31] io_schedule+0x7f/0xd0 [ 595.670069][ T31] folio_wait_bit_common+0x6d8/0xbc0 [ 595.675745][ T31] ? filemap_get_entry+0xcd/0x3f0 [ 595.680922][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 595.687277][ T31] ? filemap_read_folio+0x23e/0x3b0 [ 595.692615][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 595.698544][ T31] ? __filemap_get_folio_mpol+0x7a9/0xb00 [ 595.704400][ T31] do_read_cache_folio+0x1ad/0x590 [ 595.709910][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 595.715868][ T31] read_part_sector+0xb6/0x2b0 [ 595.720874][ T31] adfspart_check_POWERTEC+0x9a/0x7a0 [ 595.726775][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 595.733366][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 595.741017][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 595.747351][ T31] bdev_disk_changed+0x817/0x1770 [ 595.752530][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 595.761252][ T31] blkdev_get_whole+0x380/0x510 [ 595.768874][ T31] bdev_open+0x31e/0xd30 [ 595.773294][ T31] blkdev_open+0x470/0x610 [ 595.778127][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 595.783215][ T31] do_dentry_open+0x822/0x13a0 [ 595.788584][ T31] vfs_open+0x3b/0x340 [ 595.792805][ T31] ? path_openat+0x2df0/0x3860 [ 595.798319][ T31] path_openat+0x2e08/0x3860 [ 595.803071][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 595.811084][ T31] ? stack_depot_save_flags+0x33/0x810 [ 595.818191][ T31] ? __pfx_path_openat+0x10/0x10 [ 595.823275][ T31] ? __x64_sys_openat+0x138/0x170 [ 595.828819][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 595.833896][ T31] do_file_open+0x23e/0x4a0 [ 595.840055][ T31] ? __pfx_do_file_open+0x10/0x10 [ 595.847771][ T31] ? _raw_spin_unlock+0x28/0x50 [ 595.852770][ T31] ? alloc_fd+0x64b/0x6c0 [ 595.858186][ T31] do_sys_openat2+0x113/0x200 [ 595.863033][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.870640][ T31] ? rcu_is_watching+0x15/0xb0 [ 595.877026][ T31] __x64_sys_openat+0x138/0x170 [ 595.882129][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.888797][ T31] do_syscall_64+0x174/0x580 [ 595.893621][ T31] ? clear_bhb_loop+0x40/0x90 [ 595.898854][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.904878][ T31] RIP: 0033:0x7fd5eaea7407 [ 595.910047][ T31] RSP: 002b:00007ffd22e03190 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 595.918965][ T31] RAX: ffffffffffffffda RBX: 00007fd5eb60d880 RCX: 00007fd5eaea7407 [ 595.927440][ T31] RDX: 00000000000a0800 RSI: 000056478c28e150 RDI: ffffffffffffff9c [ 595.935828][ T31] RBP: 000056478c27c910 R08: 0000000000000000 R09: 0000000000000000 [ 595.944417][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000056478c290ba0 [ 595.952944][ T31] R13: 000056478c28a190 R14: 0000000000000000 R15: 000056478c290ba0 [ 595.962510][ T31] [ 595.966561][ T31] [ 595.966561][ T31] Showing all locks held in the system: [ 595.974992][ T31] 1 lock held by khungtaskd/31: [ 595.980552][ T31] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 595.995402][ T31] 6 locks held by kworker/u8:4/64: [ 596.000817][ T31] 2 locks held by getty/5388: [ 596.006386][ T31] #0: ffff8880362e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 596.017136][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 596.027857][ T31] 1 lock held by udevd/5652: [ 596.032644][ T31] #0: ffff888026ef6350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 596.043038][ T31] 3 locks held by kworker/u8:13/9199: [ 596.055259][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 596.073920][ T31] #1: ffffc9000ed57c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 596.085506][ T31] #2: ffffffff8fdc8600 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 596.094944][ T31] 2 locks held by syz.3.4120/18881: [ 596.102152][ T31] 2 locks held by syz.0.4138/18914: [ 596.107916][ T31] #0: ffffffff8fdc8600 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 596.117597][ T31] #1: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 596.140588][ T31] 1 lock held by syz.6.4140/18918: [ 596.147754][ T31] #0: ffffffff8fdc8600 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 596.159466][ T31] [ 596.166810][ T31] ============================================= [ 596.166810][ T31] [ 596.178636][ T31] NMI backtrace for cpu 1 [ 596.178652][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 596.178672][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.178682][ T31] Call Trace: [ 596.178689][ T31] [ 596.178696][ T31] dump_stack_lvl+0xe8/0x150 [ 596.178738][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 596.178829][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 596.178860][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 596.178889][ T31] sys_info+0x135/0x170 [ 596.178937][ T31] watchdog+0xfd3/0x1030 [ 596.178980][ T31] ? watchdog+0x1c9/0x1030 [ 596.179009][ T31] kthread+0x389/0x470 [ 596.179032][ T31] ? __pfx_watchdog+0x10/0x10 [ 596.179051][ T31] ? __pfx_kthread+0x10/0x10 [ 596.179072][ T31] ret_from_fork+0x514/0xb70 [ 596.179101][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 596.179118][ T31] ? __switch_to+0xc79/0x1410 [ 596.179144][ T31] ? __pfx_kthread+0x10/0x10 [ 596.179166][ T31] ret_from_fork_asm+0x1a/0x30 [ 596.179199][ T31] [ 596.179205][ T31] Sending NMI from CPU 1 to CPUs 0: [ 596.292533][ C0] NMI backtrace for cpu 0 [ 596.292551][ C0] CPU: 0 UID: 0 PID: 18881 Comm: syz.3.4120 Not tainted syzkaller #0 PREEMPT(full) [ 596.292568][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.292577][ C0] RIP: 0010:should_fail_ex+0x4/0x560 [ 596.292621][ C0] Code: 8f 4c 89 f2 31 c9 e8 2b f3 c4 ff eb cf 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 18 89 14 24 49 89 f6 48 89 [ 596.292633][ C0] RSP: 0018:ffffc90004d5e4e8 EFLAGS: 00000293 [ 596.292646][ C0] RAX: 0000000000000001 RBX: ffffc90004d5e5a0 RCX: 0000000000000000 [ 596.292656][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8eaa3720 [ 596.292665][ C0] RBP: 0000000000000008 R08: ffffffff8223aa4c R09: ffffffff8ea9aaa0 [ 596.292675][ C0] R10: ffffc90004d5e5a0 R11: fffff520009abcb9 R12: 1ffff920009abcaf [ 596.292685][ C0] R13: ffff88802a429f2c R14: 0000000000140cca R15: 1ffff920009abcb4 [ 596.292695][ C0] FS: 00007f9ef46da6c0(0000) GS:ffff88812529a000(0000) knlGS:0000000000000000 [ 596.292708][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.292717][ C0] CR2: 00007ffa43fea2f8 CR3: 00000000299c2000 CR4: 00000000003526f0 [ 596.292730][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 596.292739][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 596.292748][ C0] Call Trace: [ 596.292754][ C0] [ 596.292786][ C0] prepare_alloc_pages+0x22a/0x650 [ 596.292809][ C0] __alloc_frozen_pages_noprof+0x12f/0x380 [ 596.292828][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 596.292847][ C0] ? __pfx_policy_nodemask+0x10/0x10 [ 596.292875][ C0] alloc_pages_mpol+0x235/0x490 [ 596.292894][ C0] folio_alloc_mpol_noprof+0x39/0x160 [ 596.292912][ C0] shmem_alloc_and_add_folio+0x442/0xf80 [ 596.292932][ C0] ? filemap_get_entry+0xcd/0x3f0 [ 596.292950][ C0] ? __pfx_filemap_get_entry+0x10/0x10 [ 596.292965][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 596.292980][ C0] ? shmem_allowable_huge_orders+0x309/0x690 [ 596.293000][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 596.293021][ C0] shmem_get_folio_gfp+0x5a9/0x1670 [ 596.293048][ C0] shmem_write_begin+0x16c/0x330 [ 596.293064][ C0] generic_perform_write+0x2e2/0x8f0 [ 596.293086][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 596.293102][ C0] ? down_write+0x16d/0x200 [ 596.293124][ C0] ? file_update_time_flags+0x3b3/0x4a0 [ 596.293142][ C0] shmem_file_write_iter+0xf8/0x120 [ 596.293157][ C0] __kernel_write_iter+0x41e/0x880 [ 596.293177][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 596.293196][ C0] ? __asan_memset+0x22/0x50 [ 596.293210][ C0] ? iov_iter_bvec+0xb8/0x180 [ 596.293301][ C0] dump_user_range+0xc19/0x12c0 [ 596.293331][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 596.293349][ C0] ? elf_coredump_extra_notes_write+0x441/0x4d0 [ 596.293367][ C0] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 596.293388][ C0] elf_core_dump+0x34c2/0x3ad0 [ 596.293414][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 596.293432][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 596.293446][ C0] ? __kvmalloc_node_noprof+0x528/0x8a0 [ 596.293462][ C0] ? coredump_write+0x387/0x1910 [ 596.293477][ C0] ? vfs_coredump+0x3807/0x4530 [ 596.293493][ C0] ? get_signal+0x1107/0x1330 [ 596.293510][ C0] ? arch_do_signal_or_restart+0xbc/0x840 [ 596.293529][ C0] ? irqentry_exit+0x2aa/0x8b0 [ 596.293545][ C0] ? asm_exc_page_fault+0x26/0x30 [ 596.293561][ C0] ? mas_ascend+0x304/0x890 [ 596.293594][ C0] ? vfs_coredump+0x3807/0x4530 [ 596.293610][ C0] ? 0xffffffffff600000 [ 596.293628][ C0] coredump_write+0x1216/0x1910 [ 596.293653][ C0] ? __pfx_coredump_write+0x10/0x10 [ 596.293678][ C0] ? unshare_files+0xa8/0x140 [ 596.293695][ C0] vfs_coredump+0x3807/0x4530 [ 596.293721][ C0] ? __pfx_vfs_coredump+0x10/0x10 [ 596.293737][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 596.293753][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 596.293776][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 596.293793][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 596.293808][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 596.293826][ C0] ? unwind_next_frame+0xa6/0x2550 [ 596.293841][ C0] ? lock_acquire+0x106/0x350 [ 596.293857][ C0] ? unwind_next_frame+0xa6/0x2550 [ 596.293874][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 596.293897][ C0] ? lock_acquire+0x106/0x350 [ 596.293914][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 596.293931][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 596.293947][ C0] ? kernel_text_address+0xa5/0xe0 [ 596.293966][ C0] ? __kernel_text_address+0xd/0x30 [ 596.293984][ C0] ? unwind_get_return_address+0x4d/0x90 [ 596.293999][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 596.294020][ C0] ? arch_stack_walk+0xfb/0x150 [ 596.294041][ C0] ? trace_call_bpf+0xc2/0xb70 [ 596.294055][ C0] ? lock_acquire+0x106/0x350 [ 596.294073][ C0] ? trace_call_bpf+0xc2/0xb70 [ 596.294089][ C0] ? trace_call_bpf+0x7d0/0xb70 [ 596.294103][ C0] ? get_signal+0xa4a/0x1330 [ 596.294114][ C0] ? arch_do_signal_or_restart+0xbc/0x840 [ 596.294132][ C0] ? irqentry_exit+0x2aa/0x8b0 [ 596.294148][ C0] ? trace_call_bpf+0xc2/0xb70 [ 596.294166][ C0] ? __pfx_trace_call_bpf+0x10/0x10 [ 596.294199][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 596.294216][ C0] get_signal+0x1107/0x1330 [ 596.294237][ C0] arch_do_signal_or_restart+0xbc/0x840 [ 596.294257][ C0] ? perf_trace_preemptirq_template+0x26f/0x350 [ 596.294279][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 596.294308][ C0] irqentry_exit+0x2aa/0x8b0 [ 596.294324][ C0] ? trace_irq_disable+0x3b/0x140 [ 596.294344][ C0] asm_exc_page_fault+0x26/0x30 [ 596.294358][ C0] RIP: 0033:0x0 [ 596.294368][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 596.294375][ C0] RSP: 002b:00002000000001d8 EFLAGS: 00010217 [ 596.294387][ C0] RAX: 0000000000000000 RBX: 00007f9ef3a16090 RCX: 00007f9ef379ce59 [ 596.294396][ C0] RDX: 0000200000000300 RSI: 00002000000001d0 RDI: 0000000020000000 [ 596.294406][ C0] RBP: 00007f9ef3832d6f R08: 00002000000003c0 R09: 00002000000003c0 [ 596.294415][ C0] R10: 0000200000000380 R11: 0000000000000206 R12: 0000000000000000 [ 596.294424][ C0] R13: 00007f9ef3a16128 R14: 00007f9ef3a16090 R15: 00007fff21cfebf8 [ 596.294441][ C0] [ 596.912698][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 596.919601][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 596.928720][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 596.938784][ T31] Call Trace: [ 596.942099][ T31] [ 596.945037][ T31] vpanic+0x56c/0xa60 [ 596.949041][ T31] ? __pfx___schedule+0x10/0x10 [ 596.953912][ T31] ? __pfx_vpanic+0x10/0x10 [ 596.958425][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 596.964588][ T31] panic+0xc5/0xd0 [ 596.968305][ T31] ? __pfx_panic+0x10/0x10 [ 596.972715][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 596.978087][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 596.984238][ T31] watchdog+0x102c/0x1030 [ 596.988562][ T31] ? watchdog+0x1c9/0x1030 [ 596.992974][ T31] kthread+0x389/0x470 [ 596.997040][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.001710][ T31] ? __pfx_kthread+0x10/0x10 [ 597.006293][ T31] ret_from_fork+0x514/0xb70 [ 597.010908][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.016006][ T31] ? __switch_to+0xc79/0x1410 [ 597.020677][ T31] ? __pfx_kthread+0x10/0x10 [ 597.025266][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.030027][ T31] [ 597.033554][ T31] Kernel Offset: disabled [ 597.037885][ T31] Rebooting in 86400 seconds..